@palbase/backend 2.0.2 → 4.0.0

package/dist/test/index.d.ts

@@ -1,6 +1,5 @@
-import { D as DBClient, l as PBRequest, d as PalbaseModuleClients, L as Logger, C as CacheClient, Q as QueueClient, U as User } from '../endpoint-Djk5L6G2.js';
+import { D as DBClient, P as PBRequest, a as PalbaseModuleClients, L as Logger, C as CacheClient, Q as QueueClient, U as User } from '../endpoint-2d_DpASt.js';
 import 'zod';
-import '../schema-BqfEhIC0.js';
 
 /** Mock DB client with tracking and seed data support. */
 interface MockDBClient extends DBClient {

package/dist/test/index.js

@@ -1,6 +1,6 @@
 import {
   __setRuntime
-} from "../chunk-L36JLUPO.js";
+} from "../chunk-WUQO76NW.js";
 
 // src/test/mock-db.ts
 function createMockDB() {
@@ -52,11 +52,18 @@ function createMockDB() {
       );
     }
   };
-  return {
+  const client = {
     ...ops,
     transaction(fn) {
       return fn(ops);
     },
+    // In tests there is no real DB role; `asService()` returns the same
+    // in-memory client so RLS-bypass code paths still hit the same store and
+    // tracking maps. The omitted `asService` matches the contract (no
+    // double-bypass), so callers can't recurse.
+    asService() {
+      return client;
+    },
     inserted(table) {
       return tracked.inserted.get(table) ?? [];
     },
@@ -70,6 +77,7 @@ function createMockDB() {
       store.set(table, [...data]);
     }
   };
+  return client;
 }
 
 // src/test/context.ts

package/dist/test/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/test/mock-db.ts","../../src/test/context.ts"],"sourcesContent":["import type { DBClient, TxClient } from \"../endpoint.js\";\n\n/** Tracked records for assertions. */\ninterface TrackedRecords {\n  inserted: Map<string, Record<string, unknown>[]>;\n  updated: Map<string, Record<string, unknown>[]>;\n  deleted: Map<string, string[]>;\n}\n\n/** Mock DB client with tracking and seed data support. */\nexport interface MockDBClient extends DBClient {\n  /** Get records inserted into a table. */\n  inserted(table: string): Record<string, unknown>[];\n  /** Get records updated in a table. */\n  updated(table: string): Record<string, unknown>[];\n  /** Get IDs deleted from a table. */\n  deleted(table: string): string[];\n  /** Pre-seed data into a table for findById/findMany. */\n  seed(table: string, data: Record<string, unknown>[]): void;\n}\n\n/** Create a mock DB client with in-memory tracking. */\nexport function createMockDB(): MockDBClient {\n  const store = new Map<string, Record<string, unknown>[]>();\n  const tracked: TrackedRecords = {\n    inserted: new Map(),\n    updated: new Map(),\n    deleted: new Map(),\n  };\n\n  // Build the op surface first (TxClient = the five DB ops + query). The\n  // transaction below reuses this same `ops` object as the tx-scoped client,\n  // so writes inside a transaction land in the same in-memory store and\n  // tracking maps — exactly the semantics a user endpoint test expects.\n  const ops: TxClient = {\n    async query(_sql: string, _params?: unknown[]) {\n      return [];\n    },\n\n    async insert(table: string, data: Record<string, unknown>) {\n      const record = { id: crypto.randomUUID(), ...data };\n      if (!store.has(table)) store.set(table, []);\n      store.get(table)!.push(record);\n      if (!tracked.inserted.has(table)) tracked.inserted.set(table, []);\n      tracked.inserted.get(table)!.push(record);\n      return record;\n    },\n\n    async update(table: string, id: string, data: Record<string, unknown>) {\n      const rows = store.get(table) ?? [];\n      const idx = rows.findIndex((r) => r[\"id\"] === id);\n      const updated = idx >= 0\n        ? { ...rows[idx], ...data }\n        : { id, ...data };\n      if (idx >= 0) {\n        rows[idx] = updated;\n      }\n      if (!tracked.updated.has(table)) tracked.updated.set(table, []);\n      tracked.updated.get(table)!.push(updated);\n      return updated;\n    },\n\n    async delete(table: string, id: string) {\n      const rows = store.get(table) ?? [];\n      const idx = rows.findIndex((r) => r[\"id\"] === id);\n      if (idx >= 0) rows.splice(idx, 1);\n      if (!tracked.deleted.has(table)) tracked.deleted.set(table, []);\n      tracked.deleted.get(table)!.push(id);\n    },\n\n    async findById(table: string, id: string) {\n      const rows = store.get(table) ?? [];\n      return rows.find((r) => r[\"id\"] === id) ?? null;\n    },\n\n    async findMany(table: string, query?: Record<string, unknown>) {\n      const rows = store.get(table) ?? [];\n      if (!query) return rows;\n      return rows.filter((row) =>\n        Object.entries(query).every(([key, val]) => row[key] === val),\n      );\n    },\n  };\n\n  return {\n    ...ops,\n\n    transaction<T>(fn: (tx: TxClient) => Promise<T>): Promise<T> {\n      return fn(ops);\n    },\n\n    inserted(table: string) {\n      return tracked.inserted.get(table) ?? [];\n    },\n\n    updated(table: string) {\n      return tracked.updated.get(table) ?? [];\n    },\n\n    deleted(table: string) {\n      return tracked.deleted.get(table) ?? [];\n    },\n\n    seed(table: string, data: Record<string, unknown>[]) {\n      store.set(table, [...data]);\n    },\n  };\n}\n","import type {\n  CacheClient,\n  ClientInfo,\n  Logger,\n  PBRequest,\n  PalbaseModuleClients,\n  QueueClient,\n} from \"../endpoint.js\";\nimport type {\n  PalbaseAuthClient,\n  PalbaseStorageClient,\n  PalbaseRealtimeClient,\n  PalbaseFunctionsClient,\n  PalbaseFlagsClient,\n  PalbaseNotificationsClient,\n  PalbaseAnalyticsClient,\n  PalbaseLinksClient,\n  PalbaseCmsClient,\n} from \"../clients.js\";\nimport type { User } from \"../types.js\";\nimport { __setRuntime } from \"../runtime.js\";\nimport { createMockDB, type MockDBClient } from \"./mock-db.js\";\n\n/** Options for creating a test context. */\nexport interface TestContextOptions<TInput = unknown> {\n  user?: User | null;\n  input?: TInput;\n  params?: Record<string, string>;\n  query?: Record<string, string>;\n  headers?: Record<string, string>;\n  env?: Record<string, string>;\n  db?: { seed?: Record<string, Record<string, unknown>[]> };\n}\n\n/** Log entry captured by the mock logger. */\nexport interface LogEntry {\n  level: \"info\" | \"warn\" | \"error\" | \"debug\";\n  message: string;\n  args: unknown[];\n}\n\n/** Test context for exercising endpoint handlers.\n *\n * Handlers now receive a {@link PBRequest} (no services attached) and reach\n * services via the PascalCase singletons (`Database`, `Log`, …). So\n * `createTestContext` does two things:\n *   1. returns a `PBRequest` (the object you pass to `handler(...)`), and\n *   2. installs mock services into the runtime via `__setRuntime`, so the\n *      singletons resolve to the same mocks while the handler runs.\n *\n * For assertions and for building sibling (worker/job/hook/webhook) contexts,\n * the mock service handles are also attached here (`db`, `log`, `cache`,\n * `queue`, `env`, plus the module clients and captured `logs`). The user\n * defaults to nullable in tests (`PBRequest<TInput, false>`) so test code can\n * pass any auth shape without a cast. */\nexport interface TestContext<TInput = unknown>\n  extends PBRequest<TInput, false>,\n    PalbaseModuleClients {\n  db: MockDBClient;\n  env: Record<string, string>;\n  log: Logger;\n  cache: CacheClient;\n  queue: QueueClient;\n  /** Captured log entries. */\n  logs: LogEntry[];\n}\n\n/** Create a mock logger that captures entries. */\nfunction createMockLogger(logs: LogEntry[]): Logger {\n  return {\n    info(message: string, ...args: unknown[]) {\n      logs.push({ level: \"info\", message, args });\n    },\n    warn(message: string, ...args: unknown[]) {\n      logs.push({ level: \"warn\", message, args });\n    },\n    error(message: string, ...args: unknown[]) {\n      logs.push({ level: \"error\", message, args });\n    },\n    debug(message: string, ...args: unknown[]) {\n      logs.push({ level: \"debug\", message, args });\n    },\n  };\n}\n\n/** Create a mock in-memory cache.\n *\n * Mirrors the runtime's JSON-typed semantics (values are arbitrary JSON, not\n * just strings). getOrSet is single-process here, so it does not need the\n * distributed lock the real runtime uses — it is just get-miss → fn → set.\n * The cross-replica stampede protection is covered by the worker.js tests.\n */\nfunction createMockCache(): CacheClient {\n  const store = new Map<string, unknown>();\n\n  const get = async <T = unknown>(key: string): Promise<T | null> => {\n    return store.has(key) ? (store.get(key) as T) : null;\n  };\n  const set = async (key: string, value: unknown, _ttl?: number): Promise<void> => {\n    store.set(key, value);\n  };\n\n  return {\n    get,\n    set,\n    async del(key: string) {\n      store.delete(key);\n    },\n    async incr(key: string) {\n      const raw = store.get(key);\n      const current = typeof raw === \"number\" ? raw : parseInt(String(raw ?? \"0\"), 10);\n      const next = current + 1;\n      store.set(key, next);\n      return next;\n    },\n    async getOrSet<T>(key: string, ttl: number, fn: () => Promise<T> | T): Promise<T> {\n      const hit = await get<T>(key);\n      if (hit !== null) {\n        return hit;\n      }\n      const value = await fn();\n      await set(key, value, ttl);\n      return value;\n    },\n  };\n}\n\n/** Create mock Palbase module clients (Documents, Storage, …).\n *\n * Every slot throws with a descriptive error so tests that access a module\n * client surface without configuring it fail loudly rather than silently\n * returning undefined. Override individual clients on the returned context for\n * tests that need them.\n */\nfunction createMockModuleClients(): PalbaseModuleClients {\n  const notImpl = (label: string): never => {\n    throw new Error(\n      `${label} not configured in test mock — override the matching client on the returned context`,\n    );\n  };\n\n  const docs: PalbaseModuleClients[\"docs\"] = {\n    collection: () => notImpl(\"docs.collection\"),\n    doc: () => notImpl(\"docs.doc\"),\n  };\n\n  const auth: PalbaseAuthClient = {\n    verifyUserToken: () => notImpl(\"auth.verifyUserToken\"),\n    getSession: () => notImpl(\"auth.getSession\"),\n    mfa: {\n      enroll: () => notImpl(\"auth.mfa.enroll\"),\n      verifyEnrollment: () => notImpl(\"auth.mfa.verifyEnrollment\"),\n      challenge: () => notImpl(\"auth.mfa.challenge\"),\n      recovery: () => notImpl(\"auth.mfa.recovery\"),\n      listFactors: () => notImpl(\"auth.mfa.listFactors\"),\n      removeFactor: () => notImpl(\"auth.mfa.removeFactor\"),\n      regenerateRecoveryCodes: () => notImpl(\"auth.mfa.regenerateRecoveryCodes\"),\n      emailEnroll: () => notImpl(\"auth.mfa.emailEnroll\"),\n      emailChallenge: () => notImpl(\"auth.mfa.emailChallenge\"),\n      emailVerify: () => notImpl(\"auth.mfa.emailVerify\"),\n    },\n    device: {\n      generateChallenge: () => notImpl(\"auth.device.generateChallenge\"),\n      attestAndroid: () => notImpl(\"auth.device.attestAndroid\"),\n      attestiOS: () => notImpl(\"auth.device.attestiOS\"),\n      bind: () => notImpl(\"auth.device.bind\"),\n      list: () => notImpl(\"auth.device.list\"),\n      delete: () => notImpl(\"auth.device.delete\"),\n      verifyRequestSignature: () => notImpl(\"auth.device.verifyRequestSignature\"),\n      getToken: () => notImpl(\"auth.device.getToken\"),\n      get isActive(): never {\n        return notImpl(\"auth.device.isActive\");\n      },\n      setCachedToken: () => notImpl(\"auth.device.setCachedToken\"),\n      dispose: () => notImpl(\"auth.device.dispose\"),\n    },\n  };\n\n  const storage: PalbaseStorageClient = {\n    bucket: () => notImpl(\"storage.bucket\"),\n  };\n\n  const realtime: PalbaseRealtimeClient = {\n    channel: () => notImpl(\"realtime.channel\"),\n    removeChannel: () => notImpl(\"realtime.removeChannel\"),\n    removeAllChannels: () => notImpl(\"realtime.removeAllChannels\"),\n  };\n\n  const functions: PalbaseFunctionsClient = {\n    invoke: () => notImpl(\"functions.invoke\"),\n  };\n\n  const flags: PalbaseFlagsClient = {\n    isEnabled: () => notImpl(\"flags.isEnabled\"),\n    getVariant: () => notImpl(\"flags.getVariant\"),\n    getAll: () => notImpl(\"flags.getAll\"),\n  };\n\n  const notifications: PalbaseNotificationsClient = {\n    push: { send: () => notImpl(\"notifications.push.send\") },\n    email: { send: () => notImpl(\"notifications.email.send\") },\n    sms: { send: () => notImpl(\"notifications.sms.send\") },\n    inbox: {\n      send: () => notImpl(\"notifications.inbox.send\"),\n      list: () => notImpl(\"notifications.inbox.list\"),\n      unreadCount: () => notImpl(\"notifications.inbox.unreadCount\"),\n      markRead: () => notImpl(\"notifications.inbox.markRead\"),\n      markAllRead: () => notImpl(\"notifications.inbox.markAllRead\"),\n      archive: () => notImpl(\"notifications.inbox.archive\"),\n    },\n    preferences: {\n      get: () => notImpl(\"notifications.preferences.get\"),\n      update: () => notImpl(\"notifications.preferences.update\"),\n    },\n    templates: {\n      email: {\n        list: () => notImpl(\"notifications.templates.email.list\"),\n        get: () => notImpl(\"notifications.templates.email.get\"),\n        create: () => notImpl(\"notifications.templates.email.create\"),\n        update: () => notImpl(\"notifications.templates.email.update\"),\n        delete: () => notImpl(\"notifications.templates.email.delete\"),\n      },\n      sms: {\n        list: () => notImpl(\"notifications.templates.sms.list\"),\n        get: () => notImpl(\"notifications.templates.sms.get\"),\n        create: () => notImpl(\"notifications.templates.sms.create\"),\n        update: () => notImpl(\"notifications.templates.sms.update\"),\n        delete: () => notImpl(\"notifications.templates.sms.delete\"),\n      },\n    },\n    registerDevice: () => notImpl(\"notifications.registerDevice\"),\n    unregisterDevice: () => notImpl(\"notifications.unregisterDevice\"),\n  };\n\n  const analytics: PalbaseAnalyticsClient = {\n    capture: () => notImpl(\"analytics.capture\"),\n    identify: () => notImpl(\"analytics.identify\"),\n    screen: () => notImpl(\"analytics.screen\"),\n    query: {\n      count: () => notImpl(\"analytics.query.count\"),\n      events: () => notImpl(\"analytics.query.events\"),\n      properties: () => notImpl(\"analytics.query.properties\"),\n      users: () => notImpl(\"analytics.query.users\"),\n      funnel: () => notImpl(\"analytics.query.funnel\"),\n      retention: () => notImpl(\"analytics.query.retention\"),\n      cohort: () => notImpl(\"analytics.query.cohort\"),\n    },\n    management: {\n      overview: () => notImpl(\"analytics.management.overview\"),\n      eventNames: () => notImpl(\"analytics.management.eventNames\"),\n      userDetail: () => notImpl(\"analytics.management.userDetail\"),\n      deleteUser: () => notImpl(\"analytics.management.deleteUser\"),\n    },\n  };\n\n  const links: PalbaseLinksClient = {\n    create: () => notImpl(\"links.create\"),\n    list: () => notImpl(\"links.list\"),\n    get: () => notImpl(\"links.get\"),\n    update: () => notImpl(\"links.update\"),\n    delete: () => notImpl(\"links.delete\"),\n    analytics: () => notImpl(\"links.analytics\"),\n    qrCode: () => notImpl(\"links.qrCode\"),\n    match: () => notImpl(\"links.match\"),\n  };\n\n  const cms: PalbaseCmsClient = {\n    find: () => notImpl(\"cms.find\"),\n    findOne: () => notImpl(\"cms.findOne\"),\n  };\n\n  return {\n    auth,\n    storage,\n    docs,\n    realtime,\n    functions,\n    flags,\n    notifications,\n    analytics,\n    links,\n    cms,\n  };\n}\n\n/** Null-by-default calling-client metadata for tests. */\nconst NULL_CLIENT_INFO: ClientInfo = {\n  sdkVersion: null,\n  appVersion: null,\n  platform: null,\n  osVersion: null,\n};\n\n/** Create a fully mocked endpoint test context.\n *\n * Returns a `PBRequest` (pass it to `handler(...)`) with the mock service\n * handles attached for assertions, and installs those mocks into the runtime\n * via `__setRuntime` so the `Database`/`Log`/… singletons resolve to them\n * while the handler runs.\n */\nexport function createTestContext<TInput = unknown>(\n  options: TestContextOptions<TInput> = {},\n): TestContext<TInput> {\n  const logs: LogEntry[] = [];\n  const db = createMockDB();\n\n  // Seed data if provided\n  if (options.db?.seed) {\n    for (const [table, data] of Object.entries(options.db.seed)) {\n      db.seed(table, data);\n    }\n  }\n\n  const mockQueue: QueueClient = {\n    push: async (_worker: string, _payload: unknown) => ({ jobId: \"\" }),\n  };\n  const log = createMockLogger(logs);\n  const cache = createMockCache();\n  const moduleClients = createMockModuleClients();\n\n  // Install the mocks so the PascalCase singletons (Database, Log, …) resolve\n  // to them while the handler under test runs.\n  __setRuntime({\n    Database: db,\n    Documents: moduleClients.docs,\n    Storage: moduleClients.storage,\n    Cache: cache,\n    Queue: mockQueue,\n    Log: log,\n    Notifications: moduleClients.notifications,\n    Flags: moduleClients.flags,\n  });\n\n  const ctx: TestContext<TInput> = {\n    input: (options.input ?? {}) as TInput,\n    params: options.params ?? {},\n    query: options.query ?? {},\n    headers: options.headers ?? {},\n    user: options.user ?? null,\n    client: NULL_CLIENT_INFO,\n    method: \"POST\",\n    file: null,\n    db,\n    env: options.env ?? {},\n    log,\n    cache,\n    queue: mockQueue,\n    ...moduleClients,\n    // Empty errors map in tests by default. Tests that exercise an endpoint's\n    // declared errors construct their own throwers; this stub satisfies the\n    // PBRequest shape without forcing every test to declare `errors:`.\n    errors: {},\n    requestId: \"req_test_000000000000\",\n    traceId: \"0\".repeat(32),\n    spanId: \"0\".repeat(16),\n    logs,\n  };\n\n  return ctx;\n}\n"],"mappings":";;;;;AAsBO,SAAS,eAA6B;AAC3C,QAAM,QAAQ,oBAAI,IAAuC;AACzD,QAAM,UAA0B;AAAA,IAC9B,UAAU,oBAAI,IAAI;AAAA,IAClB,SAAS,oBAAI,IAAI;AAAA,IACjB,SAAS,oBAAI,IAAI;AAAA,EACnB;AAMA,QAAM,MAAgB;AAAA,IACpB,MAAM,MAAM,MAAc,SAAqB;AAC7C,aAAO,CAAC;AAAA,IACV;AAAA,IAEA,MAAM,OAAO,OAAe,MAA+B;AACzD,YAAM,SAAS,EAAE,IAAI,OAAO,WAAW,GAAG,GAAG,KAAK;AAClD,UAAI,CAAC,MAAM,IAAI,KAAK,EAAG,OAAM,IAAI,OAAO,CAAC,CAAC;AAC1C,YAAM,IAAI,KAAK,EAAG,KAAK,MAAM;AAC7B,UAAI,CAAC,QAAQ,SAAS,IAAI,KAAK,EAAG,SAAQ,SAAS,IAAI,OAAO,CAAC,CAAC;AAChE,cAAQ,SAAS,IAAI,KAAK,EAAG,KAAK,MAAM;AACxC,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,IAAY,MAA+B;AACrE,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,YAAM,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,IAAI,MAAM,EAAE;AAChD,YAAM,UAAU,OAAO,IACnB,EAAE,GAAG,KAAK,GAAG,GAAG,GAAG,KAAK,IACxB,EAAE,IAAI,GAAG,KAAK;AAClB,UAAI,OAAO,GAAG;AACZ,aAAK,GAAG,IAAI;AAAA,MACd;AACA,UAAI,CAAC,QAAQ,QAAQ,IAAI,KAAK,EAAG,SAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC9D,cAAQ,QAAQ,IAAI,KAAK,EAAG,KAAK,OAAO;AACxC,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,IAAY;AACtC,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,YAAM,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,IAAI,MAAM,EAAE;AAChD,UAAI,OAAO,EAAG,MAAK,OAAO,KAAK,CAAC;AAChC,UAAI,CAAC,QAAQ,QAAQ,IAAI,KAAK,EAAG,SAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC9D,cAAQ,QAAQ,IAAI,KAAK,EAAG,KAAK,EAAE;AAAA,IACrC;AAAA,IAEA,MAAM,SAAS,OAAe,IAAY;AACxC,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,aAAO,KAAK,KAAK,CAAC,MAAM,EAAE,IAAI,MAAM,EAAE,KAAK;AAAA,IAC7C;AAAA,IAEA,MAAM,SAAS,OAAe,OAAiC;AAC7D,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,UAAI,CAAC,MAAO,QAAO;AACnB,aAAO,KAAK;AAAA,QAAO,CAAC,QAClB,OAAO,QAAQ,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,GAAG,MAAM,IAAI,GAAG,MAAM,GAAG;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IAEH,YAAe,IAA8C;AAC3D,aAAO,GAAG,GAAG;AAAA,IACf;AAAA,IAEA,SAAS,OAAe;AACtB,aAAO,QAAQ,SAAS,IAAI,KAAK,KAAK,CAAC;AAAA,IACzC;AAAA,IAEA,QAAQ,OAAe;AACrB,aAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAAA,IACxC;AAAA,IAEA,QAAQ,OAAe;AACrB,aAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAAA,IACxC;AAAA,IAEA,KAAK,OAAe,MAAiC;AACnD,YAAM,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC;AAAA,IAC5B;AAAA,EACF;AACF;;;ACvCA,SAAS,iBAAiB,MAA0B;AAClD,SAAO;AAAA,IACL,KAAK,YAAoB,MAAiB;AACxC,WAAK,KAAK,EAAE,OAAO,QAAQ,SAAS,KAAK,CAAC;AAAA,IAC5C;AAAA,IACA,KAAK,YAAoB,MAAiB;AACxC,WAAK,KAAK,EAAE,OAAO,QAAQ,SAAS,KAAK,CAAC;AAAA,IAC5C;AAAA,IACA,MAAM,YAAoB,MAAiB;AACzC,WAAK,KAAK,EAAE,OAAO,SAAS,SAAS,KAAK,CAAC;AAAA,IAC7C;AAAA,IACA,MAAM,YAAoB,MAAiB;AACzC,WAAK,KAAK,EAAE,OAAO,SAAS,SAAS,KAAK,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;AASA,SAAS,kBAA+B;AACtC,QAAM,QAAQ,oBAAI,IAAqB;AAEvC,QAAM,MAAM,OAAoB,QAAmC;AACjE,WAAO,MAAM,IAAI,GAAG,IAAK,MAAM,IAAI,GAAG,IAAU;AAAA,EAClD;AACA,QAAM,MAAM,OAAO,KAAa,OAAgB,SAAiC;AAC/E,UAAM,IAAI,KAAK,KAAK;AAAA,EACtB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,IAAI,KAAa;AACrB,YAAM,OAAO,GAAG;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,KAAa;AACtB,YAAM,MAAM,MAAM,IAAI,GAAG;AACzB,YAAM,UAAU,OAAO,QAAQ,WAAW,MAAM,SAAS,OAAO,OAAO,GAAG,GAAG,EAAE;AAC/E,YAAM,OAAO,UAAU;AACvB,YAAM,IAAI,KAAK,IAAI;AACnB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAY,KAAa,KAAa,IAAsC;AAChF,YAAM,MAAM,MAAM,IAAO,GAAG;AAC5B,UAAI,QAAQ,MAAM;AAChB,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,MAAM,GAAG;AACvB,YAAM,IAAI,KAAK,OAAO,GAAG;AACzB,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASA,SAAS,0BAAgD;AACvD,QAAM,UAAU,CAAC,UAAyB;AACxC,UAAM,IAAI;AAAA,MACR,GAAG,KAAK;AAAA,IACV;AAAA,EACF;AAEA,QAAM,OAAqC;AAAA,IACzC,YAAY,MAAM,QAAQ,iBAAiB;AAAA,IAC3C,KAAK,MAAM,QAAQ,UAAU;AAAA,EAC/B;AAEA,QAAM,OAA0B;AAAA,IAC9B,iBAAiB,MAAM,QAAQ,sBAAsB;AAAA,IACrD,YAAY,MAAM,QAAQ,iBAAiB;AAAA,IAC3C,KAAK;AAAA,MACH,QAAQ,MAAM,QAAQ,iBAAiB;AAAA,MACvC,kBAAkB,MAAM,QAAQ,2BAA2B;AAAA,MAC3D,WAAW,MAAM,QAAQ,oBAAoB;AAAA,MAC7C,UAAU,MAAM,QAAQ,mBAAmB;AAAA,MAC3C,aAAa,MAAM,QAAQ,sBAAsB;AAAA,MACjD,cAAc,MAAM,QAAQ,uBAAuB;AAAA,MACnD,yBAAyB,MAAM,QAAQ,kCAAkC;AAAA,MACzE,aAAa,MAAM,QAAQ,sBAAsB;AAAA,MACjD,gBAAgB,MAAM,QAAQ,yBAAyB;AAAA,MACvD,aAAa,MAAM,QAAQ,sBAAsB;AAAA,IACnD;AAAA,IACA,QAAQ;AAAA,MACN,mBAAmB,MAAM,QAAQ,+BAA+B;AAAA,MAChE,eAAe,MAAM,QAAQ,2BAA2B;AAAA,MACxD,WAAW,MAAM,QAAQ,uBAAuB;AAAA,MAChD,MAAM,MAAM,QAAQ,kBAAkB;AAAA,MACtC,MAAM,MAAM,QAAQ,kBAAkB;AAAA,MACtC,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,MAC1C,wBAAwB,MAAM,QAAQ,oCAAoC;AAAA,MAC1E,UAAU,MAAM,QAAQ,sBAAsB;AAAA,MAC9C,IAAI,WAAkB;AACpB,eAAO,QAAQ,sBAAsB;AAAA,MACvC;AAAA,MACA,gBAAgB,MAAM,QAAQ,4BAA4B;AAAA,MAC1D,SAAS,MAAM,QAAQ,qBAAqB;AAAA,IAC9C;AAAA,EACF;AAEA,QAAM,UAAgC;AAAA,IACpC,QAAQ,MAAM,QAAQ,gBAAgB;AAAA,EACxC;AAEA,QAAM,WAAkC;AAAA,IACtC,SAAS,MAAM,QAAQ,kBAAkB;AAAA,IACzC,eAAe,MAAM,QAAQ,wBAAwB;AAAA,IACrD,mBAAmB,MAAM,QAAQ,4BAA4B;AAAA,EAC/D;AAEA,QAAM,YAAoC;AAAA,IACxC,QAAQ,MAAM,QAAQ,kBAAkB;AAAA,EAC1C;AAEA,QAAM,QAA4B;AAAA,IAChC,WAAW,MAAM,QAAQ,iBAAiB;AAAA,IAC1C,YAAY,MAAM,QAAQ,kBAAkB;AAAA,IAC5C,QAAQ,MAAM,QAAQ,cAAc;AAAA,EACtC;AAEA,QAAM,gBAA4C;AAAA,IAChD,MAAM,EAAE,MAAM,MAAM,QAAQ,yBAAyB,EAAE;AAAA,IACvD,OAAO,EAAE,MAAM,MAAM,QAAQ,0BAA0B,EAAE;AAAA,IACzD,KAAK,EAAE,MAAM,MAAM,QAAQ,wBAAwB,EAAE;AAAA,IACrD,OAAO;AAAA,MACL,MAAM,MAAM,QAAQ,0BAA0B;AAAA,MAC9C,MAAM,MAAM,QAAQ,0BAA0B;AAAA,MAC9C,aAAa,MAAM,QAAQ,iCAAiC;AAAA,MAC5D,UAAU,MAAM,QAAQ,8BAA8B;AAAA,MACtD,aAAa,MAAM,QAAQ,iCAAiC;AAAA,MAC5D,SAAS,MAAM,QAAQ,6BAA6B;AAAA,IACtD;AAAA,IACA,aAAa;AAAA,MACX,KAAK,MAAM,QAAQ,+BAA+B;AAAA,MAClD,QAAQ,MAAM,QAAQ,kCAAkC;AAAA,IAC1D;AAAA,IACA,WAAW;AAAA,MACT,OAAO;AAAA,QACL,MAAM,MAAM,QAAQ,oCAAoC;AAAA,QACxD,KAAK,MAAM,QAAQ,mCAAmC;AAAA,QACtD,QAAQ,MAAM,QAAQ,sCAAsC;AAAA,QAC5D,QAAQ,MAAM,QAAQ,sCAAsC;AAAA,QAC5D,QAAQ,MAAM,QAAQ,sCAAsC;AAAA,MAC9D;AAAA,MACA,KAAK;AAAA,QACH,MAAM,MAAM,QAAQ,kCAAkC;AAAA,QACtD,KAAK,MAAM,QAAQ,iCAAiC;AAAA,QACpD,QAAQ,MAAM,QAAQ,oCAAoC;AAAA,QAC1D,QAAQ,MAAM,QAAQ,oCAAoC;AAAA,QAC1D,QAAQ,MAAM,QAAQ,oCAAoC;AAAA,MAC5D;AAAA,IACF;AAAA,IACA,gBAAgB,MAAM,QAAQ,8BAA8B;AAAA,IAC5D,kBAAkB,MAAM,QAAQ,gCAAgC;AAAA,EAClE;AAEA,QAAM,YAAoC;AAAA,IACxC,SAAS,MAAM,QAAQ,mBAAmB;AAAA,IAC1C,UAAU,MAAM,QAAQ,oBAAoB;AAAA,IAC5C,QAAQ,MAAM,QAAQ,kBAAkB;AAAA,IACxC,OAAO;AAAA,MACL,OAAO,MAAM,QAAQ,uBAAuB;AAAA,MAC5C,QAAQ,MAAM,QAAQ,wBAAwB;AAAA,MAC9C,YAAY,MAAM,QAAQ,4BAA4B;AAAA,MACtD,OAAO,MAAM,QAAQ,uBAAuB;AAAA,MAC5C,QAAQ,MAAM,QAAQ,wBAAwB;AAAA,MAC9C,WAAW,MAAM,QAAQ,2BAA2B;AAAA,MACpD,QAAQ,MAAM,QAAQ,wBAAwB;AAAA,IAChD;AAAA,IACA,YAAY;AAAA,MACV,UAAU,MAAM,QAAQ,+BAA+B;AAAA,MACvD,YAAY,MAAM,QAAQ,iCAAiC;AAAA,MAC3D,YAAY,MAAM,QAAQ,iCAAiC;AAAA,MAC3D,YAAY,MAAM,QAAQ,iCAAiC;AAAA,IAC7D;AAAA,EACF;AAEA,QAAM,QAA4B;AAAA,IAChC,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,MAAM,MAAM,QAAQ,YAAY;AAAA,IAChC,KAAK,MAAM,QAAQ,WAAW;AAAA,IAC9B,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,WAAW,MAAM,QAAQ,iBAAiB;AAAA,IAC1C,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,OAAO,MAAM,QAAQ,aAAa;AAAA,EACpC;AAEA,QAAM,MAAwB;AAAA,IAC5B,MAAM,MAAM,QAAQ,UAAU;AAAA,IAC9B,SAAS,MAAM,QAAQ,aAAa;AAAA,EACtC;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAGA,IAAM,mBAA+B;AAAA,EACnC,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb;AASO,SAAS,kBACd,UAAsC,CAAC,GAClB;AACrB,QAAM,OAAmB,CAAC;AAC1B,QAAM,KAAK,aAAa;AAGxB,MAAI,QAAQ,IAAI,MAAM;AACpB,eAAW,CAAC,OAAO,IAAI,KAAK,OAAO,QAAQ,QAAQ,GAAG,IAAI,GAAG;AAC3D,SAAG,KAAK,OAAO,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,YAAyB;AAAA,IAC7B,MAAM,OAAO,SAAiB,cAAuB,EAAE,OAAO,GAAG;AAAA,EACnE;AACA,QAAM,MAAM,iBAAiB,IAAI;AACjC,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,gBAAgB,wBAAwB;AAI9C,eAAa;AAAA,IACX,UAAU;AAAA,IACV,WAAW,cAAc;AAAA,IACzB,SAAS,cAAc;AAAA,IACvB,OAAO;AAAA,IACP,OAAO;AAAA,IACP,KAAK;AAAA,IACL,eAAe,cAAc;AAAA,IAC7B,OAAO,cAAc;AAAA,EACvB,CAAC;AAED,QAAM,MAA2B;AAAA,IAC/B,OAAQ,QAAQ,SAAS,CAAC;AAAA,IAC1B,QAAQ,QAAQ,UAAU,CAAC;AAAA,IAC3B,OAAO,QAAQ,SAAS,CAAC;AAAA,IACzB,SAAS,QAAQ,WAAW,CAAC;AAAA,IAC7B,MAAM,QAAQ,QAAQ;AAAA,IACtB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,MAAM;AAAA,IACN;AAAA,IACA,KAAK,QAAQ,OAAO,CAAC;AAAA,IACrB;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP,GAAG;AAAA;AAAA;AAAA;AAAA,IAIH,QAAQ,CAAC;AAAA,IACT,WAAW;AAAA,IACX,SAAS,IAAI,OAAO,EAAE;AAAA,IACtB,QAAQ,IAAI,OAAO,EAAE;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/test/mock-db.ts","../../src/test/context.ts"],"sourcesContent":["import type { DBClient, TxClient } from \"../endpoint.js\";\n\n/** Tracked records for assertions. */\ninterface TrackedRecords {\n  inserted: Map<string, Record<string, unknown>[]>;\n  updated: Map<string, Record<string, unknown>[]>;\n  deleted: Map<string, string[]>;\n}\n\n/** Mock DB client with tracking and seed data support. */\nexport interface MockDBClient extends DBClient {\n  /** Get records inserted into a table. */\n  inserted(table: string): Record<string, unknown>[];\n  /** Get records updated in a table. */\n  updated(table: string): Record<string, unknown>[];\n  /** Get IDs deleted from a table. */\n  deleted(table: string): string[];\n  /** Pre-seed data into a table for findById/findMany. */\n  seed(table: string, data: Record<string, unknown>[]): void;\n}\n\n/** Create a mock DB client with in-memory tracking. */\nexport function createMockDB(): MockDBClient {\n  const store = new Map<string, Record<string, unknown>[]>();\n  const tracked: TrackedRecords = {\n    inserted: new Map(),\n    updated: new Map(),\n    deleted: new Map(),\n  };\n\n  // Build the op surface first (TxClient = the five DB ops + query). The\n  // transaction below reuses this same `ops` object as the tx-scoped client,\n  // so writes inside a transaction land in the same in-memory store and\n  // tracking maps — exactly the semantics a user endpoint test expects.\n  const ops: TxClient = {\n    async query(_sql: string, _params?: unknown[]) {\n      return [];\n    },\n\n    async insert(table: string, data: Record<string, unknown>) {\n      const record = { id: crypto.randomUUID(), ...data };\n      if (!store.has(table)) store.set(table, []);\n      store.get(table)!.push(record);\n      if (!tracked.inserted.has(table)) tracked.inserted.set(table, []);\n      tracked.inserted.get(table)!.push(record);\n      return record;\n    },\n\n    async update(table: string, id: string, data: Record<string, unknown>) {\n      const rows = store.get(table) ?? [];\n      const idx = rows.findIndex((r) => r[\"id\"] === id);\n      const updated = idx >= 0\n        ? { ...rows[idx], ...data }\n        : { id, ...data };\n      if (idx >= 0) {\n        rows[idx] = updated;\n      }\n      if (!tracked.updated.has(table)) tracked.updated.set(table, []);\n      tracked.updated.get(table)!.push(updated);\n      return updated;\n    },\n\n    async delete(table: string, id: string) {\n      const rows = store.get(table) ?? [];\n      const idx = rows.findIndex((r) => r[\"id\"] === id);\n      if (idx >= 0) rows.splice(idx, 1);\n      if (!tracked.deleted.has(table)) tracked.deleted.set(table, []);\n      tracked.deleted.get(table)!.push(id);\n    },\n\n    async findById(table: string, id: string) {\n      const rows = store.get(table) ?? [];\n      return rows.find((r) => r[\"id\"] === id) ?? null;\n    },\n\n    async findMany(table: string, query?: Record<string, unknown>) {\n      const rows = store.get(table) ?? [];\n      if (!query) return rows;\n      return rows.filter((row) =>\n        Object.entries(query).every(([key, val]) => row[key] === val),\n      );\n    },\n  };\n\n  const client: MockDBClient = {\n    ...ops,\n\n    transaction<T>(fn: (tx: TxClient) => Promise<T>): Promise<T> {\n      return fn(ops);\n    },\n\n    // In tests there is no real DB role; `asService()` returns the same\n    // in-memory client so RLS-bypass code paths still hit the same store and\n    // tracking maps. The omitted `asService` matches the contract (no\n    // double-bypass), so callers can't recurse.\n    asService(): Omit<DBClient, \"asService\"> {\n      return client;\n    },\n\n    inserted(table: string) {\n      return tracked.inserted.get(table) ?? [];\n    },\n\n    updated(table: string) {\n      return tracked.updated.get(table) ?? [];\n    },\n\n    deleted(table: string) {\n      return tracked.deleted.get(table) ?? [];\n    },\n\n    seed(table: string, data: Record<string, unknown>[]) {\n      store.set(table, [...data]);\n    },\n  };\n\n  return client;\n}\n","import type {\n  CacheClient,\n  ClientInfo,\n  Logger,\n  PBRequest,\n  PalbaseModuleClients,\n  QueueClient,\n} from \"../endpoint.js\";\nimport type {\n  PalbaseAuthClient,\n  PalbaseStorageClient,\n  PalbaseRealtimeClient,\n  PalbaseFunctionsClient,\n  PalbaseFlagsClient,\n  PalbaseNotificationsClient,\n  PalbaseAnalyticsClient,\n  PalbaseLinksClient,\n  PalbaseCmsClient,\n} from \"../clients.js\";\nimport type { User } from \"../types.js\";\nimport { __setRuntime } from \"../runtime.js\";\nimport { createMockDB, type MockDBClient } from \"./mock-db.js\";\n\n/** Options for creating a test context. */\nexport interface TestContextOptions<TInput = unknown> {\n  user?: User | null;\n  input?: TInput;\n  params?: Record<string, string>;\n  query?: Record<string, string>;\n  headers?: Record<string, string>;\n  env?: Record<string, string>;\n  db?: { seed?: Record<string, Record<string, unknown>[]> };\n}\n\n/** Log entry captured by the mock logger. */\nexport interface LogEntry {\n  level: \"info\" | \"warn\" | \"error\" | \"debug\";\n  message: string;\n  args: unknown[];\n}\n\n/** Test context for exercising endpoint handlers.\n *\n * Handlers now receive a {@link PBRequest} (no services attached) and reach\n * services via the PascalCase singletons (`Database`, `Log`, …). So\n * `createTestContext` does two things:\n *   1. returns a `PBRequest` (the object you pass to `handler(...)`), and\n *   2. installs mock services into the runtime via `__setRuntime`, so the\n *      singletons resolve to the same mocks while the handler runs.\n *\n * For assertions and for building sibling (worker/job/hook/webhook) contexts,\n * the mock service handles are also attached here (`db`, `log`, `cache`,\n * `queue`, `env`, plus the module clients and captured `logs`). The user\n * defaults to nullable in tests (`PBRequest<TInput, false>`) so test code can\n * pass any auth shape without a cast. */\nexport interface TestContext<TInput = unknown>\n  extends PBRequest<TInput, false>,\n    PalbaseModuleClients {\n  db: MockDBClient;\n  env: Record<string, string>;\n  log: Logger;\n  cache: CacheClient;\n  queue: QueueClient;\n  /** Captured log entries. */\n  logs: LogEntry[];\n}\n\n/** Create a mock logger that captures entries. */\nfunction createMockLogger(logs: LogEntry[]): Logger {\n  return {\n    info(message: string, ...args: unknown[]) {\n      logs.push({ level: \"info\", message, args });\n    },\n    warn(message: string, ...args: unknown[]) {\n      logs.push({ level: \"warn\", message, args });\n    },\n    error(message: string, ...args: unknown[]) {\n      logs.push({ level: \"error\", message, args });\n    },\n    debug(message: string, ...args: unknown[]) {\n      logs.push({ level: \"debug\", message, args });\n    },\n  };\n}\n\n/** Create a mock in-memory cache.\n *\n * Mirrors the runtime's JSON-typed semantics (values are arbitrary JSON, not\n * just strings). getOrSet is single-process here, so it does not need the\n * distributed lock the real runtime uses — it is just get-miss → fn → set.\n * The cross-replica stampede protection is covered by the worker.js tests.\n */\nfunction createMockCache(): CacheClient {\n  const store = new Map<string, unknown>();\n\n  const get = async <T = unknown>(key: string): Promise<T | null> => {\n    return store.has(key) ? (store.get(key) as T) : null;\n  };\n  const set = async (key: string, value: unknown, _ttl?: number): Promise<void> => {\n    store.set(key, value);\n  };\n\n  return {\n    get,\n    set,\n    async del(key: string) {\n      store.delete(key);\n    },\n    async incr(key: string) {\n      const raw = store.get(key);\n      const current = typeof raw === \"number\" ? raw : parseInt(String(raw ?? \"0\"), 10);\n      const next = current + 1;\n      store.set(key, next);\n      return next;\n    },\n    async getOrSet<T>(key: string, ttl: number, fn: () => Promise<T> | T): Promise<T> {\n      const hit = await get<T>(key);\n      if (hit !== null) {\n        return hit;\n      }\n      const value = await fn();\n      await set(key, value, ttl);\n      return value;\n    },\n  };\n}\n\n/** Create mock Palbase module clients (Documents, Storage, …).\n *\n * Every slot throws with a descriptive error so tests that access a module\n * client surface without configuring it fail loudly rather than silently\n * returning undefined. Override individual clients on the returned context for\n * tests that need them.\n */\nfunction createMockModuleClients(): PalbaseModuleClients {\n  const notImpl = (label: string): never => {\n    throw new Error(\n      `${label} not configured in test mock — override the matching client on the returned context`,\n    );\n  };\n\n  const docs: PalbaseModuleClients[\"docs\"] = {\n    collection: () => notImpl(\"docs.collection\"),\n    doc: () => notImpl(\"docs.doc\"),\n  };\n\n  const auth: PalbaseAuthClient = {\n    verifyUserToken: () => notImpl(\"auth.verifyUserToken\"),\n    getSession: () => notImpl(\"auth.getSession\"),\n    mfa: {\n      enroll: () => notImpl(\"auth.mfa.enroll\"),\n      verifyEnrollment: () => notImpl(\"auth.mfa.verifyEnrollment\"),\n      challenge: () => notImpl(\"auth.mfa.challenge\"),\n      recovery: () => notImpl(\"auth.mfa.recovery\"),\n      listFactors: () => notImpl(\"auth.mfa.listFactors\"),\n      removeFactor: () => notImpl(\"auth.mfa.removeFactor\"),\n      regenerateRecoveryCodes: () => notImpl(\"auth.mfa.regenerateRecoveryCodes\"),\n      emailEnroll: () => notImpl(\"auth.mfa.emailEnroll\"),\n      emailChallenge: () => notImpl(\"auth.mfa.emailChallenge\"),\n      emailVerify: () => notImpl(\"auth.mfa.emailVerify\"),\n    },\n    device: {\n      generateChallenge: () => notImpl(\"auth.device.generateChallenge\"),\n      attestAndroid: () => notImpl(\"auth.device.attestAndroid\"),\n      attestiOS: () => notImpl(\"auth.device.attestiOS\"),\n      bind: () => notImpl(\"auth.device.bind\"),\n      list: () => notImpl(\"auth.device.list\"),\n      delete: () => notImpl(\"auth.device.delete\"),\n      verifyRequestSignature: () => notImpl(\"auth.device.verifyRequestSignature\"),\n      getToken: () => notImpl(\"auth.device.getToken\"),\n      get isActive(): never {\n        return notImpl(\"auth.device.isActive\");\n      },\n      setCachedToken: () => notImpl(\"auth.device.setCachedToken\"),\n      dispose: () => notImpl(\"auth.device.dispose\"),\n    },\n  };\n\n  const storage: PalbaseStorageClient = {\n    bucket: () => notImpl(\"storage.bucket\"),\n  };\n\n  const realtime: PalbaseRealtimeClient = {\n    channel: () => notImpl(\"realtime.channel\"),\n    removeChannel: () => notImpl(\"realtime.removeChannel\"),\n    removeAllChannels: () => notImpl(\"realtime.removeAllChannels\"),\n  };\n\n  const functions: PalbaseFunctionsClient = {\n    invoke: () => notImpl(\"functions.invoke\"),\n  };\n\n  const flags: PalbaseFlagsClient = {\n    isEnabled: () => notImpl(\"flags.isEnabled\"),\n    getVariant: () => notImpl(\"flags.getVariant\"),\n    getAll: () => notImpl(\"flags.getAll\"),\n  };\n\n  const notifications: PalbaseNotificationsClient = {\n    push: { send: () => notImpl(\"notifications.push.send\") },\n    email: { send: () => notImpl(\"notifications.email.send\") },\n    sms: { send: () => notImpl(\"notifications.sms.send\") },\n    inbox: {\n      send: () => notImpl(\"notifications.inbox.send\"),\n      list: () => notImpl(\"notifications.inbox.list\"),\n      unreadCount: () => notImpl(\"notifications.inbox.unreadCount\"),\n      markRead: () => notImpl(\"notifications.inbox.markRead\"),\n      markAllRead: () => notImpl(\"notifications.inbox.markAllRead\"),\n      archive: () => notImpl(\"notifications.inbox.archive\"),\n    },\n    preferences: {\n      get: () => notImpl(\"notifications.preferences.get\"),\n      update: () => notImpl(\"notifications.preferences.update\"),\n    },\n    templates: {\n      email: {\n        list: () => notImpl(\"notifications.templates.email.list\"),\n        get: () => notImpl(\"notifications.templates.email.get\"),\n        create: () => notImpl(\"notifications.templates.email.create\"),\n        update: () => notImpl(\"notifications.templates.email.update\"),\n        delete: () => notImpl(\"notifications.templates.email.delete\"),\n      },\n      sms: {\n        list: () => notImpl(\"notifications.templates.sms.list\"),\n        get: () => notImpl(\"notifications.templates.sms.get\"),\n        create: () => notImpl(\"notifications.templates.sms.create\"),\n        update: () => notImpl(\"notifications.templates.sms.update\"),\n        delete: () => notImpl(\"notifications.templates.sms.delete\"),\n      },\n    },\n    registerDevice: () => notImpl(\"notifications.registerDevice\"),\n    unregisterDevice: () => notImpl(\"notifications.unregisterDevice\"),\n  };\n\n  const analytics: PalbaseAnalyticsClient = {\n    capture: () => notImpl(\"analytics.capture\"),\n    identify: () => notImpl(\"analytics.identify\"),\n    screen: () => notImpl(\"analytics.screen\"),\n    query: {\n      count: () => notImpl(\"analytics.query.count\"),\n      events: () => notImpl(\"analytics.query.events\"),\n      properties: () => notImpl(\"analytics.query.properties\"),\n      users: () => notImpl(\"analytics.query.users\"),\n      funnel: () => notImpl(\"analytics.query.funnel\"),\n      retention: () => notImpl(\"analytics.query.retention\"),\n      cohort: () => notImpl(\"analytics.query.cohort\"),\n    },\n    management: {\n      overview: () => notImpl(\"analytics.management.overview\"),\n      eventNames: () => notImpl(\"analytics.management.eventNames\"),\n      userDetail: () => notImpl(\"analytics.management.userDetail\"),\n      deleteUser: () => notImpl(\"analytics.management.deleteUser\"),\n    },\n  };\n\n  const links: PalbaseLinksClient = {\n    create: () => notImpl(\"links.create\"),\n    list: () => notImpl(\"links.list\"),\n    get: () => notImpl(\"links.get\"),\n    update: () => notImpl(\"links.update\"),\n    delete: () => notImpl(\"links.delete\"),\n    analytics: () => notImpl(\"links.analytics\"),\n    qrCode: () => notImpl(\"links.qrCode\"),\n    match: () => notImpl(\"links.match\"),\n  };\n\n  const cms: PalbaseCmsClient = {\n    find: () => notImpl(\"cms.find\"),\n    findOne: () => notImpl(\"cms.findOne\"),\n  };\n\n  return {\n    auth,\n    storage,\n    docs,\n    realtime,\n    functions,\n    flags,\n    notifications,\n    analytics,\n    links,\n    cms,\n  };\n}\n\n/** Null-by-default calling-client metadata for tests. */\nconst NULL_CLIENT_INFO: ClientInfo = {\n  sdkVersion: null,\n  appVersion: null,\n  platform: null,\n  osVersion: null,\n};\n\n/** Create a fully mocked endpoint test context.\n *\n * Returns a `PBRequest` (pass it to `handler(...)`) with the mock service\n * handles attached for assertions, and installs those mocks into the runtime\n * via `__setRuntime` so the `Database`/`Log`/… singletons resolve to them\n * while the handler runs.\n */\nexport function createTestContext<TInput = unknown>(\n  options: TestContextOptions<TInput> = {},\n): TestContext<TInput> {\n  const logs: LogEntry[] = [];\n  const db = createMockDB();\n\n  // Seed data if provided\n  if (options.db?.seed) {\n    for (const [table, data] of Object.entries(options.db.seed)) {\n      db.seed(table, data);\n    }\n  }\n\n  const mockQueue: QueueClient = {\n    push: async (_worker: string, _payload: unknown) => ({ jobId: \"\" }),\n  };\n  const log = createMockLogger(logs);\n  const cache = createMockCache();\n  const moduleClients = createMockModuleClients();\n\n  // Install the mocks so the PascalCase singletons (Database, Log, …) resolve\n  // to them while the handler under test runs.\n  __setRuntime({\n    Database: db,\n    Documents: moduleClients.docs,\n    Storage: moduleClients.storage,\n    Cache: cache,\n    Queue: mockQueue,\n    Log: log,\n    Notifications: moduleClients.notifications,\n    Flags: moduleClients.flags,\n  });\n\n  const ctx: TestContext<TInput> = {\n    input: (options.input ?? {}) as TInput,\n    params: options.params ?? {},\n    query: options.query ?? {},\n    headers: options.headers ?? {},\n    user: options.user ?? null,\n    client: NULL_CLIENT_INFO,\n    method: \"POST\",\n    file: null,\n    db,\n    env: options.env ?? {},\n    log,\n    cache,\n    queue: mockQueue,\n    ...moduleClients,\n    // Empty errors map in tests by default. Tests that exercise an endpoint's\n    // declared errors construct their own throwers; this stub satisfies the\n    // PBRequest shape without forcing every test to declare `errors:`.\n    errors: {},\n    requestId: \"req_test_000000000000\",\n    traceId: \"0\".repeat(32),\n    spanId: \"0\".repeat(16),\n    logs,\n  };\n\n  return ctx;\n}\n"],"mappings":";;;;;AAsBO,SAAS,eAA6B;AAC3C,QAAM,QAAQ,oBAAI,IAAuC;AACzD,QAAM,UAA0B;AAAA,IAC9B,UAAU,oBAAI,IAAI;AAAA,IAClB,SAAS,oBAAI,IAAI;AAAA,IACjB,SAAS,oBAAI,IAAI;AAAA,EACnB;AAMA,QAAM,MAAgB;AAAA,IACpB,MAAM,MAAM,MAAc,SAAqB;AAC7C,aAAO,CAAC;AAAA,IACV;AAAA,IAEA,MAAM,OAAO,OAAe,MAA+B;AACzD,YAAM,SAAS,EAAE,IAAI,OAAO,WAAW,GAAG,GAAG,KAAK;AAClD,UAAI,CAAC,MAAM,IAAI,KAAK,EAAG,OAAM,IAAI,OAAO,CAAC,CAAC;AAC1C,YAAM,IAAI,KAAK,EAAG,KAAK,MAAM;AAC7B,UAAI,CAAC,QAAQ,SAAS,IAAI,KAAK,EAAG,SAAQ,SAAS,IAAI,OAAO,CAAC,CAAC;AAChE,cAAQ,SAAS,IAAI,KAAK,EAAG,KAAK,MAAM;AACxC,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,IAAY,MAA+B;AACrE,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,YAAM,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,IAAI,MAAM,EAAE;AAChD,YAAM,UAAU,OAAO,IACnB,EAAE,GAAG,KAAK,GAAG,GAAG,GAAG,KAAK,IACxB,EAAE,IAAI,GAAG,KAAK;AAClB,UAAI,OAAO,GAAG;AACZ,aAAK,GAAG,IAAI;AAAA,MACd;AACA,UAAI,CAAC,QAAQ,QAAQ,IAAI,KAAK,EAAG,SAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC9D,cAAQ,QAAQ,IAAI,KAAK,EAAG,KAAK,OAAO;AACxC,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,OAAO,OAAe,IAAY;AACtC,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,YAAM,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,IAAI,MAAM,EAAE;AAChD,UAAI,OAAO,EAAG,MAAK,OAAO,KAAK,CAAC;AAChC,UAAI,CAAC,QAAQ,QAAQ,IAAI,KAAK,EAAG,SAAQ,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC9D,cAAQ,QAAQ,IAAI,KAAK,EAAG,KAAK,EAAE;AAAA,IACrC;AAAA,IAEA,MAAM,SAAS,OAAe,IAAY;AACxC,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,aAAO,KAAK,KAAK,CAAC,MAAM,EAAE,IAAI,MAAM,EAAE,KAAK;AAAA,IAC7C;AAAA,IAEA,MAAM,SAAS,OAAe,OAAiC;AAC7D,YAAM,OAAO,MAAM,IAAI,KAAK,KAAK,CAAC;AAClC,UAAI,CAAC,MAAO,QAAO;AACnB,aAAO,KAAK;AAAA,QAAO,CAAC,QAClB,OAAO,QAAQ,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,GAAG,MAAM,IAAI,GAAG,MAAM,GAAG;AAAA,MAC9D;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAuB;AAAA,IAC3B,GAAG;AAAA,IAEH,YAAe,IAA8C;AAC3D,aAAO,GAAG,GAAG;AAAA,IACf;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,YAAyC;AACvC,aAAO;AAAA,IACT;AAAA,IAEA,SAAS,OAAe;AACtB,aAAO,QAAQ,SAAS,IAAI,KAAK,KAAK,CAAC;AAAA,IACzC;AAAA,IAEA,QAAQ,OAAe;AACrB,aAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAAA,IACxC;AAAA,IAEA,QAAQ,OAAe;AACrB,aAAO,QAAQ,QAAQ,IAAI,KAAK,KAAK,CAAC;AAAA,IACxC;AAAA,IAEA,KAAK,OAAe,MAAiC;AACnD,YAAM,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC;AAAA,IAC5B;AAAA,EACF;AAEA,SAAO;AACT;;;ACjDA,SAAS,iBAAiB,MAA0B;AAClD,SAAO;AAAA,IACL,KAAK,YAAoB,MAAiB;AACxC,WAAK,KAAK,EAAE,OAAO,QAAQ,SAAS,KAAK,CAAC;AAAA,IAC5C;AAAA,IACA,KAAK,YAAoB,MAAiB;AACxC,WAAK,KAAK,EAAE,OAAO,QAAQ,SAAS,KAAK,CAAC;AAAA,IAC5C;AAAA,IACA,MAAM,YAAoB,MAAiB;AACzC,WAAK,KAAK,EAAE,OAAO,SAAS,SAAS,KAAK,CAAC;AAAA,IAC7C;AAAA,IACA,MAAM,YAAoB,MAAiB;AACzC,WAAK,KAAK,EAAE,OAAO,SAAS,SAAS,KAAK,CAAC;AAAA,IAC7C;AAAA,EACF;AACF;AASA,SAAS,kBAA+B;AACtC,QAAM,QAAQ,oBAAI,IAAqB;AAEvC,QAAM,MAAM,OAAoB,QAAmC;AACjE,WAAO,MAAM,IAAI,GAAG,IAAK,MAAM,IAAI,GAAG,IAAU;AAAA,EAClD;AACA,QAAM,MAAM,OAAO,KAAa,OAAgB,SAAiC;AAC/E,UAAM,IAAI,KAAK,KAAK;AAAA,EACtB;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,IAAI,KAAa;AACrB,YAAM,OAAO,GAAG;AAAA,IAClB;AAAA,IACA,MAAM,KAAK,KAAa;AACtB,YAAM,MAAM,MAAM,IAAI,GAAG;AACzB,YAAM,UAAU,OAAO,QAAQ,WAAW,MAAM,SAAS,OAAO,OAAO,GAAG,GAAG,EAAE;AAC/E,YAAM,OAAO,UAAU;AACvB,YAAM,IAAI,KAAK,IAAI;AACnB,aAAO;AAAA,IACT;AAAA,IACA,MAAM,SAAY,KAAa,KAAa,IAAsC;AAChF,YAAM,MAAM,MAAM,IAAO,GAAG;AAC5B,UAAI,QAAQ,MAAM;AAChB,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,MAAM,GAAG;AACvB,YAAM,IAAI,KAAK,OAAO,GAAG;AACzB,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASA,SAAS,0BAAgD;AACvD,QAAM,UAAU,CAAC,UAAyB;AACxC,UAAM,IAAI;AAAA,MACR,GAAG,KAAK;AAAA,IACV;AAAA,EACF;AAEA,QAAM,OAAqC;AAAA,IACzC,YAAY,MAAM,QAAQ,iBAAiB;AAAA,IAC3C,KAAK,MAAM,QAAQ,UAAU;AAAA,EAC/B;AAEA,QAAM,OAA0B;AAAA,IAC9B,iBAAiB,MAAM,QAAQ,sBAAsB;AAAA,IACrD,YAAY,MAAM,QAAQ,iBAAiB;AAAA,IAC3C,KAAK;AAAA,MACH,QAAQ,MAAM,QAAQ,iBAAiB;AAAA,MACvC,kBAAkB,MAAM,QAAQ,2BAA2B;AAAA,MAC3D,WAAW,MAAM,QAAQ,oBAAoB;AAAA,MAC7C,UAAU,MAAM,QAAQ,mBAAmB;AAAA,MAC3C,aAAa,MAAM,QAAQ,sBAAsB;AAAA,MACjD,cAAc,MAAM,QAAQ,uBAAuB;AAAA,MACnD,yBAAyB,MAAM,QAAQ,kCAAkC;AAAA,MACzE,aAAa,MAAM,QAAQ,sBAAsB;AAAA,MACjD,gBAAgB,MAAM,QAAQ,yBAAyB;AAAA,MACvD,aAAa,MAAM,QAAQ,sBAAsB;AAAA,IACnD;AAAA,IACA,QAAQ;AAAA,MACN,mBAAmB,MAAM,QAAQ,+BAA+B;AAAA,MAChE,eAAe,MAAM,QAAQ,2BAA2B;AAAA,MACxD,WAAW,MAAM,QAAQ,uBAAuB;AAAA,MAChD,MAAM,MAAM,QAAQ,kBAAkB;AAAA,MACtC,MAAM,MAAM,QAAQ,kBAAkB;AAAA,MACtC,QAAQ,MAAM,QAAQ,oBAAoB;AAAA,MAC1C,wBAAwB,MAAM,QAAQ,oCAAoC;AAAA,MAC1E,UAAU,MAAM,QAAQ,sBAAsB;AAAA,MAC9C,IAAI,WAAkB;AACpB,eAAO,QAAQ,sBAAsB;AAAA,MACvC;AAAA,MACA,gBAAgB,MAAM,QAAQ,4BAA4B;AAAA,MAC1D,SAAS,MAAM,QAAQ,qBAAqB;AAAA,IAC9C;AAAA,EACF;AAEA,QAAM,UAAgC;AAAA,IACpC,QAAQ,MAAM,QAAQ,gBAAgB;AAAA,EACxC;AAEA,QAAM,WAAkC;AAAA,IACtC,SAAS,MAAM,QAAQ,kBAAkB;AAAA,IACzC,eAAe,MAAM,QAAQ,wBAAwB;AAAA,IACrD,mBAAmB,MAAM,QAAQ,4BAA4B;AAAA,EAC/D;AAEA,QAAM,YAAoC;AAAA,IACxC,QAAQ,MAAM,QAAQ,kBAAkB;AAAA,EAC1C;AAEA,QAAM,QAA4B;AAAA,IAChC,WAAW,MAAM,QAAQ,iBAAiB;AAAA,IAC1C,YAAY,MAAM,QAAQ,kBAAkB;AAAA,IAC5C,QAAQ,MAAM,QAAQ,cAAc;AAAA,EACtC;AAEA,QAAM,gBAA4C;AAAA,IAChD,MAAM,EAAE,MAAM,MAAM,QAAQ,yBAAyB,EAAE;AAAA,IACvD,OAAO,EAAE,MAAM,MAAM,QAAQ,0BAA0B,EAAE;AAAA,IACzD,KAAK,EAAE,MAAM,MAAM,QAAQ,wBAAwB,EAAE;AAAA,IACrD,OAAO;AAAA,MACL,MAAM,MAAM,QAAQ,0BAA0B;AAAA,MAC9C,MAAM,MAAM,QAAQ,0BAA0B;AAAA,MAC9C,aAAa,MAAM,QAAQ,iCAAiC;AAAA,MAC5D,UAAU,MAAM,QAAQ,8BAA8B;AAAA,MACtD,aAAa,MAAM,QAAQ,iCAAiC;AAAA,MAC5D,SAAS,MAAM,QAAQ,6BAA6B;AAAA,IACtD;AAAA,IACA,aAAa;AAAA,MACX,KAAK,MAAM,QAAQ,+BAA+B;AAAA,MAClD,QAAQ,MAAM,QAAQ,kCAAkC;AAAA,IAC1D;AAAA,IACA,WAAW;AAAA,MACT,OAAO;AAAA,QACL,MAAM,MAAM,QAAQ,oCAAoC;AAAA,QACxD,KAAK,MAAM,QAAQ,mCAAmC;AAAA,QACtD,QAAQ,MAAM,QAAQ,sCAAsC;AAAA,QAC5D,QAAQ,MAAM,QAAQ,sCAAsC;AAAA,QAC5D,QAAQ,MAAM,QAAQ,sCAAsC;AAAA,MAC9D;AAAA,MACA,KAAK;AAAA,QACH,MAAM,MAAM,QAAQ,kCAAkC;AAAA,QACtD,KAAK,MAAM,QAAQ,iCAAiC;AAAA,QACpD,QAAQ,MAAM,QAAQ,oCAAoC;AAAA,QAC1D,QAAQ,MAAM,QAAQ,oCAAoC;AAAA,QAC1D,QAAQ,MAAM,QAAQ,oCAAoC;AAAA,MAC5D;AAAA,IACF;AAAA,IACA,gBAAgB,MAAM,QAAQ,8BAA8B;AAAA,IAC5D,kBAAkB,MAAM,QAAQ,gCAAgC;AAAA,EAClE;AAEA,QAAM,YAAoC;AAAA,IACxC,SAAS,MAAM,QAAQ,mBAAmB;AAAA,IAC1C,UAAU,MAAM,QAAQ,oBAAoB;AAAA,IAC5C,QAAQ,MAAM,QAAQ,kBAAkB;AAAA,IACxC,OAAO;AAAA,MACL,OAAO,MAAM,QAAQ,uBAAuB;AAAA,MAC5C,QAAQ,MAAM,QAAQ,wBAAwB;AAAA,MAC9C,YAAY,MAAM,QAAQ,4BAA4B;AAAA,MACtD,OAAO,MAAM,QAAQ,uBAAuB;AAAA,MAC5C,QAAQ,MAAM,QAAQ,wBAAwB;AAAA,MAC9C,WAAW,MAAM,QAAQ,2BAA2B;AAAA,MACpD,QAAQ,MAAM,QAAQ,wBAAwB;AAAA,IAChD;AAAA,IACA,YAAY;AAAA,MACV,UAAU,MAAM,QAAQ,+BAA+B;AAAA,MACvD,YAAY,MAAM,QAAQ,iCAAiC;AAAA,MAC3D,YAAY,MAAM,QAAQ,iCAAiC;AAAA,MAC3D,YAAY,MAAM,QAAQ,iCAAiC;AAAA,IAC7D;AAAA,EACF;AAEA,QAAM,QAA4B;AAAA,IAChC,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,MAAM,MAAM,QAAQ,YAAY;AAAA,IAChC,KAAK,MAAM,QAAQ,WAAW;AAAA,IAC9B,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,WAAW,MAAM,QAAQ,iBAAiB;AAAA,IAC1C,QAAQ,MAAM,QAAQ,cAAc;AAAA,IACpC,OAAO,MAAM,QAAQ,aAAa;AAAA,EACpC;AAEA,QAAM,MAAwB;AAAA,IAC5B,MAAM,MAAM,QAAQ,UAAU;AAAA,IAC9B,SAAS,MAAM,QAAQ,aAAa;AAAA,EACtC;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAGA,IAAM,mBAA+B;AAAA,EACnC,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,WAAW;AACb;AASO,SAAS,kBACd,UAAsC,CAAC,GAClB;AACrB,QAAM,OAAmB,CAAC;AAC1B,QAAM,KAAK,aAAa;AAGxB,MAAI,QAAQ,IAAI,MAAM;AACpB,eAAW,CAAC,OAAO,IAAI,KAAK,OAAO,QAAQ,QAAQ,GAAG,IAAI,GAAG;AAC3D,SAAG,KAAK,OAAO,IAAI;AAAA,IACrB;AAAA,EACF;AAEA,QAAM,YAAyB;AAAA,IAC7B,MAAM,OAAO,SAAiB,cAAuB,EAAE,OAAO,GAAG;AAAA,EACnE;AACA,QAAM,MAAM,iBAAiB,IAAI;AACjC,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,gBAAgB,wBAAwB;AAI9C,eAAa;AAAA,IACX,UAAU;AAAA,IACV,WAAW,cAAc;AAAA,IACzB,SAAS,cAAc;AAAA,IACvB,OAAO;AAAA,IACP,OAAO;AAAA,IACP,KAAK;AAAA,IACL,eAAe,cAAc;AAAA,IAC7B,OAAO,cAAc;AAAA,EACvB,CAAC;AAED,QAAM,MAA2B;AAAA,IAC/B,OAAQ,QAAQ,SAAS,CAAC;AAAA,IAC1B,QAAQ,QAAQ,UAAU,CAAC;AAAA,IAC3B,OAAO,QAAQ,SAAS,CAAC;AAAA,IACzB,SAAS,QAAQ,WAAW,CAAC;AAAA,IAC7B,MAAM,QAAQ,QAAQ;AAAA,IACtB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,MAAM;AAAA,IACN;AAAA,IACA,KAAK,QAAQ,OAAO,CAAC;AAAA,IACrB;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP,GAAG;AAAA;AAAA;AAAA;AAAA,IAIH,QAAQ,CAAC;AAAA,IACT,WAAW;AAAA,IACX,SAAS,IAAI,OAAO,EAAE;AAAA,IACtB,QAAQ,IAAI,OAAO,EAAE;AAAA,IACrB;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/docs/README.md

@@ -7,25 +7,41 @@ This is **not** Express, Fastify, or a Supabase Edge Function. There is no
 `app.get(...)`, no manual route registration, no `import express`. You export
 definitions; the runtime wires them up.
 
-## The two mental models (important)
+## Mental model (important)
 
-| You are writing… | Handler receives | Services come from |
-|------------------|------------------|--------------------|
-| **Endpoints** (`endpoints/**`) | a single `req` ([PBRequest](./endpoints.md)) | imported singletons: `import { Database } from "@palbase/backend"` |
-| **Workers, Jobs, Hooks, Webhooks** | a `ctx` object | `ctx.db`, `ctx.log`, `ctx.cache`, `ctx.queue` |
+Every handler type imports service singletons the same way:
 
-Endpoints use `req` + imported singletons. Everything else uses `ctx`. Do not
-mix them: there is no `ctx` inside an endpoint handler, and no imported
-`Database` singleton call inside a worker (use `ctx.db`).
+```ts
+import { Database, Log, Cache, Queue } from "@palbase/backend";
+```
+
+The **only difference** is the trigger argument:
+
+| You are writing… | Handler signature | Trigger arg |
+|------------------|-------------------|-------------|
+| **Endpoints** (`controllers/` class controllers) | method `(…params)` | parameter decorators `@Body`/`@Query`/`@Param`/`@User`/… — [endpoints.md](./endpoints.md) |
+| **Workers** (`workers/**`) | `(payload, meta)` | typed payload + `WorkerMeta` |
+| **Jobs** (`jobs/**`) | `(meta)` | `JobMeta` |
+| **Hooks** (`hooks/**`) | `(event, meta)` | typed event + `HookMeta` |
+| **Webhooks** (`webhooks/**`) | `(event, meta)` | typed event + `WebhookMeta` |
+| **Middleware** (`middleware/**`) | `(ctx, next)` | `MiddlewareContext` — the **one exception** |
+
+`meta` carries non-service data: `env` (branch env vars), `projectId`,
+`environmentId`, and for workers/webhooks `requestId`. Services always come from
+the imported singletons — not from `ctx` or any argument.
 
 ## Project shape
 
 ```
 my-backend/
 ├── package.json            # depends on @palbase/backend
-├── endpoints/              # HTTP endpoints (file-based routing)
-│   └── hello/get.ts        # → GET /hello
+├── controllers/            # @Controller classes: @Get/@Post methods (mount the API)
+│   └── hello.controller.ts # @Controller("/hello") + @Get example
+├── models/<ctrl>/<ep>.ts   # zod schemas, folder per controller, file per endpoint
+│   └── hello/greet.ts      # GreetQuery + HelloResponse (zod value + z.infer type)
+├── services/               # plain classes/singletons your controllers call
 ├── db/schema.ts            # table definitions (optional, enables typed DB)
+├── db/migrations/          # explicit SQL migrations for type changes (optional)
 ├── workers/                # background job handlers (optional)
 ├── jobs/                   # cron-scheduled jobs (optional)
 ├── hooks/                  # auth/storage/document event hooks (optional)
@@ -33,15 +49,20 @@ my-backend/
 └── middleware/             # cross-cutting request middleware (optional)
 ```
 
+HTTP endpoints are **not** file-path routed. You author a class controller
+(`@Controller("/base")` with `@Get`/`@Post`/… methods); putting it under
+`controllers/` mounts it. See [routing.md](./routing.md).
+
 ## Documentation
 
 | Topic | File |
 |-------|------|
 | Getting started | [getting-started.md](./getting-started.md) |
-| File-based routing | [routing.md](./routing.md) |
-| Endpoints & `req` | [endpoints.md](./endpoints.md) |
+| Routing (class controllers) | [routing.md](./routing.md) |
+| Endpoints (decorators) | [endpoints.md](./endpoints.md) |
 | Database & transactions | [database.md](./database.md) |
 | Schema & typed DB | [schema.md](./schema.md) |
+| Migrations (additive vs type-change + drift-gate) | [migrations.md](./migrations.md) |
 | Services (Cache, Queue, Storage, …) | [services.md](./services.md) |
 | Errors | [errors.md](./errors.md) |
 | Workers & Jobs | [background.md](./background.md) |

package/docs/background.md

@@ -1,9 +1,9 @@
 # Workers & Jobs
 
-Workers and jobs use the **`ctx` model**: their handler receives a context
-object with `ctx.db`, `ctx.log`, `ctx.cache`, `ctx.queue`, `ctx.env`. They do
-**not** receive a `req`, and you do **not** import the `Database` singleton
-inside them — use `ctx.db`.
+Workers and jobs use the **singleton model** — the same imported service
+singletons as endpoints (`import { Database, Log } from "@palbase/backend"`).
+They do **not** receive a `req`. Instead, a small `meta` argument carries the
+non-service data (`env`, `user`, correlation ids).
 
 ## Workers (queue consumers)
 
@@ -12,7 +12,7 @@ A worker processes jobs pushed via `Queue.push(name, payload)`. File lives under
 
 ```ts
 // workers/process-order.ts
-import { defineWorker } from "@palbase/backend";
+import { defineWorker, Database, Log } from "@palbase/backend";
 
 interface OrderPayload { orderId: string; amount: number; }
 
@@ -21,13 +21,16 @@ export default defineWorker<OrderPayload>({
   retry: 5,                    // optional, default 3
   timeout: 60,                 // optional, seconds
   backoff: "exponential",      // "exponential" | "linear" | "fixed", default exponential
-  handler: async (ctx, payload) => {
-    ctx.log.info(`processing ${payload.orderId} for $${payload.amount}`);
-    await ctx.db.update("orders", payload.orderId, { status: "processed" });
+  handler: async (payload, meta) => {
+    Log.info(`processing ${payload.orderId} (env ${meta.environmentId})`);
+    await Database.update("orders", payload.orderId, { status: "processed" });
   },
 });
 ```
 
+`meta` shape: `{ env, user, requestId, projectId, environmentId }`. Branch env
+vars are in `meta.env`; services come from the imported singletons.
+
 Enqueue from an endpoint:
 
 ```ts
@@ -41,16 +44,19 @@ A job runs on a cron schedule. File lives under `jobs/`.
 
 ```ts
 // jobs/cleanup.ts
-import { defineJob } from "@palbase/backend";
+import { defineJob, Database, Log } from "@palbase/backend";
 
 export default defineJob({
   name: "cleanup-expired",
   schedule: "0 3 * * *",       // standard cron
   timeout: 120,                // optional, seconds
-  handler: async (ctx) => {
-    const expired = await ctx.db.findMany("sessions", { expired: true });
-    for (const s of expired) await ctx.db.delete("sessions", s.id as string);
-    ctx.log.info(`cleaned ${expired.length} sessions`);
+  handler: async (meta) => {
+    const expired = await Database.findMany("sessions", { expired: true });
+    for (const s of expired) await Database.delete("sessions", s.id as string);
+    Log.info(`cleaned ${expired.length} sessions in ${meta.projectId}`);
   },
 });
 ```
+
+`meta` shape: `{ env, projectId, environmentId }`. No `user` (jobs are
+system-initiated).

package/docs/database.md

@@ -1,16 +1,37 @@
 # Database
 
-In **endpoints**, import the `Database` singleton:
+Import the `Database` singleton in every handler type — endpoints, workers,
+jobs, hooks, and webhooks all use the same import:
 
 ```ts
 import { Database } from "@palbase/backend";
 ```
 
-In **workers, jobs, hooks, and webhooks**, use `ctx.db` — the same surface,
-reached via the context object (see [background.md](./background.md) and
-[events.md](./events.md)).
+Only **middleware** still uses `ctx.db` (see [background.md](./background.md)
+and [events.md](./events.md) for worker/job/hook/webhook examples).
 
-## Operations
+## Typed by default — `Database.tables`
+
+When you declare `db/schema.ts`, `Database.tables.<name>` is typed everywhere
+with no import and no generic. `insert` demands the right columns; rows come
+back typed; nullable columns are `T | null`. This is the path you should use:
+
+```ts
+const todo = await Database.tables.todos.insert({ title: "buy milk" });
+todo.id;       // string ✓
+todo.done;     // boolean ✓
+const open = await Database.tables.todos.findMany({ done: false });
+await Database.tables.todos.update(todo.id, { done: true });
+await Database.tables.todos.delete(todo.id);
+// todo.nope ← compile error
+```
+
+See [schema.md](./schema.md) for the full typed-table surface.
+
+## Raw string-keyed operations
+
+For dynamic table names or read-only SQL, the string-keyed ops are still
+available:
 
 | Method | Returns |
 |--------|---------|
@@ -22,14 +43,6 @@ reached via the context object (see [background.md](./background.md) and
 | `Database.query(sql, params?)` | rows from a read-only SQL query (runs in a READ ONLY transaction) |
 | `Database.transaction(fn)` | runs `fn(tx)` in a transaction |
 
-```ts
-const row = await Database.insert("todos", { title: "buy milk", done: false });
-const one = await Database.findById("todos", row.id as string);
-const open = await Database.findMany("todos", { done: false });
-await Database.update("todos", row.id as string, { done: true });
-await Database.delete("todos", row.id as string);
-```
-
 `findMany`'s `query` is an equality filter: keys are ANDed together. For
 anything richer (ranges, ordering, joins) use `Database.query`.
 
@@ -50,11 +63,51 @@ transaction). Returning commits; throwing rolls back.
 
 ```ts
 await Database.transaction(async (tx) => {
-  const order = await tx.insert("orders", { amount: 1000, status: "pending" });
-  await tx.insert("order_items", { order_id: order.id, sku: "ABC" });
+  const order = await tx.tables.orders.insert({ amount: 1000, status: "pending" });
+  await tx.tables.order_items.insert({ order_id: order.id, sku: "ABC" });
   // throw here → both inserts roll back
 });
 ```
 
-For a typed `.tables.*` API instead of string table names, see
-[schema.md](./schema.md).
+The `tx` carries the same typed `tx.tables.<name>` API as `Database.tables`
+(no nested transaction). See [schema.md](./schema.md) for the full surface.
+
+## Bypassing RLS — `Database.asService()`
+
+When a table has [Row-Level Security](./schema.md#row-level-security-rls)
+policies, every `Database.*` call runs as the request's verified user
+(`authenticated`), so the database filters out rows the user's policies don't
+allow. That is the secure default.
+
+Sometimes you need to read or write **across all users** — an admin endpoint, a
+background job that fans out notifications, a cleanup task. For that, call
+`Database.asService()`. It returns a sibling client that runs as the
+`service_role` (which has `BYPASSRLS`), exposing the exact same surface —
+`tables`, the raw string ops, and `transaction`:
+
+```ts
+import { Database } from "@palbase/backend";
+
+// RLS-enforced (default): only the caller's own rows.
+const mine = await Database.tables.todos.findMany({});
+
+// Service-role bypass: every user's rows. Explicit and greppable.
+const all  = await Database.asService().tables.todos.findMany({});
+const rows = await Database.asService().query("SELECT count(*) FROM todos");
+
+// A service-role transaction (the role is fixed for the whole tx):
+await Database.asService().transaction(async (tx) => {
+  await tx.tables.todos.update(id, { done: true });
+});
+```
+
+Guidelines:
+
+- **Be explicit.** Prefer the default `Database.*` and reach for `asService()`
+  only where you genuinely need cross-user access. It is intentionally easy to
+  grep for in review.
+- **No double-bypass / no nesting.** The sibling does not re-expose
+  `asService()`, and `tx` never exposes it — a transaction's role is fixed when
+  it begins. Use `Database.transaction(...)` for an authenticated tx and
+  `Database.asService().transaction(...)` for a service-role tx; you cannot mix
+  enforced and bypassed ops inside one interactive transaction.

package/docs/endpoints.md

@@ -1,86 +1,126 @@
 # Endpoints
 
-An endpoint is `export default defineEndpoint({...})` in a method file. The
-handler receives **one argument**, `req` (a `PBRequest`). Services are NOT on
-`req` — import them as singletons (see [services.md](./services.md)).
+An endpoint is a **method on a class controller** — a class decorated with
+`@Controller(basePath)` whose methods are decorated with `@Get`/`@Post`/`@Put`/
+`@Patch`/`@Delete`. Controller files live under `controllers/` and are mounted
+automatically (see [routing.md](./routing.md)). Request input + context are
+injected into the method via **parameter decorators** (`@Body`/`@Query`/`@Param`/
+`@User`/…), each piece direct — no `req` god-object. Services are reached via the
+imported singletons (see [services.md](./services.md)).
 
-## `defineEndpoint` config
+## A controller
 
 ```ts
-defineEndpoint({
-  method: "POST",                    // required: GET | POST | PUT | PATCH | DELETE
-  auth: { required: true },          // optional; see Auth below. Omitted → public.
-  rateLimit: { max: 100, window: 60 }, // optional: max requests per window seconds
-  input: z.object({ ... }),          // optional Zod schema → validates & types req.input
-  output: z.object({ ... }),         // optional Zod schema → validates the return value
-  errors: { ... },                   // optional declared errors (see errors.md)
-  middleware: [ ... ],               // optional Middleware[] (see below)
-  handler: async (req) => { ... },   // required
-});
+// controllers/rooms.controller.ts
+import { Controller, Get, Post, Returns, Body, Param, User, NotFound, Database } from "@palbase/backend";
+import type { UserT } from "@palbase/backend";
+import { CreateRoomBody } from "../models/rooms/create.js";
+import { RoomSchema } from "../models/rooms/shared.js";
+
+@Controller("/rooms")
+export default class RoomsController {
+  @Post("")
+  @Returns(RoomSchema)
+  async create(@Body(CreateRoomBody) body: CreateRoomBody, @User() user: UserT): Promise<RoomSchema> {
+    const room = await Database.insert("rooms", { name: body.name, capacity: body.capacity ?? null });
+    return { id: room.id as string, name: room.name as string, capacity: (room.capacity as number) ?? null };
+  }
+
+  @Get("/{id}")
+  @Returns(RoomSchema)
+  async getOne(@Param("id") id: string): Promise<RoomSchema> {
+    const room = await Database.findById("rooms", id);
+    if (!room) throw new NotFound("Room does not exist", "room_not_found");
+    return { id: room.id as string, name: room.name as string, capacity: (room.capacity as number) ?? null };
+  }
+}
+```
+
+## Method decorators
+
+`@Get`/`@Post`/`@Put`/`@Patch`/`@Delete` take `(subpath, options?)`:
+
+```ts
+interface RouteOptions {
+  auth?: boolean | { required?: boolean; role?: string };  // overrides controller default
+  rateLimit?: { max: number; window: number };             // optional, per route
+}
 ```
 
-## `req` (PBRequest)
+Input and output are NOT method-decorator options: input comes from the
+parameter decorators, output from the method's return type. The method decorator
+only carries route concerns (path, auth, rateLimit).
+
+## Parameter decorators
+
+| Decorator | Injects | Typed by | OpenAPI |
+|---|---|---|---|
+| `@Body(schema)` | request body | `: T` (`z.infer<schema>`, same name) | requestBody |
+| `@Query(schema)` | query params | `: T` | query parameters |
+| `@Param("id")` | one path param | `: string` | path parameter |
+| `@Headers(schema?)` | request headers | `Record<string,string>` (+ typed with schema) | header parameters |
+| `@User()` | authenticated user | `: UserT` | — (from token) |
+| `@OptionalUser()` | user, possibly anon | `: UserT \| null` | — |
+| `@Client()` | parsed client info | `: ClientInfo` | — |
+| `@RequestId()` / `@TraceId()` | correlation ids | `: string` | — |
+| `@Req()` | raw request (escape hatch) | `: PBRequest` | — |
+
+`@Body`/`@Query`/`@Headers` take a zod schema (validation + codegen source); the
+developer writes the matching type annotation (same name). `UserT` is the
+authenticated-user type (`{ id: string; email?: string; role: string; metadata:
+Record<string, unknown> }`) — exported under the alias `UserT` because the value
+name `User` is the `@User()` decorator.
 
-| Field | Type | Notes |
-|-------|------|-------|
-| `req.input` | inferred from `input` schema | request body for POST/PUT/PATCH; `{}` otherwise |
-| `req.params` | `Record<string,string>` | route params, e.g. `req.params.id` |
-| `req.query` | `Record<string,string>` | parsed query string |
-| `req.headers` | `Record<string,string>` | lowercase keys |
-| `req.user` | `User` when authenticated; `User \| null` when `auth` is omitted or `required: false` | see Auth below |
-| `req.client` | `ClientInfo` | calling SDK/app/platform/os version (all nullable) |
-| `req.file` | `FileContext \| null` | uploaded file, if any |
-| `req.method` | `string` | the HTTP method |
-| `req.requestId` / `req.traceId` / `req.spanId` | `string` | correlation ids |
-| `req.errors` | typed throwers | present when `errors` is declared (see errors.md) |
+## Output = return type
 
-`User` is `{ id: string; email: string; role: string; metadata: Record<string, unknown> }`.
+The success response is the method's RETURN TYPE. Pair it with `@Returns(schema)`
+so the zod value drives the OpenAPI 200 response (the type annotation drives
+compile-time checking; the zod value is lossless for codegen). A method that
+returns nothing annotates `: void`.
 
-## Auth
+## Auth — controller default + route override cascade
+
+**Secure by default:** a route requires authentication UNLESS it explicitly opts
+out. Resolution order (most specific wins):
+
+1. Route-level `@Post("", { auth })` — wins if present.
+2. Controller-level `@Controller("/x", { auth })` — applies to routes without
+   their own `auth`.
+3. Default `true` (secure-by-default).
 
 ```ts
-auth: { required: true }                // require any authenticated user → req.user is non-null User
-auth: { required: true, role: "admin" } // require a specific role
-auth: { required: false }               // public → req.user may be null
-// auth omitted entirely                 // also public → req.user is User | null
+@Controller("/public", { auth: false })          // all routes default public
+export default class PublicController {
+  @Get("/open") open(): Info { ... }              // inherits → public
+  @Get("/secret", { auth: true })                 // OVERRIDES → authed
+  secret(@User() u: UserT): Secret { ... }
+}
 ```
 
-Whether `req.user` is non-null is computed from the `auth` config at the type
-level:
+| effective `auth` | `@User()` type to annotate |
+|------------------|----------------------------|
+| required (omitted / `true` / `{ required: true }` / role-only) | `@User() u: UserT` |
+| public (`false` / `{ required: false }`) | `@OptionalUser() u: UserT \| null` |
 
-| `auth` value | `req.user` type |
-|--------------|-----------------|
-| omitted | `User \| null` |
-| `true` | `User` |
-| `false` | `User \| null` |
-| `{ required: true }` | `User` |
-| `{ required: false }` | `User \| null` |
-| `{ role: "admin" }` (object, no `required`) | `User` |
+The runtime always applies the resolved effective auth; the static type you
+annotate is best-effort (a parameter decorator cannot see the controller default
+at the type level).
 
-To enforce authentication, set `auth: { required: true }` (or `auth: true`). An
-object with a `role` but no `required` key is treated as authenticated. When
-`auth` is omitted, the endpoint is public and `req.user` may be null.
+## Errors — global throw classes
 
-## Typed input/output
+Throw an error class anywhere (controller OR service) — no `req`, no per-route
+map. The runtime catches it and emits the standard envelope:
 
 ```ts
-import { defineEndpoint, z, Database } from "@palbase/backend";
-
-export default defineEndpoint({
-  method: "POST",
-  auth: { required: true },
-  input: z.object({ name: z.string().min(1).max(100), capacity: z.number().int().positive().optional() }),
-  output: z.object({ id: z.string(), name: z.string(), capacity: z.number().nullable() }),
-  handler: async (req) => {
-    const room = await Database.insert("rooms", {
-      name: req.input.name,
-      capacity: req.input.capacity ?? null,
-    });
-    return { id: room.id as string, name: room.name as string, capacity: (room.capacity as number) ?? null };
-  },
-});
+import { Conflict, NotFound, BadRequest, Unauthorized, Forbidden, TooManyRequests, PalError } from "@palbase/backend";
+
+throw new Conflict("title taken");            // → 409
+throw new NotFound();                         // → 404 ("Not found")
+throw new PalError(418, "teapot", "custom");  // → custom status/code
 ```
 
+See [errors.md](./errors.md) for the full set + the wire envelope shape.
+
 ## Middleware
 
 A middleware wraps a request. Define one in `middleware/<name>.ts`:
@@ -97,20 +137,4 @@ export default defineMiddleware(async (ctx, next) => {
 ```
 
 The middleware handler receives `(ctx, next)` — call `await next()` to run the
-rest of the chain (other middleware, then the endpoint handler). Note this uses
-the `ctx` model, not `req`.
-
-To attach middleware to a specific endpoint, import it and list it in the
-endpoint's `middleware` array:
-
-```ts
-import { defineEndpoint, z } from "@palbase/backend";
-import logger from "../../middleware/logger.js";
-
-export default defineEndpoint({
-  method: "GET",
-  middleware: [logger],
-  output: z.object({ ok: z.boolean() }),
-  handler: async (req) => ({ ok: true }),
-});
-```
+rest of the chain (other middleware, then the endpoint method).