@palbase/backend 39.1.7 → 40.0.1

package/dist/engine/index.d.cts

@@ -1,8 +1,8 @@
-import '../index-CCY1h_J2.cjs';
-export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, k as EngineConfig, M as ModuleClients, R as RateLimiter, l as RequestDatabase, m as RouteEntry, n as RuntimeHooks, S as ScrubResult, o as SqlDriver, p as SqlTx, q as buildRouteTable, r as createApp, s as createLazyTransaction, t as createOps, u as createRequestDatabase, v as effectiveAuth, w as hostAllowed, x as installCommandExecutor, y as installEgressFence, i as isDeclarationRefused, z as loadConfig, F as makeMemoryCache, G as matchRoute, H as quoteIdent, I as scrubSecrets, J as setCursorKey, K as withQueryCancellation, L as withTables } from '../index-Db5QHdTa.cjs';
+import '../index-t7Ie44mM.cjs';
+export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, k as DatabaseAdmission, l as DatabaseAdmissionOptions, a as DeclarationRefused, E as EgressPolicy, m as EngineConfig, M as ModuleClients, R as RateLimiter, n as RequestDatabase, o as RouteEntry, p as RuntimeHooks, S as ScrubResult, q as SqlDriver, r as SqlTx, s as buildRouteTable, t as createApp, u as createLazyTransaction, v as createOps, w as createRequestDatabase, x as databaseAdmission, y as effectiveAuth, z as hostAllowed, F as installCommandExecutor, G as installEgressFence, i as isDeclarationRefused, H as loadConfig, I as makeMemoryCache, J as matchRoute, K as quoteIdent, L as scrubSecrets, N as setCursorKey, O as withQueryCancellation, P as withTables } from '../index-BAjRbjnq.cjs';
 import 'zod';
 import '../db/env.cjs';
 import '../stack.cjs';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.cjs';
-import '../registry-CH6HRR6T.cjs';
+import '../registry-C88au7ti.cjs';

package/dist/engine/index.d.ts

@@ -1,8 +1,8 @@
-import '../index-fLaf0PN2.js';
-export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, a as DeclarationRefused, E as EgressPolicy, k as EngineConfig, M as ModuleClients, R as RateLimiter, l as RequestDatabase, m as RouteEntry, n as RuntimeHooks, S as ScrubResult, o as SqlDriver, p as SqlTx, q as buildRouteTable, r as createApp, s as createLazyTransaction, t as createOps, u as createRequestDatabase, v as effectiveAuth, w as hostAllowed, x as installCommandExecutor, y as installEgressFence, i as isDeclarationRefused, z as loadConfig, F as makeMemoryCache, G as matchRoute, H as quoteIdent, I as scrubSecrets, J as setCursorKey, K as withQueryCancellation, L as withTables } from '../index-QWN1Ncrv.js';
+import '../index-B8zC9oV0.js';
+export { A as App, g as AuthVerifier, B as BootRefused, h as COMMAND_EXECUTOR_DDL, j as CreateAppOptions, D as DECLARATION_REFUSAL, k as DatabaseAdmission, l as DatabaseAdmissionOptions, a as DeclarationRefused, E as EgressPolicy, m as EngineConfig, M as ModuleClients, R as RateLimiter, n as RequestDatabase, o as RouteEntry, p as RuntimeHooks, S as ScrubResult, q as SqlDriver, r as SqlTx, s as buildRouteTable, t as createApp, u as createLazyTransaction, v as createOps, w as createRequestDatabase, x as databaseAdmission, y as effectiveAuth, z as hostAllowed, F as installCommandExecutor, G as installEgressFence, i as isDeclarationRefused, H as loadConfig, I as makeMemoryCache, J as matchRoute, K as quoteIdent, L as scrubSecrets, N as setCursorKey, O as withQueryCancellation, P as withTables } from '../index-Ck2K1TgC.js';
 import 'zod';
 import '../db/env.js';
 import '../stack.js';
 import 'node:async_hooks';
 import '../module-Dl1KFVtc.js';
-import '../registry-C7tCRyPm.js';
+import '../registry-wwVUGunv.js';

package/dist/engine/index.js

@@ -8,6 +8,7 @@ import {
   createLazyTransaction,
   createOps,
   createRequestDatabase,
+  databaseAdmission,
   effectiveAuth,
   hostAllowed,
   installCommandExecutor,
@@ -20,12 +21,12 @@ import {
   setCursorKey,
   withQueryCancellation,
   withTables
-} from "../chunk-C525N4OW.js";
+} from "../chunk-AS2HDWVQ.js";
 import {
   DECLARATION_REFUSAL,
   DeclarationRefused,
   isDeclarationRefused
-} from "../chunk-H7EKL6HC.js";
+} from "../chunk-RA7KFELX.js";
 import "../chunk-GHNC2UHS.js";
 import "../chunk-XZWOMPD3.js";
 import "../chunk-FFO36MQQ.js";
@@ -45,6 +46,7 @@ export {
   createLazyTransaction,
   createOps,
   createRequestDatabase,
+  databaseAdmission,
   effectiveAuth,
   hostAllowed,
   installCommandExecutor,

package/dist/{index-fLaf0PN2.d.ts → index-B8zC9oV0.d.ts}

@@ -1,6 +1,6 @@
 import { z, ZodSchema } from 'zod';
 import { Schemas, Tables, TableTypes } from './db/env.js';
-import { PalbaseFlagKey, Buckets, BucketTypes, PalbaseSecretName } from './stack.js';
+import { PalbaseRoleName, PalbaseFlagKey, Buckets, BucketTypes, PalbaseSecretName } from './stack.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
 
 interface CommandOptions {
@@ -179,7 +179,7 @@ interface User {
      * already gone here. An empty array for a caller who holds none, never null:
      * `user.roles.includes("agent")` needs no guard.
      */
-    roles: string[];
+    roles: PalbaseRoleName[];
     metadata: Record<string, unknown>;
     /**
      * Reserved, server-owned verified device claim. `null` on an authenticated
@@ -201,7 +201,7 @@ interface AuthConfig {
      * of whenever the token happens to expire.
      *
      * Not signed in → 401; signed in without the role → 403. */
-    role?: string;
+    role?: PalbaseRoleName;
     /** Required permission for access, as `resource.action` (e.g. "posts.delete_any").
      *
      * Resolved through `auth.has_permission(...)`, which answers from the roles

package/dist/{index-Db5QHdTa.d.cts → index-BAjRbjnq.d.cts}

@@ -1,6 +1,6 @@
-import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-CCY1h_J2.cjs';
+import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-t7Ie44mM.cjs';
 import { T as Token } from './module-Dl1KFVtc.cjs';
-import { R as RouteMeta } from './registry-CH6HRR6T.cjs';
+import { R as RouteMeta } from './registry-C88au7ti.cjs';
 
 interface AdmissionLease {
     queueMs: number;
@@ -1191,4 +1191,4 @@ interface App {
 }
 declare function createApp(opts: CreateAppOptions): Promise<App>;
 
-export { type App as A, BootRefused as B, type Container as C, DECLARATION_REFUSAL as D, type EgressPolicy as E, makeMemoryCache as F, matchRoute as G, quoteIdent as H, scrubSecrets as I, setCursorKey as J, withQueryCancellation as K, withTables as L, type ModuleClients as M, RateLimiter as R, type ScrubResult as S, DeclarationRefused as a, DiError as b, type DiKind as c, type ModulePressure as d, assertNoOrphanEntryPoints as e, buildContainer as f, AuthVerifier as g, COMMAND_EXECUTOR_DDL as h, isDeclarationRefused as i, type CreateAppOptions as j, type EngineConfig as k, type RequestDatabase as l, type RouteEntry as m, type RuntimeHooks as n, type SqlDriver as o, type SqlTx as p, buildRouteTable as q, createApp as r, createLazyTransaction as s, createOps as t, createRequestDatabase as u, effectiveAuth as v, hostAllowed as w, installCommandExecutor as x, installEgressFence as y, loadConfig as z };
+export { type App as A, BootRefused as B, type Container as C, DECLARATION_REFUSAL as D, type EgressPolicy as E, installCommandExecutor as F, installEgressFence as G, loadConfig as H, makeMemoryCache as I, matchRoute as J, quoteIdent as K, scrubSecrets as L, type ModuleClients as M, setCursorKey as N, withQueryCancellation as O, withTables as P, RateLimiter as R, type ScrubResult as S, DeclarationRefused as a, DiError as b, type DiKind as c, type ModulePressure as d, assertNoOrphanEntryPoints as e, buildContainer as f, AuthVerifier as g, COMMAND_EXECUTOR_DDL as h, isDeclarationRefused as i, type CreateAppOptions as j, DatabaseAdmission as k, type DatabaseAdmissionOptions as l, type EngineConfig as m, type RequestDatabase as n, type RouteEntry as o, type RuntimeHooks as p, type SqlDriver as q, type SqlTx as r, buildRouteTable as s, createApp as t, createLazyTransaction as u, createOps as v, createRequestDatabase as w, databaseAdmission as x, effectiveAuth as y, hostAllowed as z };

package/dist/{index-QWN1Ncrv.d.ts → index-Ck2K1TgC.d.ts}

@@ -1,6 +1,6 @@
-import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-fLaf0PN2.js';
+import { c as DatabaseDiagnosticsOptions, d as DatabaseDiagnostics, a as DBClient, T as TransactionIsolation, e as DBOps, f as RawPageOptions, P as Page, g as TxPlanBody, C as CommandOptions, h as TxPlanResponse, A as AuthSpec, i as CacheClient, b as RuntimeServices, _ as __runWithRuntime, j as __requestALS } from './index-B8zC9oV0.js';
 import { T as Token } from './module-Dl1KFVtc.js';
-import { R as RouteMeta } from './registry-C7tCRyPm.js';
+import { R as RouteMeta } from './registry-wwVUGunv.js';
 
 interface AdmissionLease {
     queueMs: number;
@@ -1191,4 +1191,4 @@ interface App {
 }
 declare function createApp(opts: CreateAppOptions): Promise<App>;
 
-export { type App as A, BootRefused as B, type Container as C, DECLARATION_REFUSAL as D, type EgressPolicy as E, makeMemoryCache as F, matchRoute as G, quoteIdent as H, scrubSecrets as I, setCursorKey as J, withQueryCancellation as K, withTables as L, type ModuleClients as M, RateLimiter as R, type ScrubResult as S, DeclarationRefused as a, DiError as b, type DiKind as c, type ModulePressure as d, assertNoOrphanEntryPoints as e, buildContainer as f, AuthVerifier as g, COMMAND_EXECUTOR_DDL as h, isDeclarationRefused as i, type CreateAppOptions as j, type EngineConfig as k, type RequestDatabase as l, type RouteEntry as m, type RuntimeHooks as n, type SqlDriver as o, type SqlTx as p, buildRouteTable as q, createApp as r, createLazyTransaction as s, createOps as t, createRequestDatabase as u, effectiveAuth as v, hostAllowed as w, installCommandExecutor as x, installEgressFence as y, loadConfig as z };
+export { type App as A, BootRefused as B, type Container as C, DECLARATION_REFUSAL as D, type EgressPolicy as E, installCommandExecutor as F, installEgressFence as G, loadConfig as H, makeMemoryCache as I, matchRoute as J, quoteIdent as K, scrubSecrets as L, type ModuleClients as M, setCursorKey as N, withQueryCancellation as O, withTables as P, RateLimiter as R, type ScrubResult as S, DeclarationRefused as a, DiError as b, type DiKind as c, type ModulePressure as d, assertNoOrphanEntryPoints as e, buildContainer as f, AuthVerifier as g, COMMAND_EXECUTOR_DDL as h, isDeclarationRefused as i, type CreateAppOptions as j, DatabaseAdmission as k, type DatabaseAdmissionOptions as l, type EngineConfig as m, type RequestDatabase as n, type RouteEntry as o, type RuntimeHooks as p, type SqlDriver as q, type SqlTx as r, buildRouteTable as s, createApp as t, createLazyTransaction as u, createOps as v, createRequestDatabase as w, databaseAdmission as x, effectiveAuth as y, hostAllowed as z };

package/dist/{index-CCY1h_J2.d.cts → index-t7Ie44mM.d.cts}

@@ -1,6 +1,6 @@
 import { z, ZodSchema } from 'zod';
 import { Schemas, Tables, TableTypes } from './db/env.cjs';
-import { PalbaseFlagKey, Buckets, BucketTypes, PalbaseSecretName } from './stack.cjs';
+import { PalbaseRoleName, PalbaseFlagKey, Buckets, BucketTypes, PalbaseSecretName } from './stack.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
 
 interface CommandOptions {
@@ -179,7 +179,7 @@ interface User {
      * already gone here. An empty array for a caller who holds none, never null:
      * `user.roles.includes("agent")` needs no guard.
      */
-    roles: string[];
+    roles: PalbaseRoleName[];
     metadata: Record<string, unknown>;
     /**
      * Reserved, server-owned verified device claim. `null` on an authenticated
@@ -201,7 +201,7 @@ interface AuthConfig {
      * of whenever the token happens to expire.
      *
      * Not signed in → 401; signed in without the role → 403. */
-    role?: string;
+    role?: PalbaseRoleName;
     /** Required permission for access, as `resource.action` (e.g. "posts.delete_any").
      *
      * Resolved through `auth.has_permission(...)`, which answers from the roles

package/dist/index.cjs

@@ -4529,6 +4529,73 @@ function isDeclarationRefused(e) {
 }
 __name(isDeclarationRefused, "isDeclarationRefused");
 
+// src/stack-gen.ts
+function liveNames(names) {
+  return [
+    ...new Set(names)
+  ].sort();
+}
+__name(liveNames, "liveNames");
+function memberName(name) {
+  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
+}
+__name(memberName, "memberName");
+function members(names) {
+  if (names.length === 0) return "";
+  return `
+${names.map((n) => `    ${memberName(n)}: true;`).join("\n")}
+  `;
+}
+__name(members, "members");
+function bucketMembers(buckets) {
+  const normalized = buckets.map((b) => typeof b === "string" ? {
+    name: b,
+    variants: []
+  } : b);
+  const byName = /* @__PURE__ */ new Map();
+  for (const b of normalized) byName.set(b.name, b.variants);
+  const names = [
+    ...byName.keys()
+  ].sort();
+  if (names.length === 0) return "";
+  const rows = names.map((name) => {
+    const variants = [
+      ...new Set(byName.get(name) ?? [])
+    ].sort();
+    const union = variants.length === 0 ? "never" : variants.map((v) => JSON.stringify(v)).join(" | ");
+    return `    ${memberName(name)}: { variants: ${union} };`;
+  });
+  return `
+${rows.join("\n")}
+  `;
+}
+__name(bucketMembers, "bucketMembers");
+function stackInterfaceBody(names) {
+  const secrets = liveNames(names.secrets);
+  const flags = liveNames(names.flags);
+  const roles = liveNames(names.roles ?? []);
+  return `  interface Secrets {${members(secrets)}}
+
+  interface Flags {${members(flags)}}
+
+  interface Buckets {${bucketMembers(names.buckets)}}
+
+  interface Roles {${members(roles)}}`;
+}
+__name(stackInterfaceBody, "stackInterfaceBody");
+function makeStackDts(names) {
+  return `// palbase-stack.d.ts \u2014 GENERATED by @palbase/backend. Do not edit.
+// Source: the linked environment's stack.
+
+declare module "@palbase/backend/stack" {
+${stackInterfaceBody(names)}
+}
+
+export {};
+`;
+}
+__name(makeStackDts, "makeStackDts");
+
 // src/db/unique.ts
 function uniqueKeysOf(table) {
   const columns = table.columns ?? {};
@@ -4766,7 +4833,17 @@ function refuseFreeFormTransforms(schemas) {
   }
 }
 __name(refuseFreeFormTransforms, "refuseFreeFormTransforms");
-function makeEnvDts(schemas) {
+var ENV_BLOCK_START = "// palbase:env:begin";
+var ENV_BLOCK_END = "// palbase:env:end";
+var STACK_BLOCK_START = "// palbase:stack:begin";
+var STACK_BLOCK_END = "// palbase:stack:end";
+var EMPTY_STACK_NAMES = {
+  secrets: [],
+  flags: [],
+  buckets: [],
+  roles: []
+};
+function makeEnvDts(schemas, names) {
   refuseFreeFormTransforms(schemas);
   const relations = buildRelations(schemas);
   const publicSchema = schemas.find((s) => s.name === "public");
@@ -4809,75 +4886,23 @@ type Pg<T, N extends string> = T & { readonly __pg?: N };
  */
 type Json = string | number | boolean | null | undefined | Json[] | { [k: string]: Json };
 
+${ENV_BLOCK_START}
 declare module "@palbase/backend/env" {
   interface Tables {${body}}
   interface Schemas {${schemasBody}}
 }
+${ENV_BLOCK_END}
 
-export {};
-`;
-}
-__name(makeEnvDts, "makeEnvDts");
-
-// src/stack-gen.ts
-function liveNames(names) {
-  return [
-    ...new Set(names)
-  ].sort();
-}
-__name(liveNames, "liveNames");
-function memberName(name) {
-  return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);
-}
-__name(memberName, "memberName");
-function members(names) {
-  if (names.length === 0) return "";
-  return `
-${names.map((n) => `    ${memberName(n)}: true;`).join("\n")}
-  `;
-}
-__name(members, "members");
-function bucketMembers(buckets) {
-  const normalized = buckets.map((b) => typeof b === "string" ? {
-    name: b,
-    variants: []
-  } : b);
-  const byName = /* @__PURE__ */ new Map();
-  for (const b of normalized) byName.set(b.name, b.variants);
-  const names = [
-    ...byName.keys()
-  ].sort();
-  if (names.length === 0) return "";
-  const rows = names.map((name) => {
-    const variants = [
-      ...new Set(byName.get(name) ?? [])
-    ].sort();
-    const union = variants.length === 0 ? "never" : variants.map((v) => JSON.stringify(v)).join(" | ");
-    return `    ${memberName(name)}: { variants: ${union} };`;
-  });
-  return `
-${rows.join("\n")}
-  `;
-}
-__name(bucketMembers, "bucketMembers");
-function makeStackDts(names) {
-  const secrets = liveNames(names.secrets);
-  const flags = liveNames(names.flags);
-  return `// palbase-stack.d.ts \u2014 GENERATED by @palbase/backend. Do not edit.
-// Source: the linked environment's stack.
-
+${STACK_BLOCK_START}
 declare module "@palbase/backend/stack" {
-  interface Secrets {${members(secrets)}}
-
-  interface Flags {${members(flags)}}
-
-  interface Buckets {${bucketMembers(names.buckets)}}
+${stackInterfaceBody(names ?? EMPTY_STACK_NAMES)}
 }
+${STACK_BLOCK_END}
 
 export {};
 `;
 }
-__name(makeStackDts, "makeStackDts");
+__name(makeEnvDts, "makeEnvDts");
 
 // src/decorators/registry.ts
 var ROUTES = /* @__PURE__ */ Symbol.for("palbase.backend.routes");