@palbase/backend 25.0.1 → 25.0.2

package/dist/db/index.d.cts

@@ -1,5 +1,5 @@
-export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, g as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, S as SchemaDef, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from '../index-DmVyY6N7.cjs';
-export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, bs as dec, bu as inc, bv as now } from '../endpoint-BSGw1pTu.cjs';
+export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, g as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, S as SchemaDef, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from '../index-CmBK76nx.cjs';
+export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, bs as dec, bu as inc, bv as now } from '../endpoint-DYHMo6cC.cjs';
 import './env.cjs';
 import '../stack.cjs';
 import 'zod';

package/dist/db/index.d.ts

@@ -1,5 +1,5 @@
-export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, g as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, S as SchemaDef, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from '../index-B4CcpqLb.js';
-export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, bs as dec, bu as inc, bv as now } from '../endpoint-DMwJjEHQ.js';
+export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, g as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, S as SchemaDef, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from '../index-CW21M9Z3.js';
+export { M as Materialized, b1 as Ref, b3 as TxColumnExpr, b4 as TxInsertShape, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bh as TxTable, bi as TxWhere, bs as dec, bu as inc, bv as now } from '../endpoint-CTEHhb7A.js';
 import './env.js';
 import '../stack.js';
 import 'zod';

package/dist/db/index.js

@@ -22,7 +22,7 @@ import {
   userRef,
   uuid,
   vector
-} from "../chunk-HBOJLP2Z.js";
+} from "../chunk-7JSEN7UR.js";
 import {
   TxPlanError,
   TxRefError,

package/dist/{endpoint-DMwJjEHQ.d.ts → endpoint-CTEHhb7A.d.ts}

@@ -77,17 +77,28 @@ interface MiddlewareContext extends PalbaseModuleClients {
 /** Middleware function signature — receives context and next function. */
 type MiddlewareHandler = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise<void>;
 /**
- * Define a middleware function for use in the middleware/ directory or
- * as endpoint-specific middleware.
+ * REMOVED IN BEHAVIOUR, KEPT IN NAME.
  *
- * Middleware runs before the handler. Call `next()` to pass control
- * to the next middleware or handler. If `next()` is not called, the
- * handler will not execute.
+ * There is no middleware pipeline in this runtime. No bundler reads a
+ * `middleware/` directory, the engine never calls a handler defined here, and
+ * measured on 2026-08-31 this function had no caller anywhere in the runtime or
+ * the CLI. It returned its argument unchanged, so code written against it
+ * compiled, deployed, and then never ran — with nothing reporting that.
  *
- * Errors thrown in middleware are caught by the pipeline and returned
- * as error responses.
+ * A silent shell is the worst version of a retired feature: it lets a user (or a
+ * coding assistant, which is how this surfaced) ship a request logger, an auth
+ * check or a rate limiter that simply does not exist in production. So the call
+ * refuses, and says where the work belongs.
+ *
+ * The SYMBOL survives because removing a published export costs a major and
+ * 25.0.1 had just shipped. Deleting it is a proposal for the next one; the types
+ * below stay either way, so a file that only annotates with them still compiles.
+ *
+ * This is the shape the SDK already uses for a retired surface: `@Query(schema)`
+ * on a parameter throws at decoration time with a message naming its
+ * replacement.
  */
-declare function defineMiddleware(fn: MiddlewareHandler): MiddlewareHandler;
+declare function defineMiddleware(_fn: MiddlewareHandler): never;
 
 /**
  * tx-plan.ts — `Database.transaction()` as a PLAN, not a pinned session.

package/dist/{endpoint-BSGw1pTu.d.cts → endpoint-DYHMo6cC.d.cts}

@@ -77,17 +77,28 @@ interface MiddlewareContext extends PalbaseModuleClients {
 /** Middleware function signature — receives context and next function. */
 type MiddlewareHandler = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise<void>;
 /**
- * Define a middleware function for use in the middleware/ directory or
- * as endpoint-specific middleware.
+ * REMOVED IN BEHAVIOUR, KEPT IN NAME.
  *
- * Middleware runs before the handler. Call `next()` to pass control
- * to the next middleware or handler. If `next()` is not called, the
- * handler will not execute.
+ * There is no middleware pipeline in this runtime. No bundler reads a
+ * `middleware/` directory, the engine never calls a handler defined here, and
+ * measured on 2026-08-31 this function had no caller anywhere in the runtime or
+ * the CLI. It returned its argument unchanged, so code written against it
+ * compiled, deployed, and then never ran — with nothing reporting that.
  *
- * Errors thrown in middleware are caught by the pipeline and returned
- * as error responses.
+ * A silent shell is the worst version of a retired feature: it lets a user (or a
+ * coding assistant, which is how this surfaced) ship a request logger, an auth
+ * check or a rate limiter that simply does not exist in production. So the call
+ * refuses, and says where the work belongs.
+ *
+ * The SYMBOL survives because removing a published export costs a major and
+ * 25.0.1 had just shipped. Deleting it is a proposal for the next one; the types
+ * below stay either way, so a file that only annotates with them still compiles.
+ *
+ * This is the shape the SDK already uses for a retired surface: `@Query(schema)`
+ * on a parameter throws at decoration time with a message naming its
+ * replacement.
  */
-declare function defineMiddleware(fn: MiddlewareHandler): MiddlewareHandler;
+declare function defineMiddleware(_fn: MiddlewareHandler): never;
 
 /**
  * tx-plan.ts — `Database.transaction()` as a PLAN, not a pinned session.

package/dist/engine/index.d.cts

@@ -1,8 +1,8 @@
-export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-VsjBQ4Kw.cjs';
-import '../endpoint-BSGw1pTu.cjs';
+export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-ClpDeSos.cjs';
+import '../endpoint-DYHMo6cC.cjs';
 import '../stack.cjs';
 import 'node:async_hooks';
-import '../index-DmVyY6N7.cjs';
+import '../index-CmBK76nx.cjs';
 import '../db/env.cjs';
-import '../registry-CgJvDYUW.cjs';
+import '../registry-CC0WBQq6.cjs';
 import 'zod';

package/dist/engine/index.d.ts

@@ -1,8 +1,8 @@
-export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-B8v6hVyU.js';
-import '../endpoint-DMwJjEHQ.js';
+export { A as App, m as AuthVerifier, B as BootRefused, n as CreateAppOptions, E as EgressPolicy, p as EngineConfig, M as ModuleClients, q as RateLimiter, r as RequestDatabase, s as RouteEntry, t as RuntimeHooks, u as ScrubResult, v as SqlDriver, w as SqlTx, x as buildRouteTable, y as createApp, z as createLazyTransaction, G as createOps, H as createRequestDatabase, I as effectiveAuth, J as hostAllowed, K as installEgressFence, O as loadConfig, P as makeMemoryCache, Q as matchRoute, T as quoteIdent, U as scrubSecrets, V as withTables } from '../index-CUomTA3e.js';
+import '../endpoint-CTEHhb7A.js';
 import '../stack.js';
 import 'node:async_hooks';
-import '../index-B4CcpqLb.js';
+import '../index-CW21M9Z3.js';
 import '../db/env.js';
-import '../registry-B8pld3fj.js';
+import '../registry-dZZ5JKYg.js';
 import 'zod';

package/dist/{index-B8v6hVyU.d.ts → index-CUomTA3e.d.ts}

@@ -1,8 +1,8 @@
 import { Buckets, BucketTypes } from './stack.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-DMwJjEHQ.js';
-import { E as EnvTypedDatabase } from './index-B4CcpqLb.js';
-import { R as RouteMeta } from './registry-B8pld3fj.js';
+import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-CTEHhb7A.js';
+import { E as EnvTypedDatabase } from './index-CW21M9Z3.js';
+import { R as RouteMeta } from './registry-dZZ5JKYg.js';
 
 /**
  * runtime.ts — request-scoped service singletons.

package/dist/{index-B4CcpqLb.d.ts → index-CW21M9Z3.d.ts}

@@ -1,5 +1,5 @@
 import { Tables, TableTypes, Schemas } from './db/env.js';
-import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-DMwJjEHQ.js';
+import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-CTEHhb7A.js';
 
 /** On delete action for foreign key references. */
 type OnDeleteAction = 'cascade' | 'set null' | 'restrict' | 'no action';

package/dist/{index-VsjBQ4Kw.d.cts → index-ClpDeSos.d.cts}

@@ -1,8 +1,8 @@
 import { Buckets, BucketTypes } from './stack.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-BSGw1pTu.cjs';
-import { E as EnvTypedDatabase } from './index-DmVyY6N7.cjs';
-import { R as RouteMeta } from './registry-CgJvDYUW.cjs';
+import { C as CacheClient, P as PalbaseDocsClient, a as PalbaseFlagsClient, L as Logger, b as PalbaseNotificationsClient, c as PalbaseRealtimeClient, D as DBClient, S as SecretsService, d as PalbaseStorageClient, e as PalbaseBucketClient, f as DBOps, T as TxPlanBody, g as TxPlanResponse, A as AuthSpec } from './endpoint-DYHMo6cC.cjs';
+import { E as EnvTypedDatabase } from './index-CmBK76nx.cjs';
+import { R as RouteMeta } from './registry-CC0WBQq6.cjs';
 
 /**
  * runtime.ts — request-scoped service singletons.

package/dist/{index-DmVyY6N7.d.cts → index-CmBK76nx.d.cts}

@@ -1,5 +1,5 @@
 import { Tables, TableTypes, Schemas } from './db/env.cjs';
-import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-BSGw1pTu.cjs';
+import { D as DBClient, b8 as TxPlanHandle, bh as TxTable, M as Materialized } from './endpoint-DYHMo6cC.cjs';
 
 /** On delete action for foreign key references. */
 type OnDeleteAction = 'cascade' | 'set null' | 'restrict' | 'no action';

package/dist/index.cjs

@@ -1703,6 +1703,7 @@ function columnToJSON(column) {
   if (def.defaultNow === true) out.defaultNow = true;
   if (def.renamedFrom !== void 0) out.renamedFrom = def.renamedFrom;
   if (def.ignored === true) out.ignored = true;
+  if (def.owns === true) out.owns = true;
   if (def.references !== void 0) {
     out.references = { table: def.references.table, column: def.references.column };
   }
@@ -3312,8 +3313,10 @@ function Req() {
 }
 
 // src/middleware.ts
-function defineMiddleware(fn) {
-  return fn;
+function defineMiddleware(_fn) {
+  throw new Error(
+    "defineMiddleware() is not wired to anything: no bundler reads a `middleware/` directory and the engine has no middleware pipeline, so a handler defined here deploys and never runs. Put cross-cutting work in a service the controllers call, and use route options for auth (`@Controller(path, { auth })`) and rate limits (`@Get(path, { rateLimit })`)."
+  );
 }
 
 // src/errors.ts