appos 0.4.3-0 → 0.5.1-0

package/dist/exports/{index-Bpo5QE7k.d.mts → index-CiuTp085.d.mts}

@@ -1,4 +1,4 @@
-import { C as defineTestDatabase, D as defineLogger, E as Logger, S as defineMigrationOpts, T as DefineLoggerOptions, _ as DefineTestDatabaseOptions, a as AuthConfig, b as dbChanges, c as DefineAuthOptions, d as createAccessControl, f as defineAuth, g as DefineDatabaseOptions, h as Database, i as Auth$1, l as Role, n as AccessController, o as AuthPasskeyConfig, p as defineEndpointRateLimits, r as AuditAction, s as AuthSessionConfig, t as AccessControlRoles, u as auditActionSchema, v as MigrationType, w as migrationsSchema, x as defineDatabase, y as QualifiedTableNames } from "./auth-By0xx0MI.mjs";
+import { A as defineLogger, C as dbChanges, D as migrationsSchema, E as defineTestDatabase, O as DefineLoggerOptions, S as QualifiedTableNames, T as defineMigrationOpts, a as AuthCaptchaConfig, b as DefineTestDatabaseOptions, c as AuthSessionConfig, d as Role, f as auditActionSchema, g as defineEndpointRateLimits, h as defineAuth, i as Auth$1, k as Logger, l as CaptchaProvider, m as createAccessControl, n as AccessController, o as AuthConfig, p as captchaProviders, r as AuditAction, s as AuthPasskeyConfig, t as AccessControlRoles, u as DefineAuthOptions, v as Database, w as defineDatabase, x as MigrationType, y as DefineDatabaseOptions } from "./auth-BCOIpGDO.mjs";
 import { c as orm_d_exports } from "./orm-CJrd147z.mjs";
 import { t as instrumentation_d_exports } from "./instrumentation-CFIspF8-.mjs";
 import { Auth } from "better-auth";
@@ -35,16 +35,16 @@ type Cache = ReturnType<typeof defineCache>;
  */
 type DefineCacheOptions = {
   /**
-   * Redis URL(s). Single or comma-separated for cluster.
-   */
+       * Redis URL(s). Single or comma-separated for cluster.
+       */
   url: string;
   /**
-   * The logger instance.
-   */
+       * The logger instance.
+       */
   logger: Logger;
   /**
-   * The Keyv Redis options.
-   */
+       * The Keyv Redis options.
+       */
   options?: KeyvRedisOptions;
 };
 /**
@@ -94,12 +94,12 @@ type Config<T extends z.ZodRawShape = {}> = z.infer<ReturnType<typeof baseSchema
  */
 interface EventContext<TInput> {
   /**
-   * The application container with access to db, mailer, logger, etc.
-   */
+       * The application container with access to db, mailer, logger, etc.
+       */
   container: Container;
   /**
-   * The validated input passed to this event.
-   */
+       * The validated input passed to this event.
+       */
   input: TInput;
 }
 /**
@@ -107,12 +107,12 @@ interface EventContext<TInput> {
  */
 interface DefineEventBusOptions {
   /**
-   * Redis URL for pub/sub.
-   */
+       * Redis URL for pub/sub.
+       */
   dbUrl: string;
   /**
-   * Logger instance for error reporting.
-   */
+       * Logger instance for error reporting.
+       */
   logger: Logger;
 }
 /**
@@ -134,32 +134,32 @@ type EventBus = ReturnType<typeof defineEventBus>;
  */
 declare function defineEventBus(opts: DefineEventBusOptions): {
   /**
-   * Publish a message to a channel.
-   * Auto-connects on first call if not already connected.
-   *
-   * @param channel - Channel name
-   * @param message - Message payload (will be JSON stringified)
-   */
+       * Publish a message to a channel.
+       * Auto-connects on first call if not already connected.
+       *
+       * @param channel - Channel name
+       * @param message - Message payload (will be JSON stringified)
+       */
   publish(channel: string, message: unknown): Promise<void>;
   /**
-   * Subscribe to a channel. Returns unsubscribe function.
-   * Uses single connection with callback management.
-   *
-   * @param channel - Channel name
-   * @param callback - Callback for received messages
-   * @returns Unsubscribe function
-   */
+       * Subscribe to a channel. Returns unsubscribe function.
+       * Uses single connection with callback management.
+       *
+       * @param channel - Channel name
+       * @param callback - Callback for received messages
+       * @returns Unsubscribe function
+       */
   subscribe(channel: string, callback: (message: unknown) => void): Promise<() => void>;
   /**
-   * Check if a channel has any subscribers.
-   *
-   * @param channel - Channel name
-   * @returns true if channel has subscribers
-   */
+       * Check if a channel has any subscribers.
+       *
+       * @param channel - Channel name
+       * @returns true if channel has subscribers
+       */
   hasSubscribers(channel: string): boolean;
   /**
-   * Close the Redis connections.
-   */
+       * Close the Redis connections.
+       */
   close(): Promise<void>;
 };
 /**
@@ -167,14 +167,14 @@ declare function defineEventBus(opts: DefineEventBusOptions): {
  */
 interface DefineEventOptions<TInput extends z.ZodType> {
   /**
-   * Zod schema for validating event input.
-   */
+       * Zod schema for validating event input.
+       */
   input: TInput;
   /**
-   * In-memory handler that runs only on the emitting server.
-   *
-   * @param ctx - Event context with container and input
-   */
+       * In-memory handler that runs only on the emitting server.
+       *
+       * @param ctx - Event context with container and input
+       */
   run: (ctx: EventContext<z.infer<TInput>>) => Promise<void>;
 }
 /**
@@ -182,34 +182,34 @@ interface DefineEventOptions<TInput extends z.ZodType> {
  */
 interface Event<TInput> {
   /**
-   * The event name (set during registration from filename).
-   */
+       * The event name (set during registration from filename).
+       */
   readonly name: string | null;
   /**
-   * Emit this event with the given input.
-   * Runs in-memory handler, then publishes to Redis (fire-and-forget).
-   *
-   * @param input - Input matching the event's input schema.
-   */
+       * Emit this event with the given input.
+       * Runs in-memory handler, then publishes to Redis (fire-and-forget).
+       *
+       * @param input - Input matching the event's input schema.
+       */
   emit(input: TInput): Promise<void>;
   /**
-   * The Zod schema for validating input.
-   */
+       * The Zod schema for validating input.
+       */
   inputSchema: z.ZodType<TInput>;
   /**
-   * Register this event with the container. Called by the event loader.
-   *
-   * @param container - The application container
-   * @param name - The event name (derived from filename)
-   */
+       * Register this event with the container. Called by the event loader.
+       *
+       * @param container - The application container
+       * @param name - The event name (derived from filename)
+       */
   register(container: Container, name: string): void;
   /**
-   * Subscribe to this event via Redis pub/sub.
-   * Use for tRPC subscriptions, SSE, WebSockets.
-   *
-   * @param handler - Handler called when event is emitted on any server
-   * @returns Unsubscribe function to cleanup the subscription
-   */
+       * Subscribe to this event via Redis pub/sub.
+       * Use for tRPC subscriptions, SSE, WebSockets.
+       *
+       * @param handler - Handler called when event is emitted on any server
+       * @returns Unsubscribe function to cleanup the subscription
+       */
   subscribe(handler: (ctx: EventContext<TInput>) => Promise<void>): Promise<() => void>;
 }
 /**
@@ -296,12 +296,12 @@ declare const dbChangesEvent: Event<{
  */
 interface LoadEventsOptions {
   /**
-   * The application container.
-   */
+       * The application container.
+       */
   container: Container;
   /**
-   * Optional custom events directory path.
-   */
+       * Optional custom events directory path.
+       */
   eventsDir?: string;
 }
 /**
@@ -323,12 +323,12 @@ declare function loadEvents(opts: LoadEventsOptions): Promise<void>;
  */
 interface QueueRateLimit {
   /**
-   * Maximum number of workflows to start per period.
-   */
+       * Maximum number of workflows to start per period.
+       */
   limitPerPeriod: number;
   /**
-   * Time period in seconds.
-   */
+       * Time period in seconds.
+       */
   periodSec: number;
 }
 /**
@@ -336,16 +336,16 @@ interface QueueRateLimit {
  */
 interface Queue {
   /**
-   * The unique name of this queue.
-   */
+       * The unique name of this queue.
+       */
   readonly name: string;
   /**
-   * Whether priority ordering is enabled for this queue.
-   */
+       * Whether priority ordering is enabled for this queue.
+       */
   readonly priorityEnabled: boolean;
   /**
-   * Whether partitioning is enabled for this queue.
-   */
+       * Whether partitioning is enabled for this queue.
+       */
   readonly partitionQueue: boolean;
 }
 /**
@@ -353,30 +353,30 @@ interface Queue {
  */
 interface DefineQueueOptions {
   /**
-   * Unique name for this queue.
-   */
+       * Unique name for this queue.
+       */
   name: string;
   /**
-   * Maximum concurrent workflows per worker process.
-   */
+       * Maximum concurrent workflows per worker process.
+       */
   workerConcurrency?: number;
   /**
-   * Maximum concurrent workflows globally across all processes.
-   */
+       * Maximum concurrent workflows globally across all processes.
+       */
   concurrency?: number;
   /**
-   * Rate limit for starting workflows.
-   */
+       * Rate limit for starting workflows.
+       */
   rateLimit?: QueueRateLimit;
   /**
-   * Enable priority-based queue ordering.
-   * When enabled, workflows with lower priority numbers execute first.
-   */
+       * Enable priority-based queue ordering.
+       * When enabled, workflows with lower priority numbers execute first.
+       */
   priorityEnabled?: boolean;
   /**
-   * Enable queue partitioning by partition key.
-   * Workflows with the same partition key execute serially.
-   */
+       * Enable queue partitioning by partition key.
+       * Workflows with the same partition key execute serially.
+       */
   partitionQueue?: boolean;
 }
 /**
@@ -402,33 +402,33 @@ declare function defineQueue<N extends string>(options: DefineQueueOptions & {
  */
 interface WorkflowStartOptions {
   /**
-   * Priority for this workflow execution (lower = higher priority).
-   * Only effective if queue has priorityEnabled: true.
-   * Valid range: 0-2147483647
-   */
+       * Priority for this workflow execution (lower = higher priority).
+       * Only effective if queue has priorityEnabled: true.
+       * Valid range: 0-2147483647
+       */
   priority?: number;
   /**
-   * Partition key for partitioned queues.
-   * Workflows with the same key execute serially.
-   * Only effective if queue has partitionQueue: true.
-   */
+       * Partition key for partitioned queues.
+       * Workflows with the same key execute serially.
+       * Only effective if queue has partitionQueue: true.
+       */
   partitionKey?: string;
   /**
-   * Deduplication ID to prevent duplicate executions.
-   * If a workflow with the same deduplicationID is already queued/running,
-   * returns the existing workflow handle instead of starting a new one.
-   * Cannot be used with partitionKey.
-   */
+       * Deduplication ID to prevent duplicate executions.
+       * If a workflow with the same deduplicationID is already queued/running,
+       * returns the existing workflow handle instead of starting a new one.
+       * Cannot be used with partitionKey.
+       */
   deduplicationID?: string;
   /**
-   * Workflow execution timeout in milliseconds.
-   */
+       * Workflow execution timeout in milliseconds.
+       */
   timeoutMS?: number;
   /**
-   * Queue name to use for this workflow start.
-   * Overrides the queue configured in defineWorkflow().
-   * Used internally by mailer.sendLater() to pass queue reference.
-   */
+       * Queue name to use for this workflow start.
+       * Overrides the queue configured in defineWorkflow().
+       * Used internally by mailer.sendLater() to pass queue reference.
+       */
   queueName?: string;
 }
 /**
@@ -436,8 +436,8 @@ interface WorkflowStartOptions {
  */
 interface QueueFactoryContext {
   /**
-   * The application container.
-   */
+       * The application container.
+       */
   container: Container;
 }
 /**
@@ -449,25 +449,25 @@ type QueueFactory = (ctx: QueueFactoryContext) => Queue;
  */
 interface WorkflowContext<TInput = unknown> {
   /**
-   * The application container with access to db, mailer, logger, etc.
-   */
+       * The application container with access to db, mailer, logger, etc.
+       */
   container: Container;
   /**
-   * The validated input passed to this workflow.
-   */
+       * The validated input passed to this workflow.
+       */
   input: TInput;
   /**
-   * Execute a checkpointed step within the workflow.
-   * Steps are retried on failure and their results are durably stored.
-   *
-   * @param name - Unique name for this step within the workflow
-   * @param fn - The step function to execute
-   * @returns The result of the step function
-   */
+       * Execute a checkpointed step within the workflow.
+       * Steps are retried on failure and their results are durably stored.
+       *
+       * @param name - Unique name for this step within the workflow
+       * @param fn - The step function to execute
+       * @returns The result of the step function
+       */
   step<T>(name: string, fn: () => Promise<T>): Promise<T>;
   /**
-   * The unique ID of this workflow execution.
-   */
+       * The unique ID of this workflow execution.
+       */
   workflowId: string;
 }
 /**
@@ -475,25 +475,25 @@ interface WorkflowContext<TInput = unknown> {
  */
 interface ScheduledWorkflowContext {
   /**
-   * The application container with access to db, mailer, logger, etc.
-   */
+       * The application container with access to db, mailer, logger, etc.
+       */
   container: Container;
   /**
-   * The time this workflow execution was scheduled for.
-   */
+       * The time this workflow execution was scheduled for.
+       */
   scheduledTime: Date;
   /**
-   * Execute a checkpointed step within the workflow.
-   * Steps are retried on failure and their results are durably stored.
-   *
-   * @param name - Unique name for this step within the workflow
-   * @param fn - The step function to execute
-   * @returns The result of the step function
-   */
+       * Execute a checkpointed step within the workflow.
+       * Steps are retried on failure and their results are durably stored.
+       *
+       * @param name - Unique name for this step within the workflow
+       * @param fn - The step function to execute
+       * @returns The result of the step function
+       */
   step<T>(name: string, fn: () => Promise<T>): Promise<T>;
   /**
-   * The unique ID of this workflow execution.
-   */
+       * The unique ID of this workflow execution.
+       */
   workflowId: string;
 }
 /**
@@ -501,16 +501,16 @@ interface ScheduledWorkflowContext {
  */
 interface WorkflowHandle<TOutput> {
   /**
-   * Get the current status of the workflow.
-   */
+       * Get the current status of the workflow.
+       */
   getStatus(): Promise<unknown>;
   /**
-   * Wait for the workflow to complete and return its result.
-   */
+       * Wait for the workflow to complete and return its result.
+       */
   getResult(): Promise<TOutput>;
   /**
-   * The unique ID of this workflow execution.
-   */
+       * The unique ID of this workflow execution.
+       */
   workflowId: string;
 }
 /**
@@ -518,34 +518,34 @@ interface WorkflowHandle<TOutput> {
  */
 interface DefineWorkflowOptions<TInput extends z.ZodType, TOutput> {
   /**
-   * Optional configuration for the workflow.
-   */
+       * Optional configuration for the workflow.
+       */
   config?: {
     /**
-     * Maximum number of times to attempt recovery after failure.
-     */
+             * Maximum number of times to attempt recovery after failure.
+             */
     maxRecoveryAttempts?: number;
   };
   /**
-   * Zod schema for validating workflow input.
-   */
+       * Zod schema for validating workflow input.
+       */
   input: TInput;
   /**
-   * Optional queue factory function to control workflow execution.
-   * When specified, workflows are queued with the specified concurrency/rate limits.
-   *
-   * @example
-   * ```typescript
-   * queue: (ctx) => ctx.container.queues.email
-   * ```
-   */
+       * Optional queue factory function to control workflow execution.
+       * When specified, workflows are queued with the specified concurrency/rate limits.
+       *
+       * @example
+       * ```typescript
+       * queue: (ctx) => ctx.container.queues.email
+       * ```
+       */
   queue?: QueueFactory;
   /**
-   * The workflow function to execute.
-   *
-   * @param ctx - Workflow context with container, input, and step helper
-   * @returns The workflow result
-   */
+       * The workflow function to execute.
+       *
+       * @param ctx - Workflow context with container, input, and step helper
+       * @returns The workflow result
+       */
   run: (ctx: WorkflowContext<z.infer<TInput>>) => Promise<TOutput>;
 }
 /**
@@ -585,28 +585,28 @@ interface DefineWorkflowOptions<TInput extends z.ZodType, TOutput> {
  */
 declare function defineWorkflow<TInput extends z.ZodType, TOutput>(options: DefineWorkflowOptions<TInput, TOutput>): {
   /**
-   * The Zod schema for validating input.
-   */
+       * The Zod schema for validating input.
+       */
   inputSchema: TInput;
   /**
-   * The workflow name (set during registration from filename).
-   */
+       * The workflow name (set during registration from filename).
+       */
   readonly name: string | null;
   /**
-   * Register this workflow with DBOS. Called by the workflow loader.
-   *
-   * @param c - The application container
-   * @param name - The workflow name (derived from filename)
-   * @param dbos - The DBOS instance to use for registration
-   */
+       * Register this workflow with DBOS. Called by the workflow loader.
+       *
+       * @param c - The application container
+       * @param name - The workflow name (derived from filename)
+       * @param dbos - The DBOS instance to use for registration
+       */
   register(c: Container, name: string, dbos: typeof DBOS): void;
   /**
-   * Start this workflow with the given input.
-   *
-   * @param input - Input matching the workflow's input schema
-   * @param startOptions - Optional queue-specific options (priority, partitionKey, etc.)
-   * @returns A handle to track and retrieve the workflow result
-   */
+       * Start this workflow with the given input.
+       *
+       * @param input - Input matching the workflow's input schema
+       * @param startOptions - Optional queue-specific options (priority, partitionKey, etc.)
+       * @returns A handle to track and retrieve the workflow result
+       */
   start(input: z.infer<TInput>, startOptions?: WorkflowStartOptions): Promise<WorkflowHandle<TOutput>>;
 };
 /**
@@ -614,31 +614,31 @@ declare function defineWorkflow<TInput extends z.ZodType, TOutput>(options: Defi
  */
 interface DefineScheduledWorkflowOptions {
   /**
-   * Cron expression for when to run the workflow.
-   * Supports 5-spot (minute hour day month weekday) or
-   * 6-spot (second minute hour day month weekday) format.
-   *
-   * Examples:
-   * - "0 9 * * *" - Every day at 9am
-   * - "0,30 * * * *" - Every 30 minutes
-   * - "0 0 * * * *" - Every hour (6-spot with seconds)
-   */
+       * Cron expression for when to run the workflow.
+       * Supports 5-spot (minute hour day month weekday) or
+       * 6-spot (second minute hour day month weekday) format.
+       *
+       * Examples:
+       * - "0 9 * * *" - Every day at 9am
+       * - "0,30 * * * *" - Every 30 minutes
+       * - "0 0 * * * *" - Every hour (6-spot with seconds)
+       */
   crontab: string;
   /**
-   * Optional queue factory function to control workflow execution.
-   * Useful for limiting concurrency when the same scheduled job runs on multiple instances.
-   *
-   * @example
-   * ```typescript
-   * queue: (ctx) => ctx.container.queues.reports
-   * ```
-   */
+       * Optional queue factory function to control workflow execution.
+       * Useful for limiting concurrency when the same scheduled job runs on multiple instances.
+       *
+       * @example
+       * ```typescript
+       * queue: (ctx) => ctx.container.queues.reports
+       * ```
+       */
   queue?: QueueFactory;
   /**
-   * The workflow function to execute on schedule.
-   *
-   * @param ctx - Workflow context with container, scheduledTime, and step helper
-   */
+       * The workflow function to execute on schedule.
+       *
+       * @param ctx - Workflow context with container, scheduledTime, and step helper
+       */
   run: (ctx: ScheduledWorkflowContext) => Promise<void>;
 }
 /**
@@ -661,20 +661,20 @@ interface DefineScheduledWorkflowOptions {
  */
 declare function defineScheduledWorkflow(options: DefineScheduledWorkflowOptions): {
   /**
-   * The cron expression for this workflow.
-   */
+       * The cron expression for this workflow.
+       */
   crontab: string;
   /**
-   * The workflow name (set during registration from filename).
-   */
+       * The workflow name (set during registration from filename).
+       */
   readonly name: string | null;
   /**
-   * Register this workflow with DBOS. Called by the workflow loader.
-   *
-   * @param c - The application container
-   * @param name - The workflow name (derived from filename)
-   * @param dbos - The DBOS instance to use for registration
-   */
+       * Register this workflow with DBOS. Called by the workflow loader.
+       *
+       * @param c - The application container
+       * @param name - The workflow name (derived from filename)
+       * @param dbos - The DBOS instance to use for registration
+       */
   register(c: Container, name: string, dbos: typeof DBOS): void;
 };
 /**
@@ -682,16 +682,16 @@ declare function defineScheduledWorkflow(options: DefineScheduledWorkflowOptions
  */
 interface LoadWorkflowsOptions {
   /**
-   * The application container.
-   */
+       * The application container.
+       */
   container: Container;
   /**
-   * The DBOS instance to use for registration.
-   */
+       * The DBOS instance to use for registration.
+       */
   dbos: typeof DBOS;
   /**
-   * Optional custom workflows directory path.
-   */
+       * Optional custom workflows directory path.
+       */
   workflowsDir?: string;
 }
 /**
@@ -714,12 +714,12 @@ declare function loadWorkflows(opts: LoadWorkflowsOptions): Promise<void>;
  */
 type MailerPayloadReact = Omit<Mail.Options, "from" | "html" | "text"> & {
   /**
-   * The email address to send the email from.
-   */
+       * The email address to send the email from.
+       */
   from?: string;
   /**
-   * The React component to render as the email body.
-   */
+       * The React component to render as the email body.
+       */
   react: JSX.Element;
 };
 /**
@@ -727,16 +727,16 @@ type MailerPayloadReact = Omit<Mail.Options, "from" | "html" | "text"> & {
  */
 type MailerPayloadHtml = Omit<Mail.Options, "from"> & {
   /**
-   * The email address to send the email from.
-   */
+       * The email address to send the email from.
+       */
   from?: string;
   /**
-   * The HTML content of the email.
-   */
+       * The HTML content of the email.
+       */
   html: string;
   /**
-   * The plain text content of the email.
-   */
+       * The plain text content of the email.
+       */
   text: string;
 };
 /**
@@ -748,13 +748,13 @@ type MailerPayload = MailerPayloadReact | MailerPayloadHtml;
  */
 interface Mailer {
   /**
-   * Send an email immediately.
-   */
+       * Send an email immediately.
+       */
   send(payload: MailerPayload): Promise<void>;
   /**
-   * Send an email durably via workflow.
-   * Pre-renders React components before starting workflow.
-   */
+       * Send an email durably via workflow.
+       * Pre-renders React components before starting workflow.
+       */
   sendLater(payload: MailerPayload): Promise<WorkflowHandle<{
     sent: boolean;
   }>>;
@@ -764,16 +764,16 @@ interface Mailer {
  */
 interface MailerWithQueue {
   /**
-   * Send an email immediately.
-   */
+       * Send an email immediately.
+       */
   send(payload: MailerPayload): Promise<void>;
   /**
-   * Send an email durably via workflow.
-   * Pre-renders React components before starting workflow.
-   *
-   * @param payload - The mailer payload with React component or direct HTML+text.
-   * @param startOptions - Optional workflow start options (priority, partitionKey, etc.).
-   */
+       * Send an email durably via workflow.
+       * Pre-renders React components before starting workflow.
+       *
+       * @param payload - The mailer payload with React component or direct HTML+text.
+       * @param startOptions - Optional workflow start options (priority, partitionKey, etc.).
+       */
   sendLater(payload: MailerPayload, startOptions?: WorkflowStartOptions): Promise<WorkflowHandle<{
     sent: boolean;
   }>>;
@@ -783,12 +783,12 @@ interface MailerWithQueue {
  */
 interface DefineMailerOptions {
   /**
-   * The default email address to use as the sender.
-   */
+       * The default email address to use as the sender.
+       */
   from: string;
   /**
-   * The SMTP URL to use for sending emails.
-   */
+       * The SMTP URL to use for sending emails.
+       */
   smtpUrl: string;
 }
 /**
@@ -796,9 +796,9 @@ interface DefineMailerOptions {
  */
 interface DefineMailerOptionsWithQueue<TQueue extends Queue> extends DefineMailerOptions {
   /**
-   * Queue for sendLater() durable workflow execution.
-   * When provided, sendLater() accepts startOptions (priority, partitionKey, etc.).
-   */
+       * Queue for sendLater() durable workflow execution.
+       * When provided, sendLater() accepts startOptions (priority, partitionKey, etc.).
+       */
   queue: TQueue;
 }
 /**
@@ -1592,28 +1592,28 @@ type ImageTransformations = z.infer<typeof transformationsSchema>;
  */
 interface DefineS3DiskOptions {
   /**
-   * The S3 bucket name.
-   */
+       * The S3 bucket name.
+       */
   bucket: string;
   /**
-   * Optional credentials. If not provided, uses default AWS credential chain.
-   */
+       * Optional credentials. If not provided, uses default AWS credential chain.
+       */
   credentials?: {
     accessKeyId: string;
     secretAccessKey: string;
   };
   /**
-   * Optional S3 endpoint for S3-compatible services (e.g., MinIO, LocalStack).
-   */
+       * Optional S3 endpoint for S3-compatible services (e.g., MinIO, LocalStack).
+       */
   endpoint?: string;
   /**
-   * The AWS region.
-   */
+       * The AWS region.
+       */
   region: string;
   /**
-   * Bucket visibility (private or public).
-   * @default "private"
-   */
+       * Bucket visibility (private or public).
+       * @default "private"
+       */
   visibility?: "private" | "public";
 }
 /**
@@ -1652,44 +1652,44 @@ type DatabaseWithStorage = NodePgDatabase<StorageTables, StorageRelationsConfig>
  */
 interface DefineStorageOptions<TDisks extends Record<string, FSDriverOptions | S3DriverOptions>, TDb extends NodePgDatabase<any, any> = DatabaseWithStorage, TAttachments extends Partial<Record<ExtractTableNames<TDb>, readonly string[]>> = Record<never, never>> {
   /**
-   * Type-safe attachment name configuration.
-   * Maps table names to valid attachment names for that table.
-   *
-   * @example
-   * ```typescript
-   * attachments: {
-   *   users: ["avatar", "documents"] as const,
-   *   posts: ["images", "cover"] as const,
-   * }
-   * ```
-   */
+       * Type-safe attachment name configuration.
+       * Maps table names to valid attachment names for that table.
+       *
+       * @example
+       * ```typescript
+       * attachments: {
+       *   users: ["avatar", "documents"] as const,
+       *   posts: ["images", "cover"] as const,
+       * }
+       * ```
+       */
   attachments?: TAttachments;
   /**
-   * The database instance with storage schema and relations.
-   */
+       * The database instance with storage schema and relations.
+       */
   database: TDb;
   /**
-   * The default disk name.
-   */
+       * The default disk name.
+       */
   default?: keyof TDisks;
   /**
-   * The disk configurations.
-   */
+       * The disk configurations.
+       */
   disks?: TDisks;
   /**
-   * Optional public endpoint for signed URLs (for S3 disks).
-   *
-   * If provided, signed URLs will use this endpoint to be browser-accessible.
-   */
+       * Optional public endpoint for signed URLs (for S3 disks).
+       *
+       * If provided, signed URLs will use this endpoint to be browser-accessible.
+       */
   publicEndpoint?: string;
   /**
-   * Cron expression for unattached blob purge schedule.
-   * @default "0 0 * * *" (midnight daily)
-   */
+       * Cron expression for unattached blob purge schedule.
+       * @default "0 0 * * *" (midnight daily)
+       */
   purgeCron?: string;
   /**
-   * Secret key for signing blob IDs. Required for signedId() / findSigned() methods.
-   */
+       * Secret key for signing blob IDs. Required for signedId() / findSigned() methods.
+       */
   secret: string;
 }
 /**
@@ -1727,35 +1727,35 @@ type AttachmentName<TAttachments extends Partial<Record<string, readonly string[
  */
 declare class StorageService<TDiskNames extends string = string, TTableNames extends string = string, TAttachments extends Partial<Record<TTableNames, readonly string[]>> = Record<never, never>> {
   /**
-   * The drive manager for file operations.
-   */
+       * The drive manager for file operations.
+       */
   readonly drive: DriveManager<any>;
   /**
-   * The database instance with storage schema and relations.
-   */
+       * The database instance with storage schema and relations.
+       */
   readonly db: DatabaseWithStorage;
   /**
-   * The default disk name.
-   */
+       * The default disk name.
+       */
   readonly defaultDisk: TDiskNames;
   /**
-   * Cron expression for unattached blob purge schedule.
-   *
-   * @default "0 0 * * *"
-   */
+       * Cron expression for unattached blob purge schedule.
+       *
+       * @default "0 0 * * *"
+       */
   readonly purgeCron?: string;
   /**
-   * Secret key for signing blob IDs.
-   */
+       * Secret key for signing blob IDs.
+       */
   readonly secret: string;
   /**
-   * Drive manager for generating signed URLs (public endpoint).
-   */
+       * Drive manager for generating signed URLs (public endpoint).
+       */
   readonly signedUrlDrive: DriveManager<any>;
   constructor(drive: DriveManager<any>, db: DatabaseWithStorage, defaultDisk: TDiskNames, secret: string, signedUrlDrive: DriveManager<any>, purgeCron?: string);
   /**
-   * Create a blob record and upload file.
-   */
+       * Create a blob record and upload file.
+       */
   createBlob(file: Buffer | Uint8Array, options: {
     filename: string;
     contentType?: string;
@@ -1764,40 +1764,40 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
     prefix?: string;
   }): Promise<StorageBlob>;
   /**
-   * Get blob by ID.
-   */
+       * Get blob by ID.
+       */
   getBlob(id: string): Promise<StorageBlob | null>;
   /**
-   * Download blob content.
-   */
+       * Download blob content.
+       */
   downloadBlob(id: string): Promise<Buffer | null>;
   /**
-   * Delete blob and its content.
-   */
+       * Delete blob and its content.
+       */
   deleteBlob(id: string): Promise<boolean>;
   /**
-   * Get signed URL for blob. If blob is on public service, returns permanent
-   * URL instead.
-   */
+       * Get signed URL for blob. If blob is on public service, returns permanent
+       * URL instead.
+       */
   getSignedUrl(id: string, options?: {
     expiresIn?: number;
     disposition?: "inline" | "attachment";
     filename?: string;
   }): Promise<string | null>;
   /**
-   * Get permanent public URL (no expiration).
-   * Works for blobs on public storage service.
-   */
+       * Get permanent public URL (no expiration).
+       * Works for blobs on public storage service.
+       */
   getPublicUrl(id: string): Promise<string | null>;
   /**
-   * Create attachment between a record and blob.
-   *
-   * @param recordType - The table name (e.g., 'users')
-   * @param recordId - The record ID
-   * @param blobId - The blob ID to attach
-   * @param name - The attachment name (e.g., 'avatar')
-   * @param replaceExisting - If true, replaces existing attachment with same name (for one-to-one)
-   */
+       * Create attachment between a record and blob.
+       *
+       * @param recordType - The table name (e.g., 'users')
+       * @param recordId - The record ID
+       * @param blobId - The blob ID to attach
+       * @param name - The attachment name (e.g., 'avatar')
+       * @param replaceExisting - If true, replaces existing attachment with same name (for one-to-one)
+       */
   createAttachment(recordType: string, recordId: string, blobId: string, name: string, replaceExisting?: boolean): Promise<{
     name: string;
     id: string;
@@ -1807,8 +1807,8 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
     blobId: string;
   }>;
   /**
-   * Get attachments for a record with their associated blobs.
-   */
+       * Get attachments for a record with their associated blobs.
+       */
   getAttachments(recordType: string, recordId: string, name?: string): Promise<{
     name: string;
     id: string;
@@ -1829,10 +1829,10 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
     } | null;
   }[]>;
   /**
-   * Get attachments by their IDs with associated blobs.
-   *
-   * @param attachmentIds - Array of attachment IDs to fetch.
-   */
+       * Get attachments by their IDs with associated blobs.
+       *
+       * @param attachmentIds - Array of attachment IDs to fetch.
+       */
   getAttachmentsByIds(attachmentIds: string[]): Promise<{
     name: string;
     id: string;
@@ -1853,17 +1853,17 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
     } | null;
   }[]>;
   /**
-   * Delete a single attachment by ID.
-   */
+       * Delete a single attachment by ID.
+       */
   deleteAttachment(attachmentId: string): Promise<boolean>;
   /**
-   * Delete attachments for a record (without deleting the blobs).
-   */
+       * Delete attachments for a record (without deleting the blobs).
+       */
   deleteAttachments(recordType: string, recordId: string, name?: string): Promise<number>;
   /**
-   * Get direct upload credentials (for S3). Also creates a pending blob record
-   * that will be finalized after upload.
-   */
+       * Get direct upload credentials (for S3). Also creates a pending blob record
+       * that will be finalized after upload.
+       */
   getDirectUploadUrl(options: {
     contentType?: string;
     expiresIn?: number;
@@ -1877,83 +1877,83 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
     url: string;
   } | null>;
   /**
-   * Finalize a direct upload by updating blob metadata. Call this after the
-   * client has uploaded to S3.
-   */
+       * Finalize a direct upload by updating blob metadata. Call this after the
+       * client has uploaded to S3.
+       */
   finalizeDirectUpload(blobId: string, actualSize: number): Promise<void>;
   /**
-   * Update blob metadata (for automatic extraction).
-   */
+       * Update blob metadata (for automatic extraction).
+       */
   updateBlobMetadata(blobId: string, metadata: Record<string, any>): Promise<void>;
   /**
-   * Get existing variant or return null.
-   */
+       * Get existing variant or return null.
+       */
   getVariant(blobId: string, transformations: ImageTransformations): Promise<StorageBlob | null>;
   /**
-   * Create variant blob and record.
-   */
+       * Create variant blob and record.
+       */
   createVariant(blobId: string, transformations: ImageTransformations, variantBuffer: Buffer): Promise<StorageBlob>;
   /**
-   * Get blobs that have no attachments (orphaned). Useful for cleanup jobs.
-   */
+       * Get blobs that have no attachments (orphaned). Useful for cleanup jobs.
+       */
   getUnattachedBlobs(options?: {
     olderThan?: string;
     limit?: number;
   }): Promise<StorageBlob[]>;
   /**
-   * Get pending blobs that were never finalized (stuck direct uploads).
-   */
+       * Get pending blobs that were never finalized (stuck direct uploads).
+       */
   getPendingBlobs(olderThan?: string): Promise<StorageBlob[]>;
   /**
-   * Purge unattached blobs.
-   */
+       * Purge unattached blobs.
+       */
   purgeUnattached(olderThan?: string): Promise<number>;
   /**
-   * Create a signed, tamper-proof reference to a blob.
-   * Use findSigned() to resolve back to blob.
-   *
-   * Algorithm:
-   * 1. Create payload with blobId and optional expiration timestamp
-   * 2. JSON stringify and base64url encode the payload
-   * 3. Create HMAC-SHA256 signature of the encoded payload
-   * 4. Return payload.signature format
-   *
-   * @param blobId - The blob ID to sign
-   * @param expiresIn - Seconds until expiry. Pass undefined/null for non-expiring. Default: 3600 (1 hour)
-   */
+       * Create a signed, tamper-proof reference to a blob.
+       * Use findSigned() to resolve back to blob.
+       *
+       * Algorithm:
+       * 1. Create payload with blobId and optional expiration timestamp
+       * 2. JSON stringify and base64url encode the payload
+       * 3. Create HMAC-SHA256 signature of the encoded payload
+       * 4. Return payload.signature format
+       *
+       * @param blobId - The blob ID to sign
+       * @param expiresIn - Seconds until expiry. Pass undefined/null for non-expiring. Default: 3600 (1 hour)
+       */
   signedId(blobId: string, expiresIn?: number | null): string;
   /**
-   * Find blob by signed ID. Returns null if invalid or expired.
-   * Uses constant-time comparison to prevent timing attacks.
-   * Supports both expiring and non-expiring signed IDs.
-   *
-   * Algorithm:
-   * 1. Split signed ID into payload and signature
-   * 2. Decode and recompute expected signature
-   * 3. Use timingSafeEqual for constant-time comparison
-   * 4. Check expiration timestamp (if present)
-   * 5. Return blob if valid, null otherwise
-   */
+       * Find blob by signed ID. Returns null if invalid or expired.
+       * Uses constant-time comparison to prevent timing attacks.
+       * Supports both expiring and non-expiring signed IDs.
+       *
+       * Algorithm:
+       * 1. Split signed ID into payload and signature
+       * 2. Decode and recompute expected signature
+       * 3. Use timingSafeEqual for constant-time comparison
+       * 4. Check expiration timestamp (if present)
+       * 5. Return blob if valid, null otherwise
+       */
   findSigned(signedId: string): Promise<StorageBlob | null>;
   /**
-   * Get a single attachment handle (one-to-one relationship).
-   * Similar to Rails' `has_one_attached :avatar`.
-   *
-   * Algorithm:
-   * Returns an object with methods to manage a single attachment:
-   * - attach(): Replace existing attachment with new blob
-   * - get(): Get attached blob or null
-   * - url(): Get signed URL
-   * - variant(): Get/generate image variant
-   * - purge(): Delete attachment and blob
-   *
-   * @template TTable - The table name (must be in TTableNames)
-   */
+       * Get a single attachment handle (one-to-one relationship).
+       * Similar to Rails' `has_one_attached :avatar`.
+       *
+       * Algorithm:
+       * Returns an object with methods to manage a single attachment:
+       * - attach(): Replace existing attachment with new blob
+       * - get(): Get attached blob or null
+       * - url(): Get signed URL
+       * - variant(): Get/generate image variant
+       * - purge(): Delete attachment and blob
+       *
+       * @template TTable - The table name (must be in TTableNames)
+       */
   one<TTable extends TTableNames>(recordType: TTable, recordId: string, name: AttachmentName<TAttachments, TTable>): {
     /**
-     * Attach a blob to this record (replaces existing).
-     * Auto-triggers extractBlobMetadata workflow.
-     */
+             * Attach a blob to this record (replaces existing).
+             * Auto-triggers extractBlobMetadata workflow.
+             */
     attach(blobId: string): Promise<{
       name: string;
       id: string;
@@ -1961,77 +1961,61 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
       recordType: string;
       recordId: string;
       blobId: string;
-    }>;
-    /** Get the attached blob or null. */
-    get(): Promise<StorageBlob | null>;
-    /** Check if a blob is attached. */
-    attached(): Promise<boolean>;
-    /** Get signed URL or null. */
+    }>; /** Get the attached blob or null. */
+    get(): Promise<StorageBlob | null>; /** Check if a blob is attached. */
+    attached(): Promise<boolean>; /** Get signed URL or null. */
     url(options?: {
       expiresIn?: number;
       disposition?: "inline" | "attachment";
-    }): Promise<string | null>;
-    /** Get permanent public URL or null. */
-    publicUrl(): Promise<string | null>;
-    /** Get blob metadata or null. */
-    metadata(): Promise<Record<string, unknown> | null>;
-    /** Check if metadata has been extracted. */
-    analyzed(): Promise<boolean>;
-    /** Check if blob supports preview/variant generation. */
+    }): Promise<string | null>; /** Get permanent public URL or null. */
+    publicUrl(): Promise<string | null>; /** Get blob metadata or null. */
+    metadata(): Promise<Record<string, unknown> | null>; /** Check if metadata has been extracted. */
+    analyzed(): Promise<boolean>; /** Check if blob supports preview/variant generation. */
     representable(): Promise<boolean>;
     /**
-     * Get variant URL. Auto-enqueues generation if not ready.
-     * Returns URL if variant exists, null if generating.
-     */
+             * Get variant URL. Auto-enqueues generation if not ready.
+             * Returns URL if variant exists, null if generating.
+             */
     variant(transformations: ImageTransformations, expiresIn?: number): Promise<string | null>;
     /**
-     * Get preview URL. Auto-enqueues generation if not ready.
-     * Returns URL if preview exists, null if generating.
-     */
-    preview(expiresIn?: number, timeInSeconds?: number): Promise<string | null>;
-    /** Detach blob from record (keeps blob for reuse). */
-    detach(): Promise<boolean>;
-    /** Delete attachment AND blob immediately. */
-    purge(): Promise<boolean>;
-    /** Enqueue attachment and blob deletion in background. */
-    purgeLater(): Promise<boolean>;
-    /** Download blob content as Buffer. */
-    download(): Promise<Buffer | null>;
-    /** Download to temp file, run callback, auto-cleanup. */
+             * Get preview URL. Auto-enqueues generation if not ready.
+             * Returns URL if preview exists, null if generating.
+             */
+    preview(expiresIn?: number, timeInSeconds?: number): Promise<string | null>; /** Detach blob from record (keeps blob for reuse). */
+    detach(): Promise<boolean>; /** Delete attachment AND blob immediately. */
+    purge(): Promise<boolean>; /** Enqueue attachment and blob deletion in background. */
+    purgeLater(): Promise<boolean>; /** Download blob content as Buffer. */
+    download(): Promise<Buffer | null>; /** Download to temp file, run callback, auto-cleanup. */
     open<T>(callback: (filePath: string) => Promise<T> | T): Promise<T | null>;
     /**
-     * Smart representation - variant for images, preview for videos/PDFs.
-     * Auto-enqueues generation if not ready.
-     */
-    representation(transformations: ImageTransformations, expiresIn?: number): Promise<string | null>;
-    /** Get blob's byte size. */
-    byteSize(): Promise<number | null>;
-    /** Get blob's content type. */
-    contentType(): Promise<string | null>;
-    /** Get blob's filename. */
-    filename(): Promise<string | null>;
-    /** Get signed, tamper-proof ID for the blob. */
+             * Smart representation - variant for images, preview for videos/PDFs.
+             * Auto-enqueues generation if not ready.
+             */
+    representation(transformations: ImageTransformations, expiresIn?: number): Promise<string | null>; /** Get blob's byte size. */
+    byteSize(): Promise<number | null>; /** Get blob's content type. */
+    contentType(): Promise<string | null>; /** Get blob's filename. */
+    filename(): Promise<string | null>; /** Get signed, tamper-proof ID for the blob. */
     signedId(expiresIn?: number): Promise<string | null>;
   };
   /**
-   * Get a multiple attachment handle (one-to-many relationship).
-   * Similar to Rails' `has_many_attached :images`.
-   *
-   * Algorithm:
-   * Returns an object with methods to manage multiple attachments:
-   * - attach(): Add blobs (doesn't replace existing)
-   * - list(): Get all attached blobs
-   * - urls(): Get signed URLs for all
-   * - variants(): Get/generate variants for all
-   * - purge(): Delete all or specific attachment
-   *
-   * @template TTable - The table name (must be in TTableNames)
-   */
+       * Get a multiple attachment handle (one-to-many relationship).
+       * Similar to Rails' `has_many_attached :images`.
+       *
+       * Algorithm:
+       * Returns an object with methods to manage multiple attachments:
+       * - attach(): Add blobs (doesn't replace existing)
+       * - list(): Get all attached blobs
+       * - urls(): Get signed URLs for all
+       * - variants(): Get/generate variants for all
+       * - purge(): Delete all or specific attachment
+       *
+       * @template TTable - The table name (must be in TTableNames)
+       */
   many<TTable extends TTableNames>(recordType: TTable, recordId: string, name: AttachmentName<TAttachments, TTable>): {
     /**
-     * Attach one or more blobs (adds to existing, doesn't replace).
-     * Auto-triggers extractBlobMetadata for each blob.
-     */
+             * Attach one or more blobs (adds to existing, doesn't replace).
+             * Auto-triggers extractBlobMetadata for each blob.
+             */
     attach(blobIds: string | string[]): Promise<{
       name: string;
       id: string;
@@ -2039,49 +2023,31 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
       recordType: string;
       recordId: string;
       blobId: string;
-    }[]>;
-    /** Get all attached blobs. */
-    list(): Promise<StorageBlob[]>;
-    /** Count attached blobs. */
-    count(): Promise<number>;
-    /** Get signed URLs for all blobs. */
+    }[]>; /** Get all attached blobs. */
+    list(): Promise<StorageBlob[]>; /** Count attached blobs. */
+    count(): Promise<number>; /** Get signed URLs for all blobs. */
     urls(options?: {
       expiresIn?: number;
-    }): Promise<string[]>;
-    /** Get public URLs for all blobs. */
-    publicUrls(): Promise<(string | null)[]>;
-    /** Get metadata for all blobs. */
-    metadata(): Promise<(Record<string, unknown> | null)[]>;
-    /** Check which blobs have been analyzed. */
-    analyzed(): Promise<boolean[]>;
-    /** Check which blobs support preview/variants. */
-    representable(): Promise<boolean[]>;
-    /** Get variant URLs for all blobs. Auto-enqueues if not ready. */
-    variants(transformations: ImageTransformations, expiresIn?: number): Promise<(string | null)[]>;
-    /** Get preview URLs for all blobs. Auto-enqueues if not ready. */
-    previews(expiresIn?: number, timeInSeconds?: number): Promise<(string | null)[]>;
-    /** Detach specific blob or all blobs (keeps blobs for reuse). */
-    detach(blobId?: string): Promise<number>;
-    /** Delete specific or all attachments AND blobs immediately. */
-    purge(blobId?: string): Promise<number>;
-    /** Enqueue specific or all attachments for background deletion. */
-    purgeLater(blobId?: string): Promise<number>;
-    /** Download all blobs as Buffers. */
-    download(): Promise<Buffer[]>;
-    /** Download each blob to temp file, run callback for each. */
+    }): Promise<string[]>; /** Get public URLs for all blobs. */
+    publicUrls(): Promise<(string | null)[]>; /** Get metadata for all blobs. */
+    metadata(): Promise<(Record<string, unknown> | null)[]>; /** Check which blobs have been analyzed. */
+    analyzed(): Promise<boolean[]>; /** Check which blobs support preview/variants. */
+    representable(): Promise<boolean[]>; /** Get variant URLs for all blobs. Auto-enqueues if not ready. */
+    variants(transformations: ImageTransformations, expiresIn?: number): Promise<(string | null)[]>; /** Get preview URLs for all blobs. Auto-enqueues if not ready. */
+    previews(expiresIn?: number, timeInSeconds?: number): Promise<(string | null)[]>; /** Detach specific blob or all blobs (keeps blobs for reuse). */
+    detach(blobId?: string): Promise<number>; /** Delete specific or all attachments AND blobs immediately. */
+    purge(blobId?: string): Promise<number>; /** Enqueue specific or all attachments for background deletion. */
+    purgeLater(blobId?: string): Promise<number>; /** Download all blobs as Buffers. */
+    download(): Promise<Buffer[]>; /** Download each blob to temp file, run callback for each. */
     open<T>(callback: (filePath: string, blob: StorageBlob) => Promise<T> | T): Promise<T[]>;
     /**
-     * Smart representations - variant for images, preview for videos/PDFs.
-     * Auto-enqueues generation if not ready.
-     */
-    representations(transformations: ImageTransformations, expiresIn?: number): Promise<(string | null)[]>;
-    /** Get byte sizes for all blobs. */
-    byteSizes(): Promise<number[]>;
-    /** Get content types for all blobs. */
-    contentTypes(): Promise<(string | null)[]>;
-    /** Get filenames for all blobs. */
-    filenames(): Promise<string[]>;
-    /** Get signed IDs for all blobs. */
+             * Smart representations - variant for images, preview for videos/PDFs.
+             * Auto-enqueues generation if not ready.
+             */
+    representations(transformations: ImageTransformations, expiresIn?: number): Promise<(string | null)[]>; /** Get byte sizes for all blobs. */
+    byteSizes(): Promise<number[]>; /** Get content types for all blobs. */
+    contentTypes(): Promise<(string | null)[]>; /** Get filenames for all blobs. */
+    filenames(): Promise<string[]>; /** Get signed IDs for all blobs. */
     signedIds(expiresIn?: number): Promise<string[]>;
   };
 }
@@ -2092,76 +2058,76 @@ declare class StorageService<TDiskNames extends string = string, TTableNames ext
  */
 interface ServerConfig {
   /**
-   * The host address the server will bind to.
-   *
-   * @default "0.0.0.0"
-   */
+       * The host address the server will bind to.
+       *
+       * @default "0.0.0.0"
+       */
   host?: string;
   /**
-   * The port number the server will listen on.
-   */
+       * The port number the server will listen on.
+       */
   port: number;
   /**
-   * Request timeout in milliseconds. Requests exceeding this duration
-   * will receive a 408 Request Timeout response.
-   *
-   * @default 30000
-   */
+       * Request timeout in milliseconds. Requests exceeding this duration
+       * will receive a 408 Request Timeout response.
+       *
+       * @default 30000
+       */
   timeout?: number;
   /**
-   * Maximum request body size for JSON and URL-encoded payloads.
-   * Supports bytes.js format strings (e.g., "1mb", "500kb", "10mb").
-   *
-   * @default "1mb"
-   */
+       * Maximum request body size for JSON and URL-encoded payloads.
+       * Supports bytes.js format strings (e.g., "1mb", "500kb", "10mb").
+       *
+       * @default "1mb"
+       */
   bodyLimit?: string;
   /**
-   * The path for the health check endpoint.
-   *
-   * @default "/health"
-   */
+       * The path for the health check endpoint.
+       *
+       * @default "/health"
+       */
   healthPath?: string;
   /**
-   * CORS configuration. Omit or set to undefined to disable.
-   *
-   * @example
-   * cors: { origin: "https://example.com", credentials: true }
-   */
+       * CORS configuration. Omit or set to undefined to disable.
+       *
+       * @example
+       * cors: { origin: "https://example.com", credentials: true }
+       */
   cors?: CorsOptions;
   /**
-   * Security headers configuration (via helmet). Omit or set to undefined to disable.
-   * Recommended for production deployments.
-   *
-   * @example
-   * helmet: { contentSecurityPolicy: false }  // Enable with CSP disabled
-   * helmet: {}  // Enable with all defaults
-   */
+       * Security headers configuration (via helmet). Omit or set to undefined to disable.
+       * Recommended for production deployments.
+       *
+       * @example
+       * helmet: { contentSecurityPolicy: false }  // Enable with CSP disabled
+       * helmet: {}  // Enable with all defaults
+       */
   helmet?: HelmetOptions;
   /**
-   * Rate limiting configuration. Array of express-rate-limit options.
-   * Each config is applied as a separate middleware - use `skip` function for path-specific limits.
-   * Redis store is automatically configured if `redisUrl` is provided.
-   *
-   * @example
-   * // Global rate limit
-   * rateLimit: [{ windowMs: 60000, limit: 100 }]
-   *
-   * @example
-   * // Path-specific rate limits
-   * rateLimit: [
-   *   { windowMs: 900000, limit: 5, skip: (req) => !req.path.startsWith("/api/auth") },
-   *   { windowMs: 60000, limit: 100 },  // Default for all other routes
-   * ]
-   */
+       * Rate limiting configuration. Array of express-rate-limit options.
+       * Each config is applied as a separate middleware - use `skip` function for path-specific limits.
+       * Redis store is automatically configured if `redisUrl` is provided.
+       *
+       * @example
+       * // Global rate limit
+       * rateLimit: [{ windowMs: 60000, limit: 100 }]
+       *
+       * @example
+       * // Path-specific rate limits
+       * rateLimit: [
+       *   { windowMs: 900000, limit: 5, skip: (req) => !req.path.startsWith("/api/auth") },
+       *   { windowMs: 60000, limit: 100 },  // Default for all other routes
+       * ]
+       */
   rateLimit?: Options[];
   /**
-   * Redis URL for rate limiting store (for multi-instance deployments).
-   * Server auto-connects and cleans up on shutdown.
-   * If omitted, uses in-memory store (not suitable for production clusters).
-   *
-   * @example
-   * redisUrl: "redis://localhost:6379"
-   */
+       * Redis URL for rate limiting store (for multi-instance deployments).
+       * Server auto-connects and cleans up on shutdown.
+       * If omitted, uses in-memory store (not suitable for production clusters).
+       *
+       * @example
+       * redisUrl: "redis://localhost:6379"
+       */
   redisUrl?: string;
 }
 /**
@@ -2169,8 +2135,8 @@ interface ServerConfig {
  */
 interface WorkerConfig {
   /**
-   * The system database URL for DBOS.
-   */
+       * The system database URL for DBOS.
+       */
   dbUrl: string;
 }
 /**
@@ -2179,52 +2145,52 @@ interface WorkerConfig {
  */
 interface AppContainer<TDb extends Record<"primary", Database> & Record<string, Database> = Record<"primary", Database> & Record<string, Database>> {
   /**
-   * The application auth configuration.
-   */
+       * The application auth configuration.
+       */
   auth: Auth$1<TDb>;
   /**
-   * A map of caches available in the application.
-   */
+       * A map of caches available in the application.
+       */
   cache: Record<string, Cache>;
   /**
-   * The application configuration.
-   */
+       * The application configuration.
+       */
   config: Config;
   /**
-   * A map of databases available in the application.
-   */
+       * A map of databases available in the application.
+       */
   db: TDb;
   /**
-   * The i18n instance for internationalization.
-   */
+       * The i18n instance for internationalization.
+       */
   i18n: i18n;
   /**
-   * The logger instance for logging messages.
-   */
+       * The logger instance for logging messages.
+       */
   logger: Logger;
   /**
-   * The event bus for in-memory and Redis pub/sub messaging.
-   */
+       * The event bus for in-memory and Redis pub/sub messaging.
+       */
   eventBus: EventBus;
   /**
-   * The mailer instance for sending emails.
-   */
+       * The mailer instance for sending emails.
+       */
   mailer: Mailer;
   /**
-   * A map of workflow queues for controlling execution concurrency.
-   */
+       * A map of workflow queues for controlling execution concurrency.
+       */
   queues: Record<string, Queue>;
   /**
-   * Server configuration for the HTTP server.
-   */
+       * Server configuration for the HTTP server.
+       */
   server: ServerConfig;
   /**
-   * A map of storage services available in the application.
-   */
+       * A map of storage services available in the application.
+       */
   storage: Record<"primary", Storage> & Record<string, Storage>;
   /**
-   * Worker configuration for the DBOS workflow worker.
-   */
+       * Worker configuration for the DBOS workflow worker.
+       */
   worker: WorkerConfig;
 }
 /**
@@ -2291,16 +2257,16 @@ declare function defineAppContainer<T extends AppContainer>(container: T): T;
  */
 interface RequestMetadata {
   /**
-   * Client's IP address from X-Forwarded-For or RemoteAddr.
-   */
+       * Client's IP address from X-Forwarded-For or RemoteAddr.
+       */
   ipAddress: string;
   /**
-   * Client's User-Agent header.
-   */
+       * Client's User-Agent header.
+       */
   userAgent: string;
   /**
-   * Client IP's country from CF-IPCountry header.
-   */
+       * Client IP's country from CF-IPCountry header.
+       */
   country: string;
 }
 //#endregion
@@ -2309,51 +2275,51 @@ declare global {
   namespace Express {
     interface Locals {
       /**
-       * The application container with services and dependencies.
-       */
+                   * The application container with services and dependencies.
+                   */
       container: AppContainer;
     }
     interface Request {
       /**
-       * The API key, or null if not authenticated via API key.
-       */
+                   * The API key, or null if not authenticated via API key.
+                   */
       apiKey: ApiKey | null;
       /**
-       * The text direction for the detected language (e.g., "ltr" or "rtl").
-       */
+                   * The text direction for the detected language (e.g., "ltr" or "rtl").
+                   */
       dir: string;
       /**
-       * The idempotency key provided in the request headers.
-       */
+                   * The idempotency key provided in the request headers.
+                   */
       idempotencyKey?: string;
       /**
-       * The detected language from the request's Accept-Language header.
-       */
+                   * The detected language from the request's Accept-Language header.
+                   */
       language: string;
       /**
-       * The list of supported languages.
-       */
+                   * The list of supported languages.
+                   */
       languages: readonly string[];
       /**
-       * Metadata about the request for logging purposes.
-       */
+                   * Metadata about the request for logging purposes.
+                   */
       metadata: RequestMetadata;
       /**
-       * Request body in raw bytes
-       */
+                   * Request body in raw bytes
+                   */
       rawBody?: Buffer;
       /**
-       * The unique request ID for tracing purposes.
-       */
+                   * The unique request ID for tracing purposes.
+                   */
       requestId: string;
       /**
-       * The translation function for the detected language.
-       */
+                   * The translation function for the detected language.
+                   */
       t: TFunction;
       /**
-       * Error context from tRPC onError callback. Used by request-logger to
-       * include rich error details.
-       */
+                   * Error context from tRPC onError callback. Used by request-logger to
+                   * include rich error details.
+                   */
       __trpcError?: {
         message: string;
         code: string;
@@ -2372,24 +2338,24 @@ type SessionData = NonNullable<Awaited<ReturnType<Auth["api"]["getSession"]>>>;
  */
 interface AppContext {
   /**
-   * The API key data, or null if not authenticated via API key.
-   */
+       * The API key data, or null if not authenticated via API key.
+       */
   apiKeyId?: string;
   /**
-   * Application container with services and dependencies.
-   */
-  container: AppContainer;
+       * Application container with services and dependencies.
+       */
+  container: Container;
   /**
-   * The incoming request object.
-   */
+       * The incoming request object.
+       */
   request: Request;
   /**
-   * The current session ID, or null if not authenticated.
-   */
+       * The current session ID, or null if not authenticated.
+       */
   sessionId?: string;
   /**
-   * The current user ID, or null if not authenticated.
-   */
+       * The current user ID, or null if not authenticated.
+       */
   userId?: string;
 }
 /**
@@ -2397,20 +2363,20 @@ interface AppContext {
  */
 interface DefineAppContextOpts {
   /**
-   * The API key data, or null if not authenticated via API key.
-   */
+       * The API key data, or null if not authenticated via API key.
+       */
   apiKey: ApiKey | null;
   /**
-   * Application container with services and dependencies.
-   */
+       * Application container with services and dependencies.
+       */
   container: AppContainer;
   /**
-   * Set to true to fetch session (tRPC). False for API key auth (OpenAPI).
-   */
+       * Set to true to fetch session (tRPC). False for API key auth (OpenAPI).
+       */
   fetchSession?: boolean;
   /**
-   * The incoming request object.
-   */
+       * The incoming request object.
+       */
   request: Request;
 }
 /**
@@ -6875,7 +6841,7 @@ declare function defineTypedResponses<TResponses extends Record<number, {
 }>>(responses: TResponses): { [K in keyof TResponses as GetMethodName<K>]: K extends number ? TResponses[K]["schema"] extends z.ZodNull ? () => ResponseMarker<null> : <T extends z.infer<TResponses[K]["schema"]>>(data: Exact<T, z.infer<TResponses[K]["schema"]>>) => ResponseMarker<z.infer<TResponses[K]["schema"]>> : never } & {
   status: <S extends keyof TResponses & number>(statusCode: S, data: TResponses[S]["schema"] extends z.ZodNull ? undefined : Exact<z.infer<TResponses[S]["schema"]>, z.infer<TResponses[S]["schema"]>>) => ResponseMarker;
 };
-type GetMethodName<K$1> = K$1 extends 200 ? "ok" : K$1 extends 201 ? "created" : K$1 extends 202 ? "accepted" : K$1 extends 204 ? "noContent" : K$1 extends 400 ? "badRequest" : K$1 extends 401 ? "unauthorized" : K$1 extends 403 ? "forbidden" : K$1 extends 404 ? "notFound" : K$1 extends 409 ? "conflict" : K$1 extends 422 ? "unprocessableEntity" : K$1 extends 500 ? "internalServerError" : never;
+type GetMethodName<K> = K extends 200 ? "ok" : K extends 201 ? "created" : K extends 202 ? "accepted" : K extends 204 ? "noContent" : K extends 400 ? "badRequest" : K extends 401 ? "unauthorized" : K extends 403 ? "forbidden" : K extends 404 ? "notFound" : K extends 409 ? "conflict" : K extends 422 ? "unprocessableEntity" : K extends 500 ? "internalServerError" : never;
 /**
  * Handler parameters with full type safety for request inputs.
  */
@@ -7157,12 +7123,12 @@ type RedisClient = ReturnType<typeof createClient> | ReturnType<typeof createClu
  */
 interface DefineRedisClientOptions {
   /**
-   * Logger instance for error reporting.
-   */
+       * Logger instance for error reporting.
+       */
   logger: Logger;
   /**
-   * Redis URL(s). Single: "redis://localhost:6379", Cluster: comma-separated URLs
-   */
+       * Redis URL(s). Single: "redis://localhost:6379", Cluster: comma-separated URLs
+       */
   url: string;
 }
 /**
@@ -7180,7 +7146,7 @@ interface DefineRedisClientOptions {
  */
 declare function defineRedisClient(opts: DefineRedisClientOptions): RedisClient;
 declare namespace index_d_exports {
-  export { AccessControlRoles, AccessController, AppContainer, AppContext, AuditAction, Auth$1 as Auth, AuthConfig, AuthPasskeyConfig, AuthSessionConfig, Cache, Config, Container, CustomTypeOptions, Database, DatabaseWithStorage, DbChangeInput, DefineAppContextOpts, DefineAuthOptions, DefineCacheOptions, DefineDatabaseOptions, DefineEventBusOptions, DefineLoggerOptions, DefineMailerOptions, DefineMailerOptionsWithQueue, DefineOpenAPIConfig, DefineOpenAPIConfigInput, DefineOpenAPIReturn, DefineQueueOptions, DefineRedisClientOptions, DefineS3DiskOptions, DefineStorageOptions, DefineTestDatabaseOptions, Event, EventBus, EventContext, HandlerParams, I18nInitOptions, Logger, Mailer, MailerPayload, MailerPayloadHtml, MailerPayloadReact, MailerWithQueue, Middleware, MigrationType, NewStorageAttachment, NewStorageBlob, NewStorageVariantRecord, OpenAPIMethodSpec, OpenAPIObjectConfigV31, OpenAPIRegistration, QualifiedTableNames, Queue, QueueFactory, QueueFactoryContext, QueueRateLimit, RedisClient, Role, RouteModule, ScheduledWorkflowContext, ServerConfig, SessionData, Storage, StorageAttachment, StorageBlob, StorageRelations, StorageRelationsConfig, StorageService, StorageTables, StorageVariantRecord, ValidationErrorResponse, WorkerConfig, WorkflowContext, WorkflowHandle, WorkflowStartOptions, auditActionSchema, baseSchema, createAccessControl, dbChangeInputSchema, dbChanges, dbChangesEvent, defaultI18nConfig, defineAppContainer, defineAppContext, defineAuth, defineAuthSchema, defineCache, defineConfig, defineDatabase, defineEndpointRateLimits, defineEvent, defineEventBus, defineI18n, defineLogger, defineMailer, defineMiddleware, defineMigrationOpts, defineOpenAPI, defineOpenAPIConfig, defineOpenAPIEndpoint, defineQueue, defineRedisClient, defineS3Disk, defineScheduledWorkflow, defineStorage, defineStorageSchema, defineTestDatabase, defineTypedResponses, defineWorkflow, generateOpenAPIDocument, i18n$1 as i18n, loadAndRegisterAPIRoutes, loadEvents, loadMiddleware, loadWorkflows, migrationsSchema, registerRoutes, scanAPIRoutes, withOtelSpan, writeOpenAPISpecs };
+  export { AccessControlRoles, AccessController, AppContainer, AppContext, AuditAction, Auth$1 as Auth, AuthCaptchaConfig, AuthConfig, AuthPasskeyConfig, AuthSessionConfig, Cache, CaptchaProvider, Config, Container, CustomTypeOptions, Database, DatabaseWithStorage, DbChangeInput, DefineAppContextOpts, DefineAuthOptions, DefineCacheOptions, DefineDatabaseOptions, DefineEventBusOptions, DefineLoggerOptions, DefineMailerOptions, DefineMailerOptionsWithQueue, DefineOpenAPIConfig, DefineOpenAPIConfigInput, DefineOpenAPIReturn, DefineQueueOptions, DefineRedisClientOptions, DefineS3DiskOptions, DefineStorageOptions, DefineTestDatabaseOptions, Event, EventBus, EventContext, HandlerParams, I18nInitOptions, Logger, Mailer, MailerPayload, MailerPayloadHtml, MailerPayloadReact, MailerWithQueue, Middleware, MigrationType, NewStorageAttachment, NewStorageBlob, NewStorageVariantRecord, OpenAPIMethodSpec, OpenAPIObjectConfigV31, OpenAPIRegistration, QualifiedTableNames, Queue, QueueFactory, QueueFactoryContext, QueueRateLimit, RedisClient, Role, RouteModule, ScheduledWorkflowContext, ServerConfig, SessionData, Storage, StorageAttachment, StorageBlob, StorageRelations, StorageRelationsConfig, StorageService, StorageTables, StorageVariantRecord, ValidationErrorResponse, WorkerConfig, WorkflowContext, WorkflowHandle, WorkflowStartOptions, auditActionSchema, baseSchema, captchaProviders, createAccessControl, dbChangeInputSchema, dbChanges, dbChangesEvent, defaultI18nConfig, defineAppContainer, defineAppContext, defineAuth, defineAuthSchema, defineCache, defineConfig, defineDatabase, defineEndpointRateLimits, defineEvent, defineEventBus, defineI18n, defineLogger, defineMailer, defineMiddleware, defineMigrationOpts, defineOpenAPI, defineOpenAPIConfig, defineOpenAPIEndpoint, defineQueue, defineRedisClient, defineS3Disk, defineScheduledWorkflow, defineStorage, defineStorageSchema, defineTestDatabase, defineTypedResponses, defineWorkflow, generateOpenAPIDocument, i18n$1 as i18n, loadAndRegisterAPIRoutes, loadEvents, loadMiddleware, loadWorkflows, migrationsSchema, registerRoutes, scanAPIRoutes, withOtelSpan, writeOpenAPISpecs };
 }
 //#endregion
 export { StorageAttachment as $, defaultI18nConfig as A, EventBus as At, ServerConfig as B, Cache as Bt, scanAPIRoutes as C, defineQueue as Ct, loadMiddleware as D, DbChangeInput as Dt, defineMiddleware as E, loadWorkflows as Et, DefineAppContextOpts as F, defineEventBus as Ft, DefineStorageOptions as G, defineAppContainer as H, defineCache as Ht, SessionData as I, loadEvents as It, defineS3Disk as J, Storage as K, defineAppContext as L, Config as Lt, i18n$1 as M, dbChangeInputSchema as Mt, defineAuthSchema as N, dbChangesEvent as Nt, App as O, DefineEventBusOptions as Ot, AppContext as P, defineEvent as Pt, NewStorageVariantRecord as Q, AppContainer as R, baseSchema as Rt, registerRoutes as S, WorkflowStartOptions as St, Middleware as T, defineWorkflow as Tt, DatabaseWithStorage as U, WorkerConfig as V, DefineCacheOptions as Vt, DefineS3DiskOptions as W, NewStorageAttachment as X, defineStorage as Y, NewStorageBlob as Z, defineOpenAPIConfig as _, QueueFactoryContext as _t, defineRedisClient as a, defineStorageSchema as at, generateOpenAPIDocument as b, WorkflowContext as bt, DefineOpenAPIConfigInput as c, Mailer as ct, OpenAPIMethodSpec as d, MailerPayloadReact as dt, StorageBlob as et, OpenAPIObjectConfigV31 as f, MailerWithQueue as ft, defineOpenAPI as g, QueueFactory as gt, ValidationErrorResponse as h, Queue as ht, RedisClient as i, StorageVariantRecord as it, defineI18n as j, EventContext as jt, I18nInitOptions as k, Event as kt, DefineOpenAPIReturn as l, MailerPayload as lt, RouteModule as m, DefineQueueOptions as mt, index_d_exports as n, StorageRelationsConfig as nt, withOtelSpan as o, DefineMailerOptions as ot, OpenAPIRegistration as p, defineMailer as pt, StorageService as q, DefineRedisClientOptions as r, StorageTables as rt, DefineOpenAPIConfig as s, DefineMailerOptionsWithQueue as st, CustomTypeOptions as t, StorageRelations as tt, HandlerParams as u, MailerPayloadHtml as ut, defineOpenAPIEndpoint as v, QueueRateLimit as vt, writeOpenAPISpecs as w, defineScheduledWorkflow as wt, loadAndRegisterAPIRoutes as x, WorkflowHandle as xt, defineTypedResponses as y, ScheduledWorkflowContext as yt, Container as z, defineConfig as zt };