@xylex-group/athena 2.4.1 → 2.6.0

package/dist/{react-email-Buhcpglm.d.ts → react-email-B8O1Jeff.d.cts}

@@ -1,6 +1,7 @@
-import { i as AthenaJsonValue, a as AthenaGatewayCallOptions, g as AthenaJsonObject, j as AthenaRpcCallOptions, J as AthenaConditionValue, K as AthenaConditionArrayValue, R as RegistryDef, D as DatabaseDef, F as SchemaDef, L as AnyModelDef, x as ModelDef, C as ModelRelationMetadata, E as RowOf, o as BackendConfig, p as BackendType, e as AthenaGatewayErrorDetails, A as AthenaConditionCastType, N as AthenaConditionOperator, b as AthenaGatewayConnectionOptions, c as AthenaGatewayConnectionResult, y as ModelMetadata, H as TenantKeyMap, T as TenantContext, M as ModelAt, q as InsertOf, U as UpdateOf, S as SchemaIntrospectionProvider, r as IntrospectionColumn } from './types-09Q4D86N.js';
-import { f as AthenaAuthClientConfig, d as AthenaAuthBindings, N as AthenaAuthSdkClient, F as AthenaAuthReactEmailProps, C as AthenaAuthReactEmailComponent, H as AthenaAuthReactEmailRenderInput, k as AthenaAuthEmailTemplateDefinition, i as AthenaAuthEmailTemplateBuilder, I as AthenaAuthReactEmailRenderOptions, G as AthenaAuthReactEmailRenderEvent, D as AthenaAuthReactEmailConfig } from './model-form-CO4-LmNC.js';
-import { j as GeneratorSchemaSelection, b as GeneratorProviderConfig } from './types-DU3gNdFv.js';
+import { i as AthenaJsonValue, a as AthenaGatewayCallOptions, g as AthenaJsonObject, j as AthenaRpcCallOptions, b as AthenaGatewayConnectionOptions, c as AthenaGatewayConnectionResult, J as AthenaGatewayEndpointPath, K as AthenaGatewayMethod, L as AthenaConditionValue, N as AthenaConditionArrayValue, R as RegistryDef, D as DatabaseDef, F as SchemaDef, O as AnyModelDef, x as ModelDef, C as ModelRelationMetadata, E as RowOf, o as BackendConfig, p as BackendType, e as AthenaGatewayErrorDetails, A as AthenaConditionCastType, P as AthenaConditionOperator, y as ModelMetadata, H as TenantKeyMap, T as TenantContext, M as ModelAt, q as InsertOf, U as UpdateOf, S as SchemaIntrospectionProvider, r as IntrospectionColumn } from './types-DSX6AT5B.cjs';
+import { f as AthenaAuthClientConfig, d as AthenaAuthBindings, N as AthenaAuthSdkClient, F as AthenaAuthReactEmailProps, C as AthenaAuthReactEmailComponent, H as AthenaAuthReactEmailRenderInput, k as AthenaAuthEmailTemplateDefinition, i as AthenaAuthEmailTemplateBuilder, I as AthenaAuthReactEmailRenderOptions, G as AthenaAuthReactEmailRenderEvent, D as AthenaAuthReactEmailConfig } from './model-form-BaHWi3gm.cjs';
+import { j as GeneratorSchemaSelection, b as GeneratorProviderConfig } from './types-CUuo4NDi.cjs';
+import { A as AthenaCookiesOptions, a as AthenaSessionPair, b as AthenaCookieOptions, c as AthenaAuthCookies, g as getCookieCache, d as getSessionCookie, e as AthenaCookieContextRuntime } from './index-CVcQCGyG.cjs';
 
 type AthenaErrorKind = 'unique_violation' | 'not_found' | 'validation' | 'auth' | 'rate_limit' | 'transient' | 'unknown';
 declare const AthenaErrorKind: {
@@ -197,6 +198,373 @@ interface AthenaDbModule {
     query<Row = unknown>(query: string, options?: AthenaGatewayCallOptions): Promise<AthenaResult<Row[]>>;
 }
 
+declare function verifyAthenaGatewayUrl(baseUrl: string, options?: AthenaGatewayConnectionOptions): Promise<AthenaGatewayConnectionResult>;
+
+declare const storageSdkManifest: {
+    readonly namespace: "storage";
+    readonly basePath: "/storage";
+    readonly envelopeKinds: {
+        readonly raw: "response body is the payload";
+        readonly athena: "response body is { status, message, data }";
+    };
+    readonly methods: readonly [{
+        readonly name: "listStorageCatalogs";
+        readonly method: "GET";
+        readonly path: "/storage/catalogs";
+        readonly responseEnvelope: "raw";
+        readonly responseType: "{ data: S3CatalogItem[] }";
+    }, {
+        readonly name: "createStorageCatalog";
+        readonly method: "POST";
+        readonly path: "/storage/catalogs";
+        readonly requestType: "CreateStorageCatalogRequest";
+        readonly responseEnvelope: "raw";
+        readonly responseType: "S3CatalogItem";
+    }, {
+        readonly name: "updateStorageCatalog";
+        readonly method: "PATCH";
+        readonly path: "/storage/catalogs/{id}";
+        readonly pathParams: readonly ["id"];
+        readonly requestType: "UpdateStorageCatalogRequest";
+        readonly responseEnvelope: "raw";
+        readonly responseType: "S3CatalogItem";
+    }, {
+        readonly name: "deleteStorageCatalog";
+        readonly method: "DELETE";
+        readonly path: "/storage/catalogs/{id}";
+        readonly pathParams: readonly ["id"];
+        readonly responseEnvelope: "raw";
+        readonly responseType: "{ id: string; deleted: boolean }";
+    }, {
+        readonly name: "listStorageCredentials";
+        readonly method: "GET";
+        readonly path: "/storage/credentials";
+        readonly responseEnvelope: "raw";
+        readonly responseType: "{ data: S3CredentialListItem[] }";
+    }, {
+        readonly name: "createStorageUploadUrl";
+        readonly method: "POST";
+        readonly path: "/storage/files/upload-url";
+        readonly requestType: "CreateStorageUploadUrlRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageUploadUrlResponse";
+    }, {
+        readonly name: "createStorageUploadUrls";
+        readonly method: "POST";
+        readonly path: "/storage/files/upload-urls";
+        readonly requestType: "CreateStorageUploadUrlsRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageBatchUploadUrlResponse";
+    }, {
+        readonly name: "listStorageFiles";
+        readonly method: "POST";
+        readonly path: "/storage/files/list";
+        readonly requestType: "ListStorageFilesRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageListFilesResponse";
+    }, {
+        readonly name: "getStorageFile";
+        readonly method: "GET";
+        readonly path: "/storage/files/{file_id}";
+        readonly pathParams: readonly ["file_id"];
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageFileMutationResponse";
+    }, {
+        readonly name: "getStorageFileUrl";
+        readonly method: "GET";
+        readonly path: "/storage/files/{file_id}/url";
+        readonly pathParams: readonly ["file_id"];
+        readonly queryParams: readonly ["purpose"];
+        readonly responseEnvelope: "athena";
+        readonly responseType: "PresignedFileUrlResponse";
+    }, {
+        readonly name: "getStorageFileProxy";
+        readonly method: "GET";
+        readonly path: "/storage/files/{file_id}/proxy";
+        readonly pathParams: readonly ["file_id"];
+        readonly queryParams: readonly ["purpose"];
+        readonly responseEnvelope: "raw";
+        readonly responseType: "Response";
+        readonly binary: true;
+    }, {
+        readonly name: "updateStorageFile";
+        readonly method: "PATCH";
+        readonly path: "/storage/files/{file_id}";
+        readonly pathParams: readonly ["file_id"];
+        readonly requestType: "UpdateStorageFileRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageFileMutationResponse";
+    }, {
+        readonly name: "deleteStorageFile";
+        readonly method: "DELETE";
+        readonly path: "/storage/files/{file_id}";
+        readonly pathParams: readonly ["file_id"];
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageFileMutationResponse";
+    }, {
+        readonly name: "setStorageFileVisibility";
+        readonly method: "PATCH";
+        readonly path: "/storage/files/{file_id}/visibility";
+        readonly pathParams: readonly ["file_id"];
+        readonly requestType: "SetStorageFileVisibilityRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageFileMutationResponse";
+    }, {
+        readonly name: "deleteStorageFolder";
+        readonly method: "POST";
+        readonly path: "/storage/folders/delete";
+        readonly requestType: "DeleteStorageFolderRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageFolderMutationResponse";
+    }, {
+        readonly name: "moveStorageFolder";
+        readonly method: "POST";
+        readonly path: "/storage/folders/move";
+        readonly requestType: "MoveStorageFolderRequest";
+        readonly responseEnvelope: "athena";
+        readonly responseType: "StorageFolderMutationResponse";
+    }];
+};
+interface S3CatalogItem {
+    id: string;
+    name: string;
+    description: string;
+    endpoint: string;
+    region: string;
+    bucket?: string | null;
+    provider: string;
+    is_active: boolean;
+    active_credential_id?: string | null;
+    active_access_key?: string | null;
+    created_at: string;
+    updated_at: string;
+}
+interface S3CredentialListItem {
+    id: string;
+    s3_id: string;
+    name: string;
+    description: string;
+    endpoint: string;
+    region: string;
+    bucket?: string | null;
+    provider: string;
+    access_key: string;
+    created_at: string;
+    updated_at: string;
+}
+interface ManagedFileRecord {
+    id: string;
+    name: string;
+    original_name?: string | null;
+    url?: string | null;
+    bucket: string;
+    s3_id?: string | null;
+    prefix_path?: string | null;
+    size_bytes?: number | null;
+    mime_type?: string | null;
+    resource_id?: string | null;
+    organization_id: string;
+    metadata: Record<string, unknown>;
+    created_at: string;
+    updated_at: string;
+    storage_key: string;
+    uploaded_by_user_id?: string | null;
+    extension?: string | null;
+    is_public: boolean;
+    status: string;
+    deleted_at?: string | null;
+}
+interface PresignedFileUrlResponse {
+    file_id: string;
+    bucket: string;
+    storage_key: string;
+    purpose: string;
+    url: string;
+    expires_at: string;
+    expires_at_epoch_seconds: number;
+    expires_in: number;
+    cache_hit: boolean;
+    cache_layer: string;
+}
+interface CreateStorageCatalogRequest {
+    name: string;
+    description?: string;
+    endpoint: string;
+    region: string;
+    bucket?: string;
+    provider?: string;
+    access_key_id: string;
+    secret_key: string;
+    session_token?: string;
+    metadata?: Record<string, unknown>;
+}
+interface UpdateStorageCatalogRequest {
+    name?: string;
+    description?: string;
+    endpoint?: string;
+    region?: string;
+    bucket?: string;
+    provider?: string;
+    access_key_id?: string;
+    secret_key?: string;
+    session_token?: string;
+    is_active?: boolean;
+    metadata?: Record<string, unknown>;
+}
+interface CreateStorageUploadUrlRequest {
+    s3_id: string;
+    bucket?: string;
+    storage_key: string;
+    name?: string;
+    original_name?: string;
+    resource_id?: string;
+    mime_type?: string;
+    content_type?: string;
+    size_bytes?: number;
+    file_id?: string;
+    public?: boolean;
+    metadata?: Record<string, unknown>;
+}
+interface CreateStorageUploadUrlsRequest {
+    files: CreateStorageUploadUrlRequest[];
+}
+interface StorageUploadUrlResponse {
+    file: ManagedFileRecord;
+    upload: PresignedFileUrlResponse;
+}
+interface StorageBatchUploadUrlResponse {
+    files: StorageUploadUrlResponse[];
+}
+interface ListStorageFilesRequest {
+    s3_id: string;
+    prefix: string;
+}
+interface StorageListFilesResponse {
+    files: ManagedFileRecord[];
+    count: number;
+}
+interface UpdateStorageFileRequest {
+    storage_key: string;
+    bucket?: string;
+}
+interface SetStorageFileVisibilityRequest {
+    public: boolean;
+}
+interface DeleteStorageFolderRequest {
+    s3_id: string;
+    prefix: string;
+}
+interface MoveStorageFolderRequest {
+    s3_id: string;
+    from_prefix: string;
+    to_prefix: string;
+}
+interface StorageFileMutationResponse {
+    file: ManagedFileRecord;
+}
+interface StorageFolderMutationResponse {
+    s3_id: string;
+    prefix: string;
+    processed_files: number;
+}
+interface AthenaEnvelope<T> {
+    status: string;
+    message: string;
+    data: T;
+}
+type StorageFileAccessPurpose = 'read' | 'download' | 'stream';
+interface GetStorageFileUrlQuery {
+    purpose?: StorageFileAccessPurpose | (string & {});
+}
+type AthenaStorageErrorHandler = (error: AthenaStorageError) => void | Promise<void>;
+interface AthenaStorageClientConfig {
+    onError?: AthenaStorageErrorHandler;
+}
+interface AthenaStorageCallOptions extends AthenaGatewayCallOptions {
+    signal?: AbortSignal;
+    onError?: AthenaStorageErrorHandler;
+}
+type AthenaStorageBinaryCallOptions = AthenaStorageCallOptions;
+type AthenaStorageErrorCode = 'INVALID_URL' | 'NETWORK_ERROR' | 'HTTP_ERROR' | 'INVALID_JSON' | 'INVALID_ATHENA_ENVELOPE' | 'UNKNOWN_ERROR';
+declare const AthenaStorageErrorCode: {
+    readonly InvalidUrl: "INVALID_URL";
+    readonly NetworkError: "NETWORK_ERROR";
+    readonly HttpError: "HTTP_ERROR";
+    readonly InvalidJson: "INVALID_JSON";
+    readonly InvalidAthenaEnvelope: "INVALID_ATHENA_ENVELOPE";
+    readonly UnknownError: "UNKNOWN_ERROR";
+};
+interface AthenaStorageErrorDetails {
+    code: AthenaStorageErrorCode;
+    athenaCode: AthenaErrorCode;
+    kind: AthenaErrorKind;
+    category: AthenaErrorCategory;
+    retryable: boolean;
+    message: string;
+    status: number;
+    endpoint: AthenaGatewayEndpointPath;
+    method: AthenaGatewayMethod;
+    requestId?: string;
+    hint?: string;
+    cause?: string;
+    raw: unknown;
+}
+interface AthenaStorageErrorInput {
+    code: AthenaStorageErrorCode;
+    message: string;
+    status: number;
+    endpoint: AthenaGatewayEndpointPath;
+    method: AthenaGatewayMethod;
+    raw?: unknown;
+    requestId?: string;
+    hint?: string;
+    cause?: unknown;
+}
+declare class AthenaStorageError extends Error {
+    readonly code: AthenaStorageErrorCode;
+    readonly athenaCode: AthenaErrorCode;
+    readonly kind: AthenaErrorKind;
+    readonly category: AthenaErrorCategory;
+    readonly retryable: boolean;
+    readonly status: number;
+    readonly endpoint: AthenaGatewayEndpointPath;
+    readonly method: AthenaGatewayMethod;
+    readonly requestId?: string;
+    readonly hint?: string;
+    readonly causeDetail?: string;
+    readonly raw: unknown;
+    readonly normalized: NormalizedAthenaError;
+    readonly __athenaNormalizedError: NormalizedAthenaError;
+    constructor(input: AthenaStorageErrorInput);
+    toDetails(): AthenaStorageErrorDetails;
+}
+interface AthenaStorageModule {
+    listStorageCatalogs(options?: AthenaStorageCallOptions): Promise<{
+        data: S3CatalogItem[];
+    }>;
+    createStorageCatalog(input: CreateStorageCatalogRequest, options?: AthenaStorageCallOptions): Promise<S3CatalogItem>;
+    updateStorageCatalog(id: string, input: UpdateStorageCatalogRequest, options?: AthenaStorageCallOptions): Promise<S3CatalogItem>;
+    deleteStorageCatalog(id: string, options?: AthenaStorageCallOptions): Promise<{
+        id: string;
+        deleted: boolean;
+    }>;
+    listStorageCredentials(options?: AthenaStorageCallOptions): Promise<{
+        data: S3CredentialListItem[];
+    }>;
+    createStorageUploadUrl(input: CreateStorageUploadUrlRequest, options?: AthenaStorageCallOptions): Promise<StorageUploadUrlResponse>;
+    createStorageUploadUrls(input: CreateStorageUploadUrlsRequest, options?: AthenaStorageCallOptions): Promise<StorageBatchUploadUrlResponse>;
+    listStorageFiles(input: ListStorageFilesRequest, options?: AthenaStorageCallOptions): Promise<StorageListFilesResponse>;
+    getStorageFile(fileId: string, options?: AthenaStorageCallOptions): Promise<StorageFileMutationResponse>;
+    getStorageFileUrl(fileId: string, query?: GetStorageFileUrlQuery, options?: AthenaStorageCallOptions): Promise<PresignedFileUrlResponse>;
+    getStorageFileProxy(fileId: string, query?: GetStorageFileUrlQuery, options?: AthenaStorageBinaryCallOptions): Promise<Response>;
+    updateStorageFile(fileId: string, input: UpdateStorageFileRequest, options?: AthenaStorageCallOptions): Promise<StorageFileMutationResponse>;
+    deleteStorageFile(fileId: string, options?: AthenaStorageCallOptions): Promise<StorageFileMutationResponse>;
+    setStorageFileVisibility(fileId: string, input: SetStorageFileVisibilityRequest, options?: AthenaStorageCallOptions): Promise<StorageFileMutationResponse>;
+    deleteStorageFolder(input: DeleteStorageFolderRequest, options?: AthenaStorageCallOptions): Promise<StorageFolderMutationResponse>;
+    moveStorageFolder(input: MoveStorageFolderRequest, options?: AthenaStorageCallOptions): Promise<StorageFolderMutationResponse>;
+}
+declare function createAthenaStorageError(input: AthenaStorageErrorInput): AthenaStorageError;
+
 type AthenaRowShape$1 = Record<string, AthenaJsonValue | undefined>;
 type FilterColumnKey$1<Row> = Extract<keyof NonNullable<Row>, string>;
 type ResolvedFilterColumnKey$1<Row> = [FilterColumnKey$1<Row>] extends [never] ? string : FilterColumnKey$1<Row>;
@@ -361,6 +729,14 @@ interface AthenaClientExperimentalOptions {
      * represent losslessly yet.
      */
     findManyAst?: boolean;
+    /**
+     * Expose the experimental `client.storage.*` bindings for Athena storage APIs.
+     */
+    athenaStorageBackend?: boolean;
+    /**
+     * Optional storage SDK runtime hooks. Only used when `athenaStorageBackend` is enabled.
+     */
+    storage?: AthenaStorageClientConfig;
 }
 interface AthenaQueryTraceOptions {
     /**
@@ -508,42 +884,53 @@ interface AthenaSdkClient {
 interface AthenaSdkClientWithAuth extends AthenaSdkClient {
     auth: AthenaAuthBindings;
 }
-interface AthenaClientBuilder {
+interface AthenaSdkClientWithStorage extends AthenaSdkClientWithAuth {
+    storage: AthenaStorageModule;
+}
+interface AthenaCreateClientOptions extends Pick<AthenaGatewayCallOptions, 'client' | 'headers' | 'backend'> {
+    auth?: AthenaAuthClientConfig;
+    experimental?: AthenaClientExperimentalOptions;
+}
+interface AthenaCreateClientOptionsWithStorage extends AthenaCreateClientOptions {
+    experimental: AthenaClientExperimentalOptions & {
+        athenaStorageBackend: true;
+    };
+}
+interface AthenaClientBuilder<StorageEnabled extends boolean = false> {
     /** Set the gateway base URL. */
-    url(url: string): AthenaClientBuilder;
+    url(url: string): AthenaClientBuilder<StorageEnabled>;
     /** Set the API key used for all requests. */
-    key(apiKey: string): AthenaClientBuilder;
+    key(apiKey: string): AthenaClientBuilder<StorageEnabled>;
     /** Set the default backend routing strategy. */
-    backend(backend: BackendConfig | BackendType): AthenaClientBuilder;
+    backend(backend: BackendConfig | BackendType): AthenaClientBuilder<StorageEnabled>;
     /** Set the default Athena client routing key. */
-    client(clientName: string): AthenaClientBuilder;
+    client(clientName: string): AthenaClientBuilder<StorageEnabled>;
     /** Attach static headers to every request. */
-    headers(headers: Record<string, string>): AthenaClientBuilder;
+    headers(headers: Record<string, string>): AthenaClientBuilder<StorageEnabled>;
     /** Configure Athena Auth client behavior for `client.auth.*` methods. */
-    auth(config: AthenaAuthClientConfig): AthenaClientBuilder;
-    /** Configure experimental client options (for example query tracing or findMany AST transport). */
-    experimental(options: AthenaClientExperimentalOptions): AthenaClientBuilder;
-    /** Apply the same options object accepted by `createClient(url, key, options)`. */
-    options(options: AthenaCreateClientOptions): AthenaClientBuilder;
+    auth(config: AthenaAuthClientConfig): AthenaClientBuilder<StorageEnabled>;
+    /** Configure experimental client options and narrow the built client when storage is enabled. */
+    experimental(options: AthenaClientExperimentalOptions & {
+        athenaStorageBackend: true;
+    }): AthenaClientBuilder<true>;
+    experimental(options: AthenaClientExperimentalOptions): AthenaClientBuilder<StorageEnabled>;
+    /** Apply createClient options and narrow the built client when storage is enabled. */
+    options(options: AthenaCreateClientOptionsWithStorage): AthenaClientBuilder<true>;
+    options(options: AthenaCreateClientOptions): AthenaClientBuilder<StorageEnabled>;
     /** Build the immutable Athena SDK client. */
-    build(): AthenaSdkClientWithAuth;
+    build(): StorageEnabled extends true ? AthenaSdkClientWithStorage : AthenaSdkClientWithAuth;
 }
 /** Canonical Athena client factory with builder-based configuration. */
 declare class AthenaClient {
     /** Create a fluent builder for a strongly-typed Athena SDK client. */
-    static builder(): AthenaClientBuilder;
+    static builder(): AthenaClientBuilder<false>;
     /** Build a client from process environment variables. */
     static fromEnvironment(): AthenaSdkClientWithAuth;
 }
-interface AthenaCreateClientOptions extends Pick<AthenaGatewayCallOptions, 'client' | 'headers' | 'backend'> {
-    auth?: AthenaAuthClientConfig;
-    experimental?: AthenaClientExperimentalOptions;
-}
 /** Create client (convenience wrapper; use AthenaClient.builder() for full control) */
+declare function createClient(url: string, apiKey: string, options: AthenaCreateClientOptionsWithStorage): AthenaSdkClientWithStorage;
 declare function createClient(url: string, apiKey: string, options?: AthenaCreateClientOptions): AthenaSdkClientWithAuth;
 
-declare function verifyAthenaGatewayUrl(baseUrl: string, options?: AthenaGatewayConnectionOptions): Promise<AthenaGatewayConnectionResult>;
-
 interface NormalizeAthenaGatewayBaseUrlOptions {
     defaultBaseUrl?: string;
     label?: string;
@@ -623,6 +1010,46 @@ interface PostgresIntrospectionProviderOptions {
  */
 declare function createPostgresIntrospectionProvider(options: PostgresIntrospectionProviderOptions): SchemaIntrospectionProvider;
 
+interface GeneratorEnvBaseOptions<T> {
+    default?: T;
+    optional?: boolean;
+}
+type GeneratorEnvStringOptions = GeneratorEnvBaseOptions<string>;
+type GeneratorEnvBooleanOptions = GeneratorEnvBaseOptions<boolean>;
+interface GeneratorEnvListOptions extends GeneratorEnvBaseOptions<readonly string[]> {
+    separator?: string;
+}
+type GeneratorEnvJsonOptions<T> = GeneratorEnvBaseOptions<T>;
+type GeneratorEnvOneOfOptions<T extends string> = GeneratorEnvBaseOptions<T>;
+type GeneratorEnvHelper = {
+    (key: string, options?: GeneratorEnvStringOptions): string;
+    (key: string, options: GeneratorEnvStringOptions & {
+        optional: true;
+    }): string | undefined;
+    boolean(key: string, options?: GeneratorEnvBooleanOptions): boolean;
+    boolean(key: string, options: GeneratorEnvBooleanOptions & {
+        optional: true;
+    }): boolean | undefined;
+    list(key: string, options?: GeneratorEnvListOptions): string[];
+    list(key: string, options: GeneratorEnvListOptions & {
+        optional: true;
+    }): string[] | undefined;
+    json<T>(key: string, options?: GeneratorEnvJsonOptions<T>): T;
+    json<T>(key: string, options: GeneratorEnvJsonOptions<T> & {
+        optional: true;
+    }): T | undefined;
+    oneOf<const T extends string>(key: string, allowedValues: readonly T[], options?: GeneratorEnvOneOfOptions<T>): T;
+    oneOf<const T extends string>(key: string, allowedValues: readonly T[], options: GeneratorEnvOneOfOptions<T> & {
+        optional: true;
+    }): T | undefined;
+};
+/**
+ * Typed env reader for generator configs. This keeps `athena.config.*` files
+ * declarative while preserving exact field types for booleans, lists, unions,
+ * and JSON-backed objects.
+ */
+declare const generatorEnv: GeneratorEnvHelper;
+
 declare function resolvePostgresColumnType(column: IntrospectionColumn): string;
 
 declare const DEFAULT_POSTGRES_SCHEMAS: readonly ["public"];
@@ -641,6 +1068,152 @@ declare function resolveProviderSchemas(providerConfig: GeneratorProviderConfig)
  */
 declare function createAuthClient(config?: AthenaAuthClientConfig): AthenaAuthSdkClient;
 
+type AthenaMaybePromise<T> = T | Promise<T>;
+type AthenaAuthServerCookieOptions = Pick<AthenaCookiesOptions, 'session' | 'advanced'>;
+declare const ATHENA_AUTH_BASE_ERROR_CODES: {
+    readonly HANDLER_NOT_CONFIGURED: "HANDLER_NOT_CONFIGURED";
+    readonly INVALID_BASE_URL: "INVALID_BASE_URL";
+    readonly UNTRUSTED_HOST: "UNTRUSTED_HOST";
+};
+interface AthenaAuthSocialProviderConfig {
+    clientId: string;
+    clientSecret: string;
+    scope?: string[];
+    [key: string]: unknown;
+}
+interface AthenaAuthPluginContext {
+    path?: string;
+    headers?: Headers;
+    context: {
+        returned?: unknown;
+        responseHeaders?: Headers;
+        setSession?: AthenaSessionPair | null;
+        clearSession?: boolean;
+        dontRememberMe?: boolean;
+        cookieOverrides?: Partial<AthenaCookieOptions>;
+        [key: string]: unknown;
+    };
+}
+interface AthenaAuthPluginHandlerContext extends AthenaAuthPluginContext {
+    auth: AthenaAuthServer;
+}
+interface AthenaAuthPlugin {
+    id: string;
+    version: string;
+    $ERROR_CODES?: Record<string, string>;
+    hooks?: {
+        after?: Array<{
+            matcher: (ctx: AthenaAuthPluginContext) => boolean;
+            handler: (ctx: AthenaAuthPluginHandlerContext) => Promise<void> | void;
+        }>;
+    };
+}
+interface AthenaAuthCookieRuntimeInput {
+    headers?: Headers;
+    responseHeaders?: Headers;
+    cookies?: AthenaAuthCookies;
+    getCookie?: (name: string) => string | null | undefined;
+    setCookie?: (name: string, value: string, attributes: AthenaCookieOptions) => void;
+    logger?: AthenaCookieContextRuntime['logger'];
+    setSignedCookie?: AthenaCookieContextRuntime['setSignedCookie'];
+    getSignedCookie?: AthenaCookieContextRuntime['getSignedCookie'];
+    setNewSession?: AthenaCookieContextRuntime['context']['setNewSession'];
+}
+interface AthenaAuthServerRuntimeOptions {
+    baseURL?: string;
+    basePath: string;
+    secret: string;
+    cookies: AthenaAuthServerCookieOptions;
+}
+type AthenaAuthDatabaseFactory<TDatabase = unknown> = (options: AthenaAuthServerRuntimeOptions) => TDatabase;
+type AthenaAuthBaseURLConfig = AthenaCookiesOptions['baseURL'];
+type AthenaAuthTrustedOrigins = string[] | ((request?: Request) => AthenaMaybePromise<string[]>);
+type AthenaAuthTrustedProviders = string[] | ((request?: Request) => AthenaMaybePromise<string[]>);
+interface AthenaAuthHandlerResult {
+    response?: Response;
+    returned?: unknown;
+    setSession?: AthenaSessionPair | null;
+    clearSession?: boolean;
+    dontRememberMe?: boolean;
+    cookieOverrides?: Partial<AthenaCookieOptions>;
+}
+interface AthenaAuthServerConfig<TDatabase = unknown> extends AthenaAuthServerCookieOptions {
+    baseURL?: AthenaAuthBaseURLConfig;
+    basePath?: string;
+    secret: string;
+    database: TDatabase | AthenaAuthDatabaseFactory<TDatabase>;
+    socialProviders?: Record<string, AthenaAuthSocialProviderConfig>;
+    trustedOrigins?: AthenaAuthTrustedOrigins;
+    trustedProviders?: AthenaAuthTrustedProviders;
+    api?: Record<string, unknown>;
+    errorCodes?: Record<string, string>;
+    handler?: (ctx: AthenaAuthRequestContext) => AthenaMaybePromise<Response | AthenaAuthHandlerResult>;
+    plugins?: AthenaAuthPlugin[];
+}
+type ResolveAthenaAuthDatabase<TConfig extends AthenaAuthServerConfig> = TConfig['database'] extends (...args: never[]) => infer TResult ? TResult : TConfig['database'];
+interface AthenaAuthRequestContext<TConfig extends AthenaAuthServerConfig = AthenaAuthServerConfig> {
+    auth: AthenaAuthServer<TConfig>;
+    request: Request;
+    url: URL;
+    path: string;
+    basePath: string;
+    baseURL: string;
+    origin: string;
+    headers: Headers;
+    cookies: AthenaAuthCookies;
+    trustedOrigins: string[];
+    trustedProviders: string[];
+    options: TConfig;
+    runtime: AthenaAuthServerRuntimeOptions;
+    database: ResolveAthenaAuthDatabase<TConfig>;
+    socialProviders: NonNullable<TConfig['socialProviders']>;
+}
+interface AthenaAuthContext<TConfig extends AthenaAuthServerConfig = AthenaAuthServerConfig> {
+    auth: AthenaAuthServer<TConfig>;
+    options: TConfig;
+    runtime: AthenaAuthServerRuntimeOptions;
+    basePath: string;
+    baseURL?: string;
+    origin?: string;
+    database: ResolveAthenaAuthDatabase<TConfig>;
+    socialProviders: NonNullable<TConfig['socialProviders']>;
+    plugins: AthenaAuthPlugin[];
+    cookies: AthenaAuthCookies;
+    trustedOrigins: string[];
+    trustedProviders: string[];
+}
+interface AthenaAuthServerApi<TConfig extends AthenaAuthServerConfig = AthenaAuthServerConfig> {
+    applyResponseCookies: AthenaAuthServer<TConfig>['applyResponseCookies'];
+    clearSession: AthenaAuthServer<TConfig>['clearSession'];
+    createCookieContext: AthenaAuthServer<TConfig>['createCookieContext'];
+    getCookieCache: typeof getCookieCache;
+    getSessionCookie: typeof getSessionCookie;
+    resolveRequestContext: AthenaAuthServer<TConfig>['resolveRequestContext'];
+    runAfterHooks: AthenaAuthServer<TConfig>['runAfterHooks'];
+    setSession: AthenaAuthServer<TConfig>['setSession'];
+}
+interface AthenaAuthServer<TConfig extends AthenaAuthServerConfig = AthenaAuthServerConfig> {
+    config: TConfig;
+    options: TConfig;
+    runtime: AthenaAuthServerRuntimeOptions;
+    database: ResolveAthenaAuthDatabase<TConfig>;
+    socialProviders: NonNullable<TConfig['socialProviders']>;
+    plugins: AthenaAuthPlugin[];
+    cookies: AthenaAuthCookies;
+    api: AthenaAuthServerApi<TConfig> & Record<string, unknown>;
+    $context: Promise<AthenaAuthContext<TConfig>>;
+    $ERROR_CODES: Record<string, string>;
+    createCookieContext: (input?: AthenaAuthCookieRuntimeInput) => AthenaCookieContextRuntime;
+    setSession: (input: AthenaAuthCookieRuntimeInput | undefined, session: AthenaSessionPair, dontRememberMe?: boolean, overrides?: Partial<AthenaCookieOptions>) => Promise<void>;
+    clearSession: (input?: AthenaAuthCookieRuntimeInput, skipDontRememberMe?: boolean) => void;
+    applyResponseCookies: (ctx: AthenaAuthPluginContext) => Promise<Headers>;
+    runAfterHooks: (ctx: AthenaAuthPluginContext) => Promise<AthenaAuthPluginContext>;
+    resolveRequestContext: (request: Request) => Promise<AthenaAuthRequestContext<TConfig>>;
+    handler: (request: Request) => Promise<Response>;
+}
+declare function defineAthenaAuthConfig<TConfig extends AthenaAuthServerConfig>(config: TConfig): TConfig;
+declare function athenaAuth<TConfig extends AthenaAuthServerConfig>(config: TConfig): AthenaAuthServer<TConfig>;
+
 interface AthenaAuthRenderedReactEmail {
     html: string;
     text?: string;
@@ -654,4 +1227,4 @@ declare function createAuthReactEmailInput<TProps extends AthenaAuthReactEmailPr
 declare function defineAuthEmailTemplate<TProps extends AthenaAuthReactEmailProps = AthenaAuthReactEmailProps>(definition: AthenaAuthEmailTemplateDefinition<TProps>): AthenaAuthEmailTemplateBuilder<TProps>;
 declare function renderAthenaReactEmail(input: AthenaAuthReactEmailRenderInput, options?: AthenaAuthReactEmailRuntimeOptions | AthenaAuthReactEmailConfig): Promise<AthenaAuthRenderedReactEmail>;
 
-export { isOk as $, AthenaClient as A, type RetryConfig as B, type RpcOrderOptions as C, DEFAULT_POSTGRES_SCHEMAS as D, type RpcQueryBuilder as E, type TypedAthenaClient as F, type TypedClientOptions as G, type UnwrapOptions as H, type IntCoercionOptions as I, assertInt as J, coerceInt as K, createAuthClient as L, createAuthReactEmailInput as M, type NormalizedAthenaError as N, createClient as O, type PostgresIntrospectionProviderOptions as P, createPostgresIntrospectionProvider as Q, type RequireAffectedOptions as R, createTypedClient as S, type TableQueryBuilder as T, type UnwrapOneOptions as U, defineAuthEmailTemplate as V, defineDatabase as W, defineModel as X, defineRegistry as Y, defineSchema as Z, identifier as _, type AthenaClientExperimentalOptions as a, normalizeAthenaError as a0, normalizeAthenaGatewayBaseUrl as a1, normalizeSchemaSelection as a2, parseBooleanFlag as a3, renderAthenaReactEmail as a4, requireAffected as a5, requireSuccess as a6, resolvePostgresColumnType as a7, resolveProviderSchemas as a8, unwrap as a9, unwrapOne as aa, unwrapRows as ab, verifyAthenaGatewayUrl as ac, withRetry as ad, type AthenaCreateClientOptions as b, type AthenaDbModule as c, AthenaError as d, AthenaErrorCategory as e, AthenaErrorCode as f, type AthenaErrorInput as g, AthenaErrorKind as h, type AthenaFindManyOptions as i, type AthenaFindManyResult as j, type AthenaFromOptions as k, type AthenaOperationContext as l, type AthenaOrderBy as m, type AthenaQueryTraceCallsite as n, type AthenaQueryTraceEvent as o, type AthenaQueryTraceOptions as p, type AthenaRelationSelectNode as q, type AthenaResult as r, type AthenaResultError as s, type AthenaSdkClient as t, type AthenaSdkClientWithAuth as u, type AthenaSelectShape as v, type AthenaWhere as w, type AthenaWhereBooleanOperand as x, type AthenaWhereOperatorInput as y, type RetryBackoffStrategy as z };
+export { type AthenaWhere as $, ATHENA_AUTH_BASE_ERROR_CODES as A, type AthenaErrorInput as B, AthenaErrorKind as C, type AthenaFindManyOptions as D, type AthenaFindManyResult as E, type AthenaFromOptions as F, type AthenaOperationContext as G, type AthenaOrderBy as H, type AthenaQueryTraceCallsite as I, type AthenaQueryTraceEvent as J, type AthenaQueryTraceOptions as K, type AthenaRelationSelectNode as L, type AthenaResult as M, type AthenaResultError as N, type AthenaSdkClient as O, type AthenaSdkClientWithAuth as P, type AthenaSdkClientWithStorage as Q, type AthenaSelectShape as R, type AthenaStorageBinaryCallOptions as S, type AthenaStorageCallOptions as T, type AthenaStorageClientConfig as U, AthenaStorageError as V, AthenaStorageErrorCode as W, type AthenaStorageErrorDetails as X, type AthenaStorageErrorHandler as Y, type AthenaStorageErrorInput as Z, type AthenaStorageModule as _, type AthenaAuthBaseURLConfig as a, renderAthenaReactEmail as a$, type AthenaWhereBooleanOperand as a0, type AthenaWhereOperatorInput as a1, type CreateStorageCatalogRequest as a2, type CreateStorageUploadUrlRequest as a3, type CreateStorageUploadUrlsRequest as a4, DEFAULT_POSTGRES_SCHEMAS as a5, type DeleteStorageFolderRequest as a6, type GeneratorEnvBooleanOptions as a7, type GeneratorEnvJsonOptions as a8, type GeneratorEnvListOptions as a9, type TypedClientOptions as aA, type UnwrapOneOptions as aB, type UnwrapOptions as aC, type UpdateStorageCatalogRequest as aD, type UpdateStorageFileRequest as aE, assertInt as aF, athenaAuth as aG, coerceInt as aH, createAthenaStorageError as aI, createAuthClient as aJ, createAuthReactEmailInput as aK, createClient as aL, createPostgresIntrospectionProvider as aM, createTypedClient as aN, defineAthenaAuthConfig as aO, defineAuthEmailTemplate as aP, defineDatabase as aQ, defineModel as aR, defineRegistry as aS, defineSchema as aT, generatorEnv as aU, identifier as aV, isOk as aW, normalizeAthenaError as aX, normalizeAthenaGatewayBaseUrl as aY, normalizeSchemaSelection as aZ, parseBooleanFlag as a_, type GeneratorEnvOneOfOptions as aa, type GeneratorEnvStringOptions as ab, type GetStorageFileUrlQuery as ac, type IntCoercionOptions as ad, type ListStorageFilesRequest as ae, type ManagedFileRecord as af, type MoveStorageFolderRequest as ag, type NormalizedAthenaError as ah, type PostgresIntrospectionProviderOptions as ai, type PresignedFileUrlResponse as aj, type RequireAffectedOptions as ak, type RetryBackoffStrategy as al, type RetryConfig as am, type RpcOrderOptions as an, type RpcQueryBuilder as ao, type S3CatalogItem as ap, type S3CredentialListItem as aq, type SetStorageFileVisibilityRequest as ar, type StorageBatchUploadUrlResponse as as, type StorageFileAccessPurpose as at, type StorageFileMutationResponse as au, type StorageFolderMutationResponse as av, type StorageListFilesResponse as aw, type StorageUploadUrlResponse as ax, type TableQueryBuilder as ay, type TypedAthenaClient as az, type AthenaAuthContext as b, requireAffected as b0, requireSuccess as b1, resolvePostgresColumnType as b2, resolveProviderSchemas as b3, storageSdkManifest as b4, unwrap as b5, unwrapOne as b6, unwrapRows as b7, verifyAthenaGatewayUrl as b8, withRetry as b9, type AthenaAuthCookieRuntimeInput as c, type AthenaAuthDatabaseFactory as d, type AthenaAuthHandlerResult as e, type AthenaAuthPlugin as f, type AthenaAuthPluginContext as g, type AthenaAuthPluginHandlerContext as h, type AthenaAuthRequestContext as i, type AthenaAuthServer as j, type AthenaAuthServerApi as k, type AthenaAuthServerConfig as l, type AthenaAuthServerRuntimeOptions as m, type AthenaAuthSocialProviderConfig as n, type AthenaAuthTrustedOrigins as o, type AthenaAuthTrustedProviders as p, AthenaClient as q, type AthenaClientBuilder as r, type AthenaClientExperimentalOptions as s, type AthenaCreateClientOptions as t, type AthenaCreateClientOptionsWithStorage as u, type AthenaDbModule as v, type AthenaEnvelope as w, AthenaError as x, AthenaErrorCategory as y, AthenaErrorCode as z };