@palbase/backend 33.0.0 → 33.0.1

package/dist/engine/index.d.cts

@@ -1,8 +1,8 @@
-import '../index-BWgnGj68.cjs';
-export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-g6iQyYci.cjs';
+import '../index-DB_nW-AV.cjs';
+export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-DLveQoOf.cjs';
 import '../db/env.cjs';
 import '../stack.cjs';
 import 'zod';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.cjs';
-import '../registry-6VT5RPeO.cjs';
+import '../registry-DSTThhKf.cjs';

package/dist/engine/index.d.ts

@@ -1,8 +1,8 @@
-import '../index-Dg10RnZO.js';
-export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-Bi74dcOu.js';
+import '../index-DMZG3kpo.js';
+export { A as App, g as AuthVerifier, B as BootRefused, h as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, j as EngineConfig, M as ModuleClients, R as RateLimiter, k as RequestDatabase, l as RouteEntry, m as RuntimeHooks, S as ScrubResult, n as SqlDriver, o as SqlTx, p as buildRouteTable, q as createApp, r as createLazyTransaction, s as createOps, t as createRequestDatabase, u as effectiveAuth, v as hostAllowed, w as installEgressFence, i as isDeclarationRefused, x as loadConfig, y as makeMemoryCache, z as matchRoute, F as quoteIdent, G as scrubSecrets, H as withTables } from '../index-D-3duy8Y.js';
 import '../db/env.js';
 import '../stack.js';
 import 'zod';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.js';
-import '../registry-B-sxJJN0.js';
+import '../registry-JjF5lcj4.js';

package/dist/engine/index.js

@@ -16,15 +16,15 @@ import {
   quoteIdent,
   scrubSecrets,
   withTables
-} from "../chunk-DCDHAKF3.js";
+} from "../chunk-IKDONZ5D.js";
 import {
   DECLARATION_REFUSAL,
   DeclarationRefused,
   isDeclarationRefused
-} from "../chunk-N54QZER3.js";
-import "../chunk-QMFOL2K6.js";
+} from "../chunk-WWUG2QXF.js";
+import "../chunk-TVCCR6SO.js";
 import "../chunk-XOX6RFPZ.js";
-import "../chunk-C4ZA5AT2.js";
+import "../chunk-SI4KGEM3.js";
 import "../chunk-BRLJOXWS.js";
 import "../chunk-KATPXCJ5.js";
 export {

package/dist/{index-Bi74dcOu.d.ts → index-D-3duy8Y.d.ts}

@@ -1,6 +1,6 @@
-import { D as DBClient, b as DBOps, T as TxPlanBody, c as TxPlanResponse, A as AuthSpec, C as CacheClient, a as RuntimeServices, _ as __runWithRuntime, d as __requestALS } from './index-Dg10RnZO.js';
+import { D as DBClient, b as DBOps, T as TxPlanBody, c as TxPlanResponse, A as AuthSpec, C as CacheClient, a as RuntimeServices, _ as __runWithRuntime, d as __requestALS } from './index-DMZG3kpo.js';
 import { T as Token } from './module-Dl1KFVtc.js';
-import { R as RouteMeta } from './registry-B-sxJJN0.js';
+import { R as RouteMeta } from './registry-JjF5lcj4.js';
 
 /**
  * engine/config.ts — settings from the environment, and the gate that refuses

package/dist/{index-BWgnGj68.d.cts → index-DB_nW-AV.d.cts}

@@ -2257,7 +2257,7 @@ interface PalbaseFunctionsClient {
     invoke<T = unknown>(fnName: string, options?: PalbaseInvokeOptions): Promise<PalbaseResult<T>>;
 }
 /**
- * Cross-user admin write surface, reached via `Flags.asService()`.
+ * Cross-user admin write surface, reached via `Flags.$asService()`.
  *
  * These five methods set/clear overrides for an ARBITRARY user (named
  * explicitly), so they bypass the current-request-user scope that `Flags.*`
@@ -2265,10 +2265,10 @@ interface PalbaseFunctionsClient {
  * `Database` / `Database.$asService()` split: the privileged, cross-user path
  * is moved OFF the default surface so it is greppable and intentional — a
  * handler that calls `Flags.setOverrideForUser(...)` on the default surface is
- * a compile error and must reach for `Flags.asService()` first.
+ * a compile error and must reach for `Flags.$asService()` first.
  *
  * @example
- * await Flags.asService().setOverrideForUser("user_123", "new_checkout", true);
+ * await Flags.$asService().setOverrideForUser("user_123", "new_checkout", true);
  */
 interface PalbaseFlagsServiceClient {
     /**
@@ -2331,7 +2331,7 @@ interface PalbaseFlagsClient {
      * user until cleared.
      *
      * Errors when there is no signed-in user (an anonymous request); reach for
-     * `Flags.asService().setOverrideForUser(userId, key, value)` to write a flag
+     * `Flags.$asService().setOverrideForUser(userId, key, value)` to write a flag
      * for an arbitrary (cross-user) target.
      *
      * @example
@@ -2341,8 +2341,12 @@ interface PalbaseFlagsClient {
     /**
      * Return the cross-user admin write surface ({@link PalbaseFlagsServiceClient}).
      * Use sparingly and explicitly — the default `Flags.setOverride(...)` path is
-     * bound to the current request user; `asService()` is how you write a flag
-     * override for an ARBITRARY user. Mirrors `Database.$asService()`.
+     * bound to the current request user; this is how you write a flag override for
+     * an ARBITRARY user. Mirrors `Database.$asService()`.
+     *
+     * NOT the name a handler writes: the ambient `Flags` singleton OMITS this
+     * member and exposes `$asService()` instead — `Flags.asService()` still
+     * type-checks there and THROWS, naming its replacement (H1).
      */
     asService(): PalbaseFlagsServiceClient;
 }
@@ -4035,12 +4039,17 @@ type EnvServiceDatabase = EnvSchemaSurface & {
     }): Promise<Materialized<T>>;
 };
 /**
- * The typed-by-default Database surface: the raw string-keyed `DBClient` ops
- * PLUS a `tables` map typed against the project's generated `palbase-env.d.ts`,
- * a `transaction` that runs a whole plan in one request, and `asService()` for
+ * The typed-by-default Database surface: the `$`-prefixed string-keyed
+ * `DBClient` ops PLUS one property per schema — `public` and every schema the
+ * project declares — typed against the generated `palbase-env.d.ts`, a
+ * `$transaction` that runs a whole plan in one request, and `$asService()` for
  * the explicit RLS-bypass sibling.
  *
- * The low-level `txPlan` op is deliberately NOT re-exposed here: `transaction`
+ * NOT `tables`: that intermediate layer was removed (FR-001) and this sentence
+ * outlived it by two majors, teaching a spelling that is TS2339. Pinned in
+ * `src/database-ambient.test-d.ts`.
+ *
+ * The low-level `txPlan` op is deliberately NOT re-exposed here: `$transaction`
  * is the surface, and a hand-built plan would bypass the ref/guard machinery
  * that makes one safe to write.
  */

package/dist/{index-g6iQyYci.d.cts → index-DLveQoOf.d.cts}

@@ -1,6 +1,6 @@
-import { D as DBClient, b as DBOps, T as TxPlanBody, c as TxPlanResponse, A as AuthSpec, C as CacheClient, a as RuntimeServices, _ as __runWithRuntime, d as __requestALS } from './index-BWgnGj68.cjs';
+import { D as DBClient, b as DBOps, T as TxPlanBody, c as TxPlanResponse, A as AuthSpec, C as CacheClient, a as RuntimeServices, _ as __runWithRuntime, d as __requestALS } from './index-DB_nW-AV.cjs';
 import { T as Token } from './module-Dl1KFVtc.cjs';
-import { R as RouteMeta } from './registry-6VT5RPeO.cjs';
+import { R as RouteMeta } from './registry-DSTThhKf.cjs';
 
 /**
  * engine/config.ts — settings from the environment, and the gate that refuses

package/dist/{index-Dg10RnZO.d.ts → index-DMZG3kpo.d.ts}

@@ -2257,7 +2257,7 @@ interface PalbaseFunctionsClient {
     invoke<T = unknown>(fnName: string, options?: PalbaseInvokeOptions): Promise<PalbaseResult<T>>;
 }
 /**
- * Cross-user admin write surface, reached via `Flags.asService()`.
+ * Cross-user admin write surface, reached via `Flags.$asService()`.
  *
  * These five methods set/clear overrides for an ARBITRARY user (named
  * explicitly), so they bypass the current-request-user scope that `Flags.*`
@@ -2265,10 +2265,10 @@ interface PalbaseFunctionsClient {
  * `Database` / `Database.$asService()` split: the privileged, cross-user path
  * is moved OFF the default surface so it is greppable and intentional — a
  * handler that calls `Flags.setOverrideForUser(...)` on the default surface is
- * a compile error and must reach for `Flags.asService()` first.
+ * a compile error and must reach for `Flags.$asService()` first.
  *
  * @example
- * await Flags.asService().setOverrideForUser("user_123", "new_checkout", true);
+ * await Flags.$asService().setOverrideForUser("user_123", "new_checkout", true);
  */
 interface PalbaseFlagsServiceClient {
     /**
@@ -2331,7 +2331,7 @@ interface PalbaseFlagsClient {
      * user until cleared.
      *
      * Errors when there is no signed-in user (an anonymous request); reach for
-     * `Flags.asService().setOverrideForUser(userId, key, value)` to write a flag
+     * `Flags.$asService().setOverrideForUser(userId, key, value)` to write a flag
      * for an arbitrary (cross-user) target.
      *
      * @example
@@ -2341,8 +2341,12 @@ interface PalbaseFlagsClient {
     /**
      * Return the cross-user admin write surface ({@link PalbaseFlagsServiceClient}).
      * Use sparingly and explicitly — the default `Flags.setOverride(...)` path is
-     * bound to the current request user; `asService()` is how you write a flag
-     * override for an ARBITRARY user. Mirrors `Database.$asService()`.
+     * bound to the current request user; this is how you write a flag override for
+     * an ARBITRARY user. Mirrors `Database.$asService()`.
+     *
+     * NOT the name a handler writes: the ambient `Flags` singleton OMITS this
+     * member and exposes `$asService()` instead — `Flags.asService()` still
+     * type-checks there and THROWS, naming its replacement (H1).
      */
     asService(): PalbaseFlagsServiceClient;
 }
@@ -4035,12 +4039,17 @@ type EnvServiceDatabase = EnvSchemaSurface & {
     }): Promise<Materialized<T>>;
 };
 /**
- * The typed-by-default Database surface: the raw string-keyed `DBClient` ops
- * PLUS a `tables` map typed against the project's generated `palbase-env.d.ts`,
- * a `transaction` that runs a whole plan in one request, and `asService()` for
+ * The typed-by-default Database surface: the `$`-prefixed string-keyed
+ * `DBClient` ops PLUS one property per schema — `public` and every schema the
+ * project declares — typed against the generated `palbase-env.d.ts`, a
+ * `$transaction` that runs a whole plan in one request, and `$asService()` for
  * the explicit RLS-bypass sibling.
  *
- * The low-level `txPlan` op is deliberately NOT re-exposed here: `transaction`
+ * NOT `tables`: that intermediate layer was removed (FR-001) and this sentence
+ * outlived it by two majors, teaching a spelling that is TS2339. Pinned in
+ * `src/database-ambient.test-d.ts`.
+ *
+ * The low-level `txPlan` op is deliberately NOT re-exposed here: `$transaction`
  * is the surface, and a hand-built plan would bypass the ref/guard machinery
  * that makes one safe to write.
  */