alepha 0.22.0 → 0.24.0

package/dist/api/files/index.d.ts

@@ -7,65 +7,47 @@ import { Page, RepositoryProvider } from "alepha/orm";
 import { FileSystemProvider } from "alepha/system";
 import { BuildExtraConfigColumns, SQL } from "drizzle-orm";
 import { PgColumnBuilderBase, PgSequenceOptions, PgTableExtraConfigValue, UpdateDeleteAction } from "drizzle-orm/pg-core";
+import "drizzle-orm/pg-core/foreign-keys";
+import "drizzle-orm/pg-core/session";
+import "alepha/crypto";
+import "drizzle-kit/api";
+import "drizzle-orm/d1";
+import "drizzle-orm/sqlite-core";
 //#region ../../src/api/files/entities/files.d.ts
-declare const files: import("alepha/orm").EntityPrimitive<import("typebox").TObject<{
-  id: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_PRIMARY_KEY>, typeof import("alepha/orm").PG_DEFAULT>;
-  version: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TInteger, typeof import("alepha/orm").PG_VERSION>, typeof import("alepha/orm").PG_DEFAULT>;
-  createdAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_CREATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
-  updatedAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_UPDATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
-  organizationId: import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_ORGANIZATION>;
-  blobId: import("typebox").TString;
-  creator: import("typebox").TOptional<import("typebox").TString>;
-  creatorRealm: import("typebox").TOptional<import("typebox").TString>;
-  creatorName: import("typebox").TOptional<import("typebox").TString>;
-  bucket: import("typebox").TString;
-  expirationDate: import("typebox").TOptional<import("typebox").TString>;
-  /**
-   * Display name. Mutable via `FileService.updateFile` — can be renamed
-   * by callers (e.g. an Archive UI letting users rename uploaded blobs).
-   * Initialized to the uploader's filename at upload time. Use
-   * `originalName` if you need the as-uploaded filename after a rename.
-   */
-  name: import("typebox").TString;
-  /**
-   * Immutable record of the uploader's filename at upload time. Set once
-   * by `FileService.uploadFile` and the `bucket:file:uploaded` hook;
-   * `FileService.updateFile` never touches it. Useful for download
-   * headers (Content-Disposition), audit trails, and any UI that wants
-   * to show "originally uploaded as X" alongside a renamed file.
-   */
-  originalName: import("typebox").TOptional<import("typebox").TString>;
-  size: import("typebox").TNumber;
-  mimeType: import("typebox").TString;
-  /**
-   * Free-form taxonomy. Normalized server-side (trim/lowercase/dedupe is
-   * caller's responsibility for now). Use with `FileQuery.tags` to
-   * filter via array-contains.
-   */
-  tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-  /**
-   * SHA-256 hex digest of the file content (64 lowercase hex chars).
-   * Computed at upload time by `FileService.calculateChecksum`. Stable
-   * — never recomputed after upload. Use for integrity verification,
-   * content-based dedup, or downstream virus-scan correlation.
-   */
-  checksum: import("typebox").TOptional<import("typebox").TString>;
-}>>;
+declare const files: import("alepha/orm").EntityPrimitive<import("zod").ZodObject<{
+  id: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodString, typeof import("alepha/orm").PG_PRIMARY_KEY>, typeof import("alepha/orm").PG_DEFAULT>;
+  version: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodInt, typeof import("alepha/orm").PG_VERSION>, typeof import("alepha/orm").PG_DEFAULT>;
+  createdAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodString, typeof import("alepha/orm").PG_CREATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
+  updatedAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodString, typeof import("alepha/orm").PG_UPDATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
+  organizationId: import("alepha/orm").PgAttr<import("zod").ZodOptional<import("zod").ZodString> | import("zod").ZodString, typeof import("alepha/orm").PG_ORGANIZATION>;
+  blobId: import("zod").ZodString;
+  creator: import("zod").ZodOptional<import("zod").ZodString>;
+  creatorRealm: import("zod").ZodOptional<import("zod").ZodString>;
+  creatorName: import("zod").ZodOptional<import("zod").ZodString>;
+  bucket: import("zod").ZodString;
+  expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+  name: import("zod").ZodString;
+  originalName: import("zod").ZodOptional<import("zod").ZodString>;
+  size: import("zod").ZodNumber;
+  mimeType: import("zod").ZodString;
+  tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+  checksum: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>>;
 type FileEntity = Static<typeof files.schema>;
 //#endregion
 //#region ../../src/api/files/schemas/fileQuerySchema.d.ts
-declare const fileQuerySchema: import("typebox").TObject<{
-  page: import("typebox").TOptional<import("typebox").TInteger>;
-  size: import("typebox").TOptional<import("typebox").TInteger>;
-  sort: import("typebox").TOptional<import("typebox").TString>;
-  bucket: import("typebox").TOptional<import("typebox").TString>;
-  tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-  name: import("typebox").TOptional<import("typebox").TString>;
-  mimeType: import("typebox").TOptional<import("typebox").TString>;
-  creator: import("typebox").TOptional<import("typebox").TString>;
-  createdAfter: import("typebox").TOptional<import("typebox").TString>;
-  createdBefore: import("typebox").TOptional<import("typebox").TString>;
-}>;
+declare const fileQuerySchema: import("zod").ZodObject<{
+  page: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodInt>>;
+  size: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodInt>>;
+  sort: import("zod").ZodOptional<import("zod").ZodString>;
+  bucket: import("zod").ZodOptional<import("zod").ZodString>;
+  tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+  name: import("zod").ZodOptional<import("zod").ZodString>;
+  mimeType: import("zod").ZodOptional<import("zod").ZodString>;
+  creator: import("zod").ZodOptional<import("zod").ZodString>;
+  createdAfter: import("zod").ZodOptional<import("zod").ZodString>;
+  createdBefore: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 type FileQuery = Static<typeof fileQuerySchema>;
 //#endregion
 //#region ../../src/orm/core/schemas/insertSchema.d.ts
@@ -78,15 +60,13 @@ type FileQuery = Static<typeof fileQuerySchema>;
  * Before: { name: string; age: number(default=0); fullName: generated }
  * After:  { name: string; age?: number; }
  */
-type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"] as T["properties"][K] extends {
+type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["shape"] as T["shape"][K] extends {
   [PG_GENERATED]: any;
-} ? never : K]: T["properties"][K] extends {
+} ? never : K]: T["shape"][K] extends {
   [PG_DEFAULT]: any;
 } | {
   [PG_ORGANIZATION]: any;
-} | {
-  "~optional": true;
-} ? TOptional<T["properties"][K]> : T["properties"][K] }>;
+} ? TOptional<Extract<T["shape"][K], TSchema>> : T["shape"][K]; }>;
 //#endregion
 //#region ../../src/orm/core/schemas/updateSchema.d.ts
 /**
@@ -98,9 +78,9 @@ type TObjectInsert<T extends TObject> = TObject<{ [K in keyof T["properties"] as
  * Before: { name?: string; age: number; fullName: generated }
  * After:  { name?: string | null; age: number; }
  */
-type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["properties"] as T["properties"][K] extends {
+type TObjectUpdate<T extends TObject> = TObject<{ [K in keyof T["shape"] as T["shape"][K] extends {
   [PG_GENERATED]: any;
-} ? never : K]: T["properties"][K] extends TOptional<infer U> ? TOptional<TUnion<[U, TNull]>> : T["properties"][K] }>;
+} ? never : K]: T["shape"][K] extends TOptional<infer U extends TSchema> ? TOptional<TUnion<[U, TNull]>> : T["shape"][K]; }>;
 //#endregion
 //#region ../../src/orm/core/primitives/$entity.d.ts
 interface EntityPrimitiveOptions<T extends TObject, Keys = keyof Static<T>> {
@@ -260,18 +240,20 @@ declare class EntityPrimitive<T extends TObject = TObject> {
   get cols(): EntityColumns<T>;
   get name(): string;
   get schema(): T;
+  protected _insertSchema?: TObjectInsert<T>;
   get insertSchema(): TObjectInsert<T>;
+  protected _updateSchema?: TObjectUpdate<T>;
   get updateSchema(): TObjectUpdate<T>;
 }
 /**
  * Convert a schema to columns.
  */
-type FromSchema<T extends TObject> = { [key in keyof T["properties"]]: PgColumnBuilderBase };
+type FromSchema<T extends TObject> = { [key in keyof T["properties"]]: PgColumnBuilderBase; };
 type EntityColumn<T extends TObject> = {
   name: string;
   entity: EntityPrimitive<T>;
 };
-type EntityColumns<T extends TObject> = { [key in keyof T["properties"]]: EntityColumn<T> };
+type EntityColumns<T extends TObject> = { [key in keyof T["properties"]]: EntityColumn<T>; };
 //#endregion
 //#region ../../src/orm/core/constants/PG_SYMBOLS.d.ts
 declare const PG_DEFAULT: unique symbol;
@@ -300,13 +282,24 @@ type PgSymbols = {
   [PG_REF]: PgRefOptions;
   [PG_ENUM]: PgEnumOptions;
   [PG_GENERATED]: PgGeneratedOptions;
-  [PG_ORGANIZATION]: {};
+  [PG_ORGANIZATION]: PgOrganizationOptions;
   /**
    * @deprecated Use `PG_IDENTITY` instead.
    */
   [PG_SERIAL]: {};
 };
 type PgSymbolKeys = keyof PgSymbols;
+interface PgOrganizationOptions {
+  /**
+   * Fail-closed tenant scoping. When `true`, the repository (a) refuses any
+   * read/write with no resolved tenant instead of falling through to an
+   * unfiltered "see/write everything" query, and (b) drops the
+   * `OR organizationId IS NULL` "global row" escape — a scoped tenant never
+   * sees NULL/global rows. Use for security-sensitive tables. Defaults to
+   * `false` (the historic fail-open semantics).
+   */
+  strict?: boolean;
+}
 type PgIdentityOptions = {
   mode: "always" | "byDefault";
 } & PgSequenceOptions & {
@@ -343,7 +336,7 @@ interface PgRefOptions {
 /**
  * Type representation.
  */
-type PgAttr<T extends TSchema, TAttr extends PgSymbolKeys> = T & { [K in TAttr]: PgSymbols[K] };
+type PgAttr<T extends TSchema, TAttr extends PgSymbolKeys> = T & { [K in TAttr]: PgSymbols[K]; };
 //#endregion
 //#region ../../src/orm/core/schemas/databaseEnvSchema.d.ts
 /**
@@ -359,73 +352,66 @@ type PgAttr<T extends TSchema, TAttr extends PgSymbolKeys> = T & { [K in TAttr]:
  * - `d1://BINDING_NAME` — Cloudflare D1
  * - `hyperdrive://BINDING_NAME` — Cloudflare Hyperdrive
  */
-declare const databaseEnvSchema: import("typebox").TObject<{
-  DATABASE_URL: import("typebox").TOptional<import("typebox").TString>;
-  /**
-   * Enable or disable push-based schema synchronization (drizzle-kit push).
-   *
-   * Defaults to `true` in development and test, `false` in production.
-   * Set to `false` in development to skip automatic schema sync
-   * (e.g. when managing migrations manually).
-   */
-  DATABASE_SYNC: import("typebox").TOptional<import("typebox").TBoolean>;
-}>;
+declare const databaseEnvSchema: import("zod").ZodObject<{
+  DATABASE_URL: import("zod").ZodOptional<import("zod").ZodString>;
+  DATABASE_SYNC: import("zod").ZodOptional<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>;
 declare module "alepha" {
   interface Env extends Partial<Static<typeof databaseEnvSchema>> {}
-} //# sourceMappingURL=databaseEnvSchema.d.ts.map
+}
 //#endregion
 //#region ../../src/api/files/schemas/fileResourceSchema.d.ts
-declare const fileResourceSchema: import("typebox").TObject<{
-  id: PgAttr<PgAttr<import("typebox").TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-  version: PgAttr<PgAttr<import("typebox").TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
-  createdAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
-  updatedAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-  organizationId: PgAttr<import("typebox").TString, typeof PG_ORGANIZATION>;
-  blobId: import("typebox").TString;
-  creator: import("typebox").TOptional<import("typebox").TString>;
-  creatorRealm: import("typebox").TOptional<import("typebox").TString>;
-  creatorName: import("typebox").TOptional<import("typebox").TString>;
-  bucket: import("typebox").TString;
-  expirationDate: import("typebox").TOptional<import("typebox").TString>;
-  name: import("typebox").TString;
-  originalName: import("typebox").TOptional<import("typebox").TString>;
-  size: import("typebox").TNumber;
-  mimeType: import("typebox").TString;
-  tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-  checksum: import("typebox").TOptional<import("typebox").TString>;
-  user: import("typebox").TOptional<import("typebox").TObject<{
-    id: import("typebox").TString;
-    email: import("typebox").TOptional<import("typebox").TString>;
-    username: import("typebox").TOptional<import("typebox").TString>;
-    firstName: import("typebox").TOptional<import("typebox").TString>;
-    lastName: import("typebox").TOptional<import("typebox").TString>;
-  }>>;
-}>;
+declare const fileResourceSchema: import("zod").ZodObject<{
+  id: PgAttr<PgAttr<import("zod").ZodString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+  version: PgAttr<PgAttr<import("zod").ZodInt, typeof PG_VERSION>, typeof PG_DEFAULT>;
+  createdAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+  updatedAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+  organizationId: PgAttr<import("zod").ZodOptional<import("zod").ZodString> | import("zod").ZodString, typeof PG_ORGANIZATION>;
+  blobId: import("zod").ZodString;
+  creator: import("zod").ZodOptional<import("zod").ZodString>;
+  creatorRealm: import("zod").ZodOptional<import("zod").ZodString>;
+  creatorName: import("zod").ZodOptional<import("zod").ZodString>;
+  bucket: import("zod").ZodString;
+  expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+  name: import("zod").ZodString;
+  originalName: import("zod").ZodOptional<import("zod").ZodString>;
+  size: import("zod").ZodNumber;
+  mimeType: import("zod").ZodString;
+  tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+  checksum: import("zod").ZodOptional<import("zod").ZodString>;
+  user: import("zod").ZodOptional<import("zod").ZodObject<{
+    id: import("zod").ZodString;
+    email: import("zod").ZodOptional<import("zod").ZodString>;
+    username: import("zod").ZodOptional<import("zod").ZodString>;
+    firstName: import("zod").ZodOptional<import("zod").ZodString>;
+    lastName: import("zod").ZodOptional<import("zod").ZodString>;
+  }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>;
 type FileResource = Static<typeof fileResourceSchema>;
 //#endregion
 //#region ../../src/api/files/schemas/storageStatsSchema.d.ts
-declare const bucketStatsSchema: import("typebox").TObject<{
-  bucket: import("typebox").TString;
-  totalSize: import("typebox").TNumber;
-  fileCount: import("typebox").TNumber;
-}>;
-declare const mimeTypeStatsSchema: import("typebox").TObject<{
-  mimeType: import("typebox").TString;
-  fileCount: import("typebox").TNumber;
-}>;
-declare const storageStatsSchema: import("typebox").TObject<{
-  totalSize: import("typebox").TNumber;
-  totalFiles: import("typebox").TNumber;
-  byBucket: import("typebox").TArray<import("typebox").TObject<{
-    bucket: import("typebox").TString;
-    totalSize: import("typebox").TNumber;
-    fileCount: import("typebox").TNumber;
-  }>>;
-  byMimeType: import("typebox").TArray<import("typebox").TObject<{
-    mimeType: import("typebox").TString;
-    fileCount: import("typebox").TNumber;
-  }>>;
-}>;
+declare const bucketStatsSchema: import("zod").ZodObject<{
+  bucket: import("zod").ZodString;
+  totalSize: import("zod").ZodNumber;
+  fileCount: import("zod").ZodNumber;
+}, import("zod/v4/core").$strip>;
+declare const mimeTypeStatsSchema: import("zod").ZodObject<{
+  mimeType: import("zod").ZodString;
+  fileCount: import("zod").ZodNumber;
+}, import("zod/v4/core").$strip>;
+declare const storageStatsSchema: import("zod").ZodObject<{
+  totalSize: import("zod").ZodNumber;
+  totalFiles: import("zod").ZodNumber;
+  byBucket: import("zod").ZodArray<import("zod").ZodObject<{
+    bucket: import("zod").ZodString;
+    totalSize: import("zod").ZodNumber;
+    fileCount: import("zod").ZodNumber;
+  }, import("zod/v4/core").$strip>>;
+  byMimeType: import("zod").ZodArray<import("zod").ZodObject<{
+    mimeType: import("zod").ZodString;
+    fileCount: import("zod").ZodNumber;
+  }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>;
 type BucketStats = Static<typeof bucketStatsSchema>;
 type MimeTypeStats = Static<typeof mimeTypeStatsSchema>;
 type StorageStats = Static<typeof storageStatsSchema>;
@@ -438,25 +424,25 @@ declare class FileService {
   protected readonly repositoryProvider: RepositoryProvider;
   protected readonly fileSystem: FileSystemProvider;
   protected readonly defaultBucket: BucketPrimitive;
-  readonly fileRepository: import("alepha/orm").Repository<import("typebox").TObject<{
-    id: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_PRIMARY_KEY>, typeof import("alepha/orm").PG_DEFAULT>;
-    version: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TInteger, typeof import("alepha/orm").PG_VERSION>, typeof import("alepha/orm").PG_DEFAULT>;
-    createdAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_CREATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
-    updatedAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_UPDATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
-    organizationId: import("alepha/orm").PgAttr<import("typebox").TString, typeof import("alepha/orm").PG_ORGANIZATION>;
-    blobId: import("typebox").TString;
-    creator: import("typebox").TOptional<import("typebox").TString>;
-    creatorRealm: import("typebox").TOptional<import("typebox").TString>;
-    creatorName: import("typebox").TOptional<import("typebox").TString>;
-    bucket: import("typebox").TString;
-    expirationDate: import("typebox").TOptional<import("typebox").TString>;
-    name: import("typebox").TString;
-    originalName: import("typebox").TOptional<import("typebox").TString>;
-    size: import("typebox").TNumber;
-    mimeType: import("typebox").TString;
-    tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-    checksum: import("typebox").TOptional<import("typebox").TString>;
-  }>>;
+  readonly fileRepository: import("alepha/orm").Repository<import("zod").ZodObject<{
+    id: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodString, typeof import("alepha/orm").PG_PRIMARY_KEY>, typeof import("alepha/orm").PG_DEFAULT>;
+    version: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodInt, typeof import("alepha/orm").PG_VERSION>, typeof import("alepha/orm").PG_DEFAULT>;
+    createdAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodString, typeof import("alepha/orm").PG_CREATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
+    updatedAt: import("alepha/orm").PgAttr<import("alepha/orm").PgAttr<import("zod").ZodString, typeof import("alepha/orm").PG_UPDATED_AT>, typeof import("alepha/orm").PG_DEFAULT>;
+    organizationId: import("alepha/orm").PgAttr<import("zod").ZodOptional<import("zod").ZodString> | import("zod").ZodString, typeof import("alepha/orm").PG_ORGANIZATION>;
+    blobId: import("zod").ZodString;
+    creator: import("zod").ZodOptional<import("zod").ZodString>;
+    creatorRealm: import("zod").ZodOptional<import("zod").ZodString>;
+    creatorName: import("zod").ZodOptional<import("zod").ZodString>;
+    bucket: import("zod").ZodString;
+    expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+    name: import("zod").ZodString;
+    originalName: import("zod").ZodOptional<import("zod").ZodString>;
+    size: import("zod").ZodNumber;
+    mimeType: import("zod").ZodString;
+    tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+    checksum: import("zod").ZodOptional<import("zod").ZodString>;
+  }, import("zod/v4/core").$strip>>;
   /**
    * Best-effort left join embedding the uploader on every file row, so the
    * admin UI can render `user.email` instead of the bare `creator` UUID.
@@ -472,7 +458,7 @@ declare class FileService {
    */
   protected resolveCreatorJoin(): {
     user: {
-      join: import("alepha/orm").EntityPrimitive<import("typebox").TObject<import("typebox").TProperties>>;
+      join: import("alepha/orm").EntityPrimitive<import("alepha").TObject>;
       on: ["creator", {
         name: string;
       }];
@@ -660,19 +646,19 @@ declare class AdminFileStatsController {
    * and breakdowns by bucket and MIME type.
    */
   readonly getFileStats: import("alepha/server").ActionPrimitiveFn<{
-    response: import("typebox").TObject<{
-      totalSize: import("typebox").TNumber;
-      totalFiles: import("typebox").TNumber;
-      byBucket: import("typebox").TArray<import("typebox").TObject<{
-        bucket: import("typebox").TString;
-        totalSize: import("typebox").TNumber;
-        fileCount: import("typebox").TNumber;
-      }>>;
-      byMimeType: import("typebox").TArray<import("typebox").TObject<{
-        mimeType: import("typebox").TString;
-        fileCount: import("typebox").TNumber;
-      }>>;
-    }>;
+    response: import("zod").ZodObject<{
+      totalSize: import("zod").ZodNumber;
+      totalFiles: import("zod").ZodNumber;
+      byBucket: import("zod").ZodArray<import("zod").ZodObject<{
+        bucket: import("zod").ZodString;
+        totalSize: import("zod").ZodNumber;
+        fileCount: import("zod").ZodNumber;
+      }, import("zod/v4/core").$strip>>;
+      byMimeType: import("zod").ZodArray<import("zod").ZodObject<{
+        mimeType: import("zod").ZodString;
+        fileCount: import("zod").ZodNumber;
+      }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>;
   }>;
 }
 //#endregion
@@ -743,70 +729,83 @@ declare class FileController {
    * Supports filtering by bucket and tags.
    */
   readonly findFiles: import("alepha/server").ActionPrimitiveFn<{
-    query: import("typebox").TObject<{
-      page: import("typebox").TOptional<import("typebox").TInteger>;
-      size: import("typebox").TOptional<import("typebox").TInteger>;
-      sort: import("typebox").TOptional<import("typebox").TString>;
-      bucket: import("typebox").TOptional<import("typebox").TString>;
-      tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-      name: import("typebox").TOptional<import("typebox").TString>;
-      mimeType: import("typebox").TOptional<import("typebox").TString>;
-      creator: import("typebox").TOptional<import("typebox").TString>;
-      createdAfter: import("typebox").TOptional<import("typebox").TString>;
-      createdBefore: import("typebox").TOptional<import("typebox").TString>;
-    }>;
-    response: import("alepha").TPage<import("typebox").TObject<{
-      id: PgAttr<PgAttr<import("typebox").TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-      version: PgAttr<PgAttr<import("typebox").TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
-      createdAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
-      updatedAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-      organizationId: PgAttr<import("typebox").TString, typeof PG_ORGANIZATION>;
-      blobId: import("typebox").TString;
-      creator: import("typebox").TOptional<import("typebox").TString>;
-      creatorRealm: import("typebox").TOptional<import("typebox").TString>;
-      creatorName: import("typebox").TOptional<import("typebox").TString>;
-      bucket: import("typebox").TString;
-      expirationDate: import("typebox").TOptional<import("typebox").TString>;
-      name: import("typebox").TString;
-      originalName: import("typebox").TOptional<import("typebox").TString>;
-      size: import("typebox").TNumber;
-      mimeType: import("typebox").TString;
-      tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-      checksum: import("typebox").TOptional<import("typebox").TString>;
-      user: import("typebox").TOptional<import("typebox").TObject<{
-        id: import("typebox").TString;
-        email: import("typebox").TOptional<import("typebox").TString>;
-        username: import("typebox").TOptional<import("typebox").TString>;
-        firstName: import("typebox").TOptional<import("typebox").TString>;
-        lastName: import("typebox").TOptional<import("typebox").TString>;
-      }>>;
-    }>>;
+    query: import("zod").ZodObject<{
+      page: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodInt>>;
+      size: import("zod").ZodOptional<import("zod").ZodDefault<import("zod").ZodInt>>;
+      sort: import("zod").ZodOptional<import("zod").ZodString>;
+      bucket: import("zod").ZodOptional<import("zod").ZodString>;
+      tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+      name: import("zod").ZodOptional<import("zod").ZodString>;
+      mimeType: import("zod").ZodOptional<import("zod").ZodString>;
+      creator: import("zod").ZodOptional<import("zod").ZodString>;
+      createdAfter: import("zod").ZodOptional<import("zod").ZodString>;
+      createdBefore: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodObject<{
+      content: import("zod").ZodArray<import("zod").ZodObject<{
+        id: PgAttr<PgAttr<import("zod").ZodString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+        version: PgAttr<PgAttr<import("zod").ZodInt, typeof PG_VERSION>, typeof PG_DEFAULT>;
+        createdAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+        updatedAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+        organizationId: PgAttr<import("zod").ZodOptional<import("zod").ZodString> | import("zod").ZodString, typeof PG_ORGANIZATION>;
+        blobId: import("zod").ZodString;
+        creator: import("zod").ZodOptional<import("zod").ZodString>;
+        creatorRealm: import("zod").ZodOptional<import("zod").ZodString>;
+        creatorName: import("zod").ZodOptional<import("zod").ZodString>;
+        bucket: import("zod").ZodString;
+        expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+        name: import("zod").ZodString;
+        originalName: import("zod").ZodOptional<import("zod").ZodString>;
+        size: import("zod").ZodNumber;
+        mimeType: import("zod").ZodString;
+        tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        checksum: import("zod").ZodOptional<import("zod").ZodString>;
+        user: import("zod").ZodOptional<import("zod").ZodObject<{
+          id: import("zod").ZodString;
+          email: import("zod").ZodOptional<import("zod").ZodString>;
+          username: import("zod").ZodOptional<import("zod").ZodString>;
+          firstName: import("zod").ZodOptional<import("zod").ZodString>;
+          lastName: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+      }, import("zod/v4/core").$strip>>;
+      page: import("zod").ZodObject<{
+        number: import("zod").ZodInt;
+        size: import("zod").ZodInt;
+        offset: import("zod").ZodInt;
+        numberOfElements: import("zod").ZodInt;
+        totalElements: import("zod").ZodOptional<import("zod").ZodInt>;
+        totalPages: import("zod").ZodOptional<import("zod").ZodInt>;
+        isEmpty: import("zod").ZodBoolean;
+        isFirst: import("zod").ZodBoolean;
+        isLast: import("zod").ZodBoolean;
+      }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>;
   }>;
   /**
    * DELETE /files/:id - Deletes a file from both storage and database.
    * Removes the file from the bucket and cleans up the database record.
    */
   readonly deleteFile: import("alepha/server").ActionPrimitiveFn<{
-    params: import("typebox").TObject<{
-      id: import("typebox").TString;
-    }>;
-    response: import("typebox").TObject<{
-      ok: import("typebox").TBoolean;
-      id: import("typebox").TOptional<import("typebox").TUnion<[import("typebox").TString, import("typebox").TInteger]>>;
-      count: import("typebox").TOptional<import("typebox").TNumber>;
-    }>;
+    params: import("zod").ZodObject<{
+      id: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodObject<{
+      ok: import("zod").ZodBoolean;
+      id: import("zod").ZodOptional<import("zod").ZodUnion<readonly [import("zod").ZodString, import("zod").ZodInt]>>;
+      count: import("zod").ZodOptional<import("zod").ZodNumber>;
+    }, import("zod/v4/core").$strip>;
   }>;
   /**
    * POST /files/delete - Delete many files in one request, batching the
    * underlying bucket calls per bucket (R2/S3 batch where supported).
    */
   readonly deleteFiles: import("alepha/server").ActionPrimitiveFn<{
-    body: import("typebox").TObject<{
-      ids: import("typebox").TArray<import("typebox").TString>;
-    }>;
-    response: import("typebox").TObject<{
-      deleted: import("typebox").TArray<import("typebox").TString>;
-    }>;
+    body: import("zod").ZodObject<{
+      ids: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodObject<{
+      deleted: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
   }>;
   /**
    * POST /files - Uploads a new file to storage.
@@ -814,79 +813,79 @@ declare class FileController {
    * Optionally specify bucket and expiration date.
    */
   readonly uploadFile: import("alepha/server").ActionPrimitiveFn<{
-    body: import("typebox").TObject<{
-      file: import("alepha").TFile;
-    }>;
-    query: import("typebox").TObject<{
-      expirationDate: import("typebox").TOptional<import("typebox").TString>;
-      bucket: import("typebox").TOptional<import("typebox").TString>;
-    }>;
-    response: import("typebox").TObject<{
-      id: PgAttr<PgAttr<import("typebox").TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-      version: PgAttr<PgAttr<import("typebox").TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
-      createdAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
-      updatedAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-      organizationId: PgAttr<import("typebox").TString, typeof PG_ORGANIZATION>;
-      blobId: import("typebox").TString;
-      creator: import("typebox").TOptional<import("typebox").TString>;
-      creatorRealm: import("typebox").TOptional<import("typebox").TString>;
-      creatorName: import("typebox").TOptional<import("typebox").TString>;
-      bucket: import("typebox").TString;
-      expirationDate: import("typebox").TOptional<import("typebox").TString>;
-      name: import("typebox").TString;
-      originalName: import("typebox").TOptional<import("typebox").TString>;
-      size: import("typebox").TNumber;
-      mimeType: import("typebox").TString;
-      tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-      checksum: import("typebox").TOptional<import("typebox").TString>;
-      user: import("typebox").TOptional<import("typebox").TObject<{
-        id: import("typebox").TString;
-        email: import("typebox").TOptional<import("typebox").TString>;
-        username: import("typebox").TOptional<import("typebox").TString>;
-        firstName: import("typebox").TOptional<import("typebox").TString>;
-        lastName: import("typebox").TOptional<import("typebox").TString>;
-      }>>;
-    }>;
+    body: import("zod").ZodObject<{
+      file: import("zod").ZodAny;
+    }, import("zod/v4/core").$strip>;
+    query: import("zod").ZodObject<{
+      expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+      bucket: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodObject<{
+      id: PgAttr<PgAttr<import("zod").ZodString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<import("zod").ZodInt, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      organizationId: PgAttr<import("zod").ZodOptional<import("zod").ZodString> | import("zod").ZodString, typeof PG_ORGANIZATION>;
+      blobId: import("zod").ZodString;
+      creator: import("zod").ZodOptional<import("zod").ZodString>;
+      creatorRealm: import("zod").ZodOptional<import("zod").ZodString>;
+      creatorName: import("zod").ZodOptional<import("zod").ZodString>;
+      bucket: import("zod").ZodString;
+      expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+      name: import("zod").ZodString;
+      originalName: import("zod").ZodOptional<import("zod").ZodString>;
+      size: import("zod").ZodNumber;
+      mimeType: import("zod").ZodString;
+      tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+      checksum: import("zod").ZodOptional<import("zod").ZodString>;
+      user: import("zod").ZodOptional<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        email: import("zod").ZodOptional<import("zod").ZodString>;
+        username: import("zod").ZodOptional<import("zod").ZodString>;
+        firstName: import("zod").ZodOptional<import("zod").ZodString>;
+        lastName: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>;
   }>;
   /**
    * PATCH /files/:id - Updates file metadata.
    * Allows updating name, tags, and expiration date without modifying file content.
    */
   readonly updateFile: import("alepha/server").ActionPrimitiveFn<{
-    params: import("typebox").TObject<{
-      id: import("typebox").TString;
-    }>;
-    body: import("typebox").TObject<{
-      name: import("typebox").TOptional<import("typebox").TString>;
-      tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-      expirationDate: import("typebox").TOptional<import("typebox").TString>;
-    }>;
-    response: import("typebox").TObject<{
-      id: PgAttr<PgAttr<import("typebox").TString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
-      version: PgAttr<PgAttr<import("typebox").TInteger, typeof PG_VERSION>, typeof PG_DEFAULT>;
-      createdAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
-      updatedAt: PgAttr<PgAttr<import("typebox").TString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
-      organizationId: PgAttr<import("typebox").TString, typeof PG_ORGANIZATION>;
-      blobId: import("typebox").TString;
-      creator: import("typebox").TOptional<import("typebox").TString>;
-      creatorRealm: import("typebox").TOptional<import("typebox").TString>;
-      creatorName: import("typebox").TOptional<import("typebox").TString>;
-      bucket: import("typebox").TString;
-      expirationDate: import("typebox").TOptional<import("typebox").TString>;
-      name: import("typebox").TString;
-      originalName: import("typebox").TOptional<import("typebox").TString>;
-      size: import("typebox").TNumber;
-      mimeType: import("typebox").TString;
-      tags: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-      checksum: import("typebox").TOptional<import("typebox").TString>;
-      user: import("typebox").TOptional<import("typebox").TObject<{
-        id: import("typebox").TString;
-        email: import("typebox").TOptional<import("typebox").TString>;
-        username: import("typebox").TOptional<import("typebox").TString>;
-        firstName: import("typebox").TOptional<import("typebox").TString>;
-        lastName: import("typebox").TOptional<import("typebox").TString>;
-      }>>;
-    }>;
+    params: import("zod").ZodObject<{
+      id: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>;
+    body: import("zod").ZodObject<{
+      name: import("zod").ZodOptional<import("zod").ZodString>;
+      tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+      expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodObject<{
+      id: PgAttr<PgAttr<import("zod").ZodString, typeof PG_PRIMARY_KEY>, typeof PG_DEFAULT>;
+      version: PgAttr<PgAttr<import("zod").ZodInt, typeof PG_VERSION>, typeof PG_DEFAULT>;
+      createdAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_CREATED_AT>, typeof PG_DEFAULT>;
+      updatedAt: PgAttr<PgAttr<import("zod").ZodString, typeof PG_UPDATED_AT>, typeof PG_DEFAULT>;
+      organizationId: PgAttr<import("zod").ZodOptional<import("zod").ZodString> | import("zod").ZodString, typeof PG_ORGANIZATION>;
+      blobId: import("zod").ZodString;
+      creator: import("zod").ZodOptional<import("zod").ZodString>;
+      creatorRealm: import("zod").ZodOptional<import("zod").ZodString>;
+      creatorName: import("zod").ZodOptional<import("zod").ZodString>;
+      bucket: import("zod").ZodString;
+      expirationDate: import("zod").ZodOptional<import("zod").ZodString>;
+      name: import("zod").ZodString;
+      originalName: import("zod").ZodOptional<import("zod").ZodString>;
+      size: import("zod").ZodNumber;
+      mimeType: import("zod").ZodString;
+      tags: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+      checksum: import("zod").ZodOptional<import("zod").ZodString>;
+      user: import("zod").ZodOptional<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        email: import("zod").ZodOptional<import("zod").ZodString>;
+        username: import("zod").ZodOptional<import("zod").ZodString>;
+        firstName: import("zod").ZodOptional<import("zod").ZodString>;
+        lastName: import("zod").ZodOptional<import("zod").ZodString>;
+      }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>;
   }>;
   /**
    * GET /files/:id - Streams/downloads a file by its ID.
@@ -900,10 +899,10 @@ declare class FileController {
    * cannot be cached by shared proxies/CDNs. Client-side ETag still works.
    */
   readonly streamFile: import("alepha/server").ActionPrimitiveFn<{
-    params: import("typebox").TObject<{
-      id: import("typebox").TString;
-    }>;
-    response: import("alepha").TFile;
+    params: import("zod").ZodObject<{
+      id: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodAny;
   }>;
   /**
    * GET /public/files/:id - Anonymous, edge-cacheable download.
@@ -920,10 +919,10 @@ declare class FileController {
    * live in separate cache lanes.
    */
   readonly streamPublicFile: import("alepha/server").ActionPrimitiveFn<{
-    params: import("typebox").TObject<{
-      id: import("typebox").TString;
-    }>;
-    response: import("alepha").TFile;
+    params: import("zod").ZodObject<{
+      id: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>;
+    response: import("zod").ZodAny;
   }>;
 }
 //#endregion
@@ -945,13 +944,13 @@ declare class FileJobs {
  * comes back with `user` undefined. Callers must fall back to `creatorName`
  * or the raw `creator` id.
  */
-declare const fileCreatorSummarySchema: import("typebox").TObject<{
-  id: import("typebox").TString;
-  email: import("typebox").TOptional<import("typebox").TString>;
-  username: import("typebox").TOptional<import("typebox").TString>;
-  firstName: import("typebox").TOptional<import("typebox").TString>;
-  lastName: import("typebox").TOptional<import("typebox").TString>;
-}>;
+declare const fileCreatorSummarySchema: import("zod").ZodObject<{
+  id: import("zod").ZodString;
+  email: import("zod").ZodOptional<import("zod").ZodString>;
+  username: import("zod").ZodOptional<import("zod").ZodString>;
+  firstName: import("zod").ZodOptional<import("zod").ZodString>;
+  lastName: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 type FileCreatorSummary = Static<typeof fileCreatorSummarySchema>;
 //#endregion
 //#region ../../src/api/files/index.d.ts