@palbase/backend 23.1.0 → 24.0.1

package/dist/index.d.cts

@@ -1,13 +1,13 @@
-import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-c9h5jriX.cjs';
-export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UserT, bq as VerifiedDevice, br as dec, bs as defineMiddleware, bt as inc, bu as now } from './endpoint-c9h5jriX.cjs';
-import { M as ModuleClients } from './index-CxeQSfJP.cjs';
-export { C as Cache, D as Database, a as Documents, F as Flags, L as Log, N as Notifications, R as Realtime, b as RequestStore, c as RuntimeServices, S as Secrets, d as Storage, _ as __getRuntime, e as __requestALS, f as __runWithRuntime, g as __setRuntime } from './index-CxeQSfJP.cjs';
-import { S as SchemaDef } from './index-By8Dle5U.cjs';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, g as EnvTables, E as EnvTypedDatabase, h as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, F as numeric, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from './index-By8Dle5U.cjs';
+import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-CcQ1a36a.cjs';
+export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UniqueViolation, bq as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-CcQ1a36a.cjs';
+import { M as ModuleClients } from './index-C84bLgeO.cjs';
+export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-C84bLgeO.cjs';
+import { S as SchemaDef } from './index-MoQ31B6M.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, g as EnvTables, E as EnvTypedDatabase, h as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, F as numeric, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from './index-MoQ31B6M.cjs';
 export { TableTypes, Tables } from './db/env.cjs';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.cjs';
-import { a as RouteOptions } from './registry-CqPK2Qby.cjs';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-CqPK2Qby.cjs';
+import { a as RouteOptions } from './registry-1X-skBNu.cjs';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-1X-skBNu.cjs';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 import 'node:async_hooks';
@@ -417,7 +417,9 @@ declare function makeStackDts(names: StackNames): string;
 
 /** Options accepted by `@Controller`. */
 interface ControllerOptions {
-    /** Default auth for ALL routes in this controller (route-level overrides). */
+    /** Default auth for ALL routes in this controller (route-level overrides;
+     * omitting it falls through to the application default declared with
+     * {@link defineDefaultAuth}). */
     auth?: AuthSpec;
 }
 /**
@@ -431,6 +433,27 @@ interface ControllerOptions {
 declare function getRegisteredControllers(): readonly unknown[];
 /** Empty the registry. For tests, which load controllers repeatedly. */
 declare function __resetRegisteredControllers(): void;
+/**
+ * Declare the default auth for EVERY route in the application — the ring the
+ * cascade consults when neither the route nor its controller says anything.
+ *
+ * The measured problem it removes: `auth: { verifiedEmail: true }` repeated by
+ * hand on ten `@Controller`s. A security setting that must be repeated is a
+ * security setting that will be forgotten — the eleventh controller opens the
+ * door and nothing says so.
+ *
+ * Call it at MODULE SCOPE in a file the application imports (the controllers'
+ * own barrel, or a module a controller imports). The cascade reads this slot
+ * when the route table is built and when the spec is emitted — both of which
+ * run after module loading — so declaration order does not matter, but being
+ * imported at all does.
+ *
+ * @example
+ * defineDefaultAuth({ verifiedEmail: true });  // every route, unless it says otherwise
+ */
+declare function defineDefaultAuth(auth: AuthSpec): void;
+/** Clear the application default. For tests, which declare it repeatedly. */
+declare function __resetDefaultAuth(): void;
 /**
  * Mark a class as a Palbase backend controller. `basePath` is the mount path
  * for every route the class declares; `options.auth` sets the controller-level
@@ -443,6 +466,19 @@ declare function __resetRegisteredControllers(): void;
  * }
  */
 declare function Controller(basePath: string, options?: ControllerOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+/**
+ * A class the runtime constructs takes NO constructor parameters.
+ *
+ * ONE writer, four callers (controller, hook, job, webhook) and the build's own
+ * check. Four hand-written copies of this message is how the four come to
+ * disagree about what is refused — and the disagreement is silent, because a
+ * class that slips past one of them still ends up with `undefined` fields.
+ *
+ * Why it is refused rather than injected: there is no container. The parameter
+ * would arrive `undefined`, the code would compile, deploy, and fail at the
+ * first request that touches the field — the most expensive place to learn it.
+ */
+declare function assertZeroArgConstructor(Ctrl: unknown, kind: string): void;
 
 /** A legacy method decorator. */
 type MethodDecorator = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
@@ -591,7 +627,10 @@ declare function Hook(event: string): (target: object, fnName: string | symbol)
 /** Resolves a hook class into the two maps the runtime dispatches from.
  *
  * Every misuse throws HERE, at build time, rather than becoming a hook that is
- * silently never called — the failure mode this whole change exists to end. */
+ * silently never called — the failure mode this whole change exists to end.
+ *
+ * @throws when the class declares constructor parameters (FR-011) — nothing
+ *   here supplies them, so the field would be `undefined` on every event. */
 declare function getHookConfig(ctor: object): ResolvedHookClass;
 
 /** A legacy parameter decorator. */
@@ -731,7 +770,10 @@ declare function Webhook(options: WebhookOptions): <T extends abstract new (...a
 declare function On(event: string): (target: object, fnName: string | symbol) => void;
 /** Read a decorated class back as the resolved config the runtime consumes.
  * Every misuse throws HERE, at build time, rather than becoming a webhook that
- * answers 200 and does nothing. */
+ * answers 200 and does nothing.
+ *
+ * @throws when the class declares constructor parameters (FR-011) — nothing
+ *   here supplies them, so the field would be `undefined` on every delivery. */
 declare function getWebhookConfig(ctor: object): ResolvedWebhook;
 
 interface JobOptions {
@@ -759,4 +801,4 @@ interface ResolvedJob {
 declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
 declare function getJobConfig(ctor: object): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetRegisteredControllers, buildModuleClients, defineChannels, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, toSchemaJSON };
+export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, toSchemaJSON };

package/dist/index.d.ts

@@ -1,13 +1,13 @@
-import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-CVWXh6oG.js';
-export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UserT, bq as VerifiedDevice, br as dec, bs as defineMiddleware, bt as inc, bu as now } from './endpoint-CVWXh6oG.js';
-import { M as ModuleClients } from './index-BZrJXnVh.js';
-export { C as Cache, D as Database, a as Documents, F as Flags, L as Log, N as Notifications, R as Realtime, b as RequestStore, c as RuntimeServices, S as Secrets, d as Storage, _ as __getRuntime, e as __requestALS, f as __runWithRuntime, g as __setRuntime } from './index-BZrJXnVh.js';
-import { S as SchemaDef } from './index-CwAJ7HEe.js';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, g as EnvTables, E as EnvTypedDatabase, h as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, F as numeric, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from './index-CwAJ7HEe.js';
+import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-0_DGBajf.js';
+export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UniqueViolation, bq as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-0_DGBajf.js';
+import { M as ModuleClients } from './index-dJNhDZ7j.js';
+export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-dJNhDZ7j.js';
+import { S as SchemaDef } from './index-BOS_rFBO.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, g as EnvTables, E as EnvTypedDatabase, h as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, F as numeric, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from './index-BOS_rFBO.js';
 export { TableTypes, Tables } from './db/env.js';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.js';
-import { a as RouteOptions } from './registry-B3niOVYp.js';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-B3niOVYp.js';
+import { a as RouteOptions } from './registry-CEod_5sz.js';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-CEod_5sz.js';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 import 'node:async_hooks';
@@ -417,7 +417,9 @@ declare function makeStackDts(names: StackNames): string;
 
 /** Options accepted by `@Controller`. */
 interface ControllerOptions {
-    /** Default auth for ALL routes in this controller (route-level overrides). */
+    /** Default auth for ALL routes in this controller (route-level overrides;
+     * omitting it falls through to the application default declared with
+     * {@link defineDefaultAuth}). */
     auth?: AuthSpec;
 }
 /**
@@ -431,6 +433,27 @@ interface ControllerOptions {
 declare function getRegisteredControllers(): readonly unknown[];
 /** Empty the registry. For tests, which load controllers repeatedly. */
 declare function __resetRegisteredControllers(): void;
+/**
+ * Declare the default auth for EVERY route in the application — the ring the
+ * cascade consults when neither the route nor its controller says anything.
+ *
+ * The measured problem it removes: `auth: { verifiedEmail: true }` repeated by
+ * hand on ten `@Controller`s. A security setting that must be repeated is a
+ * security setting that will be forgotten — the eleventh controller opens the
+ * door and nothing says so.
+ *
+ * Call it at MODULE SCOPE in a file the application imports (the controllers'
+ * own barrel, or a module a controller imports). The cascade reads this slot
+ * when the route table is built and when the spec is emitted — both of which
+ * run after module loading — so declaration order does not matter, but being
+ * imported at all does.
+ *
+ * @example
+ * defineDefaultAuth({ verifiedEmail: true });  // every route, unless it says otherwise
+ */
+declare function defineDefaultAuth(auth: AuthSpec): void;
+/** Clear the application default. For tests, which declare it repeatedly. */
+declare function __resetDefaultAuth(): void;
 /**
  * Mark a class as a Palbase backend controller. `basePath` is the mount path
  * for every route the class declares; `options.auth` sets the controller-level
@@ -443,6 +466,19 @@ declare function __resetRegisteredControllers(): void;
  * }
  */
 declare function Controller(basePath: string, options?: ControllerOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+/**
+ * A class the runtime constructs takes NO constructor parameters.
+ *
+ * ONE writer, four callers (controller, hook, job, webhook) and the build's own
+ * check. Four hand-written copies of this message is how the four come to
+ * disagree about what is refused — and the disagreement is silent, because a
+ * class that slips past one of them still ends up with `undefined` fields.
+ *
+ * Why it is refused rather than injected: there is no container. The parameter
+ * would arrive `undefined`, the code would compile, deploy, and fail at the
+ * first request that touches the field — the most expensive place to learn it.
+ */
+declare function assertZeroArgConstructor(Ctrl: unknown, kind: string): void;
 
 /** A legacy method decorator. */
 type MethodDecorator = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
@@ -591,7 +627,10 @@ declare function Hook(event: string): (target: object, fnName: string | symbol)
 /** Resolves a hook class into the two maps the runtime dispatches from.
  *
  * Every misuse throws HERE, at build time, rather than becoming a hook that is
- * silently never called — the failure mode this whole change exists to end. */
+ * silently never called — the failure mode this whole change exists to end.
+ *
+ * @throws when the class declares constructor parameters (FR-011) — nothing
+ *   here supplies them, so the field would be `undefined` on every event. */
 declare function getHookConfig(ctor: object): ResolvedHookClass;
 
 /** A legacy parameter decorator. */
@@ -731,7 +770,10 @@ declare function Webhook(options: WebhookOptions): <T extends abstract new (...a
 declare function On(event: string): (target: object, fnName: string | symbol) => void;
 /** Read a decorated class back as the resolved config the runtime consumes.
  * Every misuse throws HERE, at build time, rather than becoming a webhook that
- * answers 200 and does nothing. */
+ * answers 200 and does nothing.
+ *
+ * @throws when the class declares constructor parameters (FR-011) — nothing
+ *   here supplies them, so the field would be `undefined` on every delivery. */
 declare function getWebhookConfig(ctor: object): ResolvedWebhook;
 
 interface JobOptions {
@@ -759,4 +801,4 @@ interface ResolvedJob {
 declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
 declare function getJobConfig(ctor: object): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetRegisteredControllers, buildModuleClients, defineChannels, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, toSchemaJSON };
+export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, toSchemaJSON };

package/dist/index.js

@@ -18,11 +18,11 @@ import {
   timestamp,
   uuid,
   vector
-} from "./chunk-PY7YJDCT.js";
+} from "./chunk-LCL7TUAI.js";
 import {
   defineError,
   getErrorRegistry
-} from "./chunk-R3KN6RHD.js";
+} from "./chunk-T5IOSOE5.js";
 import {
   Cache,
   Database,
@@ -35,35 +35,41 @@ import {
   Storage,
   __getRuntime,
   __requestALS,
+  __resetLifecycleHooks,
+  __runStartHooks,
   __runWithRuntime,
-  __setRuntime
-} from "./chunk-OHALWEOG.js";
+  __setRuntime,
+  onShutdown,
+  onStart
+} from "./chunk-7Z6MGMXQ.js";
 import {
   TxPlanError,
   TxRefError,
   dec,
   inc,
   now
-} from "./chunk-NS5V43YQ.js";
-import {
-  Controller,
-  __resetRegisteredControllers,
-  getRegisteredControllers
-} from "./chunk-HQRJDARQ.js";
+} from "./chunk-P2Q27SGP.js";
 import {
   BadRequest,
   Conflict,
+  Controller,
   Forbidden,
   HttpError,
   NotFound,
   PalError,
   TooManyRequests,
   Unauthorized,
+  UniqueViolation,
+  __resetDefaultAuth,
+  __resetRegisteredControllers,
+  assertZeroArgConstructor,
+  defineDefaultAuth,
+  getRegisteredControllers,
   getRoutes,
   recordParam,
   recordRoute,
   recordThrows
-} from "./chunk-RCLNBJCM.js";
+} from "./chunk-H3JAISUY.js";
 import "./chunk-7D4SUZUM.js";
 
 // src/clients/http.ts
@@ -1442,6 +1448,7 @@ function getWebhookConfig(ctor) {
   if (entries.length === 0) {
     throw new Error("@Webhook requires at least one @On handler");
   }
+  assertZeroArgConstructor(ctor, "webhook class");
   const instance = new ctor();
   const events = /* @__PURE__ */ Object.create(null);
   for (const entry of entries) {
@@ -1503,6 +1510,7 @@ function getHookConfig(ctor) {
       `${ctor.name ?? "a hook class"} carries no handler \u2014 a hook file must declare at least one @Hook (blocking) or @On (listener) method`
     );
   }
+  assertZeroArgConstructor(ctor, "hook class");
   const instance = new ctor();
   return {
     blocking: bind(instance, blockingEntries, "@Hook"),
@@ -1733,6 +1741,7 @@ function getJobConfig(ctor) {
   if (retry > MAX_RETRY) {
     throw new Error(`@Job \`retry\` exceeds the ceiling of ${MAX_RETRY}`);
   }
+  assertZeroArgConstructor(ctor, "job class");
   const instance = new ctor();
   if (typeof instance.run !== "function") {
     throw new Error("@Job class must declare an async run() method");
@@ -1790,20 +1799,26 @@ export {
   TxPlanError,
   TxRefError,
   Unauthorized,
+  UniqueViolation,
   Upload,
   UploadedObject,
   User,
   Webhook,
   __getRuntime,
   __requestALS,
+  __resetDefaultAuth,
+  __resetLifecycleHooks,
   __resetRegisteredControllers,
+  __runStartHooks,
   __runWithRuntime,
   __setRuntime,
+  assertZeroArgConstructor,
   bigint,
   boolean,
   buildModuleClients,
   dec,
   defineChannels,
+  defineDefaultAuth,
   defineError,
   defineMiddleware,
   defineSchema,
@@ -1824,6 +1839,8 @@ export {
   makeTypedDB,
   now,
   numeric,
+  onShutdown,
+  onStart,
   openai,
   ownerOnly,
   policy,