@palbase/backend 30.0.0 → 32.0.0

package/dist/bin/palbase-backend.js

@@ -3,17 +3,17 @@ import {
   BootRefused,
   createApp,
   loadConfig
-} from "../chunk-VN7NMDUH.js";
-import "../chunk-5J5W75A6.js";
-import "../chunk-SG4UTNOP.js";
-import "../chunk-3TUJWHC2.js";
+} from "../chunk-AZJIKCOR.js";
+import "../chunk-5C5UCILO.js";
+import "../chunk-XEGZ3S2Q.js";
+import "../chunk-KGP6ALIU.js";
+import "../chunk-IXAX5CON.js";
 import {
   getRegisteredControllers
-} from "../chunk-VVMJEVQP.js";
-import "../chunk-CGNN2PUH.js";
+} from "../chunk-BRLJOXWS.js";
 import {
   __name
-} from "../chunk-VXPNPVAG.js";
+} from "../chunk-KATPXCJ5.js";
 
 // src/bin/palbase-backend.ts
 import { readdir } from "fs/promises";

package/dist/{chunk-TWX6JTGJ.js → chunk-26GH54D2.js}

@@ -1,9 +1,7 @@
 import {
-  HttpError
-} from "./chunk-CGNN2PUH.js";
-import {
+  HttpError,
   __name
-} from "./chunk-VXPNPVAG.js";
+} from "./chunk-KATPXCJ5.js";
 
 // src/error-registry.ts
 import { OpenAPIRegistry, OpenApiGeneratorV31, extendZodWithOpenApi } from "@asteasolutions/zod-to-openapi";
@@ -161,4 +159,4 @@ export {
   getErrorRegistry,
   defineError
 };
-//# sourceMappingURL=chunk-TWX6JTGJ.js.map
+//# sourceMappingURL=chunk-26GH54D2.js.map

package/dist/{chunk-TWX6JTGJ.js.map → chunk-26GH54D2.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/error-registry.ts"],"sourcesContent":["// defineError — project-defined typed error classes + the module-global error\n// registry the OpenAPI spec twins join against.\n//\n// `defineError(code, status, dataSchema?)` returns an `HttpError` subclass whose\n// constructor is typed by the zod schema (`new TodoLocked({ retryAfter: 30 })`).\n// Each call self-registers `{ code, status, className, dataSchema }` in a\n// registry anchored on `globalThis` under `Symbol.for(...)` — mirroring the\n// ROUTES pattern — so the deploy bundle's registrations land on the single SDK\n// instance the extractor `require()`s. The registry is pre-seeded with the named\n// built-in classes (`NotFound`, `Conflict`, …) so throw inference can resolve\n// ad-hoc `throw new NotFound(...)` sites by their canonical wire codes.\n//\n// Duplicate code with a DIFFERENT shape (status OR converted data schema) is a\n// hard error at registration time (deploy fails loudly — error codes are\n// project-unique); structurally-identical re-registration is idempotent (each\n// controller BUNDLE carries its own copy of a shared models/errors.ts, so the\n// same defineError line legitimately runs once per bundle in one process).\nimport {\n  OpenAPIRegistry,\n  OpenApiGeneratorV31,\n  extendZodWithOpenApi,\n} from \"@asteasolutions/zod-to-openapi\";\nimport { z, type ZodTypeAny } from \"zod\";\nimport { HttpError } from \"./errors.js\";\n\nextendZodWithOpenApi(z);\n\n/** One registered error: the wire code, HTTP status, the class name the\n * analyzer sees, the optional data payload schema, and whether it is one of the\n * pre-seeded built-in named classes. */\nexport interface RegisteredError {\n  code: string;\n  status: number;\n  className: string;\n  dataSchema?: ZodTypeAny;\n  /** JSON.stringify of the converted JSON schema — equal digest ⇔ the spec\n   * twins would emit an identical `data` schema for this error. */\n  dataDigest?: string;\n  builtin: boolean;\n}\n\n/** The cross-module-instance registry anchor (the pinned contract symbol). */\nconst ERROR_REGISTRY: unique symbol = Symbol.for(\"palbase.backend.errorRegistry\");\n\ninterface RegistryCarrier {\n  [ERROR_REGISTRY]?: Map<string, RegisteredError>;\n}\n\n/** Get (creating + pre-seeding if absent) the project-global error registry,\n * keyed by wire code. Anchored on `globalThis` so every copy of the SDK in a\n * process shares the one registry. */\n/** The fixed data schemas the built-in named errors ship. Declared HERE (not in\n * errors.ts, which stays zod-free) because this is where the registry converts\n * them to JSON-schema for the spec — keying codegen's typed `error.data`. Only\n * the errors that semantically carry a payload have a schema; the rest are\n * data-less. `.int()` is preserved so the wire/codegen sees an integer. */\nconst BUILTIN_DATA_SCHEMAS: Record<string, ZodTypeAny> = {\n  bad_request: z.object({\n    fields: z.array(z.object({ field: z.string(), message: z.string() })),\n  }),\n  too_many_requests: z.object({ retryAfter: z.number().int() }),\n};\n\nexport function getErrorRegistry(): Map<string, RegisteredError> {\n  const g = globalThis as RegistryCarrier;\n  if (!g[ERROR_REGISTRY]) {\n    const m = new Map<string, RegisteredError>();\n    for (const [code, status, className] of [\n      [\"bad_request\", 400, \"BadRequest\"],\n      [\"unauthorized\", 401, \"Unauthorized\"],\n      [\"forbidden\", 403, \"Forbidden\"],\n      [\"not_found\", 404, \"NotFound\"],\n      [\"conflict\", 409, \"Conflict\"],\n      // The engine's own 23505 conversion (engine/db.ts) throws this, and an\n      // author may too. Registered like every other built-in so the spec\n      // emitter resolves it — an unregistered code is SKIPPED silently there\n      // (openapi/convert.ts) and would degrade to the client's `.other` case.\n      [\"unique_violation\", 409, \"UniqueViolation\"],\n      [\"too_many_requests\", 429, \"TooManyRequests\"],\n    ] as const) {\n      const dataSchema = BUILTIN_DATA_SCHEMAS[code];\n      m.set(code, {\n        code,\n        status,\n        className,\n        builtin: true,\n        ...(dataSchema ? { dataSchema, dataDigest: digestOf(code, dataSchema) } : {}),\n      });\n    }\n    g[ERROR_REGISTRY] = m;\n  }\n  return g[ERROR_REGISTRY];\n}\n\n/** Class returned for schema-bearing errors: ctor(data, message?). */\nexport interface DefinedErrorWithData<S extends ZodTypeAny> {\n  new (data: z.input<S>, message?: string): HttpError;\n  readonly code: string;\n  readonly status: number;\n}\n\n/** Class returned for schema-less errors: ctor(message?). */\nexport interface DefinedError {\n  new (message?: string): HttpError;\n  readonly code: string;\n  readonly status: number;\n}\n\n/**\n * Define a project error class. MUST be called with literal args (string\n * literal `code`, numeric literal `status`) at module top level — the deploy\n * stager's static analyzer reads those literals to resolve throw sites.\n *\n * @example\n * // models/todos/errors.ts\n * export const TodoLocked = defineError(\"todo_locked\", 409, z.object({ retryAfter: z.number() }));\n * // services/todo.service.ts\n * throw new TodoLocked({ retryAfter: 30 });\n */\nexport function defineError<S extends ZodTypeAny>(\n  code: string,\n  status: number,\n  dataSchema: S,\n): DefinedErrorWithData<S>;\nexport function defineError(code: string, status: number): DefinedError;\nexport function defineError(code: string, status: number, dataSchema?: ZodTypeAny): unknown {\n  if (!Number.isInteger(status) || status < 400 || status > 599) {\n    throw new Error(\n      `defineError: status for \"${code}\" must be a 4xx/5xx integer, got ${status} — ` +\n        `error responses must not clobber success responses in the project spec.`,\n    );\n  }\n  const registry = getErrorRegistry();\n  const existing = registry.get(code);\n  const className = defaultClassName(code);\n  const dataDigest = dataSchema ? digestOf(code, dataSchema) : undefined;\n  if (existing) {\n    const sameShape =\n      existing.status === status && !existing.builtin && existing.dataDigest === dataDigest;\n    if (!sameShape) {\n      throw new Error(\n        `defineError: duplicate error code \"${code}\" with a different shape ` +\n          `(existing: status ${existing.status}${existing.builtin ? \", built-in\" : \"\"}` +\n          `${existing.status === status && !existing.builtin ? \", different data schema\" : \"\"}). ` +\n          `Error codes are project-unique.`,\n      );\n    }\n  }\n  // Local factories so the class-constructor closures capture a NON-optional\n  // schema binding (narrowing does not flow into closures created in a branch).\n  const makeWithData = (schema: ZodTypeAny) =>\n    class extends HttpError {\n      static readonly code = code;\n      static readonly status = status;\n      constructor(data: unknown, message?: string) {\n        super(status, code, message ?? humanize(code), schema.parse(data));\n        this.name = className;\n      }\n    };\n  const makeWithoutData = () =>\n    class extends HttpError {\n      static readonly code = code;\n      static readonly status = status;\n      constructor(message?: string) {\n        super(status, code, message ?? humanize(code));\n        this.name = className;\n      }\n    };\n  const cls = dataSchema ? makeWithData(dataSchema) : makeWithoutData();\n  Object.defineProperty(cls, \"name\", { value: className });\n  registry.set(code, {\n    code,\n    status,\n    className,\n    builtin: false,\n    ...(dataSchema ? { dataSchema } : {}),\n    ...(dataDigest !== undefined ? { dataDigest } : {}),\n  });\n  return cls;\n}\n\n/** Convert a data schema through the SAME library the spec twins use and\n * return its JSON-schema digest (the duplicate-shape comparison key). Doubles\n * as the self-containment guard: a schema carrying `.openapi(refId)` metadata\n * (top-level or nested) converts to `$ref` pointers into components the\n * project spec never emits — a dangling ref every spec consumer would choke\n * on — so it is rejected here, at the definition site, with a fixable message. */\nfunction digestOf(code: string, dataSchema: ZodTypeAny): string {\n  const TMP_REF = \"__PalbaseErrorDataDigest\";\n  const tmpRegistry = new OpenAPIRegistry();\n  // Wrap the schema as a property — exactly how the envelope embeds it — so a\n  // TOP-LEVEL .openapi(refId) is not masked by the registration refId and\n  // surfaces as the same $ref the real emission would produce.\n  tmpRegistry.register(TMP_REF, z.object({ data: dataSchema }).openapi(TMP_REF));\n  const generated = new OpenApiGeneratorV31(tmpRegistry.definitions).generateComponents();\n  const out = generated.components?.schemas?.[TMP_REF];\n  const digest = JSON.stringify(out ?? null);\n  if (digest.includes('\"$ref\"')) {\n    throw new Error(\n      `defineError: dataSchema for \"${code}\" carries .openapi(refId) metadata — ` +\n        `it would emit dangling $ref pointers in the project spec. ` +\n        `Use a plain zod schema (z.object({...})) without .openapi(...).`,\n    );\n  }\n  return digest;\n}\n\n/** \"todo_locked\" → \"TodoLocked\" (used as Error.name; the source class NAME the\n * analyzer sees is whatever the user assigned the const to — they should match\n * by convention, and the descriptor carries the analyzed const name anyway). */\nfunction defaultClassName(code: string): string {\n  return code\n    .split(\"_\")\n    .map((p) => p.charAt(0).toUpperCase() + p.slice(1))\n    .join(\"\");\n}\n\n/** \"todo_locked\" → \"Todo locked\" — the default human-readable message. */\nfunction humanize(code: string): string {\n  const s = code.replace(/_/g, \" \");\n  return s.charAt(0).toUpperCase() + s.slice(1);\n}\n"],"mappings":";;;;;;;;AAiBA,SACEA,iBACAC,qBACAC,4BACK;AACP,SAASC,SAA0B;AAGnCC,qBAAqBC,CAAAA;AAiBrB,IAAMC,iBAAgCC,uBAAOC,IAAI,+BAAA;AAcjD,IAAMC,uBAAmD;EACvDC,aAAaL,EAAEM,OAAO;IACpBC,QAAQP,EAAEQ,MAAMR,EAAEM,OAAO;MAAEG,OAAOT,EAAEU,OAAM;MAAIC,SAASX,EAAEU,OAAM;IAAG,CAAA,CAAA;EACpE,CAAA;EACAE,mBAAmBZ,EAAEM,OAAO;IAAEO,YAAYb,EAAEc,OAAM,EAAGC,IAAG;EAAG,CAAA;AAC7D;AAEO,SAASC,mBAAAA;AACd,QAAMC,IAAIC;AACV,MAAI,CAACD,EAAEhB,cAAAA,GAAiB;AACtB,UAAMkB,IAAI,oBAAIC,IAAAA;AACd,eAAW,CAACC,MAAMC,QAAQC,SAAAA,KAAc;MACtC;QAAC;QAAe;QAAK;;MACrB;QAAC;QAAgB;QAAK;;MACtB;QAAC;QAAa;QAAK;;MACnB;QAAC;QAAa;QAAK;;MACnB;QAAC;QAAY;QAAK;;;;;;MAKlB;QAAC;QAAoB;QAAK;;MAC1B;QAAC;QAAqB;QAAK;;OACjB;AACV,YAAMC,aAAapB,qBAAqBiB,IAAAA;AACxCF,QAAEM,IAAIJ,MAAM;QACVA;QACAC;QACAC;QACAG,SAAS;QACT,GAAIF,aAAa;UAAEA;UAAYG,YAAYC,SAASP,MAAMG,UAAAA;QAAY,IAAI,CAAC;MAC7E,CAAA;IACF;AACAP,MAAEhB,cAAAA,IAAkBkB;EACtB;AACA,SAAOF,EAAEhB,cAAAA;AACX;AA7BgBe;AA8DT,SAASa,YAAYR,MAAcC,QAAgBE,YAAuB;AAC/E,MAAI,CAACM,OAAOC,UAAUT,MAAAA,KAAWA,SAAS,OAAOA,SAAS,KAAK;AAC7D,UAAM,IAAIU,MACR,4BAA4BX,IAAAA,oCAAwCC,MAAAA,iFACO;EAE/E;AACA,QAAMW,WAAWjB,iBAAAA;AACjB,QAAMkB,WAAWD,SAASE,IAAId,IAAAA;AAC9B,QAAME,YAAYa,iBAAiBf,IAAAA;AACnC,QAAMM,aAAaH,aAAaI,SAASP,MAAMG,UAAAA,IAAca;AAC7D,MAAIH,UAAU;AACZ,UAAMI,YACJJ,SAASZ,WAAWA,UAAU,CAACY,SAASR,WAAWQ,SAASP,eAAeA;AAC7E,QAAI,CAACW,WAAW;AACd,YAAM,IAAIN,MACR,sCAAsCX,IAAAA,8CACfa,SAASZ,MAAM,GAAGY,SAASR,UAAU,eAAe,EAAA,GACtEQ,SAASZ,WAAWA,UAAU,CAACY,SAASR,UAAU,4BAA4B,EAAA,oCAChD;IAEvC;EACF;AAGA,QAAMa,eAAe,wBAACC,WACpB,cAAcC,UAAAA;IACZ,OAAgBpB,OAAOA;IACvB,OAAgBC,SAASA;IACzB,YAAYoB,MAAe/B,SAAkB;AAC3C,YAAMW,QAAQD,MAAMV,WAAWgC,SAAStB,IAAAA,GAAOmB,OAAOI,MAAMF,IAAAA,CAAAA;AAC5D,WAAKG,OAAOtB;IACd;EACF,GARmB;AASrB,QAAMuB,kBAAkB,6BACtB,cAAcL,UAAAA;IACZ,OAAgBpB,OAAOA;IACvB,OAAgBC,SAASA;IACzB,YAAYX,SAAkB;AAC5B,YAAMW,QAAQD,MAAMV,WAAWgC,SAAStB,IAAAA,CAAAA;AACxC,WAAKwB,OAAOtB;IACd;EACF,GARsB;AASxB,QAAMwB,MAAMvB,aAAae,aAAaf,UAAAA,IAAcsB,gBAAAA;AACpDE,SAAOC,eAAeF,KAAK,QAAQ;IAAEG,OAAO3B;EAAU,CAAA;AACtDU,WAASR,IAAIJ,MAAM;IACjBA;IACAC;IACAC;IACAG,SAAS;IACT,GAAIF,aAAa;MAAEA;IAAW,IAAI,CAAC;IACnC,GAAIG,eAAeU,SAAY;MAAEV;IAAW,IAAI,CAAC;EACnD,CAAA;AACA,SAAOoB;AACT;AAtDgBlB;AA8DhB,SAASD,SAASP,MAAcG,YAAsB;AACpD,QAAM2B,UAAU;AAChB,QAAMC,cAAc,IAAIC,gBAAAA;AAIxBD,cAAYE,SAASH,SAASnD,EAAEM,OAAO;IAAEoC,MAAMlB;EAAW,CAAA,EAAG+B,QAAQJ,OAAAA,CAAAA;AACrE,QAAMK,YAAY,IAAIC,oBAAoBL,YAAYM,WAAW,EAAEC,mBAAkB;AACrF,QAAMC,MAAMJ,UAAUK,YAAYC,UAAUX,OAAAA;AAC5C,QAAMY,SAASC,KAAKC,UAAUL,OAAO,IAAA;AACrC,MAAIG,OAAOG,SAAS,QAAA,GAAW;AAC7B,UAAM,IAAIlC,MACR,gCAAgCX,IAAAA,qKAEmC;EAEvE;AACA,SAAO0C;AACT;AAlBSnC;AAuBT,SAASQ,iBAAiBf,MAAY;AACpC,SAAOA,KACJ8C,MAAM,GAAA,EACNC,IAAI,CAACC,MAAMA,EAAEC,OAAO,CAAA,EAAGC,YAAW,IAAKF,EAAEG,MAAM,CAAA,CAAA,EAC/CC,KAAK,EAAA;AACV;AALSrC;AAQT,SAASO,SAAStB,MAAY;AAC5B,QAAMqD,IAAIrD,KAAKsD,QAAQ,MAAM,GAAA;AAC7B,SAAOD,EAAEJ,OAAO,CAAA,EAAGC,YAAW,IAAKG,EAAEF,MAAM,CAAA;AAC7C;AAHS7B;","names":["OpenAPIRegistry","OpenApiGeneratorV31","extendZodWithOpenApi","z","extendZodWithOpenApi","z","ERROR_REGISTRY","Symbol","for","BUILTIN_DATA_SCHEMAS","bad_request","object","fields","array","field","string","message","too_many_requests","retryAfter","number","int","getErrorRegistry","g","globalThis","m","Map","code","status","className","dataSchema","set","builtin","dataDigest","digestOf","defineError","Number","isInteger","Error","registry","existing","get","defaultClassName","undefined","sameShape","makeWithData","schema","HttpError","data","humanize","parse","name","makeWithoutData","cls","Object","defineProperty","value","TMP_REF","tmpRegistry","OpenAPIRegistry","register","openapi","generated","OpenApiGeneratorV31","definitions","generateComponents","out","components","schemas","digest","JSON","stringify","includes","split","map","p","charAt","toUpperCase","slice","join","s","replace"]}
+{"version":3,"sources":["../src/error-registry.ts"],"sourcesContent":["// defineError — project-defined typed error classes + the module-global error\n// registry the OpenAPI spec twins join against.\n//\n// `defineError(code, status, dataSchema?)` returns an `HttpError` subclass whose\n// constructor is typed by the zod schema (`new TodoLocked({ retryAfter: 30 })`).\n// Each call self-registers `{ code, status, className, dataSchema }` in a\n// registry anchored on `globalThis` under `Symbol.for(...)` — mirroring the\n// ROUTES pattern — so the deploy bundle's registrations land on the single SDK\n// instance the extractor `require()`s. The registry is pre-seeded with the named\n// built-in classes (`NotFound`, `Conflict`, …) so throw inference can resolve\n// ad-hoc `throw new NotFound(...)` sites by their canonical wire codes.\n//\n// Duplicate code with a DIFFERENT shape (status OR converted data schema) is a\n// hard error at registration time (deploy fails loudly — error codes are\n// project-unique); structurally-identical re-registration is idempotent (each\n// controller BUNDLE carries its own copy of a shared models/errors.ts, so the\n// same defineError line legitimately runs once per bundle in one process).\nimport {\n  OpenAPIRegistry,\n  OpenApiGeneratorV31,\n  extendZodWithOpenApi,\n} from \"@asteasolutions/zod-to-openapi\";\nimport { z, type ZodTypeAny } from \"zod\";\nimport { HttpError } from \"./errors.js\";\n\nextendZodWithOpenApi(z);\n\n/** One registered error: the wire code, HTTP status, the class name the\n * analyzer sees, the optional data payload schema, and whether it is one of the\n * pre-seeded built-in named classes. */\nexport interface RegisteredError {\n  code: string;\n  status: number;\n  className: string;\n  dataSchema?: ZodTypeAny;\n  /** JSON.stringify of the converted JSON schema — equal digest ⇔ the spec\n   * twins would emit an identical `data` schema for this error. */\n  dataDigest?: string;\n  builtin: boolean;\n}\n\n/** The cross-module-instance registry anchor (the pinned contract symbol). */\nconst ERROR_REGISTRY: unique symbol = Symbol.for(\"palbase.backend.errorRegistry\");\n\ninterface RegistryCarrier {\n  [ERROR_REGISTRY]?: Map<string, RegisteredError>;\n}\n\n/** Get (creating + pre-seeding if absent) the project-global error registry,\n * keyed by wire code. Anchored on `globalThis` so every copy of the SDK in a\n * process shares the one registry. */\n/** The fixed data schemas the built-in named errors ship. Declared HERE (not in\n * errors.ts, which stays zod-free) because this is where the registry converts\n * them to JSON-schema for the spec — keying codegen's typed `error.data`. Only\n * the errors that semantically carry a payload have a schema; the rest are\n * data-less. `.int()` is preserved so the wire/codegen sees an integer. */\nconst BUILTIN_DATA_SCHEMAS: Record<string, ZodTypeAny> = {\n  bad_request: z.object({\n    fields: z.array(z.object({ field: z.string(), message: z.string() })),\n  }),\n  too_many_requests: z.object({ retryAfter: z.number().int() }),\n};\n\nexport function getErrorRegistry(): Map<string, RegisteredError> {\n  const g = globalThis as RegistryCarrier;\n  if (!g[ERROR_REGISTRY]) {\n    const m = new Map<string, RegisteredError>();\n    for (const [code, status, className] of [\n      [\"bad_request\", 400, \"BadRequest\"],\n      [\"unauthorized\", 401, \"Unauthorized\"],\n      [\"forbidden\", 403, \"Forbidden\"],\n      [\"not_found\", 404, \"NotFound\"],\n      [\"conflict\", 409, \"Conflict\"],\n      // The engine's own 23505 conversion (engine/db.ts) throws this, and an\n      // author may too. Registered like every other built-in so the spec\n      // emitter resolves it — an unregistered code is SKIPPED silently there\n      // (openapi/convert.ts) and would degrade to the client's `.other` case.\n      [\"unique_violation\", 409, \"UniqueViolation\"],\n      [\"too_many_requests\", 429, \"TooManyRequests\"],\n    ] as const) {\n      const dataSchema = BUILTIN_DATA_SCHEMAS[code];\n      m.set(code, {\n        code,\n        status,\n        className,\n        builtin: true,\n        ...(dataSchema ? { dataSchema, dataDigest: digestOf(code, dataSchema) } : {}),\n      });\n    }\n    g[ERROR_REGISTRY] = m;\n  }\n  return g[ERROR_REGISTRY];\n}\n\n/** Class returned for schema-bearing errors: ctor(data, message?). */\nexport interface DefinedErrorWithData<S extends ZodTypeAny> {\n  new (data: z.input<S>, message?: string): HttpError;\n  readonly code: string;\n  readonly status: number;\n}\n\n/** Class returned for schema-less errors: ctor(message?). */\nexport interface DefinedError {\n  new (message?: string): HttpError;\n  readonly code: string;\n  readonly status: number;\n}\n\n/**\n * Define a project error class. MUST be called with literal args (string\n * literal `code`, numeric literal `status`) at module top level — the deploy\n * stager's static analyzer reads those literals to resolve throw sites.\n *\n * @example\n * // models/todos/errors.ts\n * export const TodoLocked = defineError(\"todo_locked\", 409, z.object({ retryAfter: z.number() }));\n * // services/todo.service.ts\n * throw new TodoLocked({ retryAfter: 30 });\n */\nexport function defineError<S extends ZodTypeAny>(\n  code: string,\n  status: number,\n  dataSchema: S,\n): DefinedErrorWithData<S>;\nexport function defineError(code: string, status: number): DefinedError;\nexport function defineError(code: string, status: number, dataSchema?: ZodTypeAny): unknown {\n  if (!Number.isInteger(status) || status < 400 || status > 599) {\n    throw new Error(\n      `defineError: status for \"${code}\" must be a 4xx/5xx integer, got ${status} — ` +\n        `error responses must not clobber success responses in the project spec.`,\n    );\n  }\n  const registry = getErrorRegistry();\n  const existing = registry.get(code);\n  const className = defaultClassName(code);\n  const dataDigest = dataSchema ? digestOf(code, dataSchema) : undefined;\n  if (existing) {\n    const sameShape =\n      existing.status === status && !existing.builtin && existing.dataDigest === dataDigest;\n    if (!sameShape) {\n      throw new Error(\n        `defineError: duplicate error code \"${code}\" with a different shape ` +\n          `(existing: status ${existing.status}${existing.builtin ? \", built-in\" : \"\"}` +\n          `${existing.status === status && !existing.builtin ? \", different data schema\" : \"\"}). ` +\n          `Error codes are project-unique.`,\n      );\n    }\n  }\n  // Local factories so the class-constructor closures capture a NON-optional\n  // schema binding (narrowing does not flow into closures created in a branch).\n  const makeWithData = (schema: ZodTypeAny) =>\n    class extends HttpError {\n      static readonly code = code;\n      static readonly status = status;\n      constructor(data: unknown, message?: string) {\n        super(status, code, message ?? humanize(code), schema.parse(data));\n        this.name = className;\n      }\n    };\n  const makeWithoutData = () =>\n    class extends HttpError {\n      static readonly code = code;\n      static readonly status = status;\n      constructor(message?: string) {\n        super(status, code, message ?? humanize(code));\n        this.name = className;\n      }\n    };\n  const cls = dataSchema ? makeWithData(dataSchema) : makeWithoutData();\n  Object.defineProperty(cls, \"name\", { value: className });\n  registry.set(code, {\n    code,\n    status,\n    className,\n    builtin: false,\n    ...(dataSchema ? { dataSchema } : {}),\n    ...(dataDigest !== undefined ? { dataDigest } : {}),\n  });\n  return cls;\n}\n\n/** Convert a data schema through the SAME library the spec twins use and\n * return its JSON-schema digest (the duplicate-shape comparison key). Doubles\n * as the self-containment guard: a schema carrying `.openapi(refId)` metadata\n * (top-level or nested) converts to `$ref` pointers into components the\n * project spec never emits — a dangling ref every spec consumer would choke\n * on — so it is rejected here, at the definition site, with a fixable message. */\nfunction digestOf(code: string, dataSchema: ZodTypeAny): string {\n  const TMP_REF = \"__PalbaseErrorDataDigest\";\n  const tmpRegistry = new OpenAPIRegistry();\n  // Wrap the schema as a property — exactly how the envelope embeds it — so a\n  // TOP-LEVEL .openapi(refId) is not masked by the registration refId and\n  // surfaces as the same $ref the real emission would produce.\n  tmpRegistry.register(TMP_REF, z.object({ data: dataSchema }).openapi(TMP_REF));\n  const generated = new OpenApiGeneratorV31(tmpRegistry.definitions).generateComponents();\n  const out = generated.components?.schemas?.[TMP_REF];\n  const digest = JSON.stringify(out ?? null);\n  if (digest.includes('\"$ref\"')) {\n    throw new Error(\n      `defineError: dataSchema for \"${code}\" carries .openapi(refId) metadata — ` +\n        `it would emit dangling $ref pointers in the project spec. ` +\n        `Use a plain zod schema (z.object({...})) without .openapi(...).`,\n    );\n  }\n  return digest;\n}\n\n/** \"todo_locked\" → \"TodoLocked\" (used as Error.name; the source class NAME the\n * analyzer sees is whatever the user assigned the const to — they should match\n * by convention, and the descriptor carries the analyzed const name anyway). */\nfunction defaultClassName(code: string): string {\n  return code\n    .split(\"_\")\n    .map((p) => p.charAt(0).toUpperCase() + p.slice(1))\n    .join(\"\");\n}\n\n/** \"todo_locked\" → \"Todo locked\" — the default human-readable message. */\nfunction humanize(code: string): string {\n  const s = code.replace(/_/g, \" \");\n  return s.charAt(0).toUpperCase() + s.slice(1);\n}\n"],"mappings":";;;;;;AAiBA,SACEA,iBACAC,qBACAC,4BACK;AACP,SAASC,SAA0B;AAGnCC,qBAAqBC,CAAAA;AAiBrB,IAAMC,iBAAgCC,uBAAOC,IAAI,+BAAA;AAcjD,IAAMC,uBAAmD;EACvDC,aAAaL,EAAEM,OAAO;IACpBC,QAAQP,EAAEQ,MAAMR,EAAEM,OAAO;MAAEG,OAAOT,EAAEU,OAAM;MAAIC,SAASX,EAAEU,OAAM;IAAG,CAAA,CAAA;EACpE,CAAA;EACAE,mBAAmBZ,EAAEM,OAAO;IAAEO,YAAYb,EAAEc,OAAM,EAAGC,IAAG;EAAG,CAAA;AAC7D;AAEO,SAASC,mBAAAA;AACd,QAAMC,IAAIC;AACV,MAAI,CAACD,EAAEhB,cAAAA,GAAiB;AACtB,UAAMkB,IAAI,oBAAIC,IAAAA;AACd,eAAW,CAACC,MAAMC,QAAQC,SAAAA,KAAc;MACtC;QAAC;QAAe;QAAK;;MACrB;QAAC;QAAgB;QAAK;;MACtB;QAAC;QAAa;QAAK;;MACnB;QAAC;QAAa;QAAK;;MACnB;QAAC;QAAY;QAAK;;;;;;MAKlB;QAAC;QAAoB;QAAK;;MAC1B;QAAC;QAAqB;QAAK;;OACjB;AACV,YAAMC,aAAapB,qBAAqBiB,IAAAA;AACxCF,QAAEM,IAAIJ,MAAM;QACVA;QACAC;QACAC;QACAG,SAAS;QACT,GAAIF,aAAa;UAAEA;UAAYG,YAAYC,SAASP,MAAMG,UAAAA;QAAY,IAAI,CAAC;MAC7E,CAAA;IACF;AACAP,MAAEhB,cAAAA,IAAkBkB;EACtB;AACA,SAAOF,EAAEhB,cAAAA;AACX;AA7BgBe;AA8DT,SAASa,YAAYR,MAAcC,QAAgBE,YAAuB;AAC/E,MAAI,CAACM,OAAOC,UAAUT,MAAAA,KAAWA,SAAS,OAAOA,SAAS,KAAK;AAC7D,UAAM,IAAIU,MACR,4BAA4BX,IAAAA,oCAAwCC,MAAAA,iFACO;EAE/E;AACA,QAAMW,WAAWjB,iBAAAA;AACjB,QAAMkB,WAAWD,SAASE,IAAId,IAAAA;AAC9B,QAAME,YAAYa,iBAAiBf,IAAAA;AACnC,QAAMM,aAAaH,aAAaI,SAASP,MAAMG,UAAAA,IAAca;AAC7D,MAAIH,UAAU;AACZ,UAAMI,YACJJ,SAASZ,WAAWA,UAAU,CAACY,SAASR,WAAWQ,SAASP,eAAeA;AAC7E,QAAI,CAACW,WAAW;AACd,YAAM,IAAIN,MACR,sCAAsCX,IAAAA,8CACfa,SAASZ,MAAM,GAAGY,SAASR,UAAU,eAAe,EAAA,GACtEQ,SAASZ,WAAWA,UAAU,CAACY,SAASR,UAAU,4BAA4B,EAAA,oCAChD;IAEvC;EACF;AAGA,QAAMa,eAAe,wBAACC,WACpB,cAAcC,UAAAA;IACZ,OAAgBpB,OAAOA;IACvB,OAAgBC,SAASA;IACzB,YAAYoB,MAAe/B,SAAkB;AAC3C,YAAMW,QAAQD,MAAMV,WAAWgC,SAAStB,IAAAA,GAAOmB,OAAOI,MAAMF,IAAAA,CAAAA;AAC5D,WAAKG,OAAOtB;IACd;EACF,GARmB;AASrB,QAAMuB,kBAAkB,6BACtB,cAAcL,UAAAA;IACZ,OAAgBpB,OAAOA;IACvB,OAAgBC,SAASA;IACzB,YAAYX,SAAkB;AAC5B,YAAMW,QAAQD,MAAMV,WAAWgC,SAAStB,IAAAA,CAAAA;AACxC,WAAKwB,OAAOtB;IACd;EACF,GARsB;AASxB,QAAMwB,MAAMvB,aAAae,aAAaf,UAAAA,IAAcsB,gBAAAA;AACpDE,SAAOC,eAAeF,KAAK,QAAQ;IAAEG,OAAO3B;EAAU,CAAA;AACtDU,WAASR,IAAIJ,MAAM;IACjBA;IACAC;IACAC;IACAG,SAAS;IACT,GAAIF,aAAa;MAAEA;IAAW,IAAI,CAAC;IACnC,GAAIG,eAAeU,SAAY;MAAEV;IAAW,IAAI,CAAC;EACnD,CAAA;AACA,SAAOoB;AACT;AAtDgBlB;AA8DhB,SAASD,SAASP,MAAcG,YAAsB;AACpD,QAAM2B,UAAU;AAChB,QAAMC,cAAc,IAAIC,gBAAAA;AAIxBD,cAAYE,SAASH,SAASnD,EAAEM,OAAO;IAAEoC,MAAMlB;EAAW,CAAA,EAAG+B,QAAQJ,OAAAA,CAAAA;AACrE,QAAMK,YAAY,IAAIC,oBAAoBL,YAAYM,WAAW,EAAEC,mBAAkB;AACrF,QAAMC,MAAMJ,UAAUK,YAAYC,UAAUX,OAAAA;AAC5C,QAAMY,SAASC,KAAKC,UAAUL,OAAO,IAAA;AACrC,MAAIG,OAAOG,SAAS,QAAA,GAAW;AAC7B,UAAM,IAAIlC,MACR,gCAAgCX,IAAAA,qKAEmC;EAEvE;AACA,SAAO0C;AACT;AAlBSnC;AAuBT,SAASQ,iBAAiBf,MAAY;AACpC,SAAOA,KACJ8C,MAAM,GAAA,EACNC,IAAI,CAACC,MAAMA,EAAEC,OAAO,CAAA,EAAGC,YAAW,IAAKF,EAAEG,MAAM,CAAA,CAAA,EAC/CC,KAAK,EAAA;AACV;AALSrC;AAQT,SAASO,SAAStB,MAAY;AAC5B,QAAMqD,IAAIrD,KAAKsD,QAAQ,MAAM,GAAA;AAC7B,SAAOD,EAAEJ,OAAO,CAAA,EAAGC,YAAW,IAAKG,EAAEF,MAAM,CAAA;AAC7C;AAHS7B;","names":["OpenAPIRegistry","OpenApiGeneratorV31","extendZodWithOpenApi","z","extendZodWithOpenApi","z","ERROR_REGISTRY","Symbol","for","BUILTIN_DATA_SCHEMAS","bad_request","object","fields","array","field","string","message","too_many_requests","retryAfter","number","int","getErrorRegistry","g","globalThis","m","Map","code","status","className","dataSchema","set","builtin","dataDigest","digestOf","defineError","Number","isInteger","Error","registry","existing","get","defaultClassName","undefined","sameShape","makeWithData","schema","HttpError","data","humanize","parse","name","makeWithoutData","cls","Object","defineProperty","value","TMP_REF","tmpRegistry","OpenAPIRegistry","register","openapi","generated","OpenApiGeneratorV31","definitions","generateComponents","out","components","schemas","digest","JSON","stringify","includes","split","map","p","charAt","toUpperCase","slice","join","s","replace"]}

package/dist/{chunk-5J5W75A6.js → chunk-5C5UCILO.js}

@@ -1,311 +1,12 @@
 import {
-  qualifiedTableKey,
-  withRetry
-} from "./chunk-SG4UTNOP.js";
+  CODECS
+} from "./chunk-KGP6ALIU.js";
 import {
-  TxPlanBuilder,
-  runTxPlan
-} from "./chunk-3TUJWHC2.js";
+  qualifiedTableKey
+} from "./chunk-IXAX5CON.js";
 import {
   __name
-} from "./chunk-VXPNPVAG.js";
-
-// src/runtime.ts
-import { AsyncLocalStorage } from "async_hooks";
-var __requestALS = new AsyncLocalStorage();
-var runtime = null;
-function __setRuntime(services) {
-  runtime = services;
-}
-__name(__setRuntime, "__setRuntime");
-function __runWithRuntime(services, fn) {
-  return __requestALS.run({
-    runtime: services
-  }, fn);
-}
-__name(__runWithRuntime, "__runWithRuntime");
-function __getRuntime() {
-  const scoped = __requestALS.getStore();
-  if (scoped) return scoped.runtime;
-  if (runtime === null) {
-    throw new Error("Palbase services accessed outside a request scope. The Database/Documents/\u2026 singletons are only available inside an endpoint handler (or after the runtime has called __runWithRuntime / __setRuntime).");
-  }
-  return runtime;
-}
-__name(__getRuntime, "__getRuntime");
-var LIFECYCLE = /* @__PURE__ */ Symbol.for("palbase.backend.lifecycleHooks");
-function declaredLifecycle() {
-  const g = globalThis;
-  return g[LIFECYCLE] ??= {
-    start: [],
-    shutdown: []
-  };
-}
-__name(declaredLifecycle, "declaredLifecycle");
-function onStart(name, hook) {
-  declaredLifecycle().start.push({
-    name,
-    run: hook
-  });
-}
-__name(onStart, "onStart");
-function onShutdown(name, hook) {
-  declaredLifecycle().shutdown.push({
-    name,
-    run: hook
-  });
-}
-__name(onShutdown, "onShutdown");
-function reason(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-__name(reason, "reason");
-async function drain(hooks) {
-  for (const h of [
-    ...hooks
-  ].reverse()) {
-    try {
-      await h.run();
-    } catch (err) {
-      console.error(`[palbase] shutdown hook "${h.name}" failed: ${reason(err)}`, err);
-    }
-  }
-}
-__name(drain, "drain");
-async function __runStartHooks() {
-  const slot3 = declaredLifecycle();
-  const start = slot3.start.splice(0);
-  const shutdown = slot3.shutdown.splice(0);
-  for (const h of start) {
-    try {
-      await h.run();
-    } catch (err) {
-      await drain(shutdown);
-      throw new Error(`[palbase] start hook "${h.name}" failed: ${reason(err)}`, {
-        cause: err
-      });
-    }
-  }
-  let drained = false;
-  return async () => {
-    if (drained) return;
-    drained = true;
-    await drain(shutdown);
-  };
-}
-__name(__runStartHooks, "__runStartHooks");
-function __resetLifecycleHooks() {
-  const g = globalThis;
-  delete g[LIFECYCLE];
-}
-__name(__resetLifecycleHooks, "__resetLifecycleHooks");
-function makeServiceProxy(key) {
-  const handler = {
-    get(_target, prop, receiver) {
-      const client = __getRuntime()[key];
-      const value = Reflect.get(client, prop, receiver);
-      return typeof value === "function" ? value.bind(client) : value;
-    }
-  };
-  return new Proxy({}, handler);
-}
-__name(makeServiceProxy, "makeServiceProxy");
-function makeTableProxy(ops, prefix) {
-  return new Proxy({}, {
-    get(_t, prop) {
-      if (typeof prop !== "string") return void 0;
-      const name = `${prefix}${prop}`;
-      return {
-        insert: /* @__PURE__ */ __name((data) => ops().insert(name, data), "insert"),
-        // DÖRDÜNCÜ FİİL, aynı gerekçeyle: tip söz veriyor, ops katmanı
-        // uyguluyor, ve bir handler'ın gerçekten dokunduğu yer BURASI.
-        // `runtime-table-verbs` kapısı bunu adıyla saydı.
-        aggregate: /* @__PURE__ */ __name((q) => ops().aggregate(name, q), "aggregate"),
-        insertMany: /* @__PURE__ */ __name((rows, opts) => ops().insertMany(name, rows, opts), "insertMany"),
-        update: /* @__PURE__ */ __name((q) => ops().update(name, q.where.id, q.set), "update"),
-        delete: /* @__PURE__ */ __name((id) => ops().delete(name, id), "delete"),
-        findById: /* @__PURE__ */ __name((id) => ops().findById(name, id), "findById"),
-        findMany: /* @__PURE__ */ __name((q) => {
-          const { where, ...opts } = q ?? {};
-          return ops().findMany(name, where, opts);
-        }, "findMany"),
-        put: /* @__PURE__ */ __name((q) => ops().put(name, q.data, {
-          onConflict: q.onConflict
-        }), "put"),
-        // THREE VERBS THE TYPE PROMISED AND THIS PROXY DID NOT EMIT.
-        //
-        // `EnvTypedTableBase` declares `updateMany`, `deleteMany` and `count`
-        // (typed-db.ts) and the ops layer implements all three — only this
-        // proxy, which is what a handler actually touches, left them out. So
-        // the type said the verb exists, autocomplete offered it, and the call
-        // answered `undefined is not a function`.
-        //
-        // Older than this run, but the run rewrote this proxy for
-        // `Database.schema(name).tables.*` and would have carried the gap onto
-        // the new surface too.
-        updateMany: /* @__PURE__ */ __name((q) => ops().updateMany(name, q.where, q.set), "updateMany"),
-        deleteMany: /* @__PURE__ */ __name((q) => ops().deleteMany(name, q.where), "deleteMany"),
-        count: /* @__PURE__ */ __name((q) => ops().count(name, q?.where), "count"),
-        search: /* @__PURE__ */ __name((params) => ops().search(name, params), "search"),
-        similar: /* @__PURE__ */ __name((id, params) => ops().similar(name, id, params), "similar"),
-        recommend: /* @__PURE__ */ __name((params) => ops().recommend(name, params), "recommend"),
-        facets: /* @__PURE__ */ __name((params) => ops().facets(name, params), "facets"),
-        supersede: /* @__PURE__ */ __name((id, row) => ops().supersede(name, id, row), "supersede"),
-        claim: /* @__PURE__ */ __name((unique, extra) => ops().claim(name, unique, extra), "claim")
-      };
-    }
-  });
-}
-__name(makeTableProxy, "makeTableProxy");
-var rawDatabase = makeServiceProxy("Database");
-function makeTypedSurface(raw) {
-  const reco = raw;
-  const ops = {
-    $query: /* @__PURE__ */ __name((sql, params) => raw.query(sql, params), "$query"),
-    $insert: /* @__PURE__ */ __name((table, data) => raw.insert(table, data), "$insert"),
-    $update: /* @__PURE__ */ __name((table, id, data) => raw.update(table, id, data), "$update"),
-    $delete: /* @__PURE__ */ __name((table, id) => raw.delete(table, id), "$delete"),
-    $findById: /* @__PURE__ */ __name((table, id) => raw.findById(table, id), "$findById"),
-    $findMany: /* @__PURE__ */ __name((table, query, opts) => raw.findMany(table, query, opts), "$findMany"),
-    $put: /* @__PURE__ */ __name((table, data, opts) => raw.put(table, data, opts), "$put"),
-    $updateMany: /* @__PURE__ */ __name((table, where, set) => raw.updateMany(table, where, set), "$updateMany"),
-    $deleteMany: /* @__PURE__ */ __name((table, where) => raw.deleteMany(table, where), "$deleteMany"),
-    $count: /* @__PURE__ */ __name((table, where) => raw.count(table, where), "$count"),
-    $search: /* @__PURE__ */ __name((table, params) => raw.search(table, params), "$search"),
-    $similar: /* @__PURE__ */ __name((table, id, params) => reco.similar(table, id, params), "$similar"),
-    $recommend: /* @__PURE__ */ __name((table, params) => reco.recommend(table, params), "$recommend"),
-    $facets: /* @__PURE__ */ __name((table, params) => reco.facets(table, params), "$facets"),
-    $claim: /* @__PURE__ */ __name((table, unique, extra) => reco.claim(table, unique, extra), "$claim"),
-    $lockRows: /* @__PURE__ */ __name((table, ids) => reco.lockRows(table, ids), "$lockRows"),
-    $advisoryXactLock: /* @__PURE__ */ __name((key) => reco.advisoryXactLock(key), "$advisoryXactLock"),
-    $aggregate: /* @__PURE__ */ __name((table, q) => raw.aggregate(table, q), "$aggregate"),
-    $insertMany: /* @__PURE__ */ __name((table, rows, opts) => raw.insertMany(table, rows, opts), "$insertMany"),
-    $supersede: /* @__PURE__ */ __name((table, id, row) => raw.supersede(table, id, row), "$supersede")
-  };
-  const base = Object.assign(ops, {
-    // Both surfaces get it: a savepoint on the service transaction is as useful
-    // as one on the request's, and each is bound to its own connection.
-    $attempt: /* @__PURE__ */ __name((fn) => raw.attempt(fn), "$attempt"),
-    $transaction(fn, opts) {
-      return withRetry(() => {
-        const builder = new TxPlanBuilder();
-        return runTxPlan(raw, makeTxPlanHandle(builder), builder, fn);
-      }, opts ?? {});
-    }
-  });
-  return new Proxy(base, {
-    get(target, prop, receiver) {
-      if (prop === "tables") return makeTableProxy(() => reco, "");
-      if (typeof prop === "string" && !prop.startsWith("$") && !(prop in target)) {
-        return makeTableProxy(() => reco, qualifiedTableKey(prop, ""));
-      }
-      return Reflect.get(target, prop, receiver);
-    }
-  });
-}
-__name(makeTypedSurface, "makeTypedSurface");
-function makeTxTablesAccessor(builder, prefix = "") {
-  const tablesProxy = new Proxy({}, {
-    get(_t, prop) {
-      if (typeof prop !== "string") return void 0;
-      return builder.table(prefix + prop);
-    }
-  });
-  return tablesProxy;
-}
-__name(makeTxTablesAccessor, "makeTxTablesAccessor");
-function makeTxPlanHandle(builder) {
-  const publicTables = makeTxTablesAccessor(builder);
-  return new Proxy({}, {
-    get(_t, prop) {
-      if (typeof prop !== "string") return void 0;
-      if (prop === "tables") return publicTables;
-      return makeTxTablesAccessor(builder, qualifiedTableKey(prop, ""));
-    }
-  });
-}
-__name(makeTxPlanHandle, "makeTxPlanHandle");
-var Database = Object.assign(makeTypedSurface(rawDatabase), {
-  /**
-  * Lazily resolve the runtime's service-role sibling on each call. We do NOT
-  * cache it: `rawDatabase.asService()` reads the CURRENT request scope through
-  * the runtime proxy, and the per-request runtime injects a service client
-  * bound to that request's identity headers — caching would leak one request's
-  * sibling into another concurrent request.
-  */
-  $asService() {
-    return makeTypedSurface(rawDatabase.asService());
-  }
-});
-var Documents = makeServiceProxy("Documents");
-function makeBucketsAccessor(storage) {
-  return new Proxy({}, {
-    get(_t, prop) {
-      if (typeof prop !== "string") return void 0;
-      return storage().bucket(prop);
-    }
-  });
-}
-__name(makeBucketsAccessor, "makeBucketsAccessor");
-var rawStorage = makeServiceProxy("Storage");
-var Storage = Object.assign({
-  // FORWARDED explicitly, not assigned onto the service proxy.
-  //
-  // `Object.assign(rawStorage, {buckets})` writes onto the proxy's TARGET, and
-  // the proxy's only trap is `get`, which forwards every read to the module
-  // client — so the property landed somewhere nothing reads and
-  // `Storage.buckets.docs` was `undefined` in a deployed handler. It
-  // typechecked, every test passed, and the live call answered
-  // "TypeError: undefined is not an object". `Database` never had the bug
-  // because it builds a plain surface the same way this now does.
-  bucket: /* @__PURE__ */ __name((name) => rawStorage.bucket(name), "bucket")
-}, {
-  buckets: makeBucketsAccessor(() => rawStorage)
-});
-var Cache = makeServiceProxy("Cache");
-var Secrets = makeServiceProxy("Secrets");
-var Auth = makeServiceProxy("Auth");
-var Log = makeServiceProxy("Log");
-var Notifications = makeServiceProxy("Notifications");
-var rawFlags = makeServiceProxy("Flags");
-var Flags = Object.assign({
-  isEnabled(flagName, context) {
-    return rawFlags.isEnabled(flagName, context);
-  },
-  getVariant(flagName, context) {
-    return rawFlags.getVariant(flagName, context);
-  },
-  getAll(context) {
-    return rawFlags.getAll(context);
-  },
-  /**
-   * Resolve a flag's value, with an optional fallback.
-   *
-   * FORWARDED as of 2026-08-15. This surface is written out by hand, method
-   * by method, and `get` was missing from it — so the client implemented it,
-   * thirty assertions covered it, and `Flags.get("x")` was `undefined` in a
-   * deployed handler. Exactly the shape of the `Storage.buckets` defect found
-   * the same day: a hand-maintained forwarding list is a list somebody has to
-   * remember to update.
-   */
-  get(flagName, defaultOrContext, maybeContext) {
-    return rawFlags.get(flagName, defaultOrContext, maybeContext);
-  },
-  setOverride(key, value) {
-    return rawFlags.setOverride(key, value);
-  }
-}, {
-  /**
-   * Lazily resolve the runtime's cross-user sibling on each call. We do NOT
-   * cache it: `rawFlags.asService()` reads the CURRENT request scope through
-   * the runtime proxy, so caching would leak one request's sibling into
-   * another concurrent request. Mirrors `Database.asService()`.
-   */
-  asService() {
-    return rawFlags.asService();
-  }
-});
-var Realtime = makeServiceProxy("Realtime");
+} from "./chunk-KATPXCJ5.js";
 
 // src/refusals.ts
 var DECLARATION_REFUSAL = /* @__PURE__ */ Symbol.for("palbase.backend.declarationRefusal");
@@ -327,6 +28,9 @@ __name(isDeclarationRefused, "isDeclarationRefused");
 
 // src/db/env-gen.ts
 function baseTsType(def) {
+  if (def.codec !== void 0 && def.codec in CODECS) {
+    return CODECS[def.codec].tsType;
+  }
   switch (def.type) {
     case "uuid":
     case "text":
@@ -356,8 +60,10 @@ function baseTsType(def) {
       if (values.length === 0) return "string";
       return values.map((v) => JSON.stringify(v)).join(" | ");
     }
-    default:
-      return "unknown";
+    default: {
+      const unhandled = def.type;
+      throw new Error(`env-gen: "${String(unhandled)}" kolon tipinin TypeScript kar\u015F\u0131l\u0131\u011F\u0131 bildirilmemi\u015F. baseTsType'a bir case ekleyin \u2014 sessizce \`unknown\` d\xF6nmek o kolonu her kural\u0131n d\u0131\u015F\u0131na \xE7\u0131kar\u0131r.`);
+    }
   }
 }
 __name(baseTsType, "baseTsType");
@@ -502,7 +208,21 @@ function tableBlock(table, relations, indent) {
   ].join("\n");
 }
 __name(tableBlock, "tableBlock");
+function refuseFreeFormTransforms(schemas) {
+  for (const schema of schemas) {
+    for (const table of Object.values(schema.tables)) {
+      for (const [col, builder] of Object.entries(table.columns)) {
+        const def = builder._def;
+        if (def.transform === void 0 || def.codec !== void 0) continue;
+        const where = qualifiedTableKey(schema.name, table.name);
+        throw new DeclarationRefused(`table "${where}" column "${col}" declares .transform<T>(): its target type does not exist at runtime, so the generated types would say something the engine contradicts. Declare a named codec instead \u2014 .asNumber() for a JS number, .asDecimal() for the exact string.`);
+      }
+    }
+  }
+}
+__name(refuseFreeFormTransforms, "refuseFreeFormTransforms");
 function makeEnvDts(schemas) {
+  refuseFreeFormTransforms(schemas);
   const relations = buildRelations(schemas);
   const publicSchema = schemas.find((s) => s.name === "public");
   const others = schemas.filter((s) => s.name !== "public");
@@ -959,24 +679,6 @@ function assertNoOrphanEntryPoints(registered, owned2) {
 __name(assertNoOrphanEntryPoints, "assertNoOrphanEntryPoints");
 
 export {
-  __requestALS,
-  __setRuntime,
-  __runWithRuntime,
-  __getRuntime,
-  onStart,
-  onShutdown,
-  __runStartHooks,
-  __resetLifecycleHooks,
-  Database,
-  Documents,
-  Storage,
-  Cache,
-  Secrets,
-  Auth,
-  Log,
-  Notifications,
-  Flags,
-  Realtime,
   DECLARATION_REFUSAL,
   DeclarationRefused,
   isDeclarationRefused,
@@ -995,4 +697,4 @@ export {
   buildContainer,
   assertNoOrphanEntryPoints
 };
-//# sourceMappingURL=chunk-5J5W75A6.js.map
+//# sourceMappingURL=chunk-5C5UCILO.js.map