@palbase/backend 30.0.1 → 33.0.0

package/dist/db/index.d.cts

@@ -1,4 +1,4 @@
-export { f as AnyColumn, l as ColumnBuilder, m as ColumnDef, n as ColumnMap, o as ColumnType, E as EXTENSION_DEPENDENCIES, t as EmbeddingModelRef, v as EnvServiceDatabase, x as EnvTypedDatabase, O as InsertShape, W as Materialized, a1 as OnDeleteAction, a2 as PALBASE_EXTENSIONS, aC as PalbaseExtension, bz as PolicyBuilder, bA as PolicyCommand, bB as PolicyDef, bE as PolicyMode, bG as RawConstraintDef, bI as Ref, bK as RowShape, S as SchemaDef, bT as TABLE_META, bU as TableDef, bV as TableHandle, bW as TableInput, bY as TxColumnExpr, bZ as TxInsertShape, b$ as TxNow, c0 as TxPlan, T as TxPlanBody, c1 as TxPlanError, c2 as TxPlanHandle, c3 as TxPlanOpResult, c4 as TxPlanRejection, b as TxPlanResponse, c5 as TxRefError, c6 as TxRow, c7 as TxRows, c8 as TxSelectOptions, c9 as TxSetShape, cb as TxTable, cc as TxTables, cd as TxWhere, cj as TypedDB, ck as TypedTable, cl as TypedTx, cu as bigint, cv as boolean, cx as dec, cA as defineSchema, cB as defineTable, cC as enumType, cE as inc, cH as installationRef, cI as integer, cJ as isPalbaseExtension, cL as jsonb, cM as makeTypedDB, cN as now, cR as openai, cS as ownedByUser, cT as policy, cU as raw, cW as text, cX as timestamp, cY as userRef, cZ as uuid, c_ as vector } from '../index-DtCgaZAg.cjs';
+export { h as AnyColumn, n as ColumnBuilder, o as ColumnDef, p as ColumnMap, q as ColumnType, v as EXTENSION_DEPENDENCIES, w as EmbeddingModelRef, E as EnvServiceDatabase, z as EnvTypedDatabase, V as InsertShape, $ as Materialized, a6 as OnDeleteAction, a8 as PALBASE_EXTENSIONS, aI as PalbaseExtension, bF as PolicyBuilder, bG as PolicyCommand, bH as PolicyDef, bK as PolicyMode, bN as RawConstraintDef, bP as Ref, bR as RowShape, S as SchemaDef, b_ as TABLE_META, b$ as TableDef, c0 as TableHandle, c1 as TableInput, c3 as TxColumnExpr, c4 as TxInsertShape, c6 as TxNow, c7 as TxPlan, T as TxPlanBody, c8 as TxPlanError, c9 as TxPlanHandle, ca as TxPlanOpResult, cb as TxPlanRejection, c as TxPlanResponse, cc as TxRefError, cd as TxRow, ce as TxRows, cf as TxSelectOptions, cg as TxSetShape, ci as TxTable, cj as TxTables, ck as TxWhere, cq as TypedDB, cr as TypedTable, cs as TypedTx, cD as bigint, cE as boolean, cG as dec, cJ as defineSchema, cK as defineTable, cL as enumType, cN as inc, cQ as installationRef, cR as integer, cS as isPalbaseExtension, cU as jsonb, cV as makeTypedDB, cW as now, c_ as openai, c$ as ownedByUser, d0 as policy, d1 as raw, d3 as text, d4 as timestamp, d5 as userRef, d6 as uuid, d7 as vector } from '../index-BWgnGj68.cjs';
 import './env.cjs';
 import '../stack.cjs';
 import 'zod';

package/dist/db/index.d.ts

@@ -1,4 +1,4 @@
-export { f as AnyColumn, l as ColumnBuilder, m as ColumnDef, n as ColumnMap, o as ColumnType, E as EXTENSION_DEPENDENCIES, t as EmbeddingModelRef, v as EnvServiceDatabase, x as EnvTypedDatabase, O as InsertShape, W as Materialized, a1 as OnDeleteAction, a2 as PALBASE_EXTENSIONS, aC as PalbaseExtension, bz as PolicyBuilder, bA as PolicyCommand, bB as PolicyDef, bE as PolicyMode, bG as RawConstraintDef, bI as Ref, bK as RowShape, S as SchemaDef, bT as TABLE_META, bU as TableDef, bV as TableHandle, bW as TableInput, bY as TxColumnExpr, bZ as TxInsertShape, b$ as TxNow, c0 as TxPlan, T as TxPlanBody, c1 as TxPlanError, c2 as TxPlanHandle, c3 as TxPlanOpResult, c4 as TxPlanRejection, b as TxPlanResponse, c5 as TxRefError, c6 as TxRow, c7 as TxRows, c8 as TxSelectOptions, c9 as TxSetShape, cb as TxTable, cc as TxTables, cd as TxWhere, cj as TypedDB, ck as TypedTable, cl as TypedTx, cu as bigint, cv as boolean, cx as dec, cA as defineSchema, cB as defineTable, cC as enumType, cE as inc, cH as installationRef, cI as integer, cJ as isPalbaseExtension, cL as jsonb, cM as makeTypedDB, cN as now, cR as openai, cS as ownedByUser, cT as policy, cU as raw, cW as text, cX as timestamp, cY as userRef, cZ as uuid, c_ as vector } from '../index-8qy3kIuA.js';
+export { h as AnyColumn, n as ColumnBuilder, o as ColumnDef, p as ColumnMap, q as ColumnType, v as EXTENSION_DEPENDENCIES, w as EmbeddingModelRef, E as EnvServiceDatabase, z as EnvTypedDatabase, V as InsertShape, $ as Materialized, a6 as OnDeleteAction, a8 as PALBASE_EXTENSIONS, aI as PalbaseExtension, bF as PolicyBuilder, bG as PolicyCommand, bH as PolicyDef, bK as PolicyMode, bN as RawConstraintDef, bP as Ref, bR as RowShape, S as SchemaDef, b_ as TABLE_META, b$ as TableDef, c0 as TableHandle, c1 as TableInput, c3 as TxColumnExpr, c4 as TxInsertShape, c6 as TxNow, c7 as TxPlan, T as TxPlanBody, c8 as TxPlanError, c9 as TxPlanHandle, ca as TxPlanOpResult, cb as TxPlanRejection, c as TxPlanResponse, cc as TxRefError, cd as TxRow, ce as TxRows, cf as TxSelectOptions, cg as TxSetShape, ci as TxTable, cj as TxTables, ck as TxWhere, cq as TypedDB, cr as TypedTable, cs as TypedTx, cD as bigint, cE as boolean, cG as dec, cJ as defineSchema, cK as defineTable, cL as enumType, cN as inc, cQ as installationRef, cR as integer, cS as isPalbaseExtension, cU as jsonb, cV as makeTypedDB, cW as now, c_ as openai, c$ as ownedByUser, d0 as policy, d1 as raw, d3 as text, d4 as timestamp, d5 as userRef, d6 as uuid, d7 as vector } from '../index-Dg10RnZO.js';
 import './env.js';
 import '../stack.js';
 import 'zod';

package/dist/db/index.js

@@ -3,37 +3,36 @@ import {
   PALBASE_EXTENSIONS,
   PolicyBuilder,
   TABLE_META,
-  bigint,
-  boolean,
   defineSchema,
   defineTable,
+  isPalbaseExtension,
+  openai,
+  policy,
+  raw
+} from "../chunk-GOPZPM2A.js";
+import {
+  bigint,
+  boolean,
   enumType,
   installationRef,
   integer,
-  isPalbaseExtension,
   jsonb,
-  openai,
   ownedByUser,
-  policy,
-  raw,
   text,
   timestamp,
   userRef,
   uuid,
   vector
-} from "../chunk-ENZ2RFFJ.js";
-import {
-  makeTypedDB
-} from "../chunk-SG4UTNOP.js";
+} from "../chunk-XOX6RFPZ.js";
 import {
   TxPlanError,
   TxRefError,
   dec,
   inc,
+  makeTypedDB,
   now
-} from "../chunk-3TUJWHC2.js";
-import "../chunk-CGNN2PUH.js";
-import "../chunk-VXPNPVAG.js";
+} from "../chunk-C4ZA5AT2.js";
+import "../chunk-KATPXCJ5.js";
 export {
   EXTENSION_DEPENDENCIES,
   PALBASE_EXTENSIONS,

package/dist/engine/index.cjs

@@ -863,7 +863,11 @@ function qualifiedTableKey(schemaName, tableName) {
 __name(qualifiedTableKey, "qualifiedTableKey");
 
 // src/runtime.ts
-var __requestALS = new import_node_async_hooks.AsyncLocalStorage();
+var REQUEST_ALS = /* @__PURE__ */ Symbol.for("palbase.backend.requestALS");
+var __requestALS = (() => {
+  const g = globalThis;
+  return g[REQUEST_ALS] ??= new import_node_async_hooks.AsyncLocalStorage();
+})();
 var runtime = null;
 function __runWithRuntime(services, fn) {
   return __requestALS.run({
@@ -871,9 +875,29 @@ function __runWithRuntime(services, fn) {
   }, fn);
 }
 __name(__runWithRuntime, "__runWithRuntime");
+var REQUIRED_SERVICES = [
+  "Database",
+  "Auth",
+  "Secrets",
+  "Documents",
+  "Storage",
+  "Cache",
+  "Log",
+  "Notifications",
+  "Flags",
+  "Realtime"
+];
+function refuseIncompleteBox(services) {
+  const missing = REQUIRED_SERVICES.filter((k) => services[k] === void 0);
+  if (missing.length > 0) {
+    throw new Error(`the request scope is missing ${missing.join(", ")} \u2014 this box was most likely written by a DIFFERENT @palbase/backend major sharing the same process (the request store is a process-wide well-known Symbol, deliberately, so two bundles of ONE version can share it). Align the versions, or pass every service when building the scope yourself.`);
+  }
+  return services;
+}
+__name(refuseIncompleteBox, "refuseIncompleteBox");
 function __getRuntime() {
   const scoped = __requestALS.getStore();
-  if (scoped) return scoped.runtime;
+  if (scoped) return refuseIncompleteBox(scoped.runtime);
   if (runtime === null) {
     throw new Error("Palbase services accessed outside a request scope. The Database/Documents/\u2026 singletons are only available inside an endpoint handler (or after the runtime has called __runWithRuntime / __setRuntime).");
   }
@@ -996,7 +1020,12 @@ function makeTypedSurface(raw) {
     $findById: /* @__PURE__ */ __name((table, id) => raw.findById(table, id), "$findById"),
     $findMany: /* @__PURE__ */ __name((table, query, opts) => raw.findMany(table, query, opts), "$findMany"),
     $put: /* @__PURE__ */ __name((table, data, opts) => raw.put(table, data, opts), "$put"),
-    $updateMany: /* @__PURE__ */ __name((table, where, set) => raw.updateMany(table, where, set), "$updateMany"),
+    // `opts` İLETİLİR. Düşürüldüğü sürece `Database.$updateMany(t, w, s,
+    // { returning: false })` sessizce SATIRLARI döndürüyordu, sayıyı değil —
+    // ve `if (n === 0) throw new Conflict(...)` guard'ı HİÇ çalışmıyordu,
+    // çünkü `[] === 0` yanlıştır. Komşu forwarder'lar (`$findMany`, `$put`)
+    // kendi opsiyonlarını zaten iletiyordu; bu biri unutulmuştu.
+    $updateMany: /* @__PURE__ */ __name((table, where, set, opts) => raw.updateMany(table, where, set, opts), "$updateMany"),
     $deleteMany: /* @__PURE__ */ __name((table, where) => raw.deleteMany(table, where), "$deleteMany"),
     $count: /* @__PURE__ */ __name((table, where) => raw.count(table, where), "$count"),
     $search: /* @__PURE__ */ __name((table, params) => raw.search(table, params), "$search"),
@@ -1127,10 +1156,23 @@ var Flags = Object.assign({
    * Lazily resolve the runtime's cross-user sibling on each call. We do NOT
    * cache it: `rawFlags.asService()` reads the CURRENT request scope through
    * the runtime proxy, so caching would leak one request's sibling into
-   * another concurrent request. Mirrors `Database.asService()`.
+   * another concurrent request. Mirrors `Database.$asService()`.
    */
-  asService() {
+  $asService() {
     return rawFlags.asService();
+  },
+  /**
+   * The name this member carried before 32.0.0.
+   *
+   * It does NOT work silently. A retired member that quietly keeps returning
+   * is how a rename becomes a mystery: the old call site goes on compiling,
+   * the new name never spreads, and the two live side by side until somebody
+   * greps for one and misses half the codebase. `Database` made this split
+   * first (`$asService`), and this JSDoc promised "exactly like
+   * Database.$asService()" while the promise went unkept.
+   */
+  asService() {
+    throw new Error("Flags.asService() was renamed to Flags.$asService() in 32.0.0 \u2014 system members carry the `$` prefix, like Database.$asService().");
   }
 });
 var Realtime = makeServiceProxy("Realtime");
@@ -1503,6 +1545,37 @@ function makeMemoryCache(opts = {}) {
 }
 __name(makeMemoryCache, "makeMemoryCache");
 
+// src/db/columns.ts
+var CODECS = {
+  // Exact-precision column → JS number. Safe below 2^53; a value above it is
+  // not representable and the author wants `asDecimal()` instead.
+  number: {
+    fromDb: /* @__PURE__ */ __name((v) => Number(v), "fromDb"),
+    // YAZMA YOLUNDA SESSİZ BOZULMA YOK. `toDb(9007199254740993)` bir zamanlar
+    // "9007199254740992" yazıyordu: uygulamanın tuttuğundan BAŞKA bir sayı
+    // kolona gidiyordu ve hiçbir şey söylemiyordu. `asNumber()`'ın JSDoc'u
+    // "2^53'ün altında güvenli" diyordu ama bunu uygulayan bir şey yoktu.
+    toDb: /* @__PURE__ */ __name((v) => {
+      if (typeof v === "number" && !Number.isSafeInteger(v)) {
+        throw new Error(`asNumber() cannot write ${v}: it is outside the safe integer range and would be stored as a different number. Declare .asDecimal() and hand this column a string.`);
+      }
+      return String(v);
+    }, "toDb"),
+    tsType: "number"
+  },
+  // Exact-precision column → the string Postgres sent. It exists so the
+  // DECLARATION is explicit: "this column is a decimal I handle as text",
+  // rather than the ABSENCE of a declaration meaning the same thing by default.
+  // NULL güvencesi ÇİFTİN KENDİSİNDE. Motor NULL'ı zaten atlıyor (üç ayrı
+  // yerde), ama bir değişmez, onu koruyan üç `if`'in DIŞINDA yazılmalı: biri
+  // düşerse `String(null)` kolonu "null" dizesine çevirirdi.
+  decimal: {
+    fromDb: /* @__PURE__ */ __name((v) => v === null || v === void 0 ? v : String(v), "fromDb"),
+    toDb: /* @__PURE__ */ __name((v) => v === null || v === void 0 ? v : String(v), "toDb"),
+    tsType: "string"
+  }
+};
+
 // src/db/env-gen.ts
 function forwardName(column) {
   return column.endsWith("_id") ? column.slice(0, -3) : column;
@@ -1716,6 +1789,15 @@ function transformsOf(schema, table) {
   if (def) {
     for (const [col, c] of Object.entries(def.columns ?? {})) {
       const d = c !== null && typeof c === "object" && "_def" in c ? c._def : c;
+      const codec = d?.codec;
+      if (typeof codec === "string" && codec in CODECS) {
+        const c2 = CODECS[codec];
+        out.set(col, {
+          fromDb: c2.fromDb,
+          toDb: c2.toDb
+        });
+        continue;
+      }
       const t = d?.transform;
       if (t !== null && typeof t === "object") {
         out.set(col, t);
@@ -2051,6 +2133,29 @@ function selectClause(table, known, select) {
   }).join(", ");
 }
 __name(selectClause, "selectClause");
+function quoteLiteral(v) {
+  return `'${v.replace(/'/g, "''")}'`;
+}
+__name(quoteLiteral, "quoteLiteral");
+function orderClauseFor(table, known, orderBy, alias) {
+  if (orderBy === void 0 || orderBy === null) return "";
+  const items = Array.isArray(orderBy) ? orderBy : [
+    orderBy
+  ];
+  if (items.length === 0) return "";
+  const rendered = items.map((o) => {
+    const col = o.column;
+    const shapeOK = /^[A-Za-z_][A-Za-z0-9_]*$/.test(col);
+    if (known !== null ? !known.has(col) : !shapeOK) {
+      throw new Error(`with(${table}): orderBy kolonu "${col}" tabloda yok`);
+    }
+    const dir = o.direction === "desc" ? "DESC" : "ASC";
+    const nulls = o.nulls === "first" ? " NULLS FIRST" : o.nulls === "last" ? " NULLS LAST" : "";
+    return `${alias}.${quoteIdent(col)} ${dir}${nulls}`;
+  });
+  return ` ORDER BY ${rendered.join(", ")}`;
+}
+__name(orderClauseFor, "orderClauseFor");
 function orderClause(table, known, orderBy) {
   if (!orderBy) return "";
   const items = Array.isArray(orderBy) ? orderBy : [
@@ -2354,6 +2459,65 @@ function aggregateExpr(table, fn, col, alias) {
   return t !== null && NUMERIC_PG_TYPES.has(t) && t !== "integer" ? `${fn}(${q})::text AS ${quoteIdent(alias)}` : `${fn}(${q}) AS ${quoteIdent(alias)}`;
 }
 __name(aggregateExpr, "aggregateExpr");
+function jsonObjectFor(table, cols, alias) {
+  const pairs = cols.map((c) => {
+    const t = columnTypeOf(table, c);
+    const expr = t !== null && (t === "numeric" || t === "bigint") ? `${alias}.${quoteIdent(c)}::text` : `${alias}.${quoteIdent(c)}`;
+    return `${quoteLiteral(c)}, ${expr}`;
+  });
+  return `json_build_object(${pairs.join(", ")})`;
+}
+__name(jsonObjectFor, "jsonObjectFor");
+function withClauses(table, spec, add, caller) {
+  const rels = currentRelations.get(table) ?? [];
+  const select = [];
+  const joins = [];
+  let i = 0;
+  for (const [name, opt] of Object.entries(spec)) {
+    if (opt === false || opt === void 0) continue;
+    const rel = rels.find((r) => r.name === name);
+    if (rel === void 0) {
+      const known = rels.map((r) => r.name).sort();
+      throw new Error(`${caller}(${table}): with.${name} diye bir ili\u015Fki yok` + (known.length > 0 ? ` (bilinenler: ${known.join(", ")})` : `. Bu tablo hi\xE7 yabanc\u0131 anahtar bildirmiyor ve ili\u015Fkiler onlardan T\xDCRET\u0130L\u0130R`) + `. \u0130li\u015Fkiler references(() => <tablo>.<kolon>) ile bildirilir.`);
+    }
+    const ourCol = rel.kind === "many" ? primaryKeyOf(table) : rel.via;
+    const theirCol = rel.kind === "many" ? rel.via : primaryKeyOf(rel.to);
+    if (ourCol === null || theirCol === null) {
+      throw new Error(`${caller}(${table}): with.${name} birincil anahtar bilmeden kurulamaz \u2014 ili\u015Fkinin bir ucu tablonun PK's\u0131 ve bu tablo tek kolonlu bir PK bildirmiyor.`);
+    }
+    const o = typeof opt === "object" && opt !== null ? opt : {};
+    const childAlias = `w${++i}`;
+    const childKnown = schemaColumns(rel.to);
+    const childCols = Array.isArray(o["select"]) && o["select"].length > 0 ? o["select"] : childKnown !== null ? [
+      ...childKnown
+    ] : [];
+    if (childCols.length === 0) {
+      throw new Error(`${caller}(${table}): with.${name} i\xE7in "${rel.to}" tablosunun kolonlar\u0131 bilinmiyor \u2014 select ile hangi kolonlar\u0131 istedi\u011Finizi yaz\u0131n.`);
+    }
+    for (const c of childCols) {
+      if (childKnown !== null && !childKnown.has(c)) {
+        throw new Error(`${caller}(${table}): with.${name}.select kolonu "${c}" "${rel.to}" tablosunda yok`);
+      }
+    }
+    const obj = jsonObjectFor(rel.to, childCols, childAlias);
+    const innerWhere = o["where"] !== void 0 && o["where"] !== null ? compileWhereBare(rel.to, childKnown, o["where"], add, caller, childAlias, i) : "";
+    const link = `${childAlias}.${quoteIdent(theirCol)} = t.${quoteIdent(ourCol)}`;
+    const cond = innerWhere === "" ? link : `${link} AND ${innerWhere}`;
+    const inner = orderClauseFor(rel.to, childKnown, o["orderBy"], childAlias) + limitClause(o["limit"]);
+    const outAlias = `wj${i}`;
+    if (rel.kind === "many") {
+      joins.push(`LEFT JOIN LATERAL (SELECT coalesce(json_agg(x.o), '[]'::json) AS d FROM (SELECT ${obj} AS o FROM ${quoteTable(rel.to)} ${childAlias} WHERE ${cond}${inner}) x) ${quoteIdent(outAlias)} ON true`);
+    } else {
+      joins.push(`LEFT JOIN LATERAL (SELECT ${obj} AS d FROM ${quoteTable(rel.to)} ${childAlias} WHERE ${cond}${inner} LIMIT 1) ${quoteIdent(outAlias)} ON true`);
+    }
+    select.push(`${quoteIdent(outAlias)}."d" AS ${quoteIdent(name)}`);
+  }
+  return {
+    select,
+    joins
+  };
+}
+__name(withClauses, "withClauses");
 function createOps(tx) {
   const at = /* @__PURE__ */ __name(() => resolveTx(tx), "at");
   const ops = {
@@ -2797,7 +2961,13 @@ function createOps(tx) {
       const limit = limitClause(opts.limit);
       const offset = offsetClause(opts.offset, opts.limit);
       const cols = selectClause(table, known, opts.select);
-      const sql = `SELECT ${cols} FROM ${quoteTable(table)} t WHERE true${whereSql}${order}${limit}${offset}`;
+      const w = opts.with !== void 0 && Object.keys(opts.with).length > 0 ? withClauses(table, opts.with, add, "findMany") : {
+        select: [],
+        joins: []
+      };
+      const selectList = w.select.length > 0 ? `${cols === "*" ? "t.*" : cols}, ${w.select.join(", ")}` : cols;
+      const joinSql = w.joins.length > 0 ? ` ${w.joins.join(" ")}` : "";
+      const sql = `SELECT ${selectList} FROM ${quoteTable(table)} t${joinSql} WHERE true${whereSql}${order}${limit}${offset}`;
       return asTableRows(table, await (await at()).unsafe(sql, params));
     },
     /**
@@ -4727,23 +4897,21 @@ async function createApp(opts) {
     if (spec.required && !callerClaims) {
       return envelope("unauthorized", "A valid access token is required", 401, requestId);
     }
-    if (callerClaims) {
-      const uploadDb = createRequestDatabase(sql, {
-        role: config.dbRole,
-        serviceRole: config.dbServiceRole,
-        claimsJson: JSON.stringify(callerClaims)
-      });
-      try {
-        const refusal = await refuseUnlessAuthorized(uploadDb.client, spec, requestId, makeRoleResolver(uploadDb.client));
-        if (refusal) {
-          await uploadDb.commit();
-          return refusal;
-        }
+    const uploadDb = createRequestDatabase(sql, {
+      role: config.dbRole,
+      serviceRole: config.dbServiceRole,
+      claimsJson: JSON.stringify(callerClaims ?? {})
+    });
+    try {
+      const refusal = await refuseUnlessAuthorized(uploadDb.client, spec, requestId, makeRoleResolver(uploadDb.client));
+      if (refusal) {
         await uploadDb.commit();
-      } catch (err) {
-        await uploadDb.rollback(err);
-        throw err;
+        return refusal;
       }
+      await uploadDb.commit();
+    } catch (err) {
+      await uploadDb.rollback(err);
+      throw err;
     }
     const grant = grantFor(target?.entry, {
       userId: typeof callerClaims?.sub === "string" ? callerClaims.sub : null,
@@ -4782,11 +4950,18 @@ async function createApp(opts) {
       claimsJson: JSON.stringify(claims ?? {})
     });
     const rolesOfCaller = makeRoleResolver(db.client);
-    if (claims) {
-      const refusal = await refuseUnlessAuthorized(db.client, spec, requestId, rolesOfCaller);
-      if (refusal) return refusal;
+    let dispatched = false;
+    const settleBeforeRefusal = /* @__PURE__ */ __name(async () => {
+      if (dispatched) return;
+      await db.rollback(new Error("request refused before dispatch"));
+    }, "settleBeforeRefusal");
+    const refusal = await refuseUnlessAuthorized(db.client, spec, requestId, rolesOfCaller);
+    if (refusal) {
+      await settleBeforeRefusal();
+      return refusal;
     }
     if (claims && spec.verifiedEmail && claims.email_verified !== true) {
+      await settleBeforeRefusal();
       return envelope("email_not_verified", "A verified email address is required", 403, requestId);
     }
     let parsedBody;
@@ -4795,6 +4970,7 @@ async function createApp(opts) {
     if (req.method !== "GET" && req.method !== "HEAD") {
       const declared = Number(req.headers.get("content-length") ?? "");
       if (Number.isFinite(declared) && declared > MAX_BODY_BYTES) {
+        await settleBeforeRefusal();
         return new Response(JSON.stringify({
           error: "payload_too_large",
           error_description: `Request body exceeds ${MAX_BODY_BYTES} bytes`,
@@ -4807,6 +4983,7 @@ async function createApp(opts) {
       }
       const buf = await req.arrayBuffer().catch(() => null);
       if (buf && buf.byteLength > MAX_BODY_BYTES) {
+        await settleBeforeRefusal();
         return new Response(JSON.stringify({
           error: "payload_too_large",
           error_description: `Request body exceeds ${MAX_BODY_BYTES} bytes`,
@@ -4842,6 +5019,7 @@ async function createApp(opts) {
         ...JSON_HEADERS
       };
       if (attest.nextChallenge) headers["x-palbase-attest-challenge"] = attest.nextChallenge;
+      await settleBeforeRefusal();
       return new Response(JSON.stringify({
         error: attest.reason,
         error_description: "This endpoint requires a verified app instance",
@@ -4856,6 +5034,7 @@ async function createApp(opts) {
     attestChallengeOut = attest.nextChallenge;
     const retryAfter = limiter.check(meta.options?.rateLimit, RateLimiter.key(hit.entry.id, userId, req.headers), Date.now());
     if (retryAfter !== null) {
+      await settleBeforeRefusal();
       return new Response(JSON.stringify({
         error: "too_many_requests",
         error_description: "Rate limit exceeded for this endpoint",
@@ -4887,6 +5066,7 @@ async function createApp(opts) {
           readParsedBody();
           const r = p.schema.safeParse(parsedBody);
           if (!r.success) {
+            await settleBeforeRefusal();
             return envelope("bad_request", "Request body failed validation", 400, requestId, {
               data: {
                 fields: fieldErrors(r.error)
@@ -4899,6 +5079,7 @@ async function createApp(opts) {
         case "query": {
           const r = p.schema.safeParse(Object.fromEntries(url.searchParams));
           if (!r.success) {
+            await settleBeforeRefusal();
             return envelope("bad_request", "Query parameters failed validation", 400, requestId, {
               data: {
                 fields: fieldErrors(r.error)
@@ -4919,6 +5100,7 @@ async function createApp(opts) {
           }
           const r = p.schema.safeParse(headersFor(raw, p.schema));
           if (!r.success) {
+            await settleBeforeRefusal();
             return envelope("bad_request", "Request headers failed validation", 400, requestId, {
               data: {
                 fields: fieldErrors(r.error)
@@ -4951,17 +5133,20 @@ async function createApp(opts) {
           break;
         case "uploadedObject": {
           if (uploadSecret === "" || !verifySignature(req.headers.get(SIGNATURE_HEADER) ?? "", uploadSecret)) {
+            await settleBeforeRefusal();
             return envelope("unauthorized", "This endpoint accepts uploads through storage, not directly", 401, requestId);
           }
           readParsedBody();
           const envelopeIn = parsedBody;
           if (!envelopeIn?.uploadedObject) {
+            await settleBeforeRefusal();
             return envelope("bad_request", "the completion call carried no uploaded object", 400, requestId);
           }
           const uploadId = envelopeIn.uploadedObject.uploadId;
           if (typeof uploadId === "string" && uploadId !== "") {
             const already = completions.recall(uploadId);
             if (already) {
+              await settleBeforeRefusal();
               return new Response(already.body, {
                 status: already.status,
                 headers: already.contentType ? {
@@ -5011,6 +5196,7 @@ async function createApp(opts) {
           args[p.index] = void 0;
       }
     }
+    dispatched = true;
     try {
       const services = buildServices(db);
       if (meta.options?.sseConfig !== void 0) {