@palbase/backend 5.2.0 → 7.0.0

package/dist/index.d.cts

@@ -1,10 +1,10 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, D as DBClient, e as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, U as User$1 } from './endpoint-B3uVK6OL.cjs';
-export { f as AuthConfig, B as BadRequest, g as ClientInfo, h as Conflict, i as DBOps, E as ErrorDef, j as ErrorMap, k as ErrorThrowers, F as FileContext, l as Forbidden, H as HttpError, m as HttpMethod, M as Middleware, n as MiddlewareContext, o as MiddlewareHandler, N as NotFound, P as PBRequest, p as PalError, q as PalbaseAnalyticsClient, r as PalbaseAnalyticsManagementNamespace, s as PalbaseAnalyticsProperties, t as PalbaseAnalyticsQueryNamespace, u as PalbaseAttestAndroidParams, v as PalbaseAttestAndroidResult, w as PalbaseAttestiOSParams, x as PalbaseAttestiOSResult, y as PalbaseAuthClient, z as PalbaseBatchOverrideOperation, G as PalbaseBatchSetOverridesResult, I as PalbaseBindDeviceParams, J as PalbaseBucketClient, K as PalbaseClearAllOverridesResult, O as PalbaseClearOverrideResult, S as PalbaseCmsClient, T as PalbaseCmsFindOneOptions, V as PalbaseCmsFindOptions, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRealtimeChannel, aL as PalbaseRealtimeClient, aM as PalbaseRealtimeMessage, aN as PalbaseRegisterDeviceParams, aO as PalbaseResult, aP as PalbaseRetentionQueryInput, aQ as PalbaseRetentionResult, aR as PalbaseSession, aS as PalbaseSetOverrideResult, aT as PalbaseSetOverridesResult, aU as PalbaseSignedUrlResponse, aV as PalbaseSmsClient, aW as PalbaseSmsSendParams, aX as PalbaseSmsSendResponse, aY as PalbaseTransformOptions, aZ as PalbaseUpdateLinkParams, a_ as PalbaseUploadOptions, a$ as PalbaseUser, b0 as PalbaseUserDetailResult, b1 as PalbaseUsersQueryInput, b2 as PalbaseUsersResult, b3 as PalbaseVerifyRequestSignatureParams, b4 as PalbaseWhereOperator, b5 as TooManyRequests, b6 as TxClient, b7 as Unauthorized, b8 as defineMiddleware } from './endpoint-B3uVK6OL.cjs';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-BFgsOTiL.cjs';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Middleware, o as MiddlewareContext, p as MiddlewareHandler, N as NotFound, P as PBRequest, q as PalError, r as PalbaseAnalyticsClient, s as PalbaseAnalyticsManagementNamespace, t as PalbaseAnalyticsProperties, u as PalbaseAnalyticsQueryNamespace, v as PalbaseAttestAndroidParams, w as PalbaseAttestAndroidResult, x as PalbaseAttestiOSParams, y as PalbaseAttestiOSResult, z as PalbaseAuthClient, G as PalbaseBatchOverrideOperation, I as PalbaseBatchSetOverridesResult, J as PalbaseBindDeviceParams, K as PalbaseBucketClient, O as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCmsClient, V as PalbaseCmsFindOneOptions, W as PalbaseCmsFindOptions, X as PalbaseCohortQueryInput, Y as PalbaseCohortResult, Z as PalbaseCollectionRef, _ as PalbaseCountQueryInput, $ as PalbaseCountResult, a0 as PalbaseCreateLinkParams, a1 as PalbaseDeviceInfo, a2 as PalbaseDeviceTokenView, a3 as PalbaseDocumentRef, a4 as PalbaseDocumentSnapshot, a5 as PalbaseEmailClient, a6 as PalbaseEmailSendParams, a7 as PalbaseEmailSendResponse, a8 as PalbaseEventNamesResult, a9 as PalbaseEventsQueryInput, aa as PalbaseEventsResult, ab as PalbaseFileObject, ac as PalbaseFlag, ad as PalbaseFlagContext, ae as PalbaseFlagSource, af as PalbaseFlagValue, ag as PalbaseFlagVariant, ah as PalbaseFlagsServiceClient, ai as PalbaseFunctionsClient, aj as PalbaseFunnelQueryInput, ak as PalbaseFunnelResult, al as PalbaseIdentifyTraits, am as PalbaseInboxClient, an as PalbaseInboxListOptions, ao as PalbaseInboxListResult, ap as PalbaseInboxMessage, aq as PalbaseInboxSendParams, ar as PalbaseInboxSendResponse, as as PalbaseInitialLink, at as PalbaseInvokeOptions, au as PalbaseLink, av as PalbaseLinkAnalytics, aw as PalbaseLinkDetails, ax as PalbaseLinksClient, ay as PalbaseListLinksOptions, az as PalbaseListLinksResult, aA as PalbaseListOptions, aB as PalbaseMatchParams, aC as PalbaseMultiChannelResponse, aD as PalbaseOverviewResult, aE as PalbasePreferences, aF as PalbasePreferencesClient, aG as PalbasePublicUrlResponse, aH as PalbasePushClient, aI as PalbasePushSendParams, aJ as PalbasePushSendResponse, aK as PalbaseQrCodeOptions, aL as PalbaseQuerySnapshot, aM as PalbaseRegisterDeviceParams, aN as PalbaseResult, aO as PalbaseRetentionQueryInput, aP as PalbaseRetentionResult, aQ as PalbaseSession, aR as PalbaseSetOverrideResult, aS as PalbaseSetOverridesResult, aT as PalbaseSignedUrlResponse, aU as PalbaseSmsClient, aV as PalbaseSmsSendParams, aW as PalbaseSmsSendResponse, aX as PalbaseTransformOptions, aY as PalbaseUpdateLinkParams, aZ as PalbaseUploadOptions, a_ as PalbaseUser, a$ as PalbaseUserDetailResult, b0 as PalbaseUsersQueryInput, b1 as PalbaseUsersResult, b2 as PalbaseVerifyRequestSignatureParams, b3 as PalbaseWhereOperator, b4 as TooManyRequests, b5 as TxClient, b6 as Unauthorized, b7 as defineMiddleware } from './endpoint-BFgsOTiL.cjs';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-BAEWl60b.cjs';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, h as EnvTypedTx, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from './index-BAEWl60b.cjs';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-CE31P7Dt.cjs';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, h as EnvTypedTx, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from './index-CE31P7Dt.cjs';
 export { TableTypes, Tables } from './db/env.cjs';
-import { ZodTypeAny } from 'zod';
+import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 
 /**
@@ -50,9 +50,12 @@ export { z } from 'zod';
 
 /** The set of live clients the runtime injects per request scope.
  *
- * EXCLUDED on purpose: Realtime, Functions, CMS, Links, Analytics, Auth. They
- * are not exposed as backend handler singletons (auth lives on the client SDK;
- * the rest are out of scope for backend endpoints). */
+ * Realtime is BROADCAST-ONLY here (a stateless handler can push an event but
+ * cannot hold a subscription socket — `subscribe()` lives on the client SDK).
+ *
+ * EXCLUDED on purpose: Functions, CMS, Links, Analytics, Auth. They are not
+ * exposed as backend handler singletons (auth lives on the client SDK; the rest
+ * are out of scope for backend endpoints). */
 interface RuntimeServices {
     Database: DBClient;
     Documents: PalbaseDocsClient;
@@ -62,6 +65,7 @@ interface RuntimeServices {
     Log: Logger;
     Notifications: PalbaseNotificationsClient;
     Flags: PalbaseFlagsClient;
+    Realtime: PalbaseRealtimeClient;
 }
 /**
  * Per-request store. The persistent runtime runs each request inside
@@ -125,8 +129,37 @@ declare const Queue: QueueClient;
 declare const Log: Logger;
 /** Push / email / SMS / in-app notifications. */
 declare const Notifications: PalbaseNotificationsClient;
-/** Feature flags. */
+/**
+ * Feature flags.
+ *
+ * Mirrors the `Database` / `Database.asService()` model. The default surface is
+ * RLS-equivalent for flags: reads resolve against the CURRENT request user and
+ * `Flags.setOverride(key, value)` writes an override for that same signed-in
+ * user (no userId argument, no admin power). Cross-user admin writes
+ * (`setOverrideForUser`, …) live behind `Flags.asService()` — explicit and
+ * greppable, just like `Database.asService()`.
+ *
+ * @example
+ * import { Flags } from "@palbase/backend";
+ *
+ * if (await Flags.isEnabled("new_checkout")) { ... }            // current user
+ * await Flags.setOverride("new_checkout", true);                // current user
+ * await Flags.asService().setOverrideForUser("u_9", "x", true); // cross-user
+ */
 declare const Flags: PalbaseFlagsClient;
+/**
+ * The Realtime broadcast singleton for the current request scope. Backend-side
+ * Realtime is BROADCAST-ONLY (a stateless handler can push but not subscribe —
+ * `subscribe()` lives on the client SDK's `pb.realtime`). Fire-and-forget:
+ * `broadcast` resolves once accepted (or with an `error`), never blocking the
+ * handler on subscribers.
+ *
+ * @example
+ * import { Realtime } from "@palbase/backend";
+ *
+ * await Realtime.broadcast("room:42", "message", { text, from: user.id });
+ */
+declare const Realtime: PalbaseRealtimeClient;
 
 /**
  * env-gen.ts — generate the `palbase-env.d.ts` text from a `defineSchema()`
@@ -679,6 +712,20 @@ interface RouteOptions {
     /** Per-route rate limit. */
     rateLimit?: RateLimitConfig;
 }
+/** One inferred throw site: the error CLASS name (e.g. "TodoLocked") and its
+ * wire code (e.g. "todo_locked"). `status`, `hasData`, and the data JSON schema
+ * are NOT carried here — they resolve from the error registry by `code` at
+ * extract/openapi time (single source of truth). */
+interface ThrowDescriptor {
+    name: string;
+    code: string;
+}
+/** Attach the inferred throw descriptors to the route for `fnName` (called by
+ * the stager-injected IIFE that carries the throw analysis result — the
+ * `recordReturn` twin). If the route does not exist yet, the descriptors are
+ * buffered (THROWS_BUFFER) and drained into the route by `recordRoute` when the
+ * method decorator runs. */
+declare function recordThrows(target: object, fnName: string, throws: ThrowDescriptor[]): void;
 
 /** A legacy method decorator. */
 type MethodDecorator = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
@@ -721,6 +768,49 @@ declare function TraceId(): ParameterDecorator;
 /** `@Req()` — inject the raw request object (escape hatch, `: PBRequest`). */
 declare function Req(): ParameterDecorator;
 
+/** One registered error: the wire code, HTTP status, the class name the
+ * analyzer sees, the optional data payload schema, and whether it is one of the
+ * pre-seeded built-in named classes. */
+interface RegisteredError {
+    code: string;
+    status: number;
+    className: string;
+    dataSchema?: ZodTypeAny;
+    /** JSON.stringify of the converted JSON schema — equal digest ⇔ the spec
+     * twins would emit an identical `data` schema for this error. */
+    dataDigest?: string;
+    builtin: boolean;
+}
+/** Get (creating + pre-seeding if absent) the project-global error registry,
+ * keyed by wire code. Anchored on `globalThis` so every copy of the SDK in a
+ * process shares the one registry. */
+declare function getErrorRegistry(): Map<string, RegisteredError>;
+/** Class returned for schema-bearing errors: ctor(data, message?). */
+interface DefinedErrorWithData<S extends ZodTypeAny> {
+    new (data: z.input<S>, message?: string): HttpError;
+    readonly code: string;
+    readonly status: number;
+}
+/** Class returned for schema-less errors: ctor(message?). */
+interface DefinedError {
+    new (message?: string): HttpError;
+    readonly code: string;
+    readonly status: number;
+}
+/**
+ * Define a project error class. MUST be called with literal args (string
+ * literal `code`, numeric literal `status`) at module top level — the deploy
+ * stager's static analyzer reads those literals to resolve throw sites.
+ *
+ * @example
+ * // models/todos/errors.ts
+ * export const TodoLocked = defineError("todo_locked", 409, z.object({ retryAfter: z.number() }));
+ * // services/todo.service.ts
+ * throw new TodoLocked({ retryAfter: 30 });
+ */
+declare function defineError<S extends ZodTypeAny>(code: string, status: number, dataSchema: S): DefinedErrorWithData<S>;
+declare function defineError(code: string, status: number): DefinedError;
+
 /** Non-service, per-invocation data for background worker handlers.
  * Services (Database, Log, …) are imported as singletons, not passed here. */
 interface WorkerMeta {
@@ -1173,4 +1263,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, type CustomWebhookConfig, DBClient, Database, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, type EnvSecretRef, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, type HttpMethodUpper, type JobConfig, type JobMeta, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, OptionalUser, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseStorageClient, Param, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderEventMap, type ProviderName, type ProviderOptions, type ProviderWebhookConfig, Put, Query, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Req, RequestId, type ResolvedCustomWebhook, type ResolvedHook, type ResolvedJobConfig, type ResolvedProviderWebhook, type ResolvedWebhookConfig, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SmtpOptions, Storage, type StorageConfig, type StorageInput, TraceId, type TwilioOptions, User, type UserCreatedEvent, User$1 as UserT, type WebhookEventHandler, type WebhookMeta, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineFlags, defineJob, defineNotifications, defineStorage, defineWebhook, defineWorker, documents, flag, makeEnvDts, parseFileSizeLimit, reservedSecretKey, storage };
+export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, type CustomWebhookConfig, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, type EnvSecretRef, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, type JobConfig, type JobMeta, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, OptionalUser, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderEventMap, type ProviderName, type ProviderOptions, type ProviderWebhookConfig, Put, Query, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type ResolvedCustomWebhook, type ResolvedHook, type ResolvedJobConfig, type ResolvedProviderWebhook, type ResolvedWebhookConfig, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SmtpOptions, Storage, type StorageConfig, type StorageInput, type ThrowDescriptor, TraceId, type TwilioOptions, User, type UserCreatedEvent, User$1 as UserT, type WebhookEventHandler, type WebhookMeta, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineError, defineFlags, defineJob, defineNotifications, defineStorage, defineWebhook, defineWorker, documents, flag, getErrorRegistry, makeEnvDts, parseFileSizeLimit, recordThrows, reservedSecretKey, storage };

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, D as DBClient, e as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, U as User$1 } from './endpoint-B3uVK6OL.js';
-export { f as AuthConfig, B as BadRequest, g as ClientInfo, h as Conflict, i as DBOps, E as ErrorDef, j as ErrorMap, k as ErrorThrowers, F as FileContext, l as Forbidden, H as HttpError, m as HttpMethod, M as Middleware, n as MiddlewareContext, o as MiddlewareHandler, N as NotFound, P as PBRequest, p as PalError, q as PalbaseAnalyticsClient, r as PalbaseAnalyticsManagementNamespace, s as PalbaseAnalyticsProperties, t as PalbaseAnalyticsQueryNamespace, u as PalbaseAttestAndroidParams, v as PalbaseAttestAndroidResult, w as PalbaseAttestiOSParams, x as PalbaseAttestiOSResult, y as PalbaseAuthClient, z as PalbaseBatchOverrideOperation, G as PalbaseBatchSetOverridesResult, I as PalbaseBindDeviceParams, J as PalbaseBucketClient, K as PalbaseClearAllOverridesResult, O as PalbaseClearOverrideResult, S as PalbaseCmsClient, T as PalbaseCmsFindOneOptions, V as PalbaseCmsFindOptions, W as PalbaseCohortQueryInput, X as PalbaseCohortResult, Y as PalbaseCollectionRef, Z as PalbaseCountQueryInput, _ as PalbaseCountResult, $ as PalbaseCreateLinkParams, a0 as PalbaseDeviceInfo, a1 as PalbaseDeviceTokenView, a2 as PalbaseDocumentRef, a3 as PalbaseDocumentSnapshot, a4 as PalbaseEmailClient, a5 as PalbaseEmailSendParams, a6 as PalbaseEmailSendResponse, a7 as PalbaseEventNamesResult, a8 as PalbaseEventsQueryInput, a9 as PalbaseEventsResult, aa as PalbaseFileObject, ab as PalbaseFlag, ac as PalbaseFlagContext, ad as PalbaseFlagSource, ae as PalbaseFlagValue, af as PalbaseFlagVariant, ag as PalbaseFunctionsClient, ah as PalbaseFunnelQueryInput, ai as PalbaseFunnelResult, aj as PalbaseIdentifyTraits, ak as PalbaseInboxClient, al as PalbaseInboxListOptions, am as PalbaseInboxListResult, an as PalbaseInboxMessage, ao as PalbaseInboxSendParams, ap as PalbaseInboxSendResponse, aq as PalbaseInitialLink, ar as PalbaseInvokeOptions, as as PalbaseLink, at as PalbaseLinkAnalytics, au as PalbaseLinkDetails, av as PalbaseLinksClient, aw as PalbaseListLinksOptions, ax as PalbaseListLinksResult, ay as PalbaseListOptions, az as PalbaseMatchParams, aA as PalbaseMultiChannelResponse, aB as PalbaseOverviewResult, aC as PalbasePreferences, aD as PalbasePreferencesClient, aE as PalbasePublicUrlResponse, aF as PalbasePushClient, aG as PalbasePushSendParams, aH as PalbasePushSendResponse, aI as PalbaseQrCodeOptions, aJ as PalbaseQuerySnapshot, aK as PalbaseRealtimeChannel, aL as PalbaseRealtimeClient, aM as PalbaseRealtimeMessage, aN as PalbaseRegisterDeviceParams, aO as PalbaseResult, aP as PalbaseRetentionQueryInput, aQ as PalbaseRetentionResult, aR as PalbaseSession, aS as PalbaseSetOverrideResult, aT as PalbaseSetOverridesResult, aU as PalbaseSignedUrlResponse, aV as PalbaseSmsClient, aW as PalbaseSmsSendParams, aX as PalbaseSmsSendResponse, aY as PalbaseTransformOptions, aZ as PalbaseUpdateLinkParams, a_ as PalbaseUploadOptions, a$ as PalbaseUser, b0 as PalbaseUserDetailResult, b1 as PalbaseUsersQueryInput, b2 as PalbaseUsersResult, b3 as PalbaseVerifyRequestSignatureParams, b4 as PalbaseWhereOperator, b5 as TooManyRequests, b6 as TxClient, b7 as Unauthorized, b8 as defineMiddleware } from './endpoint-B3uVK6OL.js';
+import { C as CacheClient, b as PalbaseDocsClient, c as PalbaseFlagsClient, L as Logger, d as PalbaseNotificationsClient, Q as QueueClient, e as PalbaseRealtimeClient, D as DBClient, f as PalbaseStorageClient, A as AuthSpec, R as RateLimitConfig, H as HttpError, U as User$1 } from './endpoint-BFgsOTiL.js';
+export { g as AuthConfig, B as BadRequest, h as ClientInfo, i as Conflict, j as DBOps, E as ErrorDef, k as ErrorMap, l as ErrorThrowers, F as FileContext, m as Forbidden, n as HttpMethod, M as Middleware, o as MiddlewareContext, p as MiddlewareHandler, N as NotFound, P as PBRequest, q as PalError, r as PalbaseAnalyticsClient, s as PalbaseAnalyticsManagementNamespace, t as PalbaseAnalyticsProperties, u as PalbaseAnalyticsQueryNamespace, v as PalbaseAttestAndroidParams, w as PalbaseAttestAndroidResult, x as PalbaseAttestiOSParams, y as PalbaseAttestiOSResult, z as PalbaseAuthClient, G as PalbaseBatchOverrideOperation, I as PalbaseBatchSetOverridesResult, J as PalbaseBindDeviceParams, K as PalbaseBucketClient, O as PalbaseClearAllOverridesResult, S as PalbaseClearOverrideResult, T as PalbaseCmsClient, V as PalbaseCmsFindOneOptions, W as PalbaseCmsFindOptions, X as PalbaseCohortQueryInput, Y as PalbaseCohortResult, Z as PalbaseCollectionRef, _ as PalbaseCountQueryInput, $ as PalbaseCountResult, a0 as PalbaseCreateLinkParams, a1 as PalbaseDeviceInfo, a2 as PalbaseDeviceTokenView, a3 as PalbaseDocumentRef, a4 as PalbaseDocumentSnapshot, a5 as PalbaseEmailClient, a6 as PalbaseEmailSendParams, a7 as PalbaseEmailSendResponse, a8 as PalbaseEventNamesResult, a9 as PalbaseEventsQueryInput, aa as PalbaseEventsResult, ab as PalbaseFileObject, ac as PalbaseFlag, ad as PalbaseFlagContext, ae as PalbaseFlagSource, af as PalbaseFlagValue, ag as PalbaseFlagVariant, ah as PalbaseFlagsServiceClient, ai as PalbaseFunctionsClient, aj as PalbaseFunnelQueryInput, ak as PalbaseFunnelResult, al as PalbaseIdentifyTraits, am as PalbaseInboxClient, an as PalbaseInboxListOptions, ao as PalbaseInboxListResult, ap as PalbaseInboxMessage, aq as PalbaseInboxSendParams, ar as PalbaseInboxSendResponse, as as PalbaseInitialLink, at as PalbaseInvokeOptions, au as PalbaseLink, av as PalbaseLinkAnalytics, aw as PalbaseLinkDetails, ax as PalbaseLinksClient, ay as PalbaseListLinksOptions, az as PalbaseListLinksResult, aA as PalbaseListOptions, aB as PalbaseMatchParams, aC as PalbaseMultiChannelResponse, aD as PalbaseOverviewResult, aE as PalbasePreferences, aF as PalbasePreferencesClient, aG as PalbasePublicUrlResponse, aH as PalbasePushClient, aI as PalbasePushSendParams, aJ as PalbasePushSendResponse, aK as PalbaseQrCodeOptions, aL as PalbaseQuerySnapshot, aM as PalbaseRegisterDeviceParams, aN as PalbaseResult, aO as PalbaseRetentionQueryInput, aP as PalbaseRetentionResult, aQ as PalbaseSession, aR as PalbaseSetOverrideResult, aS as PalbaseSetOverridesResult, aT as PalbaseSignedUrlResponse, aU as PalbaseSmsClient, aV as PalbaseSmsSendParams, aW as PalbaseSmsSendResponse, aX as PalbaseTransformOptions, aY as PalbaseUpdateLinkParams, aZ as PalbaseUploadOptions, a_ as PalbaseUser, a$ as PalbaseUserDetailResult, b0 as PalbaseUsersQueryInput, b1 as PalbaseUsersResult, b2 as PalbaseVerifyRequestSignatureParams, b3 as PalbaseWhereOperator, b4 as TooManyRequests, b5 as TxClient, b6 as Unauthorized, b7 as defineMiddleware } from './endpoint-BFgsOTiL.js';
 import { AsyncLocalStorage } from 'node:async_hooks';
-import { E as EnvTypedDatabase, S as SchemaDef } from './index-D9uLjEhB.js';
-export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, h as EnvTypedTx, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from './index-D9uLjEhB.js';
+import { E as EnvTypedDatabase, S as SchemaDef } from './index-E7CMoir3.js';
+export { C as ColumnBuilder, a as ColumnDef, b as ColumnMap, c as ColumnType, d as EXTENSION_DEPENDENCIES, e as EnvServiceDatabase, f as EnvTables, g as EnvTypedTable, h as EnvTypedTx, I as InsertShape, O as OnDeleteAction, P as PALBASE_EXTENSIONS, i as PalbaseExtension, j as PolicyBuilder, k as PolicyCommand, l as PolicyDef, m as PolicyMode, R as RowShape, n as SchemaInput, T as TableDef, o as TableInput, p as TypedDB, q as TypedTable, r as TypedTx, s as boolean, t as defineSchema, u as enumType, v as integer, w as isPalbaseExtension, x as jsonb, y as makeTypedDB, z as policy, A as text, B as timestamp, D as uuid } from './index-E7CMoir3.js';
 export { TableTypes, Tables } from './db/env.js';
-import { ZodTypeAny } from 'zod';
+import { ZodTypeAny, z } from 'zod';
 export { z } from 'zod';
 
 /**
@@ -50,9 +50,12 @@ export { z } from 'zod';
 
 /** The set of live clients the runtime injects per request scope.
  *
- * EXCLUDED on purpose: Realtime, Functions, CMS, Links, Analytics, Auth. They
- * are not exposed as backend handler singletons (auth lives on the client SDK;
- * the rest are out of scope for backend endpoints). */
+ * Realtime is BROADCAST-ONLY here (a stateless handler can push an event but
+ * cannot hold a subscription socket — `subscribe()` lives on the client SDK).
+ *
+ * EXCLUDED on purpose: Functions, CMS, Links, Analytics, Auth. They are not
+ * exposed as backend handler singletons (auth lives on the client SDK; the rest
+ * are out of scope for backend endpoints). */
 interface RuntimeServices {
     Database: DBClient;
     Documents: PalbaseDocsClient;
@@ -62,6 +65,7 @@ interface RuntimeServices {
     Log: Logger;
     Notifications: PalbaseNotificationsClient;
     Flags: PalbaseFlagsClient;
+    Realtime: PalbaseRealtimeClient;
 }
 /**
  * Per-request store. The persistent runtime runs each request inside
@@ -125,8 +129,37 @@ declare const Queue: QueueClient;
 declare const Log: Logger;
 /** Push / email / SMS / in-app notifications. */
 declare const Notifications: PalbaseNotificationsClient;
-/** Feature flags. */
+/**
+ * Feature flags.
+ *
+ * Mirrors the `Database` / `Database.asService()` model. The default surface is
+ * RLS-equivalent for flags: reads resolve against the CURRENT request user and
+ * `Flags.setOverride(key, value)` writes an override for that same signed-in
+ * user (no userId argument, no admin power). Cross-user admin writes
+ * (`setOverrideForUser`, …) live behind `Flags.asService()` — explicit and
+ * greppable, just like `Database.asService()`.
+ *
+ * @example
+ * import { Flags } from "@palbase/backend";
+ *
+ * if (await Flags.isEnabled("new_checkout")) { ... }            // current user
+ * await Flags.setOverride("new_checkout", true);                // current user
+ * await Flags.asService().setOverrideForUser("u_9", "x", true); // cross-user
+ */
 declare const Flags: PalbaseFlagsClient;
+/**
+ * The Realtime broadcast singleton for the current request scope. Backend-side
+ * Realtime is BROADCAST-ONLY (a stateless handler can push but not subscribe —
+ * `subscribe()` lives on the client SDK's `pb.realtime`). Fire-and-forget:
+ * `broadcast` resolves once accepted (or with an `error`), never blocking the
+ * handler on subscribers.
+ *
+ * @example
+ * import { Realtime } from "@palbase/backend";
+ *
+ * await Realtime.broadcast("room:42", "message", { text, from: user.id });
+ */
+declare const Realtime: PalbaseRealtimeClient;
 
 /**
  * env-gen.ts — generate the `palbase-env.d.ts` text from a `defineSchema()`
@@ -679,6 +712,20 @@ interface RouteOptions {
     /** Per-route rate limit. */
     rateLimit?: RateLimitConfig;
 }
+/** One inferred throw site: the error CLASS name (e.g. "TodoLocked") and its
+ * wire code (e.g. "todo_locked"). `status`, `hasData`, and the data JSON schema
+ * are NOT carried here — they resolve from the error registry by `code` at
+ * extract/openapi time (single source of truth). */
+interface ThrowDescriptor {
+    name: string;
+    code: string;
+}
+/** Attach the inferred throw descriptors to the route for `fnName` (called by
+ * the stager-injected IIFE that carries the throw analysis result — the
+ * `recordReturn` twin). If the route does not exist yet, the descriptors are
+ * buffered (THROWS_BUFFER) and drained into the route by `recordRoute` when the
+ * method decorator runs. */
+declare function recordThrows(target: object, fnName: string, throws: ThrowDescriptor[]): void;
 
 /** A legacy method decorator. */
 type MethodDecorator = (target: object, propertyKey: string | symbol, descriptor: PropertyDescriptor) => void;
@@ -721,6 +768,49 @@ declare function TraceId(): ParameterDecorator;
 /** `@Req()` — inject the raw request object (escape hatch, `: PBRequest`). */
 declare function Req(): ParameterDecorator;
 
+/** One registered error: the wire code, HTTP status, the class name the
+ * analyzer sees, the optional data payload schema, and whether it is one of the
+ * pre-seeded built-in named classes. */
+interface RegisteredError {
+    code: string;
+    status: number;
+    className: string;
+    dataSchema?: ZodTypeAny;
+    /** JSON.stringify of the converted JSON schema — equal digest ⇔ the spec
+     * twins would emit an identical `data` schema for this error. */
+    dataDigest?: string;
+    builtin: boolean;
+}
+/** Get (creating + pre-seeding if absent) the project-global error registry,
+ * keyed by wire code. Anchored on `globalThis` so every copy of the SDK in a
+ * process shares the one registry. */
+declare function getErrorRegistry(): Map<string, RegisteredError>;
+/** Class returned for schema-bearing errors: ctor(data, message?). */
+interface DefinedErrorWithData<S extends ZodTypeAny> {
+    new (data: z.input<S>, message?: string): HttpError;
+    readonly code: string;
+    readonly status: number;
+}
+/** Class returned for schema-less errors: ctor(message?). */
+interface DefinedError {
+    new (message?: string): HttpError;
+    readonly code: string;
+    readonly status: number;
+}
+/**
+ * Define a project error class. MUST be called with literal args (string
+ * literal `code`, numeric literal `status`) at module top level — the deploy
+ * stager's static analyzer reads those literals to resolve throw sites.
+ *
+ * @example
+ * // models/todos/errors.ts
+ * export const TodoLocked = defineError("todo_locked", 409, z.object({ retryAfter: z.number() }));
+ * // services/todo.service.ts
+ * throw new TodoLocked({ retryAfter: 30 });
+ */
+declare function defineError<S extends ZodTypeAny>(code: string, status: number, dataSchema: S): DefinedErrorWithData<S>;
+declare function defineError(code: string, status: number): DefinedError;
+
 /** Non-service, per-invocation data for background worker handlers.
  * Services (Database, Log, …) are imported as singletons, not passed here. */
 interface WorkerMeta {
@@ -1173,4 +1263,4 @@ declare const documents: {
     onDocumentDeleted(handler: HookHandler<DocumentDeletedEvent>): ResolvedHook<DocumentDeletedEvent>;
 };
 
-export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, type CustomWebhookConfig, DBClient, Database, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, type EnvSecretRef, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, type HttpMethodUpper, type JobConfig, type JobMeta, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, OptionalUser, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseStorageClient, Param, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderEventMap, type ProviderName, type ProviderOptions, type ProviderWebhookConfig, Put, Query, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Req, RequestId, type ResolvedCustomWebhook, type ResolvedHook, type ResolvedJobConfig, type ResolvedProviderWebhook, type ResolvedWebhookConfig, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SmtpOptions, Storage, type StorageConfig, type StorageInput, TraceId, type TwilioOptions, User, type UserCreatedEvent, User$1 as UserT, type WebhookEventHandler, type WebhookMeta, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineFlags, defineJob, defineNotifications, defineStorage, defineWebhook, defineWorker, documents, flag, makeEnvDts, parseFileSizeLimit, reservedSecretKey, storage };
+export { type AcsOptions, type ApnsOptions, type BackoffStrategy, Body, type BucketDef, type BucketOptions, Cache, CacheClient, Client, Controller, type ControllerOptions, type CustomWebhookConfig, DBClient, Database, type DefinedError, type DefinedErrorWithData, Delete, type DocumentCreatedEvent, type DocumentDeletedEvent, type DocumentUpdatedEvent, Documents, type EnvSecretRef, EnvTypedDatabase, FLAGS_CONFIG_KIND, type FcmOptions, type FileDeletedEvent, type FileUploadedEvent, type FlagDef, type FlagOptions, type FlagType, type FlagValue, Flags, type FlagsConfig, type FlagsInput, Get, Headers, type HookHandler, type HookMeta, HttpError, type HttpMethodUpper, type JobConfig, type JobMeta, Log, Logger, NOTIFICATIONS_CONFIG_KIND, Notifications, type NotificationsConfig, type NotificationsInput, OptionalUser, PROVIDER_CATALOG, PalbaseDocsClient, PalbaseFlagsClient, PalbaseNotificationsClient, PalbaseRealtimeClient, PalbaseStorageClient, Param, type PasswordResetEvent, Patch, Post, type ProviderCatalogEntry, type ProviderDef, type ProviderEventMap, type ProviderName, type ProviderOptions, type ProviderWebhookConfig, Put, Query, Queue, QueueClient, RESERVED_SECRET_PREFIX, RateLimitConfig, Realtime, type RegisteredError, Req, RequestId, type ResolvedCustomWebhook, type ResolvedHook, type ResolvedJobConfig, type ResolvedProviderWebhook, type ResolvedWebhookConfig, type ResolvedWorkerConfig, Resource, type ResourceEnv, type RouteOptions, type RuntimeServices, STORAGE_CONFIG_KIND, SchemaDef, type SendgridOptions, type SesOptions, type SignInEvent, type SignOutEvent, type SmtpOptions, Storage, type StorageConfig, type StorageInput, type ThrowDescriptor, TraceId, type TwilioOptions, User, type UserCreatedEvent, User$1 as UserT, type WebhookEventHandler, type WebhookMeta, type WebhookProvider, type WebhookRequest, type WorkerConfig, type WorkerMeta, __getRuntime, __registerResource, __requestALS, __runResourceBoot, __runWithRuntime, __setRuntime, __shutdownResources, auth, bucket, buildProvider, defineError, defineFlags, defineJob, defineNotifications, defineStorage, defineWebhook, defineWorker, documents, flag, getErrorRegistry, makeEnvDts, parseFileSizeLimit, recordThrows, reservedSecretKey, storage };

package/dist/index.js

@@ -6,12 +6,13 @@ import {
   Log,
   Notifications,
   Queue,
+  Realtime,
   Storage,
   __getRuntime,
   __requestALS,
   __runWithRuntime,
   __setRuntime
-} from "./chunk-WUQO76NW.js";
+} from "./chunk-SWT2QR5F.js";
 import {
   EXTENSION_DEPENDENCIES,
   PALBASE_EXTENSIONS,
@@ -399,6 +400,7 @@ function Controller(basePath, options = {}) {
 var ROUTES = /* @__PURE__ */ Symbol.for("palbase.backend.routes");
 var PARAM_BUFFER = /* @__PURE__ */ Symbol.for("palbase.backend.paramBuffer");
 var RETURN_BUFFER = /* @__PURE__ */ Symbol.for("palbase.backend.returnBuffer");
+var THROWS_BUFFER = /* @__PURE__ */ Symbol.for("palbase.backend.throwsBuffer");
 function carrierOf(target) {
   const ctor = typeof target === "function" ? target : target.constructor ?? target;
   return ctor;
@@ -425,6 +427,10 @@ function recordRoute(target, fnName, method, subpath, options) {
   if (returnBuffer && returnBuffer[fnName] !== void 0) {
     route.returnSchema = returnBuffer[fnName];
   }
+  const throwsBuffer = carrier[THROWS_BUFFER];
+  if (throwsBuffer && throwsBuffer[fnName] !== void 0) {
+    route.throws = throwsBuffer[fnName];
+  }
   routes.push(route);
 }
 function recordParam(target, fnName, meta) {
@@ -440,6 +446,20 @@ function recordParam(target, fnName, meta) {
     }
   }
 }
+function recordThrows(target, fnName, throws) {
+  const carrier = carrierOf(target);
+  const routes = carrier[ROUTES];
+  const route = routes?.find((r) => r.fnName === fnName);
+  if (route) {
+    route.throws = throws;
+    return;
+  }
+  if (!Object.prototype.hasOwnProperty.call(carrier, THROWS_BUFFER)) {
+    carrier[THROWS_BUFFER] = {};
+  }
+  const throwsBuffer = carrier[THROWS_BUFFER];
+  if (throwsBuffer) throwsBuffer[fnName] = throws;
+}
 
 // src/decorators/methods.ts
 function makeMethodDecorator(method) {
@@ -586,6 +606,101 @@ var TooManyRequests = class extends NamedHttpError {
   }
 };
 
+// src/error-registry.ts
+import {
+  OpenAPIRegistry,
+  OpenApiGeneratorV31,
+  extendZodWithOpenApi
+} from "@asteasolutions/zod-to-openapi";
+import { z } from "zod";
+extendZodWithOpenApi(z);
+var ERROR_REGISTRY = /* @__PURE__ */ Symbol.for("palbase.backend.errorRegistry");
+function getErrorRegistry() {
+  const g = globalThis;
+  if (!g[ERROR_REGISTRY]) {
+    const m = /* @__PURE__ */ new Map();
+    for (const [code, status, className] of [
+      ["bad_request", 400, "BadRequest"],
+      ["unauthorized", 401, "Unauthorized"],
+      ["forbidden", 403, "Forbidden"],
+      ["not_found", 404, "NotFound"],
+      ["conflict", 409, "Conflict"],
+      ["too_many_requests", 429, "TooManyRequests"]
+    ]) {
+      m.set(code, { code, status, className, builtin: true });
+    }
+    g[ERROR_REGISTRY] = m;
+  }
+  return g[ERROR_REGISTRY];
+}
+function defineError(code, status, dataSchema) {
+  if (!Number.isInteger(status) || status < 400 || status > 599) {
+    throw new Error(
+      `defineError: status for "${code}" must be a 4xx/5xx integer, got ${status} \u2014 error responses must not clobber success responses in the project spec.`
+    );
+  }
+  const registry2 = getErrorRegistry();
+  const existing = registry2.get(code);
+  const className = defaultClassName(code);
+  const dataDigest = dataSchema ? digestOf(code, dataSchema) : void 0;
+  if (existing) {
+    const sameShape = existing.status === status && !existing.builtin && existing.dataDigest === dataDigest;
+    if (!sameShape) {
+      throw new Error(
+        `defineError: duplicate error code "${code}" with a different shape (existing: status ${existing.status}${existing.builtin ? ", built-in" : ""}${existing.status === status && !existing.builtin ? ", different data schema" : ""}). Error codes are project-unique.`
+      );
+    }
+  }
+  const makeWithData = (schema) => class extends HttpError {
+    static code = code;
+    static status = status;
+    constructor(data, message) {
+      super(status, code, message ?? humanize(code), schema.parse(data));
+      this.name = className;
+    }
+  };
+  const makeWithoutData = () => class extends HttpError {
+    static code = code;
+    static status = status;
+    constructor(message) {
+      super(status, code, message ?? humanize(code));
+      this.name = className;
+    }
+  };
+  const cls = dataSchema ? makeWithData(dataSchema) : makeWithoutData();
+  Object.defineProperty(cls, "name", { value: className });
+  registry2.set(code, {
+    code,
+    status,
+    className,
+    builtin: false,
+    ...dataSchema ? { dataSchema } : {},
+    ...dataDigest !== void 0 ? { dataDigest } : {}
+  });
+  return cls;
+}
+function digestOf(code, dataSchema) {
+  const TMP_REF = "__PalbaseErrorDataDigest";
+  const tmpRegistry = new OpenAPIRegistry();
+  tmpRegistry.register(TMP_REF, z.object({ data: dataSchema }).openapi(TMP_REF));
+  const generated = new OpenApiGeneratorV31(tmpRegistry.definitions).generateComponents();
+  const out = generated.components?.schemas?.[TMP_REF];
+  const digest = JSON.stringify(out ?? null);
+  if (digest.includes('"$ref"')) {
+    throw new Error(
+      `defineError: dataSchema for "${code}" carries .openapi(refId) metadata \u2014 it would emit dangling $ref pointers in the project spec. Use a plain zod schema (z.object({...})) without .openapi(...).`
+    );
+  }
+  return digest;
+}
+function defaultClassName(code) {
+  return code.split("_").map((p) => p.charAt(0).toUpperCase() + p.slice(1)).join("");
+}
+function humanize(code) {
+  const s = code.replace(/_/g, " ");
+  return s.charAt(0).toUpperCase() + s.slice(1);
+}
+
 // src/worker.ts
 var VALID_WORKER_NAME = /^[a-zA-Z0-9_-]+$/;
 var WORKER_DEFAULTS = {
@@ -884,7 +999,7 @@ var documents = {
 };
 
 // src/index.ts
-import { z } from "zod";
+import { z as z2 } from "zod";
 export {
   BadRequest,
   Body,
@@ -918,6 +1033,7 @@ export {
   Query,
   Queue,
   RESERVED_SECRET_PREFIX,
+  Realtime,
   Req,
   RequestId,
   Resource,
@@ -938,6 +1054,7 @@ export {
   boolean,
   bucket,
   buildProvider,
+  defineError,
   defineFlags,
   defineJob,
   defineMiddleware,
@@ -949,6 +1066,7 @@ export {
   documents,
   enumType,
   flag,
+  getErrorRegistry,
   integer,
   isPalbaseExtension,
   jsonb,
@@ -956,11 +1074,12 @@ export {
   makeTypedDB,
   parseFileSizeLimit,
   policy,
+  recordThrows,
   reservedSecretKey,
   storage,
   text,
   timestamp,
   uuid,
-  z
+  z2 as z
 };
 //# sourceMappingURL=index.js.map