@palbase/backend 24.3.0 → 25.0.1

package/dist/index.d.cts

@@ -1,9 +1,9 @@
 import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-BSGw1pTu.cjs';
 export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UniqueViolation, bq as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-BSGw1pTu.cjs';
-import { M as ModuleClients } from './index-C-ALG22n.cjs';
-export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-C-ALG22n.cjs';
-import { S as SchemaDef } from './index-BLAbr9ZH.cjs';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, g as EnvTables, E as EnvTypedDatabase, h as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, F as numeric, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from './index-BLAbr9ZH.cjs';
+import { M as ModuleClients } from './index-VsjBQ4Kw.cjs';
+export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-VsjBQ4Kw.cjs';
+import { S as SchemaDef } from './index-DmVyY6N7.cjs';
+export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvSchemas, g as EnvServiceDatabase, h as EnvTables, E as EnvTypedDatabase, i as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, L as numeric, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from './index-DmVyY6N7.cjs';
 export { TableTypes, Tables } from './db/env.cjs';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.cjs';
 import { a as RouteOptions } from './registry-CgJvDYUW.cjs';
@@ -160,6 +160,14 @@ interface PolicyJSON {
 }
 /** One table. Mirrors Go's `schema.TableJSON`. */
 interface TableJSON {
+    /**
+     * The schema this table lives in. `public` unless declared otherwise.
+     *
+     * The table carries it because the diff iterates over KEYS but passes the
+     * VALUE around: a bare name inside a qualified key space writes the migration
+     * into the wrong schema, silently.
+     */
+    schema: string;
     name: string;
     columns: Record<string, ColumnJSON>;
     rls: boolean;
@@ -200,6 +208,19 @@ interface MemoryJSON {
 interface SchemaJSON {
     tables: Record<string, TableJSON>;
     extensions: string[];
+    /**
+     * Every declared schema, with its HTTP reachability.
+     *
+     * The flag has nowhere else to live: `/v1/db` must know which schemas are
+     * reachable, and introspection must know which schemas the project DECLARED —
+     * a live database also contains internal module schemas that are none of the
+     * diff's business.
+     */
+    schemas: SchemaMetaJSON[];
+}
+interface SchemaMetaJSON {
+    name: string;
+    exposed: boolean;
 }
 /** C-4 wire şekli — Go'nun SearchJSON'ıyla ALAN ADI sözleşmesi (C-5).
  * `mode`/`chunks` yalnız yeni-biçim chunk-modunda emit edilir (D-010);
@@ -233,13 +254,12 @@ interface SearchJSON {
     validity?: boolean;
 }
 /**
- * Serialize a `defineSchema(...)` result into the JSON the deploy applies.
+ * Serialize declared schemas into the JSON the deploy applies.
  *
- * Keyed by the SQL table name rather than by the author's object key, because
- * that is the name the live database answers to — and the diff on the other side
- * compares against what it introspected.
+ * Takes every schema the project declares — one file per schema — because a
+ * cross-schema foreign key can only be checked when both ends are in hand.
  */
-declare function toSchemaJSON(schema: SchemaDef): SchemaJSON;
+declare function toSchemaJSON(schemas: readonly SchemaDef[]): SchemaJSON;
 
 /**
  * channels.ts — the realtime channel authorization DSL (spec C-5).
@@ -348,18 +368,27 @@ declare function defineChannels(map: ChannelsInput): ChannelsDef;
  * The output is FLAT: each table gets a `{ row: {...}; insert: {...} }` entry
  * with plain TypeScript object types. The phantom `ColumnBuilder<...>` type
  * NEVER appears in the generated `.d.ts` — that type only lives at authoring
- * time inside `db/schema.ts`.
+ * time inside the project's `db/*.ts` schema files.
  */
 
 /**
- * Generate the full `palbase-env.d.ts` text for a schema.
+ * Generate the full `palbase-env.d.ts` text for the project's schemas.
+ *
+ * The emitted file ends in `export {};` — same as `makeStackDts`. Without it the
+ * `.d.ts` is a global script, and `declare module "…"` there DECLARES an ambient
+ * module (shadowing the real one, so every export of `@palbase/backend/env`
+ * silently becomes invalid) instead of AUGMENTING it. Measured on a minimal tsc
+ * repro: with the line, exit 0; without it, `TS2305: Module '"…"' has no
+ * exported member`. The line was dropped once in a rewrite and nothing caught
+ * it, so `env-gen.test.ts` now gates it directly.
  *
  * @example
  * import { makeEnvDts } from "@palbase/backend";
- * import schema from "./db/schema.js";
- * writeFileSync("palbase-env.d.ts", makeEnvDts(schema));
+ * import publicSchema from "./db/public.js";
+ * import billing from "./db/billing.js";
+ * writeFileSync("palbase-env.d.ts", makeEnvDts([publicSchema, billing]));
  */
-declare function makeEnvDts(schema: SchemaDef): string;
+declare function makeEnvDts(schemas: readonly SchemaDef[]): string;
 
 /**
  * stack-gen.ts — generate the `palbase-stack.d.ts` text from the names the
@@ -497,20 +526,20 @@ declare function Controller(basePath: string, options?: ControllerOptions): <T e
 declare function assertZeroArgConstructor(Ctrl: unknown, kind: string): void;
 
 /** A legacy method decorator. */
-type MethodDecorator = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
+type MethodDecorator$1 = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
 /** `@Get(subpath, options?)` — declare a GET route. */
-declare const Get: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Get: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Post(subpath, options?)` — declare a POST route. */
-declare const Post: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Post: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Put(subpath, options?)` — declare a PUT route. */
-declare const Put: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Put: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Patch(subpath, options?)` — declare a PATCH route. */
-declare const Patch: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Patch: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Delete(subpath, options?)` — declare a DELETE route. */
-declare const Delete: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Delete: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Query(subpath, options?)` — declare an HTTP QUERY route (RFC 10008):
  * safe + idempotent like GET, body-carrying like POST. Input rides `@Body`. */
-declare const Query: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Query: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 
 /**
  * The payloads a hook handler receives, and nothing else.
@@ -649,6 +678,80 @@ declare function Hook(event: string): (target: object, fnName: string | symbol)
  *   here supplies them, so the field would be `undefined` on every event. */
 declare function getHookConfig(ctor: object): ResolvedHookClass;
 
+interface RoomOptions {
+    /**
+     * The events this room sends to its clients, by name.
+     *
+     * Declared rather than inferred, because a room emits from anywhere in the
+     * class — there is no return type to read. The map is the room's public
+     * surface: it becomes a Swift enum and a TypeScript union in the generated
+     * clients, so a device gets `case .tick(n:)` instead of an opaque bag.
+     *
+     * Per-event rather than one blob because realtime is event-ADDRESSED all the
+     * way down (`Realtime.broadcast(channel, EVENT, payload)`).
+     */
+    events: Record<string, ZodTypeAny>;
+    /**
+     * How long a room is held after its last sign of life, in milliseconds.
+     *
+     * Default 60_000, and the floor is not a matter of taste: the decision must
+     * survive the SLOWEST client's heartbeat gap twice over, and the web SDK
+     * beats every 25 s (palbe/src/realtime/connection.ts:133) against iOS's 2 s
+     * (RealtimeConnection.swift:162). A shorter default would declare healthy web
+     * clients dead between two beats.
+     *
+     * Raise it for an upstream that is expensive to restart; lower it (never
+     * below ~50 s while web beats at 25 s) for one that is cheap.
+     */
+    graceMs?: number;
+}
+/**
+ * Declare a class as a room.
+ *
+ * ```ts
+ * @Room("chat:{roomId}", { events: { message: Message } })
+ * class ChatRoom {
+ *   @OnAuthorize() can({ user, params }) { … }
+ *   @OnFirst()     open(ctx) { … }   // the room filled
+ *   @OnEmpty()     close(ctx) { … }  // nobody is watching any more
+ *   @OnMessage("say", Say) say(ctx) { … }
+ * }
+ * ```
+ *
+ * The pattern is the topic: `chat:{roomId}` addresses `chat:42`. A room is
+ * marked by the PRESENCE of this config — never by a name, a base class or a
+ * naming convention.
+ */
+declare function Room(pattern: string, options: RoomOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+/** Who may enter. Return a grant to admit, `null` to refuse. */
+declare const OnAuthorize: () => MethodDecorator;
+/**
+ * The room is occupied and nobody owns it — start whatever the room needs.
+ *
+ * Deliberately a CONDITION rather than a 0→1 transition, and the difference is
+ * load-bearing: a runtime restart, a deploy pointer swap (the previous release
+ * is never torn down) and an owner that died all leave a full room with nobody
+ * holding it. A transition would fire once and never again; a condition
+ * recovers every time.
+ *
+ * Exactly one runtime in the cluster enters this hook for a given room, so
+ * three devices never open three upstreams.
+ */
+declare const OnFirst: () => MethodDecorator;
+/** A device arrived. Anything emitted here reaches ONLY that device. */
+declare const OnJoin: () => MethodDecorator;
+/** A device left. */
+declare const OnLeave: () => MethodDecorator;
+/** Nobody is watching any more — stop whatever `@OnFirst` started. */
+declare const OnEmpty: () => MethodDecorator;
+/**
+ * A message from a client, validated against `schema` before the method runs.
+ *
+ * A payload that fails the schema never reaches the method: the client is told
+ * why, and the room's code only ever sees the shape it declared.
+ */
+declare function OnMessage(name: string, schema: ZodTypeAny): MethodDecorator;
+
 /** A legacy parameter decorator. */
 type ParameterDecorator = (target: object, propertyKey: string | symbol, parameterIndex: number) => void;
 /** `@Body(schema)` — inject the request body, validated against `schema`. The
@@ -817,4 +920,4 @@ interface ResolvedJob {
 declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
 declare function getJobConfig(ctor: object): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, toSchemaJSON };
+export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, toSchemaJSON };

package/dist/index.d.ts

@@ -1,9 +1,9 @@
 import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-DMwJjEHQ.js';
 export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UniqueViolation, bq as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-DMwJjEHQ.js';
-import { M as ModuleClients } from './index-DEneI8Mn.js';
-export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-DEneI8Mn.js';
-import { S as SchemaDef } from './index-BTMYod_l.js';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvServiceDatabase, g as EnvTables, E as EnvTypedDatabase, h as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RawConstraintDef, n as RowShape, o as SchemaInput, T as TableDef, p as TableInput, q as TxPlan, r as TxTables, s as TypedDB, t as TypedTable, u as TypedTx, v as bigint, w as boolean, x as defineSchema, y as enumType, z as integer, A as isPalbaseExtension, B as jsonb, D as makeTypedDB, F as numeric, G as openai, H as policy, J as raw, K as text, L as timestamp, M as uuid, N as vector } from './index-BTMYod_l.js';
+import { M as ModuleClients } from './index-B8v6hVyU.js';
+export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-B8v6hVyU.js';
+import { S as SchemaDef } from './index-B4CcpqLb.js';
+export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvSchemas, g as EnvServiceDatabase, h as EnvTables, E as EnvTypedDatabase, i as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, L as numeric, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from './index-B4CcpqLb.js';
 export { TableTypes, Tables } from './db/env.js';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.js';
 import { a as RouteOptions } from './registry-B8pld3fj.js';
@@ -160,6 +160,14 @@ interface PolicyJSON {
 }
 /** One table. Mirrors Go's `schema.TableJSON`. */
 interface TableJSON {
+    /**
+     * The schema this table lives in. `public` unless declared otherwise.
+     *
+     * The table carries it because the diff iterates over KEYS but passes the
+     * VALUE around: a bare name inside a qualified key space writes the migration
+     * into the wrong schema, silently.
+     */
+    schema: string;
     name: string;
     columns: Record<string, ColumnJSON>;
     rls: boolean;
@@ -200,6 +208,19 @@ interface MemoryJSON {
 interface SchemaJSON {
     tables: Record<string, TableJSON>;
     extensions: string[];
+    /**
+     * Every declared schema, with its HTTP reachability.
+     *
+     * The flag has nowhere else to live: `/v1/db` must know which schemas are
+     * reachable, and introspection must know which schemas the project DECLARED —
+     * a live database also contains internal module schemas that are none of the
+     * diff's business.
+     */
+    schemas: SchemaMetaJSON[];
+}
+interface SchemaMetaJSON {
+    name: string;
+    exposed: boolean;
 }
 /** C-4 wire şekli — Go'nun SearchJSON'ıyla ALAN ADI sözleşmesi (C-5).
  * `mode`/`chunks` yalnız yeni-biçim chunk-modunda emit edilir (D-010);
@@ -233,13 +254,12 @@ interface SearchJSON {
     validity?: boolean;
 }
 /**
- * Serialize a `defineSchema(...)` result into the JSON the deploy applies.
+ * Serialize declared schemas into the JSON the deploy applies.
  *
- * Keyed by the SQL table name rather than by the author's object key, because
- * that is the name the live database answers to — and the diff on the other side
- * compares against what it introspected.
+ * Takes every schema the project declares — one file per schema — because a
+ * cross-schema foreign key can only be checked when both ends are in hand.
  */
-declare function toSchemaJSON(schema: SchemaDef): SchemaJSON;
+declare function toSchemaJSON(schemas: readonly SchemaDef[]): SchemaJSON;
 
 /**
  * channels.ts — the realtime channel authorization DSL (spec C-5).
@@ -348,18 +368,27 @@ declare function defineChannels(map: ChannelsInput): ChannelsDef;
  * The output is FLAT: each table gets a `{ row: {...}; insert: {...} }` entry
  * with plain TypeScript object types. The phantom `ColumnBuilder<...>` type
  * NEVER appears in the generated `.d.ts` — that type only lives at authoring
- * time inside `db/schema.ts`.
+ * time inside the project's `db/*.ts` schema files.
  */
 
 /**
- * Generate the full `palbase-env.d.ts` text for a schema.
+ * Generate the full `palbase-env.d.ts` text for the project's schemas.
+ *
+ * The emitted file ends in `export {};` — same as `makeStackDts`. Without it the
+ * `.d.ts` is a global script, and `declare module "…"` there DECLARES an ambient
+ * module (shadowing the real one, so every export of `@palbase/backend/env`
+ * silently becomes invalid) instead of AUGMENTING it. Measured on a minimal tsc
+ * repro: with the line, exit 0; without it, `TS2305: Module '"…"' has no
+ * exported member`. The line was dropped once in a rewrite and nothing caught
+ * it, so `env-gen.test.ts` now gates it directly.
  *
  * @example
  * import { makeEnvDts } from "@palbase/backend";
- * import schema from "./db/schema.js";
- * writeFileSync("palbase-env.d.ts", makeEnvDts(schema));
+ * import publicSchema from "./db/public.js";
+ * import billing from "./db/billing.js";
+ * writeFileSync("palbase-env.d.ts", makeEnvDts([publicSchema, billing]));
  */
-declare function makeEnvDts(schema: SchemaDef): string;
+declare function makeEnvDts(schemas: readonly SchemaDef[]): string;
 
 /**
  * stack-gen.ts — generate the `palbase-stack.d.ts` text from the names the
@@ -497,20 +526,20 @@ declare function Controller(basePath: string, options?: ControllerOptions): <T e
 declare function assertZeroArgConstructor(Ctrl: unknown, kind: string): void;
 
 /** A legacy method decorator. */
-type MethodDecorator = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
+type MethodDecorator$1 = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
 /** `@Get(subpath, options?)` — declare a GET route. */
-declare const Get: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Get: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Post(subpath, options?)` — declare a POST route. */
-declare const Post: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Post: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Put(subpath, options?)` — declare a PUT route. */
-declare const Put: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Put: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Patch(subpath, options?)` — declare a PATCH route. */
-declare const Patch: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Patch: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Delete(subpath, options?)` — declare a DELETE route. */
-declare const Delete: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Delete: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 /** `@Query(subpath, options?)` — declare an HTTP QUERY route (RFC 10008):
  * safe + idempotent like GET, body-carrying like POST. Input rides `@Body`. */
-declare const Query: (subpath: string, options?: RouteOptions) => MethodDecorator;
+declare const Query: (subpath: string, options?: RouteOptions) => MethodDecorator$1;
 
 /**
  * The payloads a hook handler receives, and nothing else.
@@ -649,6 +678,80 @@ declare function Hook(event: string): (target: object, fnName: string | symbol)
  *   here supplies them, so the field would be `undefined` on every event. */
 declare function getHookConfig(ctor: object): ResolvedHookClass;
 
+interface RoomOptions {
+    /**
+     * The events this room sends to its clients, by name.
+     *
+     * Declared rather than inferred, because a room emits from anywhere in the
+     * class — there is no return type to read. The map is the room's public
+     * surface: it becomes a Swift enum and a TypeScript union in the generated
+     * clients, so a device gets `case .tick(n:)` instead of an opaque bag.
+     *
+     * Per-event rather than one blob because realtime is event-ADDRESSED all the
+     * way down (`Realtime.broadcast(channel, EVENT, payload)`).
+     */
+    events: Record<string, ZodTypeAny>;
+    /**
+     * How long a room is held after its last sign of life, in milliseconds.
+     *
+     * Default 60_000, and the floor is not a matter of taste: the decision must
+     * survive the SLOWEST client's heartbeat gap twice over, and the web SDK
+     * beats every 25 s (palbe/src/realtime/connection.ts:133) against iOS's 2 s
+     * (RealtimeConnection.swift:162). A shorter default would declare healthy web
+     * clients dead between two beats.
+     *
+     * Raise it for an upstream that is expensive to restart; lower it (never
+     * below ~50 s while web beats at 25 s) for one that is cheap.
+     */
+    graceMs?: number;
+}
+/**
+ * Declare a class as a room.
+ *
+ * ```ts
+ * @Room("chat:{roomId}", { events: { message: Message } })
+ * class ChatRoom {
+ *   @OnAuthorize() can({ user, params }) { … }
+ *   @OnFirst()     open(ctx) { … }   // the room filled
+ *   @OnEmpty()     close(ctx) { … }  // nobody is watching any more
+ *   @OnMessage("say", Say) say(ctx) { … }
+ * }
+ * ```
+ *
+ * The pattern is the topic: `chat:{roomId}` addresses `chat:42`. A room is
+ * marked by the PRESENCE of this config — never by a name, a base class or a
+ * naming convention.
+ */
+declare function Room(pattern: string, options: RoomOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
+/** Who may enter. Return a grant to admit, `null` to refuse. */
+declare const OnAuthorize: () => MethodDecorator;
+/**
+ * The room is occupied and nobody owns it — start whatever the room needs.
+ *
+ * Deliberately a CONDITION rather than a 0→1 transition, and the difference is
+ * load-bearing: a runtime restart, a deploy pointer swap (the previous release
+ * is never torn down) and an owner that died all leave a full room with nobody
+ * holding it. A transition would fire once and never again; a condition
+ * recovers every time.
+ *
+ * Exactly one runtime in the cluster enters this hook for a given room, so
+ * three devices never open three upstreams.
+ */
+declare const OnFirst: () => MethodDecorator;
+/** A device arrived. Anything emitted here reaches ONLY that device. */
+declare const OnJoin: () => MethodDecorator;
+/** A device left. */
+declare const OnLeave: () => MethodDecorator;
+/** Nobody is watching any more — stop whatever `@OnFirst` started. */
+declare const OnEmpty: () => MethodDecorator;
+/**
+ * A message from a client, validated against `schema` before the method runs.
+ *
+ * A payload that fails the schema never reaches the method: the client is told
+ * why, and the room's code only ever sees the shape it declared.
+ */
+declare function OnMessage(name: string, schema: ZodTypeAny): MethodDecorator;
+
 /** A legacy parameter decorator. */
 type ParameterDecorator = (target: object, propertyKey: string | symbol, parameterIndex: number) => void;
 /** `@Body(schema)` — inject the request body, validated against `schema`. The
@@ -817,4 +920,4 @@ interface ResolvedJob {
 declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
 declare function getJobConfig(ctor: object): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, toSchemaJSON };
+export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, toSchemaJSON };