@vertz/server 0.2.17 → 0.2.19

package/dist/index.d.ts

@@ -4,6 +4,46 @@ import { ModelEntry } from "@vertz/db";
 import { AuthError, Result } from "@vertz/errors";
 import { Infer, ObjectSchema, StringSchema } from "@vertz/schema";
 /**
+* InMemoryClosureStore — closure table for resource hierarchy.
+*
+* Stores ancestor/descendant relationships with depth tracking.
+* Self-reference rows (depth 0) are created for every resource.
+* Hierarchy depth is capped at 4 levels.
+*/
+interface ClosureRow {
+	ancestorType: string;
+	ancestorId: string;
+	descendantType: string;
+	descendantId: string;
+	depth: number;
+}
+interface ClosureEntry {
+	type: string;
+	id: string;
+	depth: number;
+}
+interface ParentRef {
+	parentType: string;
+	parentId: string;
+}
+interface ClosureStore {
+	addResource(type: string, id: string, parent?: ParentRef): Promise<void>;
+	removeResource(type: string, id: string): Promise<void>;
+	getAncestors(type: string, id: string): Promise<ClosureEntry[]>;
+	getDescendants(type: string, id: string): Promise<ClosureEntry[]>;
+	hasPath(ancestorType: string, ancestorId: string, descendantType: string, descendantId: string): Promise<boolean>;
+	dispose(): void;
+}
+declare class InMemoryClosureStore implements ClosureStore {
+	private rows;
+	addResource(type: string, id: string, parent?: ParentRef): Promise<void>;
+	removeResource(type: string, id: string): Promise<void>;
+	getAncestors(type: string, id: string): Promise<ClosureEntry[]>;
+	getDescendants(type: string, id: string): Promise<ClosureEntry[]>;
+	hasPath(ancestorType: string, ancestorId: string, descendantType: string, descendantId: string): Promise<boolean>;
+	dispose(): void;
+}
+/**
 * rules.* builders — declarative access rule data structures.
 *
 * These are pure data structures with no evaluation logic.
@@ -207,43 +247,102 @@ interface AccessDefinition {
 }
 declare function defineAccess(input: DefineAccessInput): AccessDefinition;
 /**
-* InMemoryClosureStore — closure table for resource hierarchy.
+* Feature Flag Store — per-tenant boolean feature flags.
 *
-* Stores ancestor/descendant relationships with depth tracking.
-* Self-reference rows (depth 0) are created for every resource.
-* Hierarchy depth is capped at 4 levels.
+* Pluggable interface with in-memory default.
+* Used by Layer 1 of access context to gate entitlements on feature flags.
 */
-interface ClosureRow {
-	ancestorType: string;
-	ancestorId: string;
-	descendantType: string;
-	descendantId: string;
-	depth: number;
+interface FlagStore {
+	setFlag(tenantId: string, flag: string, enabled: boolean): void;
+	getFlag(tenantId: string, flag: string): boolean;
+	getFlags(tenantId: string): Record<string, boolean>;
 }
-interface ClosureEntry {
-	type: string;
-	id: string;
-	depth: number;
+declare class InMemoryFlagStore implements FlagStore {
+	private flags;
+	setFlag(tenantId: string, flag: string, enabled: boolean): void;
+	getFlag(tenantId: string, flag: string): boolean;
+	getFlags(tenantId: string): Record<string, boolean>;
 }
-interface ParentRef {
-	parentType: string;
-	parentId: string;
+/** Limit override: add (additive) or max (hard cap) */
+interface LimitOverrideDef {
+	add?: number;
+	max?: number;
 }
-interface ClosureStore {
-	addResource(type: string, id: string, parent?: ParentRef): Promise<void>;
-	removeResource(type: string, id: string): Promise<void>;
-	getAncestors(type: string, id: string): Promise<ClosureEntry[]>;
-	getDescendants(type: string, id: string): Promise<ClosureEntry[]>;
-	hasPath(ancestorType: string, ancestorId: string, descendantType: string, descendantId: string): Promise<boolean>;
+/** Per-tenant overrides */
+interface TenantOverrides {
+	features?: string[];
+	limits?: Record<string, LimitOverrideDef>;
+}
+interface OverrideStore {
+	set(tenantId: string, overrides: TenantOverrides): Promise<void>;
+	remove(tenantId: string, keys: {
+		features?: string[];
+		limits?: string[];
+	}): Promise<void>;
+	get(tenantId: string): Promise<TenantOverrides | null>;
 	dispose(): void;
 }
-declare class InMemoryClosureStore implements ClosureStore {
-	private rows;
-	addResource(type: string, id: string, parent?: ParentRef): Promise<void>;
-	removeResource(type: string, id: string): Promise<void>;
-	getAncestors(type: string, id: string): Promise<ClosureEntry[]>;
-	getDescendants(type: string, id: string): Promise<ClosureEntry[]>;
-	hasPath(ancestorType: string, ancestorId: string, descendantType: string, descendantId: string): Promise<boolean>;
+declare class InMemoryOverrideStore implements OverrideStore {
+	private overrides;
+	set(tenantId: string, overrides: TenantOverrides): Promise<void>;
+	remove(tenantId: string, keys: {
+		features?: string[];
+		limits?: string[];
+	}): Promise<void>;
+	get(tenantId: string): Promise<TenantOverrides | null>;
+	dispose(): void;
+}
+/**
+* Validate tenant overrides against the access definition.
+* Throws on invalid limit keys, invalid feature names, or invalid max values.
+*/
+declare function validateOverrides(accessDef: AccessDefinition, overrides: TenantOverrides): void;
+/**
+* Plan Version Store — tracks versioned snapshots of plan configurations.
+*
+* When a plan's config changes (hash differs), a new version is created
+* with a snapshot of the plan's features, limits, and price at that point.
+*/
+interface PlanSnapshot {
+	features: readonly string[] | string[];
+	limits: Record<string, unknown>;
+	price: {
+		amount: number;
+		interval: string;
+	} | null;
+}
+interface PlanVersionInfo {
+	planId: string;
+	version: number;
+	hash: string;
+	snapshot: PlanSnapshot;
+	createdAt: Date;
+}
+interface PlanVersionStore {
+	/** Create a new version for a plan. Returns the version number. */
+	createVersion(planId: string, hash: string, snapshot: PlanSnapshot): Promise<number>;
+	/** Get the current (latest) version number for a plan. Returns null if no versions exist. */
+	getCurrentVersion(planId: string): Promise<number | null>;
+	/** Get a specific version's info. Returns null if not found. */
+	getVersion(planId: string, version: number): Promise<PlanVersionInfo | null>;
+	/** Get the version number a tenant is on for a given plan. Returns null if not set. */
+	getTenantVersion(tenantId: string, planId: string): Promise<number | null>;
+	/** Set the version number a tenant is on for a given plan. */
+	setTenantVersion(tenantId: string, planId: string, version: number): Promise<void>;
+	/** Get the hash of the current (latest) version for a plan. Returns null if no versions. */
+	getCurrentHash(planId: string): Promise<string | null>;
+	/** Clean up resources. */
+	dispose(): void;
+}
+declare class InMemoryPlanVersionStore implements PlanVersionStore {
+	private versions;
+	private tenantVersions;
+	createVersion(planId: string, hash: string, snapshot: PlanSnapshot): Promise<number>;
+	getCurrentVersion(planId: string): Promise<number | null>;
+	getVersion(planId: string, version: number): Promise<PlanVersionInfo | null>;
+	getTenantVersion(tenantId: string, planId: string): Promise<number | null>;
+	setTenantVersion(tenantId: string, planId: string, version: number): Promise<void>;
+	getCurrentHash(planId: string): Promise<string | null>;
 	dispose(): void;
 }
 interface RoleAssignment {
@@ -274,23 +373,6 @@ declare class InMemoryRoleAssignmentStore implements RoleAssignmentStore {
 	getEffectiveRole(userId: string, resourceType: string, resourceId: string, accessDef: AccessDefinition, closureStore: ClosureStore): Promise<string | null>;
 	dispose(): void;
 }
-/**
-* Feature Flag Store — per-tenant boolean feature flags.
-*
-* Pluggable interface with in-memory default.
-* Used by Layer 1 of access context to gate entitlements on feature flags.
-*/
-interface FlagStore {
-	setFlag(tenantId: string, flag: string, enabled: boolean): void;
-	getFlag(tenantId: string, flag: string): boolean;
-	getFlags(tenantId: string): Record<string, boolean>;
-}
-declare class InMemoryFlagStore implements FlagStore {
-	private flags;
-	setFlag(tenantId: string, flag: string, enabled: boolean): void;
-	getFlag(tenantId: string, flag: string): boolean;
-	getFlags(tenantId: string): Record<string, boolean>;
-}
 /** Per-tenant limit override. Only affects the cap, not the billing period. */
 interface LimitOverride {
 	max: number;
@@ -377,88 +459,6 @@ declare class InMemoryWalletStore implements WalletStore {
 	getConsumption(tenantId: string, entitlement: string, periodStart: Date, _periodEnd: Date): Promise<number>;
 	dispose(): void;
 }
-/** Limit override: add (additive) or max (hard cap) */
-interface LimitOverrideDef {
-	add?: number;
-	max?: number;
-}
-/** Per-tenant overrides */
-interface TenantOverrides {
-	features?: string[];
-	limits?: Record<string, LimitOverrideDef>;
-}
-interface OverrideStore {
-	set(tenantId: string, overrides: TenantOverrides): Promise<void>;
-	remove(tenantId: string, keys: {
-		features?: string[];
-		limits?: string[];
-	}): Promise<void>;
-	get(tenantId: string): Promise<TenantOverrides | null>;
-	dispose(): void;
-}
-declare class InMemoryOverrideStore implements OverrideStore {
-	private overrides;
-	set(tenantId: string, overrides: TenantOverrides): Promise<void>;
-	remove(tenantId: string, keys: {
-		features?: string[];
-		limits?: string[];
-	}): Promise<void>;
-	get(tenantId: string): Promise<TenantOverrides | null>;
-	dispose(): void;
-}
-/**
-* Validate tenant overrides against the access definition.
-* Throws on invalid limit keys, invalid feature names, or invalid max values.
-*/
-declare function validateOverrides(accessDef: AccessDefinition, overrides: TenantOverrides): void;
-/**
-* Plan Version Store — tracks versioned snapshots of plan configurations.
-*
-* When a plan's config changes (hash differs), a new version is created
-* with a snapshot of the plan's features, limits, and price at that point.
-*/
-interface PlanSnapshot {
-	features: readonly string[] | string[];
-	limits: Record<string, unknown>;
-	price: {
-		amount: number;
-		interval: string;
-	} | null;
-}
-interface PlanVersionInfo {
-	planId: string;
-	version: number;
-	hash: string;
-	snapshot: PlanSnapshot;
-	createdAt: Date;
-}
-interface PlanVersionStore {
-	/** Create a new version for a plan. Returns the version number. */
-	createVersion(planId: string, hash: string, snapshot: PlanSnapshot): Promise<number>;
-	/** Get the current (latest) version number for a plan. Returns null if no versions exist. */
-	getCurrentVersion(planId: string): Promise<number | null>;
-	/** Get a specific version's info. Returns null if not found. */
-	getVersion(planId: string, version: number): Promise<PlanVersionInfo | null>;
-	/** Get the version number a tenant is on for a given plan. Returns null if not set. */
-	getTenantVersion(tenantId: string, planId: string): Promise<number | null>;
-	/** Set the version number a tenant is on for a given plan. */
-	setTenantVersion(tenantId: string, planId: string, version: number): Promise<void>;
-	/** Get the hash of the current (latest) version for a plan. Returns null if no versions. */
-	getCurrentHash(planId: string): Promise<string | null>;
-	/** Clean up resources. */
-	dispose(): void;
-}
-declare class InMemoryPlanVersionStore implements PlanVersionStore {
-	private versions;
-	private tenantVersions;
-	createVersion(planId: string, hash: string, snapshot: PlanSnapshot): Promise<number>;
-	getCurrentVersion(planId: string): Promise<number | null>;
-	getVersion(planId: string, version: number): Promise<PlanVersionInfo | null>;
-	getTenantVersion(tenantId: string, planId: string): Promise<number | null>;
-	setTenantVersion(tenantId: string, planId: string, version: number): Promise<void>;
-	getCurrentHash(planId: string): Promise<string | null>;
-	dispose(): void;
-}
 interface ResourceRef {
 	type: string;
 	id: string;
@@ -963,11 +963,15 @@ interface AuthInstance {
 	*/
 	resolveSessionForSSR: (request: Request) => Promise<{
 		session: {
-			user: Record<string, unknown>;
+			user: {
+				id: string;
+				email: string;
+				role: string;
+				[key: string]: unknown;
+			};
 			expiresAt: number;
 		};
-		/** AccessSet | null at runtime; typed as unknown to avoid cross-package dependency on @vertz/ui */
-		accessSet?: unknown;
+		accessSet?: AccessSet | null;
 	} | null>;
 }
 interface AuthContext {
@@ -2059,6 +2063,123 @@ declare function stripHiddenFields(table: TableDef2, data: Record<string, unknow
 * Used before DB writes to prevent setting immutable fields.
 */
 declare function stripReadOnlyFields(table: TableDef2, data: Record<string, unknown>): Record<string, unknown>;
+import { ColumnBuilder, ColumnMetadata } from "@vertz/db";
+interface JSONSchemaObject {
+	type?: string | string[];
+	format?: string;
+	enum?: readonly (string | number | boolean | null)[];
+	items?: JSONSchemaObject;
+	maxLength?: number;
+	description?: string;
+	$ref?: string;
+	[key: string]: unknown;
+}
+/**
+* Maps a single database column to its JSON Schema representation.
+*/
+declare function columnToJsonSchema(column: ColumnBuilder<unknown, ColumnMetadata>): JSONSchemaObject;
+interface EntitySchemaObject {
+	type: "object";
+	required?: string[];
+	properties?: Record<string, JSONSchemaObject>;
+}
+/**
+* Generates a JSON Schema for an entity's response shape.
+*
+* When `expose.select` is present, only listed fields appear.
+* Otherwise, all public (non-hidden) columns appear.
+* Descriptor-guarded fields (AccessRule values) become nullable with a description.
+*
+* If `relationSchemas` is provided, relation schemas are collected into it
+* with keys like `TasksAssigneeResponse`, and $ref properties are added
+* to the parent schema for each relation.
+*/
+declare function entityResponseSchema(def: EntityDefinition, relationSchemas?: Record<string, EntitySchemaObject>): EntitySchemaObject;
+/**
+* Generates a JSON Schema for an entity's create input.
+* Excludes PK, readOnly, autoUpdate, and hidden columns.
+* Fields with defaults or nullable are optional.
+*/
+declare function entityCreateInputSchema(def: EntityDefinition): EntitySchemaObject;
+/**
+* Generates a JSON Schema for an entity's update input (PATCH).
+* Same exclusions as create, but all fields are optional.
+*/
+declare function entityUpdateInputSchema(def: EntityDefinition): EntitySchemaObject;
+interface OpenAPISpecOptions {
+	info: {
+		title: string;
+		version: string;
+		description?: string;
+	};
+	servers?: {
+		url: string;
+		description?: string;
+	}[];
+	/** API path prefix. Defaults to '/api'. */
+	apiPrefix?: string;
+}
+interface OpenAPIOperation {
+	operationId: string;
+	tags: string[];
+	summary: string;
+	parameters?: OpenAPIParameter[];
+	requestBody?: {
+		required: boolean;
+		content: {
+			"application/json": {
+				schema: JSONSchemaObject;
+			};
+		};
+	};
+	responses: Record<string, OpenAPIResponse>;
+}
+interface OpenAPIParameter {
+	name: string;
+	in: "path" | "query";
+	required: boolean;
+	schema: JSONSchemaObject;
+	description?: string;
+}
+interface OpenAPIResponse {
+	description: string;
+	content?: {
+		"application/json": {
+			schema: JSONSchemaObject | EntitySchemaObject;
+		};
+	};
+	$ref?: string;
+}
+interface OpenAPIPathItem {
+	get?: OpenAPIOperation;
+	post?: OpenAPIOperation;
+	patch?: OpenAPIOperation;
+	delete?: OpenAPIOperation;
+}
+interface OpenAPISpec {
+	openapi: "3.1.0";
+	info: {
+		title: string;
+		version: string;
+		description?: string;
+	};
+	servers?: {
+		url: string;
+		description?: string;
+	}[];
+	paths: Record<string, OpenAPIPathItem>;
+	components?: {
+		schemas?: Record<string, EntitySchemaObject>;
+		responses?: Record<string, OpenAPIResponse>;
+	};
+	tags?: {
+		name: string;
+	}[];
+}
+/**
+* Generates a full OpenAPI 3.1 specification from entity definitions.
+*/
+declare function generateOpenAPISpec(entities: EntityDefinition[], options: OpenAPISpecOptions): OpenAPISpec;
 import { EntityRouteEntry } from "@vertz/core";
 interface EntityRouteOptions {
 	apiPrefix?: string;
@@ -2079,4 +2200,4 @@ declare function service<
 	TInject extends Record<string, EntityDefinition> = {},
 	TActions extends Record<string, ServiceActionDef<any, any, any>> = Record<string, ServiceActionDef<any, any, any>>
 >(name: string, config: ServiceConfig<TActions, TInject>): ServiceDefinition;
-export { vertz, verifyPassword, validatePassword, validateOverrides, validateAuthModels, stripReadOnlyFields, stripHiddenFields, service, rules, resolveTenantChain, makeImmutable, isContentDescriptor, initializeAuthTables, hashPassword, google, github, getIncompatibleAddOns, generateEntityRoutes, entityErrorHandler, entity, enforceAccess, encodeAccessSet, discord, defineAccess, defaultAccess, deepFreeze, decodeAccessSet, createWebhookHandler, createStripeBillingAdapter, createServer, createPlanManager, createMiddleware, createImmutableProxy, createEnv, createEntityContext, createCrudHandlers, createBillingEventEmitter, createAuth, createAccessEventBroadcaster, createAccessContext, createAccess, content, computePlanHash, computeOverage, computeEntityAccess, computeAccessSet, checkFva, checkAddOnCompatibility, calculateBillingPeriod, authModels, WebhookHandlerConfig, WalletStore, WalletEntry, VertzException, ValidationException, UserTableEntry, UserStore, UnauthorizedException, TenantOverrides, TenantChainHop, TenantChain, SubscriptionStore, Subscription, StripeProduct, StripePrice, StripeClient, StripeBillingAdapterConfig, StoredSession, StoredPasswordReset, StoredEmailVerification, SignUpInput, SignInInput, SessionStrategy, SessionStore, SessionPayload, SessionInfo, SessionConfig, Session, ServiceUnavailableException, ServiceRequestInfo, ServiceDefinition, ServiceContext, ServiceConfig, ServiceActionDef, ServerInstance, ServerHandle, ServerConfig, ServerAdapter, RuleContext, RoleAssignmentTableEntry, RoleAssignmentStore, RoleAssignment, ResourceRef, Resource, RequestInfo, RelationExposeConfig, RawRequest, RateLimitStore, RateLimitResult, RateLimitConfig, PriceInterval, PlanVersionStore, PlanVersionInfo, PlanSnapshot, PlanPrice, PlanHashInput, PlanDef, Period, PasswordResetStore, PasswordResetConfig, PasswordRequirements, ParentRef, OverrideStore, OverageInput, OverageConfig, OnUserCreatedPayload, OAuthUserInfo, OAuthTokens, OAuthProviderConfig, OAuthProvider, OAuthAccountStore, NotFoundException, NamedMiddlewareDef, MiddlewareDef, MfaSetupData, MfaConfig, MfaChallengeData, MFAStore, ListenOptions, ListResult, ListOptions2 as ListOptions, LimitOverrideDef, LimitOverride, LimitDef, InternalServerErrorException, InferSchema, Infer2 as Infer, InMemoryWalletStore, InMemoryUserStore, InMemorySubscriptionStore, InMemorySessionStore, InMemoryRoleAssignmentStore, InMemoryRateLimitStore, InMemoryPlanVersionStore, InMemoryPasswordResetStore, InMemoryOverrideStore, InMemoryOAuthAccountStore, InMemoryMFAStore, InMemoryGrandfatheringStore, InMemoryFlagStore, InMemoryEmailVerificationStore, InMemoryClosureStore, HttpStatusCode, HttpMethod, HandlerCtx, GrandfatheringStore, GrandfatheringState, ForbiddenException, FlagStore, ExposeConfig, EnvConfig, EntityRouteOptions, EntityRelationsConfig, EntityRegistry, EntityOperations, EntityErrorResult, EntityDefinition, EntityDef, EntityDbAdapter2 as EntityDbAdapter, EntityContext, EntityConfig, EntityActionDef, EntitlementValue, EntitlementRegistry, EntitlementDefinition, EntitlementDef, Entitlement, EncodedAccessSet, EmailVerificationStore, EmailVerificationConfig, EmailPasswordConfig, Deps, DenialReason, DenialMeta, DefineAccessInput, DeepReadonly, DbUserStore, DbSubscriptionStore, DbSessionStore, DbRoleAssignmentStore, DbOAuthAccountStore, DbFlagStore, DbDialectName, DbClosureStore, Ctx, CrudResult, CrudHandlers, CorsConfig, CookieConfig, ContentDescriptor, ConsumeResult, ConflictException, ComputeAccessSetConfig, ClosureStore, ClosureRow, ClosureEntry, BillingPeriod, BillingEventType, BillingEventHandler, BillingEventEmitter, BillingEvent, BillingAdapter, BaseContext, BadRequestException, AuthorizationError, AuthUser, AuthTokens, AuthInstance, AuthEntityProxy, AuthDbClient, AuthContext, AuthConfig, AuthCallbackContext, AuthApi, AppConfig2 as AppConfig, AppBuilder2 as AppBuilder, AddOnRequires, AclClaim, AccumulateProvides, AccessWsData, AccessSet, AccessRule2 as AccessRule, AccessInstance, AccessEventBroadcasterConfig, AccessEventBroadcaster, AccessEvent, AccessDefinition, AccessContextConfig, AccessContext, AccessConfig, AccessCheckResult, AccessCheckData, AUTH_TABLE_NAMES };
+export { vertz, verifyPassword, validatePassword, validateOverrides, validateAuthModels, stripReadOnlyFields, stripHiddenFields, service, rules, resolveTenantChain, makeImmutable, isContentDescriptor, initializeAuthTables, hashPassword, google, github, getIncompatibleAddOns, generateOpenAPISpec, generateEntityRoutes, entityUpdateInputSchema, entityResponseSchema, entityErrorHandler, entityCreateInputSchema, entity, enforceAccess, encodeAccessSet, discord, defineAccess, defaultAccess, deepFreeze, decodeAccessSet, createWebhookHandler, createStripeBillingAdapter, createServer, createPlanManager, createMiddleware, createImmutableProxy, createEnv, createEntityContext, createCrudHandlers, createBillingEventEmitter, createAuth, createAccessEventBroadcaster, createAccessContext, createAccess, content, computePlanHash, computeOverage, computeEntityAccess, computeAccessSet, columnToJsonSchema, checkFva, checkAddOnCompatibility, calculateBillingPeriod, authModels, WebhookHandlerConfig, WalletStore, WalletEntry, VertzException, ValidationException, UserTableEntry, UserStore, UnauthorizedException, TenantOverrides, TenantChainHop, TenantChain, SubscriptionStore, Subscription, StripeProduct, StripePrice, StripeClient, StripeBillingAdapterConfig, StoredSession, StoredPasswordReset, StoredEmailVerification, SignUpInput, SignInInput, SessionStrategy, SessionStore, SessionPayload, SessionInfo, SessionConfig, Session, ServiceUnavailableException, ServiceRequestInfo, ServiceDefinition, ServiceContext, ServiceConfig, ServiceActionDef, ServerInstance, ServerHandle, ServerConfig, ServerAdapter, RuleContext, RoleAssignmentTableEntry, RoleAssignmentStore, RoleAssignment, ResourceRef, Resource, RequestInfo, RelationExposeConfig, RawRequest, RateLimitStore, RateLimitResult, RateLimitConfig, PriceInterval, PlanVersionStore, PlanVersionInfo, PlanSnapshot, PlanPrice, PlanHashInput, PlanDef, Period, PasswordResetStore, PasswordResetConfig, PasswordRequirements, ParentRef, OverrideStore, OverageInput, OverageConfig, OpenAPISpecOptions, OnUserCreatedPayload, OAuthUserInfo, OAuthTokens, OAuthProviderConfig, OAuthProvider, OAuthAccountStore, NotFoundException, NamedMiddlewareDef, MiddlewareDef, MfaSetupData, MfaConfig, MfaChallengeData, MFAStore, ListenOptions, ListResult, ListOptions2 as ListOptions, LimitOverrideDef, LimitOverride, LimitDef, JSONSchemaObject, InternalServerErrorException, InferSchema, Infer2 as Infer, InMemoryWalletStore, InMemoryUserStore, InMemorySubscriptionStore, InMemorySessionStore, InMemoryRoleAssignmentStore, InMemoryRateLimitStore, InMemoryPlanVersionStore, InMemoryPasswordResetStore, InMemoryOverrideStore, InMemoryOAuthAccountStore, InMemoryMFAStore, InMemoryGrandfatheringStore, InMemoryFlagStore, InMemoryEmailVerificationStore, InMemoryClosureStore, HttpStatusCode, HttpMethod, HandlerCtx, GrandfatheringStore, GrandfatheringState, ForbiddenException, FlagStore, ExposeConfig, EnvConfig, EntitySchemaObject, EntityRouteOptions, EntityRelationsConfig, EntityRegistry, EntityOperations, EntityErrorResult, EntityDefinition, EntityDef, EntityDbAdapter2 as EntityDbAdapter, EntityContext, EntityConfig, EntityActionDef, EntitlementValue, EntitlementRegistry, EntitlementDefinition, EntitlementDef, Entitlement, EncodedAccessSet, EmailVerificationStore, EmailVerificationConfig, EmailPasswordConfig, Deps, DenialReason, DenialMeta, DefineAccessInput, DeepReadonly, DbUserStore, DbSubscriptionStore, DbSessionStore, DbRoleAssignmentStore, DbOAuthAccountStore, DbFlagStore, DbDialectName, DbClosureStore, Ctx, CrudResult, CrudHandlers, CorsConfig, CookieConfig, ContentDescriptor, ConsumeResult, ConflictException, ComputeAccessSetConfig, ClosureStore, ClosureRow, ClosureEntry, BillingPeriod, BillingEventType, BillingEventHandler, BillingEventEmitter, BillingEvent, BillingAdapter, BaseContext, BadRequestException, AuthorizationError, AuthUser, AuthTokens, AuthInstance, AuthEntityProxy, AuthDbClient, AuthContext, AuthConfig, AuthCallbackContext, AuthApi, AppConfig2 as AppConfig, AppBuilder2 as AppBuilder, AddOnRequires, AclClaim, AccumulateProvides, AccessWsData, AccessSet, AccessRule2 as AccessRule, AccessInstance, AccessEventBroadcasterConfig, AccessEventBroadcaster, AccessEvent, AccessDefinition, AccessContextConfig, AccessContext, AccessConfig, AccessCheckResult, AccessCheckData, AUTH_TABLE_NAMES };