palbase 0.10.1 → 0.11.0

package/dist/refuse/ai.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
 throw new Error("palbase/ai is for servers: it speaks with the project secret key, which never goes into a browser or a mobile app \u2014 call your backend, and let it ask the model");

package/dist/refuse/backend.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
 throw new Error("palbase/backend is a server framework: it runs on your backend, never in a browser or a mobile app \u2014 apps use palbase/web (or the native SDKs)");

package/dist/refuse/server.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
 throw new Error("palbase/server is for servers: its secret key never goes into a browser or a mobile app \u2014 apps use palbase/web (or the native SDKs) with the publishable key");

package/dist/server/index.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{a as c,b as d,c as e,d as f,e as g,f as h,g as i,h as j,i as k,j as l,k as m,l as n,m as o,n as p,o as q,p as r,q as s,r as t}from"../chunks/INRWHOEW.js";import"../chunks/6N3E2XHZ.js";import{m as b}from"../chunks/YQEM4H7U.js";import"../chunks/RO7ERCT3.js";import{b as a}from"../chunks/RWGEPDRQ.js";import"../chunks/PG7BO4MR.js";import"../chunks/XYXBDSXW.js";export{j as AuthUnavailable,b as EVENT_TYPES,a as PalbaseError,o as ReservationSettled,i as TokenError,l as TokenVerifier,d as WebhookSignatureError,c as createServer,n as isEntitled,t as loadSecrets,q as pages,s as platformOwn,r as processOwn,m as requestAddress,k as sessionStanding,g as signatureHeader,f as verifySignature,e as verifyWebhook,h as verifyWebhookRequest,p as withReservation};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{a as e,b as f,c as g,d as h,e as i,f as j,g as k,h as l,i as m,j as n,k as o,l as p,m as q,n as r,o as s,p as t,q as u,r as v}from"../chunks/GCVVMTWI.js";import{a as c,b as d}from"../chunks/WYUC5N2T.js";import"../chunks/S4GBHZOR.js";import{m as b}from"../chunks/KXY2SF4N.js";import"../chunks/BAOQMZPI.js";import{b as a}from"../chunks/7JE4KOPN.js";import"../chunks/2CQIOY2Z.js";import"../chunks/NHNXW6EK.js";export{l as AuthUnavailable,b as EVENT_TYPES,c as FieldError,d as Fields,a as PalbaseError,q as ReservationSettled,k as TokenError,n as TokenVerifier,f as WebhookSignatureError,e as createServer,p as isEntitled,v as loadSecrets,s as pages,u as platformOwn,t as processOwn,o as requestAddress,m as sessionStanding,i as signatureHeader,h as verifySignature,g as verifyWebhook,j as verifyWebhookRequest,r as withReservation};

package/dist/server/testing.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{a,b,c,d}from"../chunks/UDAWSJMT.js";import"../chunks/PG7BO4MR.js";import"../chunks/XYXBDSXW.js";export{a as TestApiError,d as api,b as createTestApi,c as testRun};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{a,b,c,d,e}from"../chunks/476DZPIV.js";import"../chunks/WYUC5N2T.js";import"../chunks/2CQIOY2Z.js";import"../chunks/NHNXW6EK.js";export{b as TestApiError,e as api,c as createTestApi,a as testFields,d as testRun};

package/dist/web/index.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{a as h,b as g,c as C,d as w,e as v,f as b,g as E,h as T,i as P,j as S,k as x,l as k,m as R,n as I,o as L,p as M,q as G}from"../chunks/QD3SPM7D.js";import{a as V,b as O,f as A}from"../chunks/R4OLJRMH.js";import"../chunks/MFMA46HN.js";import"../chunks/NBI5LPMS.js";import"../chunks/FHXGE2MX.js";import"../chunks/IVJCGBYG.js";import"../chunks/YQEM4H7U.js";import"../chunks/RO7ERCT3.js";import{b as u}from"../chunks/RWGEPDRQ.js";import"../chunks/PG7BO4MR.js";import"../chunks/XYXBDSXW.js";var D="oai-events";async function N(e){if(typeof e?.start!="function")throw new TypeError("connectVoice: start(sdp) is the round trip to the app's backend, which starts the voice (chats.voice.start) and answers { id, sdp }");let o=e.rtc??B(),t=e.signal;t?.throwIfAborted();let s=e.audio??F(),c=e.microphone===void 0,a=e.microphone??await o.getUserMedia({audio:!0});if(t?.aborted){if(c)for(let r of a.getTracks())r.stop();throw t.reason}let n=new o.RTCPeerConnection,p=!1,d=()=>{if(!p){if(p=!0,f.close(),n.close(),c)for(let r of a.getTracks())r.stop();s.srcObject!==null&&(s.srcObject=null)}};n.addEventListener("track",r=>{s.srcObject=r.streams[0]??new MediaStream([r.track]),s.play?.()?.catch?.(()=>{})}),n.addEventListener("connectionstatechange",()=>e.onState?.(n.connectionState));for(let r of a.getAudioTracks())n.addTrack(r,a);let f=n.createDataChannel(D);f.addEventListener("message",r=>{let i=U(r.data);i!==void 0&&e.onError?.(i)});let y=()=>d();t?.addEventListener("abort",y,{once:!0});try{await n.setLocalDescription(await n.createOffer()),t?.throwIfAborted(),await H(n,e.iceTimeoutMs??1e4,t);let r=n.localDescription?.sdp;if(!r)throw new Error("connectVoice: the peer connection made no offer");let i=await e.start(r);if(t?.throwIfAborted(),typeof i?.id!="string"||i.id===""||typeof i.sdp!="string"||i.sdp==="")throw new TypeError("connectVoice: start answered no voice \u2014 it is { id, sdp }, chats.voice.start's answer as the backend got it");return await n.setRemoteDescription({type:"answer",sdp:i.sdp}),t?.removeEventListener("abort",y),{id:i.id,peer:n,audio:s,microphone:a,get muted(){return a.getAudioTracks().every(l=>!l.enabled)},mute(l){for(let m of a.getAudioTracks())m.enabled=!l},close:d}}catch(r){throw t?.removeEventListener("abort",y),d(),t?.aborted?t.reason:r}}function H(e,o,t){return e.iceGatheringState==="complete"?Promise.resolve():t?.aborted?Promise.reject(t.reason):new Promise((s,c)=>{let a=()=>{clearTimeout(d),e.removeEventListener("icegatheringstatechange",n),t?.removeEventListener("abort",p)},n=()=>{e.iceGatheringState==="complete"&&(a(),s())},p=()=>{a(),c(t?.reason)},d=setTimeout(()=>{a(),c(new Error(`connectVoice: the network candidates were not gathered in ${o} ms`))},o);e.addEventListener("icegatheringstatechange",n),t?.addEventListener("abort",p,{once:!0})})}function U(e){if(typeof e=="string")try{let o=JSON.parse(e);return o.type!=="error"?void 0:typeof o.error?.message=="string"?o.error.message:typeof o.error?.code=="string"?o.error.code:"the voice failed"}catch{return}}function B(){let e=globalThis;if(typeof e.RTCPeerConnection!="function"||typeof e.navigator?.mediaDevices?.getUserMedia!="function")throw new TypeError("connectVoice: this runtime has no WebRTC (RTCPeerConnection, navigator.mediaDevices): a chat's voice is a browser's");let o=e.navigator.mediaDevices;return{RTCPeerConnection:e.RTCPeerConnection,getUserMedia:t=>o.getUserMedia(t)}}function F(){let e=globalThis.document;if(!e)throw new TypeError("connectVoice: give audio \u2014 the element the voice plays in \u2014 where there is no document");let o=e.createElement("audio");return o.autoplay=!0,o}export{E as Analytics,V as BackendError,w as Channel,T as Consent,M as Flags,A as GatewayError,x as InApp,P as Inbox,b as Installation,R as Notify,u as PalbaseError,I as Purchases,v as RealtimeSocket,S as SESSION_START,h as SessionChangedError,k as WebPush,N as connectVoice,G as createClient,O as isBackendError,C as localStore,g as memoryStore,L as redemptionToken};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{a as h,b as g,c as C,d as w,e as v,f as b,g as E,h as T,i as P,j as S,k as x,l as k,m as R,n as I,o as L,p as M,q as G}from"../chunks/LJ3VOTHH.js";import{a as V,b as O,f as A}from"../chunks/63TWL4SB.js";import"../chunks/DAYQLOBB.js";import"../chunks/52DZTUF7.js";import"../chunks/5D7BAVO5.js";import"../chunks/XBT3QJRS.js";import"../chunks/KXY2SF4N.js";import"../chunks/BAOQMZPI.js";import{b as u}from"../chunks/7JE4KOPN.js";import"../chunks/2CQIOY2Z.js";import"../chunks/NHNXW6EK.js";var D="oai-events";async function N(e){if(typeof e?.start!="function")throw new TypeError("connectVoice: start(sdp) is the round trip to the app's backend, which starts the voice (chats.voice.start) and answers { id, sdp }");let o=e.rtc??B(),t=e.signal;t?.throwIfAborted();let s=e.audio??F(),c=e.microphone===void 0,a=e.microphone??await o.getUserMedia({audio:!0});if(t?.aborted){if(c)for(let r of a.getTracks())r.stop();throw t.reason}let n=new o.RTCPeerConnection,p=!1,d=()=>{if(!p){if(p=!0,f.close(),n.close(),c)for(let r of a.getTracks())r.stop();s.srcObject!==null&&(s.srcObject=null)}};n.addEventListener("track",r=>{s.srcObject=r.streams[0]??new MediaStream([r.track]),s.play?.()?.catch?.(()=>{})}),n.addEventListener("connectionstatechange",()=>e.onState?.(n.connectionState));for(let r of a.getAudioTracks())n.addTrack(r,a);let f=n.createDataChannel(D);f.addEventListener("message",r=>{let i=U(r.data);i!==void 0&&e.onError?.(i)});let y=()=>d();t?.addEventListener("abort",y,{once:!0});try{await n.setLocalDescription(await n.createOffer()),t?.throwIfAborted(),await H(n,e.iceTimeoutMs??1e4,t);let r=n.localDescription?.sdp;if(!r)throw new Error("connectVoice: the peer connection made no offer");let i=await e.start(r);if(t?.throwIfAborted(),typeof i?.id!="string"||i.id===""||typeof i.sdp!="string"||i.sdp==="")throw new TypeError("connectVoice: start answered no voice \u2014 it is { id, sdp }, chats.voice.start's answer as the backend got it");return await n.setRemoteDescription({type:"answer",sdp:i.sdp}),t?.removeEventListener("abort",y),{id:i.id,peer:n,audio:s,microphone:a,get muted(){return a.getAudioTracks().every(l=>!l.enabled)},mute(l){for(let m of a.getAudioTracks())m.enabled=!l},close:d}}catch(r){throw t?.removeEventListener("abort",y),d(),t?.aborted?t.reason:r}}function H(e,o,t){return e.iceGatheringState==="complete"?Promise.resolve():t?.aborted?Promise.reject(t.reason):new Promise((s,c)=>{let a=()=>{clearTimeout(d),e.removeEventListener("icegatheringstatechange",n),t?.removeEventListener("abort",p)},n=()=>{e.iceGatheringState==="complete"&&(a(),s())},p=()=>{a(),c(t?.reason)},d=setTimeout(()=>{a(),c(new Error(`connectVoice: the network candidates were not gathered in ${o} ms`))},o);e.addEventListener("icegatheringstatechange",n),t?.addEventListener("abort",p,{once:!0})})}function U(e){if(typeof e=="string")try{let o=JSON.parse(e);return o.type!=="error"?void 0:typeof o.error?.message=="string"?o.error.message:typeof o.error?.code=="string"?o.error.code:"the voice failed"}catch{return}}function B(){let e=globalThis;if(typeof e.RTCPeerConnection!="function"||typeof e.navigator?.mediaDevices?.getUserMedia!="function")throw new TypeError("connectVoice: this runtime has no WebRTC (RTCPeerConnection, navigator.mediaDevices): a chat's voice is a browser's");let o=e.navigator.mediaDevices;return{RTCPeerConnection:e.RTCPeerConnection,getUserMedia:t=>o.getUserMedia(t)}}function F(){let e=globalThis.document;if(!e)throw new TypeError("connectVoice: give audio \u2014 the element the voice plays in \u2014 where there is no document");let o=e.createElement("audio");return o.autoplay=!0,o}export{E as Analytics,V as BackendError,w as Channel,T as Consent,M as Flags,A as GatewayError,x as InApp,P as Inbox,b as Installation,R as Notify,u as PalbaseError,I as Purchases,v as RealtimeSocket,S as SESSION_START,h as SessionChangedError,k as WebPush,N as connectVoice,G as createClient,O as isBackendError,C as localStore,g as memoryStore,L as redemptionToken};

package/dist/web/message.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{a as i}from"../chunks/NBI5LPMS.js";import{a as e,b as s,c as t,d as p,e as o,f as a,h as r,j as n,k as y,p as M,q as l,t as g}from"../chunks/FHXGE2MX.js";import"../chunks/XYXBDSXW.js";export{n as MESSAGE_COMPONENTS,a as MESSAGE_ICONS,r as MESSAGE_SCHEMA,s as assetId,y as countdownValues,e as fontFamily,o as htmlDocument,t as prepareAssets,i as presentMessage,g as renderMessage,M as resolveMessage,l as resolveMessageWithPaths,p as unzip};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{a as i}from"../chunks/52DZTUF7.js";import{a as e,b as s,c as t,d as p,e as o,f as a,h as r,j as n,k as y,p as M,q as l,t as g}from"../chunks/5D7BAVO5.js";import"../chunks/NHNXW6EK.js";export{n as MESSAGE_COMPONENTS,a as MESSAGE_ICONS,r as MESSAGE_SCHEMA,s as assetId,y as countdownValues,e as fontFamily,o as htmlDocument,t as prepareAssets,i as presentMessage,g as renderMessage,M as resolveMessage,l as resolveMessageWithPaths,p as unzip};

package/dist/web/palbe.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{c as e,d as r,i as t}from"../chunks/R4OLJRMH.js";import"../chunks/IVJCGBYG.js";import"../chunks/RO7ERCT3.js";import"../chunks/RWGEPDRQ.js";import"../chunks/PG7BO4MR.js";import"../chunks/XYXBDSXW.js";export{e as RESERVED_CLIENT_NAMES,t as __registerBackend,r as isClientName};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{c as e,d as r,i as t}from"../chunks/63TWL4SB.js";import"../chunks/XBT3QJRS.js";import"../chunks/BAOQMZPI.js";import"../chunks/7JE4KOPN.js";import"../chunks/2CQIOY2Z.js";import"../chunks/NHNXW6EK.js";export{e as RESERVED_CLIENT_NAMES,t as __registerBackend,r as isClientName};

package/dist/web/paywall.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{a as f,b as d,c as m,d as u,e as A,f as c,g as R}from"../chunks/MFMA46HN.js";import{a as e,b as a,c as t,d as l,e as r,f as o,g as p,i as y,k as s,l as P,n,o as i,s as w}from"../chunks/FHXGE2MX.js";import"../chunks/RWGEPDRQ.js";import"../chunks/PG7BO4MR.js";import"../chunks/XYXBDSXW.js";export{y as PAYWALL_COMPONENTS,o as PAYWALL_ICONS,p as PAYWALL_SCHEMA,c as Paywall,a as assetId,f as attributesHeader,s as countdownValues,R as defaultPaywall,e as fontFamily,u as formatPeriod,m as formatPrice,r as htmlDocument,A as packageValues,P as packagesOf,d as parseDuration,t as prepareAssets,w as renderPaywall,n as resolvePaywall,i as resolvePaywallWithPaths,l as unzip};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{a as f,b as d,c as m,d as u,e as A,f as c,g as R}from"../chunks/DAYQLOBB.js";import{a as e,b as a,c as t,d as l,e as r,f as o,g as p,i as y,k as s,l as P,n,o as i,s as w}from"../chunks/5D7BAVO5.js";import"../chunks/7JE4KOPN.js";import"../chunks/2CQIOY2Z.js";import"../chunks/NHNXW6EK.js";export{y as PAYWALL_COMPONENTS,o as PAYWALL_ICONS,p as PAYWALL_SCHEMA,c as Paywall,a as assetId,f as attributesHeader,s as countdownValues,R as defaultPaywall,e as fontFamily,u as formatPeriod,m as formatPrice,r as htmlDocument,A as packageValues,P as packagesOf,d as parseDuration,t as prepareAssets,w as renderPaywall,n as resolvePaywall,i as resolvePaywallWithPaths,l as unzip};

package/dist/web/push-sw.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
 "use strict";(()=>{function f(e,s){if(e)try{let i=new URL(e,s);if(i.protocol==="https:"||i.protocol==="http:"&&(i.hostname==="localhost"||i.hostname==="127.0.0.1"))return i.href}catch{}}function g(e){let s=new URL(e.location.href).searchParams,i=s.get("url")??"",l=s.get("key")??"",r=(n,t)=>!n||!i?Promise.resolve():e.fetch(`${i.replace(/\/$/,"")}/notify/receipts`,{method:"POST",headers:{"content-type":"application/json",apikey:l},body:JSON.stringify({receipts:[{receipt:n,status:t}]}),keepalive:!0}).catch(()=>{}),a=async(n,t)=>{for(let o of await e.clients.matchAll({type:"window",includeUncontrolled:!0}))o.postMessage({type:"palbase.push",event:n,url:t.url,data:t.data})};e.addEventListener("push",(n=>{let t={};try{t=n.data?.json()??{}}catch{}let o={url:t.url,receipt:t.receipt,data:t.data};n.waitUntil(e.registration.showNotification(t.title??"",{body:t.body,image:t.image,tag:t.tag,data:o}).then(()=>Promise.all([r(t.receipt,"delivered"),a("received",o)])))})),e.addEventListener("notificationclick",(n=>{n.notification.close();let t=n.notification.data??{},o=f(t.url,e.location.origin),c=async()=>{if(!o)return;let d=(await e.clients.matchAll({type:"window",includeUncontrolled:!0})).find(u=>u.url===o);d?await d.focus():await e.clients.openWindow(o)};n.waitUntil(Promise.all([r(t.receipt,"opened"),c(),a("opened",t)]))})),e.addEventListener("notificationclose",(n=>{n.waitUntil(r(n.notification.data?.receipt,"dismissed"))}))}typeof self<"u"&&typeof self.registration=="object"&&!("document"in self)&&g(self);})();

package/dist/web/ssr.js

@@ -1,2 +1,2 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import{q as f}from"../chunks/QD3SPM7D.js";import"../chunks/R4OLJRMH.js";import"../chunks/MFMA46HN.js";import"../chunks/NBI5LPMS.js";import"../chunks/FHXGE2MX.js";import"../chunks/IVJCGBYG.js";import"../chunks/YQEM4H7U.js";import"../chunks/RO7ERCT3.js";import"../chunks/RWGEPDRQ.js";import"../chunks/PG7BO4MR.js";import"../chunks/XYXBDSXW.js";var C=Object.freeze({"Cache-Control":"private, no-cache, no-store, must-revalidate, max-age=0",Expires:"0",Pragma:"no-cache"}),x={path:"/",sameSite:"lax",secure:!0,httpOnly:!1,maxAge:400*24*60*60},u=3180,k=5*6e4;function d(t){let e=/^pb_([a-z0-9]+)_c/.exec(t)?.[1];if(e===void 0)throw new TypeError("publishableKey is the project publishable key (pb_<ref>_c\u2026)");return`pb-${e}-session`}var y=t=>{let e=new TextEncoder().encode(JSON.stringify(t)),o="";for(let s of e)o+=String.fromCharCode(s);return btoa(o).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")},b=t=>{try{let e=atob(t.replace(/-/g,"+").replace(/_/g,"/")),o=JSON.parse(new TextDecoder().decode(Uint8Array.from(e,s=>s.charCodeAt(0))));return typeof o.accessToken!="string"||typeof o.refreshToken!="string"||typeof o.expiresAt!="number"||typeof o.userId!="string"?null:o}catch{return null}};function m(t,e,o={},s=!1){let c={...x,...o},g=async()=>new Map((await e.getAll()).map(n=>[n.name,n.value])),S=n=>n===t||n.startsWith(`${t}.`)&&/^\d+$/.test(n.slice(t.length+1)),h=async n=>{if(!e.setAll)return;let i=n===null?[]:n.length<=u?[[t,n]]:Array.from({length:Math.ceil(n.length/u)},(r,l)=>[`${t}.${l}`,n.slice(l*u,(l+1)*u)]),p=new Set(i.map(([r])=>r)),a=i.map(([r,l])=>({name:r,value:l,options:c}));for(let r of(await g()).keys())S(r)&&!p.has(r)&&a.push({name:r,value:"",options:{...c,maxAge:0}});a.length>0&&await e.setAll(a,{...C})};return{async load(){let n=await g(),i=n.get(t);if(i===void 0){let p="";for(let a=0;n.has(`${t}.${a}`);a++)p+=n.get(`${t}.${a}`);i=p}return i?b(i):null},save:n=>h(y(n)),clear:()=>h(null),shared:s}}function A(t){let{cookies:e,cookieOptions:o,...s}=t,c=t.refresh??(e.setAll?"before":"never");return f({...s,refresh:c,storage:m(d(t.publishableKey),e,o)})}function O(){let t=()=>{let e=globalThis.document;if(!e)throw new Error("documentCookies: there is no document here \u2014 a server gives its request's cookies to createServerClient");return e};return{getAll:()=>t().cookie.split(";").map(e=>e.trim()).filter(e=>e.includes("=")).map(e=>{let o=e.indexOf("=");return{name:e.slice(0,o),value:e.slice(o+1)}}),setAll(e){for(let o of e){let s=o.options,c=[`Path=${s.path??"/"}`,s.domain?`Domain=${s.domain}`:"",s.maxAge!==void 0?`Max-Age=${s.maxAge}`:"",s.expires?`Expires=${s.expires.toUTCString()}`:"",s.sameSite?`SameSite=${s.sameSite.charAt(0).toUpperCase()}${s.sameSite.slice(1)}`:"",s.secure?"Secure":""].filter(Boolean);t().cookie=[`${o.name}=${o.value}`,...c].join("; ")}}}}function $(t){let{cookieOptions:e,...o}=t,s=globalThis.location?.protocol==="https:";return f({...o,storage:m(d(t.publishableKey),O(),{secure:s,...e},!0)})}async function v(t){let e=await t.auth.currentSession();if(!e||(e.expiresAt-Date.now()<=k&&await t.auth.refreshSession().catch(()=>{}),!await t.auth.currentSession()))return null;try{return(await t.auth.api.verifyTokenUser()).data}catch(o){if(o.status===401)return null;throw o}}export{C as NO_STORE_HEADERS,x as SESSION_COOKIE_OPTIONS,m as cookieSessionStore,$ as createBrowserClient,A as createServerClient,O as documentCookies,v as keepSession,d as sessionCookieName};
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import{q as f}from"../chunks/LJ3VOTHH.js";import"../chunks/63TWL4SB.js";import"../chunks/DAYQLOBB.js";import"../chunks/52DZTUF7.js";import"../chunks/5D7BAVO5.js";import"../chunks/XBT3QJRS.js";import"../chunks/KXY2SF4N.js";import"../chunks/BAOQMZPI.js";import"../chunks/7JE4KOPN.js";import"../chunks/2CQIOY2Z.js";import"../chunks/NHNXW6EK.js";var C=Object.freeze({"Cache-Control":"private, no-cache, no-store, must-revalidate, max-age=0",Expires:"0",Pragma:"no-cache"}),x={path:"/",sameSite:"lax",secure:!0,httpOnly:!1,maxAge:400*24*60*60},u=3180,k=5*6e4;function d(t){let e=/^pb_([a-z0-9]+)_c/.exec(t)?.[1];if(e===void 0)throw new TypeError("publishableKey is the project publishable key (pb_<ref>_c\u2026)");return`pb-${e}-session`}var y=t=>{let e=new TextEncoder().encode(JSON.stringify(t)),o="";for(let s of e)o+=String.fromCharCode(s);return btoa(o).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")},b=t=>{try{let e=atob(t.replace(/-/g,"+").replace(/_/g,"/")),o=JSON.parse(new TextDecoder().decode(Uint8Array.from(e,s=>s.charCodeAt(0))));return typeof o.accessToken!="string"||typeof o.refreshToken!="string"||typeof o.expiresAt!="number"||typeof o.userId!="string"?null:o}catch{return null}};function m(t,e,o={},s=!1){let c={...x,...o},g=async()=>new Map((await e.getAll()).map(n=>[n.name,n.value])),S=n=>n===t||n.startsWith(`${t}.`)&&/^\d+$/.test(n.slice(t.length+1)),h=async n=>{if(!e.setAll)return;let i=n===null?[]:n.length<=u?[[t,n]]:Array.from({length:Math.ceil(n.length/u)},(r,l)=>[`${t}.${l}`,n.slice(l*u,(l+1)*u)]),p=new Set(i.map(([r])=>r)),a=i.map(([r,l])=>({name:r,value:l,options:c}));for(let r of(await g()).keys())S(r)&&!p.has(r)&&a.push({name:r,value:"",options:{...c,maxAge:0}});a.length>0&&await e.setAll(a,{...C})};return{async load(){let n=await g(),i=n.get(t);if(i===void 0){let p="";for(let a=0;n.has(`${t}.${a}`);a++)p+=n.get(`${t}.${a}`);i=p}return i?b(i):null},save:n=>h(y(n)),clear:()=>h(null),shared:s}}function A(t){let{cookies:e,cookieOptions:o,...s}=t,c=t.refresh??(e.setAll?"before":"never");return f({...s,refresh:c,storage:m(d(t.publishableKey),e,o)})}function O(){let t=()=>{let e=globalThis.document;if(!e)throw new Error("documentCookies: there is no document here \u2014 a server gives its request's cookies to createServerClient");return e};return{getAll:()=>t().cookie.split(";").map(e=>e.trim()).filter(e=>e.includes("=")).map(e=>{let o=e.indexOf("=");return{name:e.slice(0,o),value:e.slice(o+1)}}),setAll(e){for(let o of e){let s=o.options,c=[`Path=${s.path??"/"}`,s.domain?`Domain=${s.domain}`:"",s.maxAge!==void 0?`Max-Age=${s.maxAge}`:"",s.expires?`Expires=${s.expires.toUTCString()}`:"",s.sameSite?`SameSite=${s.sameSite.charAt(0).toUpperCase()}${s.sameSite.slice(1)}`:"",s.secure?"Secure":""].filter(Boolean);t().cookie=[`${o.name}=${o.value}`,...c].join("; ")}}}}function $(t){let{cookieOptions:e,...o}=t,s=globalThis.location?.protocol==="https:";return f({...o,storage:m(d(t.publishableKey),O(),{secure:s,...e},!0)})}async function v(t){let e=await t.auth.currentSession();if(!e||(e.expiresAt-Date.now()<=k&&await t.auth.refreshSession().catch(()=>{}),!await t.auth.currentSession()))return null;try{return(await t.auth.api.verifyTokenUser()).data}catch(o){if(o.status===401)return null;throw o}}export{C as NO_STORE_HEADERS,x as SESSION_COOKIE_OPTIONS,m as cookieSessionStore,$ as createBrowserClient,A as createServerClient,O as documentCookies,v as keepSession,d as sessionCookieName};

package/dist/web/vite.js

@@ -1,3 +1,3 @@
-/*! palbase 0.10.1 — Palbase SDK License (see LICENSE) */
-import"../chunks/XYXBDSXW.js";import{execFile as $}from"node:child_process";import{existsSync as y,mkdtempSync as k,readFileSync as S,rmSync as x,writeFileSync as P}from"node:fs";import{createRequire as O}from"node:module";import{tmpdir as W}from"node:os";import{dirname as g,join as o,relative as u,resolve as v,sep as d}from"node:path";var E=/\.(?:ts|js|mts|mjs)$/;function F(n){if(!/^[a-z][a-z0-9-]*$/.test(n.app))throw new TypeError(`palbase({ app }): ${JSON.stringify(n.app)} is an app's slug (palbase apps:list)`);let c=process.cwd(),p="",i="",f=()=>v(c,n.dir??"palbase"),m=()=>{let e=n.environments[p];if(!e)throw new Error(`palbase: the mode "${p}" is not built against any environment \u2014 say which in vite.config: palbase({ environments: { ${JSON.stringify(p)}: '<environment slug>' } })`);return e};return{name:"palbase",enforce:"pre",config(e,s){p=s.mode,i=s.command??"";let r=e.build?.rollupOptions?.onwarn;return{build:{rollupOptions:{onwarn(t,a){let l=String(t.exporter??t.id??"");if(t.code==="MISSING_EXPORT"&&l.includes(`${d}environments${d}`))throw new Error(`palbase: ${t.message} \u2014 ${m()}'s backend has no such route (palbase apps:sync brings what it has)`);r?r(t,a):a(t)}}}}},configResolved(e){c=e.root,p=e.mode,i=e.command??i},async buildStart(){i!=="build"||n.typecheck===!1||await j(c,m(),n.tsconfig)},resolveId(e,s){if(!s)return null;let r=f();if(e==="palbase"||e.startsWith("palbase/")){let w=u(r,s);return w.startsWith("..")||w===""?null:this.resolve(e,o(c,"index.html"),{skipSelf:!0})}if(!(e.startsWith(".")||e.startsWith("/")))return null;let t=v(g(s),e);if(E.test(t)||(t+=".ts"),g(t)!==r&&g(t)!==o(r,"palbe"))return null;let a=u(r,t),l=`${n.app}.ts`;if(a!==l&&!a.startsWith(`palbe${d}`))return null;let h=m(),b=o(r,"environments",h,a===l?l:o("palbe",a.slice(`palbe${d}`.length)));if(!y(b))throw new Error(`palbase: ${u(c,b)} is not there \u2014 palbase apps:sync writes it (is ${n.app} set in ${h}, and has ${h} that machine?)`);return b}}}async function j(n,c,p){let i=p?v(n,p):["tsconfig.app.json","tsconfig.json"].map(e=>o(n,e)).find(y);if(!i)return;if(!y(i))throw new Error(`palbase({ tsconfig }): ${u(n,i)} is not there`);let f;try{let e=O(o(n,"package.json")).resolve("typescript/package.json"),s=JSON.parse(S(e,"utf8")).bin?.tsc;if(!s)throw new Error("no tsc");f=o(g(e),s)}catch{throw new Error("palbase: the build type-checks the app against its environment with the app's TypeScript, and the app has none (npm i -D typescript) \u2014 or say palbase({ typecheck: false })")}let m=k(o(W(),"palbase-typecheck-"));try{let e=o(m,"tsconfig.json");P(e,JSON.stringify({extends:i,compilerOptions:{noEmit:!0,composite:!1,incremental:!1,moduleSuffixes:[`.${c}`,""]}}));let s=await new Promise(r=>$(process.execPath,[f,"-p",e,"--pretty","false"],{cwd:n,maxBuffer:16<<20},(t,a,l)=>r({code:t?typeof t.code=="number"?t.code:1:0,text:`${a}${l}`.trim()})));if(s.code!==0)throw new Error(`palbase: the app does not type-check against ${c}, the environment this build is made for \u2014 a route its backend does not have, or a call that does not fit it:
+/*! palbase 0.11.0 — Palbase SDK License (see LICENSE) */
+import"../chunks/NHNXW6EK.js";import{execFile as $}from"node:child_process";import{existsSync as y,mkdtempSync as k,readFileSync as S,rmSync as x,writeFileSync as P}from"node:fs";import{createRequire as O}from"node:module";import{tmpdir as W}from"node:os";import{dirname as g,join as o,relative as u,resolve as v,sep as d}from"node:path";var E=/\.(?:ts|js|mts|mjs)$/;function F(n){if(!/^[a-z][a-z0-9-]*$/.test(n.app))throw new TypeError(`palbase({ app }): ${JSON.stringify(n.app)} is an app's slug (palbase apps:list)`);let c=process.cwd(),p="",i="",f=()=>v(c,n.dir??"palbase"),m=()=>{let e=n.environments[p];if(!e)throw new Error(`palbase: the mode "${p}" is not built against any environment \u2014 say which in vite.config: palbase({ environments: { ${JSON.stringify(p)}: '<environment slug>' } })`);return e};return{name:"palbase",enforce:"pre",config(e,s){p=s.mode,i=s.command??"";let r=e.build?.rollupOptions?.onwarn;return{build:{rollupOptions:{onwarn(t,a){let l=String(t.exporter??t.id??"");if(t.code==="MISSING_EXPORT"&&l.includes(`${d}environments${d}`))throw new Error(`palbase: ${t.message} \u2014 ${m()}'s backend has no such route (palbase apps:sync brings what it has)`);r?r(t,a):a(t)}}}}},configResolved(e){c=e.root,p=e.mode,i=e.command??i},async buildStart(){i!=="build"||n.typecheck===!1||await j(c,m(),n.tsconfig)},resolveId(e,s){if(!s)return null;let r=f();if(e==="palbase"||e.startsWith("palbase/")){let w=u(r,s);return w.startsWith("..")||w===""?null:this.resolve(e,o(c,"index.html"),{skipSelf:!0})}if(!(e.startsWith(".")||e.startsWith("/")))return null;let t=v(g(s),e);if(E.test(t)||(t+=".ts"),g(t)!==r&&g(t)!==o(r,"palbe"))return null;let a=u(r,t),l=`${n.app}.ts`;if(a!==l&&!a.startsWith(`palbe${d}`))return null;let h=m(),b=o(r,"environments",h,a===l?l:o("palbe",a.slice(`palbe${d}`.length)));if(!y(b))throw new Error(`palbase: ${u(c,b)} is not there \u2014 palbase apps:sync writes it (is ${n.app} set in ${h}, and has ${h} that machine?)`);return b}}}async function j(n,c,p){let i=p?v(n,p):["tsconfig.app.json","tsconfig.json"].map(e=>o(n,e)).find(y);if(!i)return;if(!y(i))throw new Error(`palbase({ tsconfig }): ${u(n,i)} is not there`);let f;try{let e=O(o(n,"package.json")).resolve("typescript/package.json"),s=JSON.parse(S(e,"utf8")).bin?.tsc;if(!s)throw new Error("no tsc");f=o(g(e),s)}catch{throw new Error("palbase: the build type-checks the app against its environment with the app's TypeScript, and the app has none (npm i -D typescript) \u2014 or say palbase({ typecheck: false })")}let m=k(o(W(),"palbase-typecheck-"));try{let e=o(m,"tsconfig.json");P(e,JSON.stringify({extends:i,compilerOptions:{noEmit:!0,composite:!1,incremental:!1,moduleSuffixes:[`.${c}`,""]}}));let s=await new Promise(r=>$(process.execPath,[f,"-p",e,"--pretty","false"],{cwd:n,maxBuffer:16<<20},(t,a,l)=>r({code:t?typeof t.code=="number"?t.code:1:0,text:`${a}${l}`.trim()})));if(s.code!==0)throw new Error(`palbase: the app does not type-check against ${c}, the environment this build is made for \u2014 a route its backend does not have, or a call that does not fit it:
 ${s.text}`)}finally{x(m,{recursive:!0,force:!0})}}export{F as palbase};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "palbase",
-  "version": "0.10.1",
+  "version": "0.11.0",
   "description": "Palbase for JavaScript: the web client (palbase/web), the server SDK (palbase/server), the backend framework (palbase/backend), AI (palbase/ai) and the CLI (npx palbase).",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://palbase.studio",
@@ -135,7 +135,7 @@
   "dependencies": {
     "@types/node": "26.6.4",
     "bun-types": "1.4.2",
-    "palgres": "0.10.1",
+    "palgres": "0.11.0",
     "reflect-metadata": "^0.2.2",
     "typescript": "~6.0.3",
     "zod": "^4.6.5"

package/types/backend/src/container.d.ts

@@ -30,6 +30,8 @@ export declare class Container {
     readonly cronProviders: Ctor[];
     /** The providers that are @Task classes: the platform runs them as their tasks come due. */
     readonly taskProviders: Ctor[];
+    /** The providers that are @TestUserTemplate classes: the platform calls them for the test users made with their names. */
+    readonly templateProviders: Ctor[];
     /** The providers that are @Gateway classes. */
     readonly gateways: Ctor[];
     constructor(modules: Function[]);

package/types/backend/src/database.d.ts

@@ -1,5 +1,7 @@
 import { type AppDatabase, type Binding, type Embed, type Plan, type Pool, type Schema, type SearchWorker, type SqlDriver } from 'palgres';
 import { type SchemaDef } from 'palgres/dsl';
+import { type Fields } from '../../server/src/index.js';
+import type { KeptAnswers } from './idempotency.js';
 import type { Schemas, Tables } from './db-env.js';
 /** A connection pool: Bun's SQL and postgres.js both are one. */
 export interface SqlPool extends Pool {
@@ -137,6 +139,8 @@ export interface OpenDatabase {
     }>;
     /** What embeds the rows of the tables that declare search, when the schema has one; not started. */
     search?: SearchWorker;
+    /** How an Idempotency-Key's answer is kept: sealed when the app encrypts a column (idempotency.ts). */
+    keptAnswers: KeptAnswers;
     close(): Promise<void>;
 }
 /**
@@ -158,6 +162,9 @@ export declare function planLines(p: Plan): string[];
  * schema with no version is the developer's to push (SchemaNotPushed).
  */
 export declare function openDatabase(config: DatabaseConfig, env: Record<string, string | undefined>, secretKey: string, where: {
-    onPlatform: boolean; /** What embeds when the app names no embedder: the project's ai module. */
+    onPlatform: boolean;
+    /** What embeds when the app names no embedder: the project's ai module. */
     embed: Embed;
+    /** The project's field keys (palbase/server's fields): loaded only when the schema encrypts a column, or a migration takes one's encryption on or off. */
+    fields: Fields;
 }): Promise<OpenDatabase>;

package/types/backend/src/decorators.d.ts

@@ -88,6 +88,7 @@ export declare const EVENTS: unique symbol;
 export declare const WEBHOOK: unique symbol;
 export declare const CRONS: unique symbol;
 export declare const TASKS: unique symbol;
+export declare const TEST_USER_TEMPLATES: unique symbol;
 export declare function declared(): Set<Function>;
 export declare const RESERVED: Set<string>;
 export declare function Controller(basePath: string, options?: ControllerOptions): ClassDecorator;

package/types/backend/src/engine-db.d.ts

@@ -1,4 +1,4 @@
-import { type DatabaseDiagnosticsOptions, type DBClient, type SqlDriver } from 'palgres';
+import { type DatabaseDiagnosticsOptions, type DBClient, type FieldsSource, type SqlDriver } from 'palgres';
 import type { SchemaDef } from 'palgres/dsl';
 export type { SqlDriver };
 export interface RequestDatabaseIdentity {
@@ -14,6 +14,8 @@ export interface RequestDatabaseOptions {
     schemas: readonly SchemaDef[];
     diagnostics?: DatabaseDiagnosticsOptions;
     signal?: AbortSignal;
+    /** What seals and opens the schemas' .encrypted() columns: palbase/server/testing's testFields() in a test. */
+    fields?: FieldsSource;
 }
 export interface RequestDatabaseHandle {
     /** The string-keyed client: what withServices({ Database }) takes. */

package/types/backend/src/engine.d.ts

@@ -1,5 +1,6 @@
 import { type PalbaseServer, type TokenUser, type TokenVerifier, type WebhookEvent } from '../../server/src/index.js';
 import { type AuthSpec, type RateLimitConfig } from './decorators.js';
+import { type KeptAnswers } from './idempotency.js';
 import { type ContractOptions } from './openapi.js';
 import { type StringsTable } from './i18n.js';
 import type { RequestTelemetry } from './requests.js';
@@ -66,6 +67,7 @@ export interface AppOptions {
     database?: {
         app: RequestDatabases;
         requests: 'caller' | 'service';
+        keptAnswers?: KeptAnswers;
     };
     /**
      * The app's strings (palbase/strings/, loadStringsTable): t() answers each request in the first of its
@@ -106,7 +108,12 @@ export interface AppOptions {
      * - its ai tools and agents (@palbase/ai's ai.tool and ai.agent), from the
      *   ai module: POST /_palbase/ai/tools runs the tool an agent called (its
      *   body's tool), POST /_palbase/ai/agents answers the definition of the
-     *   agent a turn is of (its body's agent) — ai-calls.ts.
+     *   agent a turn is of (its body's agent) — ai-calls.ts;
+     * - its @TestUserTemplate classes, from the machines module, for a test
+     *   user it made through auth: POST /_palbase/test-user-templates/<name>
+     *   writes the template for the user its body names — a test user, auth
+     *   says, or 403 — and answers {rows: {table: n}}; …/<name>/undo takes it
+     *   away (404: the template has none) — test-user-templates.ts.
      */
     platform?: {
         secret: string;

package/types/backend/src/idempotency.d.ts

@@ -0,0 +1,136 @@
+import { type EnvServiceDatabase, type TablesOf } from 'palgres';
+import type { StandardSchemaV1 } from './decorators.js';
+import type { RequestDatabases } from './engine.js';
+/** The writes a key is taken on: what may change something, and be sent again. */
+export declare const KEYED_METHODS: ReadonlySet<string>;
+/** The header parameter every keyed write of the contract carries — the platform's modules' own words. */
+export declare const IDEMPOTENCY_KEY_PARAMETER: {
+    readonly description: 'Makes the write safe to send again (at most 255 characters). A retry with the same key and the same request gets the first answer back, marked `Idempotent-Replayed: true`, and changes nothing; the same key with a different request is refused with 422, and while the first request still runs a retry gets 409 with Retry-After. Answers are kept for 24 hours.';
+    readonly in: 'header';
+    readonly name: 'Idempotency-Key';
+    readonly required: false;
+    readonly schema: {
+        readonly maxLength: 255;
+        readonly type: 'string';
+    };
+};
+/**
+ * The framework's own tables in the app's database: migrated with the app's
+ * schemas, by the deploy's migration step, as the tables' owner.
+ */
+export declare const FRAMEWORK_SCHEMA: import("palgres/dsl").SchemaDef<{
+    idempotency_keys: import("palgres/dsl").TableDef<{
+        /** The caller's key, as theirs: a digest of who sent it and the key. */
+        key: import("palgres/dsl").ColumnBuilder<"text", false, false, never, unknown, unknown, import("palgres/dsl").ColumnWrite, "primary">;
+        /** What made the request the one it is: a digest of its method, path and query, caller and body. */
+        fingerprint: import("palgres/dsl").ColumnBuilder<"text", false, false, never, unknown, unknown, import("palgres/dsl").ColumnWrite, import("palgres/dsl").ColumnKey>;
+        started_at: import("palgres/dsl").ColumnBuilder<"timestamp", false, true, never, unknown, unknown, import("palgres/dsl").ColumnWrite, import("palgres/dsl").ColumnKey>;
+        completed_at: import("palgres/dsl").ColumnBuilder<"timestamp", true, false, never, unknown, unknown, import("palgres/dsl").ColumnWrite, import("palgres/dsl").ColumnKey>;
+        status_code: import("palgres/dsl").ColumnBuilder<"integer", true, false, never, unknown, unknown, import("palgres/dsl").ColumnWrite, import("palgres/dsl").ColumnKey>;
+        /** The answer's headers, as [name, value] pairs. */
+        response_headers: import("palgres/dsl").ColumnBuilder<"jsonb", true, false, never, [string, string][], unknown, import("palgres/dsl").ColumnWrite, import("palgres/dsl").ColumnKey>;
+        /** The answer's body, base64; null when it had none, was over 64 KiB or was still being produced. */
+        response_body: import("palgres/dsl").ColumnBuilder<"text", true, false, never, unknown, unknown, import("palgres/dsl").ColumnWrite, import("palgres/dsl").ColumnKey>;
+    }> & {
+        name: "idempotency_keys";
+    } & import("palgres/dsl").TableKeys<readonly (readonly "key"[])[]>;
+}>;
+type KeysTable = TablesOf<typeof FRAMEWORK_SCHEMA>['idempotency_keys'];
+type KeysDatabase = EnvServiceDatabase<Record<never, never>, {
+    palbase: {
+        idempotency_keys: KeysTable;
+    };
+}>;
+type Row = Awaited<ReturnType<KeysDatabase['palbase']['idempotency_keys']['findMany']>>[number];
+/** Who sent a request, as its key is theirs: the role it runs as, and its user's id — for nobody signed in, the address the edge names (a:<address>). */
+export interface Caller {
+    role: string;
+    uid: string;
+}
+/** A keyed write, as it arrived. */
+export interface KeyedRequest {
+    key: string;
+    caller: Caller;
+    method: string;
+    /** Its path and query, as sent. */
+    uri: string;
+    body: Uint8Array;
+}
+/** How the engine answers: its refusals' envelope, a failure's answer, and whether the handler had begun. */
+export interface Answers {
+    requestId: string;
+    refusal(r: {
+        status: number;
+        code: string;
+        message: string;
+        retryAfter?: number;
+    }): Response;
+    failure(e: unknown): Response;
+    ran(): boolean;
+}
+/**
+ * Whether a route's writes take a key: a write the client itself sends the
+ * app. An @Upload route's is sent by storage, which calls it once the file is
+ * there (its route says so: meta.upload).
+ */
+export declare function takesKey(route: {
+    method: string;
+    meta: object;
+}): boolean;
+/** The key a write carries, undefined for a request it does not apply to. */
+export declare function keyOf(method: string, headers: Headers): string | undefined;
+/** The key as its caller's: two callers' same key are two rows, and neither can take — or block for a day — the other's. */
+export declare function recordKey(caller: Caller, key: string): string;
+/** What makes two requests the same one: what they do, to what, who asks, and with what. */
+export declare function fingerprint(r: KeyedRequest): string;
+/**
+ * What a key's row says of a request that finds it: another request's
+ * (reused), its answer to send again (replay), or a claim still running —
+ * taken over if it went stale.
+ */
+export declare function verdictOf(row: Pick<Row, 'fingerprint' | 'completed_at'>, fp: string): 'reused' | 'replay' | 'running';
+/**
+ * Whether an answer is kept against its key once the request failed: one
+ * that settles it (not a 5xx, a 429, a 499), given by the handler — what was
+ * answered before it ran is not, and the retry runs afresh.
+ */
+export declare function keeps(status: number, ran: boolean): boolean;
+/** The Idempotency-Key a route's @Headers schema declares, if it does: the framework reads that header on every keyed write. */
+export declare function declaresKey(schema: StandardSchemaV1): boolean;
+/**
+ * How a kept answer's body is kept: sealed with the project's field keys when
+ * the app encrypts a column — an answer may hold a field's value, and the
+ * table is the app's database, which encryption keeps fields out of — and
+ * opened when it is replayed.
+ */
+export interface KeptAnswers {
+    seal(body: string): string;
+    open(kept: string): Promise<string>;
+}
+export declare class IdempotencyKeys {
+    private readonly db;
+    private readonly answers;
+    constructor(db: RequestDatabases, answers?: KeptAnswers);
+    /** A keyed write: its first answer again, a refusal, or `run` under its claim — the answer written by `record` in the request's transaction. */
+    serve(r: KeyedRequest, run: (record: (built: Response) => Promise<Response>) => Promise<Response>, answers: Answers): Promise<Response>;
+    /**
+     * The rows a day old, taken away: now and then before a claim, in a
+     * transaction of its own — a sweep that fails, or waits on a row, costs no
+     * write its key.
+     */
+    sweep(): Promise<number>;
+    private begin;
+    private record;
+    private keep;
+    /**
+     * Frees the key of a request that failed, so its retry runs — at once,
+     * before the failure is answered. When the database is what failed it may
+     * refuse this too, and a claim left standing makes every retry wait out
+     * StaleAfter on top of the outage: tried again in the background until the
+     * database takes it, or the claim is stale anyway.
+     */
+    private release;
+    private releaseOnce;
+    private asService;
+}
+export {};

package/types/backend/src/index.d.ts

@@ -1,6 +1,7 @@
 import 'reflect-metadata';
 export { Body, Client, Controller, Delete, Get, getRegisteredControllers, getRoutes, Headers, Cron, Injectable, Module, On, OptionalUser, Param, Patch, Post, Put, Query, QueryParams, Req, RequestId, Resolve, TraceId, User, Webhook, type AuthConfig, type AuthSpec, type ControllerOptions, type EventHandler, type CronMeta, type CronOptions, type ModuleDef, type OnOptions, type ParamResolver, type RateLimitConfig, type ResolveContext, type RouteInfo, type RouteOptions, type SignatureSpec, type StandardSchemaV1, type Token, type WebhookOptions, type WebhookProvider, } from './decorators.js';
 export { Task, TaskFailure, Tasks, type EnqueueOptions, type PayloadOf, type QueuedTask, type TaskClass, type TaskMeta, type TaskOptions, type TasksService } from './tasks.js';
+export { TestUserTemplate, type TemplateMeta, type TemplateUser, type TestUserTemplateClass, type TestUserTemplateOptions } from './test-user-templates.js';
 export { Upload, UploadedObject, type UploadConfig } from './upload.js';
 export { Authorize, ChatPart, Gateway, GatewayRefusal, OnConnect, OnDisconnect, OnEmpty, OnFirst, Subscribe, type GatewayAuthorizeContext, type GatewayContext, type GatewayEvents, type GatewayGrant, type GatewayMessageContext, type GatewayOptions, type GatewayUser, type PipeSource, } from './gateways.js';
 export type { GatewaysApi, GatewayTarget } from './runtime.js';

package/types/backend/src/test-user-templates.d.ts

@@ -0,0 +1,58 @@
+import type { PalbaseServer } from '../../server/src/index.js';
+export declare const TEST_USER_TEMPLATES_PATH = "/_palbase/test-user-templates";
+/** A template's name, as the platform takes it: lowercase letters, digits, '_' and '-', a letter first, at most 64. */
+export declare const TEMPLATE_NAME: RegExp;
+export interface TestUserTemplateOptions {
+    /** What `palbase auth:test-users:create --template <name>` names it by. */
+    name: string;
+}
+export interface TestUserTemplateDeclaration {
+    name: string;
+}
+/** The test user a template writes for, as the platform names it: auth made it, and says it is a test user. */
+export interface TemplateUser {
+    id: string;
+    email: string;
+}
+/** What seed() and undo() are given beside the user. */
+export interface TemplateMeta {
+    /** The app's environment variables, as it started (its keys left out). */
+    env: Record<string, string>;
+    /** The project the app belongs to (its id). */
+    environmentId: string;
+    /** The template's name. */
+    template: string;
+}
+/** A @TestUserTemplate class: seed(user, meta) writes what the screen shows, undo(user, meta) — when it has one — takes it away. */
+export type TestUserTemplateClass = abstract new (...args: never[]) => {
+    seed(user: TemplateUser, meta: TemplateMeta): unknown;
+    undo?(user: TemplateUser, meta: TemplateMeta): unknown;
+};
+/**
+ * A provider whose seed(user, meta) writes the data a test account needs —
+ * the rows behind the screen a person or an agent signs in to see — for test
+ * users alone: the platform calls it for each test user made with its name
+ * (palbase auth:test-users:create --template <name>), and the framework asks
+ * auth first that the user is a test user. It runs in one transaction, as the
+ * service role: all of it written, or none. An undo(user, meta) takes away
+ * what seed wrote that the user's deletion does not (user.deleted forgets
+ * what ownedByUser() owns). Its module lists it in its providers, as any other.
+ */
+export declare function TestUserTemplate(options: TestUserTemplateOptions): ClassDecorator;
+/** What the platform's call names, or why it is not one: the template the path names, and its test user. */
+export declare function templateCallOf(name: string, body: unknown): {
+    user: TemplateUser;
+} | string;
+/**
+ * Whether auth says the user is a test user: false for one it does not say
+ * is, or does not know (404). Anything else — auth not answering — throws: a
+ * template is never run, nor refused, on a guess.
+ */
+export declare function isTestUser(server: PalbaseServer, id: string): Promise<boolean>;
+/**
+ * The rows the transaction wrote, by table — public's by name, any other
+ * schema's as <schema>.<table> — as Postgres counts them for it
+ * (pg_stat_xact_user_tables: its inserts and updates). An app with no
+ * database wrote none.
+ */
+export declare function rowsWritten(database: object | undefined): Promise<Record<string, number>>;

package/types/internal/src/modules/auth.d.ts

@@ -627,7 +627,7 @@ export type AdminUserImportError = {
  */
 export type AdminUserImportHash = {
     /**
-     * palbase-argon2id: Argon2id (PHC string) over HMAC-SHA256(pepper, secret) — Palbase's own scheme, before and now.
+     * palbase-argon2id: Argon2id (PHC string) over HMAC-SHA256(pepper, secret) — Palbase's own scheme.
      */
     algorithm: "palbase-argon2id";
     /**
@@ -635,7 +635,7 @@ export type AdminUserImportHash = {
      */
     pepper: string;
     /**
-     * What the source put before a recovery code it hashed (the platform before used palauth-rc:). This platform's own, palbase-rc:, when absent.
+     * What the source put before a recovery code it hashed. This platform's own, palbase-rc:, when absent.
      */
     recovery_code_prefix?: string;
 };
@@ -1014,13 +1014,17 @@ export type AuthSettings = {
      */
     risk_strict_step_up: number;
     /**
-     * The changes to how an account signs in that its user is mailed about, each with its own template (auth.security_<kind>): a password changed, the email address changed (told to the address the account had), a provider linked or unlinked, a second factor added or removed, a passkey added or removed. None by default, as Supabase's. Mail goes to a confirmed address only, in the user's locale.
+     * The changes to how an account signs in that its user is mailed about, each with its own template (auth.security_<kind>): a password changed, the email address changed (told to the address the account had), a provider linked or unlinked, a second factor added or removed, a passkey added or removed. By default a second factor or a passkey added or removed (mfa_factor_enrolled, mfa_factor_removed, passkey_added, passkey_removed); the others as the project chooses. Mail goes to a confirmed address only, in the user's locale.
      */
     security_notifications?: ("password_changed" | "email_changed" | "identity_linked" | "identity_unlinked" | "mfa_factor_enrolled" | "mfa_factor_removed" | "passkey_added" | "passkey_removed")[];
     /**
      * Bind each session to the device it was opened on: a refresh from another device fingerprint, browser or operating system ends the session; a network change is recorded in the audit log. Default false.
      */
     session_device_binding?: boolean;
+    /**
+     * Let clients create new users — the project's sign-up switch. Default true; off, every way a client opens an account answers 403 `signups_closed`: `POST /auth/signup`, a passkey signup, a guest, a phone's first code and a provider's first sign-in. Accounts sign in as before, and the admin API (`POST /admin/users`, imports, test users) still creates users.
+     */
+    signups_enabled?: boolean;
     /**
      * Base URL for the links in auth emails (reset, verify, magic link). Empty: the Palbase-hosted default.
      */
@@ -1093,13 +1097,17 @@ export type AuthSettingsUpdateRequest = {
      */
     risk_strict_step_up?: number;
     /**
-     * The changes to how an account signs in that its user is mailed about, each with its own template (auth.security_<kind>): a password changed, the email address changed (told to the address the account had), a provider linked or unlinked, a second factor added or removed, a passkey added or removed. None by default, as Supabase's. Mail goes to a confirmed address only, in the user's locale. Present (even []) replaces the kinds; absent keeps them.
+     * The changes to how an account signs in that its user is mailed about, each with its own template (auth.security_<kind>): a password changed, the email address changed (told to the address the account had), a provider linked or unlinked, a second factor added or removed, a passkey added or removed. By default a second factor or a passkey added or removed (mfa_factor_enrolled, mfa_factor_removed, passkey_added, passkey_removed); the others as the project chooses. Mail goes to a confirmed address only, in the user's locale. Present (even []) replaces the kinds; absent keeps them.
      */
     security_notifications?: ("password_changed" | "email_changed" | "identity_linked" | "identity_unlinked" | "mfa_factor_enrolled" | "mfa_factor_removed" | "passkey_added" | "passkey_removed")[];
     /**
      * Bind each session to the device it was opened on: a refresh from another device fingerprint, browser or operating system ends the session; a network change is recorded in the audit log. Default false.
      */
     session_device_binding?: boolean;
+    /**
+     * Let clients create new users — the project's sign-up switch. Default true; off, every way a client opens an account answers 403 `signups_closed`: `POST /auth/signup`, a passkey signup, a guest, a phone's first code and a provider's first sign-in. Accounts sign in as before, and the admin API (`POST /admin/users`, imports, test users) still creates users.
+     */
+    signups_enabled?: boolean;
     /**
      * Absolute http(s) URL without a fragment, at most 2048 characters; empty clears it.
      */
@@ -3160,12 +3168,29 @@ export type StatusSent = {
 export type StatusVerified = {
     status: "verified";
 };
-export type StepUpRequest = {
-    /**
-     * Required when `method=totp`.
-     */
-    code?: string;
-    method: "totp" | "webauthn";
+/**
+ * A TOTP step-up sends its `code`; a WebAuthn step-up sends the assertion of `POST /auth/step-up/webauthn/begin`'s ceremony at the top level of the same body.
+ *
+ */
+export type StepUpRequest = StepUpTOTPRequest | StepUpWebAuthnRequest;
+export type StepUpTOTPRequest = {
+    code: string;
+    method: "totp";
+};
+/**
+ * `method` beside the PublicKeyCredential JSON a browser makes in `navigator.credentials.get()` (as `WebAuthnAssertionResponse`); all binary fields are base64url-encoded.
+ *
+ */
+export type StepUpWebAuthnRequest = {
+    authenticatorAttachment?: string;
+    clientExtensionResults?: {
+        [key: string]: unknown;
+    };
+    id: string;
+    method: "webauthn";
+    rawId: string;
+    response: WebAuthnAuthenticatorAssertionResponse;
+    type: "public-key";
 };
 export type StepUpResult = {
     access_token: string;
@@ -4521,7 +4546,7 @@ export declare function client(t: Transport): {
      *
      * Opens a guest account and its session: an account with no address, password or credential, whose id stays when it becomes an account — by `POST /auth/anonymous/convert` (an address and a password), by adding a passkey (`POST /auth/webauthn/register/begin`, with `user_name`), or by linking a provider (`POST /auth/oauth/transactions` with the guest's session). What the visitor does as a guest is kept under that id.
      *
-     * The project must have turned guests on (`anonymous_sign_ins`; 403 `anonymous_sign_ins_disabled` otherwise). Held to what holds signup: the project's user ceiling (403 `signups_closed`), proof of work (403 `pow_required`, with the challenge), the risk engine and the project's `before.user.create` hook (told `is_anonymous`) — and to 30 guests an hour from one address (429). The access token carries `is_anonymous: true`; a native client that sends a DPoP proof gets the session and its tokens bound to that key, as a sign-in does. Send an `Idempotency-Key`: a retry then gets the same guest back, not a second one.
+     * The project must have turned guests on (`anonymous_sign_ins`; 403 `anonymous_sign_ins_disabled` otherwise). Held to what holds signup: the project's sign-up switch and user ceiling (`signups_enabled`, 403 `signups_closed`), proof of work (403 `pow_required`, with the challenge), the risk engine and the project's `before.user.create` hook (told `is_anonymous`) — and to 30 guests an hour from one address (429). The access token carries `is_anonymous: true`; a native client that sends a DPoP proof gets the session and its tokens bound to that key, as a sign-in does. Send an `Idempotency-Key`: a retry then gets the same guest back, not a second one.
      */
     signInAnonymously(input?: {
         headers?: {
@@ -5098,7 +5123,7 @@ export declare function client(t: Transport): {
     /**
      * Complete a social sign-in
      *
-     * Finishes a sign-in with the provider's answer: signs the user in (or asks for a second factor), or links the identity. Retrying with the same body answers the same result.
+     * Finishes a sign-in with the provider's answer: signs the user in (or asks for a second factor), or links the identity. Retrying with the same body answers the same result. A first sign-in that would open an account answers 403 `signups_closed` while the project takes no new users.
      */
     socialComplete(input: {
         path: {
@@ -5119,7 +5144,7 @@ export declare function client(t: Transport): {
     /**
      * Sign in with an SMS code
      *
-     * Checks the code sent by `POST /auth/otp`. A correct code signs the phone's owner in; an unknown number gets a new account when the project allows phone sign-ups (403 `signup_disabled` otherwise). A user with a second factor enrolled gets the `mfa_required` envelope instead of tokens and finishes with `mfa_token` at `/auth/mfa/*`. Codes are single-use; too many wrong attempts (`otp_max_attempts`) or an expired code (`otp_expired`) means requesting a new one.
+     * Checks the code sent by `POST /auth/otp`. A correct code signs the phone's owner in; an unknown number gets a new account when the project allows phone sign-ups (403 `signup_disabled` otherwise) and takes new users at all (403 `signups_closed` otherwise). A user with a second factor enrolled gets the `mfa_required` envelope instead of tokens and finishes with `mfa_token` at `/auth/mfa/*`. Codes are single-use; too many wrong attempts (`otp_max_attempts`) or an expired code (`otp_expired`) means requesting a new one.
      */
     verifyPhoneOtp(input: {
         body: PhoneOTPVerifyRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
@@ -5411,6 +5436,8 @@ export declare function client(t: Transport): {
      * IP-based rate limiting. Pepper + Argon2id is applied server-side;
      * the plaintext password never reaches storage.
      *
+     * 403 `signups_closed` while the project takes no new users (its `signups_enabled` is off, or its user ceiling is reached).
+     *
      */
     signup(input: {
         headers?: {
@@ -5762,6 +5789,8 @@ export declare function client(t: Transport): {
      * Finish the ceremony at `/auth/webauthn/signup/finish` carrying
      * the returned `user_id` as a query parameter.
      *
+     * 403 `signups_closed` while the project takes no new users.
+     *
      */
     webauthnSignupBegin(input: {
         body: WebAuthnSignupBeginRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
@@ -5774,6 +5803,8 @@ export declare function client(t: Transport): {
      * attestation for the user returned by
      * `/auth/webauthn/signup/begin`.
      *
+     * 403 `signups_closed` while the project takes no new users.
+     *
      */
     webauthnSignupFinish(input: {
         query: {