@palbase/backend 28.0.0 → 30.0.0

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  Auth: () => Auth,
   BadRequest: () => BadRequest,
   Body: () => Body,
   Cache: () => Cache,
@@ -71,6 +72,7 @@ __export(src_exports, {
   Realtime: () => Realtime,
   Req: () => Req,
   RequestId: () => RequestId,
+  RoleNotDefined: () => RoleNotDefined,
   Room: () => Room,
   Secrets: () => Secrets,
   SerializationFailure: () => SerializationFailure,
@@ -918,6 +920,7 @@ var TooManyRequests = class extends NamedHttpError {
 function makeTypedTable(name, raw2) {
   return {
     insert: /* @__PURE__ */ __name((data) => raw2.insert(name, data), "insert"),
+    aggregate: /* @__PURE__ */ __name((q) => raw2.aggregate(name, q), "aggregate"),
     insertMany: /* @__PURE__ */ __name((rows, opts) => raw2.insertMany(name, rows, opts), "insertMany"),
     put: /* @__PURE__ */ __name((q) => raw2.put(name, q.data, {
       onConflict: q.onConflict
@@ -929,7 +932,9 @@ function makeTypedTable(name, raw2) {
       const { where, ...opts } = q ?? {};
       return raw2.findMany(name, where, opts);
     }, "findMany"),
-    updateMany: /* @__PURE__ */ __name((q) => raw2.updateMany(name, q.where, q.set), "updateMany"),
+    updateMany: /* @__PURE__ */ __name((q) => raw2.updateMany(name, q.where, q.set, q.returning === void 0 ? void 0 : {
+      returning: q.returning
+    }), "updateMany"),
     deleteMany: /* @__PURE__ */ __name((q) => raw2.deleteMany(name, q.where), "deleteMany"),
     count: /* @__PURE__ */ __name((q) => raw2.count(name, q?.where), "count")
   };
@@ -1373,6 +1378,7 @@ function makeTableProxy(ops, prefix) {
         // DÖRDÜNCÜ FİİL, aynı gerekçeyle: tip söz veriyor, ops katmanı
         // uyguluyor, ve bir handler'ın gerçekten dokunduğu yer BURASI.
         // `runtime-table-verbs` kapısı bunu adıyla saydı.
+        aggregate: /* @__PURE__ */ __name((q) => ops().aggregate(name, q), "aggregate"),
         insertMany: /* @__PURE__ */ __name((rows, opts) => ops().insertMany(name, rows, opts), "insertMany"),
         update: /* @__PURE__ */ __name((q) => ops().update(name, q.where.id, q.set), "update"),
         delete: /* @__PURE__ */ __name((id) => ops().delete(name, id), "delete"),
@@ -1430,6 +1436,7 @@ function makeTypedSurface(raw2) {
     $claim: /* @__PURE__ */ __name((table, unique, extra) => reco.claim(table, unique, extra), "$claim"),
     $lockRows: /* @__PURE__ */ __name((table, ids) => reco.lockRows(table, ids), "$lockRows"),
     $advisoryXactLock: /* @__PURE__ */ __name((key) => reco.advisoryXactLock(key), "$advisoryXactLock"),
+    $aggregate: /* @__PURE__ */ __name((table, q) => raw2.aggregate(table, q), "$aggregate"),
     $insertMany: /* @__PURE__ */ __name((table, rows, opts) => raw2.insertMany(table, rows, opts), "$insertMany"),
     $supersede: /* @__PURE__ */ __name((table, id, row) => raw2.supersede(table, id, row), "$supersede")
   };
@@ -1515,6 +1522,7 @@ var Storage = Object.assign({
 });
 var Cache = makeServiceProxy("Cache");
 var Secrets = makeServiceProxy("Secrets");
+var Auth = makeServiceProxy("Auth");
 var Log = makeServiceProxy("Log");
 var Notifications = makeServiceProxy("Notifications");
 var rawFlags = makeServiceProxy("Flags");
@@ -1642,6 +1650,48 @@ function makeHttpClient(cfg) {
 }
 __name(makeHttpClient, "makeHttpClient");
 
+// src/clients/auth.ts
+var RoleNotDefined = class extends Error {
+  static {
+    __name(this, "RoleNotDefined");
+  }
+  role;
+  constructor(role, message) {
+    super(message ?? `No role named "${role}" is defined for this stack`);
+    this.name = "RoleNotDefined";
+    this.role = role;
+  }
+};
+function refuse(error, role) {
+  if (error.code === "role_not_defined") throw new RoleNotDefined(role, error.message);
+  if (error instanceof PalbaseModuleError) throw error;
+  throw new PalbaseModuleError(error.code ?? "unknown_error", error.message ?? "request failed", 0);
+}
+__name(refuse, "refuse");
+function rolesPath(userId, role) {
+  const base = `/admin/users/${encodeURIComponent(userId)}/roles`;
+  return role === void 0 ? base : `${base}/${encodeURIComponent(role)}`;
+}
+__name(rolesPath, "rolesPath");
+function buildAuthClient(http) {
+  return {
+    async assignRole(userId, role) {
+      const { error } = await http.request("PUT", rolesPath(userId, role));
+      if (error) refuse(error, role);
+    },
+    async revokeRole(userId, role) {
+      const { error } = await http.request("DELETE", rolesPath(userId, role));
+      if (error) refuse(error, role);
+    },
+    async rolesOf(userId) {
+      const { data, error } = await http.request("GET", rolesPath(userId));
+      if (error) refuse(error, "");
+      return data?.roles ?? [];
+    }
+  };
+}
+__name(buildAuthClient, "buildAuthClient");
+
 // src/clients/documents.ts
 var SEGMENT_RE = /^[A-Za-z0-9_-]+$/;
 function validateSegment(segment, label) {
@@ -2626,6 +2676,10 @@ function buildModuleClients(cfg) {
     fetchImpl: cfg.fetchImpl
   });
   return {
+    // The ROLE half of auth only (`clients/auth.ts` says why the rest is not
+    // here). It rides the same service-role transport, which is exactly the
+    // credential the assignment routes demand.
+    Auth: buildAuthClient(http),
     Documents: buildDocumentsClient(http),
     Storage: buildStorageClient(http, cfg.publicOrigin),
     Notifications: buildNotificationsClient(http),
@@ -3607,7 +3661,7 @@ function baseTsType(def) {
     case "boolean":
       return "boolean";
     case "jsonb":
-      return "unknown";
+      return "Json";
     // FR-008: the authoring type of a pgvector column. The default `unknown`
     // branch below STAYS — an unknown wire type is refused on the Go side
     // (FR-005), never papered over here.
@@ -3635,7 +3689,6 @@ function pgBrand(def) {
 __name(pgBrand, "pgBrand");
 function rowType(def) {
   const base = baseTsType(def);
-  if (base === "unknown") return def.nullable ? `${base} | null` : base;
   const branded = `Pg<${base}, ${JSON.stringify(pgBrand(def))}>`;
   return def.nullable ? `${branded} | null` : branded;
 }
@@ -3799,6 +3852,14 @@ ${schemaBlocks.join("\n")}
  */
 type Pg<T, N extends string> = T & { readonly __pg?: N };
 
+/**
+ * Bir jsonb kolonunun tasiyabilecegi deger.
+ *
+ * undefined DAHIL, cunku JSON.stringify undefined alanlari duserur ve
+ * { a: undefined } yazan kod her yerde var \u2014 reddetmek dogru olmazdi.
+ */
+type Json = string | number | boolean | null | undefined | Json[] | { [k: string]: Json };
+
 declare module "@palbase/backend/env" {
   interface Tables {${body}}
   interface Schemas {${schemasBody}}
@@ -5268,6 +5329,7 @@ __name(getJobConfig, "getJobConfig");
 var import_zod2 = require("zod");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  Auth,
   BadRequest,
   Body,
   Cache,
@@ -5318,6 +5380,7 @@ var import_zod2 = require("zod");
   Realtime,
   Req,
   RequestId,
+  RoleNotDefined,
   Room,
   Secrets,
   SerializationFailure,