@palbase/backend 24.2.0 → 25.0.0

package/dist/index.js

@@ -2,27 +2,33 @@ import {
   EXTENSION_DEPENDENCIES,
   PALBASE_EXTENSIONS,
   PolicyBuilder,
+  TABLE_META,
   bigint,
   boolean,
   defineSchema,
+  defineTable,
   enumType,
+  installationRef,
   integer,
   isPalbaseExtension,
   jsonb,
   makeTypedDB,
   numeric,
   openai,
+  ownedByUser,
   policy,
   raw,
   text,
   timestamp,
+  toSchemaJSON,
+  userRef,
   uuid,
   vector
-} from "./chunk-LCL7TUAI.js";
+} from "./chunk-OEQBHE2Z.js";
 import {
   defineError,
   getErrorRegistry
-} from "./chunk-ERDL5VAE.js";
+} from "./chunk-5CMLOAEF.js";
 import {
   Cache,
   Database,
@@ -41,7 +47,7 @@ import {
   __setRuntime,
   onShutdown,
   onStart
-} from "./chunk-7Z6MGMXQ.js";
+} from "./chunk-XJ2RSHEU.js";
 import {
   TxPlanError,
   TxRefError,
@@ -67,10 +73,13 @@ import {
   getRegisteredControllers,
   getRoutes,
   recordParam,
+  recordRoom,
+  recordRoomHook,
+  recordRoomMessage,
   recordRoute,
   recordThrows,
   resolveEffectiveAuth
-} from "./chunk-UWSYTUGM.js";
+} from "./chunk-ZQRWW37O.js";
 import "./chunk-7D4SUZUM.js";
 
 // src/clients/http.ts
@@ -948,167 +957,6 @@ function buildModuleClients(cfg) {
   };
 }
 
-// src/db/schema-json.ts
-function defOf(column) {
-  return "_def" in column ? column._def : column;
-}
-function columnToJSON(column) {
-  const def = defOf(column);
-  const out = {
-    type: def.type,
-    nullable: def.nullable,
-    primaryKey: def.primaryKey
-  };
-  if (def.defaultValue !== void 0) out.defaultValue = def.defaultValue;
-  if (def.defaultRandom === true) out.defaultRandom = true;
-  if (def.defaultNow === true) out.defaultNow = true;
-  if (def.renamedFrom !== void 0) out.renamedFrom = def.renamedFrom;
-  if (def.references !== void 0) {
-    out.references = { table: def.references.table, column: def.references.column };
-  }
-  if (def.onDeleteAction !== void 0) out.onDeleteAction = def.onDeleteAction;
-  if (def.enumName !== void 0) out.enumName = def.enumName;
-  if (def.enumValues !== void 0) out.enumValues = [...def.enumValues];
-  if (def.unique === true) out.unique = true;
-  if (def.dimensions !== void 0) out.dimensions = def.dimensions;
-  return out;
-}
-function policyToJSON(policy2) {
-  return {
-    name: policy2.name,
-    command: policy2.command ?? "all",
-    roles: policy2.roles ? [...policy2.roles] : [],
-    // null rather than omitted: a policy with no USING clause is a different
-    // thing from one whose clause the emitter forgot, and Go reads the
-    // difference.
-    using: policy2.using ?? null,
-    withCheck: policy2.withCheck ?? null,
-    permissive: policy2.permissive !== false
-  };
-}
-function commonSearchFields(search, out) {
-  if (search.synonyms !== void 0 && Object.keys(search.synonyms).length > 0) {
-    out.synonyms = Object.fromEntries(
-      Object.entries(search.synonyms).map(([word, alts]) => [word, [...alts]])
-    );
-  }
-  if (search.validity === true) out.validity = true;
-}
-function searchToJSON(search, vectorColumn) {
-  if (search.from !== void 0 && search.model !== void 0) {
-    const out2 = {};
-    const textCols = search.text === false ? void 0 : Array.isArray(search.text) && search.text.length > 0 ? search.text : search.from;
-    if (textCols !== void 0) out2.text = { columns: [...textCols] };
-    const v = { metric: search.metric ?? "cosine" };
-    if (vectorColumn !== void 0) v.column = vectorColumn;
-    v.embed = {
-      provider: search.model.provider,
-      model: search.model.model,
-      from: [...search.from],
-      ...search.model.apiKeyName !== void 0 ? { apiKeyName: search.model.apiKeyName } : {},
-      ...search.model.dimensions !== void 0 ? { dimensions: search.model.dimensions } : {},
-      ...search.model.baseURL !== void 0 ? { baseURL: search.model.baseURL } : {}
-    };
-    if (search.staleness !== void 0) v.staleness = search.staleness;
-    if (vectorColumn === void 0) {
-      v.mode = "chunks";
-      if (search.chunks !== void 0) {
-        const c = {};
-        if (search.chunks.size !== void 0 && search.chunks.size > 0) c.sizeChars = search.chunks.size;
-        if (search.chunks.overlap !== void 0 && search.chunks.overlap > 0) c.overlapChars = search.chunks.overlap;
-        if (Object.keys(c).length > 0) v.chunks = c;
-      }
-    }
-    out2.vector = [v];
-    commonSearchFields(search, out2);
-    return out2;
-  }
-  const out = {};
-  if (Array.isArray(search.text) && search.text.length > 0) out.text = { columns: [...search.text] };
-  const legs = search.vector === void 0 ? [] : Array.isArray(search.vector) ? search.vector : [search.vector];
-  if (legs.length > 0) {
-    out.vector = legs.map((leg) => {
-      const v = { metric: leg.metric ?? "cosine" };
-      if (leg.column !== void 0) v.column = leg.column;
-      if (leg.staleness !== void 0) v.staleness = leg.staleness;
-      if (leg.model !== void 0) {
-        v.embed = {
-          provider: leg.model.provider,
-          model: leg.model.model,
-          from: [...leg.from ?? []],
-          ...leg.model.apiKeyName !== void 0 ? { apiKeyName: leg.model.apiKeyName } : {},
-          ...leg.model.dimensions !== void 0 ? { dimensions: leg.model.dimensions } : {},
-          ...leg.model.baseURL !== void 0 ? { baseURL: leg.model.baseURL } : {}
-        };
-      }
-      return v;
-    });
-  }
-  commonSearchFields(search, out);
-  return out;
-}
-function memoryToJSON(m) {
-  return {
-    from: [...m.from],
-    into: m.into,
-    ...m.subject !== void 0 ? { subject: m.subject } : {},
-    extract: { provider: m.extract.provider, model: m.extract.model }
-  };
-}
-function tableToJSON(table) {
-  const columns = {};
-  for (const [name, column] of Object.entries(table.columns)) {
-    columns[name] = columnToJSON(column);
-  }
-  const out = {
-    name: table.name,
-    columns,
-    // Read, not re-derived. `defineSchema` already resolves the fail-closed
-    // default (RLS on unless the author wrote `rls: false`, and forced on by any
-    // policy), and a second copy of a SECURITY default is exactly the thing that
-    // drifts — the direction it drifted last time was "expose everything", and
-    // the live proof was one user reading another's rows.
-    rls: table.rls,
-    policies: (table.policies ?? []).map(policyToJSON)
-  };
-  if (table.primaryKey !== void 0 && table.primaryKey.length > 0) {
-    out.primaryKey = [...table.primaryKey];
-  }
-  if (table.unique !== void 0 && table.unique.length > 0) {
-    out.uniqueConstraints = table.unique.map((u) => ({ name: u.name, columns: [...u.columns] }));
-  }
-  if (table.raw !== void 0 && table.raw.length > 0) {
-    out.rawConstraints = table.raw.map((r) => ({
-      name: r.name,
-      up: r.up,
-      down: r.down ?? null
-    }));
-  }
-  if (table.checks !== void 0 && table.checks.length > 0) {
-    out.checks = table.checks.map((c) => ({ name: c.name, expr: c.expr }));
-  }
-  if (table.indexes !== void 0 && table.indexes.length > 0) {
-    out.indexes = table.indexes.map((i) => ({ name: i.name, columns: [...i.columns] }));
-  }
-  if (table.search !== void 0) {
-    const vectorColumn = Object.entries(columns).find(([, c]) => c.dimensions !== void 0)?.[0];
-    const sj = searchToJSON(table.search, vectorColumn);
-    if (sj.text !== void 0 || sj.vector !== void 0) out.search = sj;
-  }
-  if (table.memory !== void 0) {
-    out.memory = memoryToJSON(table.memory);
-  }
-  return out;
-}
-function toSchemaJSON(schema) {
-  const tables = {};
-  for (const table of Object.values(schema.tables)) {
-    const json = tableToJSON(table);
-    tables[json.name] = json;
-  }
-  return { tables, extensions: [...new Set(schema.extensions ?? [])] };
-}
-
 // src/channels.ts
 var CHANNELS = /* @__PURE__ */ Symbol.for("palbase.backend.channels");
 function ownerOnly() {
@@ -1208,50 +1056,73 @@ function rowType(def) {
 function optionalOnInsert(def) {
   return def.nullable === true || def.defaultRandom === true || def.defaultNow === true || def.defaultValue !== void 0;
 }
-var AUTH_USERS_TABLE = "auth.users";
-function ownerColumnOf(table) {
-  for (const [col, builder] of Object.entries(table.columns)) {
-    if (builder._def.references?.table === AUTH_USERS_TABLE) return col;
-  }
-  return null;
+function forwardName(column) {
+  return column.endsWith("_id") ? column.slice(0, -3) : column;
 }
-function buildChildEdges(schema) {
-  const edges = /* @__PURE__ */ new Map();
-  for (const name of Object.keys(schema.tables)) edges.set(name, []);
-  for (const childName of Object.keys(schema.tables)) {
-    const table = schema.tables[childName];
-    if (table === void 0) continue;
-    for (const [col, builder] of Object.entries(table.columns)) {
-      const ref = builder._def.references;
-      if (ref === void 0) continue;
-      if (ref.table === childName) continue;
-      const bucket = edges.get(ref.table);
-      if (bucket === void 0) continue;
-      if (bucket.some((e) => e.child === childName)) continue;
-      bucket.push({ child: childName, column: col });
+function qualify(schemaName, tableName) {
+  return schemaName === "public" ? tableName : `${schemaName}.${tableName}`;
+}
+function buildRelations(schemas) {
+  const out = /* @__PURE__ */ new Map();
+  const keyOf = /* @__PURE__ */ new Map();
+  for (const schema of schemas) {
+    for (const t of Object.values(schema.tables)) {
+      const key = qualify(schema.name, t.name);
+      out.set(key, []);
+      keyOf.set(t.name, key);
     }
   }
-  return edges;
-}
-function pruneCycles(raw2) {
-  const pruned = /* @__PURE__ */ new Map();
-  for (const table of raw2.keys()) pruned.set(table, []);
-  const state = /* @__PURE__ */ new Map();
-  function visit(table) {
-    state.set(table, "visiting");
-    for (const edge of raw2.get(table) ?? []) {
-      if (state.get(edge.child) === "visiting") continue;
-      pruned.get(table)?.push(edge);
-      if (state.get(edge.child) === void 0) visit(edge.child);
+  for (const schema of schemas) {
+    for (const table of Object.values(schema.tables)) {
+      const childKey = qualify(schema.name, table.name);
+      const bucket = out.get(childKey);
+      if (bucket === void 0) continue;
+      const byTarget = /* @__PURE__ */ new Map();
+      for (const [col, builder] of Object.entries(table.columns)) {
+        const ref = builder._def.references;
+        if (ref === void 0) continue;
+        const list = byTarget.get(ref.table) ?? [];
+        list.push(col);
+        byTarget.set(ref.table, list);
+      }
+      for (const [target, cols] of byTarget) {
+        if (cols.length < 2) continue;
+        const unnamed = cols.filter((c) => {
+          const d = table.columns[c]?._def;
+          return d?.refAs === void 0 && d?.owns !== true;
+        });
+        if (unnamed.length > 0) {
+          throw new Error(
+            `table "${table.name}" declares ${cols.length} foreign keys onto "${target}" (${cols.join(", ")}) \u2014 name each one: references(() => \u2026, { as: "\u2026" })`
+          );
+        }
+      }
+      for (const [col, builder] of Object.entries(table.columns)) {
+        const def = builder._def;
+        if (def.references === void 0) continue;
+        const name = def.owns === true ? "owner" : def.refAs ?? forwardName(col);
+        if (bucket.some((r) => r.name === name)) {
+          throw new Error(
+            name === "owner" ? `table "${table.name}": two columns claim ownership of the row \u2014 a table has at most ONE ownedByUser(). If the other column only POINTS at a user, declare it userRef({ onDelete: \u2026 }) instead.` : `table "${table.name}": two relations resolve to the name "${name}" \u2014 give one an explicit { as: "\u2026" }`
+          );
+        }
+        const targetKey = keyOf.get(def.references.table) ?? def.references.table;
+        bucket.push({ name, to: targetKey, kind: "one", via: col });
+        const parent = out.get(targetKey);
+        if (parent === void 0 || targetKey === childKey) continue;
+        const reverse = def.refAs ?? table.name;
+        if (parent.some((r) => r.name === reverse)) {
+          throw new Error(
+            `table "${def.references.table}": two reverse relations resolve to the name "${reverse}" \u2014 give one an explicit { as: "\u2026" }`
+          );
+        }
+        parent.push({ name: reverse, to: childKey, kind: "many", via: col });
+      }
     }
-    state.set(table, "done");
   }
-  for (const table of raw2.keys()) {
-    if (state.get(table) === void 0) visit(table);
-  }
-  return pruned;
+  return out;
 }
-function tableBlock(table, children, indent) {
+function tableBlock(table, relations, indent) {
   const cols = Object.entries(table.columns);
   const rowLines = cols.map(([col, builder]) => {
     return `${indent}    ${col}: ${rowType(builder._def)};`;
@@ -1261,8 +1132,9 @@ function tableBlock(table, children, indent) {
     const opt = optionalOnInsert(def) ? "?" : "";
     return `${indent}    ${col}${opt}: ${rowType(def)};`;
   });
-  const owner = ownerColumnOf(table);
-  const childEntries = children.map((e) => `${JSON.stringify(e.child)}: ${JSON.stringify(e.column)}`).join("; ");
+  const relEntries = relations.map(
+    (r) => `${r.name}: { to: ${JSON.stringify(r.to)}; kind: ${JSON.stringify(r.kind)}; via: ${JSON.stringify(r.via)} }`
+  ).join("; ");
   return [
     `${indent}${table.name}: {`,
     `${indent}  row: {`,
@@ -1271,8 +1143,7 @@ function tableBlock(table, children, indent) {
     `${indent}  insert: {`,
     ...insertLines,
     `${indent}  };`,
-    `${indent}  owner: ${owner === null ? "null" : JSON.stringify(owner)};`,
-    `${indent}  children: {${childEntries === "" ? "" : ` ${childEntries} `}};`,
+    `${indent}  relations: {${relEntries === "" ? "" : ` ${relEntries} `}};`,
     // searchable: vector kolonu YA DA search beyanı → EnvTypedTable'da search()
     // üyesini açan yapısal bayrak (FR-013). Yokken satır hiç üretilmez ki
     // mevcut şemaların d.ts'i bayt-aynı kalsın.
@@ -1280,22 +1151,37 @@ function tableBlock(table, children, indent) {
     `${indent}};`
   ].join("\n");
 }
-function makeEnvDts(schema) {
-  const tableNames = Object.keys(schema.tables);
-  const children = pruneCycles(buildChildEdges(schema));
-  const blocks = tableNames.map(
-    (name) => tableBlock(schema.tables[name], children.get(name) ?? [], "    ")
+function makeEnvDts(schemas) {
+  const relations = buildRelations(schemas);
+  const qualify2 = (schemaName, table) => schemaName === "public" ? table : `${schemaName}.${table}`;
+  const publicSchema = schemas.find((s) => s.name === "public");
+  const others = schemas.filter((s) => s.name !== "public");
+  const publicBlocks = Object.keys(publicSchema?.tables ?? {}).map(
+    (name) => tableBlock(publicSchema.tables[name], relations.get(name) ?? [], "    ")
   );
-  const body = blocks.length > 0 ? `
-${blocks.join("\n")}
+  const body = publicBlocks.length > 0 ? `
+${publicBlocks.join("\n")}
+  ` : "";
+  const schemaBlocks = others.map((schema) => {
+    const inner = Object.keys(schema.tables).map(
+      (name) => tableBlock(schema.tables[name], relations.get(qualify2(schema.name, name)) ?? [], "      ")
+    );
+    return `    ${schema.name}: {
+${inner.join("\n")}
+    };`;
+  });
+  const schemasBody = schemaBlocks.length > 0 ? `
+${schemaBlocks.join("\n")}
   ` : "";
   return `// AUTO-GENERATED by @palbase/backend \u2014 DO NOT EDIT.
-// Regenerated from db/schema.ts by \`palbase build\` and by every deploy.
+// Regenerated from db/*.ts by \`palbase build\` and by every deploy.
 // Augments the @palbase/backend/env \`Tables\` interface so \`Database.tables.*\`
-// is typed with no import and no generic.
+// is typed with no import and no generic. Schemas other than \`public\` land
+// under \`Schemas\`, reached with \`Database.schema("<name>").tables.*\`.
 
 declare module "@palbase/backend/env" {
   interface Tables {${body}}
+  interface Schemas {${schemasBody}}
 }
 
 export {};
@@ -1576,6 +1462,56 @@ function Signal() {
   };
 }
 
+// src/decorators/room.ts
+var DEFAULT_GRACE_MS = 6e4;
+function assertPattern(pattern) {
+  if (pattern.includes("/")) {
+    throw new Error(
+      `@Room("${pattern}"): channel patterns are colon-separated, not slash-separated. Write "${pattern.replace(/\//g, ":")}" \u2014 a slash matches no live topic.`
+    );
+  }
+  const segments = pattern.split(":");
+  if (segments.some((s) => s === "")) {
+    throw new Error(`@Room("${pattern}"): empty segment \u2014 every segment must be non-empty.`);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const s of segments) {
+    if (!s.startsWith("{") || !s.endsWith("}")) continue;
+    const name = s.slice(1, -1);
+    if (name === "") throw new Error(`@Room("${pattern}"): "{}" names no parameter.`);
+    if (seen.has(name)) {
+      throw new Error(`@Room("${pattern}"): parameter "{${name}}" appears twice.`);
+    }
+    seen.add(name);
+  }
+}
+function Room(pattern, options) {
+  return function(ctor) {
+    assertPattern(pattern);
+    recordRoom(ctor, {
+      pattern,
+      events: options.events,
+      graceMs: options.graceMs ?? DEFAULT_GRACE_MS
+    });
+    return ctor;
+  };
+}
+function hookDecorator(hook) {
+  return () => function(target, propertyKey) {
+    recordRoomHook(target, hook, String(propertyKey));
+  };
+}
+var OnAuthorize = hookDecorator("authorize");
+var OnFirst = hookDecorator("first");
+var OnJoin = hookDecorator("join");
+var OnLeave = hookDecorator("leave");
+var OnEmpty = hookDecorator("empty");
+function OnMessage(name, schema) {
+  return function(target, propertyKey) {
+    recordRoomMessage(target, name, String(propertyKey), schema);
+  };
+}
+
 // src/decorators/params.ts
 function makeParamDecorator(kind, extra) {
   return function(target, propertyKey, parameterIndex) {
@@ -1776,6 +1712,12 @@ export {
   NotFound,
   Notifications,
   On,
+  OnAuthorize,
+  OnEmpty,
+  OnFirst,
+  OnJoin,
+  OnLeave,
+  OnMessage,
   OptionalUser,
   PALBASE_EXTENSIONS,
   PalError,
@@ -1790,11 +1732,13 @@ export {
   Realtime,
   Req,
   RequestId,
+  Room,
   Secrets,
   Signal,
   Sse,
   SseOut,
   Storage,
+  TABLE_META,
   TooManyRequests,
   TraceId,
   TxPlanError,
@@ -1823,6 +1767,7 @@ export {
   defineError,
   defineMiddleware,
   defineSchema,
+  defineTable,
   enumType,
   getErrorRegistry,
   getHookConfig,
@@ -1831,6 +1776,7 @@ export {
   getRoutes,
   getWebhookConfig,
   inc,
+  installationRef,
   integer,
   isPalbaseExtension,
   jsonb,
@@ -1843,6 +1789,7 @@ export {
   onShutdown,
   onStart,
   openai,
+  ownedByUser,
   ownerOnly,
   policy,
   publicChannel,
@@ -1852,6 +1799,7 @@ export {
   text,
   timestamp,
   toSchemaJSON,
+  userRef,
   uuid,
   vector,
   z