@palbase/backend 22.1.0 → 23.1.0

package/dist/openapi/index.cjs

@@ -5857,27 +5857,7 @@ var BUILTIN_DATA_SCHEMAS = {
   bad_request: import_zod.z.object({
     fields: import_zod.z.array(import_zod.z.object({ field: import_zod.z.string(), message: import_zod.z.string() }))
   }),
-  too_many_requests: import_zod.z.object({ retryAfter: import_zod.z.number().int() }),
-  // Purchases (@RequireEntitlement / @Spend). Their payloads are what make a
-  // paywall renderable on the client: WHICH entitlement was missing, and for a
-  // spend the real ceiling and reset time rather than a guessed retry delay.
-  entitlement_required: import_zod.z.object({ entitlement: import_zod.z.string().nullable() }),
-  quota_exceeded: import_zod.z.object({
-    key: import_zod.z.string(),
-    scope: import_zod.z.string(),
-    window: import_zod.z.string(),
-    used: import_zod.z.number().int(),
-    reserved: import_zod.z.number().int(),
-    max: import_zod.z.number().int(),
-    remaining: import_zod.z.number().int(),
-    resetAt: import_zod.z.string()
-  }),
-  credit_insufficient: import_zod.z.object({
-    key: import_zod.z.string(),
-    balance: import_zod.z.number().int(),
-    reserved: import_zod.z.number().int(),
-    remaining: import_zod.z.number().int()
-  })
+  too_many_requests: import_zod.z.object({ retryAfter: import_zod.z.number().int() })
 };
 function getErrorRegistry() {
   const g = globalThis;
@@ -5889,13 +5869,7 @@ function getErrorRegistry() {
       ["forbidden", 403, "Forbidden"],
       ["not_found", 404, "NotFound"],
       ["conflict", 409, "Conflict"],
-      ["too_many_requests", 429, "TooManyRequests"],
-      // Thrown by the purchases decorators, so they are pre-seeded like the
-      // other built-ins: a project never declares them, but every gated or
-      // metered route must surface them as TYPED errors on the client.
-      ["entitlement_required", 403, "EntitlementRequired"],
-      ["quota_exceeded", 429, "QuotaExceeded"],
-      ["credit_insufficient", 429, "CreditInsufficient"]
+      ["too_many_requests", 429, "TooManyRequests"]
     ]) {
       const dataSchema = BUILTIN_DATA_SCHEMAS[code];
       m.set(code, {
@@ -5994,32 +5968,6 @@ function resolveController(ctor) {
   return meta;
 }
 
-// src/purchases/registry.ts
-var ENTITLEMENTS = /* @__PURE__ */ Symbol.for("palbase.backend.purchases.entitlements");
-var SPENDS = /* @__PURE__ */ Symbol.for("palbase.backend.purchases.spends");
-function carrierOf2(target) {
-  return typeof target === "function" ? target : target.constructor ?? target;
-}
-function entitlementFor(ctor, fnName) {
-  return carrierOf2(ctor)[ENTITLEMENTS]?.[fnName];
-}
-function spendFor(ctor, fnName) {
-  return carrierOf2(ctor)[SPENDS]?.[fnName];
-}
-
-// src/purchases/openapi.ts
-function purchaseThrows(ctor, fnName) {
-  const out = [];
-  if (entitlementFor(ctor, fnName) !== void 0) {
-    out.push({ name: "EntitlementRequired", code: "entitlement_required" });
-  }
-  if (spendFor(ctor, fnName) !== void 0) {
-    out.push({ name: "QuotaExceeded", code: "quota_exceeded" });
-    out.push({ name: "CreditInsufficient", code: "credit_insufficient" });
-  }
-  return out;
-}
-
 // src/openapi/discover.ts
 function capitalizeSegment(s) {
   if (s.length === 0) return s;
@@ -6066,6 +6014,20 @@ function flattenController(controller) {
   const meta = resolveController(controller);
   const controllerName = deriveControllerName(controller.name);
   const routes = getRoutes(controller);
+  const kindsByMethod = /* @__PURE__ */ new Map();
+  for (const route of routes) {
+    const seen = kindsByMethod.get(route.fnName) ?? { sse: false, upload: false };
+    if (route.options.sseConfig !== void 0) seen.sse = true;
+    if (route.options.uploadConfig !== void 0) seen.upload = true;
+    kindsByMethod.set(route.fnName, seen);
+  }
+  for (const [fnName, seen] of kindsByMethod) {
+    if (seen.sse && seen.upload) {
+      throw new Error(
+        `${controller.name}.${fnName} declares BOTH @Sse and @Upload. One method cannot be both a streaming response and an upload completion handler \u2014 the two describe the same handler twice and the second one read silently wins. Split them into two methods.`
+      );
+    }
+  }
   const out = [];
   for (const route of routes) {
     const fullPath = joinControllerPath(meta.basePath, route.subpath);
@@ -6090,11 +6052,9 @@ function flattenController(controller) {
           break;
       }
     }
-    const purchases = purchaseThrows(controller, route.fnName);
     const seen = new Set((route.throws ?? []).map((t) => t.code));
     const allThrows = [
-      ...route.throws ?? [],
-      ...purchases.filter((t) => !seen.has(t.code))
+      ...route.throws ?? []
     ];
     out.push({
       method: route.method,
@@ -6108,7 +6068,8 @@ function flattenController(controller) {
       ...route.returnSchema !== void 0 ? { returnSchema: route.returnSchema } : {},
       ...route.options.rateLimit !== void 0 ? { rateLimit: route.options.rateLimit } : {},
       ...allThrows.length > 0 ? { throws: allThrows } : {},
-      ...route.options.uploadConfig !== void 0 ? { uploadConfig: route.options.uploadConfig } : {}
+      ...route.options.uploadConfig !== void 0 ? { uploadConfig: route.options.uploadConfig } : {},
+      ...route.options.sseConfig !== void 0 ? { sseConfig: route.options.sseConfig } : {}
     });
   }
   return out;
@@ -6206,7 +6167,8 @@ function registerControllerRoute(registry, route) {
     returnSchema: route.returnSchema,
     effectiveAuth: route.effectiveAuth,
     throws: route.throws,
-    ...route.uploadConfig !== void 0 ? { uploadConfig: route.uploadConfig } : {}
+    ...route.uploadConfig !== void 0 ? { uploadConfig: route.uploadConfig } : {},
+    ...route.sseConfig !== void 0 ? { sseConfig: route.sseConfig } : {}
   });
 }
 function registerOperation(registry, op) {
@@ -6227,7 +6189,11 @@ function registerOperation(registry, op) {
       description: "Success",
       content: {
         "application/json": {
-          schema: op.returnSchema !== void 0 ? op.returnSchema : import_zod2.z.unknown()
+          // A streaming operation's response is ONE FRAME, and its schema is the
+          // declared frame — not the handler's return type, which is void. Without
+          // this the document describes an untyped response and every generated
+          // client is opaque (measured live: the contract gate refuses the deploy).
+          schema: op.sseConfig !== void 0 ? op.sseConfig.frame : op.returnSchema !== void 0 ? op.returnSchema : import_zod2.z.unknown()
         }
       }
     },
@@ -6274,7 +6240,12 @@ function registerOperation(registry, op) {
         bucket: op.uploadConfig.bucket,
         pathTemplate: op.uploadConfig.pathTemplate
       }
-    } : {}
+    } : {},
+    // Without this extension the document describes a streaming route as a
+    // plain POST, and every client generated from it reads the body ONCE
+    // instead of iterating frames — a generated client that compiles, runs and
+    // is simply wrong. Same failure class as the upload extension above.
+    ...op.sseConfig !== void 0 ? { "x-palbase-sse": {} } : {}
   });
 }
 function resolveThrows(throws) {