@palbase/backend 23.0.0 → 24.0.0

package/dist/db/index.d.cts

@@ -1,5 +1,5 @@
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, S as SchemaDef, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from '../index-Bmvx1EvJ.cjs';
-export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, f as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, br as dec, bt as inc, bu as now } from '../endpoint-i8TTCohk.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, S as SchemaDef, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from '../index-D-4-PNuQ.cjs';
+export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, bs as dec, bu as inc, bv as now } from '../endpoint-CcQ1a36a.cjs';
 import './env.cjs';
 import '../stack.cjs';
 import 'zod';

package/dist/db/index.d.ts

@@ -1,5 +1,5 @@
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, S as SchemaDef, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from '../index-B3jmmItD.js';
-export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, f as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, br as dec, bt as inc, bu as now } from '../endpoint-BavvbW4P.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, S as SchemaDef, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from '../index-CJiJU9ux.js';
+export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, bs as dec, bu as inc, bv as now } from '../endpoint-0_DGBajf.js';
 import './env.js';
 import '../stack.js';
 import 'zod';

package/dist/db/index.js

@@ -17,14 +17,14 @@ import {
   timestamp,
   uuid,
   vector
-} from "../chunk-HAF67F2H.js";
+} from "../chunk-ZUGY7RGS.js";
 import {
   TxPlanError,
   TxRefError,
   dec,
   inc,
   now
-} from "../chunk-W5ODXPY3.js";
+} from "../chunk-P2Q27SGP.js";
 import "../chunk-7D4SUZUM.js";
 export {
   EXTENSION_DEPENDENCIES,

package/dist/{endpoint-BavvbW4P.d.ts → endpoint-0_DGBajf.d.ts}

@@ -142,7 +142,7 @@ declare function defineMiddleware(fn: MiddlewareHandler): MiddlewareHandler;
  * # Wire contract
  *
  * The JSON this file emits is consumed by
- * `modules/backend/internal/management/tx_program.go`. That decoder rejects
+ * the plan executor in `engine/db.ts`. That executor rejects
  * unknown fields at every level, so an op carries EXACTLY the fields its kind
  * takes. Everything here that looks like a needless restriction is one of the
  * server's rules made visible early:
@@ -206,7 +206,12 @@ interface TxWireGuard {
 /** One operation in the wire plan. Fields are omitted, never null: the decoder
  * rejects a field that does not belong to the op's kind. */
 interface TxWireOp {
-    op: "insert" | "insertMany" | "update" | "delete" | "select";
+    /** upsert and insertMany: the columns Postgres matches on. */
+    onConflict?: readonly string[];
+    /** insertMany only: what a collision does. Absent means no ON CONFLICT clause
+     * at all, which is what every insertMany did before this option existed. */
+    action?: "ignore" | "update";
+    op: "insert" | "insertMany" | "upsert" | "update" | "delete" | "select";
     table: string;
     values?: Record<string, TxWireValue>;
     rows?: Record<string, TxWireValue>[];
@@ -387,7 +392,36 @@ interface TxTable<Row, Insert> {
      *
      * An empty list writes nothing and sends nothing.
      */
-    insertMany(rows: readonly TxInsertShape<Insert>[]): TxRows<Row>;
+    /**
+     * Insert many rows in ONE statement, optionally choosing what a collision does.
+     *
+     * Without `opts` this is a plain multi-row INSERT and a collision aborts the
+     * transaction — the behaviour every call had before the option existed.
+     *
+     * `action: "ignore"` emits `ON CONFLICT DO NOTHING`, which is how "insert the
+     * ones that are new" becomes one round-trip instead of one per row with a
+     * 23505 caught around each. **The returned rows are the ones actually
+     * INSERTED**: a row that collided is skipped, so it is absent from the result
+     * — Postgres does not return what it did not write.
+     *
+     * `action: "update"` emits `ON CONFLICT DO UPDATE`, setting every non-conflict
+     * column from the incoming row, and every row comes back.
+     */
+    insertMany(rows: readonly TxInsertShape<Insert>[], opts?: {
+        onConflict: readonly Extract<keyof Row, string>[];
+        action?: "ignore" | "update";
+    }): TxRows<Row>;
+    /**
+     * Insert the row, or update it when it collides on `onConflict` — inside the
+     * plan's savepoint, with the same meaning `tables.<t>.upsert()` has outside it.
+     *
+     * It is an operation because the alternative is not writable here: a failed
+     * insert aborts the whole transaction, so "try, then fall back" cannot be two
+     * plan steps.
+     */
+    upsert(values: TxInsertShape<Insert>, options: {
+        onConflict: readonly Extract<keyof Row, string>[];
+    }): TxRows<Row>;
     /**
      * Update every row matching `where`. The filter comes first because it is the
      * dangerous half: an update whose `where` you got wrong rewrites rows you
@@ -512,6 +546,57 @@ declare class NotFound extends NamedHttpError {
 declare class Conflict extends NamedHttpError {
     constructor(message?: string, code?: string, data?: unknown);
 }
+/**
+ * 409 — a write was refused because it would duplicate an existing row.
+ * Carries the NAME of the unique constraint Postgres named (`users_email_key`).
+ *
+ * The engine produces it: a statement rejected with SQLSTATE `23505` is
+ * converted here rather than surfacing as an opaque driver error (see
+ * `engine/db.ts`, `diagnosingDriver`). What that removes is the string match —
+ * before this, the only way to act on a duplicate was to test the driver
+ * message for "duplicate key value violates unique constraint", a contract
+ * nobody signed that breaks on a Postgres upgrade, a locale, or a constraint
+ * rename, silently and in production.
+ *
+ * THE NAME IS A FIELD AND STAYS OUT OF THE DEFAULT MESSAGE. The two are not
+ * the same audience. `constraint` is read by the code that catches this — the
+ * developer, who already knows the schema. `errorDescription` is the HTTP
+ * response body, and an UNCAUGHT duplicate puts it in front of the
+ * application's end user: `users_email_key` there discloses how the schema is
+ * built to whoever sent the request. The platform's own data API took the same
+ * decision one surface over and wrote down why —
+ * `v2/internal/modules/database/internal/handler/pgerror.go:83-87` collapses
+ * every 23xxx to a generic conflict, "never disclose the constraint/column
+ * name". A thrower who WANTS the name on the wire passes it deliberately
+ * (`new UniqueViolation(c, \`\${c} already exists\`)`, or through `data`).
+ *
+ * @example
+ * try {
+ *   await Database.tables.users.insert({ email });
+ * } catch (e) {
+ *   if (UniqueViolation.is(e) && e.constraint === "users_email_key") {
+ *     throw new Conflict("That email is taken", "email_taken");
+ *   }
+ *   throw e;
+ * }
+ */
+declare class UniqueViolation extends Conflict {
+    /**
+     * Whether `e` is a unique violation — REGARDLESS of which copy of this SDK
+     * constructed it.
+     *
+     * Use this instead of `instanceof`. Measured on a live stack: a controller
+     * bundle INLINES its own copy of `@palbase/backend`, and the engine that
+     * raises this error is the runtime's copy. Two copies, two class identities,
+     * and `e instanceof UniqueViolation` is false in the one place a caller
+     * writes it — a check that reads as correct and silently never matches.
+     */
+    static is(e: unknown): e is UniqueViolation;
+    /** The unique constraint the statement violated, as Postgres named it.
+     * `""` when the driver did not say which — see `engine/db.ts`. */
+    readonly constraint: string;
+    constructor(constraint: string, message?: string, code?: string, data?: unknown);
+}
 /** A single field-level validation failure carried by {@link BadRequest}. */
 interface FieldError {
     /** The offending field's name (dotted path for nested fields). */
@@ -1546,6 +1631,13 @@ interface PalbaseFlagsClient {
 /**
  * Realtime broadcast surface (backend handler → subscribed clients).
  *
+ * **Every channel must be DECLARED, or the join is refused.** Channel names are
+ * not free text: `channels.ts` at the project root publishes which names exist
+ * and who may subscribe, publish, or write state, and a client joining a name no
+ * declaration matches is rejected without ever reaching your code. Declare with
+ * `ownerOnly()`, `publicChannel()`, or a custom `authorize(ctx)` — see
+ * {@link defineChannels}. Broadcasting to an undeclared channel reaches nobody.
+ *
  * Backend-side this is BROADCAST-ONLY: a handler pushes an event to a channel
  * and every client subscribed to that channel (via the client SDK's
  * `pb.realtime.channel(...).on(...)`) receives it. There is no `subscribe()` on
@@ -1554,9 +1646,10 @@ interface PalbaseFlagsClient {
  * once the broadcast is accepted (or with an `error` if it could not be sent),
  * but it never blocks the handler waiting on subscribers.
  *
- * Channel naming is app-defined and arbitrary (e.g. `"room:42"`, `"orders"`).
- * The Palbase-managed `flags:<ref>` channels are internal — author channels for
- * your own features.
+ * Channel names are yours to choose (e.g. `"room:42"`, `"orders"`) but not yours
+ * to leave undeclared: each must match a pattern in `channels.ts`, which is where
+ * `"room:{roomId}"` is authorized. The Palbase-managed `flags:<ref>` channels are
+ * internal — author channels for your own features.
  *
  * @example
  * // Notify everyone in a chat room that a message landed:
@@ -1816,9 +1909,36 @@ interface RateLimitConfig {
 /** The six raw string-keyed DB operations shared by `DBClient` and the
  * transaction-scoped client. */
 interface DBOps {
-    /** Run a read-only SQL query (executes in a READ ONLY transaction). */
+    /**
+     * Run SQL on the REQUEST'S OWN transaction.
+     *
+     * This is **not** read-only. Nothing marks that transaction `READ ONLY`, so a
+     * write passed here executes and commits with the request — a plain `UPDATE`, a
+     * write hidden in a CTE, or a function that writes. What stands between a
+     * statement and your data is RLS and the role the request runs as, exactly as
+     * for every other operation on this client.
+     *
+     * `INSERT … ON CONFLICT DO UPDATE` therefore works here; `tables.<t>.upsert()`
+     * is the same thing with types. Array parameters are encoded as Postgres array
+     * literals, so `= ANY($1::uuid[])` takes a plain JS array.
+     *
+     * This comment used to claim a `READ ONLY` transaction. It was wrong, and the
+     * cost was measured: a tenant read it, concluded an upsert was impossible from
+     * here, abandoned `ON CONFLICT` and wrote a database trigger instead.
+     */
     query(sql: string, params?: unknown[]): Promise<Record<string, unknown>[]>;
     insert(table: string, data: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /**
+     * Insert the row, or update it when it collides on `onConflict` — one
+     * statement, so two concurrent callers cannot both lose.
+     *
+     * Read-then-write cannot be made safe here by catching the unique violation: a
+     * request runs in one transaction, so the failed insert aborts it and every
+     * later statement answers `current transaction is aborted`.
+     */
+    upsert(table: string, data: Record<string, unknown>, opts: {
+        onConflict: readonly string[];
+    }): Promise<Record<string, unknown>>;
     /**
      * Update the row with the given id and resolve to the updated row, or `null`
      * if no row matched (the id is absent, or the row is hidden by RLS). This is
@@ -1862,7 +1982,26 @@ interface DBOps {
     /** Validity'li tabloda satırın yeni versiyonu — eski kapanır (valid_to/superseded_by),
      * yenisi eklenir; TEK savepoint, dönüş yeni satır (FR-029, C-9). */
     supersede(table: string, id: string, row: Record<string, unknown>): Promise<Record<string, unknown>>;
-    findMany(table: string, query?: Record<string, unknown>): Promise<Record<string, unknown>[]>;
+    /** Filtre + sıralama + sayfa. `offset` yalnız `limit` ile birlikte geçerlidir
+     * (limitsiz offset sayfa değildir; motor adıyla reddeder — FR-004). */
+    /** Update every row the filter matches, in one statement; resolves to them.
+     * An EMPTY filter is refused — a whole-table write is not something to reach
+     * by accident. */
+    updateMany(table: string, where: Record<string, unknown>, set: Record<string, unknown>): Promise<Record<string, unknown>[]>;
+    /** Delete every row the filter matches; resolves to how many. Empty filter
+     * refused, for the same reason and more so. */
+    deleteMany(table: string, where: Record<string, unknown>): Promise<number>;
+    /** How many rows match — the half of pagination limit/offset cannot supply.
+     * An empty filter is legitimate here: counting is a read. */
+    count(table: string, where?: Record<string, unknown>): Promise<number>;
+    findMany(table: string, query?: Record<string, unknown>, opts?: {
+        orderBy?: {
+            column: string;
+            direction?: "asc" | "desc";
+        };
+        limit?: number;
+        offset?: number;
+    }): Promise<Record<string, unknown>[]>;
     /** "Bu satıra benzer satırlar" (FR-022) — satır-modunda kolon vektörüyle,
      * chunk-modunda chunk-ortalamasıyla; kendisi hariç. */
     similar(table: string, id: string, opts?: {
@@ -1878,6 +2017,18 @@ interface DBOps {
             weight: number;
         };
     }): Promise<Record<string, unknown>[]>;
+    /** D-021 (FR-027): kolon sayaçları bağımsız dönüşle — search'ün dizi-üstü
+     * `_facets` özelliği serileşmede kaybolur; ciddi sözleşme budur. */
+    facets(table: string, params: {
+        facets: string[];
+        where?: Record<string, unknown>;
+        validity?: "all" | {
+            asOf: string;
+        };
+    }): Promise<Record<string, {
+        value: string | null;
+        count: number;
+    }[]>>;
     /** Çok-örnekli öneri (FR-023): avg(pos) + (avg(pos) − avg(neg)); positive'ler sonuç dışı. */
     recommend(table: string, opts: {
         positive: string[];
@@ -1913,6 +2064,14 @@ interface DBClient extends DBOps {
      * `.expectOne(…)`; without it a declared expectation degrades to a generic 409.
      */
     txPlan(plan: TxPlanBody): Promise<TxPlanResponse>;
+    /**
+     * Run `fn` inside a SAVEPOINT on this request's transaction, so a failure in
+     * it rolls back only what `fn`'s handle wrote.
+     *
+     * The handle is a PARAMETER on purpose: an ambient swap would capture writes
+     * a concurrent `Promise.all` branch made outside the boundary.
+     */
+    attempt<T>(fn: (tx: DBOps) => Promise<T>): Promise<T>;
     /**
      * Return a sibling DB client that bypasses Row-Level Security by running as
      * the `service_role` (BYPASSRLS). Use sparingly and explicitly — the default
@@ -2213,4 +2372,4 @@ type Middleware = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise
  */
 type AuthSpec = boolean | Partial<AuthConfig>;
 
-export { type PalbaseCreateLinkParams as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseAttestiOSParams as G, HttpError as H, type PalbaseAttestiOSResult as I, type PalbaseAuthClient as J, type PalbaseBatchOverrideOperation as K, type Logger as L, type Materialized as M, NotFound as N, type PalbaseBatchSetOverridesResult as O, type PalbaseDocsClient as P, type PalbaseBindDeviceParams as Q, type RateLimitConfig as R, type SecretsService as S, type TxPlanBody as T, type PalbaseClearAllOverridesResult as U, type PalbaseClearOverrideResult as V, type PalbaseCohortQueryInput as W, type PalbaseCohortResult as X, type PalbaseCollectionRef as Y, type PalbaseCountQueryInput as Z, type PalbaseCountResult as _, type PalbaseFlagsClient as a, type PalbaseVerifyRequestSignatureParams as a$, type PalbaseDeviceInfo as a0, type PalbaseDeviceTokenView as a1, type PalbaseDocumentRef as a2, type PalbaseDocumentSnapshot as a3, type PalbaseEmailClient as a4, type PalbaseEmailSendParams as a5, type PalbaseEmailSendResponse as a6, type PalbaseEventNamesResult as a7, type PalbaseEventsQueryInput as a8, type PalbaseEventsResult as a9, type PalbaseMatchParams as aA, type PalbaseMultiChannelResponse as aB, type PalbaseOverviewResult as aC, type PalbasePreferences as aD, type PalbasePreferencesClient as aE, type PalbasePushClient as aF, type PalbasePushSendParams as aG, type PalbasePushSendResponse as aH, type PalbaseQrCodeOptions as aI, type PalbaseQuerySnapshot as aJ, type PalbaseRegisterDeviceParams as aK, type PalbaseRetentionQueryInput as aL, type PalbaseRetentionResult as aM, type PalbaseSession as aN, type PalbaseSetOverrideResult as aO, type PalbaseSetOverridesResult as aP, type PalbaseSignedUrlResponse as aQ, type PalbaseSmsClient as aR, type PalbaseSmsSendParams as aS, type PalbaseSmsSendResponse as aT, type PalbaseTransformOptions as aU, type PalbaseUpdateLinkParams as aV, type PalbaseUploadOptions as aW, type PalbaseUser as aX, type PalbaseUserDetailResult as aY, type PalbaseUsersQueryInput as aZ, type PalbaseUsersResult as a_, type PalbaseFileObject as aa, type PalbaseFlag as ab, type PalbaseFlagContext as ac, type PalbaseFlagSource as ad, type PalbaseFlagValue as ae, type PalbaseFlagVariant as af, type PalbaseFlagsServiceClient as ag, type PalbaseFunctionsClient as ah, type PalbaseFunnelQueryInput as ai, type PalbaseFunnelResult as aj, type PalbaseIdentifyTraits as ak, type PalbaseInboxClient as al, type PalbaseInboxListOptions as am, type PalbaseInboxListResult as an, type PalbaseInboxMessage as ao, type PalbaseInboxSendParams as ap, type PalbaseInboxSendResponse as aq, type PalbaseInitialLink as ar, type PalbaseInvokeOptions as as, type PalbaseLink as at, type PalbaseLinkAnalytics as au, type PalbaseLinkDetails as av, type PalbaseLinksClient as aw, type PalbaseListLinksOptions as ax, type PalbaseListLinksResult as ay, type PalbaseListOptions as az, type PalbaseNotificationsClient as b, type PalbaseWhereOperator as b0, type Ref as b1, TooManyRequests as b2, type TxColumnExpr as b3, type TxInsertShape as b4, type TxInsertValue as b5, type TxNow as b6, TxPlanError as b7, type TxPlanHandle as b8, type TxPlanOpResult as b9, type TxPlanRejection as ba, TxRefError as bb, type TxRow as bc, type TxRows as bd, type TxSelectOptions as be, type TxSetShape as bf, type TxSetValue as bg, type TxTable as bh, type TxWhere as bi, type TxWireExpr as bj, type TxWireGuard as bk, type TxWireOp as bl, type TxWireRef as bm, type TxWireValue as bn, Unauthorized as bo, type User as bp, type VerifiedDevice as bq, dec as br, defineMiddleware as bs, inc as bt, now as bu, type PalbaseRealtimeClient as c, type PalbaseStorageClient as d, type PalbaseBucketClient as e, type TxPlanResponse as f, type PalbaseResult as g, type AuthConfig as h, type ClientInfo as i, Conflict as j, type DBOps as k, type ErrorMap as l, type ErrorThrowers as m, Forbidden as n, type HttpMethod as o, type Middleware as p, type MiddlewareContext as q, type MiddlewareHandler as r, type PBRequest as s, PalError as t, type PalbaseAnalyticsClient as u, type PalbaseAnalyticsManagementNamespace as v, type PalbaseAnalyticsProperties as w, type PalbaseAnalyticsQueryNamespace as x, type PalbaseAttestAndroidParams as y, type PalbaseAttestAndroidResult as z };
+export { type PalbaseCreateLinkParams as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseAttestiOSParams as G, HttpError as H, type PalbaseAttestiOSResult as I, type PalbaseAuthClient as J, type PalbaseBatchOverrideOperation as K, type Logger as L, type Materialized as M, NotFound as N, type PalbaseBatchSetOverridesResult as O, type PalbaseDocsClient as P, type PalbaseBindDeviceParams as Q, type RateLimitConfig as R, type SecretsService as S, type TxPlanBody as T, type PalbaseClearAllOverridesResult as U, type PalbaseClearOverrideResult as V, type PalbaseCohortQueryInput as W, type PalbaseCohortResult as X, type PalbaseCollectionRef as Y, type PalbaseCountQueryInput as Z, type PalbaseCountResult as _, type PalbaseFlagsClient as a, type PalbaseVerifyRequestSignatureParams as a$, type PalbaseDeviceInfo as a0, type PalbaseDeviceTokenView as a1, type PalbaseDocumentRef as a2, type PalbaseDocumentSnapshot as a3, type PalbaseEmailClient as a4, type PalbaseEmailSendParams as a5, type PalbaseEmailSendResponse as a6, type PalbaseEventNamesResult as a7, type PalbaseEventsQueryInput as a8, type PalbaseEventsResult as a9, type PalbaseMatchParams as aA, type PalbaseMultiChannelResponse as aB, type PalbaseOverviewResult as aC, type PalbasePreferences as aD, type PalbasePreferencesClient as aE, type PalbasePushClient as aF, type PalbasePushSendParams as aG, type PalbasePushSendResponse as aH, type PalbaseQrCodeOptions as aI, type PalbaseQuerySnapshot as aJ, type PalbaseRegisterDeviceParams as aK, type PalbaseRetentionQueryInput as aL, type PalbaseRetentionResult as aM, type PalbaseSession as aN, type PalbaseSetOverrideResult as aO, type PalbaseSetOverridesResult as aP, type PalbaseSignedUrlResponse as aQ, type PalbaseSmsClient as aR, type PalbaseSmsSendParams as aS, type PalbaseSmsSendResponse as aT, type PalbaseTransformOptions as aU, type PalbaseUpdateLinkParams as aV, type PalbaseUploadOptions as aW, type PalbaseUser as aX, type PalbaseUserDetailResult as aY, type PalbaseUsersQueryInput as aZ, type PalbaseUsersResult as a_, type PalbaseFileObject as aa, type PalbaseFlag as ab, type PalbaseFlagContext as ac, type PalbaseFlagSource as ad, type PalbaseFlagValue as ae, type PalbaseFlagVariant as af, type PalbaseFlagsServiceClient as ag, type PalbaseFunctionsClient as ah, type PalbaseFunnelQueryInput as ai, type PalbaseFunnelResult as aj, type PalbaseIdentifyTraits as ak, type PalbaseInboxClient as al, type PalbaseInboxListOptions as am, type PalbaseInboxListResult as an, type PalbaseInboxMessage as ao, type PalbaseInboxSendParams as ap, type PalbaseInboxSendResponse as aq, type PalbaseInitialLink as ar, type PalbaseInvokeOptions as as, type PalbaseLink as at, type PalbaseLinkAnalytics as au, type PalbaseLinkDetails as av, type PalbaseLinksClient as aw, type PalbaseListLinksOptions as ax, type PalbaseListLinksResult as ay, type PalbaseListOptions as az, type PalbaseNotificationsClient as b, type PalbaseWhereOperator as b0, type Ref as b1, TooManyRequests as b2, type TxColumnExpr as b3, type TxInsertShape as b4, type TxInsertValue as b5, type TxNow as b6, TxPlanError as b7, type TxPlanHandle as b8, type TxPlanOpResult as b9, type TxPlanRejection as ba, TxRefError as bb, type TxRow as bc, type TxRows as bd, type TxSelectOptions as be, type TxSetShape as bf, type TxSetValue as bg, type TxTable as bh, type TxWhere as bi, type TxWireExpr as bj, type TxWireGuard as bk, type TxWireOp as bl, type TxWireRef as bm, type TxWireValue as bn, Unauthorized as bo, UniqueViolation as bp, type User as bq, type VerifiedDevice as br, dec as bs, defineMiddleware as bt, inc as bu, now as bv, type PalbaseRealtimeClient as c, type PalbaseStorageClient as d, type PalbaseBucketClient as e, type DBOps as f, type TxPlanResponse as g, type PalbaseResult as h, type AuthConfig as i, type ClientInfo as j, Conflict as k, type ErrorMap as l, type ErrorThrowers as m, Forbidden as n, type HttpMethod as o, type Middleware as p, type MiddlewareContext as q, type MiddlewareHandler as r, type PBRequest as s, PalError as t, type PalbaseAnalyticsClient as u, type PalbaseAnalyticsManagementNamespace as v, type PalbaseAnalyticsProperties as w, type PalbaseAnalyticsQueryNamespace as x, type PalbaseAttestAndroidParams as y, type PalbaseAttestAndroidResult as z };

package/dist/{endpoint-i8TTCohk.d.cts → endpoint-CcQ1a36a.d.cts}

@@ -142,7 +142,7 @@ declare function defineMiddleware(fn: MiddlewareHandler): MiddlewareHandler;
  * # Wire contract
  *
  * The JSON this file emits is consumed by
- * `modules/backend/internal/management/tx_program.go`. That decoder rejects
+ * the plan executor in `engine/db.ts`. That executor rejects
  * unknown fields at every level, so an op carries EXACTLY the fields its kind
  * takes. Everything here that looks like a needless restriction is one of the
  * server's rules made visible early:
@@ -206,7 +206,12 @@ interface TxWireGuard {
 /** One operation in the wire plan. Fields are omitted, never null: the decoder
  * rejects a field that does not belong to the op's kind. */
 interface TxWireOp {
-    op: "insert" | "insertMany" | "update" | "delete" | "select";
+    /** upsert and insertMany: the columns Postgres matches on. */
+    onConflict?: readonly string[];
+    /** insertMany only: what a collision does. Absent means no ON CONFLICT clause
+     * at all, which is what every insertMany did before this option existed. */
+    action?: "ignore" | "update";
+    op: "insert" | "insertMany" | "upsert" | "update" | "delete" | "select";
     table: string;
     values?: Record<string, TxWireValue>;
     rows?: Record<string, TxWireValue>[];
@@ -387,7 +392,36 @@ interface TxTable<Row, Insert> {
      *
      * An empty list writes nothing and sends nothing.
      */
-    insertMany(rows: readonly TxInsertShape<Insert>[]): TxRows<Row>;
+    /**
+     * Insert many rows in ONE statement, optionally choosing what a collision does.
+     *
+     * Without `opts` this is a plain multi-row INSERT and a collision aborts the
+     * transaction — the behaviour every call had before the option existed.
+     *
+     * `action: "ignore"` emits `ON CONFLICT DO NOTHING`, which is how "insert the
+     * ones that are new" becomes one round-trip instead of one per row with a
+     * 23505 caught around each. **The returned rows are the ones actually
+     * INSERTED**: a row that collided is skipped, so it is absent from the result
+     * — Postgres does not return what it did not write.
+     *
+     * `action: "update"` emits `ON CONFLICT DO UPDATE`, setting every non-conflict
+     * column from the incoming row, and every row comes back.
+     */
+    insertMany(rows: readonly TxInsertShape<Insert>[], opts?: {
+        onConflict: readonly Extract<keyof Row, string>[];
+        action?: "ignore" | "update";
+    }): TxRows<Row>;
+    /**
+     * Insert the row, or update it when it collides on `onConflict` — inside the
+     * plan's savepoint, with the same meaning `tables.<t>.upsert()` has outside it.
+     *
+     * It is an operation because the alternative is not writable here: a failed
+     * insert aborts the whole transaction, so "try, then fall back" cannot be two
+     * plan steps.
+     */
+    upsert(values: TxInsertShape<Insert>, options: {
+        onConflict: readonly Extract<keyof Row, string>[];
+    }): TxRows<Row>;
     /**
      * Update every row matching `where`. The filter comes first because it is the
      * dangerous half: an update whose `where` you got wrong rewrites rows you
@@ -512,6 +546,57 @@ declare class NotFound extends NamedHttpError {
 declare class Conflict extends NamedHttpError {
     constructor(message?: string, code?: string, data?: unknown);
 }
+/**
+ * 409 — a write was refused because it would duplicate an existing row.
+ * Carries the NAME of the unique constraint Postgres named (`users_email_key`).
+ *
+ * The engine produces it: a statement rejected with SQLSTATE `23505` is
+ * converted here rather than surfacing as an opaque driver error (see
+ * `engine/db.ts`, `diagnosingDriver`). What that removes is the string match —
+ * before this, the only way to act on a duplicate was to test the driver
+ * message for "duplicate key value violates unique constraint", a contract
+ * nobody signed that breaks on a Postgres upgrade, a locale, or a constraint
+ * rename, silently and in production.
+ *
+ * THE NAME IS A FIELD AND STAYS OUT OF THE DEFAULT MESSAGE. The two are not
+ * the same audience. `constraint` is read by the code that catches this — the
+ * developer, who already knows the schema. `errorDescription` is the HTTP
+ * response body, and an UNCAUGHT duplicate puts it in front of the
+ * application's end user: `users_email_key` there discloses how the schema is
+ * built to whoever sent the request. The platform's own data API took the same
+ * decision one surface over and wrote down why —
+ * `v2/internal/modules/database/internal/handler/pgerror.go:83-87` collapses
+ * every 23xxx to a generic conflict, "never disclose the constraint/column
+ * name". A thrower who WANTS the name on the wire passes it deliberately
+ * (`new UniqueViolation(c, \`\${c} already exists\`)`, or through `data`).
+ *
+ * @example
+ * try {
+ *   await Database.tables.users.insert({ email });
+ * } catch (e) {
+ *   if (UniqueViolation.is(e) && e.constraint === "users_email_key") {
+ *     throw new Conflict("That email is taken", "email_taken");
+ *   }
+ *   throw e;
+ * }
+ */
+declare class UniqueViolation extends Conflict {
+    /**
+     * Whether `e` is a unique violation — REGARDLESS of which copy of this SDK
+     * constructed it.
+     *
+     * Use this instead of `instanceof`. Measured on a live stack: a controller
+     * bundle INLINES its own copy of `@palbase/backend`, and the engine that
+     * raises this error is the runtime's copy. Two copies, two class identities,
+     * and `e instanceof UniqueViolation` is false in the one place a caller
+     * writes it — a check that reads as correct and silently never matches.
+     */
+    static is(e: unknown): e is UniqueViolation;
+    /** The unique constraint the statement violated, as Postgres named it.
+     * `""` when the driver did not say which — see `engine/db.ts`. */
+    readonly constraint: string;
+    constructor(constraint: string, message?: string, code?: string, data?: unknown);
+}
 /** A single field-level validation failure carried by {@link BadRequest}. */
 interface FieldError {
     /** The offending field's name (dotted path for nested fields). */
@@ -1546,6 +1631,13 @@ interface PalbaseFlagsClient {
 /**
  * Realtime broadcast surface (backend handler → subscribed clients).
  *
+ * **Every channel must be DECLARED, or the join is refused.** Channel names are
+ * not free text: `channels.ts` at the project root publishes which names exist
+ * and who may subscribe, publish, or write state, and a client joining a name no
+ * declaration matches is rejected without ever reaching your code. Declare with
+ * `ownerOnly()`, `publicChannel()`, or a custom `authorize(ctx)` — see
+ * {@link defineChannels}. Broadcasting to an undeclared channel reaches nobody.
+ *
  * Backend-side this is BROADCAST-ONLY: a handler pushes an event to a channel
  * and every client subscribed to that channel (via the client SDK's
  * `pb.realtime.channel(...).on(...)`) receives it. There is no `subscribe()` on
@@ -1554,9 +1646,10 @@ interface PalbaseFlagsClient {
  * once the broadcast is accepted (or with an `error` if it could not be sent),
  * but it never blocks the handler waiting on subscribers.
  *
- * Channel naming is app-defined and arbitrary (e.g. `"room:42"`, `"orders"`).
- * The Palbase-managed `flags:<ref>` channels are internal — author channels for
- * your own features.
+ * Channel names are yours to choose (e.g. `"room:42"`, `"orders"`) but not yours
+ * to leave undeclared: each must match a pattern in `channels.ts`, which is where
+ * `"room:{roomId}"` is authorized. The Palbase-managed `flags:<ref>` channels are
+ * internal — author channels for your own features.
  *
  * @example
  * // Notify everyone in a chat room that a message landed:
@@ -1816,9 +1909,36 @@ interface RateLimitConfig {
 /** The six raw string-keyed DB operations shared by `DBClient` and the
  * transaction-scoped client. */
 interface DBOps {
-    /** Run a read-only SQL query (executes in a READ ONLY transaction). */
+    /**
+     * Run SQL on the REQUEST'S OWN transaction.
+     *
+     * This is **not** read-only. Nothing marks that transaction `READ ONLY`, so a
+     * write passed here executes and commits with the request — a plain `UPDATE`, a
+     * write hidden in a CTE, or a function that writes. What stands between a
+     * statement and your data is RLS and the role the request runs as, exactly as
+     * for every other operation on this client.
+     *
+     * `INSERT … ON CONFLICT DO UPDATE` therefore works here; `tables.<t>.upsert()`
+     * is the same thing with types. Array parameters are encoded as Postgres array
+     * literals, so `= ANY($1::uuid[])` takes a plain JS array.
+     *
+     * This comment used to claim a `READ ONLY` transaction. It was wrong, and the
+     * cost was measured: a tenant read it, concluded an upsert was impossible from
+     * here, abandoned `ON CONFLICT` and wrote a database trigger instead.
+     */
     query(sql: string, params?: unknown[]): Promise<Record<string, unknown>[]>;
     insert(table: string, data: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /**
+     * Insert the row, or update it when it collides on `onConflict` — one
+     * statement, so two concurrent callers cannot both lose.
+     *
+     * Read-then-write cannot be made safe here by catching the unique violation: a
+     * request runs in one transaction, so the failed insert aborts it and every
+     * later statement answers `current transaction is aborted`.
+     */
+    upsert(table: string, data: Record<string, unknown>, opts: {
+        onConflict: readonly string[];
+    }): Promise<Record<string, unknown>>;
     /**
      * Update the row with the given id and resolve to the updated row, or `null`
      * if no row matched (the id is absent, or the row is hidden by RLS). This is
@@ -1862,7 +1982,26 @@ interface DBOps {
     /** Validity'li tabloda satırın yeni versiyonu — eski kapanır (valid_to/superseded_by),
      * yenisi eklenir; TEK savepoint, dönüş yeni satır (FR-029, C-9). */
     supersede(table: string, id: string, row: Record<string, unknown>): Promise<Record<string, unknown>>;
-    findMany(table: string, query?: Record<string, unknown>): Promise<Record<string, unknown>[]>;
+    /** Filtre + sıralama + sayfa. `offset` yalnız `limit` ile birlikte geçerlidir
+     * (limitsiz offset sayfa değildir; motor adıyla reddeder — FR-004). */
+    /** Update every row the filter matches, in one statement; resolves to them.
+     * An EMPTY filter is refused — a whole-table write is not something to reach
+     * by accident. */
+    updateMany(table: string, where: Record<string, unknown>, set: Record<string, unknown>): Promise<Record<string, unknown>[]>;
+    /** Delete every row the filter matches; resolves to how many. Empty filter
+     * refused, for the same reason and more so. */
+    deleteMany(table: string, where: Record<string, unknown>): Promise<number>;
+    /** How many rows match — the half of pagination limit/offset cannot supply.
+     * An empty filter is legitimate here: counting is a read. */
+    count(table: string, where?: Record<string, unknown>): Promise<number>;
+    findMany(table: string, query?: Record<string, unknown>, opts?: {
+        orderBy?: {
+            column: string;
+            direction?: "asc" | "desc";
+        };
+        limit?: number;
+        offset?: number;
+    }): Promise<Record<string, unknown>[]>;
     /** "Bu satıra benzer satırlar" (FR-022) — satır-modunda kolon vektörüyle,
      * chunk-modunda chunk-ortalamasıyla; kendisi hariç. */
     similar(table: string, id: string, opts?: {
@@ -1878,6 +2017,18 @@ interface DBOps {
             weight: number;
         };
     }): Promise<Record<string, unknown>[]>;
+    /** D-021 (FR-027): kolon sayaçları bağımsız dönüşle — search'ün dizi-üstü
+     * `_facets` özelliği serileşmede kaybolur; ciddi sözleşme budur. */
+    facets(table: string, params: {
+        facets: string[];
+        where?: Record<string, unknown>;
+        validity?: "all" | {
+            asOf: string;
+        };
+    }): Promise<Record<string, {
+        value: string | null;
+        count: number;
+    }[]>>;
     /** Çok-örnekli öneri (FR-023): avg(pos) + (avg(pos) − avg(neg)); positive'ler sonuç dışı. */
     recommend(table: string, opts: {
         positive: string[];
@@ -1913,6 +2064,14 @@ interface DBClient extends DBOps {
      * `.expectOne(…)`; without it a declared expectation degrades to a generic 409.
      */
     txPlan(plan: TxPlanBody): Promise<TxPlanResponse>;
+    /**
+     * Run `fn` inside a SAVEPOINT on this request's transaction, so a failure in
+     * it rolls back only what `fn`'s handle wrote.
+     *
+     * The handle is a PARAMETER on purpose: an ambient swap would capture writes
+     * a concurrent `Promise.all` branch made outside the boundary.
+     */
+    attempt<T>(fn: (tx: DBOps) => Promise<T>): Promise<T>;
     /**
      * Return a sibling DB client that bypasses Row-Level Security by running as
      * the `service_role` (BYPASSRLS). Use sparingly and explicitly — the default
@@ -2213,4 +2372,4 @@ type Middleware = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise
  */
 type AuthSpec = boolean | Partial<AuthConfig>;
 
-export { type PalbaseCreateLinkParams as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseAttestiOSParams as G, HttpError as H, type PalbaseAttestiOSResult as I, type PalbaseAuthClient as J, type PalbaseBatchOverrideOperation as K, type Logger as L, type Materialized as M, NotFound as N, type PalbaseBatchSetOverridesResult as O, type PalbaseDocsClient as P, type PalbaseBindDeviceParams as Q, type RateLimitConfig as R, type SecretsService as S, type TxPlanBody as T, type PalbaseClearAllOverridesResult as U, type PalbaseClearOverrideResult as V, type PalbaseCohortQueryInput as W, type PalbaseCohortResult as X, type PalbaseCollectionRef as Y, type PalbaseCountQueryInput as Z, type PalbaseCountResult as _, type PalbaseFlagsClient as a, type PalbaseVerifyRequestSignatureParams as a$, type PalbaseDeviceInfo as a0, type PalbaseDeviceTokenView as a1, type PalbaseDocumentRef as a2, type PalbaseDocumentSnapshot as a3, type PalbaseEmailClient as a4, type PalbaseEmailSendParams as a5, type PalbaseEmailSendResponse as a6, type PalbaseEventNamesResult as a7, type PalbaseEventsQueryInput as a8, type PalbaseEventsResult as a9, type PalbaseMatchParams as aA, type PalbaseMultiChannelResponse as aB, type PalbaseOverviewResult as aC, type PalbasePreferences as aD, type PalbasePreferencesClient as aE, type PalbasePushClient as aF, type PalbasePushSendParams as aG, type PalbasePushSendResponse as aH, type PalbaseQrCodeOptions as aI, type PalbaseQuerySnapshot as aJ, type PalbaseRegisterDeviceParams as aK, type PalbaseRetentionQueryInput as aL, type PalbaseRetentionResult as aM, type PalbaseSession as aN, type PalbaseSetOverrideResult as aO, type PalbaseSetOverridesResult as aP, type PalbaseSignedUrlResponse as aQ, type PalbaseSmsClient as aR, type PalbaseSmsSendParams as aS, type PalbaseSmsSendResponse as aT, type PalbaseTransformOptions as aU, type PalbaseUpdateLinkParams as aV, type PalbaseUploadOptions as aW, type PalbaseUser as aX, type PalbaseUserDetailResult as aY, type PalbaseUsersQueryInput as aZ, type PalbaseUsersResult as a_, type PalbaseFileObject as aa, type PalbaseFlag as ab, type PalbaseFlagContext as ac, type PalbaseFlagSource as ad, type PalbaseFlagValue as ae, type PalbaseFlagVariant as af, type PalbaseFlagsServiceClient as ag, type PalbaseFunctionsClient as ah, type PalbaseFunnelQueryInput as ai, type PalbaseFunnelResult as aj, type PalbaseIdentifyTraits as ak, type PalbaseInboxClient as al, type PalbaseInboxListOptions as am, type PalbaseInboxListResult as an, type PalbaseInboxMessage as ao, type PalbaseInboxSendParams as ap, type PalbaseInboxSendResponse as aq, type PalbaseInitialLink as ar, type PalbaseInvokeOptions as as, type PalbaseLink as at, type PalbaseLinkAnalytics as au, type PalbaseLinkDetails as av, type PalbaseLinksClient as aw, type PalbaseListLinksOptions as ax, type PalbaseListLinksResult as ay, type PalbaseListOptions as az, type PalbaseNotificationsClient as b, type PalbaseWhereOperator as b0, type Ref as b1, TooManyRequests as b2, type TxColumnExpr as b3, type TxInsertShape as b4, type TxInsertValue as b5, type TxNow as b6, TxPlanError as b7, type TxPlanHandle as b8, type TxPlanOpResult as b9, type TxPlanRejection as ba, TxRefError as bb, type TxRow as bc, type TxRows as bd, type TxSelectOptions as be, type TxSetShape as bf, type TxSetValue as bg, type TxTable as bh, type TxWhere as bi, type TxWireExpr as bj, type TxWireGuard as bk, type TxWireOp as bl, type TxWireRef as bm, type TxWireValue as bn, Unauthorized as bo, type User as bp, type VerifiedDevice as bq, dec as br, defineMiddleware as bs, inc as bt, now as bu, type PalbaseRealtimeClient as c, type PalbaseStorageClient as d, type PalbaseBucketClient as e, type TxPlanResponse as f, type PalbaseResult as g, type AuthConfig as h, type ClientInfo as i, Conflict as j, type DBOps as k, type ErrorMap as l, type ErrorThrowers as m, Forbidden as n, type HttpMethod as o, type Middleware as p, type MiddlewareContext as q, type MiddlewareHandler as r, type PBRequest as s, PalError as t, type PalbaseAnalyticsClient as u, type PalbaseAnalyticsManagementNamespace as v, type PalbaseAnalyticsProperties as w, type PalbaseAnalyticsQueryNamespace as x, type PalbaseAttestAndroidParams as y, type PalbaseAttestAndroidResult as z };
+export { type PalbaseCreateLinkParams as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseAttestiOSParams as G, HttpError as H, type PalbaseAttestiOSResult as I, type PalbaseAuthClient as J, type PalbaseBatchOverrideOperation as K, type Logger as L, type Materialized as M, NotFound as N, type PalbaseBatchSetOverridesResult as O, type PalbaseDocsClient as P, type PalbaseBindDeviceParams as Q, type RateLimitConfig as R, type SecretsService as S, type TxPlanBody as T, type PalbaseClearAllOverridesResult as U, type PalbaseClearOverrideResult as V, type PalbaseCohortQueryInput as W, type PalbaseCohortResult as X, type PalbaseCollectionRef as Y, type PalbaseCountQueryInput as Z, type PalbaseCountResult as _, type PalbaseFlagsClient as a, type PalbaseVerifyRequestSignatureParams as a$, type PalbaseDeviceInfo as a0, type PalbaseDeviceTokenView as a1, type PalbaseDocumentRef as a2, type PalbaseDocumentSnapshot as a3, type PalbaseEmailClient as a4, type PalbaseEmailSendParams as a5, type PalbaseEmailSendResponse as a6, type PalbaseEventNamesResult as a7, type PalbaseEventsQueryInput as a8, type PalbaseEventsResult as a9, type PalbaseMatchParams as aA, type PalbaseMultiChannelResponse as aB, type PalbaseOverviewResult as aC, type PalbasePreferences as aD, type PalbasePreferencesClient as aE, type PalbasePushClient as aF, type PalbasePushSendParams as aG, type PalbasePushSendResponse as aH, type PalbaseQrCodeOptions as aI, type PalbaseQuerySnapshot as aJ, type PalbaseRegisterDeviceParams as aK, type PalbaseRetentionQueryInput as aL, type PalbaseRetentionResult as aM, type PalbaseSession as aN, type PalbaseSetOverrideResult as aO, type PalbaseSetOverridesResult as aP, type PalbaseSignedUrlResponse as aQ, type PalbaseSmsClient as aR, type PalbaseSmsSendParams as aS, type PalbaseSmsSendResponse as aT, type PalbaseTransformOptions as aU, type PalbaseUpdateLinkParams as aV, type PalbaseUploadOptions as aW, type PalbaseUser as aX, type PalbaseUserDetailResult as aY, type PalbaseUsersQueryInput as aZ, type PalbaseUsersResult as a_, type PalbaseFileObject as aa, type PalbaseFlag as ab, type PalbaseFlagContext as ac, type PalbaseFlagSource as ad, type PalbaseFlagValue as ae, type PalbaseFlagVariant as af, type PalbaseFlagsServiceClient as ag, type PalbaseFunctionsClient as ah, type PalbaseFunnelQueryInput as ai, type PalbaseFunnelResult as aj, type PalbaseIdentifyTraits as ak, type PalbaseInboxClient as al, type PalbaseInboxListOptions as am, type PalbaseInboxListResult as an, type PalbaseInboxMessage as ao, type PalbaseInboxSendParams as ap, type PalbaseInboxSendResponse as aq, type PalbaseInitialLink as ar, type PalbaseInvokeOptions as as, type PalbaseLink as at, type PalbaseLinkAnalytics as au, type PalbaseLinkDetails as av, type PalbaseLinksClient as aw, type PalbaseListLinksOptions as ax, type PalbaseListLinksResult as ay, type PalbaseListOptions as az, type PalbaseNotificationsClient as b, type PalbaseWhereOperator as b0, type Ref as b1, TooManyRequests as b2, type TxColumnExpr as b3, type TxInsertShape as b4, type TxInsertValue as b5, type TxNow as b6, TxPlanError as b7, type TxPlanHandle as b8, type TxPlanOpResult as b9, type TxPlanRejection as ba, TxRefError as bb, type TxRow as bc, type TxRows as bd, type TxSelectOptions as be, type TxSetShape as bf, type TxSetValue as bg, type TxTable as bh, type TxWhere as bi, type TxWireExpr as bj, type TxWireGuard as bk, type TxWireOp as bl, type TxWireRef as bm, type TxWireValue as bn, Unauthorized as bo, UniqueViolation as bp, type User as bq, type VerifiedDevice as br, dec as bs, defineMiddleware as bt, inc as bu, now as bv, type PalbaseRealtimeClient as c, type PalbaseStorageClient as d, type PalbaseBucketClient as e, type DBOps as f, type TxPlanResponse as g, type PalbaseResult as h, type AuthConfig as i, type ClientInfo as j, Conflict as k, type ErrorMap as l, type ErrorThrowers as m, Forbidden as n, type HttpMethod as o, type Middleware as p, type MiddlewareContext as q, type MiddlewareHandler as r, type PBRequest as s, PalError as t, type PalbaseAnalyticsClient as u, type PalbaseAnalyticsManagementNamespace as v, type PalbaseAnalyticsProperties as w, type PalbaseAnalyticsQueryNamespace as x, type PalbaseAttestAndroidParams as y, type PalbaseAttestAndroidResult as z };