@palbase/backend 25.0.0 → 25.0.2

package/dist/engine/index.d.cts

@@ -1,8 +1,8 @@
-export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-CoaDN9dL.cjs';
-import '../endpoint-BSGw1pTu.cjs';
+export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-ClpDeSos.cjs';
+import '../endpoint-DYHMo6cC.cjs';
 import '../stack.cjs';
 import 'node:async_hooks';
-import '../index-CwaWRhyc.cjs';
+import '../index-CmBK76nx.cjs';
 import '../db/env.cjs';
-import '../registry-CgJvDYUW.cjs';
+import '../registry-CC0WBQq6.cjs';
 import 'zod';

package/dist/engine/index.d.ts

@@ -1,8 +1,8 @@
-export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-BF1f0DfA.js';
-import '../endpoint-DMwJjEHQ.js';
+export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-CUomTA3e.js';
+import '../endpoint-CTEHhb7A.js';
 import '../stack.js';
 import 'node:async_hooks';
-import '../index-Ct1iiB4N.js';
+import '../index-CW21M9Z3.js';
 import '../db/env.js';
-import '../registry-B8pld3fj.js';
+import '../registry-dZZ5JKYg.js';
 import 'zod';

package/dist/engine/index.js

@@ -16,11 +16,11 @@ import {
   quoteIdent,
   scrubSecrets,
   withTables
-} from "../chunk-43A3KGWL.js";
+} from "../chunk-34I4GB7D.js";
 import "../chunk-XJ2RSHEU.js";
 import "../chunk-XABBC7JP.js";
 import "../chunk-P2Q27SGP.js";
-import "../chunk-ZQRWW37O.js";
+import "../chunk-35PNTIRN.js";
 import "../chunk-7D4SUZUM.js";
 export {
   AuthVerifier,

package/dist/{index-BF1f0DfA.d.ts → index-CUomTA3e.d.ts}

@@ -1,8 +1,8 @@
 import { Buckets, BucketTypes } from './stack.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-DMwJjEHQ.js';
-import { E as EnvTypedDatabase } from './index-Ct1iiB4N.js';
-import { R as RouteMeta } from './registry-B8pld3fj.js';
+import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-CTEHhb7A.js';
+import { E as EnvTypedDatabase } from './index-CW21M9Z3.js';
+import { R as RouteMeta } from './registry-dZZ5JKYg.js';
 
 /**
  * runtime.ts — request-scoped service singletons.

package/dist/{index-Ct1iiB4N.d.ts → index-CW21M9Z3.d.ts}

@@ -1,5 +1,5 @@
 import { Tables, TableTypes, Schemas } from './db/env.js';
-import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-DMwJjEHQ.js';
+import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-CTEHhb7A.js';
 
 /** On delete action for foreign key references. */
 type OnDeleteAction = 'cascade' | 'set null' | 'restrict' | 'no action';
@@ -32,8 +32,20 @@ interface ColumnDef {
     selfRefColumn?: string;
     /** This column OWNS the row: erasure, RLS and the `owner` relation read it. */
     owns?: true;
-    /** Explicit relation name, when the derived one would be ambiguous. */
+    /** Explicit name for the FORWARD relation (child → parent), when the one
+     * derived from the column would be ambiguous or unclear. */
     refAs?: string;
+    /**
+     * Explicit name for the REVERSE relation (parent → children).
+     *
+     * Separate from {@link refAs} because the two directions are different facts:
+     * the forward name describes the parent this row points at (`author`), the
+     * reverse one describes the rows hanging off the parent (`posts`). One option
+     * naming both made an ordinary schema undeclarable — `posts.author_id` and
+     * `comments.author_id` both named `{ as: "author" }` collided on `users`, and
+     * the refusal asked for the `{ as }` they had both already written.
+     */
+    reverseAs?: string;
     /** The table this column belongs to; set by `defineTable`. */
     ownerTable?: {
         name: string;
@@ -197,9 +209,16 @@ declare class ColumnBuilder<K extends ColumnType = ColumnType, N extends boolean
      * In a cycle, ONE side needs an explicit return type:
      * `references((): AnyColumn => y.id)`. One side is enough — measured.
      * For a self-reference use `selfReferences(column)`: no thunk, no annotation.
+     *
+     * `as` names the FORWARD relation (`author_id` → `author` by default);
+     * `reverseAs` names the REVERSE one on the parent, whose default is this
+     * table's own name (`users.posts`). Two foreign keys from one table onto one
+     * parent therefore need a `reverseAs` on at least one of them — the reverse
+     * names would otherwise both be this table's name.
      */
     references(target: () => AnyColumn, opts?: {
         as?: string;
+        reverseAs?: string;
         onDelete?: OnDeleteAction;
     }): ColumnBuilder<K, N, D, E, P, T>;
     /**
@@ -489,7 +508,8 @@ declare const EXTENSION_DEPENDENCIES: Partial<Record<PalbaseExtension, PalbaseEx
 declare function isPalbaseExtension(name: string): name is PalbaseExtension;
 
 /**
- * A named raw-SQL DDL object declared in db/schema.ts for anything the typed DSL
+ * A named raw-SQL DDL object declared in a schema file (`db/public.ts`,
+ * `db/billing.ts`, …) for anything the typed DSL
  * cannot express (EXCLUDE, CHECK, partial/expression indexes, triggers, views).
  * The deploy emits `up` verbatim on the privileged DDL connection — same trust
  * posture as policy().using(). Tracked by NAME (not by diffing the body), so a
@@ -714,19 +734,6 @@ interface SchemaDef<T extends Record<string, TableDef> = Record<string, TableDef
     /** Postgres extensions to install on deploy. Normalized to `[]` when absent. */
     extensions: PalbaseExtension[];
 }
-/** The author-facing input to `defineSchema` — a `tables` map whose keys are
- * the table names and whose values are `{ columns, rls?, policies? }`, plus an
- * optional `extensions` allowlist. */
-interface SchemaInput<T extends Record<string, TableInput> = Record<string, TableInput>> {
-    tables: T;
-    /**
-     * Postgres extensions to enable for this project, e.g. `["vector"]`.
-     * Config-as-code: installed by the deploy (CREATE EXTENSION … SCHEMA
-     * extensions) with the privileged deploy connection. The type is an
-     * allowlist union, so unsupported names fail typecheck.
-     */
-    extensions?: PalbaseExtension[];
-}
 /** Map the author's `{ tables: { <name>: { columns } } }` input to the
  * `{ tables: { <name>: TableDef<columns> } }` runtime/type shape, threading the
  * per-table column map `T[K]["columns"]` so column-level inference survives. */
@@ -1212,4 +1219,4 @@ interface EnvTypedDatabase extends Omit<DBClient, "txPlan" | "asService"> {
     asService(): EnvServiceDatabase;
 }
 
-export { type AnyColumn as A, defineSchema as B, ColumnBuilder as C, defineTable as D, type EnvTypedDatabase as E, enumType as F, installationRef as G, integer as H, type InsertShape as I, isPalbaseExtension as J, jsonb as K, makeTypedDB as L, numeric as M, openai as N, type OnDeleteAction as O, PALBASE_EXTENSIONS as P, ownedByUser as Q, type RawConstraintDef as R, type SchemaDef as S, TABLE_META as T, policy as U, raw as V, text as W, timestamp as X, userRef as Y, uuid as Z, vector as _, type ColumnDef as a, type ColumnMap as b, type ColumnType as c, EXTENSION_DEPENDENCIES as d, type EmbeddingModelRef as e, type EnvSchemas as f, type EnvServiceDatabase as g, type EnvTables as h, type EnvTypedTable as i, type PalbaseExtension as j, PolicyBuilder as k, type PolicyCommand as l, type PolicyDef as m, type PolicyMode as n, type RowShape as o, type SchemaInput as p, type TableDef as q, type TableHandle as r, type TableInput as s, type TxPlan as t, type TxTables as u, type TypedDB as v, type TypedTable as w, type TypedTx as x, bigint as y, boolean as z };
+export { type AnyColumn as A, defineTable as B, ColumnBuilder as C, enumType as D, type EnvTypedDatabase as E, installationRef as F, integer as G, isPalbaseExtension as H, type InsertShape as I, jsonb as J, makeTypedDB as K, numeric as L, openai as M, ownedByUser as N, type OnDeleteAction as O, PALBASE_EXTENSIONS as P, policy as Q, type RawConstraintDef as R, type SchemaDef as S, TABLE_META as T, raw as U, text as V, timestamp as W, userRef as X, uuid as Y, vector as Z, type ColumnDef as a, type ColumnMap as b, type ColumnType as c, EXTENSION_DEPENDENCIES as d, type EmbeddingModelRef as e, type EnvSchemas as f, type EnvServiceDatabase as g, type EnvTables as h, type EnvTypedTable as i, type PalbaseExtension as j, PolicyBuilder as k, type PolicyCommand as l, type PolicyDef as m, type PolicyMode as n, type RowShape as o, type TableDef as p, type TableHandle as q, type TableInput as r, type TxPlan as s, type TxTables as t, type TypedDB as u, type TypedTable as v, type TypedTx as w, bigint as x, boolean as y, defineSchema as z };

package/dist/{index-CoaDN9dL.d.cts → index-ClpDeSos.d.cts}

@@ -1,8 +1,8 @@
 import { Buckets, BucketTypes } from './stack.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-BSGw1pTu.cjs';
-import { E as EnvTypedDatabase } from './index-CwaWRhyc.cjs';
-import { R as RouteMeta } from './registry-CgJvDYUW.cjs';
+import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-DYHMo6cC.cjs';
+import { E as EnvTypedDatabase } from './index-CmBK76nx.cjs';
+import { R as RouteMeta } from './registry-CC0WBQq6.cjs';
 
 /**
  * runtime.ts — request-scoped service singletons.

package/dist/{index-CwaWRhyc.d.cts → index-CmBK76nx.d.cts}

@@ -1,5 +1,5 @@
 import { Tables, TableTypes, Schemas } from './db/env.cjs';
-import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-BSGw1pTu.cjs';
+import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-DYHMo6cC.cjs';
 
 /** On delete action for foreign key references. */
 type OnDeleteAction = 'cascade' | 'set null' | 'restrict' | 'no action';
@@ -32,8 +32,20 @@ interface ColumnDef {
     selfRefColumn?: string;
     /** This column OWNS the row: erasure, RLS and the `owner` relation read it. */
     owns?: true;
-    /** Explicit relation name, when the derived one would be ambiguous. */
+    /** Explicit name for the FORWARD relation (child → parent), when the one
+     * derived from the column would be ambiguous or unclear. */
     refAs?: string;
+    /**
+     * Explicit name for the REVERSE relation (parent → children).
+     *
+     * Separate from {@link refAs} because the two directions are different facts:
+     * the forward name describes the parent this row points at (`author`), the
+     * reverse one describes the rows hanging off the parent (`posts`). One option
+     * naming both made an ordinary schema undeclarable — `posts.author_id` and
+     * `comments.author_id` both named `{ as: "author" }` collided on `users`, and
+     * the refusal asked for the `{ as }` they had both already written.
+     */
+    reverseAs?: string;
     /** The table this column belongs to; set by `defineTable`. */
     ownerTable?: {
         name: string;
@@ -197,9 +209,16 @@ declare class ColumnBuilder<K extends ColumnType = ColumnType, N extends boolean
      * In a cycle, ONE side needs an explicit return type:
      * `references((): AnyColumn => y.id)`. One side is enough — measured.
      * For a self-reference use `selfReferences(column)`: no thunk, no annotation.
+     *
+     * `as` names the FORWARD relation (`author_id` → `author` by default);
+     * `reverseAs` names the REVERSE one on the parent, whose default is this
+     * table's own name (`users.posts`). Two foreign keys from one table onto one
+     * parent therefore need a `reverseAs` on at least one of them — the reverse
+     * names would otherwise both be this table's name.
      */
     references(target: () => AnyColumn, opts?: {
         as?: string;
+        reverseAs?: string;
         onDelete?: OnDeleteAction;
     }): ColumnBuilder<K, N, D, E, P, T>;
     /**
@@ -489,7 +508,8 @@ declare const EXTENSION_DEPENDENCIES: Partial<Record<PalbaseExtension, PalbaseEx
 declare function isPalbaseExtension(name: string): name is PalbaseExtension;
 
 /**
- * A named raw-SQL DDL object declared in db/schema.ts for anything the typed DSL
+ * A named raw-SQL DDL object declared in a schema file (`db/public.ts`,
+ * `db/billing.ts`, …) for anything the typed DSL
  * cannot express (EXCLUDE, CHECK, partial/expression indexes, triggers, views).
  * The deploy emits `up` verbatim on the privileged DDL connection — same trust
  * posture as policy().using(). Tracked by NAME (not by diffing the body), so a
@@ -714,19 +734,6 @@ interface SchemaDef<T extends Record<string, TableDef> = Record<string, TableDef
     /** Postgres extensions to install on deploy. Normalized to `[]` when absent. */
     extensions: PalbaseExtension[];
 }
-/** The author-facing input to `defineSchema` — a `tables` map whose keys are
- * the table names and whose values are `{ columns, rls?, policies? }`, plus an
- * optional `extensions` allowlist. */
-interface SchemaInput<T extends Record<string, TableInput> = Record<string, TableInput>> {
-    tables: T;
-    /**
-     * Postgres extensions to enable for this project, e.g. `["vector"]`.
-     * Config-as-code: installed by the deploy (CREATE EXTENSION … SCHEMA
-     * extensions) with the privileged deploy connection. The type is an
-     * allowlist union, so unsupported names fail typecheck.
-     */
-    extensions?: PalbaseExtension[];
-}
 /** Map the author's `{ tables: { <name>: { columns } } }` input to the
  * `{ tables: { <name>: TableDef<columns> } }` runtime/type shape, threading the
  * per-table column map `T[K]["columns"]` so column-level inference survives. */
@@ -1212,4 +1219,4 @@ interface EnvTypedDatabase extends Omit<DBClient, "txPlan" | "asService"> {
     asService(): EnvServiceDatabase;
 }
 
-export { type AnyColumn as A, defineSchema as B, ColumnBuilder as C, defineTable as D, type EnvTypedDatabase as E, enumType as F, installationRef as G, integer as H, type InsertShape as I, isPalbaseExtension as J, jsonb as K, makeTypedDB as L, numeric as M, openai as N, type OnDeleteAction as O, PALBASE_EXTENSIONS as P, ownedByUser as Q, type RawConstraintDef as R, type SchemaDef as S, TABLE_META as T, policy as U, raw as V, text as W, timestamp as X, userRef as Y, uuid as Z, vector as _, type ColumnDef as a, type ColumnMap as b, type ColumnType as c, EXTENSION_DEPENDENCIES as d, type EmbeddingModelRef as e, type EnvSchemas as f, type EnvServiceDatabase as g, type EnvTables as h, type EnvTypedTable as i, type PalbaseExtension as j, PolicyBuilder as k, type PolicyCommand as l, type PolicyDef as m, type PolicyMode as n, type RowShape as o, type SchemaInput as p, type TableDef as q, type TableHandle as r, type TableInput as s, type TxPlan as t, type TxTables as u, type TypedDB as v, type TypedTable as w, type TypedTx as x, bigint as y, boolean as z };
+export { type AnyColumn as A, defineTable as B, ColumnBuilder as C, enumType as D, type EnvTypedDatabase as E, installationRef as F, integer as G, isPalbaseExtension as H, type InsertShape as I, jsonb as J, makeTypedDB as K, numeric as L, openai as M, ownedByUser as N, type OnDeleteAction as O, PALBASE_EXTENSIONS as P, policy as Q, type RawConstraintDef as R, type SchemaDef as S, TABLE_META as T, raw as U, text as V, timestamp as W, userRef as X, uuid as Y, vector as Z, type ColumnDef as a, type ColumnMap as b, type ColumnType as c, EXTENSION_DEPENDENCIES as d, type EmbeddingModelRef as e, type EnvSchemas as f, type EnvServiceDatabase as g, type EnvTables as h, type EnvTypedTable as i, type PalbaseExtension as j, PolicyBuilder as k, type PolicyCommand as l, type PolicyDef as m, type PolicyMode as n, type RowShape as o, type TableDef as p, type TableHandle as q, type TableInput as r, type TxPlan as s, type TxTables as t, type TypedDB as u, type TypedTable as v, type TypedTx as w, bigint as x, boolean as y, defineSchema as z };

package/dist/index.cjs

@@ -1703,6 +1703,7 @@ function columnToJSON(column) {
   if (def.defaultNow === true) out.defaultNow = true;
   if (def.renamedFrom !== void 0) out.renamedFrom = def.renamedFrom;
   if (def.ignored === true) out.ignored = true;
+  if (def.owns === true) out.owns = true;
   if (def.references !== void 0) {
     out.references = { table: def.references.table, column: def.references.column };
   }
@@ -1965,9 +1966,16 @@ function defineTable(name, input) {
   }
   const policies = (input.policies ?? []).map(toPolicyDef);
   const rls = policies.length > 0 || input.rls !== false;
+  const owned = {};
+  for (const [colName, b] of Object.entries(input.columns)) {
+    const builder = b;
+    const clone = Object.create(Object.getPrototypeOf(builder));
+    Object.defineProperty(clone, "_def", { value: { ...builder._def }, enumerable: true, writable: true });
+    owned[colName] = clone;
+  }
   const def = {
     name,
-    columns: input.columns,
+    columns: owned,
     rls,
     policies
   };
@@ -2025,10 +2033,10 @@ function defineTable(name, input) {
     }
     def.memory = input.memory;
   }
-  for (const b of Object.values(input.columns)) {
+  for (const b of Object.values(owned)) {
     b._def.ownerTable = def;
   }
-  const handle = { ...input.columns };
+  const handle = { ...owned };
   Object.defineProperty(handle, TABLE_META, { value: def, enumerable: false });
   return handle;
 }
@@ -2345,6 +2353,12 @@ var ColumnBuilder = class _ColumnBuilder {
    * In a cycle, ONE side needs an explicit return type:
    * `references((): AnyColumn => y.id)`. One side is enough — measured.
    * For a self-reference use `selfReferences(column)`: no thunk, no annotation.
+   *
+   * `as` names the FORWARD relation (`author_id` → `author` by default);
+   * `reverseAs` names the REVERSE one on the parent, whose default is this
+   * table's own name (`users.posts`). Two foreign keys from one table onto one
+   * parent therefore need a `reverseAs` on at least one of them — the reverse
+   * names would otherwise both be this table's name.
    */
   references(target, opts) {
     refuseOnVector(this._def, "references");
@@ -2355,6 +2369,7 @@ var ColumnBuilder = class _ColumnBuilder {
     }
     this._def.referencesThunk = target;
     if (opts?.as !== void 0) this._def.refAs = opts.as;
+    if (opts?.reverseAs !== void 0) this._def.reverseAs = opts.reverseAs;
     if (opts?.onDelete !== void 0) this._def.onDeleteAction = opts.onDelete;
     return new _ColumnBuilder(this._def.type, this._def);
   }
@@ -2581,64 +2596,73 @@ function optionalOnInsert(def) {
 function forwardName(column) {
   return column.endsWith("_id") ? column.slice(0, -3) : column;
 }
-function qualify(schemaName, tableName) {
-  return schemaName === "public" ? tableName : `${schemaName}.${tableName}`;
+function describeOrigin(o) {
+  return o.direction === "forward" ? `the foreign key "${o.table}.${o.column}"` : `the reverse of "${o.table}.${o.column}"`;
+}
+function renameCall(o) {
+  if (o.direction === "reverse") return `references(() => \u2026, { reverseAs: "\u2026" })`;
+  if (o.def.owns === true) {
+    return `ownedByUser() takes no { as } \u2014 if "${o.column}" only POINTS at a user, declare it userRef({ onDelete: \u2026 }) instead`;
+  }
+  const target = o.def.references?.table;
+  if (target === "auth.users") return `userRef({ onDelete: \u2026, as: "\u2026" })`;
+  if (target === "auth.installations") return `installationRef({ onDelete: \u2026, as: "\u2026" })`;
+  if (o.def.selfRefColumn !== void 0) return `selfReferences("\u2026", { as: "\u2026" })`;
+  return `references(() => \u2026, { as: "\u2026" })`;
 }
 function buildRelations(schemas) {
   const out = /* @__PURE__ */ new Map();
-  const keyOf = /* @__PURE__ */ new Map();
+  const taken = /* @__PURE__ */ new Map();
   for (const schema of schemas) {
     for (const t of Object.values(schema.tables)) {
-      const key = qualify(schema.name, t.name);
+      const key = qualifiedTableKey(schema.name, t.name);
       out.set(key, []);
-      keyOf.set(t.name, key);
+      taken.set(key, /* @__PURE__ */ new Map());
     }
   }
+  const claim = (tableKey, name, origin, edge) => {
+    const names = taken.get(tableKey);
+    if (names === void 0) return;
+    const held = names.get(name);
+    if (held !== void 0) {
+      if (held.def.owns === true && origin.def.owns === true) {
+        throw new Error(
+          `table "${tableKey}" declares TWO owner columns (${held.column}, ${origin.column}) \u2014 a table has at most ONE ownedByUser(). If the other column only POINTS at a user, declare it userRef({ onDelete: \u2026 }) instead.`
+        );
+      }
+      const heldFix = renameCall(held);
+      const originFix = renameCall(origin);
+      const remedy = heldFix === originFix ? `rename one of them: ${heldFix}` : `rename one of them \u2014 "${held.table}.${held.column}": ${heldFix}; "${origin.table}.${origin.column}": ${originFix}`;
+      throw new Error(
+        `table "${tableKey}": ${describeOrigin(held)} and ${describeOrigin(origin)} both resolve to the relation name "${name}" \u2014 ${remedy}.`
+      );
+    }
+    names.set(name, origin);
+    out.get(tableKey)?.push(edge);
+  };
   for (const schema of schemas) {
     for (const table of Object.values(schema.tables)) {
-      const childKey = qualify(schema.name, table.name);
-      const bucket = out.get(childKey);
-      if (bucket === void 0) continue;
-      const byTarget = /* @__PURE__ */ new Map();
-      for (const [col, builder] of Object.entries(table.columns)) {
-        const ref = builder._def.references;
-        if (ref === void 0) continue;
-        const list = byTarget.get(ref.table) ?? [];
-        list.push(col);
-        byTarget.set(ref.table, list);
-      }
-      for (const [target, cols] of byTarget) {
-        if (cols.length < 2) continue;
-        const unnamed = cols.filter((c) => {
-          const d = table.columns[c]?._def;
-          return d?.refAs === void 0 && d?.owns !== true;
-        });
-        if (unnamed.length > 0) {
-          throw new Error(
-            `table "${table.name}" declares ${cols.length} foreign keys onto "${target}" (${cols.join(", ")}) \u2014 name each one: references(() => \u2026, { as: "\u2026" })`
-          );
-        }
-      }
+      const childKey = qualifiedTableKey(schema.name, table.name);
+      if (!out.has(childKey)) continue;
       for (const [col, builder] of Object.entries(table.columns)) {
         const def = builder._def;
         if (def.references === void 0) continue;
+        const targetKey = def.references.table;
         const name = def.owns === true ? "owner" : def.refAs ?? forwardName(col);
-        if (bucket.some((r) => r.name === name)) {
-          throw new Error(
-            name === "owner" ? `table "${table.name}": two columns claim ownership of the row \u2014 a table has at most ONE ownedByUser(). If the other column only POINTS at a user, declare it userRef({ onDelete: \u2026 }) instead.` : `table "${table.name}": two relations resolve to the name "${name}" \u2014 give one an explicit { as: "\u2026" }`
-          );
-        }
-        const targetKey = keyOf.get(def.references.table) ?? def.references.table;
-        bucket.push({ name, to: targetKey, kind: "one", via: col });
-        const parent = out.get(targetKey);
-        if (parent === void 0 || targetKey === childKey) continue;
-        const reverse = def.refAs ?? table.name;
-        if (parent.some((r) => r.name === reverse)) {
-          throw new Error(
-            `table "${def.references.table}": two reverse relations resolve to the name "${reverse}" \u2014 give one an explicit { as: "\u2026" }`
-          );
-        }
-        parent.push({ name: reverse, to: childKey, kind: "many", via: col });
+        claim(
+          childKey,
+          name,
+          { table: table.name, column: col, direction: "forward", def },
+          { name, to: targetKey, kind: "one", via: col }
+        );
+        if (!out.has(targetKey) || targetKey === childKey) continue;
+        const reverse = def.reverseAs ?? table.name;
+        claim(
+          targetKey,
+          reverse,
+          { table: table.name, column: col, direction: "reverse", def },
+          { name: reverse, to: childKey, kind: "many", via: col }
+        );
       }
     }
   }
@@ -2675,7 +2699,6 @@ function tableBlock(table, relations, indent) {
 }
 function makeEnvDts(schemas) {
   const relations = buildRelations(schemas);
-  const qualify2 = (schemaName, table) => schemaName === "public" ? table : `${schemaName}.${table}`;
   const publicSchema = schemas.find((s) => s.name === "public");
   const others = schemas.filter((s) => s.name !== "public");
   const publicBlocks = Object.keys(publicSchema?.tables ?? {}).map(
@@ -2686,7 +2709,7 @@ ${publicBlocks.join("\n")}
   ` : "";
   const schemaBlocks = others.map((schema) => {
     const inner = Object.keys(schema.tables).map(
-      (name) => tableBlock(schema.tables[name], relations.get(qualify2(schema.name, name)) ?? [], "      ")
+      (name) => tableBlock(schema.tables[name], relations.get(qualifiedTableKey(schema.name, name)) ?? [], "      ")
     );
     return `    ${schema.name}: {
 ${inner.join("\n")}
@@ -2880,6 +2903,10 @@ function recordRoom(ctor, meta) {
   const carrier = carrierOf(ctor);
   const buffer = ownRoomBuffer(carrier);
   carrier[ROOM] = { ...meta, hooks: buffer.hooks, messages: buffer.messages };
+  const g = globalThis;
+  const REGISTRY2 = /* @__PURE__ */ Symbol.for("palbase.backend.allControllers");
+  const all = g[REGISTRY2] ??= [];
+  if (!all.includes(ctor)) all.push(ctor);
 }
 
 // src/decorators/controller.ts
@@ -3286,8 +3313,10 @@ function Req() {
 }
 
 // src/middleware.ts
-function defineMiddleware(fn) {
-  return fn;
+function defineMiddleware(_fn) {
+  throw new Error(
+    "defineMiddleware() is not wired to anything: no bundler reads a `middleware/` directory and the engine has no middleware pipeline, so a handler defined here deploys and never runs. Put cross-cutting work in a service the controllers call, and use route options for auth (`@Controller(path, { auth })`) and rate limits (`@Get(path, { rateLimit })`)."
+  );
 }
 
 // src/errors.ts