@palbase/backend 25.1.0 → 27.0.0

package/dist/index.d.cts

@@ -1,15 +1,15 @@
-import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-DYHMo6cC.cjs';
-export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UniqueViolation, bq as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-DYHMo6cC.cjs';
-import { M as ModuleClients } from './index-ClpDeSos.cjs';
-export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-ClpDeSos.cjs';
-import { S as SchemaDef } from './index-CmBK76nx.cjs';
-export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvSchemas, g as EnvServiceDatabase, h as EnvTables, E as EnvTypedDatabase, i as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, L as numeric, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from './index-CmBK76nx.cjs';
+import { P as PalbaseResult, e as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-Bve7BBTL.cjs';
+export { f as AnyColumn, g as AuthConfig, B as BadRequest, h as Cache, C as CacheClient, i as ClientInfo, j as ColRef, k as ColumnBuilder, l as ColumnDef, m as ColumnMap, n as ColumnType, o as Conflict, D as DBClient, a as DBOps, p as Database, q as DeadlockDetected, r as Documents, E as EXTENSION_DEPENDENCIES, s as EmbeddingModelRef, t as EnvSchemas, u as EnvServiceDatabase, v as EnvTables, w as EnvTypedDatabase, x as EnvTypedTable, y as ErrorDef, z as ErrorMap, F as ErrorThrowers, G as FileContext, I as Flags, J as Forbidden, K as HttpMethod, L as IndexBuilder, M as IndexDef, N as InsertShape, O as LifecycleHook, Q as Log, U as Logger, V as Materialized, W as Middleware, X as MiddlewareContext, Y as MiddlewareHandler, Z as NotFound, $ as Notifications, a0 as OnDeleteAction, a1 as PALBASE_EXTENSIONS, a2 as PBRequest, a3 as PalError, a4 as PalbaseAnalyticsClient, a5 as PalbaseAnalyticsManagementNamespace, a6 as PalbaseAnalyticsProperties, a7 as PalbaseAnalyticsQueryNamespace, a8 as PalbaseAttestAndroidParams, a9 as PalbaseAttestAndroidResult, aa as PalbaseAttestiOSParams, ab as PalbaseAttestiOSResult, ac as PalbaseAuthClient, ad as PalbaseBatchOverrideOperation, ae as PalbaseBatchSetOverridesResult, af as PalbaseBindDeviceParams, ag as PalbaseBucketClient, ah as PalbaseClearAllOverridesResult, ai as PalbaseClearOverrideResult, aj as PalbaseCohortQueryInput, ak as PalbaseCohortResult, al as PalbaseCollectionRef, am as PalbaseCountQueryInput, an as PalbaseCountResult, ao as PalbaseCreateLinkParams, ap as PalbaseDeviceInfo, aq as PalbaseDeviceTokenView, ar as PalbaseDocsClient, as as PalbaseDocumentRef, at as PalbaseDocumentSnapshot, au as PalbaseEmailClient, av as PalbaseEmailSendParams, aw as PalbaseEmailSendResponse, ax as PalbaseEventNamesResult, ay as PalbaseEventsQueryInput, az as PalbaseEventsResult, aA as PalbaseExtension, aB as PalbaseFileObject, aC as PalbaseFlag, aD as PalbaseFlagContext, aE as PalbaseFlagSource, aF as PalbaseFlagValue, aG as PalbaseFlagVariant, aH as PalbaseFlagsClient, aI as PalbaseFlagsServiceClient, aJ as PalbaseFunctionsClient, aK as PalbaseFunnelQueryInput, aL as PalbaseFunnelResult, aM as PalbaseIdentifyTraits, aN as PalbaseInboxClient, aO as PalbaseInboxListOptions, aP as PalbaseInboxListResult, aQ as PalbaseInboxMessage, aR as PalbaseInboxSendParams, aS as PalbaseInboxSendResponse, aT as PalbaseInitialLink, aU as PalbaseInvokeOptions, aV as PalbaseLink, aW as PalbaseLinkAnalytics, aX as PalbaseLinkDetails, aY as PalbaseLinksClient, aZ as PalbaseListLinksOptions, a_ as PalbaseListLinksResult, a$ as PalbaseListOptions, b0 as PalbaseMatchParams, b1 as PalbaseMultiChannelResponse, b2 as PalbaseNotificationsClient, b3 as PalbaseOverviewResult, b4 as PalbasePreferences, b5 as PalbasePreferencesClient, b6 as PalbasePushClient, b7 as PalbasePushSendParams, b8 as PalbasePushSendResponse, b9 as PalbaseQrCodeOptions, ba as PalbaseQuerySnapshot, bb as PalbaseRealtimeClient, bc as PalbaseRegisterDeviceParams, bd as PalbaseRetentionQueryInput, be as PalbaseRetentionResult, bf as PalbaseSession, bg as PalbaseSetOverrideResult, bh as PalbaseSetOverridesResult, bi as PalbaseSignedUrlResponse, bj as PalbaseSmsClient, bk as PalbaseSmsSendParams, bl as PalbaseSmsSendResponse, bm as PalbaseStorageClient, bn as PalbaseTransformOptions, bo as PalbaseUpdateLinkParams, bp as PalbaseUploadOptions, bq as PalbaseUser, br as PalbaseUserDetailResult, bs as PalbaseUsersQueryInput, bt as PalbaseUsersResult, bu as PalbaseVerifyRequestSignatureParams, bv as PalbaseWhereOperator, bw as PolicyBinOp, bx as PolicyBuilder, by as PolicyCommand, bz as PolicyDef, bA as PolicyExprCtx, bB as PolicyExprRef, bC as PolicyMode, bD as PolicyOperand, R as RateLimitConfig, bE as RawConstraintDef, bF as Realtime, bG as Ref, bH as RequestStore, bI as RowShape, c as RuntimeServices, bJ as Secrets, bK as SecretsService, bL as SerializationFailure, bM as SetShape, bN as SetValue, bO as ShutdownRunner, bP as SqlFragment, bQ as Storage, bR as TABLE_META, bS as TableDef, bT as TableHandle, bU as TableInput, bV as TooManyRequests, bW as TxColumnExpr, bX as TxInsertShape, bY as TxInsertValue, bZ as TxNow, b_ as TxPlan, T as TxPlanBody, b$ as TxPlanError, c0 as TxPlanHandle, c1 as TxPlanOpResult, c2 as TxPlanRejection, b as TxPlanResponse, c3 as TxRefError, c4 as TxRow, c5 as TxRows, c6 as TxSelectOptions, c7 as TxSetShape, c8 as TxSetValue, c9 as TxTable, ca as TxTables, cb as TxWhere, cc as TxWireExpr, cd as TxWireGuard, ce as TxWireOp, cf as TxWireRef, cg as TxWireValue, ch as TypedDB, ci as TypedTable, cj as TypedTx, ck as Unauthorized, cl as UniqueViolation, cm as UserT, cn as VerifiedDevice, co as __getRuntime, d as __requestALS, cp as __resetLifecycleHooks, cq as __runStartHooks, _ as __runWithRuntime, cr as __setRuntime, cs as bigint, ct as boolean, cu as col, cv as dec, cw as decrement, cx as defineMiddleware, cy as defineSchema, cz as defineTable, cA as enumType, cB as exprCtx, cC as inc, cD as increment, cE as index, cF as installationRef, cG as integer, cH as isPalbaseExtension, cI as isRetryable, cJ as jsonb, cK as makeTypedDB, cL as now, cM as numeric, cN as onShutdown, cO as onStart, cP as openai, cQ as ownedByUser, cR as policy, cS as raw, cT as sqlFragment, cU as text, cV as timestamp, cW as userRef, cX as uuid, cY as vector, cZ as withRetry } from './index-Bve7BBTL.cjs';
+import { M as ModuleClients, C as Container } from './index-VtToZmUm.cjs';
+export { D as DiError, a as DiKind, b as ModulePressure, c as assertNoOrphanEntryPoints, d as buildContainer } from './index-VtToZmUm.cjs';
 export { TableTypes, Tables } from './db/env.cjs';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.cjs';
-import { a as RouteOptions } from './registry-CC0WBQq6.cjs';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-CC0WBQq6.cjs';
+import { a as RouteOptions } from './registry-Bk9_rbNd.cjs';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-Bk9_rbNd.cjs';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
+import { T as Token } from './module-Dl1KFVtc.cjs';
+export { M as Module, a as ModuleDef, _ as __claimModules } from './module-Dl1KFVtc.cjs';
 import 'node:async_hooks';
 
 /**
@@ -145,6 +145,10 @@ interface ColumnJSON {
         column: string;
     };
     onDeleteAction?: string;
+    /** FR-044: türev FK index'i kapatılmışsa `false`. Bildirilmemişse alan YOK. */
+    index?: boolean;
+    /** FR-049: kolon increment() ile güncelleniyorsa `true`. Aksi hâlde alan YOK. */
+    counter?: boolean;
     enumName?: string;
     enumValues?: string[];
     unique?: boolean;
@@ -155,8 +159,16 @@ interface PolicyJSON {
     name: string;
     command: string;
     roles: string[];
-    using: string | null;
-    withCheck: string | null;
+    /**
+     * `USING (...)` — ham string (kaçış kapağı, FR-028) ya da YAPI (FR-022).
+     *
+     * Go tarafı ikisini de okur: string olan verbatim emit edilir, yapı olan
+     * `generator.go`'da SQL'e çevrilir (C-6). Yapı hâli InitPlan sarmalamasını
+     * ve `TO <rol>` daraltmasını GÜVENLE yapılabilir kılan şey — string üstünde
+     * regex'le denemek yorum içindeki bir `auth.uid()`'yi de sarmalardı.
+     */
+    using: string | PolicyExpr | null;
+    withCheck: string | PolicyExpr | null;
     permissive: boolean;
 }
 /** One table. Mirrors Go's `schema.TableJSON`. */
@@ -187,13 +199,36 @@ interface TableJSON {
         name: string;
         expr: string;
     }[];
-    indexes?: {
-        name: string;
-        columns: string[];
-    }[];
+    indexes?: IndexJSON[];
+    /**
+     * appendOnly (FR-030): tablo yalnız INSERT kabul eder. Sıfır değerde OMIT —
+     * bildirmeyen tablolar wire'da bayt-aynı kalır.
+     */
+    appendOnly?: boolean;
     search?: SearchJSON;
     memory?: MemoryJSON;
 }
+/**
+ * Bir index'in wire şekli — Go'nun `IndexJSON`'ıyla ALAN-ADI SÖZLEŞMESİ.
+ *
+ * `name` + `columns` bugünkü hâl; kalanı FR-041…043'ün taşıyıcısı. Hepsi sıfır
+ * değerde OMIT edilir: bildirmeyen bir index wire'da eskisiyle bayt-aynı kalır,
+ * yoksa dokunulmamış her şema diff'te değişmiş görünür ve her deploy churn üretir.
+ */
+interface IndexJSON {
+    name: string;
+    columns: string[];
+    /** Partial index koşulu (FR-042) — filtre şekli `WhereFilter` ile aynı. */
+    where?: unknown;
+    /** İfade index'i (FR-043), ör. `lower(email)`. `columns` ile birlikte kullanılmaz. */
+    expression?: string;
+    /** Kolon sırası (FR-043). */
+    sort?: "asc" | "desc";
+    /** NULL sırası (FR-043). */
+    nulls?: "first" | "last";
+    /** Covering index — `INCLUDE (...)` (FR-043). */
+    include?: string[];
+}
 /** C-11 wire şekli — Go'nun MemoryJSON'ıyla alan-adı sözleşmesi (D-019).
  * Beyansız tablolarda alan OMIT — eski şemalar bayt-aynı (NFR-B1). */
 interface MemoryJSON {
@@ -364,7 +399,7 @@ declare function defineChannels(map: ChannelsInput): ChannelsDef;
  * {@link makeEnvDts} with the project's schema and write the returned string to
  * `palbase-env.d.ts` at the project root. That file AUGMENTS the
  * `@palbase/backend/env` `Tables` interface (controlled global augmentation,
- * C5) so `Database.tables.<name>` is typed with no import and no generic.
+ * C5) so `Database.public.<name>` is typed with no import and no generic.
  *
  * The output is FLAT: each table gets a `{ row: {...}; insert: {...} }` entry
  * with plain TypeScript object types. The phantom `ColumnBuilder<...>` type
@@ -677,7 +712,17 @@ declare function Hook(event: string): (target: object, fnName: string | symbol)
  *
  * @throws when the class declares constructor parameters (FR-011) — nothing
  *   here supplies them, so the field would be `undefined` on every event. */
-declare function getHookConfig(ctor: object): ResolvedHookClass;
+declare function getHookConfig(ctor: object, container: Container): ResolvedHookClass;
+/**
+ * Which events a hook class declares, and which of them BLOCK.
+ *
+ * Metadata only — the class is not constructed. Deploy's `hooks.manifest.json`
+ * needs exactly this and has no container to build with.
+ */
+declare function getHookManifest(ctor: object): {
+    blocking: string[];
+    listeners: string[];
+};
 
 interface RoomOptions {
     /**
@@ -866,6 +911,14 @@ interface SignatureSpec {
     timestampHeader?: string;
 }
 interface WebhookOptions {
+    /**
+     * The path segment this webhook is served at: `/webhooks/<name>`.
+     *
+     * DECLARED, not derived. It used to be the file's name, which put a PUBLIC
+     * URL — the one a sender is configured with — in the file system rather than
+     * beside the provider and the secret, where a reader looks for it.
+     */
+    name: string;
     provider?: WebhookProvider;
     signature?: SignatureSpec;
     /** Env-var REFERENCE for the signing secret — the platform never holds it. */
@@ -894,9 +947,74 @@ declare function On(event: string): (target: object, fnName: string | symbol) =>
  *
  * @throws when the class declares constructor parameters (FR-011) — nothing
  *   here supplies them, so the field would be `undefined` on every delivery. */
-declare function getWebhookConfig(ctor: object): ResolvedWebhook;
+/**
+ * Everything a webhook DECLARES — provider or signature template, the secret's
+ * env var, and the event names — validated, without constructing the class.
+ *
+ * Same split as jobs and hooks: reading a declaration should not build an
+ * object. `getWebhookConfig` is what needs an instance, and it needs a
+ * container to get one.
+ */
+declare function getWebhookManifest(ctor: object): {
+    name: string;
+    provider: string | undefined;
+    secretEnv: string;
+    events: string[];
+};
+declare function getWebhookConfig(ctor: object, container: Container): ResolvedWebhook;
+
+/**
+ * Marks a class the container can resolve.
+ *
+ * TWO JOBS, and the first one is why the decorator has to exist at all:
+ * TypeScript under `emitDecoratorMetadata` emits `design:paramtypes` for
+ * DECORATED classes only. Measured — an undecorated class with the same
+ * constructor carries no metadata, and `Reflect.getMetadata` answers
+ * `undefined`.
+ *
+ * The second is being COUNTABLE. Ownership, visibility and permission are still
+ * read from a single `@Module` and never from this decorator — recording the
+ * class here decides nothing. It only makes "carries `@Injectable()` and
+ * appears in no module" a question the build can ask, which FR-010 requires it
+ * to answer by name. The body was empty until 2026-09-02, and the consequence
+ * was measured through the CLI: an `@Injectable()` service in no module built
+ * clean, while this file's own comment claimed the build named it.
+ */
+declare function Injectable(): ClassDecorator;
+/**
+ * TAKES the accumulated declarations — it does not read them.
+ *
+ * Same claim semantics as `__claimModules`, and for the same reason: a
+ * candidate bundle is imported into the SAME process as the live app it might
+ * replace, so reading would let a candidate be judged against the live app's
+ * classes and a discarded candidate would leave its own behind.
+ */
+declare function __claimInjectables(): Token[];
+
+declare const jobsOf: (container: Container) => Token[];
+declare const webhooksOf: (container: Container) => Token[];
+/**
+ * A hook class carries handler entries and NO class-level marker, so it is
+ * recognised by having handlers while being neither a webhook nor a controller.
+ * `@On` is shared with `@Webhook`, which is why the webhook marker is what
+ * separates them.
+ */
+declare const hooksOf: (container: Container) => Token[];
+declare const roomsOf: (container: Container) => Token[];
+declare const controllersOf: (container: Container) => Token[];
 
 interface JobOptions {
+    /**
+     * The job's identity, and the name the scheduler holds its rows under.
+     *
+     * DECLARED, not derived. It used to be the file's name, which made the
+     * identity a property of where the class sat — rename the file and the
+     * scheduler starts a different job. Ownership and identity both come from a
+     * declaration now, and this is where a reader looks for it.
+     *
+     * Lowercase, digits and dashes: it reaches a scheduler row and a log line.
+     */
+    name: string;
     /** Cron expression, five fields (e.g. "0 3 * * *"). */
     schedule: string;
     /** Execution timeout in seconds. Defaults to 30, ceiling 300 (sandbox limit). */
@@ -913,12 +1031,40 @@ interface JobOptions {
     retry?: number;
 }
 interface ResolvedJob {
+    /** The declared identity — the scheduler's row name. */
+    name: string;
     schedule: string;
     timeout: number;
     retry: number;
     handler: (meta: JobMeta) => Promise<void>;
 }
 declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
-declare function getJobConfig(ctor: object): ResolvedJob;
+/**
+ * What a job DECLARES — schedule, timeout, retry. Reads metadata and nothing
+ * else: the class is NOT constructed.
+ *
+ * Deploy's manifest script needs exactly this and no instance (stack_bundle.go
+ * writes `jobs.manifest.json` from it, with no runtime and therefore no
+ * container). Constructing a class to read a cron string was a side effect, and
+ * it is the side effect that made the container look optional — which in turn
+ * let a caller that never passes one compile quietly.
+ */
+interface JobManifest {
+    name: string;
+    schedule: string;
+    timeout: number;
+    retry: number;
+}
+declare function getJobManifest(ctor: object): JobManifest;
+/**
+ * The job, ready to run — manifest plus a bound `run`.
+ *
+ * `container` is REQUIRED. It used to be absent (the class was built with
+ * `new`), and then briefly optional, which is worse: an optional parameter lets
+ * a caller that forgot it compile, and the job would receive `undefined` for
+ * every dependency at its first scheduled run, hours after deploy, in a process
+ * nobody is watching. Required makes the two runtime call sites a TYPE error.
+ */
+declare function getJobConfig(ctor: object, container: Container): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, toSchemaJSON };
+export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Container, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Injectable, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, PolicyExpr, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, Token, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __claimInjectables, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, controllersOf, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getHookManifest, getJobConfig, getJobManifest, getRegisteredControllers, getWebhookConfig, getWebhookManifest, hooksOf, jobsOf, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, roomsOf, toSchemaJSON, webhooksOf };

package/dist/index.d.ts

@@ -1,15 +1,15 @@
-import { h as PalbaseResult, A as AuthSpec, H as HttpError } from './endpoint-CTEHhb7A.js';
-export { i as AuthConfig, B as BadRequest, C as CacheClient, j as ClientInfo, k as Conflict, D as DBClient, f as DBOps, E as ErrorDef, l as ErrorMap, m as ErrorThrowers, F as FileContext, n as Forbidden, o as HttpMethod, L as Logger, M as Materialized, p as Middleware, q as MiddlewareContext, r as MiddlewareHandler, N as NotFound, s as PBRequest, t as PalError, u as PalbaseAnalyticsClient, v as PalbaseAnalyticsManagementNamespace, w as PalbaseAnalyticsProperties, x as PalbaseAnalyticsQueryNamespace, y as PalbaseAttestAndroidParams, z as PalbaseAttestAndroidResult, G as PalbaseAttestiOSParams, I as PalbaseAttestiOSResult, J as PalbaseAuthClient, K as PalbaseBatchOverrideOperation, O as PalbaseBatchSetOverridesResult, Q as PalbaseBindDeviceParams, e as PalbaseBucketClient, U as PalbaseClearAllOverridesResult, V as PalbaseClearOverrideResult, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, P as PalbaseDocsClient, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, a as PalbaseFlagsClient, ag as PalbaseFlagsServiceClient, ah as PalbaseFunctionsClient, ai as PalbaseFunnelQueryInput, aj as PalbaseFunnelResult, ak as PalbaseIdentifyTraits, al as PalbaseInboxClient, am as PalbaseInboxListOptions, an as PalbaseInboxListResult, ao as PalbaseInboxMessage, ap as PalbaseInboxSendParams, aq as PalbaseInboxSendResponse, ar as PalbaseInitialLink, as as PalbaseInvokeOptions, at as PalbaseLink, au as PalbaseLinkAnalytics, av as PalbaseLinkDetails, aw as PalbaseLinksClient, ax as PalbaseListLinksOptions, ay as PalbaseListLinksResult, az as PalbaseListOptions, aA as PalbaseMatchParams, aB as PalbaseMultiChannelResponse, b as PalbaseNotificationsClient, aC as PalbaseOverviewResult, aD as PalbasePreferences, aE as PalbasePreferencesClient, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, c as PalbaseRealtimeClient, aK as PalbaseRegisterDeviceParams, aL as PalbaseRetentionQueryInput, aM as PalbaseRetentionResult, aN as PalbaseSession, aO as PalbaseSetOverrideResult, aP as PalbaseSetOverridesResult, aQ as PalbaseSignedUrlResponse, aR as PalbaseSmsClient, aS as PalbaseSmsSendParams, aT as PalbaseSmsSendResponse, d as PalbaseStorageClient, aU as PalbaseTransformOptions, aV as PalbaseUpdateLinkParams, aW as PalbaseUploadOptions, aX as PalbaseUser, aY as PalbaseUserDetailResult, aZ as PalbaseUsersQueryInput, a_ as PalbaseUsersResult, a$ as PalbaseVerifyRequestSignatureParams, b0 as PalbaseWhereOperator, R as RateLimitConfig, b1 as Ref, S as SecretsService, b2 as TooManyRequests, b3 as TxColumnExpr, b4 as TxInsertShape, b5 as TxInsertValue, b6 as TxNow, T as TxPlanBody, b7 as TxPlanError, b8 as TxPlanHandle, b9 as TxPlanOpResult, ba as TxPlanRejection, g as TxPlanResponse, bb as TxRefError, bc as TxRow, bd as TxRows, be as TxSelectOptions, bf as TxSetShape, bg as TxSetValue, bh as TxTable, bi as TxWhere, bj as TxWireExpr, bk as TxWireGuard, bl as TxWireOp, bm as TxWireRef, bn as TxWireValue, bo as Unauthorized, bp as UniqueViolation, bq as UserT, br as VerifiedDevice, bs as dec, bt as defineMiddleware, bu as inc, bv as now } from './endpoint-CTEHhb7A.js';
-import { M as ModuleClients } from './index-CUomTA3e.js';
-export { C as Cache, D as Database, a as Documents, F as Flags, L as LifecycleHook, b as Log, N as Notifications, R as Realtime, c as RequestStore, d as RuntimeServices, S as Secrets, e as ShutdownRunner, f as Storage, _ as __getRuntime, g as __requestALS, h as __resetLifecycleHooks, i as __runStartHooks, j as __runWithRuntime, k as __setRuntime, o as onShutdown, l as onStart } from './index-CUomTA3e.js';
-import { S as SchemaDef } from './index-CW21M9Z3.js';
-export { A as AnyColumn, C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EmbeddingModelRef, f as EnvSchemas, g as EnvServiceDatabase, h as EnvTables, E as EnvTypedDatabase, i as EnvTypedTable, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, j as PalbaseExtension, k as PolicyBuilder, l as PolicyCommand, m as PolicyDef, n as PolicyMode, R as RawConstraintDef, o as RowShape, T as TABLE_META, p as TableDef, q as TableHandle, r as TableInput, s as TxPlan, t as TxTables, u as TypedDB, v as TypedTable, w as TypedTx, x as bigint, y as boolean, z as defineSchema, B as defineTable, D as enumType, F as installationRef, G as integer, H as isPalbaseExtension, J as jsonb, K as makeTypedDB, L as numeric, M as openai, N as ownedByUser, Q as policy, U as raw, V as text, W as timestamp, X as userRef, Y as uuid, Z as vector } from './index-CW21M9Z3.js';
+import { P as PalbaseResult, e as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-BrvvxSpn.js';
+export { f as AnyColumn, g as AuthConfig, B as BadRequest, h as Cache, C as CacheClient, i as ClientInfo, j as ColRef, k as ColumnBuilder, l as ColumnDef, m as ColumnMap, n as ColumnType, o as Conflict, D as DBClient, a as DBOps, p as Database, q as DeadlockDetected, r as Documents, E as EXTENSION_DEPENDENCIES, s as EmbeddingModelRef, t as EnvSchemas, u as EnvServiceDatabase, v as EnvTables, w as EnvTypedDatabase, x as EnvTypedTable, y as ErrorDef, z as ErrorMap, F as ErrorThrowers, G as FileContext, I as Flags, J as Forbidden, K as HttpMethod, L as IndexBuilder, M as IndexDef, N as InsertShape, O as LifecycleHook, Q as Log, U as Logger, V as Materialized, W as Middleware, X as MiddlewareContext, Y as MiddlewareHandler, Z as NotFound, $ as Notifications, a0 as OnDeleteAction, a1 as PALBASE_EXTENSIONS, a2 as PBRequest, a3 as PalError, a4 as PalbaseAnalyticsClient, a5 as PalbaseAnalyticsManagementNamespace, a6 as PalbaseAnalyticsProperties, a7 as PalbaseAnalyticsQueryNamespace, a8 as PalbaseAttestAndroidParams, a9 as PalbaseAttestAndroidResult, aa as PalbaseAttestiOSParams, ab as PalbaseAttestiOSResult, ac as PalbaseAuthClient, ad as PalbaseBatchOverrideOperation, ae as PalbaseBatchSetOverridesResult, af as PalbaseBindDeviceParams, ag as PalbaseBucketClient, ah as PalbaseClearAllOverridesResult, ai as PalbaseClearOverrideResult, aj as PalbaseCohortQueryInput, ak as PalbaseCohortResult, al as PalbaseCollectionRef, am as PalbaseCountQueryInput, an as PalbaseCountResult, ao as PalbaseCreateLinkParams, ap as PalbaseDeviceInfo, aq as PalbaseDeviceTokenView, ar as PalbaseDocsClient, as as PalbaseDocumentRef, at as PalbaseDocumentSnapshot, au as PalbaseEmailClient, av as PalbaseEmailSendParams, aw as PalbaseEmailSendResponse, ax as PalbaseEventNamesResult, ay as PalbaseEventsQueryInput, az as PalbaseEventsResult, aA as PalbaseExtension, aB as PalbaseFileObject, aC as PalbaseFlag, aD as PalbaseFlagContext, aE as PalbaseFlagSource, aF as PalbaseFlagValue, aG as PalbaseFlagVariant, aH as PalbaseFlagsClient, aI as PalbaseFlagsServiceClient, aJ as PalbaseFunctionsClient, aK as PalbaseFunnelQueryInput, aL as PalbaseFunnelResult, aM as PalbaseIdentifyTraits, aN as PalbaseInboxClient, aO as PalbaseInboxListOptions, aP as PalbaseInboxListResult, aQ as PalbaseInboxMessage, aR as PalbaseInboxSendParams, aS as PalbaseInboxSendResponse, aT as PalbaseInitialLink, aU as PalbaseInvokeOptions, aV as PalbaseLink, aW as PalbaseLinkAnalytics, aX as PalbaseLinkDetails, aY as PalbaseLinksClient, aZ as PalbaseListLinksOptions, a_ as PalbaseListLinksResult, a$ as PalbaseListOptions, b0 as PalbaseMatchParams, b1 as PalbaseMultiChannelResponse, b2 as PalbaseNotificationsClient, b3 as PalbaseOverviewResult, b4 as PalbasePreferences, b5 as PalbasePreferencesClient, b6 as PalbasePushClient, b7 as PalbasePushSendParams, b8 as PalbasePushSendResponse, b9 as PalbaseQrCodeOptions, ba as PalbaseQuerySnapshot, bb as PalbaseRealtimeClient, bc as PalbaseRegisterDeviceParams, bd as PalbaseRetentionQueryInput, be as PalbaseRetentionResult, bf as PalbaseSession, bg as PalbaseSetOverrideResult, bh as PalbaseSetOverridesResult, bi as PalbaseSignedUrlResponse, bj as PalbaseSmsClient, bk as PalbaseSmsSendParams, bl as PalbaseSmsSendResponse, bm as PalbaseStorageClient, bn as PalbaseTransformOptions, bo as PalbaseUpdateLinkParams, bp as PalbaseUploadOptions, bq as PalbaseUser, br as PalbaseUserDetailResult, bs as PalbaseUsersQueryInput, bt as PalbaseUsersResult, bu as PalbaseVerifyRequestSignatureParams, bv as PalbaseWhereOperator, bw as PolicyBinOp, bx as PolicyBuilder, by as PolicyCommand, bz as PolicyDef, bA as PolicyExprCtx, bB as PolicyExprRef, bC as PolicyMode, bD as PolicyOperand, R as RateLimitConfig, bE as RawConstraintDef, bF as Realtime, bG as Ref, bH as RequestStore, bI as RowShape, c as RuntimeServices, bJ as Secrets, bK as SecretsService, bL as SerializationFailure, bM as SetShape, bN as SetValue, bO as ShutdownRunner, bP as SqlFragment, bQ as Storage, bR as TABLE_META, bS as TableDef, bT as TableHandle, bU as TableInput, bV as TooManyRequests, bW as TxColumnExpr, bX as TxInsertShape, bY as TxInsertValue, bZ as TxNow, b_ as TxPlan, T as TxPlanBody, b$ as TxPlanError, c0 as TxPlanHandle, c1 as TxPlanOpResult, c2 as TxPlanRejection, b as TxPlanResponse, c3 as TxRefError, c4 as TxRow, c5 as TxRows, c6 as TxSelectOptions, c7 as TxSetShape, c8 as TxSetValue, c9 as TxTable, ca as TxTables, cb as TxWhere, cc as TxWireExpr, cd as TxWireGuard, ce as TxWireOp, cf as TxWireRef, cg as TxWireValue, ch as TypedDB, ci as TypedTable, cj as TypedTx, ck as Unauthorized, cl as UniqueViolation, cm as UserT, cn as VerifiedDevice, co as __getRuntime, d as __requestALS, cp as __resetLifecycleHooks, cq as __runStartHooks, _ as __runWithRuntime, cr as __setRuntime, cs as bigint, ct as boolean, cu as col, cv as dec, cw as decrement, cx as defineMiddleware, cy as defineSchema, cz as defineTable, cA as enumType, cB as exprCtx, cC as inc, cD as increment, cE as index, cF as installationRef, cG as integer, cH as isPalbaseExtension, cI as isRetryable, cJ as jsonb, cK as makeTypedDB, cL as now, cM as numeric, cN as onShutdown, cO as onStart, cP as openai, cQ as ownedByUser, cR as policy, cS as raw, cT as sqlFragment, cU as text, cV as timestamp, cW as userRef, cX as uuid, cY as vector, cZ as withRetry } from './index-BrvvxSpn.js';
+import { M as ModuleClients, C as Container } from './index-NuzRCuxe.js';
+export { D as DiError, a as DiKind, b as ModulePressure, c as assertNoOrphanEntryPoints, d as buildContainer } from './index-NuzRCuxe.js';
 export { TableTypes, Tables } from './db/env.js';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.js';
-import { a as RouteOptions } from './registry-dZZ5JKYg.js';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-dZZ5JKYg.js';
+import { a as RouteOptions } from './registry-B0eyOF9x.js';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-B0eyOF9x.js';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
+import { T as Token } from './module-Dl1KFVtc.js';
+export { M as Module, a as ModuleDef, _ as __claimModules } from './module-Dl1KFVtc.js';
 import 'node:async_hooks';
 
 /**
@@ -145,6 +145,10 @@ interface ColumnJSON {
         column: string;
     };
     onDeleteAction?: string;
+    /** FR-044: türev FK index'i kapatılmışsa `false`. Bildirilmemişse alan YOK. */
+    index?: boolean;
+    /** FR-049: kolon increment() ile güncelleniyorsa `true`. Aksi hâlde alan YOK. */
+    counter?: boolean;
     enumName?: string;
     enumValues?: string[];
     unique?: boolean;
@@ -155,8 +159,16 @@ interface PolicyJSON {
     name: string;
     command: string;
     roles: string[];
-    using: string | null;
-    withCheck: string | null;
+    /**
+     * `USING (...)` — ham string (kaçış kapağı, FR-028) ya da YAPI (FR-022).
+     *
+     * Go tarafı ikisini de okur: string olan verbatim emit edilir, yapı olan
+     * `generator.go`'da SQL'e çevrilir (C-6). Yapı hâli InitPlan sarmalamasını
+     * ve `TO <rol>` daraltmasını GÜVENLE yapılabilir kılan şey — string üstünde
+     * regex'le denemek yorum içindeki bir `auth.uid()`'yi de sarmalardı.
+     */
+    using: string | PolicyExpr | null;
+    withCheck: string | PolicyExpr | null;
     permissive: boolean;
 }
 /** One table. Mirrors Go's `schema.TableJSON`. */
@@ -187,13 +199,36 @@ interface TableJSON {
         name: string;
         expr: string;
     }[];
-    indexes?: {
-        name: string;
-        columns: string[];
-    }[];
+    indexes?: IndexJSON[];
+    /**
+     * appendOnly (FR-030): tablo yalnız INSERT kabul eder. Sıfır değerde OMIT —
+     * bildirmeyen tablolar wire'da bayt-aynı kalır.
+     */
+    appendOnly?: boolean;
     search?: SearchJSON;
     memory?: MemoryJSON;
 }
+/**
+ * Bir index'in wire şekli — Go'nun `IndexJSON`'ıyla ALAN-ADI SÖZLEŞMESİ.
+ *
+ * `name` + `columns` bugünkü hâl; kalanı FR-041…043'ün taşıyıcısı. Hepsi sıfır
+ * değerde OMIT edilir: bildirmeyen bir index wire'da eskisiyle bayt-aynı kalır,
+ * yoksa dokunulmamış her şema diff'te değişmiş görünür ve her deploy churn üretir.
+ */
+interface IndexJSON {
+    name: string;
+    columns: string[];
+    /** Partial index koşulu (FR-042) — filtre şekli `WhereFilter` ile aynı. */
+    where?: unknown;
+    /** İfade index'i (FR-043), ör. `lower(email)`. `columns` ile birlikte kullanılmaz. */
+    expression?: string;
+    /** Kolon sırası (FR-043). */
+    sort?: "asc" | "desc";
+    /** NULL sırası (FR-043). */
+    nulls?: "first" | "last";
+    /** Covering index — `INCLUDE (...)` (FR-043). */
+    include?: string[];
+}
 /** C-11 wire şekli — Go'nun MemoryJSON'ıyla alan-adı sözleşmesi (D-019).
  * Beyansız tablolarda alan OMIT — eski şemalar bayt-aynı (NFR-B1). */
 interface MemoryJSON {
@@ -364,7 +399,7 @@ declare function defineChannels(map: ChannelsInput): ChannelsDef;
  * {@link makeEnvDts} with the project's schema and write the returned string to
  * `palbase-env.d.ts` at the project root. That file AUGMENTS the
  * `@palbase/backend/env` `Tables` interface (controlled global augmentation,
- * C5) so `Database.tables.<name>` is typed with no import and no generic.
+ * C5) so `Database.public.<name>` is typed with no import and no generic.
  *
  * The output is FLAT: each table gets a `{ row: {...}; insert: {...} }` entry
  * with plain TypeScript object types. The phantom `ColumnBuilder<...>` type
@@ -677,7 +712,17 @@ declare function Hook(event: string): (target: object, fnName: string | symbol)
  *
  * @throws when the class declares constructor parameters (FR-011) — nothing
  *   here supplies them, so the field would be `undefined` on every event. */
-declare function getHookConfig(ctor: object): ResolvedHookClass;
+declare function getHookConfig(ctor: object, container: Container): ResolvedHookClass;
+/**
+ * Which events a hook class declares, and which of them BLOCK.
+ *
+ * Metadata only — the class is not constructed. Deploy's `hooks.manifest.json`
+ * needs exactly this and has no container to build with.
+ */
+declare function getHookManifest(ctor: object): {
+    blocking: string[];
+    listeners: string[];
+};
 
 interface RoomOptions {
     /**
@@ -866,6 +911,14 @@ interface SignatureSpec {
     timestampHeader?: string;
 }
 interface WebhookOptions {
+    /**
+     * The path segment this webhook is served at: `/webhooks/<name>`.
+     *
+     * DECLARED, not derived. It used to be the file's name, which put a PUBLIC
+     * URL — the one a sender is configured with — in the file system rather than
+     * beside the provider and the secret, where a reader looks for it.
+     */
+    name: string;
     provider?: WebhookProvider;
     signature?: SignatureSpec;
     /** Env-var REFERENCE for the signing secret — the platform never holds it. */
@@ -894,9 +947,74 @@ declare function On(event: string): (target: object, fnName: string | symbol) =>
  *
  * @throws when the class declares constructor parameters (FR-011) — nothing
  *   here supplies them, so the field would be `undefined` on every delivery. */
-declare function getWebhookConfig(ctor: object): ResolvedWebhook;
+/**
+ * Everything a webhook DECLARES — provider or signature template, the secret's
+ * env var, and the event names — validated, without constructing the class.
+ *
+ * Same split as jobs and hooks: reading a declaration should not build an
+ * object. `getWebhookConfig` is what needs an instance, and it needs a
+ * container to get one.
+ */
+declare function getWebhookManifest(ctor: object): {
+    name: string;
+    provider: string | undefined;
+    secretEnv: string;
+    events: string[];
+};
+declare function getWebhookConfig(ctor: object, container: Container): ResolvedWebhook;
+
+/**
+ * Marks a class the container can resolve.
+ *
+ * TWO JOBS, and the first one is why the decorator has to exist at all:
+ * TypeScript under `emitDecoratorMetadata` emits `design:paramtypes` for
+ * DECORATED classes only. Measured — an undecorated class with the same
+ * constructor carries no metadata, and `Reflect.getMetadata` answers
+ * `undefined`.
+ *
+ * The second is being COUNTABLE. Ownership, visibility and permission are still
+ * read from a single `@Module` and never from this decorator — recording the
+ * class here decides nothing. It only makes "carries `@Injectable()` and
+ * appears in no module" a question the build can ask, which FR-010 requires it
+ * to answer by name. The body was empty until 2026-09-02, and the consequence
+ * was measured through the CLI: an `@Injectable()` service in no module built
+ * clean, while this file's own comment claimed the build named it.
+ */
+declare function Injectable(): ClassDecorator;
+/**
+ * TAKES the accumulated declarations — it does not read them.
+ *
+ * Same claim semantics as `__claimModules`, and for the same reason: a
+ * candidate bundle is imported into the SAME process as the live app it might
+ * replace, so reading would let a candidate be judged against the live app's
+ * classes and a discarded candidate would leave its own behind.
+ */
+declare function __claimInjectables(): Token[];
+
+declare const jobsOf: (container: Container) => Token[];
+declare const webhooksOf: (container: Container) => Token[];
+/**
+ * A hook class carries handler entries and NO class-level marker, so it is
+ * recognised by having handlers while being neither a webhook nor a controller.
+ * `@On` is shared with `@Webhook`, which is why the webhook marker is what
+ * separates them.
+ */
+declare const hooksOf: (container: Container) => Token[];
+declare const roomsOf: (container: Container) => Token[];
+declare const controllersOf: (container: Container) => Token[];
 
 interface JobOptions {
+    /**
+     * The job's identity, and the name the scheduler holds its rows under.
+     *
+     * DECLARED, not derived. It used to be the file's name, which made the
+     * identity a property of where the class sat — rename the file and the
+     * scheduler starts a different job. Ownership and identity both come from a
+     * declaration now, and this is where a reader looks for it.
+     *
+     * Lowercase, digits and dashes: it reaches a scheduler row and a log line.
+     */
+    name: string;
     /** Cron expression, five fields (e.g. "0 3 * * *"). */
     schedule: string;
     /** Execution timeout in seconds. Defaults to 30, ceiling 300 (sandbox limit). */
@@ -913,12 +1031,40 @@ interface JobOptions {
     retry?: number;
 }
 interface ResolvedJob {
+    /** The declared identity — the scheduler's row name. */
+    name: string;
     schedule: string;
     timeout: number;
     retry: number;
     handler: (meta: JobMeta) => Promise<void>;
 }
 declare function Job(options: JobOptions): <T extends abstract new (...args: never[]) => object>(ctor: T) => T;
-declare function getJobConfig(ctor: object): ResolvedJob;
+/**
+ * What a job DECLARES — schedule, timeout, retry. Reads metadata and nothing
+ * else: the class is NOT constructed.
+ *
+ * Deploy's manifest script needs exactly this and no instance (stack_bundle.go
+ * writes `jobs.manifest.json` from it, with no runtime and therefore no
+ * container). Constructing a class to read a cron string was a side effect, and
+ * it is the side effect that made the container look optional — which in turn
+ * let a caller that never passes one compile quietly.
+ */
+interface JobManifest {
+    name: string;
+    schedule: string;
+    timeout: number;
+    retry: number;
+}
+declare function getJobManifest(ctor: object): JobManifest;
+/**
+ * The job, ready to run — manifest plus a bound `run`.
+ *
+ * `container` is REQUIRED. It used to be absent (the class was built with
+ * `new`), and then briefly optional, which is worse: an optional parameter lets
+ * a caller that forgot it compile, and the job would receive `undefined` for
+ * every dependency at its first scheduled run, hours after deploy, in a process
+ * nobody is watching. Required makes the two runtime call sites a TYPE error.
+ */
+declare function getJobConfig(ctor: object, container: Container): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getJobConfig, getRegisteredControllers, getWebhookConfig, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, toSchemaJSON };
+export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Container, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Injectable, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, PolicyExpr, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, Token, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __claimInjectables, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, controllersOf, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getHookManifest, getJobConfig, getJobManifest, getRegisteredControllers, getWebhookConfig, getWebhookManifest, hooksOf, jobsOf, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, roomsOf, toSchemaJSON, webhooksOf };