@palbase/backend 38.0.16 → 39.1.0

package/dist/index.d.cts

@@ -1,11 +1,11 @@
-import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-DRx880KY.cjs';
-export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BadRequest, t as Cache, i as CacheClient, u as ClientInfo, v as ColRef, w as ColumnBuilder, x as ColumnDef, y as ColumnMap, z as ColumnType, C as CommandOptions, F as Conflict, a as DBClient, e as DBOps, G as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, I as DatabaseQueryEvent, J as DeadlockDetected, K as Documents, L as EXTENSION_DEPENDENCIES, M as EmbeddingModelRef, N as EnvSchemas, E as EnvServiceDatabase, O as EnvTables, Q as EnvTypedDatabase, U as EnvTypedTable, V as ErrorDef, W as ErrorMap, X as ErrorThrowers, Y as FileContext, Z as FindManyOpts, $ as Flags, a0 as Forbidden, a1 as HttpMethod, a2 as IndexBuilder, a3 as IndexDef, a4 as InsertManyOptions, a5 as InsertShape, a6 as InsertValues, a7 as LifecycleHook, a8 as Log, a9 as Logger, aa as Materialized, ab as Middleware, ac as MiddlewareContext, ad as MiddlewareHandler, ae as MutateInput, af as NotFound, ag as Notifications, ah as OnDeleteAction, ai as OrderBySpec, aj as PALBASE_EXTENSIONS, ak as PBRequest, P as Page, al as PageInfo, am as PageInput, an as PageNavigation, ao as PalError, ap as PalbaseAnalyticsClient, aq as PalbaseAnalyticsManagementNamespace, ar as PalbaseAnalyticsProperties, as as PalbaseAnalyticsQueryNamespace, at as PalbaseAttestAndroidParams, au as PalbaseAttestAndroidResult, av as PalbaseAttestiOSParams, aw as PalbaseAttestiOSResult, ax as PalbaseAuthAdminClient, ay as PalbaseAuthClient, az as PalbaseBatchOverrideOperation, aA as PalbaseBatchSetOverridesResult, aB as PalbaseBindDeviceParams, aC as PalbaseBucketClient, aD as PalbaseClearAllOverridesResult, aE as PalbaseClearOverrideResult, aF as PalbaseCohortQueryInput, aG as PalbaseCohortResult, aH as PalbaseCollectionRef, aI as PalbaseCountQueryInput, aJ as PalbaseCountResult, aK as PalbaseCreateLinkParams, aL as PalbaseDeviceInfo, aM as PalbaseDeviceTokenView, aN as PalbaseDocsClient, aO as PalbaseDocumentRef, aP as PalbaseDocumentSnapshot, aQ as PalbaseEmailClient, aR as PalbaseEmailSendParams, aS as PalbaseEmailSendResponse, aT as PalbaseEventNamesResult, aU as PalbaseEventsQueryInput, aV as PalbaseEventsResult, aW as PalbaseExtension, aX as PalbaseFileObject, aY as PalbaseFlag, aZ as PalbaseFlagContext, a_ as PalbaseFlagSource, a$ as PalbaseFlagValue, b0 as PalbaseFlagVariant, b1 as PalbaseFlagsClient, b2 as PalbaseFlagsServiceClient, b3 as PalbaseFunctionsClient, b4 as PalbaseFunnelQueryInput, b5 as PalbaseFunnelResult, b6 as PalbaseIdentifyTraits, b7 as PalbaseInboxClient, b8 as PalbaseInboxListOptions, b9 as PalbaseInboxListResult, ba as PalbaseInboxMessage, bb as PalbaseInboxSendParams, bc as PalbaseInboxSendResponse, bd as PalbaseInitialLink, be as PalbaseInvokeOptions, bf as PalbaseLink, bg as PalbaseLinkAnalytics, bh as PalbaseLinkDetails, bi as PalbaseLinksClient, bj as PalbaseListLinksOptions, bk as PalbaseListLinksResult, bl as PalbaseListOptions, bm as PalbaseMatchParams, bn as PalbaseMultiChannelResponse, bo as PalbaseNotificationChannel, bp as PalbaseNotificationsClient, bq as PalbaseOverviewResult, br as PalbasePreferences, bs as PalbasePreferencesClient, bt as PalbasePushClient, bu as PalbasePushSendParams, bv as PalbasePushSendResponse, bw as PalbaseQrCodeOptions, bx as PalbaseQuerySnapshot, by as PalbaseRealtimeClient, bz as PalbaseRegisterDeviceParams, bA as PalbaseRetentionQueryInput, bB as PalbaseRetentionResult, bC as PalbaseSession, bD as PalbaseSetOverrideResult, bE as PalbaseSetOverridesResult, bF as PalbaseSignedUrlResponse, bG as PalbaseSmsClient, bH as PalbaseSmsSendParams, bI as PalbaseSmsSendResponse, bJ as PalbaseStorageClient, bK as PalbaseTransformOptions, bL as PalbaseUpdateLinkParams, bM as PalbaseUploadOptions, bN as PalbaseUser, bO as PalbaseUserDetailResult, bP as PalbaseUsersQueryInput, bQ as PalbaseUsersResult, bR as PalbaseVerifyRequestSignatureParams, bS as PalbaseWhatsAppClient, bT as PalbaseWhatsAppEvent, bU as PalbaseWhatsAppSendParams, bV as PalbaseWhatsAppSendResponse, bW as PalbaseWhatsAppTemplate, bX as PalbaseWhereOperator, bY as PolicyBinOp, bZ as PolicyBuilder, b_ as PolicyCommand, b$ as PolicyDef, c0 as PolicyExprCtx, c1 as PolicyExprRef, c2 as PolicyMode, c3 as PolicyOperand, c4 as QueryInput, R as RateLimitConfig, c5 as RawConstraintDef, f as RawPageOptions, c6 as Realtime, c7 as Ref, c8 as RequestStore, c9 as RowShape, b as RuntimeServices, ca as Secrets, cb as SecretsService, cc as SerializationFailure, cd as SetShape, ce as SetValue, cf as ShutdownRunner, cg as SqlFragment, ch as Storage, ci as TABLE_META, cj as TableDef, ck as TableHandle, cl as TableInput, cm as TooManyRequests, T as TransactionIsolation, cn as TxColumnExpr, co as TxInsertShape, cp as TxInsertValue, cq as TxNow, cr as TxPlan, g as TxPlanBody, cs as TxPlanError, ct as TxPlanHandle, cu as TxPlanOpResult, cv as TxPlanRejection, h as TxPlanResponse, cw as TxRefError, cx as TxRow, cy as TxRows, cz as TxSelectOptions, cA as TxSetShape, cB as TxSetValue, cC as TxTable, cD as TxTables, cE as TxWhere, cF as TxWireExpr, cG as TxWireGuard, cH as TxWireOp, cI as TxWireRef, cJ as TxWireValue, cK as TypedDB, cL as TypedTable, cM as TypedTx, cN as Unauthorized, cO as UniqueViolation, cP as UniqueWhere, cQ as UserT, cR as VerifiedDevice, cS as WhereFilter, cT as WhereOp, cU as __getRuntime, j as __requestALS, cV as __resetLifecycleHooks, cW as __runStartHooks, _ as __runWithRuntime, cX as __setRuntime, cY as bigint, cZ as boolean, c_ as can, c$ as col, d0 as dec, d1 as decrement, d2 as defineMiddleware, d3 as defineSchema, d4 as defineTable, d5 as enumType, d6 as exprCtx, d7 as inc, d8 as increment, d9 as index, da as installationRef, db as integer, dc as isPalbaseExtension, dd as isRetryable, de as jsonb, df as makeTypedDB, dg as now, dh as numeric, di as onShutdown, dj as onStart, dk as openai, dl as ownedByUser, dm as policy, dn as raw, dp as sqlFragment, dq as text, dr as timestamp, ds as userRef, dt as uuid, du as vector, dv as withRetry } from './index-DRx880KY.cjs';
-import { M as ModuleClients, C as Container } from './index-CI7S0Wqv.cjs';
-export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-CI7S0Wqv.cjs';
+import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-pK2At5Yc.cjs';
+export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BackfillDef, t as BadRequest, u as Cache, i as CacheClient, v as CheckDef, w as ClientInfo, x as ColRef, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, I as Conflict, a as DBClient, e as DBOps, J as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, L as DeadlockDetected, M as Documents, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, Q as EnvSchemas, E as EnvServiceDatabase, U as EnvTables, V as EnvTypedDatabase, W as EnvTypedTable, X as ErrorDef, Y as ErrorMap, Z as ErrorThrowers, $ as FileContext, a0 as FindManyOpts, a1 as FkAction, a2 as FkMatch, a3 as Flags, a4 as Forbidden, a5 as ForeignKeyBuilder, a6 as ForeignKeyDef, a7 as FreezeBuilder, a8 as FreezeDef, a9 as GuardBuilder, aa as GuardDef, ab as GuardEvent, ac as HttpMethod, ad as IndexBuilder, ae as IndexDef, af as InsertManyOptions, ag as InsertShape, ah as InsertValues, ai as LifecycleHook, aj as Log, ak as Logger, al as Materialized, am as Middleware, an as MiddlewareContext, ao as MiddlewareHandler, ap as MutateInput, aq as NotFound, ar as Notifications, as as OnDeleteAction, at as OrderBySpec, au as PALBASE_EXTENSIONS, av as PBRequest, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, az as PalError, aA as PalbaseAnalyticsClient, aB as PalbaseAnalyticsManagementNamespace, aC as PalbaseAnalyticsProperties, aD as PalbaseAnalyticsQueryNamespace, aE as PalbaseAttestAndroidParams, aF as PalbaseAttestAndroidResult, aG as PalbaseAttestiOSParams, aH as PalbaseAttestiOSResult, aI as PalbaseAuthAdminClient, aJ as PalbaseAuthClient, aK as PalbaseBatchOverrideOperation, aL as PalbaseBatchSetOverridesResult, aM as PalbaseBindDeviceParams, aN as PalbaseBucketClient, aO as PalbaseClearAllOverridesResult, aP as PalbaseClearOverrideResult, aQ as PalbaseCohortQueryInput, aR as PalbaseCohortResult, aS as PalbaseCollectionRef, aT as PalbaseCountQueryInput, aU as PalbaseCountResult, aV as PalbaseCreateLinkParams, aW as PalbaseDeviceInfo, aX as PalbaseDeviceTokenView, aY as PalbaseDocsClient, aZ as PalbaseDocumentRef, a_ as PalbaseDocumentSnapshot, a$ as PalbaseEmailClient, b0 as PalbaseEmailSendParams, b1 as PalbaseEmailSendResponse, b2 as PalbaseEventNamesResult, b3 as PalbaseEventsQueryInput, b4 as PalbaseEventsResult, b5 as PalbaseExtension, b6 as PalbaseFileObject, b7 as PalbaseFlag, b8 as PalbaseFlagContext, b9 as PalbaseFlagSource, ba as PalbaseFlagValue, bb as PalbaseFlagVariant, bc as PalbaseFlagsClient, bd as PalbaseFlagsServiceClient, be as PalbaseFunctionsClient, bf as PalbaseFunnelQueryInput, bg as PalbaseFunnelResult, bh as PalbaseIdentifyTraits, bi as PalbaseInboxClient, bj as PalbaseInboxListOptions, bk as PalbaseInboxListResult, bl as PalbaseInboxMessage, bm as PalbaseInboxSendParams, bn as PalbaseInboxSendResponse, bo as PalbaseInitialLink, bp as PalbaseInvokeOptions, bq as PalbaseLink, br as PalbaseLinkAnalytics, bs as PalbaseLinkDetails, bt as PalbaseLinksClient, bu as PalbaseListLinksOptions, bv as PalbaseListLinksResult, bw as PalbaseListOptions, bx as PalbaseMatchParams, by as PalbaseMultiChannelResponse, bz as PalbaseNotificationChannel, bA as PalbaseNotificationsClient, bB as PalbaseOverviewResult, bC as PalbasePreferences, bD as PalbasePreferencesClient, bE as PalbasePushClient, bF as PalbasePushSendParams, bG as PalbasePushSendResponse, bH as PalbaseQrCodeOptions, bI as PalbaseQuerySnapshot, bJ as PalbaseRealtimeClient, bK as PalbaseRegisterDeviceParams, bL as PalbaseRetentionQueryInput, bM as PalbaseRetentionResult, bN as PalbaseSession, bO as PalbaseSetOverrideResult, bP as PalbaseSetOverridesResult, bQ as PalbaseSignedUrlResponse, bR as PalbaseSmsClient, bS as PalbaseSmsSendParams, bT as PalbaseSmsSendResponse, bU as PalbaseStorageClient, bV as PalbaseTransformOptions, bW as PalbaseUpdateLinkParams, bX as PalbaseUploadOptions, bY as PalbaseUser, bZ as PalbaseUserDetailResult, b_ as PalbaseUsersQueryInput, b$ as PalbaseUsersResult, c0 as PalbaseVerifyRequestSignatureParams, c1 as PalbaseWhatsAppClient, c2 as PalbaseWhatsAppEvent, c3 as PalbaseWhatsAppSendParams, c4 as PalbaseWhatsAppSendResponse, c5 as PalbaseWhatsAppTemplate, c6 as PalbaseWhereOperator, c7 as PolicyBinOp, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cb as PolicyExprCtx, cc as PolicyExprRef, cd as PolicyMode, ce as PolicyOperand, cf as QueryInput, R as RateLimitConfig, cg as RawConstraintDef, f as RawPageOptions, ch as Realtime, ci as Ref, cj as RequestStore, ck as RowShape, b as RuntimeServices, cl as Secrets, cm as SecretsService, cn as SerializationFailure, co as SetShape, cp as SetValue, cq as ShutdownRunner, cr as SqlFragment, cs as Storage, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, cx as TableRef, cy as TooManyRequests, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cB as TxInsertValue, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cN as TxSetValue, cO as TxTable, cP as TxTables, cQ as TxWhere, cR as TxWireExpr, cS as TxWireGuard, cT as TxWireOp, cU as TxWireRef, cV as TxWireValue, cW as TypedDB, cX as TypedTable, cY as TypedTx, cZ as Unauthorized, c_ as UniqueViolation, c$ as UniqueWhere, d0 as UserT, d1 as VerifiedDevice, d2 as WhereFilter, d3 as WhereOp, d4 as __getRuntime, j as __requestALS, d5 as __resetLifecycleHooks, d6 as __runStartHooks, _ as __runWithRuntime, d7 as __setRuntime, d8 as backfill, d9 as bigint, da as boolean, db as can, dc as check, dd as col, de as dec, df as decrement, dg as defineMiddleware, dh as defineSchema, di as defineTable, dj as enumType, dk as exprCtx, dl as foreignKey, dm as freeze, dn as guard, dp as inc, dq as increment, dr as index, ds as installationRef, dt as integer, du as isPalbaseExtension, dv as isRetryable, dw as jsonb, dx as makeTypedDB, dy as now, dz as numeric, dA as onShutdown, dB as onStart, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dG as sqlFragment, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector, dM as withRetry } from './index-pK2At5Yc.cjs';
+import { M as ModuleClients, C as Container } from './index-B0mjUnxy.cjs';
+export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-B0mjUnxy.cjs';
 export { TableTypes, Tables } from './db/env.cjs';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.cjs';
-import { a as RouteOptions } from './registry-C7UCkQf0.cjs';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-C7UCkQf0.cjs';
+import { a as RouteOptions } from './registry-9dNeVN5d.cjs';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-9dNeVN5d.cjs';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 import { T as Token } from './module-Dl1KFVtc.cjs';
@@ -233,13 +233,22 @@ interface TableJSON {
     rawConstraints?: {
         name: string;
         up: string;
-        down: string | null;
     }[];
     checks?: {
         name: string;
         expr: string;
     }[];
     indexes?: IndexJSON[];
+    /** Canlıdan düşürülecek constraint adları (FR-008). Sıfır değerde OMIT. */
+    dropConstraints?: string[];
+    /** Tablo düzeyi çok sütunlu FOREIGN KEY'ler (FR-001). Sıfır değerde OMIT. */
+    foreignKeys?: ForeignKeyJSON[];
+    /** Koşullu FK'lar — donan demetler (FR-012). Sıfır değerde OMIT. */
+    freeze?: FreezeJSON[];
+    /** Guard'lar — bildirimsel kısıtın yetişemediği yazma redleri (FR-015). Sıfır değerde OMIT. */
+    guards?: GuardJSON[];
+    /** Bir kez koşacak veri düzeltmeleri (FR-033). Sıfır değerde OMIT. */
+    backfills?: BackfillJSON[];
     /**
      * appendOnly (FR-030): tablo yalnız INSERT kabul eder. Sıfır değerde OMIT —
      * bildirmeyen tablolar wire'da bayt-aynı kalır.
@@ -257,6 +266,8 @@ interface TableJSON {
  */
 interface IndexJSON {
     name: string;
+    /** `CREATE UNIQUE INDEX` (FR-007). Sıfır değerde OMIT. */
+    unique?: boolean;
     columns: string[];
     /** Partial index koşulu (FR-042) — filtre şekli `WhereFilter` ile aynı. */
     where?: unknown;
@@ -269,6 +280,75 @@ interface IndexJSON {
     /** Covering index — `INCLUDE (...)` (FR-043). */
     include?: string[];
 }
+/**
+ * Tablo düzeyi çok sütunlu FOREIGN KEY'in wire şekli — Go'nun `ForeignKeyJSON`'ı
+ * ile ALAN-ADI SÖZLEŞMESİ (FR-001). Bir ad değişirse wire sessizce kopar.
+ *
+ * `onUpdate`/`onDelete`/`match` sıfır değerinde OMIT: bildirmeyen bir FK
+ * Postgres'in varsayılanını (NO ACTION / MATCH SIMPLE) alır ve telde yer
+ * kaplamaz (NFR-006).
+ */
+interface ForeignKeyJSON {
+    name: string;
+    columns: string[];
+    refTable: string;
+    refColumns: string[];
+    onUpdate?: string;
+    onDelete?: string;
+    match?: string;
+}
+/**
+ * Koşullu FK'nın ("donan demet") wire şekli — Go'nun `FreezeJSON`'ı ile
+ * ALAN-ADI SÖZLEŞMESİ (C-8, FR-012).
+ *
+ * `when` politika ifade yapısının ta kendisi — `IndexJSON.where` ile aynı
+ * duruş: üçüncü bir yüklem lehçesi açmak, aynı sorunun iki yazımı demekti.
+ * Alanların hiçbiri opsiyonel değil: bir freeze'in koşulu, donan sütunları ve
+ * hedefi olmadan anlamı yok ve `toFreezeDef` bunları bildirim anında şart
+ * koşuyor. Sıfır değerde OMIT edilen şey DİZİNİN KENDİSİ (`TableJSON.freeze`).
+ */
+interface FreezeJSON {
+    name: string;
+    when: unknown;
+    columns: string[];
+    refTable: string;
+    refColumns: string[];
+}
+/**
+ * Bir guard'ın wire şekli — Go'nun `GuardJSON`'ı ile ALAN-ADI SÖZLEŞMESİ
+ * (C-4/C-8, FR-015).
+ *
+ * `when` ile `exists` AYRI alanlar: Postgres bir trigger'ın `WHEN` yan
+ * tümcesinde alt sorguya izin vermiyor (`cannot use subquery in trigger WHEN
+ * condition`), yani çapraz satır yüklemi gövdedeki `EXISTS` bloğuna inmek
+ * zorunda (FR-019). Ayrımı emitter'ın yükleme bakıp tahmin etmesi yerine wire'da
+ * taşımak, o kuralı bildirimin kendi şekline yazar.
+ *
+ * `detail`/`hint`/`column` sıfır değerde OMIT — bildirmeyen bir guard telde yer
+ * kaplamaz (NFR-006). `message` her zaman var: reddin kullanıcıya ulaşan tek
+ * çıktısı o.
+ */
+interface GuardJSON {
+    name: string;
+    event: string;
+    when?: unknown;
+    exists?: unknown;
+    message: string;
+    detail?: string;
+    hint?: string;
+    column?: string;
+}
+/**
+ * Bir backfill'in wire şekli — Go'nun `BackfillJSON`'ı ile ALAN-ADI SÖZLEŞMESİ
+ * (C-8, FR-033).
+ *
+ * `name` kimliğin TAMAMI: "koştu mu" sorusu ona göre cevaplanıyor, `sql`'e göre
+ * değil. Aynı adın altında değişen bir gövde ikinci bir koşu üretmez.
+ */
+interface BackfillJSON {
+    name: string;
+    sql: string;
+}
 /** C-11 wire şekli — Go'nun MemoryJSON'ıyla alan-adı sözleşmesi (D-019).
  * Beyansız tablolarda alan OMIT — eski şemalar bayt-aynı (NFR-B1). */
 interface MemoryJSON {
@@ -431,6 +511,134 @@ declare function publicChannel(opts?: {
 }): PublicEntry;
 declare function defineChannels(map: ChannelsInput): ChannelsDef;
 
+/**
+ * repository.ts — kiracıya kapsanmış CRUD'un TEK yazımı.
+ *
+ * Ölçülen kusur: tüketici katmanında 61 forwarding metodu vardı ve her biri
+ * aynı iki satırı tekrar ediyordu — kiracı kolonunu yükleme ekle, sonucu
+ * çevir. Aynı olan bir şeyi 61 kez yazmak onu 61 kez UNUTULABİLİR yapar; ve
+ * unutulan tek bir yüklem, RLS'in altında bir kiracının satırını başka bir
+ * kiracıya gösterir.
+ *
+ * ```ts
+ * export class TodoRepository extends defineRepository(
+ *   Database.public.todos,
+ *   { tenant: "household_id" },
+ * ) {}
+ * ```
+ *
+ * Satır anahtarı `id` DEĞİLSE adıyla verilir — `defineTable` bir `id` kolonu
+ * şart koşmuyor, birincil anahtar herhangi bir kolonda olabilir:
+ *
+ * ```ts
+ * export class DocRepository extends defineRepository(
+ *   Database.public.docs,
+ *   { tenant: "org_id", key: "slug" },
+ * ) {}
+ * ```
+ *
+ * `Database` AMBIENT kalır ve enjekte EDİLMEZ: istek kapsamlıdır, yani bir
+ * kurucuya kapatılan bir referans bir isteğin istemcisini bir başkasına
+ * taşırdı. Tablo erişimcisi argüman olarak geçer ve her çağrıda güncel istek
+ * kapsamını çözen proxy'ye iner; taban sınıfın kurucusu ARGÜMANSIZ kalır, o
+ * yüzden container onu ek metadata olmadan çözer.
+ */
+/**
+ * Repo'nun tablodan İSTEDİĞİ dört üye — `Database.public.<t>`'nin alt kümesi.
+ *
+ * Yüklemler `Record<string, unknown>`: kiracı kolonunun adı ÇALIŞMA ANINDA
+ * gelen bir değer, ve TypeScript jenerik bir anahtarla kurulan nesne
+ * literalini mapped type'a bağlayamaz (ölçüldü: `{ [k]: v }` → `{ [x: string]:
+ * V }`, `{ [P in K]: V }`'ye atanamaz). Kapsamı DAR tutup burada gevşetmek,
+ * çağıranın tarafında `as` yazmaktan farklıdır: dışa bakan yüzey — `list`,
+ * `find`, `insert`, `update`, `updateScoped`, `delete` — tamamen tipli kalır.
+ *
+ * `NoInfer`: `Row` YALNIZ `insert`'ün dönüşünden çıkarılır. `findMany` motorda
+ * jenerik (`select`/`with`) ve kısıtlarıyla örneklendiğinde ilişki anahtarları
+ * taşıyan BAŞKA bir satır tipi önerir; iki aday birleşince satır tipi sessizce
+ * genişlerdi.
+ */
+interface RepositoryTable<Row, Insert, Patch> {
+    insert(data: Insert): Promise<Row>;
+    findMany(q: {
+        where: Record<string, unknown>;
+        limit?: number;
+    }): Promise<NoInfer<Row>[]>;
+    updateMany(q: {
+        where: Record<string, unknown>;
+        set: Patch;
+    }): Promise<NoInfer<Row>[]>;
+    deleteMany(q: {
+        where: Record<string, unknown>;
+    }): Promise<number>;
+}
+/**
+ * Satır anahtarının VARSAYILANI: tablo bir `id` kolonu taşıyorsa `"id"`.
+ *
+ * `defineTable` bir `id` kolonu ŞART KOŞMUYOR — birincil anahtar herhangi bir
+ * kolonda `.primaryKey()` ile ya da `primaryKey: [...]` ile bildirilebiliyor.
+ * Bu yüzden anahtar sabit değil, PARAMETRE; ama `id` taşıyan tabloların
+ * (çoğunluk) hiçbir şey yazmaması gerekiyor.
+ */
+type DefaultRowKey<Row> = Extract<keyof Row & string, "id">;
+/**
+ * Anahtar bulunamadığında REDDİ ADIYLA söyleyen tip.
+ *
+ * `id`'si olmayan bir tabloda `key` verilmezse {@link DefaultRowKey} `never`
+ * olur ve `Row[never]` de `never`'dır: kapı doğru kapanır ama "type 'string' is
+ * not assignable to type 'never'" diyerek ÇAREYİ söylemez. Buradaki tek alanlı
+ * arayüz aynı reddi verir ve alanın adı hatanın içinde çareyi yazar.
+ */
+interface MissingRowKey {
+    "defineRepository: bu satırda `id` kolonu yok — anahtarı { key: \"...\" } ile adlandır": never;
+}
+/** Anahtar kolonunun DEĞER tipi; anahtar bilinmiyorsa {@link MissingRowKey}. */
+type RowKey<Row, PK extends keyof Row & string> = [PK] extends [never] ? MissingRowKey : Row[PK];
+/**
+ * Kiracıya kapsanmış repo yüzeyi. `K` kiracı kolonu, `Row[K]` onun DEĞERİ.
+ *
+ * `insert` yükünde kiracı kolonu YOKTUR: onu repo yazar — `Omit` bunu ifade
+ * edilemez kılıyor, anlatmıyor. `update`/`updateScoped` patch'i tablonun kendi
+ * `set` şeklidir ve kiracı kolonunu DIŞLAMAZ: satırı başka bir kiracıya
+ * taşımak tablonun `WITH CHECK` politikasının kararıdır, repo'nun değil — ve
+ * repo'nun yüklemi zaten çağıranın kiracısına kapanmış durumda.
+ */
+interface RepositoryOf<Row, Insert, Patch, K extends keyof Row & string, PK extends keyof Row & string = DefaultRowKey<Row>> {
+    /** Kiracının tüm satırları. */
+    list(tenant: Row[K]): Promise<Row[]>;
+    /** Kiracının bu anahtarlı satırı, ya da yoksa `null` — yokluk bir DEĞER. */
+    find(tenant: Row[K], id: RowKey<Row, PK>): Promise<Row | null>;
+    /** Satırı kiracıya YAZAR: kiracı kolonu yükte değil, burada. */
+    insert(tenant: Row[K], values: Omit<Insert, K>): Promise<Row>;
+    /**
+     * Kiracının bu id'li satırını günceller ve GÜNCEL satırı döner.
+     *
+     * Eşleşen satır yoksa `NotFound` ATAR — çağıran `!` yazmak ya da `null`
+     * dallanması yazmak zorunda kalmasın. Yokluğu DEĞER olarak isteyen
+     * {@link RepositoryOf.updateScoped} kullanır.
+     */
+    update(tenant: Row[K], id: RowKey<Row, PK>, patch: Patch): Promise<Row>;
+    /**
+     * {@link RepositoryOf.update} ile AYNI yüklem, ama bulunamazsa `null` döner.
+     *
+     * Tüketicinin bugün elle yazdığı `updateMany(…).then(rows => rows[0] ?? null)`
+     * kalıbının adı budur.
+     */
+    updateScoped(tenant: Row[K], id: RowKey<Row, PK>, patch: Patch): Promise<Row | null>;
+    /** Kiracının bu anahtarlı satırını siler. Yoksa bir şey olmaz. */
+    delete(tenant: Row[K], id: RowKey<Row, PK>): Promise<void>;
+}
+/**
+ * Kiracıya kapsanmış bir repo TABAN SINIFI üretir.
+ *
+ * Dönen sınıf `abstract`: doğrudan `new` edilemez, çünkü DI'ın çözeceği ad alt
+ * sınıfın adıdır (`TodoRepository`), üretilen anonim sınıfınki değil.
+ */
+declare function defineRepository<Row, Insert, Patch, K extends keyof Row & string, PK extends keyof Row & string = DefaultRowKey<Row>>(table: RepositoryTable<Row, Insert, Patch>, opts: {
+    tenant: K;
+    key?: PK;
+}): abstract new () => RepositoryOf<Row, Insert, Patch, K, PK>;
+
 declare function makeEnvDts(schemas: readonly SchemaDef[]): string;
 
 /**
@@ -1079,4 +1287,4 @@ declare function getJobManifest(ctor: object): JobManifest;
  */
 declare function getJobConfig(ctor: object, container: Container): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Container, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Injectable, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, PolicyExpr, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RoleNotDefined, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, Token, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __claimInjectables, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, controllersOf, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getHookManifest, getJobConfig, getJobManifest, getRegisteredControllers, getWebhookConfig, getWebhookManifest, hooksOf, jobsOf, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, roomsOf, toSchemaJSON, webhooksOf };
+export { type AuthHookEvent, type BackfillJSON, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Container, Controller, type ControllerOptions, type DefaultRowKey, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, type ForeignKeyJSON, type FreezeJSON, Get, type GuardJSON, Headers, Hook, type HookFn, type HookMeta, HttpError, Injectable, Job, type JobMeta, type JobOptions, type MissingRowKey, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, PolicyExpr, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, type RepositoryOf, type RepositoryTable, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RoleNotDefined, Room, type RoomOptions, RouteOptions, type RowKey, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, Token, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __claimInjectables, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, controllersOf, defineChannels, defineDefaultAuth, defineError, defineRepository, getErrorRegistry, getHookConfig, getHookManifest, getJobConfig, getJobManifest, getRegisteredControllers, getWebhookConfig, getWebhookManifest, hooksOf, jobsOf, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, roomsOf, toSchemaJSON, webhooksOf };

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-CUy50OLU.js';
-export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BadRequest, t as Cache, i as CacheClient, u as ClientInfo, v as ColRef, w as ColumnBuilder, x as ColumnDef, y as ColumnMap, z as ColumnType, C as CommandOptions, F as Conflict, a as DBClient, e as DBOps, G as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, I as DatabaseQueryEvent, J as DeadlockDetected, K as Documents, L as EXTENSION_DEPENDENCIES, M as EmbeddingModelRef, N as EnvSchemas, E as EnvServiceDatabase, O as EnvTables, Q as EnvTypedDatabase, U as EnvTypedTable, V as ErrorDef, W as ErrorMap, X as ErrorThrowers, Y as FileContext, Z as FindManyOpts, $ as Flags, a0 as Forbidden, a1 as HttpMethod, a2 as IndexBuilder, a3 as IndexDef, a4 as InsertManyOptions, a5 as InsertShape, a6 as InsertValues, a7 as LifecycleHook, a8 as Log, a9 as Logger, aa as Materialized, ab as Middleware, ac as MiddlewareContext, ad as MiddlewareHandler, ae as MutateInput, af as NotFound, ag as Notifications, ah as OnDeleteAction, ai as OrderBySpec, aj as PALBASE_EXTENSIONS, ak as PBRequest, P as Page, al as PageInfo, am as PageInput, an as PageNavigation, ao as PalError, ap as PalbaseAnalyticsClient, aq as PalbaseAnalyticsManagementNamespace, ar as PalbaseAnalyticsProperties, as as PalbaseAnalyticsQueryNamespace, at as PalbaseAttestAndroidParams, au as PalbaseAttestAndroidResult, av as PalbaseAttestiOSParams, aw as PalbaseAttestiOSResult, ax as PalbaseAuthAdminClient, ay as PalbaseAuthClient, az as PalbaseBatchOverrideOperation, aA as PalbaseBatchSetOverridesResult, aB as PalbaseBindDeviceParams, aC as PalbaseBucketClient, aD as PalbaseClearAllOverridesResult, aE as PalbaseClearOverrideResult, aF as PalbaseCohortQueryInput, aG as PalbaseCohortResult, aH as PalbaseCollectionRef, aI as PalbaseCountQueryInput, aJ as PalbaseCountResult, aK as PalbaseCreateLinkParams, aL as PalbaseDeviceInfo, aM as PalbaseDeviceTokenView, aN as PalbaseDocsClient, aO as PalbaseDocumentRef, aP as PalbaseDocumentSnapshot, aQ as PalbaseEmailClient, aR as PalbaseEmailSendParams, aS as PalbaseEmailSendResponse, aT as PalbaseEventNamesResult, aU as PalbaseEventsQueryInput, aV as PalbaseEventsResult, aW as PalbaseExtension, aX as PalbaseFileObject, aY as PalbaseFlag, aZ as PalbaseFlagContext, a_ as PalbaseFlagSource, a$ as PalbaseFlagValue, b0 as PalbaseFlagVariant, b1 as PalbaseFlagsClient, b2 as PalbaseFlagsServiceClient, b3 as PalbaseFunctionsClient, b4 as PalbaseFunnelQueryInput, b5 as PalbaseFunnelResult, b6 as PalbaseIdentifyTraits, b7 as PalbaseInboxClient, b8 as PalbaseInboxListOptions, b9 as PalbaseInboxListResult, ba as PalbaseInboxMessage, bb as PalbaseInboxSendParams, bc as PalbaseInboxSendResponse, bd as PalbaseInitialLink, be as PalbaseInvokeOptions, bf as PalbaseLink, bg as PalbaseLinkAnalytics, bh as PalbaseLinkDetails, bi as PalbaseLinksClient, bj as PalbaseListLinksOptions, bk as PalbaseListLinksResult, bl as PalbaseListOptions, bm as PalbaseMatchParams, bn as PalbaseMultiChannelResponse, bo as PalbaseNotificationChannel, bp as PalbaseNotificationsClient, bq as PalbaseOverviewResult, br as PalbasePreferences, bs as PalbasePreferencesClient, bt as PalbasePushClient, bu as PalbasePushSendParams, bv as PalbasePushSendResponse, bw as PalbaseQrCodeOptions, bx as PalbaseQuerySnapshot, by as PalbaseRealtimeClient, bz as PalbaseRegisterDeviceParams, bA as PalbaseRetentionQueryInput, bB as PalbaseRetentionResult, bC as PalbaseSession, bD as PalbaseSetOverrideResult, bE as PalbaseSetOverridesResult, bF as PalbaseSignedUrlResponse, bG as PalbaseSmsClient, bH as PalbaseSmsSendParams, bI as PalbaseSmsSendResponse, bJ as PalbaseStorageClient, bK as PalbaseTransformOptions, bL as PalbaseUpdateLinkParams, bM as PalbaseUploadOptions, bN as PalbaseUser, bO as PalbaseUserDetailResult, bP as PalbaseUsersQueryInput, bQ as PalbaseUsersResult, bR as PalbaseVerifyRequestSignatureParams, bS as PalbaseWhatsAppClient, bT as PalbaseWhatsAppEvent, bU as PalbaseWhatsAppSendParams, bV as PalbaseWhatsAppSendResponse, bW as PalbaseWhatsAppTemplate, bX as PalbaseWhereOperator, bY as PolicyBinOp, bZ as PolicyBuilder, b_ as PolicyCommand, b$ as PolicyDef, c0 as PolicyExprCtx, c1 as PolicyExprRef, c2 as PolicyMode, c3 as PolicyOperand, c4 as QueryInput, R as RateLimitConfig, c5 as RawConstraintDef, f as RawPageOptions, c6 as Realtime, c7 as Ref, c8 as RequestStore, c9 as RowShape, b as RuntimeServices, ca as Secrets, cb as SecretsService, cc as SerializationFailure, cd as SetShape, ce as SetValue, cf as ShutdownRunner, cg as SqlFragment, ch as Storage, ci as TABLE_META, cj as TableDef, ck as TableHandle, cl as TableInput, cm as TooManyRequests, T as TransactionIsolation, cn as TxColumnExpr, co as TxInsertShape, cp as TxInsertValue, cq as TxNow, cr as TxPlan, g as TxPlanBody, cs as TxPlanError, ct as TxPlanHandle, cu as TxPlanOpResult, cv as TxPlanRejection, h as TxPlanResponse, cw as TxRefError, cx as TxRow, cy as TxRows, cz as TxSelectOptions, cA as TxSetShape, cB as TxSetValue, cC as TxTable, cD as TxTables, cE as TxWhere, cF as TxWireExpr, cG as TxWireGuard, cH as TxWireOp, cI as TxWireRef, cJ as TxWireValue, cK as TypedDB, cL as TypedTable, cM as TypedTx, cN as Unauthorized, cO as UniqueViolation, cP as UniqueWhere, cQ as UserT, cR as VerifiedDevice, cS as WhereFilter, cT as WhereOp, cU as __getRuntime, j as __requestALS, cV as __resetLifecycleHooks, cW as __runStartHooks, _ as __runWithRuntime, cX as __setRuntime, cY as bigint, cZ as boolean, c_ as can, c$ as col, d0 as dec, d1 as decrement, d2 as defineMiddleware, d3 as defineSchema, d4 as defineTable, d5 as enumType, d6 as exprCtx, d7 as inc, d8 as increment, d9 as index, da as installationRef, db as integer, dc as isPalbaseExtension, dd as isRetryable, de as jsonb, df as makeTypedDB, dg as now, dh as numeric, di as onShutdown, dj as onStart, dk as openai, dl as ownedByUser, dm as policy, dn as raw, dp as sqlFragment, dq as text, dr as timestamp, ds as userRef, dt as uuid, du as vector, dv as withRetry } from './index-CUy50OLU.js';
-import { M as ModuleClients, C as Container } from './index-Ogi30dbt.js';
-export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-Ogi30dbt.js';
+import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-eN4KzGa5.js';
+export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BackfillDef, t as BadRequest, u as Cache, i as CacheClient, v as CheckDef, w as ClientInfo, x as ColRef, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, I as Conflict, a as DBClient, e as DBOps, J as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, L as DeadlockDetected, M as Documents, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, Q as EnvSchemas, E as EnvServiceDatabase, U as EnvTables, V as EnvTypedDatabase, W as EnvTypedTable, X as ErrorDef, Y as ErrorMap, Z as ErrorThrowers, $ as FileContext, a0 as FindManyOpts, a1 as FkAction, a2 as FkMatch, a3 as Flags, a4 as Forbidden, a5 as ForeignKeyBuilder, a6 as ForeignKeyDef, a7 as FreezeBuilder, a8 as FreezeDef, a9 as GuardBuilder, aa as GuardDef, ab as GuardEvent, ac as HttpMethod, ad as IndexBuilder, ae as IndexDef, af as InsertManyOptions, ag as InsertShape, ah as InsertValues, ai as LifecycleHook, aj as Log, ak as Logger, al as Materialized, am as Middleware, an as MiddlewareContext, ao as MiddlewareHandler, ap as MutateInput, aq as NotFound, ar as Notifications, as as OnDeleteAction, at as OrderBySpec, au as PALBASE_EXTENSIONS, av as PBRequest, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, az as PalError, aA as PalbaseAnalyticsClient, aB as PalbaseAnalyticsManagementNamespace, aC as PalbaseAnalyticsProperties, aD as PalbaseAnalyticsQueryNamespace, aE as PalbaseAttestAndroidParams, aF as PalbaseAttestAndroidResult, aG as PalbaseAttestiOSParams, aH as PalbaseAttestiOSResult, aI as PalbaseAuthAdminClient, aJ as PalbaseAuthClient, aK as PalbaseBatchOverrideOperation, aL as PalbaseBatchSetOverridesResult, aM as PalbaseBindDeviceParams, aN as PalbaseBucketClient, aO as PalbaseClearAllOverridesResult, aP as PalbaseClearOverrideResult, aQ as PalbaseCohortQueryInput, aR as PalbaseCohortResult, aS as PalbaseCollectionRef, aT as PalbaseCountQueryInput, aU as PalbaseCountResult, aV as PalbaseCreateLinkParams, aW as PalbaseDeviceInfo, aX as PalbaseDeviceTokenView, aY as PalbaseDocsClient, aZ as PalbaseDocumentRef, a_ as PalbaseDocumentSnapshot, a$ as PalbaseEmailClient, b0 as PalbaseEmailSendParams, b1 as PalbaseEmailSendResponse, b2 as PalbaseEventNamesResult, b3 as PalbaseEventsQueryInput, b4 as PalbaseEventsResult, b5 as PalbaseExtension, b6 as PalbaseFileObject, b7 as PalbaseFlag, b8 as PalbaseFlagContext, b9 as PalbaseFlagSource, ba as PalbaseFlagValue, bb as PalbaseFlagVariant, bc as PalbaseFlagsClient, bd as PalbaseFlagsServiceClient, be as PalbaseFunctionsClient, bf as PalbaseFunnelQueryInput, bg as PalbaseFunnelResult, bh as PalbaseIdentifyTraits, bi as PalbaseInboxClient, bj as PalbaseInboxListOptions, bk as PalbaseInboxListResult, bl as PalbaseInboxMessage, bm as PalbaseInboxSendParams, bn as PalbaseInboxSendResponse, bo as PalbaseInitialLink, bp as PalbaseInvokeOptions, bq as PalbaseLink, br as PalbaseLinkAnalytics, bs as PalbaseLinkDetails, bt as PalbaseLinksClient, bu as PalbaseListLinksOptions, bv as PalbaseListLinksResult, bw as PalbaseListOptions, bx as PalbaseMatchParams, by as PalbaseMultiChannelResponse, bz as PalbaseNotificationChannel, bA as PalbaseNotificationsClient, bB as PalbaseOverviewResult, bC as PalbasePreferences, bD as PalbasePreferencesClient, bE as PalbasePushClient, bF as PalbasePushSendParams, bG as PalbasePushSendResponse, bH as PalbaseQrCodeOptions, bI as PalbaseQuerySnapshot, bJ as PalbaseRealtimeClient, bK as PalbaseRegisterDeviceParams, bL as PalbaseRetentionQueryInput, bM as PalbaseRetentionResult, bN as PalbaseSession, bO as PalbaseSetOverrideResult, bP as PalbaseSetOverridesResult, bQ as PalbaseSignedUrlResponse, bR as PalbaseSmsClient, bS as PalbaseSmsSendParams, bT as PalbaseSmsSendResponse, bU as PalbaseStorageClient, bV as PalbaseTransformOptions, bW as PalbaseUpdateLinkParams, bX as PalbaseUploadOptions, bY as PalbaseUser, bZ as PalbaseUserDetailResult, b_ as PalbaseUsersQueryInput, b$ as PalbaseUsersResult, c0 as PalbaseVerifyRequestSignatureParams, c1 as PalbaseWhatsAppClient, c2 as PalbaseWhatsAppEvent, c3 as PalbaseWhatsAppSendParams, c4 as PalbaseWhatsAppSendResponse, c5 as PalbaseWhatsAppTemplate, c6 as PalbaseWhereOperator, c7 as PolicyBinOp, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cb as PolicyExprCtx, cc as PolicyExprRef, cd as PolicyMode, ce as PolicyOperand, cf as QueryInput, R as RateLimitConfig, cg as RawConstraintDef, f as RawPageOptions, ch as Realtime, ci as Ref, cj as RequestStore, ck as RowShape, b as RuntimeServices, cl as Secrets, cm as SecretsService, cn as SerializationFailure, co as SetShape, cp as SetValue, cq as ShutdownRunner, cr as SqlFragment, cs as Storage, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, cx as TableRef, cy as TooManyRequests, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cB as TxInsertValue, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cN as TxSetValue, cO as TxTable, cP as TxTables, cQ as TxWhere, cR as TxWireExpr, cS as TxWireGuard, cT as TxWireOp, cU as TxWireRef, cV as TxWireValue, cW as TypedDB, cX as TypedTable, cY as TypedTx, cZ as Unauthorized, c_ as UniqueViolation, c$ as UniqueWhere, d0 as UserT, d1 as VerifiedDevice, d2 as WhereFilter, d3 as WhereOp, d4 as __getRuntime, j as __requestALS, d5 as __resetLifecycleHooks, d6 as __runStartHooks, _ as __runWithRuntime, d7 as __setRuntime, d8 as backfill, d9 as bigint, da as boolean, db as can, dc as check, dd as col, de as dec, df as decrement, dg as defineMiddleware, dh as defineSchema, di as defineTable, dj as enumType, dk as exprCtx, dl as foreignKey, dm as freeze, dn as guard, dp as inc, dq as increment, dr as index, ds as installationRef, dt as integer, du as isPalbaseExtension, dv as isRetryable, dw as jsonb, dx as makeTypedDB, dy as now, dz as numeric, dA as onShutdown, dB as onStart, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dG as sqlFragment, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector, dM as withRetry } from './index-eN4KzGa5.js';
+import { M as ModuleClients, C as Container } from './index-yDno9Ju9.js';
+export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-yDno9Ju9.js';
 export { TableTypes, Tables } from './db/env.js';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.js';
-import { a as RouteOptions } from './registry-DJcvbomD.js';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-DJcvbomD.js';
+import { a as RouteOptions } from './registry-B8ddZiMY.js';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-B8ddZiMY.js';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 import { T as Token } from './module-Dl1KFVtc.js';
@@ -233,13 +233,22 @@ interface TableJSON {
     rawConstraints?: {
         name: string;
         up: string;
-        down: string | null;
     }[];
     checks?: {
         name: string;
         expr: string;
     }[];
     indexes?: IndexJSON[];
+    /** Canlıdan düşürülecek constraint adları (FR-008). Sıfır değerde OMIT. */
+    dropConstraints?: string[];
+    /** Tablo düzeyi çok sütunlu FOREIGN KEY'ler (FR-001). Sıfır değerde OMIT. */
+    foreignKeys?: ForeignKeyJSON[];
+    /** Koşullu FK'lar — donan demetler (FR-012). Sıfır değerde OMIT. */
+    freeze?: FreezeJSON[];
+    /** Guard'lar — bildirimsel kısıtın yetişemediği yazma redleri (FR-015). Sıfır değerde OMIT. */
+    guards?: GuardJSON[];
+    /** Bir kez koşacak veri düzeltmeleri (FR-033). Sıfır değerde OMIT. */
+    backfills?: BackfillJSON[];
     /**
      * appendOnly (FR-030): tablo yalnız INSERT kabul eder. Sıfır değerde OMIT —
      * bildirmeyen tablolar wire'da bayt-aynı kalır.
@@ -257,6 +266,8 @@ interface TableJSON {
  */
 interface IndexJSON {
     name: string;
+    /** `CREATE UNIQUE INDEX` (FR-007). Sıfır değerde OMIT. */
+    unique?: boolean;
     columns: string[];
     /** Partial index koşulu (FR-042) — filtre şekli `WhereFilter` ile aynı. */
     where?: unknown;
@@ -269,6 +280,75 @@ interface IndexJSON {
     /** Covering index — `INCLUDE (...)` (FR-043). */
     include?: string[];
 }
+/**
+ * Tablo düzeyi çok sütunlu FOREIGN KEY'in wire şekli — Go'nun `ForeignKeyJSON`'ı
+ * ile ALAN-ADI SÖZLEŞMESİ (FR-001). Bir ad değişirse wire sessizce kopar.
+ *
+ * `onUpdate`/`onDelete`/`match` sıfır değerinde OMIT: bildirmeyen bir FK
+ * Postgres'in varsayılanını (NO ACTION / MATCH SIMPLE) alır ve telde yer
+ * kaplamaz (NFR-006).
+ */
+interface ForeignKeyJSON {
+    name: string;
+    columns: string[];
+    refTable: string;
+    refColumns: string[];
+    onUpdate?: string;
+    onDelete?: string;
+    match?: string;
+}
+/**
+ * Koşullu FK'nın ("donan demet") wire şekli — Go'nun `FreezeJSON`'ı ile
+ * ALAN-ADI SÖZLEŞMESİ (C-8, FR-012).
+ *
+ * `when` politika ifade yapısının ta kendisi — `IndexJSON.where` ile aynı
+ * duruş: üçüncü bir yüklem lehçesi açmak, aynı sorunun iki yazımı demekti.
+ * Alanların hiçbiri opsiyonel değil: bir freeze'in koşulu, donan sütunları ve
+ * hedefi olmadan anlamı yok ve `toFreezeDef` bunları bildirim anında şart
+ * koşuyor. Sıfır değerde OMIT edilen şey DİZİNİN KENDİSİ (`TableJSON.freeze`).
+ */
+interface FreezeJSON {
+    name: string;
+    when: unknown;
+    columns: string[];
+    refTable: string;
+    refColumns: string[];
+}
+/**
+ * Bir guard'ın wire şekli — Go'nun `GuardJSON`'ı ile ALAN-ADI SÖZLEŞMESİ
+ * (C-4/C-8, FR-015).
+ *
+ * `when` ile `exists` AYRI alanlar: Postgres bir trigger'ın `WHEN` yan
+ * tümcesinde alt sorguya izin vermiyor (`cannot use subquery in trigger WHEN
+ * condition`), yani çapraz satır yüklemi gövdedeki `EXISTS` bloğuna inmek
+ * zorunda (FR-019). Ayrımı emitter'ın yükleme bakıp tahmin etmesi yerine wire'da
+ * taşımak, o kuralı bildirimin kendi şekline yazar.
+ *
+ * `detail`/`hint`/`column` sıfır değerde OMIT — bildirmeyen bir guard telde yer
+ * kaplamaz (NFR-006). `message` her zaman var: reddin kullanıcıya ulaşan tek
+ * çıktısı o.
+ */
+interface GuardJSON {
+    name: string;
+    event: string;
+    when?: unknown;
+    exists?: unknown;
+    message: string;
+    detail?: string;
+    hint?: string;
+    column?: string;
+}
+/**
+ * Bir backfill'in wire şekli — Go'nun `BackfillJSON`'ı ile ALAN-ADI SÖZLEŞMESİ
+ * (C-8, FR-033).
+ *
+ * `name` kimliğin TAMAMI: "koştu mu" sorusu ona göre cevaplanıyor, `sql`'e göre
+ * değil. Aynı adın altında değişen bir gövde ikinci bir koşu üretmez.
+ */
+interface BackfillJSON {
+    name: string;
+    sql: string;
+}
 /** C-11 wire şekli — Go'nun MemoryJSON'ıyla alan-adı sözleşmesi (D-019).
  * Beyansız tablolarda alan OMIT — eski şemalar bayt-aynı (NFR-B1). */
 interface MemoryJSON {
@@ -431,6 +511,134 @@ declare function publicChannel(opts?: {
 }): PublicEntry;
 declare function defineChannels(map: ChannelsInput): ChannelsDef;
 
+/**
+ * repository.ts — kiracıya kapsanmış CRUD'un TEK yazımı.
+ *
+ * Ölçülen kusur: tüketici katmanında 61 forwarding metodu vardı ve her biri
+ * aynı iki satırı tekrar ediyordu — kiracı kolonunu yükleme ekle, sonucu
+ * çevir. Aynı olan bir şeyi 61 kez yazmak onu 61 kez UNUTULABİLİR yapar; ve
+ * unutulan tek bir yüklem, RLS'in altında bir kiracının satırını başka bir
+ * kiracıya gösterir.
+ *
+ * ```ts
+ * export class TodoRepository extends defineRepository(
+ *   Database.public.todos,
+ *   { tenant: "household_id" },
+ * ) {}
+ * ```
+ *
+ * Satır anahtarı `id` DEĞİLSE adıyla verilir — `defineTable` bir `id` kolonu
+ * şart koşmuyor, birincil anahtar herhangi bir kolonda olabilir:
+ *
+ * ```ts
+ * export class DocRepository extends defineRepository(
+ *   Database.public.docs,
+ *   { tenant: "org_id", key: "slug" },
+ * ) {}
+ * ```
+ *
+ * `Database` AMBIENT kalır ve enjekte EDİLMEZ: istek kapsamlıdır, yani bir
+ * kurucuya kapatılan bir referans bir isteğin istemcisini bir başkasına
+ * taşırdı. Tablo erişimcisi argüman olarak geçer ve her çağrıda güncel istek
+ * kapsamını çözen proxy'ye iner; taban sınıfın kurucusu ARGÜMANSIZ kalır, o
+ * yüzden container onu ek metadata olmadan çözer.
+ */
+/**
+ * Repo'nun tablodan İSTEDİĞİ dört üye — `Database.public.<t>`'nin alt kümesi.
+ *
+ * Yüklemler `Record<string, unknown>`: kiracı kolonunun adı ÇALIŞMA ANINDA
+ * gelen bir değer, ve TypeScript jenerik bir anahtarla kurulan nesne
+ * literalini mapped type'a bağlayamaz (ölçüldü: `{ [k]: v }` → `{ [x: string]:
+ * V }`, `{ [P in K]: V }`'ye atanamaz). Kapsamı DAR tutup burada gevşetmek,
+ * çağıranın tarafında `as` yazmaktan farklıdır: dışa bakan yüzey — `list`,
+ * `find`, `insert`, `update`, `updateScoped`, `delete` — tamamen tipli kalır.
+ *
+ * `NoInfer`: `Row` YALNIZ `insert`'ün dönüşünden çıkarılır. `findMany` motorda
+ * jenerik (`select`/`with`) ve kısıtlarıyla örneklendiğinde ilişki anahtarları
+ * taşıyan BAŞKA bir satır tipi önerir; iki aday birleşince satır tipi sessizce
+ * genişlerdi.
+ */
+interface RepositoryTable<Row, Insert, Patch> {
+    insert(data: Insert): Promise<Row>;
+    findMany(q: {
+        where: Record<string, unknown>;
+        limit?: number;
+    }): Promise<NoInfer<Row>[]>;
+    updateMany(q: {
+        where: Record<string, unknown>;
+        set: Patch;
+    }): Promise<NoInfer<Row>[]>;
+    deleteMany(q: {
+        where: Record<string, unknown>;
+    }): Promise<number>;
+}
+/**
+ * Satır anahtarının VARSAYILANI: tablo bir `id` kolonu taşıyorsa `"id"`.
+ *
+ * `defineTable` bir `id` kolonu ŞART KOŞMUYOR — birincil anahtar herhangi bir
+ * kolonda `.primaryKey()` ile ya da `primaryKey: [...]` ile bildirilebiliyor.
+ * Bu yüzden anahtar sabit değil, PARAMETRE; ama `id` taşıyan tabloların
+ * (çoğunluk) hiçbir şey yazmaması gerekiyor.
+ */
+type DefaultRowKey<Row> = Extract<keyof Row & string, "id">;
+/**
+ * Anahtar bulunamadığında REDDİ ADIYLA söyleyen tip.
+ *
+ * `id`'si olmayan bir tabloda `key` verilmezse {@link DefaultRowKey} `never`
+ * olur ve `Row[never]` de `never`'dır: kapı doğru kapanır ama "type 'string' is
+ * not assignable to type 'never'" diyerek ÇAREYİ söylemez. Buradaki tek alanlı
+ * arayüz aynı reddi verir ve alanın adı hatanın içinde çareyi yazar.
+ */
+interface MissingRowKey {
+    "defineRepository: bu satırda `id` kolonu yok — anahtarı { key: \"...\" } ile adlandır": never;
+}
+/** Anahtar kolonunun DEĞER tipi; anahtar bilinmiyorsa {@link MissingRowKey}. */
+type RowKey<Row, PK extends keyof Row & string> = [PK] extends [never] ? MissingRowKey : Row[PK];
+/**
+ * Kiracıya kapsanmış repo yüzeyi. `K` kiracı kolonu, `Row[K]` onun DEĞERİ.
+ *
+ * `insert` yükünde kiracı kolonu YOKTUR: onu repo yazar — `Omit` bunu ifade
+ * edilemez kılıyor, anlatmıyor. `update`/`updateScoped` patch'i tablonun kendi
+ * `set` şeklidir ve kiracı kolonunu DIŞLAMAZ: satırı başka bir kiracıya
+ * taşımak tablonun `WITH CHECK` politikasının kararıdır, repo'nun değil — ve
+ * repo'nun yüklemi zaten çağıranın kiracısına kapanmış durumda.
+ */
+interface RepositoryOf<Row, Insert, Patch, K extends keyof Row & string, PK extends keyof Row & string = DefaultRowKey<Row>> {
+    /** Kiracının tüm satırları. */
+    list(tenant: Row[K]): Promise<Row[]>;
+    /** Kiracının bu anahtarlı satırı, ya da yoksa `null` — yokluk bir DEĞER. */
+    find(tenant: Row[K], id: RowKey<Row, PK>): Promise<Row | null>;
+    /** Satırı kiracıya YAZAR: kiracı kolonu yükte değil, burada. */
+    insert(tenant: Row[K], values: Omit<Insert, K>): Promise<Row>;
+    /**
+     * Kiracının bu id'li satırını günceller ve GÜNCEL satırı döner.
+     *
+     * Eşleşen satır yoksa `NotFound` ATAR — çağıran `!` yazmak ya da `null`
+     * dallanması yazmak zorunda kalmasın. Yokluğu DEĞER olarak isteyen
+     * {@link RepositoryOf.updateScoped} kullanır.
+     */
+    update(tenant: Row[K], id: RowKey<Row, PK>, patch: Patch): Promise<Row>;
+    /**
+     * {@link RepositoryOf.update} ile AYNI yüklem, ama bulunamazsa `null` döner.
+     *
+     * Tüketicinin bugün elle yazdığı `updateMany(…).then(rows => rows[0] ?? null)`
+     * kalıbının adı budur.
+     */
+    updateScoped(tenant: Row[K], id: RowKey<Row, PK>, patch: Patch): Promise<Row | null>;
+    /** Kiracının bu anahtarlı satırını siler. Yoksa bir şey olmaz. */
+    delete(tenant: Row[K], id: RowKey<Row, PK>): Promise<void>;
+}
+/**
+ * Kiracıya kapsanmış bir repo TABAN SINIFI üretir.
+ *
+ * Dönen sınıf `abstract`: doğrudan `new` edilemez, çünkü DI'ın çözeceği ad alt
+ * sınıfın adıdır (`TodoRepository`), üretilen anonim sınıfınki değil.
+ */
+declare function defineRepository<Row, Insert, Patch, K extends keyof Row & string, PK extends keyof Row & string = DefaultRowKey<Row>>(table: RepositoryTable<Row, Insert, Patch>, opts: {
+    tenant: K;
+    key?: PK;
+}): abstract new () => RepositoryOf<Row, Insert, Patch, K, PK>;
+
 declare function makeEnvDts(schemas: readonly SchemaDef[]): string;
 
 /**
@@ -1079,4 +1287,4 @@ declare function getJobManifest(ctor: object): JobManifest;
  */
 declare function getJobConfig(ctor: object, container: Container): ResolvedJob;
 
-export { type AuthHookEvent, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Container, Controller, type ControllerOptions, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, Get, Headers, Hook, type HookFn, type HookMeta, HttpError, Injectable, Job, type JobMeta, type JobOptions, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, PolicyExpr, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RoleNotDefined, Room, type RoomOptions, RouteOptions, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, Token, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __claimInjectables, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, controllersOf, defineChannels, defineDefaultAuth, defineError, getErrorRegistry, getHookConfig, getHookManifest, getJobConfig, getJobManifest, getRegisteredControllers, getWebhookConfig, getWebhookManifest, hooksOf, jobsOf, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, roomsOf, toSchemaJSON, webhooksOf };
+export { type AuthHookEvent, type BackfillJSON, Body, type ChannelAuthorizeCtx, type ChannelEntry, type ChannelGrant, type ChannelsDef, type ChannelsInput, Client, type ColumnJSON, Container, Controller, type ControllerOptions, type DefaultRowKey, type DefinedError, type DefinedErrorWithData, Delete, Deny, type DocumentHookEvent, type FileDeletedEvent, type FileUploadedEvent, type ForeignKeyJSON, type FreezeJSON, Get, type GuardJSON, Headers, Hook, type HookFn, type HookMeta, HttpError, Injectable, Job, type JobMeta, type JobOptions, type MissingRowKey, type ModuleClientsConfig, type ModuleTransport, On, OnAuthorize, OnEmpty, OnFirst, OnJoin, OnLeave, OnMessage, OptionalUser, PalbaseModuleError, PalbaseResult, Param, Patch, PolicyExpr, type PolicyJSON, Post, Put, Query, QueryParams, type RegisteredError, type RepositoryOf, type RepositoryTable, Req, RequestId, type RequestOptions, type ResolvedHookClass, type ResolvedJob, type ResolvedWebhook, RoleNotDefined, Room, type RoomOptions, RouteOptions, type RowKey, SchemaDef, type SchemaJSON, type SignatureSpec, type StackNames, type TableJSON, Token, TraceId, type TransportConfig, User, Webhook, type WebhookEventHandler, type WebhookMeta, type WebhookOptions, type WebhookProvider, type WebhookRequest, __claimInjectables, __resetDefaultAuth, __resetRegisteredControllers, assertZeroArgConstructor, buildModuleClients, controllersOf, defineChannels, defineDefaultAuth, defineError, defineRepository, getErrorRegistry, getHookConfig, getHookManifest, getJobConfig, getJobManifest, getRegisteredControllers, getWebhookConfig, getWebhookManifest, hooksOf, jobsOf, makeEnvDts, makeHttpClient, makeStackDts, ownerOnly, publicChannel, resolveEffectiveAuth, roomsOf, toSchemaJSON, webhooksOf };