@palbase/backend 5.2.0 → 7.0.0

package/docs/llms-full.txt

@@ -130,22 +130,22 @@ import { CreateTodoBody } from "../models/todos/create.js";
 export class TodosController {
   private todos = todoService;
 
-  @Get("")                                             // GET /todos → operationId getTodos
+  @Get("")                                             // GET /todos → operationId todos.list
   async list(@User() user: UserT): Promise<TodoSchema[]> {  // return type → 200 response schema
     return this.todos.list(user.id);
   }
 
-  @Post("")                                            // POST /todos → postTodos
+  @Post("")                                            // POST /todos → todos.create
   async create(@Body(CreateTodoBody) body: CreateTodoBody, @User() user: UserT): Promise<TodoSchema> {
     return this.todos.create(user.id, body.title);
   }
 
-  @Get("/{id}")                                        // GET /todos/{id} → getTodosById
+  @Get("/{id}")                                        // GET /todos/{id} → todos.get
   async get(@Param("id") id: string, @User() user: UserT): Promise<TodoSchema> {
     return this.todos.get(user.id, id);
   }
 
-  @Delete("/{id}")                                     // DELETE /todos/{id} → deleteTodosById; no body → : Promise<void>
+  @Delete("/{id}")                                     // DELETE /todos/{id} → todos.remove; no body → : Promise<void>
   async remove(@Param("id") id: string, @User() user: UserT): Promise<void> {
     await this.todos.remove(user.id, id);
   }
@@ -182,12 +182,13 @@ export default defineSchema({
 
 ### operationId — what the generated clients call
 
-The operationId is derived FLAT from the verb + full path (NOT the method name):
-`GET /todos` → `getTodos`, `POST /todos` → `postTodos`, `GET /todos/{id}` →
-`getTodosById`. The generated iOS/TS clients expose these as `pb.getTodos()`,
-`pb.postTodos(...)`, `pb.getTodosById(id:)`. Rename the method freely; the
-operationId is unaffected. Change the verb and the operationId changes — no file
-rename needed.
+The operationId is DOTTED: `<controllerName>.<methodName>`. The namespace is the
+controller class name with its trailing `Controller` suffix stripped and the
+first letter lower-cased (`TodosController` → `todos`); the method name is used
+as-is: `todos.list`, `todos.create`, `todos.get`. The generated iOS/TS clients
+group these into namespaced calls — `pb.todos.list()`, `pb.todos.create(...)`,
+`pb.todos.get(id:)`. Rename the class or the method and the operationId (and the
+generated client surface) changes; the verb/path do not affect it.
 
 ### CLI workflow
 
@@ -430,10 +431,10 @@ export default class PlacesController {
 }
 ```
 
-| Method name (sugar) | Verb | Full path | operationId (flat) |
+| Method name | Verb | Full path | operationId (dotted) |
 |---|---|---|---|
-| `importNearby`  | POST | `/places/import`    | `postPlacesImport` |
-| `listFavorites` | GET  | `/places/favorites` | `getPlacesFavorites` |
+| `importNearby`  | POST | `/places/import`    | `places.importNearby` |
+| `listFavorites` | GET  | `/places/favorites` | `places.listFavorites` |
 
 Rules:
 
@@ -445,8 +446,12 @@ Rules:
   codegen + the runtime read that named type to drive the OpenAPI 200 response.
   A body route with no named return type is a build error — annotate `: void`
   (or `: Promise<void>`) for no body.
-- The operationId is derived FLAT from method + full path (`postPlacesImport`),
-  not from the method name. Change `@Post` → `@Put` — no file rename.
+- The operationId is DOTTED: `<controllerName>.<methodName>`. The namespace is
+  the controller class name with its trailing `Controller` suffix stripped and
+  the first letter lower-cased (`PlacesController` → `places`); the method name
+  is used as-is (`places.importNearby`). The generated clients group routes by
+  that namespace (`pb.places.importNearby(...)`). Rename the class or the
+  method and the operationId changes; the verb/path do not affect it.
 
 See [endpoints.md](./endpoints.md) for the full decorator reference (`@Controller`
 options, the parameter decorators, auth cascade, and error classes).
@@ -1051,11 +1056,15 @@ endpoints, workers, jobs, hooks, and webhooks all use the same imports. Only
 **middleware** uses a `ctx` argument (`ctx.db`, `ctx.log`, etc.).
 
 Available singletons: `Database`, `Documents`, `Storage`, `Cache`, `Queue`,
-`Log`, `Notifications`, `Flags`.
+`Log`, `Notifications`, `Flags`, `Realtime`.
 
-**Not available to backend handlers** (do not import them here): Realtime,
-Functions, CMS, Links, Analytics, and Auth. Auth runs on the client SDK; the
-others are out of scope for backend endpoints.
+`Realtime` is **broadcast-only** on the backend — a handler can push an event to
+a channel, but cannot subscribe (a stateless request can't hold a socket).
+Subscription lives on the client SDK (`pb.realtime`).
+
+**Not available to backend handlers** (do not import them here): Functions, CMS,
+Links, Analytics, and Auth. Auth runs on the client SDK; the others are out of
+scope for backend endpoints.
 
 ## Cache
 
@@ -1152,6 +1161,71 @@ export default class CheckoutController {
 }
 ```
 
+### Overriding a flag — current user vs cross-user
+
+Writes mirror the `Database` / `Database.asService()` model:
+
+- `Flags.setOverride(key, value)` (default) writes an override for the **current
+  request user** — no `userId` argument, no admin power. It errors on an
+  anonymous request (no signed-in user).
+- `Flags.asService()` returns the cross-user admin surface
+  (`setOverrideForUser`, `setOverridesForUser`, `clearOverrideForUser`,
+  `clearAllOverridesForUser`, `batchSetOverrides`) for writing overrides for an
+  **arbitrary** user. Explicit and greppable, just like `Database.asService()`.
+
+```ts
+// Current request user — no userId needed:
+await Flags.setOverride("new-checkout", true);
+
+// Cross-user admin write — explicit target, via asService():
+await Flags.asService().setOverrideForUser("user_123", "new-checkout", true);
+```
+
+## Realtime
+
+`Realtime` is **broadcast-only** on the backend: a handler pushes an event to a
+named channel and every client subscribed to that channel (via the client SDK's
+`pb.realtime.channel(...).on(...)`) receives it. There is no `subscribe()` on
+the backend — a stateless request handler can't hold a socket, so it fires an
+HTTP broadcast and returns.
+
+```ts
+import { Controller, Post, Body, User, Realtime, z } from "@palbase/backend";
+
+const Msg = z.object({ text: z.string() });
+
+@Controller("/rooms")
+class RoomController {
+  @Post("/:roomId/messages")
+  async send(
+    @Param("roomId") roomId: string,
+    @Body(Msg) body: z.infer<typeof Msg>,
+    @User() user: UserT,
+  ) {
+    // ... persist the message ...
+    // Notify everyone subscribed to this room:
+    await Realtime.broadcast(`room:${roomId}`, "message", {
+      text: body.text,
+      from: user.id,
+    });
+    return { ok: true };
+  }
+}
+```
+
+`broadcast(channel, event, payload?)` is **fire-and-forget**: it resolves
+`{ data: undefined, error: null }` once accepted, or `{ data: null, error }`
+when it could not be sent (e.g. realtime is not provisioned). It never throws
+and never blocks the handler waiting on subscribers.
+
+- **Channel** names are app-defined and arbitrary (`"room:42"`, `"orders"`). Do
+  NOT prefix with `"realtime:"` — that prefix is internal to the transport.
+- **Event** is the name subscribers filter on (`"message"`, `"status_changed"`).
+- **Payload** is any JSON-serializable object.
+
+Pair it with the client SDK's `pb.realtime.channel("room:42").on("message", …)`
+to drive live chat, presence, dashboards, and other push features.
+
 
 
 <!-- ===== resources.md ===== -->

package/docs/routing.md

@@ -39,10 +39,10 @@ export default class PlacesController {
 }
 ```
 
-| Method name (sugar) | Verb | Full path | operationId (flat) |
+| Method name | Verb | Full path | operationId (dotted) |
 |---|---|---|---|
-| `importNearby`  | POST | `/places/import`    | `postPlacesImport` |
-| `listFavorites` | GET  | `/places/favorites` | `getPlacesFavorites` |
+| `importNearby`  | POST | `/places/import`    | `places.importNearby` |
+| `listFavorites` | GET  | `/places/favorites` | `places.listFavorites` |
 
 Rules:
 
@@ -54,8 +54,12 @@ Rules:
   codegen + the runtime read that named type to drive the OpenAPI 200 response.
   A body route with no named return type is a build error — annotate `: void`
   (or `: Promise<void>`) for no body.
-- The operationId is derived FLAT from method + full path (`postPlacesImport`),
-  not from the method name. Change `@Post` → `@Put` — no file rename.
+- The operationId is DOTTED: `<controllerName>.<methodName>`. The namespace is
+  the controller class name with its trailing `Controller` suffix stripped and
+  the first letter lower-cased (`PlacesController` → `places`); the method name
+  is used as-is (`places.importNearby`). The generated clients group routes by
+  that namespace (`pb.places.importNearby(...)`). Rename the class or the
+  method and the operationId changes; the verb/path do not affect it.
 
 See [endpoints.md](./endpoints.md) for the full decorator reference (`@Controller`
 options, the parameter decorators, auth cascade, and error classes).

package/docs/services.md

@@ -5,11 +5,15 @@ endpoints, workers, jobs, hooks, and webhooks all use the same imports. Only
 **middleware** uses a `ctx` argument (`ctx.db`, `ctx.log`, etc.).
 
 Available singletons: `Database`, `Documents`, `Storage`, `Cache`, `Queue`,
-`Log`, `Notifications`, `Flags`.
+`Log`, `Notifications`, `Flags`, `Realtime`.
 
-**Not available to backend handlers** (do not import them here): Realtime,
-Functions, CMS, Links, Analytics, and Auth. Auth runs on the client SDK; the
-others are out of scope for backend endpoints.
+`Realtime` is **broadcast-only** on the backend — a handler can push an event to
+a channel, but cannot subscribe (a stateless request can't hold a socket).
+Subscription lives on the client SDK (`pb.realtime`).
+
+**Not available to backend handlers** (do not import them here): Functions, CMS,
+Links, Analytics, and Auth. Auth runs on the client SDK; the others are out of
+scope for backend endpoints.
 
 ## Cache
 
@@ -105,3 +109,68 @@ export default class CheckoutController {
   }
 }
 ```
+
+### Overriding a flag — current user vs cross-user
+
+Writes mirror the `Database` / `Database.asService()` model:
+
+- `Flags.setOverride(key, value)` (default) writes an override for the **current
+  request user** — no `userId` argument, no admin power. It errors on an
+  anonymous request (no signed-in user).
+- `Flags.asService()` returns the cross-user admin surface
+  (`setOverrideForUser`, `setOverridesForUser`, `clearOverrideForUser`,
+  `clearAllOverridesForUser`, `batchSetOverrides`) for writing overrides for an
+  **arbitrary** user. Explicit and greppable, just like `Database.asService()`.
+
+```ts
+// Current request user — no userId needed:
+await Flags.setOverride("new-checkout", true);
+
+// Cross-user admin write — explicit target, via asService():
+await Flags.asService().setOverrideForUser("user_123", "new-checkout", true);
+```
+
+## Realtime
+
+`Realtime` is **broadcast-only** on the backend: a handler pushes an event to a
+named channel and every client subscribed to that channel (via the client SDK's
+`pb.realtime.channel(...).on(...)`) receives it. There is no `subscribe()` on
+the backend — a stateless request handler can't hold a socket, so it fires an
+HTTP broadcast and returns.
+
+```ts
+import { Controller, Post, Body, User, Realtime, z } from "@palbase/backend";
+
+const Msg = z.object({ text: z.string() });
+
+@Controller("/rooms")
+class RoomController {
+  @Post("/:roomId/messages")
+  async send(
+    @Param("roomId") roomId: string,
+    @Body(Msg) body: z.infer<typeof Msg>,
+    @User() user: UserT,
+  ) {
+    // ... persist the message ...
+    // Notify everyone subscribed to this room:
+    await Realtime.broadcast(`room:${roomId}`, "message", {
+      text: body.text,
+      from: user.id,
+    });
+    return { ok: true };
+  }
+}
+```
+
+`broadcast(channel, event, payload?)` is **fire-and-forget**: it resolves
+`{ data: undefined, error: null }` once accepted, or `{ data: null, error }`
+when it could not be sent (e.g. realtime is not provisioned). It never throws
+and never blocks the handler waiting on subscribers.
+
+- **Channel** names are app-defined and arbitrary (`"room:42"`, `"orders"`). Do
+  NOT prefix with `"realtime:"` — that prefix is internal to the transport.
+- **Event** is the name subscribers filter on (`"message"`, `"status_changed"`).
+- **Payload** is any JSON-serializable object.
+
+Pair it with the client SDK's `pb.realtime.channel("room:42").on("message", …)`
+to drive live chat, presence, dashboards, and other push features.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@palbase/backend",
-  "version": "5.2.0",
+  "version": "7.0.0",
   "description": "Palbase Backend SDK — class controllers (@Controller/@Get/@Post + @Body/@Query/@Param), error classes, schema DSL",
   "license": "MIT",
   "repository": {
@@ -65,7 +65,9 @@
   "devDependencies": {
     "@types/node": "^25.5.2",
     "fast-glob": "^3.3.3",
+    "openapi3-ts": "^4.5.0",
     "tsup": "^8.0.0",
+    "tsx": "^4.22.4",
     "typescript": "^5.7.0",
     "vitest": "^3.0.0"
   },
@@ -77,6 +79,7 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
-    "docs:build": "node scripts/build-llms.mjs"
+    "docs:build": "node scripts/build-llms.mjs",
+    "emit:openapi-fixture": "tsx scripts/emit-openapi-fixture.mjs"
   }
 }

package/dist/chunk-WUQO76NW.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/runtime.ts"],"sourcesContent":["/**\n * runtime.ts — request-scoped service singletons.\n *\n * The backend SDK no longer threads a `ctx` god-object through every handler.\n * Instead, controller methods import PascalCase service singletons directly:\n *\n *   import { Controller, Post, Body, Database } from \"@palbase/backend\";\n *\n *   \\@Controller(\"/todos\")\n *   export default class TodosController {\n *     \\@Post(\"\") create(\\@Body(CreateTodoBody) body: CreateTodoBody): unknown {\n *       return Database.insert(\"todos\", { title: body.title });\n *     }\n *   }\n *\n * The singletons are thin Proxies. Every property access forwards to the live\n * client for the CURRENT request scope, resolved through {@link __getRuntime}.\n *\n * # Request-scope resolution (persistent app-server)\n *\n * The runtime is a long-running Node process that serves many concurrent\n * requests on one event loop (NOT a fresh subprocess per request). A single\n * module-global slot would let one in-flight request's services bleed into\n * another's. So the services are carried in an {@link AsyncLocalStorage} store\n * ({@link __requestALS}) that the runtime sets per request with\n * {@link __runWithRuntime}; every async continuation of that request reads its\n * own store. `__getRuntime` reads the ALS store first; the module-global slot\n * (set by {@link __setRuntime}) is only a fallback for callers that run OUTSIDE\n * an ALS scope (dev-server, unit tests, the legacy single-shot path). Because\n * each `br-<ref>` pod is single-tenant, there is no cross-tenant leakage; the\n * ALS store is what prevents cross-REQUEST leakage within the shared process.\n *\n * The seam that makes `import { Database } from \"@palbase/backend\"` resolve to\n * the runtime-injected client: `@palbase/backend` is marked esbuild-EXTERNAL\n * when the tenant bundle is built, and the package is installed globally in the\n * pod (NODE_PATH=/usr/local/lib/node_modules). So worker.js's\n * `require('@palbase/backend')` and the bundle's `import` resolve to ONE shared\n * module instance — the ALS store and `__setRuntime` slot on that instance are\n * visible to the singletons the bundle imported.\n */\n\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nimport type {\n  DBClient,\n  DBOps,\n  TxClient,\n  CacheClient,\n  QueueClient,\n  Logger,\n  PalbaseDocsClient,\n} from \"./endpoint.js\";\nimport type {\n  PalbaseStorageClient,\n  PalbaseNotificationsClient,\n  PalbaseFlagsClient,\n} from \"./clients.js\";\nimport type {\n  EnvTypedDatabase,\n  EnvServiceDatabase,\n  EnvTypedTx,\n  EnvTables,\n} from \"./db/typed-db.js\";\n\n/** The set of live clients the runtime injects per request scope.\n *\n * EXCLUDED on purpose: Realtime, Functions, CMS, Links, Analytics, Auth. They\n * are not exposed as backend handler singletons (auth lives on the client SDK;\n * the rest are out of scope for backend endpoints). */\nexport interface RuntimeServices {\n  Database: DBClient;\n  Documents: PalbaseDocsClient;\n  Storage: PalbaseStorageClient;\n  Cache: CacheClient;\n  Queue: QueueClient;\n  Log: Logger;\n  Notifications: PalbaseNotificationsClient;\n  Flags: PalbaseFlagsClient;\n}\n\n/**\n * Per-request store. The persistent runtime runs each request inside\n * {@link __runWithRuntime}, so every async continuation of that request reads\n * its OWN `runtime` (and any other request-scoped fields the runtime adds).\n *\n * Exported with a `__` prefix so the runtime (worker.js) shares the SAME ALS\n * instance across the one module instance — two ALS instances would silently\n * not see each other's stores. NOT part of the public author-facing API.\n */\nexport const __requestALS = new AsyncLocalStorage<{ runtime: RuntimeServices }>();\n\n/** Process-global fallback slot. Used only OUTSIDE an ALS scope (dev-server,\n * unit tests, legacy single-shot worker). Inside the persistent server every\n * request runs in {@link __requestALS}, which takes precedence. */\nlet runtime: RuntimeServices | null = null;\n\n/** Install the live clients in the process-global fallback slot.\n *\n * Persistent-server requests should use {@link __runWithRuntime} instead; this\n * remains for dev-server / tests / the legacy single-shot path that run without\n * an ALS scope. NOT part of the public author-facing API. */\nexport function __setRuntime(services: RuntimeServices): void {\n  runtime = services;\n}\n\n/** Run `fn` with `services` bound as the request-scoped runtime.\n *\n * The persistent worker calls this once per request so concurrent requests\n * never share a services slot. NOT part of the public author-facing API. */\nexport function __runWithRuntime<T>(services: RuntimeServices, fn: () => T): T {\n  return __requestALS.run({ runtime: services }, fn);\n}\n\n/** Read the live clients, throwing if accessed outside a request scope.\n *\n * Resolves the ALS store first (persistent server, per-request), then the\n * process-global fallback (dev-server / tests). NOT part of the public\n * author-facing API — used by the runtime and the singleton Proxies. */\nexport function __getRuntime(): RuntimeServices {\n  const scoped = __requestALS.getStore();\n  if (scoped) return scoped.runtime;\n  if (runtime === null) {\n    throw new Error(\n      \"Palbase services accessed outside a request scope. The Database/Documents/… \" +\n        \"singletons are only available inside an endpoint handler (or after the \" +\n        \"runtime has called __runWithRuntime / __setRuntime).\",\n    );\n  }\n  return runtime;\n}\n\n/**\n * Build a Proxy singleton that forwards every property access to the live\n * client named `key` on the current runtime.\n *\n * The single `as RuntimeServices[K]` is the only contained cast in the surface:\n * `Reflect.get` on a typed object returns `unknown` for a `string | symbol`\n * key, but `prop` is constrained to keys of the client interface at the call\n * sites (the exported singletons are typed below), so the forward is sound.\n */\nfunction makeServiceProxy<K extends keyof RuntimeServices>(key: K): RuntimeServices[K] {\n  const handler: ProxyHandler<RuntimeServices[K]> = {\n    get(_target, prop, receiver) {\n      const client = __getRuntime()[key];\n      const value = Reflect.get(client as object, prop, receiver) as unknown;\n      // Bind methods to their owning client so `this` stays correct when the\n      // author destructures or calls `Database.query(...)`.\n      return typeof value === \"function\" ? value.bind(client) : value;\n    },\n  };\n  // The Proxy target is irrelevant (all access goes through `get`); the cast\n  // names the surface type the singleton presents to authors.\n  return new Proxy({} as RuntimeServices[K], handler);\n}\n\n/**\n * Build the `.tables` accessor for an op-bearing client (the top-level\n * `Database` or a transaction-scoped `tx`). Each `tables.<name>` access\n * returns a small object that forwards the five CRUD ops to the underlying\n * client using `name` as the string table identifier. The shapes are typed\n * against the generated `palbase-env.d.ts` (`EnvTables`); at runtime they are\n * plain string-keyed calls, so no schema value is needed here.\n *\n * Returns `EnvTables` — TS cannot infer the mapped type through the Proxy, so\n * a single structural narrowing names the surface (the proxy returns a\n * correctly-shaped accessor for whatever string member is read).\n */\nfunction makeTablesAccessor(ops: () => TxClient): EnvTables {\n  const tablesProxy = new Proxy(\n    {},\n    {\n      get(_t, prop: string | symbol) {\n        if (typeof prop !== \"string\") return undefined;\n        const name = prop;\n        return {\n          insert: (data: Record<string, unknown>) => ops().insert(name, data),\n          update: (id: string, data: Record<string, unknown>) => ops().update(name, id, data),\n          delete: (id: string) => ops().delete(name, id),\n          findById: (id: string) => ops().findById(name, id),\n          findMany: (query?: Record<string, unknown>) => ops().findMany(name, query),\n        };\n      },\n    },\n  );\n  return tablesProxy as EnvTables;\n}\n\n/** The raw string-keyed `DBClient` for the current request scope. */\nconst rawDatabase: DBClient = makeServiceProxy(\"Database\");\n\n/**\n * Wrap a raw `DBClient` into the typed `{ ...ops, tables, transaction }`\n * surface. The five string ops forward straight through; `tables` is the\n * env-typed accessor; `transaction` yields typed tables. Reused for both the\n * default (RLS-enforced) `Database` and the `asService()` sibling — each is\n * fed its own raw client (the default proxy vs `rawDatabase.asService()`).\n *\n * The `satisfies` pins the op surface so a missing/renamed op is a compile\n * error; the assembled object carries `tables`/`transaction` alongside.\n */\nfunction makeTypedSurface(raw: Omit<DBClient, \"asService\">): EnvServiceDatabase {\n  const ops = {\n    query: (sql: string, params?: unknown[]) => raw.query(sql, params),\n    insert: (table: string, data: Record<string, unknown>) => raw.insert(table, data),\n    update: (table: string, id: string, data: Record<string, unknown>) =>\n      raw.update(table, id, data),\n    delete: (table: string, id: string) => raw.delete(table, id),\n    findById: (table: string, id: string) => raw.findById(table, id),\n    findMany: (table: string, query?: Record<string, unknown>) => raw.findMany(table, query),\n  } satisfies DBOps;\n  return Object.assign(ops, {\n    tables: makeTablesAccessor(() => raw),\n    transaction<T>(fn: (tx: EnvTypedTx) => Promise<T>): Promise<T> {\n      return raw.transaction((rawTx) => fn({ tables: makeTablesAccessor(() => rawTx) }));\n    },\n  });\n}\n\n/**\n * The project's own Postgres (pgx, schema `env_<envId>`).\n *\n * Typed by default: `Database.tables.<name>.insert({...})` is typed against\n * the project's generated `palbase-env.d.ts` with NO import and NO generic.\n * The raw string ops (`query`/`insert`/`update`/`delete`/`findById`/`findMany`)\n * are also available for dynamic table names and read-only SQL.\n *\n * RLS is enforced by default (the runtime runs each op as `authenticated` with\n * the verified user's claims). To bypass RLS, call `Database.asService()` —\n * explicit and greppable — which runs as the `service_role` (BYPASSRLS).\n *\n * @example\n * import { Database } from \"@palbase/backend\";\n *\n * const todo = await Database.tables.todos.insert({ title: req.input.title });\n * todo.id; // string ✓\n * const rows = await Database.query(\"SELECT id FROM todos WHERE done = $1\", [false]);\n * const all  = await Database.asService().tables.todos.findMany({}); // RLS bypass\n */\nexport const Database: EnvTypedDatabase = Object.assign(makeTypedSurface(rawDatabase), {\n  /**\n   * Lazily resolve the runtime's service-role sibling on each call. We do NOT\n   * cache it: `rawDatabase.asService()` reads the CURRENT request scope through\n   * the runtime proxy, and the per-request runtime injects a service client\n   * bound to that request's identity headers — caching would leak one request's\n   * sibling into another concurrent request.\n   */\n  asService(): EnvServiceDatabase {\n    return makeTypedSurface(rawDatabase.asService());\n  },\n});\n\n/** Firestore-like document client (PalDocs). */\nexport const Documents: PalbaseDocsClient = makeServiceProxy(\"Documents\");\n\n/** Object storage client (buckets, signed URLs). */\nexport const Storage: PalbaseStorageClient = makeServiceProxy(\"Storage\");\n\n/** JSON-typed cache (get/set/incr/getOrSet). */\nexport const Cache: CacheClient = makeServiceProxy(\"Cache\");\n\n/** Background job queue. */\nexport const Queue: QueueClient = makeServiceProxy(\"Queue\");\n\n/** Structured logger. */\nexport const Log: Logger = makeServiceProxy(\"Log\");\n\n/** Push / email / SMS / in-app notifications. */\nexport const Notifications: PalbaseNotificationsClient = makeServiceProxy(\"Notifications\");\n\n/** Feature flags. */\nexport const Flags: PalbaseFlagsClient = makeServiceProxy(\"Flags\");\n"],"mappings":";AAyCA,SAAS,yBAAyB;AAgD3B,IAAM,eAAe,IAAI,kBAAgD;AAKhF,IAAI,UAAkC;AAO/B,SAAS,aAAa,UAAiC;AAC5D,YAAU;AACZ;AAMO,SAAS,iBAAoB,UAA2B,IAAgB;AAC7E,SAAO,aAAa,IAAI,EAAE,SAAS,SAAS,GAAG,EAAE;AACnD;AAOO,SAAS,eAAgC;AAC9C,QAAM,SAAS,aAAa,SAAS;AACrC,MAAI,OAAQ,QAAO,OAAO;AAC1B,MAAI,YAAY,MAAM;AACpB,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AACA,SAAO;AACT;AAWA,SAAS,iBAAkD,KAA4B;AACrF,QAAM,UAA4C;AAAA,IAChD,IAAI,SAAS,MAAM,UAAU;AAC3B,YAAM,SAAS,aAAa,EAAE,GAAG;AACjC,YAAM,QAAQ,QAAQ,IAAI,QAAkB,MAAM,QAAQ;AAG1D,aAAO,OAAO,UAAU,aAAa,MAAM,KAAK,MAAM,IAAI;AAAA,IAC5D;AAAA,EACF;AAGA,SAAO,IAAI,MAAM,CAAC,GAAyB,OAAO;AACpD;AAcA,SAAS,mBAAmB,KAAgC;AAC1D,QAAM,cAAc,IAAI;AAAA,IACtB,CAAC;AAAA,IACD;AAAA,MACE,IAAI,IAAI,MAAuB;AAC7B,YAAI,OAAO,SAAS,SAAU,QAAO;AACrC,cAAM,OAAO;AACb,eAAO;AAAA,UACL,QAAQ,CAAC,SAAkC,IAAI,EAAE,OAAO,MAAM,IAAI;AAAA,UAClE,QAAQ,CAAC,IAAY,SAAkC,IAAI,EAAE,OAAO,MAAM,IAAI,IAAI;AAAA,UAClF,QAAQ,CAAC,OAAe,IAAI,EAAE,OAAO,MAAM,EAAE;AAAA,UAC7C,UAAU,CAAC,OAAe,IAAI,EAAE,SAAS,MAAM,EAAE;AAAA,UACjD,UAAU,CAAC,UAAoC,IAAI,EAAE,SAAS,MAAM,KAAK;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAGA,IAAM,cAAwB,iBAAiB,UAAU;AAYzD,SAAS,iBAAiB,KAAsD;AAC9E,QAAM,MAAM;AAAA,IACV,OAAO,CAAC,KAAa,WAAuB,IAAI,MAAM,KAAK,MAAM;AAAA,IACjE,QAAQ,CAAC,OAAe,SAAkC,IAAI,OAAO,OAAO,IAAI;AAAA,IAChF,QAAQ,CAAC,OAAe,IAAY,SAClC,IAAI,OAAO,OAAO,IAAI,IAAI;AAAA,IAC5B,QAAQ,CAAC,OAAe,OAAe,IAAI,OAAO,OAAO,EAAE;AAAA,IAC3D,UAAU,CAAC,OAAe,OAAe,IAAI,SAAS,OAAO,EAAE;AAAA,IAC/D,UAAU,CAAC,OAAe,UAAoC,IAAI,SAAS,OAAO,KAAK;AAAA,EACzF;AACA,SAAO,OAAO,OAAO,KAAK;AAAA,IACxB,QAAQ,mBAAmB,MAAM,GAAG;AAAA,IACpC,YAAe,IAAgD;AAC7D,aAAO,IAAI,YAAY,CAAC,UAAU,GAAG,EAAE,QAAQ,mBAAmB,MAAM,KAAK,EAAE,CAAC,CAAC;AAAA,IACnF;AAAA,EACF,CAAC;AACH;AAsBO,IAAM,WAA6B,OAAO,OAAO,iBAAiB,WAAW,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQrF,YAAgC;AAC9B,WAAO,iBAAiB,YAAY,UAAU,CAAC;AAAA,EACjD;AACF,CAAC;AAGM,IAAM,YAA+B,iBAAiB,WAAW;AAGjE,IAAM,UAAgC,iBAAiB,SAAS;AAGhE,IAAM,QAAqB,iBAAiB,OAAO;AAGnD,IAAM,QAAqB,iBAAiB,OAAO;AAGnD,IAAM,MAAc,iBAAiB,KAAK;AAG1C,IAAM,gBAA4C,iBAAiB,eAAe;AAGlF,IAAM,QAA4B,iBAAiB,OAAO;","names":[]}