@palbase/backend 25.1.0 → 27.0.0

package/dist/bin/palbase-backend.js

@@ -3,17 +3,20 @@ import {
   BootRefused,
   createApp,
   loadConfig
-} from "../chunk-VDF2T4AS.js";
-import "../chunk-CRQKCRGF.js";
-import "../chunk-XABBC7JP.js";
-import "../chunk-CJSKYY76.js";
+} from "../chunk-OO7R25AI.js";
+import "../chunk-I3C4PFIW.js";
+import "../chunk-DRZFQRJI.js";
+import "../chunk-GYK6QYS4.js";
 import {
   getRegisteredControllers
-} from "../chunk-35PNTIRN.js";
-import "../chunk-7D4SUZUM.js";
+} from "../chunk-VVMJEVQP.js";
+import "../chunk-CGNN2PUH.js";
+import {
+  __name
+} from "../chunk-VXPNPVAG.js";
 
 // src/bin/palbase-backend.ts
-import { readdir, stat } from "fs/promises";
+import { readdir } from "fs/promises";
 import { join, resolve } from "path";
 import { pathToFileURL } from "url";
 var USAGE = `palbase-backend \u2014 run this project's backend
@@ -35,6 +38,7 @@ function die(message) {
   console.error(message);
   process.exit(1);
 }
+__name(die, "die");
 async function loadDotEnv(root) {
   const file = Bun.file(join(root, ".env"));
   if (!await file.exists()) return;
@@ -52,24 +56,35 @@ async function loadDotEnv(root) {
     process.env[key] = value;
   }
 }
-async function findControllers(root) {
-  const dir = join(root, "controllers");
-  try {
-    if (!(await stat(dir)).isDirectory()) return [];
-  } catch {
-    return [];
-  }
+__name(loadDotEnv, "loadDotEnv");
+var NEVER_WALK = /* @__PURE__ */ new Set([
+  "node_modules",
+  "dist",
+  "build",
+  ".git"
+]);
+async function findModules(root) {
   const out = [];
-  const walk = async (d) => {
-    for (const entry of await readdir(d, { withFileTypes: true })) {
+  const walk = /* @__PURE__ */ __name(async (d) => {
+    let entries;
+    try {
+      entries = await readdir(d, {
+        withFileTypes: true
+      });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (NEVER_WALK.has(entry.name) || entry.name.startsWith(".palbase")) continue;
       const full = join(d, entry.name);
       if (entry.isDirectory()) await walk(full);
-      else if (/\.controller\.(ts|js|mts|mjs)$/.test(entry.name)) out.push(full);
+      else if (/\.module\.(ts|js|mts|mjs)$/.test(entry.name)) out.push(full);
     }
-  };
-  await walk(dir);
+  }, "walk");
+  await walk(root);
   return out.sort();
 }
+__name(findModules, "findModules");
 async function importSchemas(root) {
   let entries;
   try {
@@ -85,86 +100,107 @@ async function importSchemas(root) {
   }
   return out;
 }
+__name(importSchemas, "importSchemas");
 async function main() {
   const command = process.argv[2] ?? "serve";
   if (command === "--help" || command === "-h" || command === "help") {
     console.log(USAGE);
     return;
   }
-  if (!["serve", "dev", "routes"].includes(command)) {
+  if (![
+    "serve",
+    "dev",
+    "routes"
+  ].includes(command)) {
     die(`palbase-backend: unknown command "${command}".
 
 ${USAGE}`);
   }
   if (typeof Bun === "undefined") {
-    die(
-      "palbase-backend needs Bun: the engine serves `fetch` natively and opens its own\nPostgres pool through Bun.sql. Install it from https://bun.sh, then re-run."
-    );
+    die("palbase-backend needs Bun: the engine serves `fetch` natively and opens its own\nPostgres pool through Bun.sql. Install it from https://bun.sh, then re-run.");
   }
   if (command === "dev" && !process.env.PALBASE_WATCHING) {
     const self = Bun.fileURLToPath(import.meta.url);
-    const child = Bun.spawn(["bun", "--watch", self, "serve"], {
-      stdio: ["inherit", "inherit", "inherit"],
-      env: { ...process.env, PALBASE_WATCHING: "1" }
+    const child = Bun.spawn([
+      "bun",
+      "--watch",
+      self,
+      "serve"
+    ], {
+      stdio: [
+        "inherit",
+        "inherit",
+        "inherit"
+      ],
+      env: {
+        ...process.env,
+        PALBASE_WATCHING: "1"
+      }
     });
     process.exit(await child.exited);
   }
   const root = resolve(process.env.PALBASE_PROJECT_DIR ?? process.cwd());
   await loadDotEnv(root);
-  const files = await findControllers(root);
+  const files = await findModules(root);
   if (files.length === 0) {
-    die(
-      `palbase-backend: no controllers found under ${join(root, "controllers")}.
-A backend is its controllers \u2014 add one and run again:
+    die(`palbase-backend: no *.module.ts under ${root}.
+A module is what says which classes exist, who owns them and what they may
+reach \u2014 and it is the only place that says it. Add one and run again:
 
-  // controllers/hello.controller.ts
-  import { Controller, Get } from "@palbase/backend";
-  @Controller("/hello")
-  class HelloController {
-    @Get("") hi(): Promise<{ ok: boolean }> { return Promise.resolve({ ok: true }); }
-  }
-`
-    );
+  // todos.module.ts
+  import { Module, type Token } from "@palbase/backend";
+  import { TodosController } from "./controllers/todos.controller.ts";
+  @Module({ controllers: [TodosController as Token] })
+  export class TodosModule {}
+`);
   }
   for (const file of files) await import(pathToFileURL(file).href);
   const controllers = getRegisteredControllers();
   if (controllers.length === 0) {
-    die(
-      `palbase-backend: ${files.length} controller file(s) loaded but none registered.
-Every one of them is missing its @Controller decorator, or the files were
-compiled with decorators stripped. Nothing would answer, so this is fatal.`
-    );
+    die(`palbase-backend: ${files.length} module file(s) loaded but no controller registered.
+Either none of the listed classes carries @Controller, or the files were
+compiled with decorators stripped. Nothing would answer, so this is fatal.`);
   }
   let config;
   try {
     config = loadConfig(process.env);
   } catch (e) {
     if (e instanceof BootRefused) {
-      die(
-        `${e.message}
+      die(`${e.message}
 
 Put them in a .env beside package.json, or export them. A local stack
-(docker compose up) publishes both.`
-      );
+(docker compose up) publishes both.`);
     }
     throw e;
   }
-  const app = await createApp({ config, controllers, schemas: await importSchemas(root) });
+  const app = await createApp({
+    config,
+    controllers,
+    schemas: await importSchemas(root)
+  });
   if (command === "routes") {
     for (const route of app.routes) console.log(route.id);
     await app.shutdown();
     return;
   }
-  Bun.serve({ port: config.port, idleTimeout: 60, fetch: app.handle });
+  Bun.serve({
+    port: config.port,
+    idleTimeout: 60,
+    fetch: app.handle
+  });
   console.log(`palbase-backend listening on http://localhost:${config.port}`);
-  console.log(`  ${app.routes.length} endpoint(s) from ${files.length} controller file(s)`);
+  console.log(`  ${app.routes.length} endpoint(s) from ${files.length} module file(s)`);
   for (const route of app.routes) console.log(`  ${route.id}`);
-  for (const signal of ["SIGTERM", "SIGINT"]) {
+  for (const signal of [
+    "SIGTERM",
+    "SIGINT"
+  ]) {
     process.on(signal, () => {
       void app.shutdown().finally(() => process.exit(0));
     });
   }
 }
+__name(main, "main");
 main().catch((e) => {
   console.error(e instanceof Error ? e.message : e);
   process.exit(1);

package/dist/bin/palbase-backend.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/bin/palbase-backend.ts"],"sourcesContent":["#!/usr/bin/env bun\n/**\n * palbase-backend — run this project's backend.\n *\n *   npm run dev        →  palbase-backend dev     (reloads on change)\n *   npm start          →  palbase-backend serve\n *\n * There is no scaffolding step and no server file to write. The project IS the\n * backend: every `controllers/*.controller.ts` is imported, which is what\n * registers it, and the engine is built around whatever registered.\n *\n * It is the same engine the deployed runtime builds — not a development\n * stand-in. A dev server that is a different program from the production one is\n * a source of \"works locally\" reports, and this one has no second implementation\n * to disagree with.\n */\nimport { readdir, stat } from \"node:fs/promises\";\nimport { join, resolve } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\n\nimport { createApp, loadConfig, BootRefused } from \"../engine/index.js\";\nimport { getRegisteredControllers } from \"../decorators/controller.js\";\n\nconst USAGE = `palbase-backend — run this project's backend\n\n  palbase-backend serve      start the backend\n  palbase-backend dev        start it and reload on change\n  palbase-backend routes     print the route table and exit\n\nConfiguration comes from the environment (a .env beside package.json is read):\n\n  DATABASE_URL               required — the stack's Postgres\n  AUTH_JWKS_URL              required — where your stack publishes its signing keys\n  MODULE_BASE_URL            where Documents/Storage/Notifications/Flags/Realtime live\n  PALBASE_ANON_KEY           publishable key, sent on module calls\n  PALBASE_SERVICE_ROLE_KEY   secret key, for privileged module calls\n  PORT                       default 3000\n`;\n\nfunction die(message: string): never {\n  console.error(message);\n  process.exit(1);\n}\n\n/** Read a `.env` beside the project, without adding a dependency for it. */\nasync function loadDotEnv(root: string): Promise<void> {\n  const file = Bun.file(join(root, \".env\"));\n  if (!(await file.exists())) return;\n  for (const raw of (await file.text()).split(\"\\n\")) {\n    const line = raw.trim();\n    if (!line || line.startsWith(\"#\")) continue;\n    const eq = line.indexOf(\"=\");\n    if (eq < 1) continue;\n    const key = line.slice(0, eq).trim();\n    // The environment wins: an exported value is the operator being explicit,\n    // and a file quietly overriding it is how a \"why is it still pointing at\n    // the old database\" hour begins.\n    if (process.env[key] !== undefined) continue;\n    let value = line.slice(eq + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    process.env[key] = value;\n  }\n}\n\n/** Every `*.controller.ts` under `controllers/`, sorted, recursively. */\nasync function findControllers(root: string): Promise<string[]> {\n  const dir = join(root, \"controllers\");\n  try {\n    if (!(await stat(dir)).isDirectory()) return [];\n  } catch {\n    return [];\n  }\n  const out: string[] = [];\n  const walk = async (d: string): Promise<void> => {\n    for (const entry of await readdir(d, { withFileTypes: true })) {\n      const full = join(d, entry.name);\n      if (entry.isDirectory()) await walk(full);\n      else if (/\\.controller\\.(ts|js|mts|mjs)$/.test(entry.name)) out.push(full);\n    }\n  };\n  await walk(dir);\n  // Sorted so route precedence is the same on every machine.\n  return out.sort();\n}\n\nasync function importSchemas(root: string): Promise<unknown[]> {\n  // ONE SCHEMA PER FILE, so the whole directory is the declaration. Reading a\n  // single well-known file would take the first one and leave the rest of the\n  // project's tables with no typed surface and no complaint.\n  //\n  // SORTED, because readdir order is not specified: an unsorted set would hand\n  // the runtime a different answer from one boot to the next.\n  let entries: string[];\n  try {\n    entries = (await readdir(join(root, \"db\"))).sort();\n  } catch {\n    // Not every project declares a database; the typed `.tables` surface is\n    // simply absent then.\n    return [];\n  }\n  const out: unknown[] = [];\n  for (const entry of entries) {\n    if (!entry.endsWith(\".ts\") && !entry.endsWith(\".js\")) continue;\n    if (entry.endsWith(\".d.ts\")) continue;\n    out.push((await import(pathToFileURL(join(root, \"db\", entry)).href)).default);\n  }\n  return out;\n}\n\nasync function main(): Promise<void> {\n  const command = process.argv[2] ?? \"serve\";\n  if (command === \"--help\" || command === \"-h\" || command === \"help\") {\n    console.log(USAGE);\n    return;\n  }\n  if (![\"serve\", \"dev\", \"routes\"].includes(command)) {\n    die(`palbase-backend: unknown command \"${command}\".\\n\\n${USAGE}`);\n  }\n  if (typeof Bun === \"undefined\") {\n    die(\n      \"palbase-backend needs Bun: the engine serves `fetch` natively and opens its own\\n\" +\n        \"Postgres pool through Bun.sql. Install it from https://bun.sh, then re-run.\",\n    );\n  }\n\n  // `dev` is `serve` under Bun's watcher. Re-exec rather than reimplement:\n  // one code path serves, and the reload is the runtime's job, not ours.\n  if (command === \"dev\" && !process.env.PALBASE_WATCHING) {\n    const self = Bun.fileURLToPath(import.meta.url);\n    const child = Bun.spawn([\"bun\", \"--watch\", self, \"serve\"], {\n      stdio: [\"inherit\", \"inherit\", \"inherit\"],\n      env: { ...process.env, PALBASE_WATCHING: \"1\" },\n    });\n    process.exit(await child.exited);\n  }\n\n  const root = resolve(process.env.PALBASE_PROJECT_DIR ?? process.cwd());\n  await loadDotEnv(root);\n\n  const files = await findControllers(root);\n  if (files.length === 0) {\n    die(\n      `palbase-backend: no controllers found under ${join(root, \"controllers\")}.\\n` +\n        `A backend is its controllers — add one and run again:\\n\\n` +\n        `  // controllers/hello.controller.ts\\n` +\n        `  import { Controller, Get } from \"@palbase/backend\";\\n` +\n        `  @Controller(\"/hello\")\\n` +\n        `  class HelloController {\\n` +\n        `    @Get(\"\") hi(): Promise<{ ok: boolean }> { return Promise.resolve({ ok: true }); }\\n` +\n        `  }\\n`,\n    );\n  }\n\n  // Importing IS the registration — the decorator records each class as it runs.\n  for (const file of files) await import(pathToFileURL(file).href);\n  const controllers = getRegisteredControllers();\n  if (controllers.length === 0) {\n    die(\n      `palbase-backend: ${files.length} controller file(s) loaded but none registered.\\n` +\n        `Every one of them is missing its @Controller decorator, or the files were\\n` +\n        `compiled with decorators stripped. Nothing would answer, so this is fatal.`,\n    );\n  }\n\n  let config;\n  try {\n    config = loadConfig(process.env as Record<string, string | undefined>);\n  } catch (e) {\n    if (e instanceof BootRefused) {\n      die(\n        `${e.message}\\n\\n` +\n          `Put them in a .env beside package.json, or export them. A local stack\\n` +\n          `(docker compose up) publishes both.`,\n      );\n    }\n    throw e;\n  }\n\n  const app = await createApp({ config, controllers, schemas: await importSchemas(root) });\n\n  if (command === \"routes\") {\n    for (const route of app.routes) console.log(route.id);\n    await app.shutdown();\n    return;\n  }\n\n  Bun.serve({ port: config.port, idleTimeout: 60, fetch: app.handle });\n  console.log(`palbase-backend listening on http://localhost:${config.port}`);\n  console.log(`  ${app.routes.length} endpoint(s) from ${files.length} controller file(s)`);\n  for (const route of app.routes) console.log(`  ${route.id}`);\n\n  for (const signal of [\"SIGTERM\", \"SIGINT\"] as const) {\n    process.on(signal, () => {\n      void app.shutdown().finally(() => process.exit(0));\n    });\n  }\n}\n\n// Not a top-level await: this file is also emitted in a CommonJS flavour, where\n// one is a build error. The rejection handler is the point either way — an\n// unhandled one exits 0 on some runtimes, which would report a dead backend as\n// a successful start.\nmain().catch((e: unknown) => {\n  console.error(e instanceof Error ? e.message : e);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,SAAS,SAAS,YAAY;AAC9B,SAAS,MAAM,eAAe;AAC9B,SAAS,qBAAqB;AAK9B,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBd,SAAS,IAAI,SAAwB;AACnC,UAAQ,MAAM,OAAO;AACrB,UAAQ,KAAK,CAAC;AAChB;AAGA,eAAe,WAAW,MAA6B;AACrD,QAAM,OAAO,IAAI,KAAK,KAAK,MAAM,MAAM,CAAC;AACxC,MAAI,CAAE,MAAM,KAAK,OAAO,EAAI;AAC5B,aAAW,QAAQ,MAAM,KAAK,KAAK,GAAG,MAAM,IAAI,GAAG;AACjD,UAAM,OAAO,IAAI,KAAK;AACtB,QAAI,CAAC,QAAQ,KAAK,WAAW,GAAG,EAAG;AACnC,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,QAAI,KAAK,EAAG;AACZ,UAAM,MAAM,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK;AAInC,QAAI,QAAQ,IAAI,GAAG,MAAM,OAAW;AACpC,QAAI,QAAQ,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AACpC,QACG,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,KAC3C,MAAM,WAAW,GAAG,KAAK,MAAM,SAAS,GAAG,GAC5C;AACA,cAAQ,MAAM,MAAM,GAAG,EAAE;AAAA,IAC3B;AACA,YAAQ,IAAI,GAAG,IAAI;AAAA,EACrB;AACF;AAGA,eAAe,gBAAgB,MAAiC;AAC9D,QAAM,MAAM,KAAK,MAAM,aAAa;AACpC,MAAI;AACF,QAAI,EAAE,MAAM,KAAK,GAAG,GAAG,YAAY,EAAG,QAAO,CAAC;AAAA,EAChD,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAAgB,CAAC;AACvB,QAAM,OAAO,OAAO,MAA6B;AAC/C,eAAW,SAAS,MAAM,QAAQ,GAAG,EAAE,eAAe,KAAK,CAAC,GAAG;AAC7D,YAAM,OAAO,KAAK,GAAG,MAAM,IAAI;AAC/B,UAAI,MAAM,YAAY,EAAG,OAAM,KAAK,IAAI;AAAA,eAC/B,iCAAiC,KAAK,MAAM,IAAI,EAAG,KAAI,KAAK,IAAI;AAAA,IAC3E;AAAA,EACF;AACA,QAAM,KAAK,GAAG;AAEd,SAAO,IAAI,KAAK;AAClB;AAEA,eAAe,cAAc,MAAkC;AAO7D,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,GAAG,KAAK;AAAA,EACnD,QAAQ;AAGN,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAAiB,CAAC;AACxB,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,SAAS,KAAK,KAAK,CAAC,MAAM,SAAS,KAAK,EAAG;AACtD,QAAI,MAAM,SAAS,OAAO,EAAG;AAC7B,QAAI,MAAM,MAAM,OAAO,cAAc,KAAK,MAAM,MAAM,KAAK,CAAC,EAAE,OAAO,OAAO;AAAA,EAC9E;AACA,SAAO;AACT;AAEA,eAAe,OAAsB;AACnC,QAAM,UAAU,QAAQ,KAAK,CAAC,KAAK;AACnC,MAAI,YAAY,YAAY,YAAY,QAAQ,YAAY,QAAQ;AAClE,YAAQ,IAAI,KAAK;AACjB;AAAA,EACF;AACA,MAAI,CAAC,CAAC,SAAS,OAAO,QAAQ,EAAE,SAAS,OAAO,GAAG;AACjD,QAAI,qCAAqC,OAAO;AAAA;AAAA,EAAS,KAAK,EAAE;AAAA,EAClE;AACA,MAAI,OAAO,QAAQ,aAAa;AAC9B;AAAA,MACE;AAAA,IAEF;AAAA,EACF;AAIA,MAAI,YAAY,SAAS,CAAC,QAAQ,IAAI,kBAAkB;AACtD,UAAM,OAAO,IAAI,cAAc,YAAY,GAAG;AAC9C,UAAM,QAAQ,IAAI,MAAM,CAAC,OAAO,WAAW,MAAM,OAAO,GAAG;AAAA,MACzD,OAAO,CAAC,WAAW,WAAW,SAAS;AAAA,MACvC,KAAK,EAAE,GAAG,QAAQ,KAAK,kBAAkB,IAAI;AAAA,IAC/C,CAAC;AACD,YAAQ,KAAK,MAAM,MAAM,MAAM;AAAA,EACjC;AAEA,QAAM,OAAO,QAAQ,QAAQ,IAAI,uBAAuB,QAAQ,IAAI,CAAC;AACrE,QAAM,WAAW,IAAI;AAErB,QAAM,QAAQ,MAAM,gBAAgB,IAAI;AACxC,MAAI,MAAM,WAAW,GAAG;AACtB;AAAA,MACE,+CAA+C,KAAK,MAAM,aAAa,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ1E;AAAA,EACF;AAGA,aAAW,QAAQ,MAAO,OAAM,OAAO,cAAc,IAAI,EAAE;AAC3D,QAAM,cAAc,yBAAyB;AAC7C,MAAI,YAAY,WAAW,GAAG;AAC5B;AAAA,MACE,oBAAoB,MAAM,MAAM;AAAA;AAAA;AAAA,IAGlC;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,aAAS,WAAW,QAAQ,GAAyC;AAAA,EACvE,SAAS,GAAG;AACV,QAAI,aAAa,aAAa;AAC5B;AAAA,QACE,GAAG,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA,MAGd;AAAA,IACF;AACA,UAAM;AAAA,EACR;AAEA,QAAM,MAAM,MAAM,UAAU,EAAE,QAAQ,aAAa,SAAS,MAAM,cAAc,IAAI,EAAE,CAAC;AAEvF,MAAI,YAAY,UAAU;AACxB,eAAW,SAAS,IAAI,OAAQ,SAAQ,IAAI,MAAM,EAAE;AACpD,UAAM,IAAI,SAAS;AACnB;AAAA,EACF;AAEA,MAAI,MAAM,EAAE,MAAM,OAAO,MAAM,aAAa,IAAI,OAAO,IAAI,OAAO,CAAC;AACnE,UAAQ,IAAI,iDAAiD,OAAO,IAAI,EAAE;AAC1E,UAAQ,IAAI,KAAK,IAAI,OAAO,MAAM,qBAAqB,MAAM,MAAM,qBAAqB;AACxF,aAAW,SAAS,IAAI,OAAQ,SAAQ,IAAI,KAAK,MAAM,EAAE,EAAE;AAE3D,aAAW,UAAU,CAAC,WAAW,QAAQ,GAAY;AACnD,YAAQ,GAAG,QAAQ,MAAM;AACvB,WAAK,IAAI,SAAS,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAAA,IACnD,CAAC;AAAA,EACH;AACF;AAMA,KAAK,EAAE,MAAM,CAAC,MAAe;AAC3B,UAAQ,MAAM,aAAa,QAAQ,EAAE,UAAU,CAAC;AAChD,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../../src/bin/palbase-backend.ts"],"sourcesContent":["#!/usr/bin/env bun\n/**\n * palbase-backend — run this project's backend.\n *\n *   npm run dev        →  palbase-backend dev     (reloads on change)\n *   npm start          →  palbase-backend serve\n *\n * There is no scaffolding step and no server file to write. The project IS the\n * backend: every `controllers/*.controller.ts` is imported, which is what\n * registers it, and the engine is built around whatever registered.\n *\n * It is the same engine the deployed runtime builds — not a development\n * stand-in. A dev server that is a different program from the production one is\n * a source of \"works locally\" reports, and this one has no second implementation\n * to disagree with.\n */\nimport { readdir } from \"node:fs/promises\";\nimport { join, resolve } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\n\nimport { createApp, loadConfig, BootRefused } from \"../engine/index.js\";\nimport { getRegisteredControllers } from \"../decorators/controller.js\";\n\nconst USAGE = `palbase-backend — run this project's backend\n\n  palbase-backend serve      start the backend\n  palbase-backend dev        start it and reload on change\n  palbase-backend routes     print the route table and exit\n\nConfiguration comes from the environment (a .env beside package.json is read):\n\n  DATABASE_URL               required — the stack's Postgres\n  AUTH_JWKS_URL              required — where your stack publishes its signing keys\n  MODULE_BASE_URL            where Documents/Storage/Notifications/Flags/Realtime live\n  PALBASE_ANON_KEY           publishable key, sent on module calls\n  PALBASE_SERVICE_ROLE_KEY   secret key, for privileged module calls\n  PORT                       default 3000\n`;\n\nfunction die(message: string): never {\n  console.error(message);\n  process.exit(1);\n}\n\n/** Read a `.env` beside the project, without adding a dependency for it. */\nasync function loadDotEnv(root: string): Promise<void> {\n  const file = Bun.file(join(root, \".env\"));\n  if (!(await file.exists())) return;\n  for (const raw of (await file.text()).split(\"\\n\")) {\n    const line = raw.trim();\n    if (!line || line.startsWith(\"#\")) continue;\n    const eq = line.indexOf(\"=\");\n    if (eq < 1) continue;\n    const key = line.slice(0, eq).trim();\n    // The environment wins: an exported value is the operator being explicit,\n    // and a file quietly overriding it is how a \"why is it still pointing at\n    // the old database\" hour begins.\n    if (process.env[key] !== undefined) continue;\n    let value = line.slice(eq + 1).trim();\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n    process.env[key] = value;\n  }\n}\n\n/** Every `*.controller.ts` under `controllers/`, sorted, recursively. */\n/** Directories that are never a project's source. */\nconst NEVER_WALK = new Set([\"node_modules\", \"dist\", \"build\", \".git\"]);\n\n/**\n * The project's MODULE files — the same one glob the bundlers use.\n *\n * Importing a module imports the classes it owns, so this reaches every\n * controller, service, job, hook, webhook and room the project declares, and\n * nothing it does not. It used to walk `controllers/` for `*.controller.ts`,\n * which made the directory a declaration and left `dev` seeing a different set\n * of classes than a deploy would.\n *\n * Recursive: a module lives beside the domain it owns, not in a folder this\n * file names.\n */\nasync function findModules(root: string): Promise<string[]> {\n  const out: string[] = [];\n  const walk = async (d: string): Promise<void> => {\n    let entries;\n    try {\n      entries = await readdir(d, { withFileTypes: true });\n    } catch {\n      return;\n    }\n    for (const entry of entries) {\n      if (NEVER_WALK.has(entry.name) || entry.name.startsWith(\".palbase\")) continue;\n      const full = join(d, entry.name);\n      if (entry.isDirectory()) await walk(full);\n      else if (/\\.module\\.(ts|js|mts|mjs)$/.test(entry.name)) out.push(full);\n    }\n  };\n  await walk(root);\n  // Sorted so declaration order is the same on every machine.\n  return out.sort();\n}\n\nasync function importSchemas(root: string): Promise<unknown[]> {\n  // ONE SCHEMA PER FILE, so the whole directory is the declaration. Reading a\n  // single well-known file would take the first one and leave the rest of the\n  // project's tables with no typed surface and no complaint.\n  //\n  // SORTED, because readdir order is not specified: an unsorted set would hand\n  // the runtime a different answer from one boot to the next.\n  let entries: string[];\n  try {\n    entries = (await readdir(join(root, \"db\"))).sort();\n  } catch {\n    // Not every project declares a database; the typed `.tables` surface is\n    // simply absent then.\n    return [];\n  }\n  const out: unknown[] = [];\n  for (const entry of entries) {\n    if (!entry.endsWith(\".ts\") && !entry.endsWith(\".js\")) continue;\n    if (entry.endsWith(\".d.ts\")) continue;\n    out.push((await import(pathToFileURL(join(root, \"db\", entry)).href)).default);\n  }\n  return out;\n}\n\nasync function main(): Promise<void> {\n  const command = process.argv[2] ?? \"serve\";\n  if (command === \"--help\" || command === \"-h\" || command === \"help\") {\n    console.log(USAGE);\n    return;\n  }\n  if (![\"serve\", \"dev\", \"routes\"].includes(command)) {\n    die(`palbase-backend: unknown command \"${command}\".\\n\\n${USAGE}`);\n  }\n  if (typeof Bun === \"undefined\") {\n    die(\n      \"palbase-backend needs Bun: the engine serves `fetch` natively and opens its own\\n\" +\n        \"Postgres pool through Bun.sql. Install it from https://bun.sh, then re-run.\",\n    );\n  }\n\n  // `dev` is `serve` under Bun's watcher. Re-exec rather than reimplement:\n  // one code path serves, and the reload is the runtime's job, not ours.\n  if (command === \"dev\" && !process.env.PALBASE_WATCHING) {\n    const self = Bun.fileURLToPath(import.meta.url);\n    const child = Bun.spawn([\"bun\", \"--watch\", self, \"serve\"], {\n      stdio: [\"inherit\", \"inherit\", \"inherit\"],\n      env: { ...process.env, PALBASE_WATCHING: \"1\" },\n    });\n    process.exit(await child.exited);\n  }\n\n  const root = resolve(process.env.PALBASE_PROJECT_DIR ?? process.cwd());\n  await loadDotEnv(root);\n\n  const files = await findModules(root);\n  if (files.length === 0) {\n    die(\n      `palbase-backend: no *.module.ts under ${root}.\\n` +\n        `A module is what says which classes exist, who owns them and what they may\\n` +\n        `reach — and it is the only place that says it. Add one and run again:\\n\\n` +\n        `  // todos.module.ts\\n` +\n        `  import { Module, type Token } from \"@palbase/backend\";\\n` +\n        `  import { TodosController } from \"./controllers/todos.controller.ts\";\\n` +\n        `  @Module({ controllers: [TodosController as Token] })\\n` +\n        `  export class TodosModule {}\\n`,\n    );\n  }\n\n  // Importing IS the registration — for the module AND for everything it owns,\n  // because a module imports the classes it lists.\n  for (const file of files) await import(pathToFileURL(file).href);\n  const controllers = getRegisteredControllers();\n  if (controllers.length === 0) {\n    die(\n      `palbase-backend: ${files.length} module file(s) loaded but no controller registered.\\n` +\n        `Either none of the listed classes carries @Controller, or the files were\\n` +\n        `compiled with decorators stripped. Nothing would answer, so this is fatal.`,\n    );\n  }\n\n  let config;\n  try {\n    config = loadConfig(process.env as Record<string, string | undefined>);\n  } catch (e) {\n    if (e instanceof BootRefused) {\n      die(\n        `${e.message}\\n\\n` +\n          `Put them in a .env beside package.json, or export them. A local stack\\n` +\n          `(docker compose up) publishes both.`,\n      );\n    }\n    throw e;\n  }\n\n  const app = await createApp({ config, controllers, schemas: await importSchemas(root) });\n\n  if (command === \"routes\") {\n    for (const route of app.routes) console.log(route.id);\n    await app.shutdown();\n    return;\n  }\n\n  Bun.serve({ port: config.port, idleTimeout: 60, fetch: app.handle });\n  console.log(`palbase-backend listening on http://localhost:${config.port}`);\n  console.log(`  ${app.routes.length} endpoint(s) from ${files.length} module file(s)`);\n  for (const route of app.routes) console.log(`  ${route.id}`);\n\n  for (const signal of [\"SIGTERM\", \"SIGINT\"] as const) {\n    process.on(signal, () => {\n      void app.shutdown().finally(() => process.exit(0));\n    });\n  }\n}\n\n// Not a top-level await: this file is also emitted in a CommonJS flavour, where\n// one is a build error. The rejection handler is the point either way — an\n// unhandled one exits 0 on some runtimes, which would report a dead backend as\n// a successful start.\nmain().catch((e: unknown) => {\n  console.error(e instanceof Error ? e.message : e);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBA,SAASA,eAAe;AACxB,SAASC,MAAMC,eAAe;AAC9B,SAASC,qBAAqB;AAK9B,IAAMC,QAAQ;;;;;;;;;;;;;;;AAgBd,SAASC,IAAIC,SAAe;AAC1BC,UAAQC,MAAMF,OAAAA;AACdG,UAAQC,KAAK,CAAA;AACf;AAHSL;AAMT,eAAeM,WAAWC,MAAY;AACpC,QAAMC,OAAOC,IAAID,KAAKE,KAAKH,MAAM,MAAA,CAAA;AACjC,MAAI,CAAE,MAAMC,KAAKG,OAAM,EAAK;AAC5B,aAAWC,QAAQ,MAAMJ,KAAKK,KAAI,GAAIC,MAAM,IAAA,GAAO;AACjD,UAAMC,OAAOH,IAAII,KAAI;AACrB,QAAI,CAACD,QAAQA,KAAKE,WAAW,GAAA,EAAM;AACnC,UAAMC,KAAKH,KAAKI,QAAQ,GAAA;AACxB,QAAID,KAAK,EAAG;AACZ,UAAME,MAAML,KAAKM,MAAM,GAAGH,EAAAA,EAAIF,KAAI;AAIlC,QAAIZ,QAAQkB,IAAIF,GAAAA,MAASG,OAAW;AACpC,QAAIC,QAAQT,KAAKM,MAAMH,KAAK,CAAA,EAAGF,KAAI;AACnC,QACGQ,MAAMP,WAAW,GAAA,KAAQO,MAAMC,SAAS,GAAA,KACxCD,MAAMP,WAAW,GAAA,KAAQO,MAAMC,SAAS,GAAA,GACzC;AACAD,cAAQA,MAAMH,MAAM,GAAG,EAAC;IAC1B;AACAjB,YAAQkB,IAAIF,GAAAA,IAAOI;EACrB;AACF;AAtBelB;AA0Bf,IAAMoB,aAAa,oBAAIC,IAAI;EAAC;EAAgB;EAAQ;EAAS;CAAO;AAcpE,eAAeC,YAAYrB,MAAY;AACrC,QAAMsB,MAAgB,CAAA;AACtB,QAAMC,OAAO,8BAAOC,MAAAA;AAClB,QAAIC;AACJ,QAAI;AACFA,gBAAU,MAAMC,QAAQF,GAAG;QAAEG,eAAe;MAAK,CAAA;IACnD,QAAQ;AACN;IACF;AACA,eAAWC,SAASH,SAAS;AAC3B,UAAIN,WAAWU,IAAID,MAAME,IAAI,KAAKF,MAAME,KAAKpB,WAAW,UAAA,EAAa;AACrE,YAAMqB,OAAO5B,KAAKqB,GAAGI,MAAME,IAAI;AAC/B,UAAIF,MAAMI,YAAW,EAAI,OAAMT,KAAKQ,IAAAA;eAC3B,6BAA6BE,KAAKL,MAAME,IAAI,EAAGR,KAAIY,KAAKH,IAAAA;IACnE;EACF,GAba;AAcb,QAAMR,KAAKvB,IAAAA;AAEX,SAAOsB,IAAIa,KAAI;AACjB;AAnBed;AAqBf,eAAee,cAAcpC,MAAY;AAOvC,MAAIyB;AACJ,MAAI;AACFA,eAAW,MAAMC,QAAQvB,KAAKH,MAAM,IAAA,CAAA,GAAQmC,KAAI;EAClD,QAAQ;AAGN,WAAO,CAAA;EACT;AACA,QAAMb,MAAiB,CAAA;AACvB,aAAWM,SAASH,SAAS;AAC3B,QAAI,CAACG,MAAMV,SAAS,KAAA,KAAU,CAACU,MAAMV,SAAS,KAAA,EAAQ;AACtD,QAAIU,MAAMV,SAAS,OAAA,EAAU;AAC7BI,QAAIY,MAAM,MAAM,OAAOG,cAAclC,KAAKH,MAAM,MAAM4B,KAAAA,CAAAA,EAAQU,OAAOC,OAAO;EAC9E;AACA,SAAOjB;AACT;AAtBec;AAwBf,eAAeI,OAAAA;AACb,QAAMC,UAAU5C,QAAQ6C,KAAK,CAAA,KAAM;AACnC,MAAID,YAAY,YAAYA,YAAY,QAAQA,YAAY,QAAQ;AAClE9C,YAAQgD,IAAInD,KAAAA;AACZ;EACF;AACA,MAAI,CAAC;IAAC;IAAS;IAAO;IAAUoD,SAASH,OAAAA,GAAU;AACjDhD,QAAI,qCAAqCgD,OAAAA;;EAAgBjD,KAAAA,EAAO;EAClE;AACA,MAAI,OAAOU,QAAQ,aAAa;AAC9BT,QACE,8JACE;EAEN;AAIA,MAAIgD,YAAY,SAAS,CAAC5C,QAAQkB,IAAI8B,kBAAkB;AACtD,UAAMC,OAAO5C,IAAI6C,cAAc,YAAYC,GAAG;AAC9C,UAAMC,QAAQ/C,IAAIgD,MAAM;MAAC;MAAO;MAAWJ;MAAM;OAAU;MACzDK,OAAO;QAAC;QAAW;QAAW;;MAC9BpC,KAAK;QAAE,GAAGlB,QAAQkB;QAAK8B,kBAAkB;MAAI;IAC/C,CAAA;AACAhD,YAAQC,KAAK,MAAMmD,MAAMG,MAAM;EACjC;AAEA,QAAMpD,OAAOqD,QAAQxD,QAAQkB,IAAIuC,uBAAuBzD,QAAQ0D,IAAG,CAAA;AACnE,QAAMxD,WAAWC,IAAAA;AAEjB,QAAMwD,QAAQ,MAAMnC,YAAYrB,IAAAA;AAChC,MAAIwD,MAAMC,WAAW,GAAG;AACtBhE,QACE,yCAAyCO,IAAAA;;;;;;;;;CAON;EAEvC;AAIA,aAAWC,QAAQuD,MAAO,OAAM,OAAOnB,cAAcpC,IAAAA,EAAMqC;AAC3D,QAAMoB,cAAcC,yBAAAA;AACpB,MAAID,YAAYD,WAAW,GAAG;AAC5BhE,QACE,oBAAoB+D,MAAMC,MAAM;;2EAE8C;EAElF;AAEA,MAAIG;AACJ,MAAI;AACFA,aAASC,WAAWhE,QAAQkB,GAAG;EACjC,SAAS+C,GAAG;AACV,QAAIA,aAAaC,aAAa;AAC5BtE,UACE,GAAGqE,EAAEpE,OAAO;;;oCAE2B;IAE3C;AACA,UAAMoE;EACR;AAEA,QAAME,MAAM,MAAMC,UAAU;IAAEL;IAAQF;IAAaQ,SAAS,MAAM9B,cAAcpC,IAAAA;EAAM,CAAA;AAEtF,MAAIyC,YAAY,UAAU;AACxB,eAAW0B,SAASH,IAAII,OAAQzE,SAAQgD,IAAIwB,MAAME,EAAE;AACpD,UAAML,IAAIM,SAAQ;AAClB;EACF;AAEApE,MAAIqE,MAAM;IAAEC,MAAMZ,OAAOY;IAAMC,aAAa;IAAIC,OAAOV,IAAIW;EAAO,CAAA;AAClEhF,UAAQgD,IAAI,iDAAiDiB,OAAOY,IAAI,EAAE;AAC1E7E,UAAQgD,IAAI,KAAKqB,IAAII,OAAOX,MAAM,qBAAqBD,MAAMC,MAAM,iBAAiB;AACpF,aAAWU,SAASH,IAAII,OAAQzE,SAAQgD,IAAI,KAAKwB,MAAME,EAAE,EAAE;AAE3D,aAAWO,UAAU;IAAC;IAAW;KAAoB;AACnD/E,YAAQgF,GAAGD,QAAQ,MAAA;AACjB,WAAKZ,IAAIM,SAAQ,EAAGQ,QAAQ,MAAMjF,QAAQC,KAAK,CAAA,CAAA;IACjD,CAAA;EACF;AACF;AAxFe0C;AA8FfA,KAAAA,EAAOuC,MAAM,CAACjB,MAAAA;AACZnE,UAAQC,MAAMkE,aAAakB,QAAQlB,EAAEpE,UAAUoE,CAAAA;AAC/CjE,UAAQC,KAAK,CAAA;AACf,CAAA;","names":["readdir","join","resolve","pathToFileURL","USAGE","die","message","console","error","process","exit","loadDotEnv","root","file","Bun","join","exists","raw","text","split","line","trim","startsWith","eq","indexOf","key","slice","env","undefined","value","endsWith","NEVER_WALK","Set","findModules","out","walk","d","entries","readdir","withFileTypes","entry","has","name","full","isDirectory","test","push","sort","importSchemas","pathToFileURL","href","default","main","command","argv","log","includes","PALBASE_WATCHING","self","fileURLToPath","url","child","spawn","stdio","exited","resolve","PALBASE_PROJECT_DIR","cwd","files","length","controllers","getRegisteredControllers","config","loadConfig","e","BootRefused","app","createApp","schemas","route","routes","id","shutdown","serve","port","idleTimeout","fetch","handle","signal","on","finally","catch","Error"]}

package/dist/chunk-CGNN2PUH.js

@@ -0,0 +1,213 @@
+import {
+  __name
+} from "./chunk-VXPNPVAG.js";
+
+// src/errors.ts
+var HTTP_ERROR_BRAND = /* @__PURE__ */ Symbol.for("palbase.backend.httpError");
+var ENGINE_RAISED = /* @__PURE__ */ Symbol.for("palbase.backend.engineRaised");
+function markEngineRaised(e) {
+  e[ENGINE_RAISED] = true;
+  return e;
+}
+__name(markEngineRaised, "markEngineRaised");
+function isEngineRaised(e) {
+  return typeof e === "object" && e !== null && e[ENGINE_RAISED] === true;
+}
+__name(isEngineRaised, "isEngineRaised");
+function isHttpError(err) {
+  if (typeof err !== "object" || err === null) return false;
+  const e = err;
+  return e[HTTP_ERROR_BRAND] === true && typeof e.status === "number" && typeof e.error === "string" && typeof e.errorDescription === "string";
+}
+__name(isHttpError, "isHttpError");
+var HttpError = class extends Error {
+  static {
+    __name(this, "HttpError");
+  }
+  status;
+  error;
+  errorDescription;
+  data;
+  /** See {@link HTTP_ERROR_BRAND} — how the engine recognises this across SDK copies. */
+  [HTTP_ERROR_BRAND] = true;
+  constructor(status, error, errorDescription, data) {
+    super(errorDescription);
+    this.name = "HttpError";
+    this.status = status;
+    this.error = error;
+    this.errorDescription = errorDescription;
+    if (data !== void 0) {
+      this.data = data;
+    }
+  }
+  /**
+  * Serialize to the standard Palbase error response format.
+  * The `requestId` is injected by the runtime layer from the request context.
+  * When called without arguments (e.g. JSON.stringify), request_id is omitted.
+  * When `data` is set, it is appended as a strict-superset field.
+  */
+  toJSON(requestId) {
+    const result = {
+      error: this.error,
+      error_description: this.errorDescription,
+      status: this.status
+    };
+    if (requestId) {
+      result.request_id = requestId;
+    }
+    if (this.data !== void 0) {
+      result.data = this.data;
+    }
+    return result;
+  }
+};
+var PalError = class extends HttpError {
+  static {
+    __name(this, "PalError");
+  }
+  constructor(status, code, description, data) {
+    super(status, code, description, data);
+    this.name = "PalError";
+  }
+};
+var NamedHttpError = class NamedHttpError2 extends HttpError {
+  static {
+    __name(this, "NamedHttpError");
+  }
+  constructor(status, defaultCode, name, message, code, data) {
+    super(status, code ?? defaultCode, message ?? defaultMessage(name), data);
+    this.name = name;
+  }
+};
+function defaultMessage(name) {
+  const spaced = name.replace(/([a-z0-9])([A-Z])/g, "$1 $2");
+  return spaced.charAt(0).toUpperCase() + spaced.slice(1).toLowerCase();
+}
+__name(defaultMessage, "defaultMessage");
+var BadRequest = class extends NamedHttpError {
+  static {
+    __name(this, "BadRequest");
+  }
+  constructor(data, message) {
+    super(400, "bad_request", "BadRequest", message, void 0, data);
+  }
+};
+var Unauthorized = class extends NamedHttpError {
+  static {
+    __name(this, "Unauthorized");
+  }
+  constructor(message, code, data) {
+    super(401, "unauthorized", "Unauthorized", message, code, data);
+  }
+};
+var Forbidden = class extends NamedHttpError {
+  static {
+    __name(this, "Forbidden");
+  }
+  constructor(message, code, data) {
+    super(403, "forbidden", "Forbidden", message, code, data);
+  }
+};
+var NotFound = class extends NamedHttpError {
+  static {
+    __name(this, "NotFound");
+  }
+  constructor(message, code, data) {
+    super(404, "not_found", "NotFound", message, code, data);
+  }
+};
+var Conflict = class extends NamedHttpError {
+  static {
+    __name(this, "Conflict");
+  }
+  constructor(message, code, data) {
+    super(409, "conflict", "Conflict", message, code, data);
+  }
+};
+var UniqueViolation = class extends Conflict {
+  static {
+    __name(this, "UniqueViolation");
+  }
+  /**
+  * Whether `e` is a unique violation — REGARDLESS of which copy of this SDK
+  * constructed it.
+  *
+  * Use this instead of `instanceof`. Measured on a live stack: a controller
+  * bundle INLINES its own copy of `@palbase/backend`, and the engine that
+  * raises this error is the runtime's copy. Two copies, two class identities,
+  * and `e instanceof UniqueViolation` is false in the one place a caller
+  * writes it — a check that reads as correct and silently never matches.
+  */
+  static is(e) {
+    return typeof e === "object" && e !== null && e.name === "UniqueViolation" && typeof e.constraint === "string";
+  }
+  /** The unique constraint the statement violated, as Postgres named it.
+  * `""` when the driver did not say which — see `engine/db.ts`. */
+  constraint;
+  constructor(constraint, message, code, data) {
+    super(message ?? "Unique constraint violated", code ?? "unique_violation", data);
+    this.name = "UniqueViolation";
+    this.constraint = constraint;
+  }
+};
+function isRetryable(e) {
+  return typeof e === "object" && e !== null && e.retryable === true && typeof e.sqlstate === "string";
+}
+__name(isRetryable, "isRetryable");
+var SerializationFailure = class extends Conflict {
+  static {
+    __name(this, "SerializationFailure");
+  }
+  retryable = true;
+  sqlstate;
+  static is(e) {
+    return typeof e === "object" && e !== null && e.name === "SerializationFailure";
+  }
+  constructor(sqlstate = "40001", message, data) {
+    super(message ?? "i\u015Flem e\u015Fzamanl\u0131 bir i\u015Flemle serile\u015Ftirilemedi \u2014 ayn\u0131 i\u015Flemi ba\u015Ftan \xE7al\u0131\u015Ft\u0131r\u0131n ($transaction'a { retry: n } verebilirsiniz)", "serialization_failure", data);
+    this.name = "SerializationFailure";
+    this.sqlstate = sqlstate;
+  }
+};
+var DeadlockDetected = class extends Conflict {
+  static {
+    __name(this, "DeadlockDetected");
+  }
+  retryable = true;
+  sqlstate;
+  static is(e) {
+    return typeof e === "object" && e !== null && e.name === "DeadlockDetected";
+  }
+  constructor(sqlstate = "40P01", message, data) {
+    super(message ?? "deadlock: iki i\u015Flem birbirinin kilidini bekledi ve bu i\u015Flem iptal edildi \u2014 kilit s\u0131ras\u0131n\u0131 sabitlemek i\xE7in Database.$lockRows(tablo, id'ler) kullan\u0131n", "deadlock_detected", data);
+    this.name = "DeadlockDetected";
+    this.sqlstate = sqlstate;
+  }
+};
+var TooManyRequests = class extends NamedHttpError {
+  static {
+    __name(this, "TooManyRequests");
+  }
+  constructor(data, message) {
+    super(429, "too_many_requests", "TooManyRequests", message, void 0, data);
+  }
+};
+
+export {
+  markEngineRaised,
+  isEngineRaised,
+  isHttpError,
+  HttpError,
+  PalError,
+  BadRequest,
+  Unauthorized,
+  Forbidden,
+  NotFound,
+  Conflict,
+  UniqueViolation,
+  isRetryable,
+  SerializationFailure,
+  DeadlockDetected,
+  TooManyRequests
+};
+//# sourceMappingURL=chunk-CGNN2PUH.js.map

package/dist/chunk-CGNN2PUH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts"],"sourcesContent":["/**\n * The brand that identifies an HttpError ACROSS SDK instances.\n *\n * A process legitimately holds more than one copy of this SDK — the runtime\n * loads the engine from its own node_modules while the tenant's bundle carries\n * an inlined copy, which is why the controller registry and the error registry\n * are both anchored on `Symbol.for`. The one place that did not follow the\n * pattern was the engine's catch: `err instanceof HttpError` compares CLASS\n * IDENTITY, so a `throw new NotFound()` from the bundle's copy did not match\n * the engine's copy and every typed error in every deployed backend degraded to\n * `500 internal_error`. Measured through the edge on a real deploy: a route\n * throwing `NotFound` answered 500 while the runtime's own log printed the\n * error object with `status: 404` right beside it.\n *\n * `Symbol.for` puts this in the cross-realm registry, so every copy of the SDK\n * agrees on it by VALUE rather than by identity.\n */\nexport const HTTP_ERROR_BRAND: unique symbol = Symbol.for(\"palbase.backend.httpError\");\n\n/**\n * Set on an `HttpError` the ENGINE built out of a driver failure, as opposed to\n * one the author constructed to ANSWER a request.\n *\n * The distinction cannot be read off the status, and 409 is why. The scaffold\n * teaches `throw new Conflict(\"title already taken\")` as the way to answer\n * (template/AGENTS.md), and the engine raises `UniqueViolation` — also a 409 —\n * when a write hits a unique index. Logging by status therefore either loses the\n * engine's event or writes an \"unhandled\" line every time an author takes the\n * documented path. Measured: it did the second.\n *\n * `Symbol.for` so the mark survives the bundle/runtime SDK split, the same way\n * {@link HTTP_ERROR_BRAND} does.\n */\nexport const ENGINE_RAISED: unique symbol = Symbol.for(\"palbase.backend.engineRaised\") as never;\n\n/** Mark `e` as engine-raised and return it, so a conversion site reads as one expression. */\nexport function markEngineRaised<E extends object>(e: E): E {\n  (e as Record<symbol, unknown>)[ENGINE_RAISED] = true;\n  return e;\n}\n\n/** Whether the engine built this error, rather than the author throwing it to answer. */\nexport function isEngineRaised(e: unknown): boolean {\n  return typeof e === \"object\" && e !== null && (e as Record<symbol, unknown>)[ENGINE_RAISED] === true;\n}\n\n/**\n * Whether a thrown value is an HttpError from ANY copy of this SDK.\n *\n * The shape is checked as well as the brand: the brand says \"this claims to be\n * one of ours\", the fields say the envelope can actually be built from it, and\n * a half-formed object must fall through to the 500 path rather than produce a\n * malformed response.\n */\nexport function isHttpError(err: unknown): err is HttpError {\n  if (typeof err !== \"object\" || err === null) return false;\n  const e = err as Record<PropertyKey, unknown>;\n  return (\n    e[HTTP_ERROR_BRAND] === true &&\n    typeof e.status === \"number\" &&\n    typeof e.error === \"string\" &&\n    typeof e.errorDescription === \"string\"\n  );\n}\n\n/** HTTP error with structured error response format.\n *\n * The base class for the throwable error classes (`PalError`, `Conflict`,\n * `NotFound`, …). Construct one directly with `throw new HttpError(404,\n * \"todo_not_found\", \"No such todo\")`, or throw a named subclass\n * (`throw new NotFound(\"todo not found\")`). The runtime catches any `HttpError`\n * and emits the standard envelope; on the wire (and to iOS) it surfaces as\n * `BackendError.server(code, status, message, requestId)`.\n *\n * The optional `data` field carries a structured payload alongside the\n * standard envelope — for errors that need to ship extra context\n * (e.g. `new Conflict(\"locked\", \"title_locked\", { retryAfter: 30 })`). It rides\n * through to the iOS typed enum's associated value.\n */\nexport class HttpError extends Error {\n  public readonly status: number;\n  public readonly error: string;\n  public readonly errorDescription: string;\n  public readonly data?: unknown;\n  /** See {@link HTTP_ERROR_BRAND} — how the engine recognises this across SDK copies. */\n  public readonly [HTTP_ERROR_BRAND] = true;\n\n  constructor(status: number, error: string, errorDescription: string, data?: unknown) {\n    super(errorDescription);\n    this.name = \"HttpError\";\n    this.status = status;\n    this.error = error;\n    this.errorDescription = errorDescription;\n    if (data !== undefined) {\n      this.data = data;\n    }\n  }\n\n  /**\n   * Serialize to the standard Palbase error response format.\n   * The `requestId` is injected by the runtime layer from the request context.\n   * When called without arguments (e.g. JSON.stringify), request_id is omitted.\n   * When `data` is set, it is appended as a strict-superset field.\n   */\n  toJSON(requestId?: string): {\n    error: string;\n    error_description: string;\n    status: number;\n    request_id?: string;\n    data?: unknown;\n  } {\n    const result: {\n      error: string;\n      error_description: string;\n      status: number;\n      request_id?: string;\n      data?: unknown;\n    } = {\n      error: this.error,\n      error_description: this.errorDescription,\n      status: this.status,\n    };\n    if (requestId) {\n      result.request_id = requestId;\n    }\n    if (this.data !== undefined) {\n      result.data = this.data;\n    }\n    return result;\n  }\n}\n\n/**\n * Throw with a custom HTTP status + wire code. The general-purpose escape hatch\n * when none of the named classes (`Conflict`/`NotFound`/…) fits.\n *\n * @example\n * throw new PalError(418, \"teapot\", \"I'm a teapot\");\n */\nexport class PalError extends HttpError {\n  constructor(status: number, code: string, description: string, data?: unknown) {\n    super(status, code, description, data);\n    this.name = \"PalError\";\n  }\n}\n\n/** Base for the named status classes. Each subclass fixes its HTTP status; the\n * `code` defaults to the class's canonical wire code (overridable), and the\n * `message` defaults to a human-readable label (overridable). */\nabstract class NamedHttpError extends HttpError {\n  protected constructor(\n    status: number,\n    defaultCode: string,\n    name: string,\n    message?: string,\n    code?: string,\n    data?: unknown,\n  ) {\n    super(status, code ?? defaultCode, message ?? defaultMessage(name), data);\n    this.name = name;\n  }\n}\n\n/** Derive a default human-readable message from a class name\n * (\"NotFound\" → \"Not found\", \"TooManyRequests\" → \"Too many requests\"). */\nfunction defaultMessage(name: string): string {\n  const spaced = name.replace(/([a-z0-9])([A-Z])/g, \"$1 $2\");\n  return spaced.charAt(0).toUpperCase() + spaced.slice(1).toLowerCase();\n}\n\n/**\n * 400 — the request was malformed or failed validation. Carries a fixed typed\n * payload: `new BadRequest({ fields: [{ field: \"email\", message: \"invalid\" }] })`.\n * The shape is declared once in the SDK so codegen surfaces `error.data.fields`\n * typed on the client.\n */\nexport class BadRequest extends NamedHttpError {\n  public declare readonly data: BadRequestData;\n  constructor(data: BadRequestData, message?: string) {\n    super(400, \"bad_request\", \"BadRequest\", message, undefined, data);\n  }\n}\n\n/** 401 — the caller is not authenticated. */\nexport class Unauthorized extends NamedHttpError {\n  constructor(message?: string, code?: string, data?: unknown) {\n    super(401, \"unauthorized\", \"Unauthorized\", message, code, data);\n  }\n}\n\n/** 403 — the caller is authenticated but not allowed. */\nexport class Forbidden extends NamedHttpError {\n  constructor(message?: string, code?: string, data?: unknown) {\n    super(403, \"forbidden\", \"Forbidden\", message, code, data);\n  }\n}\n\n/** 404 — the requested resource does not exist. */\nexport class NotFound extends NamedHttpError {\n  constructor(message?: string, code?: string, data?: unknown) {\n    super(404, \"not_found\", \"NotFound\", message, code, data);\n  }\n}\n\n/** 409 — the request conflicts with the current state. */\nexport class Conflict extends NamedHttpError {\n  constructor(message?: string, code?: string, data?: unknown) {\n    super(409, \"conflict\", \"Conflict\", message, code, data);\n  }\n}\n\n/**\n * 409 — a write was refused because it would duplicate an existing row.\n * Carries the NAME of the unique constraint Postgres named (`users_email_key`).\n *\n * The engine produces it: a statement rejected with SQLSTATE `23505` is\n * converted here rather than surfacing as an opaque driver error (see\n * `engine/db.ts`, `diagnosingDriver`). What that removes is the string match —\n * before this, the only way to act on a duplicate was to test the driver\n * message for \"duplicate key value violates unique constraint\", a contract\n * nobody signed that breaks on a Postgres upgrade, a locale, or a constraint\n * rename, silently and in production.\n *\n * THE NAME IS A FIELD AND STAYS OUT OF THE DEFAULT MESSAGE. The two are not\n * the same audience. `constraint` is read by the code that catches this — the\n * developer, who already knows the schema. `errorDescription` is the HTTP\n * response body, and an UNCAUGHT duplicate puts it in front of the\n * application's end user: `users_email_key` there discloses how the schema is\n * built to whoever sent the request. The platform's own data API took the same\n * decision one surface over and wrote down why —\n * `v2/internal/modules/database/internal/handler/pgerror.go:83-87` collapses\n * every 23xxx to a generic conflict, \"never disclose the constraint/column\n * name\". A thrower who WANTS the name on the wire passes it deliberately\n * (`new UniqueViolation(c, \\`\\${c} already exists\\`)`, or through `data`).\n *\n * @example\n * try {\n *   await Database.public.users.insert({ email });\n * } catch (e) {\n *   if (UniqueViolation.is(e) && e.constraint === \"users_email_key\") {\n *     throw new Conflict(\"That email is taken\", \"email_taken\");\n *   }\n *   throw e;\n * }\n */\nexport class UniqueViolation extends Conflict {\n  /**\n   * Whether `e` is a unique violation — REGARDLESS of which copy of this SDK\n   * constructed it.\n   *\n   * Use this instead of `instanceof`. Measured on a live stack: a controller\n   * bundle INLINES its own copy of `@palbase/backend`, and the engine that\n   * raises this error is the runtime's copy. Two copies, two class identities,\n   * and `e instanceof UniqueViolation` is false in the one place a caller\n   * writes it — a check that reads as correct and silently never matches.\n   */\n  static is(e: unknown): e is UniqueViolation {\n    return (\n      typeof e === \"object\" &&\n      e !== null &&\n      (e as { name?: unknown }).name === \"UniqueViolation\" &&\n      typeof (e as { constraint?: unknown }).constraint === \"string\"\n    );\n  }\n\n  /** The unique constraint the statement violated, as Postgres named it.\n   * `\"\"` when the driver did not say which — see `engine/db.ts`. */\n  public readonly constraint: string;\n\n  constructor(constraint: string, message?: string, code?: string, data?: unknown) {\n    super(message ?? \"Unique constraint violated\", code ?? \"unique_violation\", data);\n    this.name = \"UniqueViolation\";\n    this.constraint = constraint;\n  }\n}\n\n/**\n * Eşzamanlılık yüzünden BAŞARISIZ OLAN, ama TEKRAR DENENİRSE başarılı olabilecek\n * hataların ortak yüzeyi (FR-036).\n *\n * `retryable: true` bir tahmin değil, Postgres'in söylediği şey: `40001` ve\n * `40P01` \"bu işlemi baştan çalıştır\" anlamına gelir. Kümenin DAR tutulması\n * kasıtlı — `23505` buraya girseydi, tekrar denemek aynı cevabı verir ve\n * döngü sonsuza kadar dönerdi.\n */\nexport interface RetryableError extends Error {\n  readonly retryable: true;\n  /** Beş karakterlik SQLSTATE — hangi eşzamanlılık hatası olduğunu SÖYLER. */\n  readonly sqlstate: string;\n}\n\n/**\n * `e` tekrar denenebilir mi?\n *\n * `instanceof` DEĞİL şekil kontrolü — ve sebebi ÖLÇÜLMÜŞ (bkz. {@link\n * UniqueViolation.is}): bir controller bundle'ı kendi `@palbase/backend`\n * kopyasını inline'lıyor, hatayı fırlatan motor ise runtime'ın kopyası. İki\n * sınıf kimliği, ve `e instanceof SerializationFailure` yazan tek yerde\n * sessizce hiç eşleşmiyor.\n */\nexport function isRetryable(e: unknown): e is RetryableError {\n  return (\n    typeof e === \"object\" &&\n    e !== null &&\n    (e as { retryable?: unknown }).retryable === true &&\n    typeof (e as { sqlstate?: unknown }).sqlstate === \"string\"\n  );\n}\n\n/**\n * `40001 serialization_failure` — SERIALIZABLE ya da REPEATABLE READ altında\n * eşzamanlı bir işlem bu işlemi geçersiz kıldı.\n *\n * D-016: bu hata BLOKLANMIYOR, FIRLATILIYOR. Retry'sız bir izolasyon\n * yükseltmesi sunmak defect'tir — kullanıcıya çalışmayan bir düğme vermektir:\n * SERIALIZABLE'a çıkıp `40001`'i yakalamayan kod, önceden çalışan işlemleri\n * rastgele kaybetmeye başlar.\n */\nexport class SerializationFailure extends Conflict implements RetryableError {\n  public readonly retryable = true as const;\n  public readonly sqlstate: string;\n\n  static is(e: unknown): e is SerializationFailure {\n    return (\n      typeof e === \"object\" && e !== null &&\n      (e as { name?: unknown }).name === \"SerializationFailure\"\n    );\n  }\n\n  constructor(sqlstate = \"40001\", message?: string, data?: unknown) {\n    super(\n      message ??\n        \"işlem eşzamanlı bir işlemle serileştirilemedi — aynı işlemi baştan çalıştırın \" +\n          \"($transaction'a { retry: n } verebilirsiniz)\",\n      \"serialization_failure\",\n      data,\n    );\n    this.name = \"SerializationFailure\";\n    this.sqlstate = sqlstate;\n  }\n}\n\n/**\n * `40P01 deadlock_detected` — iki işlem birbirinin kilidini bekliyordu;\n * Postgres birini seçip iptal etti.\n *\n * Bu hatayı GÖRMEK bir tasarım sinyali: kilit sırası deterministik değilse\n * tekrar denemek yalnız maliyeti öteler. `Database.$lockRows(...)` (FR-035)\n * ya da çok satırlı yazmanın CTE'si (FR-015) sırayı sabitler.\n */\nexport class DeadlockDetected extends Conflict implements RetryableError {\n  public readonly retryable = true as const;\n  public readonly sqlstate: string;\n\n  static is(e: unknown): e is DeadlockDetected {\n    return (\n      typeof e === \"object\" && e !== null &&\n      (e as { name?: unknown }).name === \"DeadlockDetected\"\n    );\n  }\n\n  constructor(sqlstate = \"40P01\", message?: string, data?: unknown) {\n    super(\n      message ??\n        \"deadlock: iki işlem birbirinin kilidini bekledi ve bu işlem iptal edildi — \" +\n          \"kilit sırasını sabitlemek için Database.$lockRows(tablo, id'ler) kullanın\",\n      \"deadlock_detected\",\n      data,\n    );\n    this.name = \"DeadlockDetected\";\n    this.sqlstate = sqlstate;\n  }\n}\n\n/** A single field-level validation failure carried by {@link BadRequest}. */\nexport interface FieldError {\n  /** The offending field's name (dotted path for nested fields). */\n  field: string;\n  /** Human-readable reason the field failed. */\n  message: string;\n}\n\n/** The fixed, typed payload {@link BadRequest} ships. */\nexport interface BadRequestData {\n  /** The fields that failed validation. */\n  fields: FieldError[];\n}\n\n/** The fixed, typed payload {@link TooManyRequests} ships. */\nexport interface TooManyRequestsData {\n  /** Seconds the caller should wait before retrying. */\n  retryAfter: number;\n}\n\n/**\n * 429 — the caller has exceeded the rate limit. Carries a fixed typed payload:\n * `new TooManyRequests({ retryAfter: 30 })`. The shape is declared once in the\n * SDK (error-registry pre-seed) so codegen surfaces `error.data.retryAfter`\n * typed on the client — no per-project definition needed.\n */\nexport class TooManyRequests extends NamedHttpError {\n  public declare readonly data: TooManyRequestsData;\n  constructor(data: TooManyRequestsData, message?: string) {\n    super(429, \"too_many_requests\", \"TooManyRequests\", message, undefined, data);\n  }\n}\n"],"mappings":";;;;;AAiBO,IAAMA,mBAAkCC,uBAAOC,IAAI,2BAAA;AAgBnD,IAAMC,gBAA+BF,uBAAOC,IAAI,8BAAA;AAGhD,SAASE,iBAAmCC,GAAI;AACpDA,IAA8BF,aAAAA,IAAiB;AAChD,SAAOE;AACT;AAHgBD;AAMT,SAASE,eAAeD,GAAU;AACvC,SAAO,OAAOA,MAAM,YAAYA,MAAM,QAASA,EAA8BF,aAAAA,MAAmB;AAClG;AAFgBG;AAYT,SAASC,YAAYC,KAAY;AACtC,MAAI,OAAOA,QAAQ,YAAYA,QAAQ,KAAM,QAAO;AACpD,QAAMH,IAAIG;AACV,SACEH,EAAEL,gBAAAA,MAAsB,QACxB,OAAOK,EAAEI,WAAW,YACpB,OAAOJ,EAAEK,UAAU,YACnB,OAAOL,EAAEM,qBAAqB;AAElC;AATgBJ;AAyBT,IAAMK,YAAN,cAAwBC,MAAAA;EA/E/B,OA+E+BA;;;EACbJ;EACAC;EACAC;EACAG;;EAEA,CAACd,gBAAAA,IAAoB;EAErC,YAAYS,QAAgBC,OAAeC,kBAA0BG,MAAgB;AACnF,UAAMH,gBAAAA;AACN,SAAKI,OAAO;AACZ,SAAKN,SAASA;AACd,SAAKC,QAAQA;AACb,SAAKC,mBAAmBA;AACxB,QAAIG,SAASE,QAAW;AACtB,WAAKF,OAAOA;IACd;EACF;;;;;;;EAQAG,OAAOC,WAML;AACA,UAAMC,SAMF;MACFT,OAAO,KAAKA;MACZU,mBAAmB,KAAKT;MACxBF,QAAQ,KAAKA;IACf;AACA,QAAIS,WAAW;AACbC,aAAOE,aAAaH;IACtB;AACA,QAAI,KAAKJ,SAASE,QAAW;AAC3BG,aAAOL,OAAO,KAAKA;IACrB;AACA,WAAOK;EACT;AACF;AASO,IAAMG,WAAN,cAAuBV,UAAAA;EA3I9B,OA2I8BA;;;EAC5B,YAAYH,QAAgBc,MAAcC,aAAqBV,MAAgB;AAC7E,UAAML,QAAQc,MAAMC,aAAaV,IAAAA;AACjC,SAAKC,OAAO;EACd;AACF;AAKA,IAAeU,iBAAf,MAAeA,wBAAuBb,UAAAA;EArJtC,OAqJsCA;;;EACpC,YACEH,QACAiB,aACAX,MACAY,SACAJ,MACAT,MACA;AACA,UAAML,QAAQc,QAAQG,aAAaC,WAAWC,eAAeb,IAAAA,GAAOD,IAAAA;AACpE,SAAKC,OAAOA;EACd;AACF;AAIA,SAASa,eAAeb,MAAY;AAClC,QAAMc,SAASd,KAAKe,QAAQ,sBAAsB,OAAA;AAClD,SAAOD,OAAOE,OAAO,CAAA,EAAGC,YAAW,IAAKH,OAAOI,MAAM,CAAA,EAAGC,YAAW;AACrE;AAHSN;AAWF,IAAMO,aAAN,cAAyBV,eAAAA;EAhLhC,OAgLgCA;;;EAE9B,YAAYX,MAAsBa,SAAkB;AAClD,UAAM,KAAK,eAAe,cAAcA,SAASX,QAAWF,IAAAA;EAC9D;AACF;AAGO,IAAMsB,eAAN,cAA2BX,eAAAA;EAxLlC,OAwLkCA;;;EAChC,YAAYE,SAAkBJ,MAAeT,MAAgB;AAC3D,UAAM,KAAK,gBAAgB,gBAAgBa,SAASJ,MAAMT,IAAAA;EAC5D;AACF;AAGO,IAAMuB,YAAN,cAAwBZ,eAAAA;EA/L/B,OA+L+BA;;;EAC7B,YAAYE,SAAkBJ,MAAeT,MAAgB;AAC3D,UAAM,KAAK,aAAa,aAAaa,SAASJ,MAAMT,IAAAA;EACtD;AACF;AAGO,IAAMwB,WAAN,cAAuBb,eAAAA;EAtM9B,OAsM8BA;;;EAC5B,YAAYE,SAAkBJ,MAAeT,MAAgB;AAC3D,UAAM,KAAK,aAAa,YAAYa,SAASJ,MAAMT,IAAAA;EACrD;AACF;AAGO,IAAMyB,WAAN,cAAuBd,eAAAA;EA7M9B,OA6M8BA;;;EAC5B,YAAYE,SAAkBJ,MAAeT,MAAgB;AAC3D,UAAM,KAAK,YAAY,YAAYa,SAASJ,MAAMT,IAAAA;EACpD;AACF;AAoCO,IAAM0B,kBAAN,cAA8BD,SAAAA;EArPrC,OAqPqCA;;;;;;;;;;;;;EAWnC,OAAOE,GAAGpC,GAAkC;AAC1C,WACE,OAAOA,MAAM,YACbA,MAAM,QACLA,EAAyBU,SAAS,qBACnC,OAAQV,EAA+BqC,eAAe;EAE1D;;;EAIgBA;EAEhB,YAAYA,YAAoBf,SAAkBJ,MAAeT,MAAgB;AAC/E,UAAMa,WAAW,8BAA8BJ,QAAQ,oBAAoBT,IAAAA;AAC3E,SAAKC,OAAO;AACZ,SAAK2B,aAAaA;EACpB;AACF;AA0BO,SAASC,YAAYtC,GAAU;AACpC,SACE,OAAOA,MAAM,YACbA,MAAM,QACLA,EAA8BuC,cAAc,QAC7C,OAAQvC,EAA6BwC,aAAa;AAEtD;AAPgBF;AAkBT,IAAMG,uBAAN,cAAmCP,SAAAA;EA9T1C,OA8T0CA;;;EACxBK,YAAY;EACZC;EAEhB,OAAOJ,GAAGpC,GAAuC;AAC/C,WACE,OAAOA,MAAM,YAAYA,MAAM,QAC9BA,EAAyBU,SAAS;EAEvC;EAEA,YAAY8B,WAAW,SAASlB,SAAkBb,MAAgB;AAChE,UACEa,WACE,kMAEF,yBACAb,IAAAA;AAEF,SAAKC,OAAO;AACZ,SAAK8B,WAAWA;EAClB;AACF;AAUO,IAAME,mBAAN,cAA+BR,SAAAA;EA9VtC,OA8VsCA;;;EACpBK,YAAY;EACZC;EAEhB,OAAOJ,GAAGpC,GAAmC;AAC3C,WACE,OAAOA,MAAM,YAAYA,MAAM,QAC9BA,EAAyBU,SAAS;EAEvC;EAEA,YAAY8B,WAAW,SAASlB,SAAkBb,MAAgB;AAChE,UACEa,WACE,8LAEF,qBACAb,IAAAA;AAEF,SAAKC,OAAO;AACZ,SAAK8B,WAAWA;EAClB;AACF;AA4BO,IAAMG,kBAAN,cAA8BvB,eAAAA;EAhZrC,OAgZqCA;;;EAEnC,YAAYX,MAA2Ba,SAAkB;AACvD,UAAM,KAAK,qBAAqB,mBAAmBA,SAASX,QAAWF,IAAAA;EACzE;AACF;","names":["HTTP_ERROR_BRAND","Symbol","for","ENGINE_RAISED","markEngineRaised","e","isEngineRaised","isHttpError","err","status","error","errorDescription","HttpError","Error","data","name","undefined","toJSON","requestId","result","error_description","request_id","PalError","code","description","NamedHttpError","defaultCode","message","defaultMessage","spaced","replace","charAt","toUpperCase","slice","toLowerCase","BadRequest","Unauthorized","Forbidden","NotFound","Conflict","UniqueViolation","is","constraint","isRetryable","retryable","sqlstate","SerializationFailure","DeadlockDetected","TooManyRequests"]}