@palbase/backend 5.0.0 → 5.2.0

package/dist/db/index.d.cts

@@ -1,4 +1,4 @@
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, S as SchemaDef, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from '../index-mr3Co63T.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, S as SchemaDef, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from '../index-BAEWl60b.cjs';
 import './env.cjs';
-import '../endpoint-BEHjfvFH.cjs';
+import '../endpoint-B3uVK6OL.cjs';
 import 'zod';

package/dist/db/index.d.ts

@@ -1,4 +1,4 @@
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, S as SchemaDef, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from '../index-BTVdhfsb.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, E as EnvTypedDatabase, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, S as SchemaDef, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from '../index-D9uLjEhB.js';
 import './env.js';
-import '../endpoint-BEHjfvFH.js';
+import '../endpoint-B3uVK6OL.js';
 import 'zod';

package/dist/{endpoint-BEHjfvFH.d.cts → endpoint-B3uVK6OL.d.cts}

@@ -245,6 +245,45 @@ interface PalbaseFlag {
     enabled: boolean;
     variant?: PalbaseFlagVariant;
 }
+/**
+ * Any JSON value a feature flag (or per-user override) can hold once resolved.
+ * Mirrors the wire shape the user-flags module stores and returns.
+ */
+type PalbaseFlagValue = boolean | number | string | null | PalbaseFlagValue[] | {
+    [key: string]: PalbaseFlagValue;
+};
+/** Where a resolved flag value came from. */
+type PalbaseFlagSource = "system" | "user";
+/** Result of {@link PalbaseFlagsClient.setOverrideForUser}. */
+interface PalbaseSetOverrideResult {
+    key: string;
+    value: PalbaseFlagValue;
+    source: PalbaseFlagSource;
+}
+/** Result of {@link PalbaseFlagsClient.setOverridesForUser}. */
+interface PalbaseSetOverridesResult {
+    values: Record<string, PalbaseFlagValue>;
+}
+/** Result of {@link PalbaseFlagsClient.clearOverrideForUser} — `value` is the
+ * system default the user falls back to. */
+interface PalbaseClearOverrideResult {
+    key: string;
+    value: PalbaseFlagValue;
+    source: PalbaseFlagSource;
+}
+/** Result of {@link PalbaseFlagsClient.clearAllOverridesForUser}. */
+interface PalbaseClearAllOverridesResult {
+    deleted: number;
+}
+/** One cross-user operation for {@link PalbaseFlagsClient.batchSetOverrides}. */
+interface PalbaseBatchOverrideOperation {
+    userId: string;
+    values: Record<string, PalbaseFlagValue>;
+}
+/** Result of {@link PalbaseFlagsClient.batchSetOverrides}. */
+interface PalbaseBatchSetOverridesResult {
+    applied: number;
+}
 /** File object returned by storage operations. */
 interface PalbaseFileObject {
     name: string;
@@ -977,6 +1016,22 @@ interface PalbaseFlagsClient {
     getVariant(flagName: string, context?: PalbaseFlagContext): Promise<PalbaseResult<PalbaseFlagVariant>>;
     /** Get all flags for the project. */
     getAll(context?: PalbaseFlagContext): Promise<PalbaseResult<PalbaseFlag[]>>;
+    /**
+     * Set (or replace) a single feature-flag override for one user. The override
+     * shadows the project (system) default for that user until cleared.
+     *
+     * @example
+     * await Flags.setOverrideForUser("user_123", "new_checkout", true);
+     */
+    setOverrideForUser(userId: string, key: string, value: PalbaseFlagValue): Promise<PalbaseResult<PalbaseSetOverrideResult>>;
+    /** Set multiple overrides for one user in a single call. */
+    setOverridesForUser(userId: string, values: Record<string, PalbaseFlagValue>): Promise<PalbaseResult<PalbaseSetOverridesResult>>;
+    /** Clear one override for a user, restoring the project (system) default. */
+    clearOverrideForUser(userId: string, key: string): Promise<PalbaseResult<PalbaseClearOverrideResult>>;
+    /** Clear all overrides for a user, restoring project (system) defaults. */
+    clearAllOverridesForUser(userId: string): Promise<PalbaseResult<PalbaseClearAllOverridesResult>>;
+    /** Apply override writes across many users in one request (max 1000 ops). */
+    batchSetOverrides(operations: ReadonlyArray<PalbaseBatchOverrideOperation>): Promise<PalbaseResult<PalbaseBatchSetOverridesResult>>;
 }
 /**
  * Push sub-client surface (server-only: fan-out to users / topics).
@@ -1471,4 +1526,4 @@ type Middleware = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise
  */
 type AuthSpec = boolean | Partial<AuthConfig>;
 
-export { type PalbaseDocumentSnapshot as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseBucketClient as G, HttpError as H, type PalbaseCmsClient as I, type PalbaseCmsFindOneOptions as J, type PalbaseCmsFindOptions as K, type Logger as L, type Middleware as M, NotFound as N, type PalbaseCohortQueryInput as O, type PBRequest as P, type QueueClient as Q, type RateLimitConfig as R, type PalbaseCohortResult as S, type PalbaseCollectionRef as T, type User as U, type PalbaseCountQueryInput as V, type PalbaseCountResult as W, type PalbaseCreateLinkParams as X, type PalbaseDeviceInfo as Y, type PalbaseDeviceTokenView as Z, type PalbaseDocumentRef as _, type PalbaseModuleClients as a, Unauthorized as a$, type PalbaseEmailClient as a0, type PalbaseEmailSendParams as a1, type PalbaseEmailSendResponse as a2, type PalbaseEventNamesResult as a3, type PalbaseEventsQueryInput as a4, type PalbaseEventsResult as a5, type PalbaseFileObject as a6, type PalbaseFlag as a7, type PalbaseFlagContext as a8, type PalbaseFlagVariant as a9, type PalbasePushSendParams as aA, type PalbasePushSendResponse as aB, type PalbaseQrCodeOptions as aC, type PalbaseQuerySnapshot as aD, type PalbaseRealtimeChannel as aE, type PalbaseRealtimeClient as aF, type PalbaseRealtimeMessage as aG, type PalbaseRegisterDeviceParams as aH, type PalbaseResult as aI, type PalbaseRetentionQueryInput as aJ, type PalbaseRetentionResult as aK, type PalbaseSession as aL, type PalbaseSignedUrlResponse as aM, type PalbaseSmsClient as aN, type PalbaseSmsSendParams as aO, type PalbaseSmsSendResponse as aP, type PalbaseTransformOptions as aQ, type PalbaseUpdateLinkParams as aR, type PalbaseUploadOptions as aS, type PalbaseUser as aT, type PalbaseUserDetailResult as aU, type PalbaseUsersQueryInput as aV, type PalbaseUsersResult as aW, type PalbaseVerifyRequestSignatureParams as aX, type PalbaseWhereOperator as aY, TooManyRequests as aZ, type TxClient as a_, type PalbaseFunctionsClient as aa, type PalbaseFunnelQueryInput as ab, type PalbaseFunnelResult as ac, type PalbaseIdentifyTraits as ad, type PalbaseInboxClient as ae, type PalbaseInboxListOptions as af, type PalbaseInboxListResult as ag, type PalbaseInboxMessage as ah, type PalbaseInboxSendParams as ai, type PalbaseInboxSendResponse as aj, type PalbaseInitialLink as ak, type PalbaseInvokeOptions as al, type PalbaseLink as am, type PalbaseLinkAnalytics as an, type PalbaseLinkDetails as ao, type PalbaseLinksClient as ap, type PalbaseListLinksOptions as aq, type PalbaseListLinksResult as ar, type PalbaseListOptions as as, type PalbaseMatchParams as at, type PalbaseMultiChannelResponse as au, type PalbaseOverviewResult as av, type PalbasePreferences as aw, type PalbasePreferencesClient as ax, type PalbasePublicUrlResponse as ay, type PalbasePushClient as az, type PalbaseDocsClient as b, defineMiddleware as b0, type PalbaseFlagsClient as c, type PalbaseNotificationsClient as d, type PalbaseStorageClient as e, type AuthConfig as f, type ClientInfo as g, Conflict as h, type DBOps as i, type ErrorMap as j, type ErrorThrowers as k, Forbidden as l, type HttpMethod as m, type MiddlewareContext as n, type MiddlewareHandler as o, PalError as p, type PalbaseAnalyticsClient as q, type PalbaseAnalyticsManagementNamespace as r, type PalbaseAnalyticsProperties as s, type PalbaseAnalyticsQueryNamespace as t, type PalbaseAttestAndroidParams as u, type PalbaseAttestAndroidResult as v, type PalbaseAttestiOSParams as w, type PalbaseAttestiOSResult as x, type PalbaseAuthClient as y, type PalbaseBindDeviceParams as z };
+export { type PalbaseCreateLinkParams as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseBatchSetOverridesResult as G, HttpError as H, type PalbaseBindDeviceParams as I, type PalbaseBucketClient as J, type PalbaseClearAllOverridesResult as K, type Logger as L, type Middleware as M, NotFound as N, type PalbaseClearOverrideResult as O, type PBRequest as P, type QueueClient as Q, type RateLimitConfig as R, type PalbaseCmsClient as S, type PalbaseCmsFindOneOptions as T, type User as U, type PalbaseCmsFindOptions as V, type PalbaseCohortQueryInput as W, type PalbaseCohortResult as X, type PalbaseCollectionRef as Y, type PalbaseCountQueryInput as Z, type PalbaseCountResult as _, type PalbaseModuleClients as a, type PalbaseUser as a$, type PalbaseDeviceInfo as a0, type PalbaseDeviceTokenView as a1, type PalbaseDocumentRef as a2, type PalbaseDocumentSnapshot as a3, type PalbaseEmailClient as a4, type PalbaseEmailSendParams as a5, type PalbaseEmailSendResponse as a6, type PalbaseEventNamesResult as a7, type PalbaseEventsQueryInput as a8, type PalbaseEventsResult as a9, type PalbaseMultiChannelResponse as aA, type PalbaseOverviewResult as aB, type PalbasePreferences as aC, type PalbasePreferencesClient as aD, type PalbasePublicUrlResponse as aE, type PalbasePushClient as aF, type PalbasePushSendParams as aG, type PalbasePushSendResponse as aH, type PalbaseQrCodeOptions as aI, type PalbaseQuerySnapshot as aJ, type PalbaseRealtimeChannel as aK, type PalbaseRealtimeClient as aL, type PalbaseRealtimeMessage as aM, type PalbaseRegisterDeviceParams as aN, type PalbaseResult as aO, type PalbaseRetentionQueryInput as aP, type PalbaseRetentionResult as aQ, type PalbaseSession as aR, type PalbaseSetOverrideResult as aS, type PalbaseSetOverridesResult as aT, type PalbaseSignedUrlResponse as aU, type PalbaseSmsClient as aV, type PalbaseSmsSendParams as aW, type PalbaseSmsSendResponse as aX, type PalbaseTransformOptions as aY, type PalbaseUpdateLinkParams as aZ, type PalbaseUploadOptions as a_, type PalbaseFileObject as aa, type PalbaseFlag as ab, type PalbaseFlagContext as ac, type PalbaseFlagSource as ad, type PalbaseFlagValue as ae, type PalbaseFlagVariant as af, type PalbaseFunctionsClient as ag, type PalbaseFunnelQueryInput as ah, type PalbaseFunnelResult as ai, type PalbaseIdentifyTraits as aj, type PalbaseInboxClient as ak, type PalbaseInboxListOptions as al, type PalbaseInboxListResult as am, type PalbaseInboxMessage as an, type PalbaseInboxSendParams as ao, type PalbaseInboxSendResponse as ap, type PalbaseInitialLink as aq, type PalbaseInvokeOptions as ar, type PalbaseLink as as, type PalbaseLinkAnalytics as at, type PalbaseLinkDetails as au, type PalbaseLinksClient as av, type PalbaseListLinksOptions as aw, type PalbaseListLinksResult as ax, type PalbaseListOptions as ay, type PalbaseMatchParams as az, type PalbaseDocsClient as b, type PalbaseUserDetailResult as b0, type PalbaseUsersQueryInput as b1, type PalbaseUsersResult as b2, type PalbaseVerifyRequestSignatureParams as b3, type PalbaseWhereOperator as b4, TooManyRequests as b5, type TxClient as b6, Unauthorized as b7, defineMiddleware as b8, type PalbaseFlagsClient as c, type PalbaseNotificationsClient as d, type PalbaseStorageClient as e, type AuthConfig as f, type ClientInfo as g, Conflict as h, type DBOps as i, type ErrorMap as j, type ErrorThrowers as k, Forbidden as l, type HttpMethod as m, type MiddlewareContext as n, type MiddlewareHandler as o, PalError as p, type PalbaseAnalyticsClient as q, type PalbaseAnalyticsManagementNamespace as r, type PalbaseAnalyticsProperties as s, type PalbaseAnalyticsQueryNamespace as t, type PalbaseAttestAndroidParams as u, type PalbaseAttestAndroidResult as v, type PalbaseAttestiOSParams as w, type PalbaseAttestiOSResult as x, type PalbaseAuthClient as y, type PalbaseBatchOverrideOperation as z };

package/dist/{endpoint-BEHjfvFH.d.ts → endpoint-B3uVK6OL.d.ts}

@@ -245,6 +245,45 @@ interface PalbaseFlag {
     enabled: boolean;
     variant?: PalbaseFlagVariant;
 }
+/**
+ * Any JSON value a feature flag (or per-user override) can hold once resolved.
+ * Mirrors the wire shape the user-flags module stores and returns.
+ */
+type PalbaseFlagValue = boolean | number | string | null | PalbaseFlagValue[] | {
+    [key: string]: PalbaseFlagValue;
+};
+/** Where a resolved flag value came from. */
+type PalbaseFlagSource = "system" | "user";
+/** Result of {@link PalbaseFlagsClient.setOverrideForUser}. */
+interface PalbaseSetOverrideResult {
+    key: string;
+    value: PalbaseFlagValue;
+    source: PalbaseFlagSource;
+}
+/** Result of {@link PalbaseFlagsClient.setOverridesForUser}. */
+interface PalbaseSetOverridesResult {
+    values: Record<string, PalbaseFlagValue>;
+}
+/** Result of {@link PalbaseFlagsClient.clearOverrideForUser} — `value` is the
+ * system default the user falls back to. */
+interface PalbaseClearOverrideResult {
+    key: string;
+    value: PalbaseFlagValue;
+    source: PalbaseFlagSource;
+}
+/** Result of {@link PalbaseFlagsClient.clearAllOverridesForUser}. */
+interface PalbaseClearAllOverridesResult {
+    deleted: number;
+}
+/** One cross-user operation for {@link PalbaseFlagsClient.batchSetOverrides}. */
+interface PalbaseBatchOverrideOperation {
+    userId: string;
+    values: Record<string, PalbaseFlagValue>;
+}
+/** Result of {@link PalbaseFlagsClient.batchSetOverrides}. */
+interface PalbaseBatchSetOverridesResult {
+    applied: number;
+}
 /** File object returned by storage operations. */
 interface PalbaseFileObject {
     name: string;
@@ -977,6 +1016,22 @@ interface PalbaseFlagsClient {
     getVariant(flagName: string, context?: PalbaseFlagContext): Promise<PalbaseResult<PalbaseFlagVariant>>;
     /** Get all flags for the project. */
     getAll(context?: PalbaseFlagContext): Promise<PalbaseResult<PalbaseFlag[]>>;
+    /**
+     * Set (or replace) a single feature-flag override for one user. The override
+     * shadows the project (system) default for that user until cleared.
+     *
+     * @example
+     * await Flags.setOverrideForUser("user_123", "new_checkout", true);
+     */
+    setOverrideForUser(userId: string, key: string, value: PalbaseFlagValue): Promise<PalbaseResult<PalbaseSetOverrideResult>>;
+    /** Set multiple overrides for one user in a single call. */
+    setOverridesForUser(userId: string, values: Record<string, PalbaseFlagValue>): Promise<PalbaseResult<PalbaseSetOverridesResult>>;
+    /** Clear one override for a user, restoring the project (system) default. */
+    clearOverrideForUser(userId: string, key: string): Promise<PalbaseResult<PalbaseClearOverrideResult>>;
+    /** Clear all overrides for a user, restoring project (system) defaults. */
+    clearAllOverridesForUser(userId: string): Promise<PalbaseResult<PalbaseClearAllOverridesResult>>;
+    /** Apply override writes across many users in one request (max 1000 ops). */
+    batchSetOverrides(operations: ReadonlyArray<PalbaseBatchOverrideOperation>): Promise<PalbaseResult<PalbaseBatchSetOverridesResult>>;
 }
 /**
  * Push sub-client surface (server-only: fan-out to users / topics).
@@ -1471,4 +1526,4 @@ type Middleware = (ctx: MiddlewareContext, next: () => Promise<void>) => Promise
  */
 type AuthSpec = boolean | Partial<AuthConfig>;
 
-export { type PalbaseDocumentSnapshot as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseBucketClient as G, HttpError as H, type PalbaseCmsClient as I, type PalbaseCmsFindOneOptions as J, type PalbaseCmsFindOptions as K, type Logger as L, type Middleware as M, NotFound as N, type PalbaseCohortQueryInput as O, type PBRequest as P, type QueueClient as Q, type RateLimitConfig as R, type PalbaseCohortResult as S, type PalbaseCollectionRef as T, type User as U, type PalbaseCountQueryInput as V, type PalbaseCountResult as W, type PalbaseCreateLinkParams as X, type PalbaseDeviceInfo as Y, type PalbaseDeviceTokenView as Z, type PalbaseDocumentRef as _, type PalbaseModuleClients as a, Unauthorized as a$, type PalbaseEmailClient as a0, type PalbaseEmailSendParams as a1, type PalbaseEmailSendResponse as a2, type PalbaseEventNamesResult as a3, type PalbaseEventsQueryInput as a4, type PalbaseEventsResult as a5, type PalbaseFileObject as a6, type PalbaseFlag as a7, type PalbaseFlagContext as a8, type PalbaseFlagVariant as a9, type PalbasePushSendParams as aA, type PalbasePushSendResponse as aB, type PalbaseQrCodeOptions as aC, type PalbaseQuerySnapshot as aD, type PalbaseRealtimeChannel as aE, type PalbaseRealtimeClient as aF, type PalbaseRealtimeMessage as aG, type PalbaseRegisterDeviceParams as aH, type PalbaseResult as aI, type PalbaseRetentionQueryInput as aJ, type PalbaseRetentionResult as aK, type PalbaseSession as aL, type PalbaseSignedUrlResponse as aM, type PalbaseSmsClient as aN, type PalbaseSmsSendParams as aO, type PalbaseSmsSendResponse as aP, type PalbaseTransformOptions as aQ, type PalbaseUpdateLinkParams as aR, type PalbaseUploadOptions as aS, type PalbaseUser as aT, type PalbaseUserDetailResult as aU, type PalbaseUsersQueryInput as aV, type PalbaseUsersResult as aW, type PalbaseVerifyRequestSignatureParams as aX, type PalbaseWhereOperator as aY, TooManyRequests as aZ, type TxClient as a_, type PalbaseFunctionsClient as aa, type PalbaseFunnelQueryInput as ab, type PalbaseFunnelResult as ac, type PalbaseIdentifyTraits as ad, type PalbaseInboxClient as ae, type PalbaseInboxListOptions as af, type PalbaseInboxListResult as ag, type PalbaseInboxMessage as ah, type PalbaseInboxSendParams as ai, type PalbaseInboxSendResponse as aj, type PalbaseInitialLink as ak, type PalbaseInvokeOptions as al, type PalbaseLink as am, type PalbaseLinkAnalytics as an, type PalbaseLinkDetails as ao, type PalbaseLinksClient as ap, type PalbaseListLinksOptions as aq, type PalbaseListLinksResult as ar, type PalbaseListOptions as as, type PalbaseMatchParams as at, type PalbaseMultiChannelResponse as au, type PalbaseOverviewResult as av, type PalbasePreferences as aw, type PalbasePreferencesClient as ax, type PalbasePublicUrlResponse as ay, type PalbasePushClient as az, type PalbaseDocsClient as b, defineMiddleware as b0, type PalbaseFlagsClient as c, type PalbaseNotificationsClient as d, type PalbaseStorageClient as e, type AuthConfig as f, type ClientInfo as g, Conflict as h, type DBOps as i, type ErrorMap as j, type ErrorThrowers as k, Forbidden as l, type HttpMethod as m, type MiddlewareContext as n, type MiddlewareHandler as o, PalError as p, type PalbaseAnalyticsClient as q, type PalbaseAnalyticsManagementNamespace as r, type PalbaseAnalyticsProperties as s, type PalbaseAnalyticsQueryNamespace as t, type PalbaseAttestAndroidParams as u, type PalbaseAttestAndroidResult as v, type PalbaseAttestiOSParams as w, type PalbaseAttestiOSResult as x, type PalbaseAuthClient as y, type PalbaseBindDeviceParams as z };
+export { type PalbaseCreateLinkParams as $, type AuthSpec as A, BadRequest as B, type CacheClient as C, type DBClient as D, type ErrorDef as E, type FileContext as F, type PalbaseBatchSetOverridesResult as G, HttpError as H, type PalbaseBindDeviceParams as I, type PalbaseBucketClient as J, type PalbaseClearAllOverridesResult as K, type Logger as L, type Middleware as M, NotFound as N, type PalbaseClearOverrideResult as O, type PBRequest as P, type QueueClient as Q, type RateLimitConfig as R, type PalbaseCmsClient as S, type PalbaseCmsFindOneOptions as T, type User as U, type PalbaseCmsFindOptions as V, type PalbaseCohortQueryInput as W, type PalbaseCohortResult as X, type PalbaseCollectionRef as Y, type PalbaseCountQueryInput as Z, type PalbaseCountResult as _, type PalbaseModuleClients as a, type PalbaseUser as a$, type PalbaseDeviceInfo as a0, type PalbaseDeviceTokenView as a1, type PalbaseDocumentRef as a2, type PalbaseDocumentSnapshot as a3, type PalbaseEmailClient as a4, type PalbaseEmailSendParams as a5, type PalbaseEmailSendResponse as a6, type PalbaseEventNamesResult as a7, type PalbaseEventsQueryInput as a8, type PalbaseEventsResult as a9, type PalbaseMultiChannelResponse as aA, type PalbaseOverviewResult as aB, type PalbasePreferences as aC, type PalbasePreferencesClient as aD, type PalbasePublicUrlResponse as aE, type PalbasePushClient as aF, type PalbasePushSendParams as aG, type PalbasePushSendResponse as aH, type PalbaseQrCodeOptions as aI, type PalbaseQuerySnapshot as aJ, type PalbaseRealtimeChannel as aK, type PalbaseRealtimeClient as aL, type PalbaseRealtimeMessage as aM, type PalbaseRegisterDeviceParams as aN, type PalbaseResult as aO, type PalbaseRetentionQueryInput as aP, type PalbaseRetentionResult as aQ, type PalbaseSession as aR, type PalbaseSetOverrideResult as aS, type PalbaseSetOverridesResult as aT, type PalbaseSignedUrlResponse as aU, type PalbaseSmsClient as aV, type PalbaseSmsSendParams as aW, type PalbaseSmsSendResponse as aX, type PalbaseTransformOptions as aY, type PalbaseUpdateLinkParams as aZ, type PalbaseUploadOptions as a_, type PalbaseFileObject as aa, type PalbaseFlag as ab, type PalbaseFlagContext as ac, type PalbaseFlagSource as ad, type PalbaseFlagValue as ae, type PalbaseFlagVariant as af, type PalbaseFunctionsClient as ag, type PalbaseFunnelQueryInput as ah, type PalbaseFunnelResult as ai, type PalbaseIdentifyTraits as aj, type PalbaseInboxClient as ak, type PalbaseInboxListOptions as al, type PalbaseInboxListResult as am, type PalbaseInboxMessage as an, type PalbaseInboxSendParams as ao, type PalbaseInboxSendResponse as ap, type PalbaseInitialLink as aq, type PalbaseInvokeOptions as ar, type PalbaseLink as as, type PalbaseLinkAnalytics as at, type PalbaseLinkDetails as au, type PalbaseLinksClient as av, type PalbaseListLinksOptions as aw, type PalbaseListLinksResult as ax, type PalbaseListOptions as ay, type PalbaseMatchParams as az, type PalbaseDocsClient as b, type PalbaseUserDetailResult as b0, type PalbaseUsersQueryInput as b1, type PalbaseUsersResult as b2, type PalbaseVerifyRequestSignatureParams as b3, type PalbaseWhereOperator as b4, TooManyRequests as b5, type TxClient as b6, Unauthorized as b7, defineMiddleware as b8, type PalbaseFlagsClient as c, type PalbaseNotificationsClient as d, type PalbaseStorageClient as e, type AuthConfig as f, type ClientInfo as g, Conflict as h, type DBOps as i, type ErrorMap as j, type ErrorThrowers as k, Forbidden as l, type HttpMethod as m, type MiddlewareContext as n, type MiddlewareHandler as o, PalError as p, type PalbaseAnalyticsClient as q, type PalbaseAnalyticsManagementNamespace as r, type PalbaseAnalyticsProperties as s, type PalbaseAnalyticsQueryNamespace as t, type PalbaseAttestAndroidParams as u, type PalbaseAttestAndroidResult as v, type PalbaseAttestiOSParams as w, type PalbaseAttestiOSResult as x, type PalbaseAuthClient as y, type PalbaseBatchOverrideOperation as z };

package/dist/{index-mr3Co63T.d.cts → index-BAEWl60b.d.cts}

@@ -1,5 +1,5 @@
 import { Tables, TableTypes } from './db/env.cjs';
-import { D as DBClient } from './endpoint-BEHjfvFH.cjs';
+import { D as DBClient } from './endpoint-B3uVK6OL.cjs';
 
 /** On delete action for foreign key references. */
 type OnDeleteAction = 'cascade' | 'set null' | 'restrict' | 'no action';

package/dist/{index-BTVdhfsb.d.ts → index-D9uLjEhB.d.ts}

@@ -1,5 +1,5 @@
 import { Tables, TableTypes } from './db/env.js';
-import { D as DBClient } from './endpoint-BEHjfvFH.js';
+import { D as DBClient } from './endpoint-B3uVK6OL.js';
 
 /** On delete action for foreign key references. */
 type OnDeleteAction = 'cascade' | 'set null' | 'restrict' | 'no action';

package/dist/index.cjs

@@ -30,16 +30,19 @@ __export(src_exports, {
   Delete: () => Delete,
   Documents: () => Documents,
   EXTENSION_DEPENDENCIES: () => EXTENSION_DEPENDENCIES,
+  FLAGS_CONFIG_KIND: () => FLAGS_CONFIG_KIND,
   Flags: () => Flags,
   Forbidden: () => Forbidden,
   Get: () => Get,
   Headers: () => Headers,
   HttpError: () => HttpError,
   Log: () => Log,
+  NOTIFICATIONS_CONFIG_KIND: () => NOTIFICATIONS_CONFIG_KIND,
   NotFound: () => NotFound,
   Notifications: () => Notifications,
   OptionalUser: () => OptionalUser,
   PALBASE_EXTENSIONS: () => PALBASE_EXTENSIONS,
+  PROVIDER_CATALOG: () => PROVIDER_CATALOG,
   PalError: () => PalError,
   Param: () => Param,
   Patch: () => Patch,
@@ -48,9 +51,11 @@ __export(src_exports, {
   Put: () => Put,
   Query: () => Query,
   Queue: () => Queue,
+  RESERVED_SECRET_PREFIX: () => RESERVED_SECRET_PREFIX,
   Req: () => Req,
   RequestId: () => RequestId,
   Resource: () => Resource,
+  STORAGE_CONFIG_KIND: () => STORAGE_CONFIG_KIND,
   Storage: () => Storage,
   TooManyRequests: () => TooManyRequests,
   TraceId: () => TraceId,
@@ -65,19 +70,27 @@ __export(src_exports, {
   __shutdownResources: () => __shutdownResources,
   auth: () => auth,
   boolean: () => boolean,
+  bucket: () => bucket,
+  buildProvider: () => buildProvider,
+  defineFlags: () => defineFlags,
   defineJob: () => defineJob,
   defineMiddleware: () => defineMiddleware,
+  defineNotifications: () => defineNotifications,
   defineSchema: () => defineSchema,
+  defineStorage: () => defineStorage,
   defineWebhook: () => defineWebhook,
   defineWorker: () => defineWorker,
   documents: () => documents,
   enumType: () => enumType,
+  flag: () => flag,
   integer: () => integer,
   isPalbaseExtension: () => isPalbaseExtension,
   jsonb: () => jsonb,
   makeEnvDts: () => makeEnvDts,
   makeTypedDB: () => makeTypedDB,
+  parseFileSizeLimit: () => parseFileSizeLimit,
   policy: () => policy,
+  reservedSecretKey: () => reservedSecretKey,
   storage: () => storage,
   text: () => text,
   timestamp: () => timestamp,
@@ -459,6 +472,277 @@ export {};
 `;
 }
 
+// src/config/storage.ts
+var STORAGE_CONFIG_KIND = "storage";
+var UNIT_BYTES = {
+  b: 1,
+  kb: 1024,
+  mb: 1024 ** 2,
+  gb: 1024 ** 3,
+  tb: 1024 ** 4
+};
+function parseFileSizeLimit(input) {
+  if (typeof input === "number") {
+    if (!Number.isFinite(input) || input < 0 || !Number.isInteger(input)) {
+      throw new Error(
+        `bucket fileSizeLimit must be a non-negative integer number of bytes, got ${input}`
+      );
+    }
+    return input;
+  }
+  const trimmed = input.trim();
+  const match = /^(\d+(?:\.\d+)?)\s*([a-zA-Z]+)?$/.exec(trimmed);
+  if (!match) {
+    throw new Error(
+      `bucket fileSizeLimit string must be "<number><unit>" like "5MB" or "1GB", got "${input}"`
+    );
+  }
+  const value = Number.parseFloat(match[1]);
+  const unit = (match[2] ?? "b").toLowerCase();
+  const multiplier = UNIT_BYTES[unit];
+  if (multiplier === void 0) {
+    throw new Error(
+      `bucket fileSizeLimit has an unknown unit "${match[2]}" \u2014 use B, KB, MB, GB, or TB (e.g. "5MB")`
+    );
+  }
+  const bytes = value * multiplier;
+  if (!Number.isFinite(bytes) || bytes < 0) {
+    throw new Error(`bucket fileSizeLimit resolved to an invalid byte count: ${bytes}`);
+  }
+  return Math.round(bytes);
+}
+var MIME_RE = /^[a-zA-Z0-9][a-zA-Z0-9!#$&^_.+-]*\/(?:\*|[a-zA-Z0-9][a-zA-Z0-9!#$&^_.+-]*)$/;
+function bucket(opts = {}) {
+  const fileSizeLimit = opts.fileSizeLimit === void 0 ? null : parseFileSizeLimit(opts.fileSizeLimit);
+  let allowedMimeTypes = null;
+  if (opts.allowedMimeTypes !== void 0) {
+    if (!Array.isArray(opts.allowedMimeTypes)) {
+      throw new Error("bucket allowedMimeTypes must be an array of MIME-type strings");
+    }
+    for (const mime of opts.allowedMimeTypes) {
+      if (typeof mime !== "string" || !MIME_RE.test(mime.trim())) {
+        throw new Error(
+          `bucket allowedMimeTypes entry "${mime}" is not a valid MIME type (expected "type/subtype", e.g. "image/png")`
+        );
+      }
+    }
+    allowedMimeTypes = [...new Set(opts.allowedMimeTypes.map((m) => m.trim()))];
+  }
+  return {
+    public: opts.public ?? false,
+    fileSizeLimit,
+    allowedMimeTypes
+  };
+}
+function defineStorage(input) {
+  if (input === null || typeof input !== "object" || typeof input.buckets !== "object") {
+    throw new Error("defineStorage expects { buckets: { <name>: bucket({...}) } }");
+  }
+  const buckets = {};
+  for (const name of Object.keys(input.buckets)) {
+    if (name.length === 0) {
+      throw new Error("bucket name must be a non-empty string");
+    }
+    const def = input.buckets[name];
+    if (def === void 0) continue;
+    buckets[name] = def;
+  }
+  return { __config: STORAGE_CONFIG_KIND, buckets };
+}
+
+// src/config/notifications.ts
+var NOTIFICATIONS_CONFIG_KIND = "notifications";
+var RESERVED_SECRET_PREFIX = "PB_NOTIFICATIONS";
+var PROVIDER_CATALOG = {
+  apns: {
+    channel: "push",
+    required: ["teamId", "keyId", "bundleId"],
+    optional: ["isProduction"],
+    secrets: ["p8"]
+  },
+  fcm: {
+    channel: "push",
+    required: [],
+    optional: [],
+    secrets: ["serviceAccount"]
+  },
+  sendgrid: {
+    channel: "email",
+    required: ["fromDomain"],
+    optional: [],
+    secrets: ["apiKey"]
+  },
+  ses: {
+    channel: "email",
+    required: ["region", "accessKeyId", "fromDomain"],
+    optional: [],
+    secrets: ["secretAccessKey"]
+  },
+  smtp: {
+    channel: "email",
+    required: ["host", "port", "fromEmail"],
+    optional: ["username", "useStarttls"],
+    secrets: ["password"]
+  },
+  acs: {
+    channel: "email",
+    required: ["fromEmail"],
+    optional: ["fromName"],
+    secrets: ["connectionString"]
+  },
+  twilio: {
+    channel: "sms",
+    // account_sid required; one of from_number / messaging_service_sid required
+    // (enforced by the refine in buildProvider, not by the flat `required` list).
+    required: ["accountSid"],
+    optional: ["fromNumber", "messagingServiceSid"],
+    secrets: ["authToken"]
+  }
+};
+function buildProvider(name, opts) {
+  const entry = PROVIDER_CATALOG[name];
+  const src = { ...opts };
+  const enabled = src.enabled === void 0 ? false : Boolean(src.enabled);
+  if (!enabled) {
+    return { enabled: false };
+  }
+  const def = { enabled: true };
+  for (const field of entry.required) {
+    const value = src[field];
+    if (value === void 0 || value === null || value === "") {
+      throw new Error(
+        `notifications: provider "${name}" is enabled but missing required field "${field}"`
+      );
+    }
+    def[field] = value;
+  }
+  for (const field of entry.optional) {
+    if (src[field] !== void 0) {
+      def[field] = src[field];
+    }
+  }
+  if (name === "twilio") {
+    const hasFrom = Boolean(def.fromNumber);
+    const hasMsg = Boolean(def.messagingServiceSid);
+    if (!hasFrom && !hasMsg) {
+      throw new Error(
+        'notifications: provider "twilio" requires one of "fromNumber" or "messagingServiceSid"'
+      );
+    }
+  }
+  return def;
+}
+function defineNotifications(input) {
+  if (input === null || typeof input !== "object") {
+    throw new Error("defineNotifications expects { push?, email?, sms? }");
+  }
+  const config = {
+    __config: NOTIFICATIONS_CONFIG_KIND,
+    push: {},
+    email: {},
+    sms: {}
+  };
+  const push = input.push ?? {};
+  if (push.apns !== void 0) config.push.apns = buildProvider("apns", push.apns);
+  if (push.fcm !== void 0) config.push.fcm = buildProvider("fcm", push.fcm);
+  const email = input.email ?? {};
+  if (email.sendgrid !== void 0) config.email.sendgrid = buildProvider("sendgrid", email.sendgrid);
+  if (email.ses !== void 0) config.email.ses = buildProvider("ses", email.ses);
+  if (email.smtp !== void 0) config.email.smtp = buildProvider("smtp", email.smtp);
+  if (email.acs !== void 0) config.email.acs = buildProvider("acs", email.acs);
+  const sms = input.sms ?? {};
+  if (sms.twilio !== void 0) config.sms.twilio = buildProvider("twilio", sms.twilio);
+  return config;
+}
+function reservedSecretKey(provider, secretField) {
+  return `${RESERVED_SECRET_PREFIX}_${camelToUpperSnake(provider)}_${camelToUpperSnake(secretField)}`;
+}
+function camelToUpperSnake(s) {
+  return s.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toUpperCase();
+}
+
+// src/config/flags.ts
+var FLAGS_CONFIG_KIND = "flags";
+var FLAG_KEY_RE = /^[a-zA-Z][a-zA-Z0-9_]*$/;
+function valueMatchesType(type, value) {
+  switch (type) {
+    case "boolean":
+      return typeof value === "boolean";
+    case "number":
+      return typeof value === "number" && Number.isFinite(value);
+    case "string":
+      return typeof value === "string";
+  }
+}
+function flag(opts) {
+  if (opts === null || typeof opts !== "object") {
+    throw new Error("flag() expects { type, default, variants?, description? }");
+  }
+  const { type } = opts;
+  if (type !== "boolean" && type !== "number" && type !== "string") {
+    throw new Error(`flag type must be "boolean", "number", or "string", got ${JSON.stringify(type)}`);
+  }
+  if (!valueMatchesType(type, opts.default)) {
+    throw new Error(
+      `flag default ${JSON.stringify(opts.default)} does not match type "${type}"`
+    );
+  }
+  let variants = null;
+  if (opts.variants !== void 0) {
+    if (type !== "string") {
+      throw new Error(`flag variants are only valid for type "string" (got type "${type}")`);
+    }
+    if (!Array.isArray(opts.variants)) {
+      throw new Error("flag variants must be an array of strings");
+    }
+    for (const v of opts.variants) {
+      if (typeof v !== "string" || v.length === 0) {
+        throw new Error(`flag variant ${JSON.stringify(v)} must be a non-empty string`);
+      }
+    }
+    variants = [...new Set(opts.variants)];
+    if (variants.length === 0) {
+      throw new Error("flag variants must be a non-empty list when supplied");
+    }
+    if (!variants.includes(opts.default)) {
+      throw new Error(
+        `flag default ${JSON.stringify(opts.default)} is not one of its variants [${variants.map((v) => JSON.stringify(v)).join(", ")}]`
+      );
+    }
+  }
+  let description = null;
+  if (opts.description !== void 0) {
+    if (typeof opts.description !== "string") {
+      throw new Error("flag description must be a string");
+    }
+    const trimmed = opts.description.trim();
+    description = trimmed.length > 0 ? trimmed : null;
+  }
+  return {
+    type,
+    default: opts.default,
+    variants,
+    description
+  };
+}
+function defineFlags(input) {
+  if (input === null || typeof input !== "object" || typeof input.flags !== "object") {
+    throw new Error("defineFlags expects { flags: { <key>: flag({...}) } }");
+  }
+  const flags = {};
+  for (const key of Object.keys(input.flags)) {
+    if (!FLAG_KEY_RE.test(key)) {
+      throw new Error(
+        `flag key ${JSON.stringify(key)} is invalid \u2014 must start with a letter and contain only letters, digits, and underscores`
+      );
+    }
+    const def = input.flags[key];
+    if (def === void 0) continue;
+    flags[key] = def;
+  }
+  return { __config: FLAGS_CONFIG_KIND, flags };
+}
+
 // src/decorators/controller.ts
 var CONTROLLER_META = /* @__PURE__ */ Symbol.for("palbase.backend.controllerMeta");
 function Controller(basePath, options = {}) {
@@ -987,16 +1271,19 @@ var import_zod = require("zod");
   Delete,
   Documents,
   EXTENSION_DEPENDENCIES,
+  FLAGS_CONFIG_KIND,
   Flags,
   Forbidden,
   Get,
   Headers,
   HttpError,
   Log,
+  NOTIFICATIONS_CONFIG_KIND,
   NotFound,
   Notifications,
   OptionalUser,
   PALBASE_EXTENSIONS,
+  PROVIDER_CATALOG,
   PalError,
   Param,
   Patch,
@@ -1005,9 +1292,11 @@ var import_zod = require("zod");
   Put,
   Query,
   Queue,
+  RESERVED_SECRET_PREFIX,
   Req,
   RequestId,
   Resource,
+  STORAGE_CONFIG_KIND,
   Storage,
   TooManyRequests,
   TraceId,
@@ -1022,19 +1311,27 @@ var import_zod = require("zod");
   __shutdownResources,
   auth,
   boolean,
+  bucket,
+  buildProvider,
+  defineFlags,
   defineJob,
   defineMiddleware,
+  defineNotifications,
   defineSchema,
+  defineStorage,
   defineWebhook,
   defineWorker,
   documents,
   enumType,
+  flag,
   integer,
   isPalbaseExtension,
   jsonb,
   makeEnvDts,
   makeTypedDB,
+  parseFileSizeLimit,
   policy,
+  reservedSecretKey,
   storage,
   text,
   timestamp,