@palbase/backend 30.0.1 → 33.0.0

package/dist/engine/index.d.cts

@@ -1,8 +1,8 @@
-import '../index-DtCgaZAg.cjs';
-export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-Zi7MptvP.cjs';
+import '../index-BWgnGj68.cjs';
+export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-g6iQyYci.cjs';
 import '../db/env.cjs';
 import '../stack.cjs';
 import 'zod';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.cjs';
-import '../registry-CEYLH-Iz.cjs';
+import '../registry-6VT5RPeO.cjs';

package/dist/engine/index.d.ts

@@ -1,8 +1,8 @@
-import '../index-8qy3kIuA.js';
-export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-b-Q3l7W5.js';
+import '../index-Dg10RnZO.js';
+export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-Bi74dcOu.js';
 import '../db/env.js';
 import '../stack.js';
 import 'zod';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.js';
-import '../registry-BGJ-Al6F.js';
+import '../registry-B-sxJJN0.js';

package/dist/engine/index.js

@@ -16,17 +16,17 @@ import {
   quoteIdent,
   scrubSecrets,
   withTables
-} from "../chunk-RADVOY7Y.js";
+} from "../chunk-DCDHAKF3.js";
 import {
   DECLARATION_REFUSAL,
   DeclarationRefused,
   isDeclarationRefused
-} from "../chunk-YRVIWHJC.js";
-import "../chunk-SG4UTNOP.js";
-import "../chunk-3TUJWHC2.js";
-import "../chunk-VVMJEVQP.js";
-import "../chunk-CGNN2PUH.js";
-import "../chunk-VXPNPVAG.js";
+} from "../chunk-N54QZER3.js";
+import "../chunk-QMFOL2K6.js";
+import "../chunk-XOX6RFPZ.js";
+import "../chunk-C4ZA5AT2.js";
+import "../chunk-BRLJOXWS.js";
+import "../chunk-KATPXCJ5.js";
 export {
   AuthVerifier,
   BootRefused,

package/dist/{index-DtCgaZAg.d.cts → index-BWgnGj68.d.cts}

@@ -1,4 +1,4 @@
-import { Tables, TableTypes, Schemas } from './db/env.cjs';
+import { Schemas, Tables, TableTypes } from './db/env.cjs';
 import { ZodSchema, z } from 'zod';
 import { PalbaseFlagKey, Buckets, BucketTypes, PalbaseSecretName } from './stack.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
@@ -28,16 +28,32 @@ interface User {
     /**
      * Whether that email address has been confirmed.
      *
-     * Server-resolved from the verified user profile, not read from the JWT: a
-     * token claim is only true as of when the token was minted, so a user who
-     * verifies mid-session would keep reporting `false` until it expired.
+     * READ FROM THE VERIFIED TOKEN (`email_verified`), so it says what was true
+     * when that token was minted: a user who confirms their address mid-session
+     * keeps reporting `false` until their next one. {@link User.roles} is the
+     * deliberate exception — it is read from the table on every request.
+     *
+     * This paragraph used to claim the opposite ("server-resolved from the
+     * verified profile, not read from the JWT") and to describe a ~30-second
+     * profile cache. Measured 2026-09-04: the engine fills this field from
+     * `claims.email_verified` and no such cache exists anywhere in the runtime.
+     * Whether the claim or a profile read is the RIGHT source is a separate
+     * question and an open one — but the type may not answer it wrongly while it
+     * is open.
      *
      * `false` for a phone-only user (no address to confirm) and for any user who
-     * has not clicked through yet. Before this field existed, answering "is this
-     * address confirmed" in a handler cost an extra network round-trip PER
-     * REQUEST for one boolean the runtime already had.
+     * has not clicked through yet.
      */
     emailVerified: boolean;
+    /**
+     * The caller's DATABASE role — the string RLS reads, not an application role.
+     *
+     * It is the literal `"authenticated"` for every signed-in caller and
+     * `"anon"` for every unauthenticated one, so `user.role === "admin"` is
+     * ALWAYS false and reads like a working check. Application roles are
+     * {@link User.roles}; this field says which Postgres role the request runs
+     * as, and that is the only question it answers.
+     */
     role: string;
     /**
      * The caller's APPLICATION roles, as assigned in `auth.user_roles`.
@@ -226,6 +242,13 @@ interface ColumnDef {
      * is never serialized into a migration. It exists so the row surface can hand
      * back the type the application actually works with.
      */
+    /**
+     * The named codec this column declares (FR-001). Unlike `transform`, the NAME
+     * survives into the runtime object, so `makeEnvDts` can emit the matching
+     * TypeScript type instead of falling back to the storage type. Not part of
+     * the DDL: the column's Postgres type is unchanged.
+     */
+    codec?: CodecName;
     transform?: ColumnTransform;
 }
 /**
@@ -240,6 +263,21 @@ interface ColumnTransform<T = unknown> {
     fromDb: (value: unknown) => T;
     toDb: (value: T) => unknown;
 }
+/**
+ * The closed set of named column codecs (FR-001).
+ *
+ * WHY A CLOSED SET rather than `.transform<T>()`. A transform's target type is
+ * a TYPE parameter — erased at runtime — so the generator that reads the
+ * bundled schema object cannot learn it. `palbase-env.d.ts` therefore said
+ * `string` while the engine handed the application a number, and a consumer
+ * project wrote a hand-rolled codec module plus 141 call sites to compensate.
+ *
+ * A codec is NAMED instead of typed: the name lands in `_def.codec`, travels in
+ * the runtime object to every reader, and BOTH the conversion and the emitted
+ * TypeScript type are derived from it. One declaration, one truth, and no way
+ * for the two to disagree.
+ */
+type CodecName = 'number' | 'decimal';
 declare const __colKind: unique symbol;
 declare const __colNullable: unique symbol;
 declare const __colHasDefault: unique symbol;
@@ -418,6 +456,22 @@ declare class ColumnBuilder<K extends ColumnType = ColumnType, N extends boolean
      * A transform is a PROJECTION, never a constraint: it lives only in this
      * process, so it can neither validate nor migrate what is stored.
      */
+    /**
+     * Surface this exact-precision column as a JS `number` (FR-001).
+     *
+     * `numeric`/`bigint` arrive as strings because a JS number cannot hold their
+     * full range — correct, and exactly why this exists: application code that
+     * does arithmetic on the column otherwise rewrites the same `Number(row.x)` /
+     * `String(v)` pair in every caller, and each rewrite is a place the two
+     * directions can drift apart.
+     */
+    asNumber(): ColumnBuilder<K, N, D, E, P, number>;
+    /**
+     * Surface this exact-precision column as a `string` — the value Postgres
+     * sent, DECLARED rather than defaulted (FR-001).
+     */
+    asDecimal(): ColumnBuilder<K, N, D, E, P, string>;
+    private withCodec;
     transform<Target>(fns: ColumnTransform<Target>): ColumnBuilder<K, N, D, E, P, Target>;
 }
 /**
@@ -741,6 +795,22 @@ interface PolicyDef {
     withCheck: string | PolicyExpr | null;
     permissive: boolean;
 }
+/**
+ * Bir politikanın adreslenebileceği Postgres rolleri.
+ *
+ * Serbest string DEĞİL, çünkü küme SABİT: bunları palbase provision ediyor,
+ * kiracı yeni bir PG rolü yaratmıyor. Serbest bırakıldığında `authenitcated`
+ * gibi bir harf hatası derlenip migration'a kadar gidiyordu — Drizzle'da da
+ * aynı boşluk ölçüldü (`to` tipi `(string & {})`, yazım hatası DDL'e geçiyor).
+ *
+ * Çalışma anı zaten fail-closed (bilinmeyen rol kapıyı kapatıyor,
+ * `session_rls_fail_closed_integration_test.go`); bu, aynı cevabı derleme
+ * anına taşıyor.
+ *
+ * `backend_*` ikizleri elle YAZILMAZ — `NormalizeDeclaredPolicies` onları
+ * kendisi ekliyor; yine de kabul ediliyor ki elle yazan kod kırılmasın.
+ */
+type PolicyRole = "anon" | "authenticated" | "service_role" | "backend_anon" | "backend_authenticated" | "backend_service_role";
 declare class PolicyBuilder {
     readonly _def: PolicyDef;
     constructor(name: string);
@@ -755,7 +825,7 @@ declare class PolicyBuilder {
      * policy("p").to("authenticated", "service_role")
      * policy("p").to() // PUBLIC
      */
-    to(...roles: string[]): this;
+    to(...roles: PolicyRole[]): this;
     /**
      * `USING (...)` satır görünürlüğü ifadesi.
      *
@@ -2549,7 +2619,7 @@ interface PalbaseLinksClient {
  *   \@Controller("/todos")
  *   export default class TodosController {
  *     \@Post("") create(\@Body(CreateTodoBody) body: CreateTodoBody): unknown {
- *       return Database.insert("todos", { title: body.title });
+ *       return Database.public.todos.insert({ title: body.title });
  *     }
  *   }
  *
@@ -2622,15 +2692,6 @@ interface RequestStore {
      * client's retry replay its first result instead of charging twice. */
     idempotencyKey?: string | null;
 }
-/**
- * Per-request store. The persistent runtime runs each request inside
- * {@link __runWithRuntime}, so every async continuation of that request reads
- * its OWN `runtime` (and any other request-scoped fields the runtime adds).
- *
- * Exported with a `__` prefix so the runtime (worker.js) shares the SAME ALS
- * instance across the one module instance — two ALS instances would silently
- * not see each other's stores. NOT part of the public author-facing API.
- */
 declare const __requestALS: AsyncLocalStorage<RequestStore>;
 /** Install the live clients in the process-global fallback slot.
  *
@@ -2643,11 +2704,6 @@ declare function __setRuntime(services: RuntimeServices): void;
  * The persistent worker calls this once per request so concurrent requests
  * never share a services slot. NOT part of the public author-facing API. */
 declare function __runWithRuntime<T>(services: RuntimeServices, fn: () => T): T;
-/** Read the live clients, throwing if accessed outside a request scope.
- *
- * Resolves the ALS store first (persistent server, per-request), then the
- * process-global fallback (dev-server / tests). NOT part of the public
- * author-facing API — used by the runtime and the singleton Proxies. */
 declare function __getRuntime(): RuntimeServices;
 /** A lifecycle hook. Sync or async; the runtime awaits what it returns. */
 type LifecycleHook = () => void | Promise<void>;
@@ -2737,13 +2793,15 @@ interface RecoOps {
 /**
  * The project's own Postgres (pgx, schema `env_<envId>`).
  *
- * Typed by default: `Database.tables.<name>.insert({...})` is typed against
+ * Typed by default: `Database.public.<name>.insert({...})` is typed against
  * the project's generated `palbase-env.d.ts` with NO import and NO generic.
- * The raw string ops (`query`/`insert`/`update`/`delete`/`findById`/`findMany`)
- * are also available for dynamic table names and read-only SQL.
+ * The raw string ops (`Database.$query`/`$insert`/`$update`/`$delete`/
+ * `$findById`/`$findMany`) are also available for read-only SQL and for a table
+ * name only known at runtime — which the typed surface cannot express past
+ * seven tables (see `db/tx-union-key.test-d.ts`).
  *
  * RLS is enforced by default (the runtime runs each op as `authenticated` with
- * the verified user's claims). To bypass RLS, call `Database.asService()` —
+ * the verified user's claims). To bypass RLS, call `Database.$asService()` —
  * explicit and greppable — which runs as the `service_role` (BYPASSRLS).
  *
  * @example
@@ -2758,7 +2816,7 @@ declare const Database: EnvTypedDatabase;
 /** Firestore-like document client (PalDocs). */
 declare const Documents: PalbaseDocsClient;
 /**
- * `buckets.<name>` — the storage twin of `Database.tables.<name>`, and the same
+ * `buckets.<name>` — the storage twin of `Database.public.<name>`, and the same
  * mechanism: `config/storage.ts` generates a `Buckets` augmentation into
  * `palbase-env.d.ts`, so a bucket name is a property with no import and no
  * generic, and a typo is a compile error.
@@ -2822,21 +2880,46 @@ declare const Notifications: PalbaseNotificationsClient;
 /**
  * Feature flags.
  *
- * Mirrors the `Database` / `Database.asService()` model. The default surface is
+ * Mirrors the `Database` / `Database.$asService()` model. The default surface is
  * RLS-equivalent for flags: reads resolve against the CURRENT request user and
  * `Flags.setOverride(key, value)` writes an override for that same signed-in
  * user (no userId argument, no admin power). Cross-user admin writes
- * (`setOverrideForUser`, …) live behind `Flags.asService()` — explicit and
- * greppable, just like `Database.asService()`.
+ * (`setOverrideForUser`, …) live behind `Flags.$asService()` — explicit and
+ * greppable, just like `Database.$asService()`.
  *
  * @example
  * import { Flags } from "@palbase/backend";
  *
  * if (await Flags.isEnabled("new_checkout")) { ... }            // current user
  * await Flags.setOverride("new_checkout", true);                // current user
- * await Flags.asService().setOverrideForUser("u_9", "x", true); // cross-user
+ * await Flags.$asService().setOverrideForUser("u_9", "x", true); // cross-user
  */
-declare const Flags: PalbaseFlagsClient;
+/**
+ * The ambient `Flags` singleton's own surface — NOT the raw client's.
+ *
+ * MEASURED, as a consumer, against the built tarball: annotating the singleton
+ * as `PalbaseFlagsClient` ERASED the `$asService` that `Object.assign` adds, so
+ * `Flags.$asService()` did not exist for anyone outside this package —
+ *
+ *   TS2551: Property '$asService' does not exist on type 'PalbaseFlagsClient'.
+ *           Did you mean 'asService'?
+ *
+ * — while the only path that DID compile (`asService()`) throws by design. The
+ * feature was written and unreachable, which is the defect class this surface
+ * exists to remove.
+ *
+ * `Database` never had the problem because its singleton carries its OWN type
+ * (`EnvTypedDatabase`) rather than the raw client's (`DBClient`). This is that,
+ * for `Flags`. The raw `PalbaseFlagsClient.asService()` is untouched (FR-023) —
+ * it is the seam this forwards to.
+ */
+type PalbaseFlagsAmbient = Omit<PalbaseFlagsClient, "asService"> & {
+    /** RLS'i aşan, kullanıcılar arası yazma yüzeyi. */
+    $asService(): PalbaseFlagsServiceClient;
+    /** 31.0.0 öncesinin adı — SESSİZCE çalışmaz, yerini söyleyerek fırlatır. */
+    asService(): never;
+};
+declare const Flags: PalbaseFlagsAmbient;
 /**
  * The Realtime broadcast singleton for the current request scope. Backend-side
  * Realtime is BROADCAST-ONLY (a stateless handler can push but not subscribe —
@@ -3376,6 +3459,52 @@ type HasOnly<Rels> = [unknown] extends [Rels] ? unknown : [keyof Rels] extends [
  * (ölçüldü: kapı yeşil, çalışma anında "böyle bir ilişki yok" hatası).
  */
 type HasBranch<Row, Rels> = [unknown] extends [Rels] ? never : [keyof Rels] extends [never] ? never : WhereWithRelations<Row, Rels>;
+/**
+ * `with` — İLİŞKİLİ SATIRLARI GETİR (`has` süzer, `with` getirir).
+ *
+ * `true` bütün kolonları, bir nesne ise `select`/`where`/`orderBy`/`limit` ile
+ * daraltılmış hâlini getiriyor. Tek sorgu: LATERAL + `json_agg`.
+ */
+type WithOpts<To> = {
+    select?: readonly Extract<keyof RelatedRow<To>, string>[];
+    where?: WhereFilter<RelatedRow<To>>;
+    orderBy?: OrderBySpec<RelatedRow<To>> | readonly OrderBySpec<RelatedRow<To>>[];
+    limit?: number;
+};
+type WithInput<Rels> = {
+    [R in keyof Rels]?: Rels[R] extends {
+        to: infer To;
+    } ? true | WithOpts<To> : never;
+};
+/** Bir `with` dalının DÖNÜŞ tipi — `many` dizi, `one` tekil ya da null. */
+type WithRowOf<Rels, R extends keyof Rels, Q> = Rels[R] extends {
+    to: infer To;
+    kind: infer K;
+} ? (Q extends {
+    select: readonly (infer C extends keyof RelatedRow<To>)[];
+} ? Pick<RelatedRow<To>, C> : RelatedRow<To>) extends infer Row ? [K] extends ["many"] ? Row[] : Row | null : never : never;
+/**
+ * `with` istenmediğinde `unknown` — kesişimde YOK OLSUN diye.
+ *
+ * Boş bir nesne (`{}`) dönseydi `Pick<Row, K> & {}` satır tipini "aynı ama
+ * özdeş değil" hâle getirirdi ve tam eşitlik iddiaları kırılırdı. Ölçüldü:
+ * `toEqualTypeOf` dört yerde düştü.
+ */
+/**
+ * Yalnız GERÇEKTEN istenen dallar. `undefined extends W[R]` olan anahtarlar
+ * düşüyor — ve bu, `ReturnType<typeof t.findMany>` yazan herkes için kritik:
+ * generic bir imzada `ReturnType` tip parametrelerini VARSAYILANLA değil
+ * KISITLA örnekliyor, yani `W = WithInput<Rels>` oluyor ve her ilişki
+ * (`?:` ile, dolayısıyla `| undefined`) zorunlu bir alana dönüşüyordu.
+ * Gerçek projede ölçüldü: `type MemberRow = Awaited<ReturnType<…findMany>>[number]`
+ * 32 ilişkiyi birden ister hâle geldi ve 4 yerde kırıldı.
+ */
+type RequestedWith<W> = {
+    [R in keyof W]-?: undefined extends W[R] ? never : R;
+}[keyof W];
+type WithResult<Rels, W> = [RequestedWith<W>] extends [never] ? unknown : {
+    [R in RequestedWith<W> & keyof Rels]: WithRowOf<Rels, R, W[R]>;
+};
 type QueryInput<Row, K extends keyof Row = keyof Row, Rels = unknown> = {
     /**
      * Filtre — ya tipli filtre dili ya da bir `sqlFragment` (FR-018). İkisi de
@@ -3383,6 +3512,25 @@ type QueryInput<Row, K extends keyof Row = keyof Row, Rels = unknown> = {
      * yolu değil (P1).
      */
     where?: WhereFilter<Row> | SqlFragment | HasBranch<Row, Rels>;
+    /**
+     * İlişkili satırları da getir — TEK sorguda.
+     *
+     * ```ts
+     * const rows = await Database.public.users.findMany({
+     *   where: { active: true },
+     *   with: { orders: { select: ["id", "amount"], limit: 5 } },
+     * });
+     * rows[0].orders[0].amount;   // string — KAYIPSIZ
+     * ```
+     *
+     * `many` ilişki DİZİ döner (boşsa `[]`, `null` değil — `.map()` guard
+     * istemesin); `one` ilişki tekil satır ya da `null`.
+     *
+     * PARA: `numeric`/`bigint` kolonları JSON'a `::text` ile giriyor. Cast
+     * olmadan `numeric` bir JSON SAYISI olur ve kesinliğini kaybeder — ölçüldü,
+     * `100000000000000000000000000` → `1e+26`.
+     */
+    with?: [unknown] extends [Rels] ? never : [keyof Rels] extends [never] ? never : WithInput<Rels>;
     /**
      * Projeksiyon (FR-009): yalnız bu kolonlar çekilir ve DÖNÜŞ TİPİ buna daralır.
      *
@@ -3655,7 +3803,9 @@ interface EnvTypedTableBase<T extends TableTypes> {
     findById(id: string): Promise<T["row"] | null>;
     /** Rows matching the filter. See {@link WhereFilter} / {@link FindManyOpts} —
      * this declaration is what makes the engine's operators callable. */
-    findMany<K extends keyof T["row"] = keyof T["row"]>(q?: QueryInput<T["row"], K, RelsOf<T>>): Promise<Pick<T["row"], K>[]>;
+    findMany<K extends keyof T["row"] = keyof T["row"], W extends WithInput<RelsOf<T>> = Record<never, never>>(q?: QueryInput<T["row"], K, RelsOf<T>> & {
+        with?: W;
+    }): Promise<Array<Pick<T["row"], K> & WithResult<RelsOf<T>, W>>>;
     /**
      * Update every matching row in one statement; an empty filter is refused.
      *
@@ -5160,4 +5310,4 @@ type Middleware = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise
  */
 type AuthSpec = boolean | Partial<AuthConfig>;
 
-export { NotFound as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, EXTENSION_DEPENDENCIES as E, type ErrorMap as F, type ErrorThrowers as G, HttpError as H, type FileContext as I, Flags as J, Forbidden as K, type HttpMethod as L, IndexBuilder as M, type IndexDef as N, type InsertShape as O, type PalbaseResult as P, type LifecycleHook as Q, type RateLimitConfig as R, type SchemaDef as S, type TxPlanBody as T, Log as U, type Logger as V, type Materialized as W, type Middleware as X, type MiddlewareContext as Y, type MiddlewareHandler as Z, __runWithRuntime as _, type DBOps as a, type PalbaseListLinksOptions as a$, Notifications as a0, type OnDeleteAction as a1, PALBASE_EXTENSIONS as a2, type PBRequest as a3, PalError as a4, type PalbaseAnalyticsClient as a5, type PalbaseAnalyticsManagementNamespace as a6, type PalbaseAnalyticsProperties as a7, type PalbaseAnalyticsQueryNamespace as a8, type PalbaseAttestAndroidParams as a9, type PalbaseEventsQueryInput as aA, type PalbaseEventsResult as aB, type PalbaseExtension as aC, type PalbaseFileObject as aD, type PalbaseFlag as aE, type PalbaseFlagContext as aF, type PalbaseFlagSource as aG, type PalbaseFlagValue as aH, type PalbaseFlagVariant as aI, type PalbaseFlagsClient as aJ, type PalbaseFlagsServiceClient as aK, type PalbaseFunctionsClient as aL, type PalbaseFunnelQueryInput as aM, type PalbaseFunnelResult as aN, type PalbaseIdentifyTraits as aO, type PalbaseInboxClient as aP, type PalbaseInboxListOptions as aQ, type PalbaseInboxListResult as aR, type PalbaseInboxMessage as aS, type PalbaseInboxSendParams as aT, type PalbaseInboxSendResponse as aU, type PalbaseInitialLink as aV, type PalbaseInvokeOptions as aW, type PalbaseLink as aX, type PalbaseLinkAnalytics as aY, type PalbaseLinkDetails as aZ, type PalbaseLinksClient as a_, type PalbaseAttestAndroidResult as aa, type PalbaseAttestiOSParams as ab, type PalbaseAttestiOSResult as ac, type PalbaseAuthAdminClient as ad, type PalbaseAuthClient as ae, type PalbaseBatchOverrideOperation as af, type PalbaseBatchSetOverridesResult as ag, type PalbaseBindDeviceParams as ah, type PalbaseBucketClient as ai, type PalbaseClearAllOverridesResult as aj, type PalbaseClearOverrideResult as ak, type PalbaseCohortQueryInput as al, type PalbaseCohortResult as am, type PalbaseCollectionRef as an, type PalbaseCountQueryInput as ao, type PalbaseCountResult as ap, type PalbaseCreateLinkParams as aq, type PalbaseDeviceInfo as ar, type PalbaseDeviceTokenView as as, type PalbaseDocsClient as at, type PalbaseDocumentRef as au, type PalbaseDocumentSnapshot as av, type PalbaseEmailClient as aw, type PalbaseEmailSendParams as ax, type PalbaseEmailSendResponse as ay, type PalbaseEventNamesResult as az, type TxPlanResponse as b, type TxNow as b$, type PalbaseListLinksResult as b0, type PalbaseListOptions as b1, type PalbaseMatchParams as b2, type PalbaseMultiChannelResponse as b3, type PalbaseNotificationsClient as b4, type PalbaseOverviewResult as b5, type PalbasePreferences as b6, type PalbasePreferencesClient as b7, type PalbasePushClient as b8, type PalbasePushSendParams as b9, type PolicyCommand as bA, type PolicyDef as bB, type PolicyExprCtx as bC, PolicyExprRef as bD, type PolicyMode as bE, type PolicyOperand as bF, type RawConstraintDef as bG, Realtime as bH, type Ref as bI, type RequestStore as bJ, type RowShape as bK, Secrets as bL, type SecretsService as bM, SerializationFailure as bN, type SetShape as bO, type SetValue as bP, type ShutdownRunner as bQ, type SqlFragment as bR, Storage as bS, TABLE_META as bT, type TableDef as bU, type TableHandle as bV, type TableInput as bW, TooManyRequests as bX, type TxColumnExpr as bY, type TxInsertShape as bZ, type TxInsertValue as b_, type PalbasePushSendResponse as ba, type PalbaseQrCodeOptions as bb, type PalbaseQuerySnapshot as bc, type PalbaseRealtimeClient as bd, type PalbaseRegisterDeviceParams as be, type PalbaseRetentionQueryInput as bf, type PalbaseRetentionResult as bg, type PalbaseSession as bh, type PalbaseSetOverrideResult as bi, type PalbaseSetOverridesResult as bj, type PalbaseSignedUrlResponse as bk, type PalbaseSmsClient as bl, type PalbaseSmsSendParams as bm, type PalbaseSmsSendResponse as bn, type PalbaseStorageClient as bo, type PalbaseTransformOptions as bp, type PalbaseUpdateLinkParams as bq, type PalbaseUploadOptions as br, type PalbaseUser as bs, type PalbaseUserDetailResult as bt, type PalbaseUsersQueryInput as bu, type PalbaseUsersResult as bv, type PalbaseVerifyRequestSignatureParams as bw, type PalbaseWhereOperator as bx, type PolicyBinOp as by, PolicyBuilder as bz, type RuntimeServices as c, withRetry as c$, type TxPlan as c0, TxPlanError as c1, type TxPlanHandle as c2, type TxPlanOpResult as c3, type TxPlanRejection as c4, TxRefError as c5, type TxRow as c6, type TxRows as c7, type TxSelectOptions as c8, type TxSetShape as c9, defineSchema as cA, defineTable as cB, enumType as cC, exprCtx as cD, inc as cE, increment as cF, index as cG, installationRef as cH, integer as cI, isPalbaseExtension as cJ, isRetryable as cK, jsonb as cL, makeTypedDB as cM, now as cN, numeric as cO, onShutdown as cP, onStart as cQ, openai as cR, ownedByUser as cS, policy as cT, raw as cU, sqlFragment as cV, text as cW, timestamp as cX, userRef as cY, uuid as cZ, vector as c_, type TxSetValue as ca, type TxTable as cb, type TxTables as cc, type TxWhere as cd, type TxWireExpr as ce, type TxWireGuard as cf, type TxWireOp as cg, type TxWireRef as ch, type TxWireValue as ci, type TypedDB as cj, type TypedTable as ck, type TypedTx as cl, Unauthorized as cm, UniqueViolation as cn, type User as co, type VerifiedDevice as cp, __getRuntime as cq, __resetLifecycleHooks as cr, __runStartHooks as cs, __setRuntime as ct, bigint as cu, boolean as cv, col as cw, dec as cx, decrement as cy, defineMiddleware as cz, __requestALS as d, type PolicyExpr as e, type AnyColumn as f, Auth as g, type AuthConfig as h, Cache as i, type ClientInfo as j, type ColRef as k, ColumnBuilder as l, type ColumnDef as m, type ColumnMap as n, type ColumnType as o, Conflict as p, Database as q, DeadlockDetected as r, Documents as s, type EmbeddingModelRef as t, type EnvSchemas as u, type EnvServiceDatabase as v, type EnvTables as w, type EnvTypedDatabase as x, type EnvTypedTable as y, type ErrorDef as z };
+export { type Materialized as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type EnvServiceDatabase as E, type EnvTypedTable as F, type ErrorDef as G, HttpError as H, type ErrorMap as I, type ErrorThrowers as J, type FileContext as K, type FindManyOpts as L, Flags as M, Forbidden as N, type HttpMethod as O, type PalbaseResult as P, IndexBuilder as Q, type RateLimitConfig as R, type SchemaDef as S, type TxPlanBody as T, type IndexDef as U, type InsertShape as V, type InsertValues as W, type LifecycleHook as X, Log as Y, type Logger as Z, __runWithRuntime as _, type RuntimeServices as a, type PalbaseInitialLink as a$, type Middleware as a0, type MiddlewareContext as a1, type MiddlewareHandler as a2, type MutateInput as a3, NotFound as a4, Notifications as a5, type OnDeleteAction as a6, type OrderBySpec as a7, PALBASE_EXTENSIONS as a8, type PBRequest as a9, type PalbaseDocumentRef as aA, type PalbaseDocumentSnapshot as aB, type PalbaseEmailClient as aC, type PalbaseEmailSendParams as aD, type PalbaseEmailSendResponse as aE, type PalbaseEventNamesResult as aF, type PalbaseEventsQueryInput as aG, type PalbaseEventsResult as aH, type PalbaseExtension as aI, type PalbaseFileObject as aJ, type PalbaseFlag as aK, type PalbaseFlagContext as aL, type PalbaseFlagSource as aM, type PalbaseFlagValue as aN, type PalbaseFlagVariant as aO, type PalbaseFlagsClient as aP, type PalbaseFlagsServiceClient as aQ, type PalbaseFunctionsClient as aR, type PalbaseFunnelQueryInput as aS, type PalbaseFunnelResult as aT, type PalbaseIdentifyTraits as aU, type PalbaseInboxClient as aV, type PalbaseInboxListOptions as aW, type PalbaseInboxListResult as aX, type PalbaseInboxMessage as aY, type PalbaseInboxSendParams as aZ, type PalbaseInboxSendResponse as a_, PalError as aa, type PalbaseAnalyticsClient as ab, type PalbaseAnalyticsManagementNamespace as ac, type PalbaseAnalyticsProperties as ad, type PalbaseAnalyticsQueryNamespace as ae, type PalbaseAttestAndroidParams as af, type PalbaseAttestAndroidResult as ag, type PalbaseAttestiOSParams as ah, type PalbaseAttestiOSResult as ai, type PalbaseAuthAdminClient as aj, type PalbaseAuthClient as ak, type PalbaseBatchOverrideOperation as al, type PalbaseBatchSetOverridesResult as am, type PalbaseBindDeviceParams as an, type PalbaseBucketClient as ao, type PalbaseClearAllOverridesResult as ap, type PalbaseClearOverrideResult as aq, type PalbaseCohortQueryInput as ar, type PalbaseCohortResult as as, type PalbaseCollectionRef as at, type PalbaseCountQueryInput as au, type PalbaseCountResult as av, type PalbaseCreateLinkParams as aw, type PalbaseDeviceInfo as ax, type PalbaseDeviceTokenView as ay, type PalbaseDocsClient as az, type DBOps as b, type TableDef as b$, type PalbaseInvokeOptions as b0, type PalbaseLink as b1, type PalbaseLinkAnalytics as b2, type PalbaseLinkDetails as b3, type PalbaseLinksClient as b4, type PalbaseListLinksOptions as b5, type PalbaseListLinksResult as b6, type PalbaseListOptions as b7, type PalbaseMatchParams as b8, type PalbaseMultiChannelResponse as b9, type PalbaseUsersQueryInput as bA, type PalbaseUsersResult as bB, type PalbaseVerifyRequestSignatureParams as bC, type PalbaseWhereOperator as bD, type PolicyBinOp as bE, PolicyBuilder as bF, type PolicyCommand as bG, type PolicyDef as bH, type PolicyExprCtx as bI, PolicyExprRef as bJ, type PolicyMode as bK, type PolicyOperand as bL, type QueryInput as bM, type RawConstraintDef as bN, Realtime as bO, type Ref as bP, type RequestStore as bQ, type RowShape as bR, Secrets as bS, type SecretsService as bT, SerializationFailure as bU, type SetShape as bV, type SetValue as bW, type ShutdownRunner as bX, type SqlFragment as bY, Storage as bZ, TABLE_META as b_, type PalbaseNotificationsClient as ba, type PalbaseOverviewResult as bb, type PalbasePreferences as bc, type PalbasePreferencesClient as bd, type PalbasePushClient as be, type PalbasePushSendParams as bf, type PalbasePushSendResponse as bg, type PalbaseQrCodeOptions as bh, type PalbaseQuerySnapshot as bi, type PalbaseRealtimeClient as bj, type PalbaseRegisterDeviceParams as bk, type PalbaseRetentionQueryInput as bl, type PalbaseRetentionResult as bm, type PalbaseSession as bn, type PalbaseSetOverrideResult as bo, type PalbaseSetOverridesResult as bp, type PalbaseSignedUrlResponse as bq, type PalbaseSmsClient as br, type PalbaseSmsSendParams as bs, type PalbaseSmsSendResponse as bt, type PalbaseStorageClient as bu, type PalbaseTransformOptions as bv, type PalbaseUpdateLinkParams as bw, type PalbaseUploadOptions as bx, type PalbaseUser as by, type PalbaseUserDetailResult as bz, type TxPlanResponse as c, ownedByUser as c$, type TableHandle as c0, type TableInput as c1, TooManyRequests as c2, type TxColumnExpr as c3, type TxInsertShape as c4, type TxInsertValue as c5, type TxNow as c6, type TxPlan as c7, TxPlanError as c8, type TxPlanHandle as c9, __resetLifecycleHooks as cA, __runStartHooks as cB, __setRuntime as cC, bigint as cD, boolean as cE, col as cF, dec as cG, decrement as cH, defineMiddleware as cI, defineSchema as cJ, defineTable as cK, enumType as cL, exprCtx as cM, inc as cN, increment as cO, index as cP, installationRef as cQ, integer as cR, isPalbaseExtension as cS, isRetryable as cT, jsonb as cU, makeTypedDB as cV, now as cW, numeric as cX, onShutdown as cY, onStart as cZ, openai as c_, type TxPlanOpResult as ca, type TxPlanRejection as cb, TxRefError as cc, type TxRow as cd, type TxRows as ce, type TxSelectOptions as cf, type TxSetShape as cg, type TxSetValue as ch, type TxTable as ci, type TxTables as cj, type TxWhere as ck, type TxWireExpr as cl, type TxWireGuard as cm, type TxWireOp as cn, type TxWireRef as co, type TxWireValue as cp, type TypedDB as cq, type TypedTable as cr, type TypedTx as cs, Unauthorized as ct, UniqueViolation as cu, type User as cv, type VerifiedDevice as cw, type WhereFilter as cx, type WhereOp as cy, __getRuntime as cz, __requestALS as d, policy as d0, raw as d1, sqlFragment as d2, text as d3, timestamp as d4, userRef as d5, uuid as d6, vector as d7, withRetry as d8, type PolicyExpr as e, type AggregateInput as f, type AggregateResult as g, type AnyColumn as h, Auth as i, type AuthConfig as j, Cache as k, type ClientInfo as l, type ColRef as m, ColumnBuilder as n, type ColumnDef as o, type ColumnMap as p, type ColumnType as q, Conflict as r, Database as s, DeadlockDetected as t, Documents as u, EXTENSION_DEPENDENCIES as v, type EmbeddingModelRef as w, type EnvSchemas as x, type EnvTables as y, type EnvTypedDatabase as z };

package/dist/{index-b-Q3l7W5.d.ts → index-Bi74dcOu.d.ts}

@@ -1,6 +1,6 @@
-import { D as DBClient, a as DBOps, T as TxPlanBody, b as TxPlanResponse, A as AuthSpec, C as CacheClient, c as RuntimeServices, _ as __runWithRuntime, d as __requestALS } from './index-8qy3kIuA.js';
+import { D as DBClient, b as DBOps, T as TxPlanBody, c as TxPlanResponse, A as AuthSpec, C as CacheClient, a as RuntimeServices, _ as __runWithRuntime, d as __requestALS } from './index-Dg10RnZO.js';
 import { T as Token } from './module-Dl1KFVtc.js';
-import { R as RouteMeta } from './registry-BGJ-Al6F.js';
+import { R as RouteMeta } from './registry-B-sxJJN0.js';
 
 /**
  * engine/config.ts — settings from the environment, and the gate that refuses
@@ -174,6 +174,13 @@ interface FindManyOptions {
     /** Projeksiyon (FR-009): verilmezse `SELECT *`. Kolon adları ŞEMAYA karşı
      * doğrulanır — bilinmeyen ad SQL'e ulaşmadan, adıyla reddedilir. */
     select?: string[];
+    /**
+     * İLİŞKİLİ SATIRLARI da getir — TEK sorguda, LATERAL ile.
+     *
+     * `has` ilişki üzerinden SÜZER, `with` GETİRİR. İkisi aynı ilişki grafiğini
+     * okuyor (yabancı anahtarlardan türetilmiş), yani ilişki adları aynı.
+     */
+    with?: Record<string, unknown>;
     limit?: number;
     /** Rows to skip before the page starts. Only meaningful with `limit`, and
      * refused without it — see `offsetClause`. */