@palbase/backend 39.1.4 → 39.1.6

package/MIGRATION.md

@@ -0,0 +1,577 @@
+# 39.0.0 — `raw(name, up, { down })` KALDIRILDI, `DBOps` bir üye kazandı
+
+## 1. `raw()` artık İKİ argüman alıyor
+
+`down` seçeneği, hiç koşmayan bir down-migration'a besleniyordu: yazarına
+sahip olmadığı bir teardown'a sahip olduğunu düşündürüyordu.
+
+```ts
+// ÖNCE (39.0.0'da derlenmiyor)
+raw("chk_positive", "ALTER TABLE orders ADD CONSTRAINT chk_positive CHECK (total > 0)", {
+  down: "ALTER TABLE orders DROP CONSTRAINT chk_positive",
+});
+
+// SONRA — düşürmeyi BİLDİRİN
+dropConstraints: ["chk_positive"],
+```
+
+Çoğu `raw()` bu majorda zaten gereksiz: tablo düzeyi çok sütunlu `foreignKeys`,
+`index(n).unique().where(...)` (partial UNIQUE), tipli `check(name, expr)`,
+koşullu FK (`freeze`), reddedici `guards`, bir kez koşan `backfills` ve
+`dropConstraints` geldi. Önce bunlara bakın; `raw()` artık bir kaçış kapısı.
+
+## 2. `raw()` gövdeleri bir YETKİ kapısından geçiyor
+
+Rol yaratan, sahiplik devreden, yetki dağıtan ya da `search_path` kaydıran
+ifadeler **push'u reddediyor**. Açık kalan tek grant biçimi:
+
+```sql
+GRANT EXECUTE ON FUNCTION … TO <platform rolü>
+```
+
+Bu bir ALLOWLIST — kapı sınıflandıramadığını reddeder. Reddedilen bir gövdeyi
+"geçici olarak" başka biçimde yazmaya çalışmayın; bildirimsel yüzeyi kullanın.
+
+## 3. Kendi `DBOps` uygulamanız varsa `lockRowsWhere` ekleyin
+
+`DBOps` — ve onun üzerinden `DBClient`, `EnvServiceDatabase`, `EnvTypedDatabase` —
+ZORUNLU bir `lockRowsWhere` üyesi kazandı. Yalnız kendi uygulamasını yazan
+projeleri etkiler; SDK'nın kendi sınıflarını kullanıyorsanız yapacak bir şey yok.
+
+`TableJSON.rawConstraints[]` elemanı da `down` alanını kaybetti — şema JSON'unu
+elle okuyan bir aracınız varsa o alanı beklemeyin.
+
+# 38.0.0 — `push` artık PLAN istiyor (ve `auth` göçü kendini onarıyor)
+
+## 1. `palbase plan` → `palbase push`, bu sırayla
+
+`push` plansız koşmuyor. `palbase plan` yükseltmenin ne yapacağını modül modül
+gösterir ve hedef sürümün her ön kontrolünü yazar; `push` o planı taşır.
+
+```bash
+palbase plan     # ne olacağını OKUYUN
+palbase push     # planı taşır
+```
+
+Bundle, koşan SDK ya da şema planı siz planladıktan sonra kaydıysa push neyin
+değiştiğini ADLANDIRIR ve yeni bir plan ister. Platform da aynı şeyi kontrol
+eder, yani eski bir plan kaymış bir projeye karşı tekrar oynatılamaz.
+
+> Planın nereye yazıldığı 0.62.x'te değişti: artık checkout'unuzda değil,
+> `~/.palbase/checkouts/<hash>/plan.json` altında. Bu bir göç işi değil —
+> eski `.palbase/plan.json` dosyanız varsa silin.
+
+## 2. Yükseltmeler TAKAStan ÖNCE göç ediyor
+
+Bir proje daha yeni bir `@palbase/backend`'e geçtiğinde, o sürümün ihtiyaç
+duyduğu göçler önce canlı veritabanına — yeni sürümün kendi migrator'ıyla —
+uygulanır, ve ancak ondan sonra yeni sürüm devralır. Takas saniyeler süren bir
+restart'tır; istekler düşmez, bekler. Göç koşamazsa **hiçbir şey değişmez**:
+proje tam olduğu gibi servis etmeye devam eder.
+
+Sizin yapacağınız bir şey yok. Yalnız bilin: `push` sonrası kısa bir restart
+normaldir ve bir göç hatası artık projeyi yarıda bırakmaz.
+
+## 3. BREAKING — `auth` şeması, ve sizden bir şey İSTENMİYOR
+
+`000014` sosyal-auth göçü, OAuth yapılandırılmış her projede düpedüz reddediyor
+ve operatörden elle envanter çıkarıp sıfırlamasını istiyordu; red defteri kirli
+bırakıyor ve stack'i açılamaz hâle getiriyordu. Bu davranış kaldırıldı.
+
+# 37.0.0 — OAuth istemcileri PLATFORM BAŞINA yapılandırılıyor
+
+## 1. Sağlayıcı-geneli kimlik bilgisi yüzeyi KALDIRILDI
+
+Web, iOS, macOS ve Android artık mevcut `oauth` yapılandırması ve `palbase link`
+akışı üzerinden AYRI AYRI yapılandırılıyor. Tarayıcı kimlik bilgileri, native
+client ID'leri, Google server client ID'leri, Apple Services ID'leri ve native
+bundle ID'leri birbirinden ayrı kalır.
+
+Eski sağlayıcı-geneli kimlik bilgisi ve token değişim arayüzleri kaldırıldı.
+
+## 2. Göç sırası ÖNEMLİ
+
+```
+1. backend SDK'yı ve istemci SDK'ları BİRLİKTE yükseltin
+2. `palbase link` ile bağlı yapılandırmanızı YENİDEN ÜRETİN
+3. ancak ondan sonra migration 000014
+```
+
+Bu sıra bir öneri değil: SDK'lar 000014'ten önce yükseltilmezse OAuth kaydı
+eski şekilde kalır. OAuth artık seçili-istemci işlemleri kullanıyor — katı
+audience/issuer/nonce/redirect doğrulaması, kalıcı tamamlanma kanıtı, açık
+kimlik bağlama ve MFA-farkında sonuçlar.
+
+# 36.0.0 — `defineQuery` ve `defineWorkload` KALDIRILDI, dönüş tipi ÇIKARIMI geldi
+
+## 1. `Query.run(...)` → sıradan CRUD
+
+`defineQuery`, sorgu manifestleri, hazırlanmış sorgu sarmalayıcıları,
+`defineWorkload` ve atomic `workload`/`conflictKeys` seçenekleri kaldırıldı.
+**Uyumluluk katmanı YOK.**
+
+```ts
+// ÖNCE
+const Query = defineQuery({ /* projeksiyon */ });
+const rows = await Query.run(Database, input);
+
+// SONRA — servis içinde sıradan tipli CRUD
+const rows = await this.todos.findMany({ user_id: userId });
+```
+
+Çakışma için: ilişkili işlemleri AYNI transaction handle'ında tutun ve
+**sıralı** PostgreSQL satır kilitleri kullanın (`$lockRowsWhere`, 39.0.0).
+
+## 2. Controller dönüş anotasyonunu ÇIKARIN
+
+JSON şekli çıkarılabiliyorsa controller'ın dönüş tipini yazmayın: build
+doğrulayıcıyı ve istemci sözleşmesini kendisi türetir.
+
+```ts
+// ÖNCE
+async list(): Promise<TodoListSchema> { … }
+
+// SONRA — tipli CRUD için anotasyonu OMIT edin
+async list() { return this.todos.list(); }
+```
+
+Açık ya da desteklenmeyen sözleşmeler için adlandırılmış Zod şeması yazmaya
+devam edin (bilinmeyen JSON, özyinelemeli değerler, sınıflar). `any` kullanmayın.
+
+> **CLI ve core dev runtime'ı BİRLİKTE yükseltin** — tip çıkarımı ikisinin
+> aynı sürümde olmasını gerektiriyor.
+
+## 3. `workload` bildirimlerini silin
+
+Veritabanı admission'ı artık istek CRUD'u, atomic transaction'lar, service-role
+işlemleri ve zamanlanmış iş arasında PAYLAŞILIYOR ve operatör kuyruk ayarları
+uygulama kodundan ayrı. Kuyruk/eşzamanlılık ayarı core'un işi.
+
+# 35.0.0 — bildirim istemcisi WhatsApp üyesini ZORUNLU kılıyor
+
+Backend bildirim istemcisi, diğer kanallarıyla tutarlı olarak WhatsApp üyesini
+artık zorunlu taşıyor. `PalbaseNotificationsClient`'ın **kendi uygulamasını ya da
+test adaptörünü yazan** projeler o üyeyi eklemeli.
+
+Mevcut `send` imzaları DEĞİŞMEDİ. Bildirim mesajları ve tercihleri artık bir
+teslim-kanalı tipi kullanıyor; Meta şablon çevirileri eski gövde-şablonu
+API'sinden ayrı.
+
+> Sağlayıcı bağlantı ayarları mesaj dili ya da şablon adı TAŞIMAZ — bunlar
+> şablon kataloğuna ve her mesajın locale'ine aittir.
+
+Üyenin zorunlu olması bilinçli: runtime bu istemciyi her zaman yaratır, ve
+opsiyonel işaretlemek çağıranı SDK'nın zaten garanti ettiği bir yeteneği
+test etmeye zorlardı.
+
+# 34.0.0 — transaction SAHİPLİĞİ açık, timestamp'ler mikrosaniye
+
+## 1. Savepoint planında sıfırdan farklı retry REDDEDİLİYOR
+
+`Database.$atomic(async tx => …)` BEGIN'den kalıcı COMMIT'e kadar sahiplenir:
+karar okumaları, izolasyon ve doğrulanmış serialization/deadlock rollback'lerinin
+sınırlı yeniden denemeleri dahil. Kaybolan bir COMMIT onayı bir kez raporlanır
+ve yazma **asla otomatik tekrarlanmaz**.
+
+```ts
+// ÖNCE — artık reddediliyor
+await Database.$transaction(fn, { retries: 3 });
+
+// SONRA
+await Database.$atomic(async (tx) => { … });
+```
+
+İstek yazmaları ve `$transaction` savepoint planları mevcut sınırlarını korur.
+Eski retry sözünü tutmak, bayat bir snapshot'a karşı sessizce yeniden koşardı.
+
+## 2. Timestamp'ler ALTI ondalık basamak, UTC
+
+Şema-farkında timestamp'ler PostgreSQL mikrosaniyelerini korur ve altı
+ondalık basamaklı UTC string'leri döndürür.
+
+```
+ÖNCE:  2026-09-11T18:25:27.193Z      (üç basamak)
+SONRA: 2026-09-11T18:25:27.193920Z   (altı basamak)
+```
+
+Timestamp string'lerini KARŞILAŞTIRAN ya da tam üç basamak BEKLEYEN tüketiciler
+bu daha hassas biçimi kabul etmeli. Ham SQL sürücünün değer sözleşmesini korur.
+
+To-one ilişkileri artık LIMIT'i doğru uyguluyor — `0` dahil.
+
+## 3. Kendi DB adaptörünüz varsa yeni üyeleri ekleyin
+
+`DBOps`, `DBClient`, `TypedDB`, `TypedTable` ve üretilen ortam arayüzlerinin
+kendi uygulamaları, yeni zorunlu sorgu, sayfalama, tekil arama, komut ve
+tanılama üyelerini uygulamalı. Bunları opsiyonel döndürmek, SDK'yı yetenek
+kontrolü olmadan kullanılamaz kılardı.
+
+Pakete gömülü fake, PostgreSQL'e özgü garantileri AÇIKÇA reddeder.
+
+## 4. Sayısal kolonlar callback filtrelerinde METİN operatörlerini reddediyor
+
+TypeScript'in excess-property açığı geçersiz SQL üretiyordu; kapandı.
+
+# 33.0.0 — `Flags.$asService()` TİPTE de var (yayınlanmış bir kusurun düzeltmesi)
+
+32.0.0'da `Flags.$asService()` YAZILDI ama TÜKETİCİYE ULAŞMIYORDU: ambient
+singleton ham istemcinin tipiyle (`PalbaseFlagsClient`) anote edilmişti ve o
+annotation, `Object.assign`'ın kattığı `$asService`'i public tipten SİLİYORDU.
+
+    TS2551: Property '$asService' does not exist on type 'PalbaseFlagsClient'.
+            Did you mean 'asService'?
+
+Derlenen tek yol (`asService()`) ise tasarım gereği FIRLATIYOR — yani
+kullanıcılar arası flag yazma 32.0.0'da tamamen kapalıydı. Singleton artık
+kendi tipini taşıyor (`PalbaseFlagsAmbient`), tıpkı `Database`'in
+`EnvTypedDatabase` taşıması gibi. Kod değişikliği gerekmiyor; 33.0.0'a yükselin.
+
+# 32.0.0 — kolon codec'leri ve `$` sözünün tutulması: göç notu
+
+## 1. `.transform<T>()` artık REDDEDİLİYOR — `.asNumber()` / `.asDecimal()` kullanın
+
+```ts
+// ÖNCE — derleniyordu, ama üretilen tip YALAN SÖYLÜYORDU
+amount: numeric().transform<number>({ fromDb: Number, toDb: String })
+
+// SONRA
+amount: numeric().asNumber()
+```
+
+**Neden kaldırıldı:** `transform`'un hedef tipi (`<number>`) bir TİP
+PARAMETRESİDİR ve çalışma zamanında YOKTUR. `palbase-env.d.ts`'i üreten adım
+şemanın çalışma zamanı nesnesini okuyor, yani o tipi hiç öğrenemiyordu:
+`bigint`/`numeric` koşulsuz `string` basılıyor, motor ise `fromDb`'yi uygulayıp
+`number` döndürüyordu. Tip, çalışma zamanının yaptığının TERSİNİ söylüyordu — ve
+sessizce. Bu, yanlış bir tipten daha kötüdür, çünkü görünmez.
+
+Codec TİPLENMEK yerine ADLANDIRILIR: ad `_def`'e düşer, çalışma zamanı
+nesnesiyle üretece ulaşır, ve hem dönüşüm hem yayılan TypeScript tipi ondan
+türer. Tek bildirim, tek gerçek.
+
+| Bildirilen | Üretilen tip | Çalışma zamanı |
+|---|---|---|
+| `numeric()` / `bigint()` | `string` | dokunulmaz |
+| `.asNumber()` | `number` | `Number(v)` ↔ `String(v)` |
+| `.asDecimal()` | `string` | `String(v)` (açıkça BİLDİRİLMİŞ) |
+
+Yalnız `bigint()` ve `numeric()` üzerinde; başka bir kolon tipinde çağrılırsa
+adıyla reddedilir. `.asNumber()` 2^53'ün üstünde hassasiyet kaybeder — o aralık
+için `.asDecimal()`.
+
+`palbase build` codec'siz bir `.transform<T>()` görürse tabloyu ve kolonu
+adlandırarak reddeder; sessizce `string` basmaz.
+
+## 2. `Flags.asService()` → `Flags.$asService()`
+
+```ts
+// ÖNCE
+await Flags.asService().setOverrideForUser("u_9", "checkout", true);
+// SONRA
+await Flags.$asService().setOverrideForUser("u_9", "checkout", true);
+```
+
+Sistem üyeleri `$` önekli (27.0.0 §3) ve `Database` bunu zaten yapıyordu;
+`Flags`'in JSDoc'u "exactly like `Database.$asService()`" diye söz veriyordu ama
+söz tutulmamıştı. Eski ad SESSİZCE çalışmaz: çağrılınca yeni adı söyleyerek
+fırlatır.
+
+Ham `PalbaseFlagsClient.asService()` DEĞİŞMEDİ — o bir iç seam ve singleton ona
+forward eder.
+
+## 3. `fakeDatabase().db` artık TİPLİ yüzey — ham istemci `raw`'da
+
+```ts
+// ÖNCE — db, çıplak DBClient'tı
+const { db } = fakeDatabase();
+await db.insert("todos", { id, title });
+
+// SONRA — db, yazarın gerçekte kullandığı yüzey
+const { db, raw } = fakeDatabase();
+await db.$insert("todos", { id, title });        // ham op'lar `$` önekli
+await db.public.todos.findMany({ where: … });     // tipli şema yüzeyi
+```
+
+`db` artık üretimdeki `Database`'i kuran AYNI fonksiyonla kuruluyor, yani
+sahtenin yüzeyi gerçeğinden ayrışamaz. Doğrudan `db.insert(...)` yazan çağrılar
+`db.$insert(...)` olur.
+
+**DAVRANIŞ da değişti:** eşleşmeyen bir `update` artık **`null`** döndürüyor —
+motorun her zaman döndürdüğü şey. Sahte eskiden uydurma bir satır
+(`{ id, ...applied }`) veriyor ve onu `updated()`'a da yazıyordu. Dönüşünü
+kullanan bir tüketici testi artık `null` üzerinde `TypeError` alır; bildirilen
+tip zaten `| null` olduğu için derleyici uyarmaz, o yüzden burada yazıyor.
+
+Aynı sınıftan ikinci bir düzeltme: `updateMany(…, { returning: false })` artık
+**sayı** döndürüyor (motor gibi), dizi değil. `const n = await updateMany(…,
+{ returning: false }); if (n === 0) throw` guard'ı sahtede HİÇ çalışmıyordu.
+Ve `updateMany` yazdığını artık `updated()`'a kaydediyor.
+
+**Ambient runtime'a `raw` verilir, `db` DEĞİL:**
+
+```ts
+withServices({ Database: fake.raw }, () => …)
+```
+
+`RuntimeServices.Database` ham istemcidir — ambient `Database` singleton'ı onu
+SARAN şeydir. `db` verilirse yüzey iki kez sarılır ve her `$op` ıskalar.
+
+## 4. Değişken tablo adıyla `tx.public[t]` derlenmiyor (değişiklik değil, BELGE)
+
+Bu bir 31.0.0 kırıcısı değil; hiç çalışmamış bir yüzeyin artık YAZILI olması.
+
+```
+error TS2590: Expression produces a union type that is too complex to represent.
+```
+
+**Ölçüldü:** yedi tabloya kadar temiz, **sekiz tabloda düşüyor** (12, 20, 26, 40
+tabloda da). Sınırı belirleyen tablo sayısı ile tabloların birbirinden FARKLI
+relation ad kümesi taşıması; **kolon sayısı ETKİLEMİYOR** (8 tablo × 2 kolon
+düşüyor, 4 tablo × 200 kolon temiz), yani "kolonlarını azalt" bir çare değildir.
+
+Sebep TypeScript'in kendi karmaşıklık tavanı: değişken bir anahtar, derleyiciyi
+her tablonun `where` parametresini kesiştirmeye zorluyor.
+
+**Çare:** tablo adını literal yazın —
+
+```ts
+await Database.$transaction((tx) => [tx.public.payments.deleteWhere({ id })]);
+```
+
+— ya da ad gerçekten çalışma zamanında belirleniyorsa ham op'ları kullanın
+(`Database.$query`, `Database.$deleteMany`). Aynı sınırı Kysely v0.28'de
+kaldırdı, Drizzle'da hiç olmadı.
+
+# 25.1.0 → 27.x — modül + DI: GERİYE DÖNÜK göç notu
+
+**26.0.0 npm'e HİÇ YAYINLANMADI.** Registry 25.1.0'dan sonra doğrudan 27.0.0'ı
+gösterir. 26.0.0 git'te kesildi ama yayınlanmadığı için İÇERİĞİ 27.0.0 ile
+birlikte indi — yani 25.1.0'dan yükselen bir proje TEK yükseltmede İKİ major'ın
+kırıcılarını aldı, ve bunlardan biri hiç belgelenmemişti. Bu bölüm o eksiği
+kapatıyor. Aşağıdakiler 27.0.0'ın veri erişim değişikliklerine EK'tir.
+
+## A. `controllers/` + `services/` → `modules/<alan>/`
+
+Keşif artık dizin adından değil MODÜL bildiriminden. Her alan kendi klasöründe
+bir `*.module.ts` taşır:
+
+```ts
+@Module({
+  controllers: [NotesController as Token],
+  providers: [NoteService as Token, DbNoteRepo as Token],
+  exports: [],   // bu modülün DIŞARIYA açtığı sınıflar
+  imports: [],   // bu modülün ERİŞEBİLECEĞİ modüller
+})
+export class NotesModule {}
+```
+
+Dört liste dört ayrı soruyu cevaplar: neyi SAHİPLENİYOR (`providers`), hangi
+giriş noktalarını (`controllers`), kendi sınıflarından hangisine BAŞKASI
+erişebilir (`exports`), kimin export'una BU erişebilir (`imports`).
+
+**Hiçbir yerde listelenmemiş bir sınıf YOKTUR:** build onu adıyla reddeder ve
+sınıf rota tablosuna, dispatcher'a ya da OpenAPI belgesine hiç ulaşmaz.
+
+Kök modül YOKTUR ve mount edilecek bir yer de yoktur — sağlık probu bile
+`modules/health/`, diğerleri gibi bir alan. Kuralın istisnası olmaması, "alan
+eklemek" ile "klasör eklemek"i aynı şey yapan şeydir.
+
+Bağımlılıklar KURUCUDAN gelir (`emitDecoratorMetadata` şart). Testte ikame
+`isolated().with(Token, sahte)` ile yapılır.
+
+> `tsconfig.json`'ın `include`'unu da kontrol edin: `controllers/`,
+> `services/`, `models/` diye SAYAN bir liste `modules/` düzeninde HİÇBİR ŞEYLE
+> eşleşmez, `tsc --noEmit` sıfır dosya derler ve **0 ile çıkar** — sessiz bir
+> yeşil. Şablon artık tek bir `"**/*.ts"` kullanıyor.
+
+## B. `@Job` ve `@Webhook` artık `name` İSTİYOR — ve varsayılanı YOK
+
+```ts
+@Job({ name: "nightly-rollup", schedule: "0 3 * * *" })
+@Webhook({ name: "stripe-payments", secret: { env: "STRIPE_WEBHOOK_SECRET" } })
+```
+
+> ⚠️ **DOSYASINI YENİDEN ADLANDIRAN BİR PROJE, CANLI WEBHOOK URL'İNİ SESSİZCE
+> KAYBEDİYORDU.** Kimlik dosyanın YERİNDEN geldiği sürece
+> `stripe.webhook.ts` → `payments.webhook.ts` yeniden adlandırması,
+> gönderenin yapılandırdığı `/webhooks/stripe`'ı çözülemez hâle getiriyordu ve
+> hiçbir şey bunu söylemiyordu. Aynı şey job'lar için de geçerliydi: dosya adı
+> değişince scheduler BAŞKA bir job başlatıyordu.
+
+Bu yüzden `name` zorunlu ve VARSAYILANSIZ: bir varsayılan, kimlik için İKİNCİ
+bir kaynak olurdu. Eksik ya da boş `name` açılışta adıyla fırlatır. Şekil:
+küçük harf, rakam ve tire (bir URL'e ve bir log satırına ulaşıyor).
+
+**Yükselirken:** her `@Job`/`@Webhook`'a bugünkü DOSYA ADINDAN türeyen adı
+yazın — böylece scheduler satırı ve webhook URL'i DEĞİŞMEZ. Adı sonradan
+değiştirmek isterseniz bu, göndereni yeniden yapılandırmayı gerektiren ayrı bir
+karardır.
+
+# 27.0.0 — veri erişim yüzeyi: göç notu
+
+Bu sürüm **yedi kırıcı değişiklik** taşıyor. Hepsi aynı sebepten: aynı iş için iki
+uyumsuz kapı vardı (`Database.tables.x.findMany()` ve `Database.query()`),
+aralarında geçiş yoktu, ve yetmediğinde geliştirici her şeyi bırakıp ham SQL'e
+geçiyordu — orada tipi de RLS yardımını da kaybederek.
+
+**Codemod yok, ve bu bilinçli.** Yedisi de DERLEME hatası veriyor: kırılma
+sessiz değil, `tsc` size tam olarak nerede olduğunu söylüyor. Bir codemod'un
+sessizce yanlış dönüştürdüğü bir çağrı, elle düzeltilen bir hatadan pahalıdır.
+
+`deploy/fixture` bu notun uygulanabilir olduğunun kanıtı: 41 derleme hatasıyla
+başladı, sıfırla bitti, ve tek satır susturma (`as never`) kalmadı.
+
+---
+
+## 1. `Database.tables.x` → `Database.public.x`
+
+```diff
+- await Database.tables.todos.findMany(...)
++ await Database.public.todos.findMany(...)
+```
+
+`tables` ara katmanı kalktı. Şema adı artık YOLUN kendisi.
+
+## 2. `Database.schema("billing").tables.x` → `Database.billing.x`
+
+```diff
+- await Database.schema("billing").tables.invoices.findMany(...)
++ await Database.billing.invoices.findMany(...)
+```
+
+Bildirilmemiş bir şema adı artık derleme hatası — eskiden çalışma zamanında
+bulunuyordu.
+
+## 3. Sistem üyeleri `$` önekli
+
+```diff
+- await Database.query("select 1")
+- await Database.transaction(tx => ...)
+- Database.asService()
++ await Database.$query("select 1")
++ await Database.$transaction(tx => ...)
++ Database.$asService()
+```
+
+**Neden:** `transactions` adlı bir tablo fintech'te neredeyse kaçınılmaz ve
+`transaction` bir sistem üyesiydi. `$` öneki çakışmayı MATEMATİKSEL olarak
+imkânsız kılıyor: şema doğrulayıcısı bir tablo adının `$` ile başlamasına izin
+vermiyor.
+
+Etkilenen üyeler: `$query`, `$transaction`, `$asService`, `$insert`, `$put`,
+`$update`, `$delete`, `$findById`, `$findMany`, `$updateMany`, `$deleteMany`,
+`$count`, `$search`, `$similar`, `$recommend`, `$facets`, `$supersede`,
+`$attempt`, `$claim`, `$lockRows`, `$advisoryXactLock`.
+
+## 4. `$query` generic'siz `unknown[]` döndürür
+
+```diff
+- const rows = await Database.$query("select count(*)::int as n from todos");
+- rows[0].n                                    // derleniyordu, doğrulanmıyordu
++ const rows = await Database.$query<{ n: number }>("select count(*)::int as n from todos");
++ rows[0].n                                    // şekli SİZ söylediniz
+```
+
+**Neden:** eski `Row[]` dönüşü BİLİNMEYENİ biliniyormuş gibi sunuyordu.
+TypeScript bir SQL string'ini okuyamaz; `rows[0].n` derleniyordu ama `n` diye bir
+alan olduğunu kimse doğrulamamıştı.
+
+## 5. `findMany(where, opts)` → `findMany({ where, ...opts })`
+
+```diff
+- await Database.public.todos.findMany({ done: false }, { limit: 10 })
++ await Database.public.todos.findMany({ where: { done: false }, limit: 10 })
+```
+
+**Neden:** iki argümanlı biçimde `findMany({ limit: 10 })` yazmak sessizce
+"limit adlı kolonu 10'a eşit satırlar" demekti. Tek obje bu belirsizliği
+kaldırıyor. Aynı değişiklik `updateMany`, `deleteMany`, `count` için de geçerli.
+
+## 6. `upsert(data, { onConflict })` → `put({ data, onConflict })` — ya da `claim()`
+
+```diff
+- await Database.public.settings.upsert({ user_id, theme }, { onConflict: ["user_id"] })
++ await Database.public.settings.put({ data: { user_id, theme }, onConflict: ["user_id"] })
+```
+
+**Ve idempotency istiyorsanız `put` DEĞİL `claim`:**
+
+```ts
+const { inserted, row } = await Database.public.payments.claim(
+  { idem_key: req.headers["idempotency-key"] },
+  { amount, user_id },
+);
+if (!inserted) return row;   // aynı istek ikinci kez geldi
+```
+
+**Neden:** `upsert` tek isim altında iki niyet taşıyordu ve ikincisi için
+ÖLÇÜLMÜŞ biçimde yanlıştı — `ON CONFLICT DO UPDATE` ikinci çağrının verisiyle
+birincininkini EZİYOR (canlıda ölçüldü: 10.00 → 999.00).
+
+`tx.tables.x.upsert()` de `put()` oldu; aynı iş için transaction içinde ve
+dışında iki farklı yazım kalmasın diye.
+
+## 7. `indexes: [{name, columns}]` → `indexes: (c) => [index(name).on(...)]`
+
+```diff
+- indexes: [{ name: "orders_status_idx", columns: ["status"] }]
++ indexes: (c) => [index("orders_status_idx").on(c.col("status"))]
+```
+
+**Ve aynı biçim `policies` için de:**
+
+```diff
+- policies: [policy("own").using("owner = auth.uid()")]
++ policies: (p) => [policy("own").using(p.col("owner").eq(p.auth.uid()))]
+```
+
+**Neden:** kolon adları artık DERLEMEDE doğrulanıyor. Bir RLS politikasında
+yanlış kolon adı yetki hatasıdır ve eskiden ancak deploy sırasında
+`CREATE POLICY` çalışırken görülüyordu.
+
+Callback olmasının sebebi teknik: index ve politika tablo tanımının İÇİNDE
+bildiriliyor, yani `orders.status` yazmak mümkün değil — `orders` bağlaması o
+noktada henüz kurulmamış oluyor. Kolon bağlamı callback'ten geliyor.
+
+Ham string kaçış kapağı KALDI: `policy("x").using("<sql>")` çalışmaya devam
+ediyor, ama orada kolon doğrulaması yok ve hata deploy anında geliyor.
+
+---
+
+## Yeni yüzey — kırıcı olmayanlar
+
+Bunlar için bir şey yapmanız gerekmiyor; kademeler ham SQL'e düşmeden yukarı
+çıkmanız için var.
+
+| Ne | Ne zaman |
+|---|---|
+| `col("x")` | kolon-kolon karşılaştırma: `{ total: { gt: col("amount_paid") } }` |
+| `increment(n)` / `decrement(n)` | sayaç: tek statement, lost update yok |
+| `sqlFragment` | tipli filtre yetmediğinde — `select`/`orderBy`/`limit`/RLS çalışmaya devam eder |
+| `select: [...]` | projeksiyon: dönüş tipi `Pick<Row, K>`'ye daralır |
+| `OR` / `AND` / `NOT` | boolean bileşim |
+| `contains` / `startsWith` / `isNull` | metin ve null operatörleri |
+| `claim(unique, extra)` | idempotency anahtarı |
+| `$lockRows(table, ids)` | deterministik kilit sırası — deadlock önler |
+| `$advisoryXactLock(key)` | satırı olmayan iş için ad kilidi |
+| `$transaction(fn, { retry })` | serileştirme hatasında yeniden dener |
+| `appendOnly: true` | tabloda `update`/`delete`/`put`/`supersede` üyeleri TİPTE YOK, motor onları adıyla reddediyor, veritabanında REVOKE + RESTRICTIVE policy + BEFORE UPDATE/DELETE trigger |
+| `counter()` | kolonun `increment()` ile güncellendiğini bildirir; plan HOT çakışmasını uyarır |
+| `existsIn(table, row => …)` | üyelik tabanlı kiracılık — korelasyonlu EXISTS |
+| `numeric().transform<T>()` | para tipini bir kez şemada tanımlayın |
+
+## Otomatik olan şeyler
+
+Bunları siz istemeden sistem yapıyor; plan çıktısı hepsini gerekçesiyle gösterir.
+
+- **FK kolonlarına index** — Postgres foreign key'i otomatik indekslemez ve bedeli
+  her JOIN'de, her `ON DELETE CASCADE`'de ödenir. `references(..., { index: false })`
+  ile kapatılır.
+- **Politika filtre kolonuna index** — kiracı bunu kendi bulamaz: yazdığı sorgu
+  `WHERE status='open'`, yavaşlığın sebebi hiç yazmadığı `tenant_id` predikatı.
+- **`auth.uid()` → `(SELECT auth.uid())`** — satır başına değil statement başına
+  bir kez. Ölçüldü: politikada satır-başına çalışan bir fonksiyonla
+  71.958 ms → 10 ms.
+- **`TO <rol>`** — her politikada, roller boşsa `TO PUBLIC`.
+- **`CREATE INDEX CONCURRENTLY`** — var olan tabloya index eklemek yazmaları
+  bloklamaz; migration transaction'ının dışında koşar.

package/README.md

@@ -1,23 +1,69 @@
 # @palbase/backend
 
-The backend SDK for Palbase. Write file-based TypeScript endpoints, schema,
-workers, jobs, hooks, and webhooks that run in the Palbase managed runtime.
+The backend SDK for Palbase. Write TypeScript class controllers, services, and
+schema that run in the Palbase managed runtime as a typed HTTP API — a
+`@Module` says what exists, who owns it, and what it may reach; a class no
+module lists does not exist.
 
 ```ts
-import { defineEndpoint, z, Database } from "@palbase/backend";
-
-export default defineEndpoint({
-  method: "POST",
-  input: z.object({ title: z.string() }),
-  output: z.object({ id: z.string() }),
-  handler: async (req) => Database.insert("todos", { title: req.input.title }),
-});
+// modules/notes/dto/create.ts — the request/response schemas, as a value + a type.
+import { z } from "@palbase/backend";
+export const CreateNoteBody = z.object({ body: z.string().min(1) });
+export type CreateNoteBody = z.infer<typeof CreateNoteBody>;
+export const NoteSchema = z.object({ id: z.string(), body: z.string() });
+export type NoteSchema = z.infer<typeof NoteSchema>;
+```
+
+```ts
+// modules/notes/note.service.ts — @Injectable() classes. The real work.
+import { Database, Injectable } from "@palbase/backend";
+import { NoteSchema } from "./dto/create";
+
+@Injectable()
+export class NoteService {
+  create(userId: string, body: string): Promise<NoteSchema> {
+    return Database.public.notes.insert({ user_id: userId, body });
+  }
+}
+```
+
+```ts
+// modules/notes/notes.controller.ts — @Controller class, no `Database` import.
+import { Body, Controller, Post, User } from "@palbase/backend";
+import type { UserT } from "@palbase/backend";
+import { CreateNoteBody, NoteSchema } from "./dto/create";
+import { NoteService } from "./note.service";
+
+@Controller("/notes")
+export class NotesController {
+  constructor(private readonly notes: NoteService) {}
+
+  @Post("")
+  create(@Body(CreateNoteBody) body: CreateNoteBody, @User() user: UserT): Promise<NoteSchema> {
+    return this.notes.create(user.id, body.body);
+  }
+}
+```
+
+```ts
+// modules/notes/notes.module.ts — lists them. Nothing is wired by hand.
+import { Module, type Token } from "@palbase/backend";
+import { NotesController } from "./notes.controller";
+import { NoteService } from "./note.service";
+
+@Module({
+  controllers: [NotesController as Token],
+  providers: [NoteService as Token],
+})
+export class NotesModule {}
 ```
 
 ## Documentation
 
 Start with [`docs/README.md`](./docs/README.md). For AI coding tools, a single
 concatenated corpus is generated at [`docs/llms-full.txt`](./docs/llms-full.txt).
+See [`MIGRATION.md`](./MIGRATION.md) for breaking-change notes between major
+versions.
 
 ## License
 

package/dist/db/index.d.cts

@@ -1,4 +1,4 @@
-export { o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, E as EnvServiceDatabase, V as EnvTypedDatabase, af as InsertManyOptions, ag as InsertShape, al as Materialized, as as OnDeleteAction, au as PALBASE_EXTENSIONS, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, b5 as PalbaseExtension, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cd as PolicyMode, cg as RawConstraintDef, f as RawPageOptions, ci as Ref, ck as RowShape, S as SchemaDef, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cO as TxTable, cP as TxTables, cQ as TxWhere, cW as TypedDB, cX as TypedTable, cY as TypedTx, c$ as UniqueWhere, d9 as bigint, da as boolean, de as dec, dh as defineSchema, di as defineTable, dj as enumType, dp as inc, ds as installationRef, dt as integer, du as isPalbaseExtension, dw as jsonb, dx as makeTypedDB, dy as now, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector } from '../index-pK2At5Yc.cjs';
+export { o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, E as EnvServiceDatabase, V as EnvTypedDatabase, af as InsertManyOptions, ag as InsertShape, al as Materialized, as as OnDeleteAction, au as PALBASE_EXTENSIONS, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, b5 as PalbaseExtension, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cd as PolicyMode, cg as RawConstraintDef, f as RawPageOptions, ci as Ref, ck as RowShape, S as SchemaDef, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cO as TxTable, cP as TxTables, cQ as TxWhere, cW as TypedDB, cX as TypedTable, cY as TypedTx, c$ as UniqueWhere, d9 as bigint, da as boolean, de as dec, dh as defineSchema, di as defineTable, dj as enumType, dp as inc, ds as installationRef, dt as integer, du as isPalbaseExtension, dw as jsonb, dx as makeTypedDB, dy as now, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector } from '../index-CCY1h_J2.cjs';
 import 'zod';
 import './env.cjs';
 import '../stack.cjs';

package/dist/db/index.d.ts

@@ -1,4 +1,4 @@
-export { o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, E as EnvServiceDatabase, V as EnvTypedDatabase, af as InsertManyOptions, ag as InsertShape, al as Materialized, as as OnDeleteAction, au as PALBASE_EXTENSIONS, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, b5 as PalbaseExtension, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cd as PolicyMode, cg as RawConstraintDef, f as RawPageOptions, ci as Ref, ck as RowShape, S as SchemaDef, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cO as TxTable, cP as TxTables, cQ as TxWhere, cW as TypedDB, cX as TypedTable, cY as TypedTx, c$ as UniqueWhere, d9 as bigint, da as boolean, de as dec, dh as defineSchema, di as defineTable, dj as enumType, dp as inc, ds as installationRef, dt as integer, du as isPalbaseExtension, dw as jsonb, dx as makeTypedDB, dy as now, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector } from '../index-eN4KzGa5.js';
+export { o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, E as EnvServiceDatabase, V as EnvTypedDatabase, af as InsertManyOptions, ag as InsertShape, al as Materialized, as as OnDeleteAction, au as PALBASE_EXTENSIONS, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, b5 as PalbaseExtension, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cd as PolicyMode, cg as RawConstraintDef, f as RawPageOptions, ci as Ref, ck as RowShape, S as SchemaDef, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cO as TxTable, cP as TxTables, cQ as TxWhere, cW as TypedDB, cX as TypedTable, cY as TypedTx, c$ as UniqueWhere, d9 as bigint, da as boolean, de as dec, dh as defineSchema, di as defineTable, dj as enumType, dp as inc, ds as installationRef, dt as integer, du as isPalbaseExtension, dw as jsonb, dx as makeTypedDB, dy as now, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector } from '../index-fLaf0PN2.js';
 import 'zod';
 import './env.js';
 import '../stack.js';

package/dist/engine/index.d.cts

@@ -1,8 +1,8 @@
-import '../index-pK2At5Yc.cjs';
-export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, k as EngineConfig, M as ModuleClients, R as RateLimiter, l as RequestDatabase, m as RouteEntry, n as RuntimeHooks, S as ScrubResult, o as SqlDriver, p as SqlTx, q as buildRouteTable, r as createApp, s as createLazyTransaction, t as createOps, u as createRequestDatabase, v as effectiveAuth, w as hostAllowed, x as installCommandExecutor, y as installEgressFence, i as isDeclarationRefused, z as loadConfig, F as makeMemoryCache, G as matchRoute, H as quoteIdent, I as scrubSecrets, J as setCursorKey, K as withQueryCancellation, L as withTables } from '../index-Brhp8cxj.cjs';
+import '../index-CCY1h_J2.cjs';
+export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, k as EngineConfig, M as ModuleClients, R as RateLimiter, l as RequestDatabase, m as RouteEntry, n as RuntimeHooks, S as ScrubResult, o as SqlDriver, p as SqlTx, q as buildRouteTable, r as createApp, s as createLazyTransaction, t as createOps, u as createRequestDatabase, v as effectiveAuth, w as hostAllowed, x as installCommandExecutor, y as installEgressFence, i as isDeclarationRefused, z as loadConfig, F as makeMemoryCache, G as matchRoute, H as quoteIdent, I as scrubSecrets, J as setCursorKey, K as withQueryCancellation, L as withTables } from '../index-Db5QHdTa.cjs';
 import 'zod';
 import '../db/env.cjs';
 import '../stack.cjs';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.cjs';
-import '../registry-9dNeVN5d.cjs';
+import '../registry-CH6HRR6T.cjs';

package/dist/engine/index.d.ts

@@ -1,8 +1,8 @@
-import '../index-eN4KzGa5.js';
-export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, k as EngineConfig, M as ModuleClients, R as RateLimiter, l as RequestDatabase, m as RouteEntry, n as RuntimeHooks, S as ScrubResult, o as SqlDriver, p as SqlTx, q as buildRouteTable, r as createApp, s as createLazyTransaction, t as createOps, u as createRequestDatabase, v as effectiveAuth, w as hostAllowed, x as installCommandExecutor, y as installEgressFence, i as isDeclarationRefused, z as loadConfig, F as makeMemoryCache, G as matchRoute, H as quoteIdent, I as scrubSecrets, J as setCursorKey, K as withQueryCancellation, L as withTables } from '../index-Dlu2b9-f.js';
+import '../index-fLaf0PN2.js';
+export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, k as EngineConfig, M as ModuleClients, R as RateLimiter, l as RequestDatabase, m as RouteEntry, n as RuntimeHooks, S as ScrubResult, o as SqlDriver, p as SqlTx, q as buildRouteTable, r as createApp, s as createLazyTransaction, t as createOps, u as createRequestDatabase, v as effectiveAuth, w as hostAllowed, x as installCommandExecutor, y as installEgressFence, i as isDeclarationRefused, z as loadConfig, F as makeMemoryCache, G as matchRoute, H as quoteIdent, I as scrubSecrets, J as setCursorKey, K as withQueryCancellation, L as withTables } from '../index-QWN1Ncrv.js';
 import 'zod';
 import '../db/env.js';
 import '../stack.js';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.js';
-import '../registry-B8ddZiMY.js';
+import '../registry-C7tCRyPm.js';

package/dist/{index-pK2At5Yc.d.cts → index-CCY1h_J2.d.cts}

@@ -2238,9 +2238,9 @@ interface PalbaseEmailSendParams {
     templateSlug?: string;
     /**
      * Which locale of `templateSlug` to render — a BCP47 short tag ("tr").
-     * Falls back to "en" when the slug has no row for it. Declaring a locale in
-     * config/notifications.ts is only half the feature: without this the extra
-     * rows exist and are unreachable.
+     * Falls back to "en" when the slug has no row for it. Declaring a locale
+     * with `palbase notifications templates set` is only half the feature:
+     * without this the extra rows exist and are unreachable.
      */
     locale?: string;
     variables?: Record<string, unknown>;

package/dist/{index-Brhp8cxj.d.cts → index-Db5QHdTa.d.cts}

@@ -1,6 +1,6 @@
-import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-pK2At5Yc.cjs';
+import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-CCY1h_J2.cjs';
 import { T as Token } from './module-Dl1KFVtc.cjs';
-import { R as RouteMeta } from './registry-9dNeVN5d.cjs';
+import { R as RouteMeta } from './registry-CH6HRR6T.cjs';
 
 interface AdmissionLease {
     queueMs: number;

package/dist/{index-Dlu2b9-f.d.ts → index-QWN1Ncrv.d.ts}

@@ -1,6 +1,6 @@
-import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-eN4KzGa5.js';
+import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-fLaf0PN2.js';
 import { T as Token } from './module-Dl1KFVtc.js';
-import { R as RouteMeta } from './registry-B8ddZiMY.js';
+import { R as RouteMeta } from './registry-C7tCRyPm.js';
 
 interface AdmissionLease {
     queueMs: number;

package/dist/{index-eN4KzGa5.d.ts → index-fLaf0PN2.d.ts}

@@ -2238,9 +2238,9 @@ interface PalbaseEmailSendParams {
     templateSlug?: string;
     /**
      * Which locale of `templateSlug` to render — a BCP47 short tag ("tr").
-     * Falls back to "en" when the slug has no row for it. Declaring a locale in
-     * config/notifications.ts is only half the feature: without this the extra
-     * rows exist and are unreachable.
+     * Falls back to "en" when the slug has no row for it. Declaring a locale
+     * with `palbase notifications templates set` is only half the feature:
+     * without this the extra rows exist and are unreachable.
      */
     locale?: string;
     variables?: Record<string, unknown>;

package/dist/index.d.cts

@@ -1,11 +1,11 @@
-import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-pK2At5Yc.cjs';
-export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BackfillDef, t as BadRequest, u as Cache, i as CacheClient, v as CheckDef, w as ClientInfo, x as ColRef, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, I as Conflict, a as DBClient, e as DBOps, J as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, L as DeadlockDetected, M as Documents, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, Q as EnvSchemas, E as EnvServiceDatabase, U as EnvTables, V as EnvTypedDatabase, W as EnvTypedTable, X as ErrorDef, Y as ErrorMap, Z as ErrorThrowers, $ as FileContext, a0 as FindManyOpts, a1 as FkAction, a2 as FkMatch, a3 as Flags, a4 as Forbidden, a5 as ForeignKeyBuilder, a6 as ForeignKeyDef, a7 as FreezeBuilder, a8 as FreezeDef, a9 as GuardBuilder, aa as GuardDef, ab as GuardEvent, ac as HttpMethod, ad as IndexBuilder, ae as IndexDef, af as InsertManyOptions, ag as InsertShape, ah as InsertValues, ai as LifecycleHook, aj as Log, ak as Logger, al as Materialized, am as Middleware, an as MiddlewareContext, ao as MiddlewareHandler, ap as MutateInput, aq as NotFound, ar as Notifications, as as OnDeleteAction, at as OrderBySpec, au as PALBASE_EXTENSIONS, av as PBRequest, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, az as PalError, aA as PalbaseAnalyticsClient, aB as PalbaseAnalyticsManagementNamespace, aC as PalbaseAnalyticsProperties, aD as PalbaseAnalyticsQueryNamespace, aE as PalbaseAttestAndroidParams, aF as PalbaseAttestAndroidResult, aG as PalbaseAttestiOSParams, aH as PalbaseAttestiOSResult, aI as PalbaseAuthAdminClient, aJ as PalbaseAuthClient, aK as PalbaseBatchOverrideOperation, aL as PalbaseBatchSetOverridesResult, aM as PalbaseBindDeviceParams, aN as PalbaseBucketClient, aO as PalbaseClearAllOverridesResult, aP as PalbaseClearOverrideResult, aQ as PalbaseCohortQueryInput, aR as PalbaseCohortResult, aS as PalbaseCollectionRef, aT as PalbaseCountQueryInput, aU as PalbaseCountResult, aV as PalbaseCreateLinkParams, aW as PalbaseDeviceInfo, aX as PalbaseDeviceTokenView, aY as PalbaseDocsClient, aZ as PalbaseDocumentRef, a_ as PalbaseDocumentSnapshot, a$ as PalbaseEmailClient, b0 as PalbaseEmailSendParams, b1 as PalbaseEmailSendResponse, b2 as PalbaseEventNamesResult, b3 as PalbaseEventsQueryInput, b4 as PalbaseEventsResult, b5 as PalbaseExtension, b6 as PalbaseFileObject, b7 as PalbaseFlag, b8 as PalbaseFlagContext, b9 as PalbaseFlagSource, ba as PalbaseFlagValue, bb as PalbaseFlagVariant, bc as PalbaseFlagsClient, bd as PalbaseFlagsServiceClient, be as PalbaseFunctionsClient, bf as PalbaseFunnelQueryInput, bg as PalbaseFunnelResult, bh as PalbaseIdentifyTraits, bi as PalbaseInboxClient, bj as PalbaseInboxListOptions, bk as PalbaseInboxListResult, bl as PalbaseInboxMessage, bm as PalbaseInboxSendParams, bn as PalbaseInboxSendResponse, bo as PalbaseInitialLink, bp as PalbaseInvokeOptions, bq as PalbaseLink, br as PalbaseLinkAnalytics, bs as PalbaseLinkDetails, bt as PalbaseLinksClient, bu as PalbaseListLinksOptions, bv as PalbaseListLinksResult, bw as PalbaseListOptions, bx as PalbaseMatchParams, by as PalbaseMultiChannelResponse, bz as PalbaseNotificationChannel, bA as PalbaseNotificationsClient, bB as PalbaseOverviewResult, bC as PalbasePreferences, bD as PalbasePreferencesClient, bE as PalbasePushClient, bF as PalbasePushSendParams, bG as PalbasePushSendResponse, bH as PalbaseQrCodeOptions, bI as PalbaseQuerySnapshot, bJ as PalbaseRealtimeClient, bK as PalbaseRegisterDeviceParams, bL as PalbaseRetentionQueryInput, bM as PalbaseRetentionResult, bN as PalbaseSession, bO as PalbaseSetOverrideResult, bP as PalbaseSetOverridesResult, bQ as PalbaseSignedUrlResponse, bR as PalbaseSmsClient, bS as PalbaseSmsSendParams, bT as PalbaseSmsSendResponse, bU as PalbaseStorageClient, bV as PalbaseTransformOptions, bW as PalbaseUpdateLinkParams, bX as PalbaseUploadOptions, bY as PalbaseUser, bZ as PalbaseUserDetailResult, b_ as PalbaseUsersQueryInput, b$ as PalbaseUsersResult, c0 as PalbaseVerifyRequestSignatureParams, c1 as PalbaseWhatsAppClient, c2 as PalbaseWhatsAppEvent, c3 as PalbaseWhatsAppSendParams, c4 as PalbaseWhatsAppSendResponse, c5 as PalbaseWhatsAppTemplate, c6 as PalbaseWhereOperator, c7 as PolicyBinOp, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cb as PolicyExprCtx, cc as PolicyExprRef, cd as PolicyMode, ce as PolicyOperand, cf as QueryInput, R as RateLimitConfig, cg as RawConstraintDef, f as RawPageOptions, ch as Realtime, ci as Ref, cj as RequestStore, ck as RowShape, b as RuntimeServices, cl as Secrets, cm as SecretsService, cn as SerializationFailure, co as SetShape, cp as SetValue, cq as ShutdownRunner, cr as SqlFragment, cs as Storage, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, cx as TableRef, cy as TooManyRequests, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cB as TxInsertValue, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cN as TxSetValue, cO as TxTable, cP as TxTables, cQ as TxWhere, cR as TxWireExpr, cS as TxWireGuard, cT as TxWireOp, cU as TxWireRef, cV as TxWireValue, cW as TypedDB, cX as TypedTable, cY as TypedTx, cZ as Unauthorized, c_ as UniqueViolation, c$ as UniqueWhere, d0 as UserT, d1 as VerifiedDevice, d2 as WhereFilter, d3 as WhereOp, d4 as __getRuntime, j as __requestALS, d5 as __resetLifecycleHooks, d6 as __runStartHooks, _ as __runWithRuntime, d7 as __setRuntime, d8 as backfill, d9 as bigint, da as boolean, db as can, dc as check, dd as col, de as dec, df as decrement, dg as defineMiddleware, dh as defineSchema, di as defineTable, dj as enumType, dk as exprCtx, dl as foreignKey, dm as freeze, dn as guard, dp as inc, dq as increment, dr as index, ds as installationRef, dt as integer, du as isPalbaseExtension, dv as isRetryable, dw as jsonb, dx as makeTypedDB, dy as now, dz as numeric, dA as onShutdown, dB as onStart, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dG as sqlFragment, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector, dM as withRetry } from './index-pK2At5Yc.cjs';
-import { M as ModuleClients, C as Container } from './index-Brhp8cxj.cjs';
-export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-Brhp8cxj.cjs';
+import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-CCY1h_J2.cjs';
+export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BackfillDef, t as BadRequest, u as Cache, i as CacheClient, v as CheckDef, w as ClientInfo, x as ColRef, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, I as Conflict, a as DBClient, e as DBOps, J as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, L as DeadlockDetected, M as Documents, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, Q as EnvSchemas, E as EnvServiceDatabase, U as EnvTables, V as EnvTypedDatabase, W as EnvTypedTable, X as ErrorDef, Y as ErrorMap, Z as ErrorThrowers, $ as FileContext, a0 as FindManyOpts, a1 as FkAction, a2 as FkMatch, a3 as Flags, a4 as Forbidden, a5 as ForeignKeyBuilder, a6 as ForeignKeyDef, a7 as FreezeBuilder, a8 as FreezeDef, a9 as GuardBuilder, aa as GuardDef, ab as GuardEvent, ac as HttpMethod, ad as IndexBuilder, ae as IndexDef, af as InsertManyOptions, ag as InsertShape, ah as InsertValues, ai as LifecycleHook, aj as Log, ak as Logger, al as Materialized, am as Middleware, an as MiddlewareContext, ao as MiddlewareHandler, ap as MutateInput, aq as NotFound, ar as Notifications, as as OnDeleteAction, at as OrderBySpec, au as PALBASE_EXTENSIONS, av as PBRequest, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, az as PalError, aA as PalbaseAnalyticsClient, aB as PalbaseAnalyticsManagementNamespace, aC as PalbaseAnalyticsProperties, aD as PalbaseAnalyticsQueryNamespace, aE as PalbaseAttestAndroidParams, aF as PalbaseAttestAndroidResult, aG as PalbaseAttestiOSParams, aH as PalbaseAttestiOSResult, aI as PalbaseAuthAdminClient, aJ as PalbaseAuthClient, aK as PalbaseBatchOverrideOperation, aL as PalbaseBatchSetOverridesResult, aM as PalbaseBindDeviceParams, aN as PalbaseBucketClient, aO as PalbaseClearAllOverridesResult, aP as PalbaseClearOverrideResult, aQ as PalbaseCohortQueryInput, aR as PalbaseCohortResult, aS as PalbaseCollectionRef, aT as PalbaseCountQueryInput, aU as PalbaseCountResult, aV as PalbaseCreateLinkParams, aW as PalbaseDeviceInfo, aX as PalbaseDeviceTokenView, aY as PalbaseDocsClient, aZ as PalbaseDocumentRef, a_ as PalbaseDocumentSnapshot, a$ as PalbaseEmailClient, b0 as PalbaseEmailSendParams, b1 as PalbaseEmailSendResponse, b2 as PalbaseEventNamesResult, b3 as PalbaseEventsQueryInput, b4 as PalbaseEventsResult, b5 as PalbaseExtension, b6 as PalbaseFileObject, b7 as PalbaseFlag, b8 as PalbaseFlagContext, b9 as PalbaseFlagSource, ba as PalbaseFlagValue, bb as PalbaseFlagVariant, bc as PalbaseFlagsClient, bd as PalbaseFlagsServiceClient, be as PalbaseFunctionsClient, bf as PalbaseFunnelQueryInput, bg as PalbaseFunnelResult, bh as PalbaseIdentifyTraits, bi as PalbaseInboxClient, bj as PalbaseInboxListOptions, bk as PalbaseInboxListResult, bl as PalbaseInboxMessage, bm as PalbaseInboxSendParams, bn as PalbaseInboxSendResponse, bo as PalbaseInitialLink, bp as PalbaseInvokeOptions, bq as PalbaseLink, br as PalbaseLinkAnalytics, bs as PalbaseLinkDetails, bt as PalbaseLinksClient, bu as PalbaseListLinksOptions, bv as PalbaseListLinksResult, bw as PalbaseListOptions, bx as PalbaseMatchParams, by as PalbaseMultiChannelResponse, bz as PalbaseNotificationChannel, bA as PalbaseNotificationsClient, bB as PalbaseOverviewResult, bC as PalbasePreferences, bD as PalbasePreferencesClient, bE as PalbasePushClient, bF as PalbasePushSendParams, bG as PalbasePushSendResponse, bH as PalbaseQrCodeOptions, bI as PalbaseQuerySnapshot, bJ as PalbaseRealtimeClient, bK as PalbaseRegisterDeviceParams, bL as PalbaseRetentionQueryInput, bM as PalbaseRetentionResult, bN as PalbaseSession, bO as PalbaseSetOverrideResult, bP as PalbaseSetOverridesResult, bQ as PalbaseSignedUrlResponse, bR as PalbaseSmsClient, bS as PalbaseSmsSendParams, bT as PalbaseSmsSendResponse, bU as PalbaseStorageClient, bV as PalbaseTransformOptions, bW as PalbaseUpdateLinkParams, bX as PalbaseUploadOptions, bY as PalbaseUser, bZ as PalbaseUserDetailResult, b_ as PalbaseUsersQueryInput, b$ as PalbaseUsersResult, c0 as PalbaseVerifyRequestSignatureParams, c1 as PalbaseWhatsAppClient, c2 as PalbaseWhatsAppEvent, c3 as PalbaseWhatsAppSendParams, c4 as PalbaseWhatsAppSendResponse, c5 as PalbaseWhatsAppTemplate, c6 as PalbaseWhereOperator, c7 as PolicyBinOp, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cb as PolicyExprCtx, cc as PolicyExprRef, cd as PolicyMode, ce as PolicyOperand, cf as QueryInput, R as RateLimitConfig, cg as RawConstraintDef, f as RawPageOptions, ch as Realtime, ci as Ref, cj as RequestStore, ck as RowShape, b as RuntimeServices, cl as Secrets, cm as SecretsService, cn as SerializationFailure, co as SetShape, cp as SetValue, cq as ShutdownRunner, cr as SqlFragment, cs as Storage, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, cx as TableRef, cy as TooManyRequests, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cB as TxInsertValue, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cN as TxSetValue, cO as TxTable, cP as TxTables, cQ as TxWhere, cR as TxWireExpr, cS as TxWireGuard, cT as TxWireOp, cU as TxWireRef, cV as TxWireValue, cW as TypedDB, cX as TypedTable, cY as TypedTx, cZ as Unauthorized, c_ as UniqueViolation, c$ as UniqueWhere, d0 as UserT, d1 as VerifiedDevice, d2 as WhereFilter, d3 as WhereOp, d4 as __getRuntime, j as __requestALS, d5 as __resetLifecycleHooks, d6 as __runStartHooks, _ as __runWithRuntime, d7 as __setRuntime, d8 as backfill, d9 as bigint, da as boolean, db as can, dc as check, dd as col, de as dec, df as decrement, dg as defineMiddleware, dh as defineSchema, di as defineTable, dj as enumType, dk as exprCtx, dl as foreignKey, dm as freeze, dn as guard, dp as inc, dq as increment, dr as index, ds as installationRef, dt as integer, du as isPalbaseExtension, dv as isRetryable, dw as jsonb, dx as makeTypedDB, dy as now, dz as numeric, dA as onShutdown, dB as onStart, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dG as sqlFragment, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector, dM as withRetry } from './index-CCY1h_J2.cjs';
+import { M as ModuleClients, C as Container } from './index-Db5QHdTa.cjs';
+export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-Db5QHdTa.cjs';
 export { TableTypes, Tables } from './db/env.cjs';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.cjs';
-import { a as RouteOptions } from './registry-9dNeVN5d.cjs';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-9dNeVN5d.cjs';
+import { a as RouteOptions } from './registry-CH6HRR6T.cjs';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-CH6HRR6T.cjs';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 import { T as Token } from './module-Dl1KFVtc.cjs';

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-eN4KzGa5.js';
-export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BackfillDef, t as BadRequest, u as Cache, i as CacheClient, v as CheckDef, w as ClientInfo, x as ColRef, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, I as Conflict, a as DBClient, e as DBOps, J as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, L as DeadlockDetected, M as Documents, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, Q as EnvSchemas, E as EnvServiceDatabase, U as EnvTables, V as EnvTypedDatabase, W as EnvTypedTable, X as ErrorDef, Y as ErrorMap, Z as ErrorThrowers, $ as FileContext, a0 as FindManyOpts, a1 as FkAction, a2 as FkMatch, a3 as Flags, a4 as Forbidden, a5 as ForeignKeyBuilder, a6 as ForeignKeyDef, a7 as FreezeBuilder, a8 as FreezeDef, a9 as GuardBuilder, aa as GuardDef, ab as GuardEvent, ac as HttpMethod, ad as IndexBuilder, ae as IndexDef, af as InsertManyOptions, ag as InsertShape, ah as InsertValues, ai as LifecycleHook, aj as Log, ak as Logger, al as Materialized, am as Middleware, an as MiddlewareContext, ao as MiddlewareHandler, ap as MutateInput, aq as NotFound, ar as Notifications, as as OnDeleteAction, at as OrderBySpec, au as PALBASE_EXTENSIONS, av as PBRequest, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, az as PalError, aA as PalbaseAnalyticsClient, aB as PalbaseAnalyticsManagementNamespace, aC as PalbaseAnalyticsProperties, aD as PalbaseAnalyticsQueryNamespace, aE as PalbaseAttestAndroidParams, aF as PalbaseAttestAndroidResult, aG as PalbaseAttestiOSParams, aH as PalbaseAttestiOSResult, aI as PalbaseAuthAdminClient, aJ as PalbaseAuthClient, aK as PalbaseBatchOverrideOperation, aL as PalbaseBatchSetOverridesResult, aM as PalbaseBindDeviceParams, aN as PalbaseBucketClient, aO as PalbaseClearAllOverridesResult, aP as PalbaseClearOverrideResult, aQ as PalbaseCohortQueryInput, aR as PalbaseCohortResult, aS as PalbaseCollectionRef, aT as PalbaseCountQueryInput, aU as PalbaseCountResult, aV as PalbaseCreateLinkParams, aW as PalbaseDeviceInfo, aX as PalbaseDeviceTokenView, aY as PalbaseDocsClient, aZ as PalbaseDocumentRef, a_ as PalbaseDocumentSnapshot, a$ as PalbaseEmailClient, b0 as PalbaseEmailSendParams, b1 as PalbaseEmailSendResponse, b2 as PalbaseEventNamesResult, b3 as PalbaseEventsQueryInput, b4 as PalbaseEventsResult, b5 as PalbaseExtension, b6 as PalbaseFileObject, b7 as PalbaseFlag, b8 as PalbaseFlagContext, b9 as PalbaseFlagSource, ba as PalbaseFlagValue, bb as PalbaseFlagVariant, bc as PalbaseFlagsClient, bd as PalbaseFlagsServiceClient, be as PalbaseFunctionsClient, bf as PalbaseFunnelQueryInput, bg as PalbaseFunnelResult, bh as PalbaseIdentifyTraits, bi as PalbaseInboxClient, bj as PalbaseInboxListOptions, bk as PalbaseInboxListResult, bl as PalbaseInboxMessage, bm as PalbaseInboxSendParams, bn as PalbaseInboxSendResponse, bo as PalbaseInitialLink, bp as PalbaseInvokeOptions, bq as PalbaseLink, br as PalbaseLinkAnalytics, bs as PalbaseLinkDetails, bt as PalbaseLinksClient, bu as PalbaseListLinksOptions, bv as PalbaseListLinksResult, bw as PalbaseListOptions, bx as PalbaseMatchParams, by as PalbaseMultiChannelResponse, bz as PalbaseNotificationChannel, bA as PalbaseNotificationsClient, bB as PalbaseOverviewResult, bC as PalbasePreferences, bD as PalbasePreferencesClient, bE as PalbasePushClient, bF as PalbasePushSendParams, bG as PalbasePushSendResponse, bH as PalbaseQrCodeOptions, bI as PalbaseQuerySnapshot, bJ as PalbaseRealtimeClient, bK as PalbaseRegisterDeviceParams, bL as PalbaseRetentionQueryInput, bM as PalbaseRetentionResult, bN as PalbaseSession, bO as PalbaseSetOverrideResult, bP as PalbaseSetOverridesResult, bQ as PalbaseSignedUrlResponse, bR as PalbaseSmsClient, bS as PalbaseSmsSendParams, bT as PalbaseSmsSendResponse, bU as PalbaseStorageClient, bV as PalbaseTransformOptions, bW as PalbaseUpdateLinkParams, bX as PalbaseUploadOptions, bY as PalbaseUser, bZ as PalbaseUserDetailResult, b_ as PalbaseUsersQueryInput, b$ as PalbaseUsersResult, c0 as PalbaseVerifyRequestSignatureParams, c1 as PalbaseWhatsAppClient, c2 as PalbaseWhatsAppEvent, c3 as PalbaseWhatsAppSendParams, c4 as PalbaseWhatsAppSendResponse, c5 as PalbaseWhatsAppTemplate, c6 as PalbaseWhereOperator, c7 as PolicyBinOp, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cb as PolicyExprCtx, cc as PolicyExprRef, cd as PolicyMode, ce as PolicyOperand, cf as QueryInput, R as RateLimitConfig, cg as RawConstraintDef, f as RawPageOptions, ch as Realtime, ci as Ref, cj as RequestStore, ck as RowShape, b as RuntimeServices, cl as Secrets, cm as SecretsService, cn as SerializationFailure, co as SetShape, cp as SetValue, cq as ShutdownRunner, cr as SqlFragment, cs as Storage, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, cx as TableRef, cy as TooManyRequests, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cB as TxInsertValue, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cN as TxSetValue, cO as TxTable, cP as TxTables, cQ as TxWhere, cR as TxWireExpr, cS as TxWireGuard, cT as TxWireOp, cU as TxWireRef, cV as TxWireValue, cW as TypedDB, cX as TypedTable, cY as TypedTx, cZ as Unauthorized, c_ as UniqueViolation, c$ as UniqueWhere, d0 as UserT, d1 as VerifiedDevice, d2 as WhereFilter, d3 as WhereOp, d4 as __getRuntime, j as __requestALS, d5 as __resetLifecycleHooks, d6 as __runStartHooks, _ as __runWithRuntime, d7 as __setRuntime, d8 as backfill, d9 as bigint, da as boolean, db as can, dc as check, dd as col, de as dec, df as decrement, dg as defineMiddleware, dh as defineSchema, di as defineTable, dj as enumType, dk as exprCtx, dl as foreignKey, dm as freeze, dn as guard, dp as inc, dq as increment, dr as index, ds as installationRef, dt as integer, du as isPalbaseExtension, dv as isRetryable, dw as jsonb, dx as makeTypedDB, dy as now, dz as numeric, dA as onShutdown, dB as onStart, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dG as sqlFragment, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector, dM as withRetry } from './index-eN4KzGa5.js';
-import { M as ModuleClients, C as Container } from './index-Dlu2b9-f.js';
-export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-Dlu2b9-f.js';
+import { k as PalbaseResult, l as PolicyExpr, S as SchemaDef, A as AuthSpec, H as HttpError } from './index-fLaf0PN2.js';
+export { m as AggregateInput, n as AggregateResult, o as AnyColumn, p as AtomicDatabase, q as AtomicOptions, r as Auth, s as AuthConfig, B as BackfillDef, t as BadRequest, u as Cache, i as CacheClient, v as CheckDef, w as ClientInfo, x as ColRef, y as ColumnBuilder, z as ColumnDef, F as ColumnMap, G as ColumnType, C as CommandOptions, I as Conflict, a as DBClient, e as DBOps, J as Database, D as DatabaseBudget, d as DatabaseDiagnostics, c as DatabaseDiagnosticsOptions, K as DatabaseQueryEvent, L as DeadlockDetected, M as Documents, N as EXTENSION_DEPENDENCIES, O as EmbeddingModelRef, Q as EnvSchemas, E as EnvServiceDatabase, U as EnvTables, V as EnvTypedDatabase, W as EnvTypedTable, X as ErrorDef, Y as ErrorMap, Z as ErrorThrowers, $ as FileContext, a0 as FindManyOpts, a1 as FkAction, a2 as FkMatch, a3 as Flags, a4 as Forbidden, a5 as ForeignKeyBuilder, a6 as ForeignKeyDef, a7 as FreezeBuilder, a8 as FreezeDef, a9 as GuardBuilder, aa as GuardDef, ab as GuardEvent, ac as HttpMethod, ad as IndexBuilder, ae as IndexDef, af as InsertManyOptions, ag as InsertShape, ah as InsertValues, ai as LifecycleHook, aj as Log, ak as Logger, al as Materialized, am as Middleware, an as MiddlewareContext, ao as MiddlewareHandler, ap as MutateInput, aq as NotFound, ar as Notifications, as as OnDeleteAction, at as OrderBySpec, au as PALBASE_EXTENSIONS, av as PBRequest, P as Page, aw as PageInfo, ax as PageInput, ay as PageNavigation, az as PalError, aA as PalbaseAnalyticsClient, aB as PalbaseAnalyticsManagementNamespace, aC as PalbaseAnalyticsProperties, aD as PalbaseAnalyticsQueryNamespace, aE as PalbaseAttestAndroidParams, aF as PalbaseAttestAndroidResult, aG as PalbaseAttestiOSParams, aH as PalbaseAttestiOSResult, aI as PalbaseAuthAdminClient, aJ as PalbaseAuthClient, aK as PalbaseBatchOverrideOperation, aL as PalbaseBatchSetOverridesResult, aM as PalbaseBindDeviceParams, aN as PalbaseBucketClient, aO as PalbaseClearAllOverridesResult, aP as PalbaseClearOverrideResult, aQ as PalbaseCohortQueryInput, aR as PalbaseCohortResult, aS as PalbaseCollectionRef, aT as PalbaseCountQueryInput, aU as PalbaseCountResult, aV as PalbaseCreateLinkParams, aW as PalbaseDeviceInfo, aX as PalbaseDeviceTokenView, aY as PalbaseDocsClient, aZ as PalbaseDocumentRef, a_ as PalbaseDocumentSnapshot, a$ as PalbaseEmailClient, b0 as PalbaseEmailSendParams, b1 as PalbaseEmailSendResponse, b2 as PalbaseEventNamesResult, b3 as PalbaseEventsQueryInput, b4 as PalbaseEventsResult, b5 as PalbaseExtension, b6 as PalbaseFileObject, b7 as PalbaseFlag, b8 as PalbaseFlagContext, b9 as PalbaseFlagSource, ba as PalbaseFlagValue, bb as PalbaseFlagVariant, bc as PalbaseFlagsClient, bd as PalbaseFlagsServiceClient, be as PalbaseFunctionsClient, bf as PalbaseFunnelQueryInput, bg as PalbaseFunnelResult, bh as PalbaseIdentifyTraits, bi as PalbaseInboxClient, bj as PalbaseInboxListOptions, bk as PalbaseInboxListResult, bl as PalbaseInboxMessage, bm as PalbaseInboxSendParams, bn as PalbaseInboxSendResponse, bo as PalbaseInitialLink, bp as PalbaseInvokeOptions, bq as PalbaseLink, br as PalbaseLinkAnalytics, bs as PalbaseLinkDetails, bt as PalbaseLinksClient, bu as PalbaseListLinksOptions, bv as PalbaseListLinksResult, bw as PalbaseListOptions, bx as PalbaseMatchParams, by as PalbaseMultiChannelResponse, bz as PalbaseNotificationChannel, bA as PalbaseNotificationsClient, bB as PalbaseOverviewResult, bC as PalbasePreferences, bD as PalbasePreferencesClient, bE as PalbasePushClient, bF as PalbasePushSendParams, bG as PalbasePushSendResponse, bH as PalbaseQrCodeOptions, bI as PalbaseQuerySnapshot, bJ as PalbaseRealtimeClient, bK as PalbaseRegisterDeviceParams, bL as PalbaseRetentionQueryInput, bM as PalbaseRetentionResult, bN as PalbaseSession, bO as PalbaseSetOverrideResult, bP as PalbaseSetOverridesResult, bQ as PalbaseSignedUrlResponse, bR as PalbaseSmsClient, bS as PalbaseSmsSendParams, bT as PalbaseSmsSendResponse, bU as PalbaseStorageClient, bV as PalbaseTransformOptions, bW as PalbaseUpdateLinkParams, bX as PalbaseUploadOptions, bY as PalbaseUser, bZ as PalbaseUserDetailResult, b_ as PalbaseUsersQueryInput, b$ as PalbaseUsersResult, c0 as PalbaseVerifyRequestSignatureParams, c1 as PalbaseWhatsAppClient, c2 as PalbaseWhatsAppEvent, c3 as PalbaseWhatsAppSendParams, c4 as PalbaseWhatsAppSendResponse, c5 as PalbaseWhatsAppTemplate, c6 as PalbaseWhereOperator, c7 as PolicyBinOp, c8 as PolicyBuilder, c9 as PolicyCommand, ca as PolicyDef, cb as PolicyExprCtx, cc as PolicyExprRef, cd as PolicyMode, ce as PolicyOperand, cf as QueryInput, R as RateLimitConfig, cg as RawConstraintDef, f as RawPageOptions, ch as Realtime, ci as Ref, cj as RequestStore, ck as RowShape, b as RuntimeServices, cl as Secrets, cm as SecretsService, cn as SerializationFailure, co as SetShape, cp as SetValue, cq as ShutdownRunner, cr as SqlFragment, cs as Storage, ct as TABLE_META, cu as TableDef, cv as TableHandle, cw as TableInput, cx as TableRef, cy as TooManyRequests, T as TransactionIsolation, cz as TxColumnExpr, cA as TxInsertShape, cB as TxInsertValue, cC as TxNow, cD as TxPlan, g as TxPlanBody, cE as TxPlanError, cF as TxPlanHandle, cG as TxPlanOpResult, cH as TxPlanRejection, h as TxPlanResponse, cI as TxRefError, cJ as TxRow, cK as TxRows, cL as TxSelectOptions, cM as TxSetShape, cN as TxSetValue, cO as TxTable, cP as TxTables, cQ as TxWhere, cR as TxWireExpr, cS as TxWireGuard, cT as TxWireOp, cU as TxWireRef, cV as TxWireValue, cW as TypedDB, cX as TypedTable, cY as TypedTx, cZ as Unauthorized, c_ as UniqueViolation, c$ as UniqueWhere, d0 as UserT, d1 as VerifiedDevice, d2 as WhereFilter, d3 as WhereOp, d4 as __getRuntime, j as __requestALS, d5 as __resetLifecycleHooks, d6 as __runStartHooks, _ as __runWithRuntime, d7 as __setRuntime, d8 as backfill, d9 as bigint, da as boolean, db as can, dc as check, dd as col, de as dec, df as decrement, dg as defineMiddleware, dh as defineSchema, di as defineTable, dj as enumType, dk as exprCtx, dl as foreignKey, dm as freeze, dn as guard, dp as inc, dq as increment, dr as index, ds as installationRef, dt as integer, du as isPalbaseExtension, dv as isRetryable, dw as jsonb, dx as makeTypedDB, dy as now, dz as numeric, dA as onShutdown, dB as onStart, dC as openai, dD as ownedByUser, dE as policy, dF as raw, dG as sqlFragment, dH as text, dI as timestamp, dJ as userRef, dK as uuid, dL as vector, dM as withRetry } from './index-fLaf0PN2.js';
+import { M as ModuleClients, C as Container } from './index-QWN1Ncrv.js';
+export { D as DECLARATION_REFUSAL, a as DeclarationRefused, b as DiError, c as DiKind, d as ModulePressure, e as assertNoOrphanEntryPoints, f as buildContainer, i as isDeclarationRefused } from './index-QWN1Ncrv.js';
 export { TableTypes, Tables } from './db/env.js';
 export { PalbaseBucketName, PalbaseFlagKey, PalbaseSecretName } from './stack.js';
-import { a as RouteOptions } from './registry-B8ddZiMY.js';
-export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-B8ddZiMY.js';
+import { a as RouteOptions } from './registry-C7tCRyPm.js';
+export { H as HttpMethodUpper, b as ParamKind, P as ParamMeta, R as RouteMeta, c as Signal, d as Sse, S as SseConfig, e as SseOut, f as SseWriter, T as ThrowDescriptor, g as Upload, U as UploadConfig, h as UploadedObject, i as getRoutes, r as recordThrows } from './registry-C7tCRyPm.js';
 import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 import { T as Token } from './module-Dl1KFVtc.js';

package/dist/openapi/index.d.cts

@@ -1,7 +1,7 @@
 import { OpenApiGeneratorV31 } from '@asteasolutions/zod-to-openapi';
 import { ZodTypeAny } from 'zod';
-import { A as AuthSpec, R as RateLimitConfig } from '../index-pK2At5Yc.cjs';
-import { P as ParamMeta, T as ThrowDescriptor, U as UploadConfig, S as SseConfig } from '../registry-9dNeVN5d.cjs';
+import { A as AuthSpec, R as RateLimitConfig } from '../index-CCY1h_J2.cjs';
+import { P as ParamMeta, T as ThrowDescriptor, U as UploadConfig, S as SseConfig } from '../registry-CH6HRR6T.cjs';
 import '../db/env.cjs';
 import '../stack.cjs';
 import 'node:async_hooks';

package/dist/openapi/index.d.ts

@@ -1,7 +1,7 @@
 import { OpenApiGeneratorV31 } from '@asteasolutions/zod-to-openapi';
 import { ZodTypeAny } from 'zod';
-import { A as AuthSpec, R as RateLimitConfig } from '../index-eN4KzGa5.js';
-import { P as ParamMeta, T as ThrowDescriptor, U as UploadConfig, S as SseConfig } from '../registry-B8ddZiMY.js';
+import { A as AuthSpec, R as RateLimitConfig } from '../index-fLaf0PN2.js';
+import { P as ParamMeta, T as ThrowDescriptor, U as UploadConfig, S as SseConfig } from '../registry-C7tCRyPm.js';
 import '../db/env.js';
 import '../stack.js';
 import 'node:async_hooks';

package/dist/{registry-B8ddZiMY.d.ts → registry-C7tCRyPm.d.ts}

@@ -1,4 +1,4 @@
-import { D as DatabaseBudget, A as AuthSpec, R as RateLimitConfig } from './index-eN4KzGa5.js';
+import { D as DatabaseBudget, A as AuthSpec, R as RateLimitConfig } from './index-fLaf0PN2.js';
 import { ZodTypeAny } from 'zod';
 import { PalbaseBucketName } from './stack.js';
 

package/dist/{registry-9dNeVN5d.d.cts → registry-CH6HRR6T.d.cts}

@@ -1,4 +1,4 @@
-import { D as DatabaseBudget, A as AuthSpec, R as RateLimitConfig } from './index-pK2At5Yc.cjs';
+import { D as DatabaseBudget, A as AuthSpec, R as RateLimitConfig } from './index-CCY1h_J2.cjs';
 import { ZodTypeAny } from 'zod';
 import { PalbaseBucketName } from './stack.cjs';
 

package/dist/test/index.d.cts

@@ -1,5 +1,5 @@
 import { T as Token } from '../module-Dl1KFVtc.cjs';
-import { E as EnvServiceDatabase, a as DBClient, b as RuntimeServices } from '../index-pK2At5Yc.cjs';
+import { E as EnvServiceDatabase, a as DBClient, b as RuntimeServices } from '../index-CCY1h_J2.cjs';
 import 'zod';
 import '../db/env.cjs';
 import '../stack.cjs';

package/dist/test/index.d.ts

@@ -1,5 +1,5 @@
 import { T as Token } from '../module-Dl1KFVtc.js';
-import { E as EnvServiceDatabase, a as DBClient, b as RuntimeServices } from '../index-eN4KzGa5.js';
+import { E as EnvServiceDatabase, a as DBClient, b as RuntimeServices } from '../index-fLaf0PN2.js';
 import 'zod';
 import '../db/env.js';
 import '../stack.js';

package/docs/auth.md

@@ -252,9 +252,10 @@ caller's permissions — pushed over realtime the moment a role changes.
 ## Email verification
 
 The platform handles verification end to end. **You do not configure a sender**,
-and `config/notifications.ts` is unrelated — that file declares providers for
-**your app's own** notifications. Auth email goes out through Palbase's own
-notification tenant, not yours.
+and `palbase notifications providers` / `palbase notifications templates` are
+unrelated — those manage providers and templates for **your app's own**
+notifications. Auth email goes out through Palbase's own notification tenant,
+not yours.
 
 What happens on `POST /auth/signup`:
 

package/docs/llms-full.txt

@@ -1071,9 +1071,10 @@ caller's permissions — pushed over realtime the moment a role changes.
 ## Email verification
 
 The platform handles verification end to end. **You do not configure a sender**,
-and `config/notifications.ts` is unrelated — that file declares providers for
-**your app's own** notifications. Auth email goes out through Palbase's own
-notification tenant, not yours.
+and `palbase notifications providers` / `palbase notifications templates` are
+unrelated — those manage providers and templates for **your app's own**
+notifications. Auth email goes out through Palbase's own notification tenant,
+not yours.
 
 What happens on `POST /auth/signup`:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palbase/backend",
-  "version": "39.1.4",
+  "version": "39.1.6",
   "description": "Palbase Backend SDK — class controllers (@Controller/@Get/@Post + @Body/@QueryParams/@Param), error classes, schema DSL",
   "license": "MIT",
   "repository": {
@@ -92,7 +92,8 @@
     "dist",
     "docs",
     "stager",
-    "template"
+    "template",
+    "MIGRATION.md"
   ],
   "dependencies": {
     "@asteasolutions/zod-to-openapi": "^7.3.4",

package/template/AGENTS.md

@@ -16,7 +16,7 @@ import { Controller, Get, Post, Body, Param, User, z, Database, NotFound } from
 > field would arrive `undefined`, and the build says so by name.
 
 **The full reference** — every decorator, every platform service, every schema
-helper — is at <https://app.dev.palbase.studio/llms.txt> (`/llms-full.txt` for
+helper — is at <https://palbase.studio/llms.txt> (`/llms-full.txt` for
 agents). This file does not repeat it; it says what the code should LOOK like.
 
 ## The layers

package/docs/paltimate/2026-09-06-fake-offset-claim/research.md

@@ -1,75 +0,0 @@
-# Fake pagination and claim: verification sources
-
-Verified 2026-09-06. Scope: repair the two existing in-memory fake contracts,
-using the repository's existing runtime and test runner. No new dependency or
-public API is introduced.
-
-| ID | Existing tool | Stakes | Tier | Status | Evidence |
-| --- | --- | --- | --- | --- | --- |
-| UD-001 | Bun 1.3.9 for independent consumer probes | 1 | quick | verified | `bun --version`; published-package and built-package probe executions |
-| UD-002 | Vitest 3.2.4 for SDK regressions | 1 | quick | verified | `backend/package.json`, runtime version output, Context7 CLI documentation |
-
-CLAIM: Bun supports direct TypeScript execution and reports test/runtime failures
-with a nonzero exit status. SOURCE:
-https://github.com/oven-sh/bun/blob/main/docs/test/runtime-behavior.mdx
-VERIFIED: 2026-09-06 via Context7 and actual Bun 1.3.9 probe exits 1/0.
-TIER: quick. Current docs are not an assertion that their latest Bun version is
-the installed version; the installed runtime was measured separately.
-
-CLAIM: Vitest's file arguments select test paths; `run` performs a single run.
-SOURCE: https://github.com/vitest-dev/vitest/blob/v3.2.4/docs/guide/cli.md
-VERIFIED: 2026-09-06 via Context7 and focused red/green executions.
-TIER: quick.
-
-CLAIM: `--no-file-parallelism` runs test files without file concurrency.
-SOURCE: https://github.com/vitest-dev/vitest/blob/v3.2.4/docs/guide/debugging.md
-VERIFIED: 2026-09-06 via Context7 and installed
-`pnpm --filter @palbase/backend exec vitest --help --fileParallelism`.
-TIER: quick. This flag changes scheduling, preserving test assertions, selected
-files, type checking, and timeouts.
-
-The SDK contracts were checked against local primary sources:
-
-- `docs/database.md:179`: `now()` works in `claim` and other insert operations.
-- `docs/database.md:355`: offset requires limit.
-- `src/engine/db.ts:1403`: nonnegative integer limit validation.
-- `src/engine/db.ts:1417`: nonnegative integer offset validation and limit requirement.
-- `src/engine/db.ts:2362`: claim merges unique/extra and compiles insert expressions.
-- `src/__tests__/helpers/mock-db.ts:277`: existing insert-expression resolver.
-
-Runtime evidence separating the hypotheses is in `verification.md`.
-
-## Publication follow-up
-
-The user requested publication after the source fix was verified. Publication
-uses the repository's existing Changesets workflow; stakes 3, standard tier.
-Context7 was attempted twice but its transport was unavailable, so the official
-Changesets CLI documentation was read directly and checked against the local
-workflow and a successful live run.
-
-| ID | Existing approach | Stakes | Tier | Status | Evidence |
-| --- | --- | --- | --- | --- | --- |
-| UD-003 | Changesets version commit followed by the main release workflow | 3 | standard | verified | `.github/workflows/release.yml`, `package.json`, official CLI docs and run 34035374818 |
-
-CLAIM: `changeset version` updates package versions/changelogs, and `publish`
-publishes package versions absent from npm. SOURCE:
-https://github.com/changesets/changesets/blob/main/docs/command-line-options.md
-VERIFIED: 2026-09-06 via official documentation, installed CLI 2.30.0, and the
-repository's `ci:version`/`ci:publish` scripts. TIER: standard.
-
-CLAIM: This repository versions locally, pushes to main, verifies matching core
-images first, then publishes npm and advances latest/next. SOURCE:
-https://github.com/palgroup/palbase-ts/blob/e9765e8460bbe9c4a20641f805a5e682f0097174/.github/workflows/release.yml
-and https://github.com/palgroup/palbase-ts/actions/runs/34035374818
-VERIFIED: 2026-09-06 via the workflow source and GitHub run state. TIER: standard.
-
-Registry evidence: `latest` and `next` both resolve to 36.0.1; querying 36.0.2
-returned E404 before versioning. Only the backend package is selected for a
-patch release, with the existing image-before-npm order preserved.
-
-Publication preflight observation: `ci:version` initially failed in the GitHub
-changelog adapter because the local fix commit was not yet on GitHub. The commit
-API returned HTTP 422 for `bfd6060` and resolved the existing base commit, ruling
-out an authentication failure. Publishing the fix commit to a temporary branch
-made the same `ci:version` command succeed without changing tooling or workflow.
-Only backend package version/changelog and the consumed changeset changed.

package/docs/paltimate/2026-09-06-fake-offset-claim/verification.md

@@ -1,145 +0,0 @@
-# Backend fake defects: proof, fix, proof
-
-Date: 2026-09-06. Runtime: Bun 1.3.9, macOS arm64.
-Published baseline: `@palbase/backend@36.0.0` from npm, unchanged.
-Source baseline: nested `palbase-ts` repository, commit `295958d`, package 36.0.1.
-The source checkout still contained both reported defects.
-
-## Reproduction
-
-The supplied `scripts/reproduce-sdk-bugs.ts` was absent from this workspace.
-`backend/scripts/reproduce-sdk-bugs.ts` reconstructs the two supplied independent
-contracts with public package imports and no application fixtures or credentials.
-An identical copy was run in a scratch consumer of the published npm tarball.
-
-Published baseline commands:
-
-```sh
-npm pack @palbase/backend@36.0.0 --ignore-scripts --pack-destination /tmp/palbase-sdk-fake-proof.CaHHuo --json
-# Scratch package depends on that unchanged tarball.
-bun install --ignore-scripts
-bun reproduce-sdk-bugs.ts
-```
-
-Observed before any source fix:
-
-```text
-FAIL findMany honors offset before limit
-  actual: [{ id: 'a' }], expected: [{ id: 'b' }]
-FAIL claim evaluates now() in returned and stored rows
-  actual typeof created_at: 'object', expected: 'string'
-0 passed, 2 failed
-exit 1
-```
-
-The raw claim's returned AND stored rows carried `Symbol(palbase.tx.expr)`.
-Tarball SHA-1 from npm pack: `0c665f63e2a9b98f5f736df050d17038305a5399`.
-
-## Hypotheses and runtime discrimination
-
-Pagination hypotheses: ignored offset, lost typed forwarding, wrong ordering.
-With deliberately unsorted `c,a,b` seeds, raw calls at offsets 0, 1, 2 and 3
-all returned `a`. Sorting therefore ran, and bypassing the typed wrapper still
-failed. The source pagination step used `slice(0, limit)` and its local option
-type omitted offset.
-
-Claim hypotheses: skipped insert-expression evaluation, incompatible expression
-marker, accidental materialization during reading. Passing the SAME `now()`
-object to insert and claim returned a timestamp from insert, while claim stored
-that original expression object by identity. A later read also returned the
-expression, excluding a return-only formatting error.
-
-Observed paths, cross-checked against the source:
-
-- Public `/test` export → `src/test/fake-db.ts:65` → shared
-  `src/__tests__/helpers/mock-db.ts` operation implementation.
-- Typed `fake.db.public.<table>.findMany` → `src/runtime.ts:498` → the same
-  raw operation, with offset forwarded.
-- Typed claim → `src/runtime.ts:531` → raw claim.
-- The helper is bundled into the shipped `/test` entry by `tsup.config.ts`;
-  its `__tests__` directory name does not make it an unused test-only copy.
-
-## Source regression proof and changes
-
-Command before and after the implementation change, from `backend`:
-
-```sh
-pnpm test src/test/fake-db.test.ts src/test/fake-db-parity.test.ts
-```
-
-| Tree | Result | Exit |
-| --- | --- | --- |
-| Original existing focused suite | 37 passed | 0 |
-| New regressions, original implementation | 12 failed, 38 passed | 1 |
-| Same tests, fixed implementation | 50 passed, no type errors | 0 |
-
-The repair applies offset after filtering/ordering and before projection, and
-uses the engine's existing limit/offset validation contract. Claim reuses the
-insert-expression resolver and write-value guards before storing a new row.
-Existing-row claims still return the original row without recording a new write.
-
-Coverage includes raw and typed calls, filter/sort/projection ordering, distinct
-pages, omitted/zero offset, an empty tail, zero limit, invalid pagination,
-timestamp validity in returned/stored/tracked rows, repeated claims, and refusal
-of invalid insert values without side effects. Explicit `id` lookup/deletion
-semantics are unaffected.
-
-## Built package and review
-
-Fresh build: `pnpm -w turbo run build --filter=@palbase/backend` → exit 0,
-backend cache miss, ESM/CJS/declarations generated.
-
-From `backend`, against the built public package entry points:
-
-```text
-$ bun scripts/reproduce-sdk-bugs.ts
-PASS findMany honors offset before limit
-PASS claim evaluates now() in returned and stored rows
-2 passed, 0 failed
-exit 0
-```
-
-`pnpm typecheck` → exit 0.
-`pnpm check:api` → exit 0; 424 exports and 421 signatures unchanged.
-Independent reviewer: no actionable findings; separate source probe and
-42-test fake suite both passed.
-
-## Full-suite environment findings
-
-The first shared-workspace `pnpm test` exited 1: 6 failed / 1900 passed tests,
-3 collection failures and 3 worker RPC errors. It included ignored generated
-Bun consumer tests under `bench/database-dx/generated/...`, which Vitest cannot
-load (`bun:test`), plus five timeouts under concurrent load.
-
-The sixth failure was an existing probabilistic cursor-test assertion:
-`src/engine/cursor.test.ts:15` replaces character 10 with `x`, even when it
-already is `x`. An independent loop observed this at attempt 82: the
-"changed" token equalled the original, and decoding correctly accepted it.
-Neither this test nor cursor implementation is changed by this fix.
-
-Final suite verification uses a detached temporary checkout at the same commit,
-with identical fix/test/probe files and the existing installed dependencies.
-File scheduling is serial; no assertions, timeouts or test selections are changed.
-The copied implementation, regression tests, and independent probe were checked
-byte-for-byte against the working files with `cmp` (all exit 0).
-
-Final command, from the isolated checkout's `backend` directory:
-
-```text
-$ pnpm test --no-file-parallelism
-Test Files  128 passed (128)
-     Tests  1906 passed (1906)
-Type Errors  no errors
-Duration  38.41s
-exit 0
-```
-
-The isolated checkout was also freshly built (backend cache miss, exit 0), and
-`bun scripts/reproduce-sdk-bugs.ts` there returned 2 passed / 0 failed, exit 0.
-The shared workspace's generated Bun tests are not tracked SDK test files; their
-absence in this checkout accounts for the three fewer collected files.
-
-Full raw command logs are retained in `/tmp/palbase-sdk-fake-proof.CaHHuo`.
-This initial verification covered source and local build artifacts, with no live
-PostgreSQL run. The user subsequently requested publication as backend 36.0.2;
-its registry installation is checked with the same independent contract probes.