@palbase/backend 21.0.0 → 22.0.0

package/dist/engine/index.d.cts

@@ -1,4 +1,4 @@
-export { A as App, l as AuthVerifier, B as BootRefused, m as CreateAppOptions, E as EgressPolicy, n as EngineConfig, M as ModuleClients, o as RateLimiter, p as RequestDatabase, q as RouteEntry, r as RuntimeHooks, s as ScrubResult, t as SqlDriver, u as SqlTx, v as buildRouteTable, w as createApp, x as createLazyTransaction, y as createOps, z as createRequestDatabase, G as effectiveAuth, H as hostAllowed, I as installEgressFence, J as loadConfig, K as makeMemoryCache, O as matchRoute, Q as quoteIdent, T as scrubSecrets, U as withTables } from '../index-Br9P7yRu.cjs';
+export { A as App, l as AuthVerifier, B as BootRefused, m as CreateAppOptions, E as EgressPolicy, n as EngineConfig, M as ModuleClients, o as RateLimiter, p as RequestDatabase, q as RouteEntry, r as RuntimeHooks, s as ScrubResult, t as SqlDriver, u as SqlTx, v as buildRouteTable, w as createApp, x as createLazyTransaction, y as createOps, z as createRequestDatabase, G as effectiveAuth, H as hostAllowed, I as installEgressFence, J as loadConfig, K as makeMemoryCache, O as matchRoute, Q as quoteIdent, T as scrubSecrets, U as withTables } from '../index-B4W6d2VJ.cjs';
 import '../endpoint-B0LpZixz.cjs';
 import '../db/env.cjs';
 import 'node:async_hooks';

package/dist/engine/index.d.ts

@@ -1,4 +1,4 @@
-export { A as App, l as AuthVerifier, B as BootRefused, m as CreateAppOptions, E as EgressPolicy, n as EngineConfig, M as ModuleClients, o as RateLimiter, p as RequestDatabase, q as RouteEntry, r as RuntimeHooks, s as ScrubResult, t as SqlDriver, u as SqlTx, v as buildRouteTable, w as createApp, x as createLazyTransaction, y as createOps, z as createRequestDatabase, G as effectiveAuth, H as hostAllowed, I as installEgressFence, J as loadConfig, K as makeMemoryCache, O as matchRoute, Q as quoteIdent, T as scrubSecrets, U as withTables } from '../index-BeHLq2i-.js';
+export { A as App, l as AuthVerifier, B as BootRefused, m as CreateAppOptions, E as EgressPolicy, n as EngineConfig, M as ModuleClients, o as RateLimiter, p as RequestDatabase, q as RouteEntry, r as RuntimeHooks, s as ScrubResult, t as SqlDriver, u as SqlTx, v as buildRouteTable, w as createApp, x as createLazyTransaction, y as createOps, z as createRequestDatabase, G as effectiveAuth, H as hostAllowed, I as installEgressFence, J as loadConfig, K as makeMemoryCache, O as matchRoute, Q as quoteIdent, T as scrubSecrets, U as withTables } from '../index-BCNtlG1w.js';
 import '../endpoint-B0LpZixz.js';
 import '../db/env.js';
 import 'node:async_hooks';

package/dist/engine/index.js

@@ -16,7 +16,7 @@ import {
   quoteIdent,
   scrubSecrets,
   withTables
-} from "../chunk-PFQJYW6C.js";
+} from "../chunk-QYOHMVUW.js";
 import "../chunk-POYAFBLF.js";
 import "../chunk-W5ODXPY3.js";
 import "../chunk-QMVK4X3V.js";

package/dist/{index-Br9P7yRu.d.cts → index-B4W6d2VJ.d.cts}

@@ -304,6 +304,20 @@ interface EngineConfig {
     /** Base URL of the module surface (`/v1/*`, `/auth/*`). Empty ⇒ module
      * singletons throw a named error on first use rather than silently no-op. */
     moduleBaseUrl: string;
+    /**
+     * The address CLIENTS reach this stack at — `https://<ref>.palbase.studio` in
+     * the cloud, whatever domain the certificate is for when self-hosted.
+     *
+     * NOT `moduleBaseUrl`, and the distinction is the whole point: that one is
+     * this process's internal route to palsvc (`http://127.0.0.1:8080`), which
+     * resolves nowhere outside the pod. A public object URL has to survive
+     * leaving the response body, so it cannot be built from the internal one.
+     *
+     * Only the operator knows this value, so only the operator sets it
+     * (`PALBASE_PUBLIC_ORIGIN`). Empty ⇒ `Storage…getPublicUrl()` throws a named
+     * error, the same way an unconfigured module does.
+     */
+    publicOrigin: string;
     /** Shared secret storage signs its internal upload calls with. Empty means
      * uploads are not wired, and those calls are refused. */
     uploadSecret: string;

package/dist/{index-BeHLq2i-.d.ts → index-BCNtlG1w.d.ts}

@@ -304,6 +304,20 @@ interface EngineConfig {
     /** Base URL of the module surface (`/v1/*`, `/auth/*`). Empty ⇒ module
      * singletons throw a named error on first use rather than silently no-op. */
     moduleBaseUrl: string;
+    /**
+     * The address CLIENTS reach this stack at — `https://<ref>.palbase.studio` in
+     * the cloud, whatever domain the certificate is for when self-hosted.
+     *
+     * NOT `moduleBaseUrl`, and the distinction is the whole point: that one is
+     * this process's internal route to palsvc (`http://127.0.0.1:8080`), which
+     * resolves nowhere outside the pod. A public object URL has to survive
+     * leaving the response body, so it cannot be built from the internal one.
+     *
+     * Only the operator knows this value, so only the operator sets it
+     * (`PALBASE_PUBLIC_ORIGIN`). Empty ⇒ `Storage…getPublicUrl()` throws a named
+     * error, the same way an unconfigured module does.
+     */
+    publicOrigin: string;
     /** Shared secret storage signs its internal upload calls with. Empty means
      * uploads are not wired, and those calls are refused. */
     uploadSecret: string;

package/dist/index.cjs

@@ -1658,7 +1658,7 @@ function mapResponse(res, map) {
   }
   return { data: map(res.data), error: null, status: res.status };
 }
-function buildBucketClient(http, bucketName) {
+function buildBucketClient(http, bucketName, publicOrigin) {
   const objectPath = (path) => `/v1/storage/object/${bucketName}/${path}`;
   return {
     async upload(path, file, options) {
@@ -1681,7 +1681,12 @@ function buildBucketClient(http, bucketName) {
     getPublicUrl(path, options) {
       validateStoragePath(path);
       const variant = options?.variant ? `?variant=${encodeURIComponent(options.variant)}` : "";
-      return `/v1/files/${bucketName}/${path}${variant}`;
+      if (!publicOrigin) {
+        throw new Error(
+          `Storage.bucket("${bucketName}").getPublicUrl() needs this stack's public origin, and it was not configured. Set PALBASE_PUBLIC_ORIGIN to the address clients reach this stack at (e.g. https://myproject.palbase.studio).`
+        );
+      }
+      return `${publicOrigin}/v1/files/${bucketName}/${path}${variant}`;
     },
     async createSignedUrl(path, options) {
       validateStoragePath(path);
@@ -1723,13 +1728,13 @@ function buildBucketClient(http, bucketName) {
     }
   };
 }
-function buildStorageClient(http) {
+function buildStorageClient(http, publicOrigin) {
   return {
     bucket(name) {
       if (!BUCKET_NAME_RE.test(name)) {
         throw new Error(`Invalid bucket name: "${name}". Bucket names must match ${BUCKET_NAME_RE.source}`);
       }
-      return buildBucketClient(http, name);
+      return buildBucketClient(http, name, publicOrigin.replace(/\/+$/, ""));
     }
   };
 }
@@ -1742,7 +1747,7 @@ function buildModuleClients(cfg) {
   const http = makeHttpClient({ baseUrl, apiKey, fetchImpl: cfg.fetchImpl });
   return {
     Documents: buildDocumentsClient(http),
-    Storage: buildStorageClient(http),
+    Storage: buildStorageClient(http, cfg.publicOrigin),
     Notifications: buildNotificationsClient(http),
     Flags: buildFlagsClient(http, { getCurrentUserId: cfg.getCurrentUserId }),
     Realtime: buildRealtimeClient({