palbase 0.14.2 → 0.16.0

package/dist/refuse/ai.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
 throw new Error("palbase/ai is for servers: it speaks with the project secret key, which never goes into a browser or a mobile app \u2014 call your backend, and let it ask the model");

package/dist/refuse/backend.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
 throw new Error("palbase/backend is a server framework: it runs on your backend, never in a browser or a mobile app \u2014 apps use palbase/web (or the native SDKs)");

package/dist/refuse/server.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
 throw new Error("palbase/server is for servers: its secret key never goes into a browser or a mobile app \u2014 apps use palbase/web (or the native SDKs) with the publishable key");

package/dist/server/index.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{a as e,b as f,c as g,d as h,e as i,f as j,g as k,h as l,i as m,j as n,k as o,l as p,m as q,n as r,o as s,p as t,q as u,r as v,s as w,t as x,u as y}from"../chunks/LUFWGH2V.js";import{a as c,b as d}from"../chunks/HHZSOYPP.js";import"../chunks/ZZNGA77G.js";import"../chunks/44ULNVPP.js";import{m as b}from"../chunks/OMK2YEDZ.js";import"../chunks/RD5JFDGQ.js";import{b as a}from"../chunks/JKWWY2LJ.js";import"../chunks/P67I4TNQ.js";import"../chunks/6NC5RYCS.js";export{o as AuthUnavailable,b as EVENT_TYPES,c as FieldError,d as Fields,a as PalbaseError,t as ReservationSettled,n as TokenError,q as TokenVerifier,f as Transit,e as TransitRefusal,g as TransitRequest,i as WebhookSignatureError,h as createServer,s as isEntitled,y as loadSecrets,v as pages,x as platformOwn,w as processOwn,r as requestAddress,p as sessionStanding,l as signatureHeader,k as verifySignature,j as verifyWebhook,m as verifyWebhookRequest,u as withReservation};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{a as e,b as f,c as g,d as h,e as i,f as j,g as k,h as l,i as m,j as n,k as o,l as p,m as q,n as r,o as s,p as t,q as u,r as v,s as w,t as x,u as y}from"../chunks/HVC5H5HY.js";import{a as c,b as d}from"../chunks/TIC3NMUT.js";import"../chunks/VTUZYTKZ.js";import"../chunks/A4YMCQOP.js";import{m as b}from"../chunks/LY7D5Q3R.js";import"../chunks/JOWAWH33.js";import{b as a}from"../chunks/EHWHP4MD.js";import"../chunks/YUBOQ3NU.js";import"../chunks/7HYPHYX5.js";export{o as AuthUnavailable,b as EVENT_TYPES,c as FieldError,d as Fields,a as PalbaseError,t as ReservationSettled,n as TokenError,q as TokenVerifier,f as Transit,e as TransitRefusal,g as TransitRequest,i as WebhookSignatureError,h as createServer,s as isEntitled,y as loadSecrets,v as pages,x as platformOwn,w as processOwn,r as requestAddress,p as sessionStanding,l as signatureHeader,k as verifySignature,j as verifyWebhook,m as verifyWebhookRequest,u as withReservation};

package/dist/server/testing.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{a,b,c,d,e}from"../chunks/WXNFMEW7.js";import"../chunks/HHZSOYPP.js";import"../chunks/P67I4TNQ.js";import"../chunks/6NC5RYCS.js";export{b as TestApiError,e as api,c as createTestApi,a as testFields,d as testRun};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{a,b,c,d,e}from"../chunks/EJHB65XA.js";import"../chunks/TIC3NMUT.js";import"../chunks/YUBOQ3NU.js";import"../chunks/7HYPHYX5.js";export{b as TestApiError,e as api,c as createTestApi,a as testFields,d as testRun};

package/dist/web/index.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{a as M,b as j,c as q,d as G,e as N,f as U,g as D,h as H,i as J,j as B,k as F,l as K,m as W,n as X,o as Y,p as Z,q as ee}from"../chunks/4UQ4J7RV.js";import{a as _,b as Q,f as z}from"../chunks/5H7UNNH6.js";import"../chunks/7DQ76T2V.js";import"../chunks/W3OCV3QH.js";import"../chunks/PRJZTG2I.js";import{b as E,c as T,d as x,f as O,g as A,j as R,k as $,l as V,m as v,o as S}from"../chunks/ZZNGA77G.js";import"../chunks/3AENUHVO.js";import"../chunks/OMK2YEDZ.js";import"../chunks/RD5JFDGQ.js";import{b as L}from"../chunks/JKWWY2LJ.js";import"../chunks/P67I4TNQ.js";import"../chunks/6NC5RYCS.js";var te="oai-events";async function ne(e){if(typeof e?.start!="function")throw new TypeError("connectVoice: start(sdp) is the round trip to the app's backend, which starts the voice (chats.voice.start) and answers { id, sdp }");let r=e.rtc??se(),t=e.signal;t?.throwIfAborted();let f=e.audio??ae(),l=e.microphone===void 0,c=e.microphone??await r.getUserMedia({audio:!0});if(t?.aborted){if(l)for(let n of c.getTracks())n.stop();throw t.reason}let o=new r.RTCPeerConnection,s=!1,u=()=>{if(!s){if(s=!0,m.close(),o.close(),l)for(let n of c.getTracks())n.stop();f.srcObject!==null&&(f.srcObject=null)}};o.addEventListener("track",n=>{f.srcObject=n.streams[0]??new MediaStream([n.track]),f.play?.()?.catch?.(()=>{})}),o.addEventListener("connectionstatechange",()=>e.onState?.(o.connectionState));for(let n of c.getAudioTracks())o.addTrack(n,c);let m=o.createDataChannel(te);m.addEventListener("message",n=>{let p=oe(n.data);p!==void 0&&e.onError?.(p)});let d=()=>u();t?.addEventListener("abort",d,{once:!0});try{await o.setLocalDescription(await o.createOffer()),t?.throwIfAborted(),await re(o,e.iceTimeoutMs??1e4,t);let n=o.localDescription?.sdp;if(!n)throw new Error("connectVoice: the peer connection made no offer");let p=await e.start(n);if(t?.throwIfAborted(),typeof p?.id!="string"||p.id===""||typeof p.sdp!="string"||p.sdp==="")throw new TypeError("connectVoice: start answered no voice \u2014 it is { id, sdp }, chats.voice.start's answer as the backend got it");return await o.setRemoteDescription({type:"answer",sdp:p.sdp}),t?.removeEventListener("abort",d),{id:p.id,peer:o,audio:f,microphone:c,get muted(){return c.getAudioTracks().every(h=>!h.enabled)},mute(h){for(let w of c.getAudioTracks())w.enabled=!h},close:u}}catch(n){throw t?.removeEventListener("abort",d),u(),t?.aborted?t.reason:n}}function re(e,r,t){return e.iceGatheringState==="complete"?Promise.resolve():t?.aborted?Promise.reject(t.reason):new Promise((f,l)=>{let c=()=>{clearTimeout(u),e.removeEventListener("icegatheringstatechange",o),t?.removeEventListener("abort",s)},o=()=>{e.iceGatheringState==="complete"&&(c(),f())},s=()=>{c(),l(t?.reason)},u=setTimeout(()=>{c(),l(new Error(`connectVoice: the network candidates were not gathered in ${r} ms`))},r);e.addEventListener("icegatheringstatechange",o),t?.addEventListener("abort",s,{once:!0})})}function oe(e){if(typeof e=="string")try{let r=JSON.parse(e);return r.type!=="error"?void 0:typeof r.error?.message=="string"?r.error.message:typeof r.error?.code=="string"?r.error.code:"the voice failed"}catch{return}}function se(){let e=globalThis;if(typeof e.RTCPeerConnection!="function"||typeof e.navigator?.mediaDevices?.getUserMedia!="function")throw new TypeError("connectVoice: this runtime has no WebRTC (RTCPeerConnection, navigator.mediaDevices): a chat's voice is a browser's");let r=e.navigator.mediaDevices;return{RTCPeerConnection:e.RTCPeerConnection,getUserMedia:t=>r.getUserMedia(t)}}function ae(){let e=globalThis.document;if(!e)throw new TypeError("connectVoice: give audio \u2014 the element the voice plays in \u2014 where there is no document");let r=e.createElement("audio");return r.autoplay=!0,r}var i=e=>typeof e=="object"&&e!==null&&!Array.isArray(e)?e:void 0;function ie(e,r,t){let f=i(i(i(e)?.components)?.schemas)??{},l=(d,n)=>{let p=new Set,h=(C,g,y)=>{let a=i(C);if(!a)return;if(typeof a.$ref=="string"){if(y.has(a.$ref)||!a.$ref.startsWith("#/components/schemas/"))return;h(f[a.$ref.slice(21)],g,new Set(y).add(a.$ref));return}if(a[E]===!0){p.add(g);return}for(let b of["anyOf","oneOf","allOf"]){let k=a[b];if(Array.isArray(k))for(let I of k)h(I,g,y)}let P=i(a.properties);if(P)for(let[b,k]of Object.entries(P))h(k,`${g}/${v(b)}`,y);i(a.items)&&h(a.items,`${g}/*`,y);for(let b of["additionalProperties","patternProperties","prefixItems"])if(a[b]!==void 0&&w(a[b],new Set(y)))throw new Error(`${t}: an encrypted field is a named property \u2014 not every key of a record, nor a tuple's place`)},w=(C,g)=>{if(Array.isArray(C))return C.some(a=>w(a,g));let y=i(C);return y?y[E]===!0?!0:typeof y.$ref=="string"&&!g.has(y.$ref)&&y.$ref.startsWith("#/components/schemas/")?(g.add(y.$ref),w(f[y.$ref.slice(21)],g)):Object.values(y).some(a=>typeof a=="object"&&a!==null&&w(a,g)):!1};return h(d,n,new Set),[...p]},c=d=>i(i(i(d)?.["application/json"])?.schema),o=[];o.push(...l(c(i(r.requestBody)?.content),"/body"));for(let d of Array.isArray(r.parameters)?r.parameters:[]){let n=i(d);if(!n)continue;let p=l(n.schema,`/query/${v(String(n.name))}`);if(p.length!==0){if(n.in!=="query")throw new Error(`${t}: ${String(n.in)} parameter ${String(n.name)} is marked encrypted \u2014 a body's or a query's field is`);if(p.some(h=>h.split("/").length!==3))throw new Error(`${t}: an encrypted query field is one of the query's own names`);o.push(...p)}}let s=i(r.responses)??{},u=Object.keys(s).filter(d=>/^2\d\d$/.test(d)).sort((d,n)=>d==="200"?-1:n==="200"?1:d.localeCompare(n)),m=u.length>0?l(c(i(s[u[0]])?.content),"/response"):[];if(o.length+m.length!==0){if(r["x-palbase-sse"]!==void 0&&m.length>0)throw new Error(`${t}: a streamed answer carries no encrypted field`);if(r["x-palbase-upload"]!==void 0)throw new Error(`${t}: an upload goes through storage, which seals nothing \u2014 it carries no encrypted field`);return{request:o,response:m}}}async function ce(e){let r=`${e.method.toUpperCase()} ${e.path}`,t=i(i(i(i(e.contract)?.paths)?.[e.path])?.[e.method.toLowerCase()]),f=t?ie(e.contract,t,r):void 0;if(!f)return{body:e.body,query:e.query,open:async s=>s};let{key:l,header:c}=await A(e.key.kid,x(e.key.publicKey),O(e.projectId,e.method,e.path,e.params??[])),o=(s,u)=>s==null?s:S(s,u,f.request,(m,d)=>R(l,m,d));return{header:c,body:await o(e.body,"/body"),query:await o(e.query,"/query"),open:s=>s===void 0?Promise.resolve(s):S(s,"/response",f.response,async(u,m)=>{if(!$(m))throw new T("unopenable",`${r}: ${u} came plain where the contract says it is encrypted`);return V(l,u,m)})}}export{D as Analytics,_ as BackendError,G as Channel,H as Consent,Z as Flags,z as GatewayError,F as InApp,J as Inbox,U as Installation,W as Notify,L as PalbaseError,X as Purchases,N as RealtimeSocket,B as SESSION_START,M as SessionChangedError,K as WebPush,ne as connectVoice,ee as createClient,ce as encryptedCall,Q as isBackendError,q as localStore,j as memoryStore,Y as redemptionToken};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{a as M,b as j,c as q,d as G,e as N,f as U,g as D,h as H,i as J,j as B,k as F,l as K,m as W,n as X,o as Y,p as Z,q as ee}from"../chunks/CFGQWDV5.js";import{a as _,b as Q,f as z}from"../chunks/NQNE5PZW.js";import"../chunks/5W7IKTRI.js";import"../chunks/QN5WMSP7.js";import"../chunks/C5PO7C6L.js";import{b as E,c as T,d as x,f as O,g as A,j as R,k as $,l as V,m as v,o as S}from"../chunks/VTUZYTKZ.js";import"../chunks/TGVFGW5G.js";import"../chunks/LY7D5Q3R.js";import"../chunks/JOWAWH33.js";import{b as L}from"../chunks/EHWHP4MD.js";import"../chunks/YUBOQ3NU.js";import"../chunks/7HYPHYX5.js";var te="oai-events";async function ne(e){if(typeof e?.start!="function")throw new TypeError("connectVoice: start(sdp) is the round trip to the app's backend, which starts the voice (chats.voice.start) and answers { id, sdp }");let r=e.rtc??se(),t=e.signal;t?.throwIfAborted();let f=e.audio??ae(),l=e.microphone===void 0,c=e.microphone??await r.getUserMedia({audio:!0});if(t?.aborted){if(l)for(let n of c.getTracks())n.stop();throw t.reason}let o=new r.RTCPeerConnection,s=!1,u=()=>{if(!s){if(s=!0,m.close(),o.close(),l)for(let n of c.getTracks())n.stop();f.srcObject!==null&&(f.srcObject=null)}};o.addEventListener("track",n=>{f.srcObject=n.streams[0]??new MediaStream([n.track]),f.play?.()?.catch?.(()=>{})}),o.addEventListener("connectionstatechange",()=>e.onState?.(o.connectionState));for(let n of c.getAudioTracks())o.addTrack(n,c);let m=o.createDataChannel(te);m.addEventListener("message",n=>{let p=oe(n.data);p!==void 0&&e.onError?.(p)});let d=()=>u();t?.addEventListener("abort",d,{once:!0});try{await o.setLocalDescription(await o.createOffer()),t?.throwIfAborted(),await re(o,e.iceTimeoutMs??1e4,t);let n=o.localDescription?.sdp;if(!n)throw new Error("connectVoice: the peer connection made no offer");let p=await e.start(n);if(t?.throwIfAborted(),typeof p?.id!="string"||p.id===""||typeof p.sdp!="string"||p.sdp==="")throw new TypeError("connectVoice: start answered no voice \u2014 it is { id, sdp }, chats.voice.start's answer as the backend got it");return await o.setRemoteDescription({type:"answer",sdp:p.sdp}),t?.removeEventListener("abort",d),{id:p.id,peer:o,audio:f,microphone:c,get muted(){return c.getAudioTracks().every(h=>!h.enabled)},mute(h){for(let w of c.getAudioTracks())w.enabled=!h},close:u}}catch(n){throw t?.removeEventListener("abort",d),u(),t?.aborted?t.reason:n}}function re(e,r,t){return e.iceGatheringState==="complete"?Promise.resolve():t?.aborted?Promise.reject(t.reason):new Promise((f,l)=>{let c=()=>{clearTimeout(u),e.removeEventListener("icegatheringstatechange",o),t?.removeEventListener("abort",s)},o=()=>{e.iceGatheringState==="complete"&&(c(),f())},s=()=>{c(),l(t?.reason)},u=setTimeout(()=>{c(),l(new Error(`connectVoice: the network candidates were not gathered in ${r} ms`))},r);e.addEventListener("icegatheringstatechange",o),t?.addEventListener("abort",s,{once:!0})})}function oe(e){if(typeof e=="string")try{let r=JSON.parse(e);return r.type!=="error"?void 0:typeof r.error?.message=="string"?r.error.message:typeof r.error?.code=="string"?r.error.code:"the voice failed"}catch{return}}function se(){let e=globalThis;if(typeof e.RTCPeerConnection!="function"||typeof e.navigator?.mediaDevices?.getUserMedia!="function")throw new TypeError("connectVoice: this runtime has no WebRTC (RTCPeerConnection, navigator.mediaDevices): a chat's voice is a browser's");let r=e.navigator.mediaDevices;return{RTCPeerConnection:e.RTCPeerConnection,getUserMedia:t=>r.getUserMedia(t)}}function ae(){let e=globalThis.document;if(!e)throw new TypeError("connectVoice: give audio \u2014 the element the voice plays in \u2014 where there is no document");let r=e.createElement("audio");return r.autoplay=!0,r}var i=e=>typeof e=="object"&&e!==null&&!Array.isArray(e)?e:void 0;function ie(e,r,t){let f=i(i(i(e)?.components)?.schemas)??{},l=(d,n)=>{let p=new Set,h=(C,g,y)=>{let a=i(C);if(!a)return;if(typeof a.$ref=="string"){if(y.has(a.$ref)||!a.$ref.startsWith("#/components/schemas/"))return;h(f[a.$ref.slice(21)],g,new Set(y).add(a.$ref));return}if(a[E]===!0){p.add(g);return}for(let b of["anyOf","oneOf","allOf"]){let k=a[b];if(Array.isArray(k))for(let I of k)h(I,g,y)}let P=i(a.properties);if(P)for(let[b,k]of Object.entries(P))h(k,`${g}/${v(b)}`,y);i(a.items)&&h(a.items,`${g}/*`,y);for(let b of["additionalProperties","patternProperties","prefixItems"])if(a[b]!==void 0&&w(a[b],new Set(y)))throw new Error(`${t}: an encrypted field is a named property \u2014 not every key of a record, nor a tuple's place`)},w=(C,g)=>{if(Array.isArray(C))return C.some(a=>w(a,g));let y=i(C);return y?y[E]===!0?!0:typeof y.$ref=="string"&&!g.has(y.$ref)&&y.$ref.startsWith("#/components/schemas/")?(g.add(y.$ref),w(f[y.$ref.slice(21)],g)):Object.values(y).some(a=>typeof a=="object"&&a!==null&&w(a,g)):!1};return h(d,n,new Set),[...p]},c=d=>i(i(i(d)?.["application/json"])?.schema),o=[];o.push(...l(c(i(r.requestBody)?.content),"/body"));for(let d of Array.isArray(r.parameters)?r.parameters:[]){let n=i(d);if(!n)continue;let p=l(n.schema,`/query/${v(String(n.name))}`);if(p.length!==0){if(n.in!=="query")throw new Error(`${t}: ${String(n.in)} parameter ${String(n.name)} is marked encrypted \u2014 a body's or a query's field is`);if(p.some(h=>h.split("/").length!==3))throw new Error(`${t}: an encrypted query field is one of the query's own names`);o.push(...p)}}let s=i(r.responses)??{},u=Object.keys(s).filter(d=>/^2\d\d$/.test(d)).sort((d,n)=>d==="200"?-1:n==="200"?1:d.localeCompare(n)),m=u.length>0?l(c(i(s[u[0]])?.content),"/response"):[];if(o.length+m.length!==0){if(r["x-palbase-sse"]!==void 0&&m.length>0)throw new Error(`${t}: a streamed answer carries no encrypted field`);if(r["x-palbase-upload"]!==void 0)throw new Error(`${t}: an upload goes through storage, which seals nothing \u2014 it carries no encrypted field`);return{request:o,response:m}}}async function ce(e){let r=`${e.method.toUpperCase()} ${e.path}`,t=i(i(i(i(e.contract)?.paths)?.[e.path])?.[e.method.toLowerCase()]),f=t?ie(e.contract,t,r):void 0;if(!f)return{body:e.body,query:e.query,open:async s=>s};let{key:l,header:c}=await A(e.key.kid,x(e.key.publicKey),O(e.projectId,e.method,e.path,e.params??[])),o=(s,u)=>s==null?s:S(s,u,f.request,(m,d)=>R(l,m,d));return{header:c,body:await o(e.body,"/body"),query:await o(e.query,"/query"),open:s=>s===void 0?Promise.resolve(s):S(s,"/response",f.response,async(u,m)=>{if(!$(m))throw new T("unopenable",`${r}: ${u} came plain where the contract says it is encrypted`);return V(l,u,m)})}}export{D as Analytics,_ as BackendError,G as Channel,H as Consent,Z as Flags,z as GatewayError,F as InApp,J as Inbox,U as Installation,W as Notify,L as PalbaseError,X as Purchases,N as RealtimeSocket,B as SESSION_START,M as SessionChangedError,K as WebPush,ne as connectVoice,ee as createClient,ce as encryptedCall,Q as isBackendError,q as localStore,j as memoryStore,Y as redemptionToken};

package/dist/web/message.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{a as i}from"../chunks/W3OCV3QH.js";import{a as e,b as s,c as t,d as p,e as o,f as a,h as r,j as n,k as y,p as M,q as l,t as g}from"../chunks/PRJZTG2I.js";import"../chunks/6NC5RYCS.js";export{n as MESSAGE_COMPONENTS,a as MESSAGE_ICONS,r as MESSAGE_SCHEMA,s as assetId,y as countdownValues,e as fontFamily,o as htmlDocument,t as prepareAssets,i as presentMessage,g as renderMessage,M as resolveMessage,l as resolveMessageWithPaths,p as unzip};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{a as i}from"../chunks/QN5WMSP7.js";import{a as e,b as s,c as t,d as p,e as o,f as a,h as r,j as n,k as y,p as M,q as l,t as g}from"../chunks/C5PO7C6L.js";import"../chunks/7HYPHYX5.js";export{n as MESSAGE_COMPONENTS,a as MESSAGE_ICONS,r as MESSAGE_SCHEMA,s as assetId,y as countdownValues,e as fontFamily,o as htmlDocument,t as prepareAssets,i as presentMessage,g as renderMessage,M as resolveMessage,l as resolveMessageWithPaths,p as unzip};

package/dist/web/palbe.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{c as e,d as r,i as t}from"../chunks/5H7UNNH6.js";import"../chunks/ZZNGA77G.js";import"../chunks/3AENUHVO.js";import"../chunks/RD5JFDGQ.js";import"../chunks/JKWWY2LJ.js";import"../chunks/P67I4TNQ.js";import"../chunks/6NC5RYCS.js";export{e as RESERVED_CLIENT_NAMES,t as __registerBackend,r as isClientName};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{c as e,d as r,i as t}from"../chunks/NQNE5PZW.js";import"../chunks/VTUZYTKZ.js";import"../chunks/TGVFGW5G.js";import"../chunks/JOWAWH33.js";import"../chunks/EHWHP4MD.js";import"../chunks/YUBOQ3NU.js";import"../chunks/7HYPHYX5.js";export{e as RESERVED_CLIENT_NAMES,t as __registerBackend,r as isClientName};

package/dist/web/paywall.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{a as f,b as d,c as m,d as u,e as A,f as c,g as R}from"../chunks/7DQ76T2V.js";import{a as e,b as a,c as t,d as l,e as r,f as o,g as p,i as y,k as s,l as P,n,o as i,s as w}from"../chunks/PRJZTG2I.js";import"../chunks/JKWWY2LJ.js";import"../chunks/P67I4TNQ.js";import"../chunks/6NC5RYCS.js";export{y as PAYWALL_COMPONENTS,o as PAYWALL_ICONS,p as PAYWALL_SCHEMA,c as Paywall,a as assetId,f as attributesHeader,s as countdownValues,R as defaultPaywall,e as fontFamily,u as formatPeriod,m as formatPrice,r as htmlDocument,A as packageValues,P as packagesOf,d as parseDuration,t as prepareAssets,w as renderPaywall,n as resolvePaywall,i as resolvePaywallWithPaths,l as unzip};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{a as f,b as d,c as m,d as u,e as A,f as c,g as R}from"../chunks/5W7IKTRI.js";import{a as e,b as a,c as t,d as l,e as r,f as o,g as p,i as y,k as s,l as P,n,o as i,s as w}from"../chunks/C5PO7C6L.js";import"../chunks/EHWHP4MD.js";import"../chunks/YUBOQ3NU.js";import"../chunks/7HYPHYX5.js";export{y as PAYWALL_COMPONENTS,o as PAYWALL_ICONS,p as PAYWALL_SCHEMA,c as Paywall,a as assetId,f as attributesHeader,s as countdownValues,R as defaultPaywall,e as fontFamily,u as formatPeriod,m as formatPrice,r as htmlDocument,A as packageValues,P as packagesOf,d as parseDuration,t as prepareAssets,w as renderPaywall,n as resolvePaywall,i as resolvePaywallWithPaths,l as unzip};

package/dist/web/push-sw.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
 "use strict";(()=>{function f(e,s){if(e)try{let i=new URL(e,s);if(i.protocol==="https:"||i.protocol==="http:"&&(i.hostname==="localhost"||i.hostname==="127.0.0.1"))return i.href}catch{}}function g(e){let s=new URL(e.location.href).searchParams,i=s.get("url")??"",l=s.get("key")??"",r=(n,t)=>!n||!i?Promise.resolve():e.fetch(`${i.replace(/\/$/,"")}/notify/receipts`,{method:"POST",headers:{"content-type":"application/json",apikey:l},body:JSON.stringify({receipts:[{receipt:n,status:t}]}),keepalive:!0}).catch(()=>{}),a=async(n,t)=>{for(let o of await e.clients.matchAll({type:"window",includeUncontrolled:!0}))o.postMessage({type:"palbase.push",event:n,url:t.url,data:t.data})};e.addEventListener("push",(n=>{let t={};try{t=n.data?.json()??{}}catch{}let o={url:t.url,receipt:t.receipt,data:t.data};n.waitUntil(e.registration.showNotification(t.title??"",{body:t.body,image:t.image,tag:t.tag,data:o}).then(()=>Promise.all([r(t.receipt,"delivered"),a("received",o)])))})),e.addEventListener("notificationclick",(n=>{n.notification.close();let t=n.notification.data??{},o=f(t.url,e.location.origin),c=async()=>{if(!o)return;let d=(await e.clients.matchAll({type:"window",includeUncontrolled:!0})).find(u=>u.url===o);d?await d.focus():await e.clients.openWindow(o)};n.waitUntil(Promise.all([r(t.receipt,"opened"),c(),a("opened",t)]))})),e.addEventListener("notificationclose",(n=>{n.waitUntil(r(n.notification.data?.receipt,"dismissed"))}))}typeof self<"u"&&typeof self.registration=="object"&&!("document"in self)&&g(self);})();

package/dist/web/ssr.js

@@ -1,2 +1,2 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import{q as f}from"../chunks/4UQ4J7RV.js";import"../chunks/5H7UNNH6.js";import"../chunks/7DQ76T2V.js";import"../chunks/W3OCV3QH.js";import"../chunks/PRJZTG2I.js";import"../chunks/ZZNGA77G.js";import"../chunks/3AENUHVO.js";import"../chunks/OMK2YEDZ.js";import"../chunks/RD5JFDGQ.js";import"../chunks/JKWWY2LJ.js";import"../chunks/P67I4TNQ.js";import"../chunks/6NC5RYCS.js";var C=Object.freeze({"Cache-Control":"private, no-cache, no-store, must-revalidate, max-age=0",Expires:"0",Pragma:"no-cache"}),x={path:"/",sameSite:"lax",secure:!0,httpOnly:!1,maxAge:400*24*60*60},u=3180,k=5*6e4;function d(t){let e=/^pb_([a-z0-9]+)_c/.exec(t)?.[1];if(e===void 0)throw new TypeError("publishableKey is the project publishable key (pb_<ref>_c\u2026)");return`pb-${e}-session`}var y=t=>{let e=new TextEncoder().encode(JSON.stringify(t)),o="";for(let s of e)o+=String.fromCharCode(s);return btoa(o).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")},b=t=>{try{let e=atob(t.replace(/-/g,"+").replace(/_/g,"/")),o=JSON.parse(new TextDecoder().decode(Uint8Array.from(e,s=>s.charCodeAt(0))));return typeof o.accessToken!="string"||typeof o.refreshToken!="string"||typeof o.expiresAt!="number"||typeof o.userId!="string"?null:o}catch{return null}};function m(t,e,o={},s=!1){let c={...x,...o},g=async()=>new Map((await e.getAll()).map(n=>[n.name,n.value])),S=n=>n===t||n.startsWith(`${t}.`)&&/^\d+$/.test(n.slice(t.length+1)),h=async n=>{if(!e.setAll)return;let i=n===null?[]:n.length<=u?[[t,n]]:Array.from({length:Math.ceil(n.length/u)},(r,l)=>[`${t}.${l}`,n.slice(l*u,(l+1)*u)]),p=new Set(i.map(([r])=>r)),a=i.map(([r,l])=>({name:r,value:l,options:c}));for(let r of(await g()).keys())S(r)&&!p.has(r)&&a.push({name:r,value:"",options:{...c,maxAge:0}});a.length>0&&await e.setAll(a,{...C})};return{async load(){let n=await g(),i=n.get(t);if(i===void 0){let p="";for(let a=0;n.has(`${t}.${a}`);a++)p+=n.get(`${t}.${a}`);i=p}return i?b(i):null},save:n=>h(y(n)),clear:()=>h(null),shared:s}}function A(t){let{cookies:e,cookieOptions:o,...s}=t,c=t.refresh??(e.setAll?"before":"never");return f({...s,refresh:c,storage:m(d(t.publishableKey),e,o)})}function O(){let t=()=>{let e=globalThis.document;if(!e)throw new Error("documentCookies: there is no document here \u2014 a server gives its request's cookies to createServerClient");return e};return{getAll:()=>t().cookie.split(";").map(e=>e.trim()).filter(e=>e.includes("=")).map(e=>{let o=e.indexOf("=");return{name:e.slice(0,o),value:e.slice(o+1)}}),setAll(e){for(let o of e){let s=o.options,c=[`Path=${s.path??"/"}`,s.domain?`Domain=${s.domain}`:"",s.maxAge!==void 0?`Max-Age=${s.maxAge}`:"",s.expires?`Expires=${s.expires.toUTCString()}`:"",s.sameSite?`SameSite=${s.sameSite.charAt(0).toUpperCase()}${s.sameSite.slice(1)}`:"",s.secure?"Secure":""].filter(Boolean);t().cookie=[`${o.name}=${o.value}`,...c].join("; ")}}}}function $(t){let{cookieOptions:e,...o}=t,s=globalThis.location?.protocol==="https:";return f({...o,storage:m(d(t.publishableKey),O(),{secure:s,...e},!0)})}async function v(t){let e=await t.auth.currentSession();if(!e||(e.expiresAt-Date.now()<=k&&await t.auth.refreshSession().catch(()=>{}),!await t.auth.currentSession()))return null;try{return(await t.auth.api.verifyTokenUser()).data}catch(o){if(o.status===401)return null;throw o}}export{C as NO_STORE_HEADERS,x as SESSION_COOKIE_OPTIONS,m as cookieSessionStore,$ as createBrowserClient,A as createServerClient,O as documentCookies,v as keepSession,d as sessionCookieName};
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import{q as f}from"../chunks/CFGQWDV5.js";import"../chunks/NQNE5PZW.js";import"../chunks/5W7IKTRI.js";import"../chunks/QN5WMSP7.js";import"../chunks/C5PO7C6L.js";import"../chunks/VTUZYTKZ.js";import"../chunks/TGVFGW5G.js";import"../chunks/LY7D5Q3R.js";import"../chunks/JOWAWH33.js";import"../chunks/EHWHP4MD.js";import"../chunks/YUBOQ3NU.js";import"../chunks/7HYPHYX5.js";var C=Object.freeze({"Cache-Control":"private, no-cache, no-store, must-revalidate, max-age=0",Expires:"0",Pragma:"no-cache"}),x={path:"/",sameSite:"lax",secure:!0,httpOnly:!1,maxAge:400*24*60*60},u=3180,k=5*6e4;function d(t){let e=/^pb_([a-z0-9]+)_c/.exec(t)?.[1];if(e===void 0)throw new TypeError("publishableKey is the project publishable key (pb_<ref>_c\u2026)");return`pb-${e}-session`}var y=t=>{let e=new TextEncoder().encode(JSON.stringify(t)),o="";for(let s of e)o+=String.fromCharCode(s);return btoa(o).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")},b=t=>{try{let e=atob(t.replace(/-/g,"+").replace(/_/g,"/")),o=JSON.parse(new TextDecoder().decode(Uint8Array.from(e,s=>s.charCodeAt(0))));return typeof o.accessToken!="string"||typeof o.refreshToken!="string"||typeof o.expiresAt!="number"||typeof o.userId!="string"?null:o}catch{return null}};function m(t,e,o={},s=!1){let c={...x,...o},g=async()=>new Map((await e.getAll()).map(n=>[n.name,n.value])),S=n=>n===t||n.startsWith(`${t}.`)&&/^\d+$/.test(n.slice(t.length+1)),h=async n=>{if(!e.setAll)return;let i=n===null?[]:n.length<=u?[[t,n]]:Array.from({length:Math.ceil(n.length/u)},(r,l)=>[`${t}.${l}`,n.slice(l*u,(l+1)*u)]),p=new Set(i.map(([r])=>r)),a=i.map(([r,l])=>({name:r,value:l,options:c}));for(let r of(await g()).keys())S(r)&&!p.has(r)&&a.push({name:r,value:"",options:{...c,maxAge:0}});a.length>0&&await e.setAll(a,{...C})};return{async load(){let n=await g(),i=n.get(t);if(i===void 0){let p="";for(let a=0;n.has(`${t}.${a}`);a++)p+=n.get(`${t}.${a}`);i=p}return i?b(i):null},save:n=>h(y(n)),clear:()=>h(null),shared:s}}function A(t){let{cookies:e,cookieOptions:o,...s}=t,c=t.refresh??(e.setAll?"before":"never");return f({...s,refresh:c,storage:m(d(t.publishableKey),e,o)})}function O(){let t=()=>{let e=globalThis.document;if(!e)throw new Error("documentCookies: there is no document here \u2014 a server gives its request's cookies to createServerClient");return e};return{getAll:()=>t().cookie.split(";").map(e=>e.trim()).filter(e=>e.includes("=")).map(e=>{let o=e.indexOf("=");return{name:e.slice(0,o),value:e.slice(o+1)}}),setAll(e){for(let o of e){let s=o.options,c=[`Path=${s.path??"/"}`,s.domain?`Domain=${s.domain}`:"",s.maxAge!==void 0?`Max-Age=${s.maxAge}`:"",s.expires?`Expires=${s.expires.toUTCString()}`:"",s.sameSite?`SameSite=${s.sameSite.charAt(0).toUpperCase()}${s.sameSite.slice(1)}`:"",s.secure?"Secure":""].filter(Boolean);t().cookie=[`${o.name}=${o.value}`,...c].join("; ")}}}}function $(t){let{cookieOptions:e,...o}=t,s=globalThis.location?.protocol==="https:";return f({...o,storage:m(d(t.publishableKey),O(),{secure:s,...e},!0)})}async function v(t){let e=await t.auth.currentSession();if(!e||(e.expiresAt-Date.now()<=k&&await t.auth.refreshSession().catch(()=>{}),!await t.auth.currentSession()))return null;try{return(await t.auth.api.verifyTokenUser()).data}catch(o){if(o.status===401)return null;throw o}}export{C as NO_STORE_HEADERS,x as SESSION_COOKIE_OPTIONS,m as cookieSessionStore,$ as createBrowserClient,A as createServerClient,O as documentCookies,v as keepSession,d as sessionCookieName};

package/dist/web/vite.js

@@ -1,3 +1,3 @@
-/*! palbase 0.14.2 — Palbase SDK License (see LICENSE) */
-import"../chunks/6NC5RYCS.js";import{execFile as $}from"node:child_process";import{existsSync as y,mkdtempSync as k,readFileSync as S,rmSync as x,writeFileSync as P}from"node:fs";import{createRequire as O}from"node:module";import{tmpdir as W}from"node:os";import{dirname as g,join as o,relative as u,resolve as v,sep as d}from"node:path";var E=/\.(?:ts|js|mts|mjs)$/;function F(n){if(!/^[a-z][a-z0-9-]*$/.test(n.app))throw new TypeError(`palbase({ app }): ${JSON.stringify(n.app)} is an app's slug (palbase apps:list)`);let c=process.cwd(),p="",i="",f=()=>v(c,n.dir??"palbase"),m=()=>{let e=n.environments[p];if(!e)throw new Error(`palbase: the mode "${p}" is not built against any environment \u2014 say which in vite.config: palbase({ environments: { ${JSON.stringify(p)}: '<environment slug>' } })`);return e};return{name:"palbase",enforce:"pre",config(e,s){p=s.mode,i=s.command??"";let r=e.build?.rollupOptions?.onwarn;return{build:{rollupOptions:{onwarn(t,a){let l=String(t.exporter??t.id??"");if(t.code==="MISSING_EXPORT"&&l.includes(`${d}environments${d}`))throw new Error(`palbase: ${t.message} \u2014 ${m()}'s backend has no such route (palbase apps:sync brings what it has)`);r?r(t,a):a(t)}}}}},configResolved(e){c=e.root,p=e.mode,i=e.command??i},async buildStart(){i!=="build"||n.typecheck===!1||await j(c,m(),n.tsconfig)},resolveId(e,s){if(!s)return null;let r=f();if(e==="palbase"||e.startsWith("palbase/")){let w=u(r,s);return w.startsWith("..")||w===""?null:this.resolve(e,o(c,"index.html"),{skipSelf:!0})}if(!(e.startsWith(".")||e.startsWith("/")))return null;let t=v(g(s),e);if(E.test(t)||(t+=".ts"),g(t)!==r&&g(t)!==o(r,"palbe"))return null;let a=u(r,t),l=`${n.app}.ts`;if(a!==l&&!a.startsWith(`palbe${d}`))return null;let h=m(),b=o(r,"environments",h,a===l?l:o("palbe",a.slice(`palbe${d}`.length)));if(!y(b))throw new Error(`palbase: ${u(c,b)} is not there \u2014 palbase apps:sync writes it (is ${n.app} set in ${h}, and has ${h} that machine?)`);return b}}}async function j(n,c,p){let i=p?v(n,p):["tsconfig.app.json","tsconfig.json"].map(e=>o(n,e)).find(y);if(!i)return;if(!y(i))throw new Error(`palbase({ tsconfig }): ${u(n,i)} is not there`);let f;try{let e=O(o(n,"package.json")).resolve("typescript/package.json"),s=JSON.parse(S(e,"utf8")).bin?.tsc;if(!s)throw new Error("no tsc");f=o(g(e),s)}catch{throw new Error("palbase: the build type-checks the app against its environment with the app's TypeScript, and the app has none (npm i -D typescript) \u2014 or say palbase({ typecheck: false })")}let m=k(o(W(),"palbase-typecheck-"));try{let e=o(m,"tsconfig.json");P(e,JSON.stringify({extends:i,compilerOptions:{noEmit:!0,composite:!1,incremental:!1,moduleSuffixes:[`.${c}`,""]}}));let s=await new Promise(r=>$(process.execPath,[f,"-p",e,"--pretty","false"],{cwd:n,maxBuffer:16<<20},(t,a,l)=>r({code:t?typeof t.code=="number"?t.code:1:0,text:`${a}${l}`.trim()})));if(s.code!==0)throw new Error(`palbase: the app does not type-check against ${c}, the environment this build is made for \u2014 a route its backend does not have, or a call that does not fit it:
+/*! palbase 0.16.0 — Palbase SDK License (see LICENSE) */
+import"../chunks/7HYPHYX5.js";import{execFile as $}from"node:child_process";import{existsSync as y,mkdtempSync as k,readFileSync as S,rmSync as x,writeFileSync as P}from"node:fs";import{createRequire as O}from"node:module";import{tmpdir as W}from"node:os";import{dirname as g,join as o,relative as u,resolve as v,sep as d}from"node:path";var E=/\.(?:ts|js|mts|mjs)$/;function F(n){if(!/^[a-z][a-z0-9-]*$/.test(n.app))throw new TypeError(`palbase({ app }): ${JSON.stringify(n.app)} is an app's slug (palbase apps:list)`);let c=process.cwd(),p="",i="",f=()=>v(c,n.dir??"palbase"),m=()=>{let e=n.environments[p];if(!e)throw new Error(`palbase: the mode "${p}" is not built against any environment \u2014 say which in vite.config: palbase({ environments: { ${JSON.stringify(p)}: '<environment slug>' } })`);return e};return{name:"palbase",enforce:"pre",config(e,s){p=s.mode,i=s.command??"";let r=e.build?.rollupOptions?.onwarn;return{build:{rollupOptions:{onwarn(t,a){let l=String(t.exporter??t.id??"");if(t.code==="MISSING_EXPORT"&&l.includes(`${d}environments${d}`))throw new Error(`palbase: ${t.message} \u2014 ${m()}'s backend has no such route (palbase apps:sync brings what it has)`);r?r(t,a):a(t)}}}}},configResolved(e){c=e.root,p=e.mode,i=e.command??i},async buildStart(){i!=="build"||n.typecheck===!1||await j(c,m(),n.tsconfig)},resolveId(e,s){if(!s)return null;let r=f();if(e==="palbase"||e.startsWith("palbase/")){let w=u(r,s);return w.startsWith("..")||w===""?null:this.resolve(e,o(c,"index.html"),{skipSelf:!0})}if(!(e.startsWith(".")||e.startsWith("/")))return null;let t=v(g(s),e);if(E.test(t)||(t+=".ts"),g(t)!==r&&g(t)!==o(r,"palbe"))return null;let a=u(r,t),l=`${n.app}.ts`;if(a!==l&&!a.startsWith(`palbe${d}`))return null;let h=m(),b=o(r,"environments",h,a===l?l:o("palbe",a.slice(`palbe${d}`.length)));if(!y(b))throw new Error(`palbase: ${u(c,b)} is not there \u2014 palbase apps:sync writes it (is ${n.app} set in ${h}, and has ${h} that machine?)`);return b}}}async function j(n,c,p){let i=p?v(n,p):["tsconfig.app.json","tsconfig.json"].map(e=>o(n,e)).find(y);if(!i)return;if(!y(i))throw new Error(`palbase({ tsconfig }): ${u(n,i)} is not there`);let f;try{let e=O(o(n,"package.json")).resolve("typescript/package.json"),s=JSON.parse(S(e,"utf8")).bin?.tsc;if(!s)throw new Error("no tsc");f=o(g(e),s)}catch{throw new Error("palbase: the build type-checks the app against its environment with the app's TypeScript, and the app has none (npm i -D typescript) \u2014 or say palbase({ typecheck: false })")}let m=k(o(W(),"palbase-typecheck-"));try{let e=o(m,"tsconfig.json");P(e,JSON.stringify({extends:i,compilerOptions:{noEmit:!0,composite:!1,incremental:!1,moduleSuffixes:[`.${c}`,""]}}));let s=await new Promise(r=>$(process.execPath,[f,"-p",e,"--pretty","false"],{cwd:n,maxBuffer:16<<20},(t,a,l)=>r({code:t?typeof t.code=="number"?t.code:1:0,text:`${a}${l}`.trim()})));if(s.code!==0)throw new Error(`palbase: the app does not type-check against ${c}, the environment this build is made for \u2014 a route its backend does not have, or a call that does not fit it:
 ${s.text}`)}finally{x(m,{recursive:!0,force:!0})}}export{F as palbase};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "palbase",
-  "version": "0.14.2",
+  "version": "0.16.0",
   "description": "Palbase for JavaScript: the web client (palbase/web), the server SDK (palbase/server), the backend framework (palbase/backend), AI (palbase/ai) and the CLI (npx palbase).",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://palbase.studio",
@@ -135,7 +135,7 @@
   "dependencies": {
     "@types/node": "26.6.4",
     "bun-types": "1.4.2",
-    "palgres": "0.14.2",
+    "palgres": "0.16.0",
     "reflect-metadata": "^0.2.2",
     "typescript": "~6.0.3",
     "zod": "^4.6.5"

package/types/ai/src/ai.d.ts

@@ -7,6 +7,12 @@ import { type AgentContext, type BackendAgent, type BackendAgentOptions, type Ba
 type Module = ReturnType<typeof modules.ai.client>;
 export type Response = Awaited<ReturnType<Module['getResponse']>>['data'];
 export type Usage = Awaited<ReturnType<Module['listUsage']>>['data']['usage'][number];
+/**
+ * What the project's use of Palbase's models (the platform's provider keys) cost this month, and what it may still
+ * spend: the free dollar a month brings and what is left of it, the monthly budget, and whether they serve the
+ * project now — and if not, why (reason).
+ */
+export type Spend = modules.ai.Spend;
 export type Models = modules.ai.Models;
 /** A text model a turn may name, as the engine's catalogue says it (ai.models().chat). */
 export type ChatModel = modules.ai.ChatModel;
@@ -224,7 +230,8 @@ export interface AI {
     /**
      * Uses of models and their cost, newest first. Each carries its labels (metadata): its caller's — and a chat's turn
      * the chat's labels and the chat (chat). With metadata, only the uses that carry every one of those labels: a
-     * product's spend, a task's — a deleted chat's too.
+     * product's spend, a task's — a deleted chat's too. A use whose tokens are in part an estimate says so (estimated):
+     * a reasoning call cut before its answer, whose hidden thinking its provider never counted.
      */
     usage(options?: {
         kind?: 'text' | 'embedding' | 'image';
@@ -235,6 +242,16 @@ export interface AI {
         usage: Usage[];
         nextCursor?: string;
     }>;
+    /**
+     * The month's spend on Palbase's models (the platform's provider keys) at what it is billed, the free dollar a
+     * month brings and what is left of it (a Free project's), the monthly budget, and whether they serve the project
+     * now (platform_keys) — when not, why: its budget is spent (budget) or its free dollar is, with no balance to pay
+     * (payment). A call to them is then refused (402 ai_budget_reached, ai_payment_required) unless the project
+     * connected its own key for the model's provider (connectProvider), which its provider bills.
+     */
+    spend(options?: {
+        signal?: AbortSignal;
+    }): Promise<Spend>;
     /** Calls go out with the project's own provider key from now on. */
     connectProvider(provider: string, key: string): Promise<{
         name: string;

package/types/ai/src/chats.d.ts

@@ -31,6 +31,14 @@ export interface AISettings {
     historyLimitBytes: number | null;
     /** How much it keeps now. */
     historyBytes: number;
+    /**
+     * The most the project spends a month on Palbase's models (the platform's provider keys), in US dollars at what it
+     * is billed; past it a call they would serve is refused (402 ai_budget_reached) until the month turns (UTC) or the
+     * budget is raised. null: none. Set by an owner or an admin of the organization, in Studio (AI › Settings) or with
+     * the CLI (palbase ai:settings:set --monthly-budget): what spends the money does not raise its own limit. The
+     * project's own provider keys are not counted: their provider bills them. ai.spend() says what is spent.
+     */
+    monthlyBudgetUsd: number | null;
 }
 export interface EndpointInput {
     /** https: a tool at that address, called with a signed POST; mcp: an MCP server (streamable HTTP). */
@@ -731,8 +739,11 @@ export interface Endpoints {
 }
 export interface Settings {
     get(): Promise<AISettings>;
-    /** A field left out is left as it is; the history kept may be lowered, not raised past the plan's. */
-    /** A field left out is left as it is; historyLimitBytes null clears the project's own limit (the plan's is kept). */
+    /**
+     * A field left out is left as it is; the history kept may be lowered, not raised past the plan's, and
+     * historyLimitBytes null clears the project's own limit (the plan's is kept). The monthly budget is not set here:
+     * the platform refuses a key's request naming it (403) — an owner or an admin sets it in Studio or with the CLI.
+     */
     put(change: {
         clients?: boolean;
         userMessagesPerMinute?: number;

package/types/ai/src/index.d.ts

@@ -1,5 +1,5 @@
 export { createAI, AIResponseError } from './ai.js';
-export type { AI, AIOptions, AgentGenerate, Ask, AskImage, AskTool, ChatModel, DeepPartial, Embed, Generate, ImageRequest, Images, Job, Message, Model, Models, ObjectStream, Picture, Response, Schema, TextStream, Uploader, Usage, } from './ai.js';
+export type { AI, AIOptions, AgentGenerate, Ask, AskImage, AskTool, ChatModel, DeepPartial, Embed, Generate, ImageRequest, Images, Job, Message, Model, Models, ObjectStream, Picture, Response, Schema, Spend, TextStream, Uploader, Usage, } from './ai.js';
 export { AISchemaError, prepare } from './schema.js';
 export { ToolError } from './tools.js';
 export type { Infer, StandardSchema } from './schema.js';

package/types/backend/src/decorators.d.ts

@@ -28,6 +28,14 @@ export type StandardResult<Output> = {
 export interface AuthConfig {
     required: boolean;
     verifiedEmail?: boolean;
+    /**
+     * How the user signed in, at least: 'aal2' — with a second factor (a passkey
+     * that verifies its user, an authenticator code, a step-up). A token below it
+     * is refused with 401 insufficient_user_authentication and WWW-Authenticate's
+     * acr_values (RFC 9470): the app steps the user up and calls again. Implies
+     * a signed-in user.
+     */
+    aal?: 'aal1' | 'aal2' | 'aal3';
     /**
      * Palbase checks no role or permission: a route naming one is refused at
      * boot, so none runs believing it was checked — check the role in the service.
@@ -43,11 +51,23 @@ export interface RateLimitConfig {
 }
 export interface ControllerOptions {
     auth?: AuthSpec;
+    /** Every route of the controller asks for device attestation (RouteOptions.attest), unless a route says false. */
+    attest?: boolean;
 }
 export interface RouteOptions {
     auth?: AuthSpec;
     /** A limit for this route; false for none. */
     rateLimit?: RateLimitConfig | false;
+    /**
+     * Only the app's own build on a genuine device calls this route: App Attest
+     * on iOS, a Keystore key attested by Google on Android — Palbase's iOS and
+     * Android SDKs attach the proof by themselves. Whether it is asked is the
+     * environment's switch (Studio's Device trust, app_attest_mode): off,
+     * monitor (verified and counted, nobody refused) or enforce (a call without
+     * a proof that verifies is refused: 401 app_attest_required). A browser
+     * cannot attest: under enforce, a web app's calls to the route are refused.
+     */
+    attest?: boolean;
 }
 export type ParamKind = 'body' | 'query' | 'param' | 'user' | 'optionalUser' | 'headers' | 'req' | 'requestId' | 'client' | 'resolve' | 'uploadedObject';
 export interface ParamMeta {

package/types/backend/src/engine.d.ts

@@ -14,6 +14,15 @@ export interface UserT {
     sessionId: string | null;
     /** A test user of the project (made with its secret key; the token says test: true). */
     test: boolean;
+    /**
+     * How the user signed in, as the token says (acr): 'aal1' a first factor alone, 'aal2' with a second one (a passkey that
+     * verified its user, an authenticator code, a step-up) — null where no token says it (a platform's call naming the user).
+     */
+    acr: 'aal1' | 'aal2' | 'aal3' | null;
+    /** The methods the sign-in used (amr: pwd, otp, hwk, …), as the token says; empty where none says it. */
+    amr: string[];
+    /** When the user signed in, in Unix seconds (auth_time) — a step-up moves it; null where no token says it. */
+    authTime: number | null;
 }
 export interface ClientInfo {
     sdkVersion: string | null;

package/types/backend/src/openapi.d.ts

@@ -9,9 +9,12 @@ export interface RouteFacts {
     auth: {
         required: boolean;
         verifiedEmail: boolean;
+        aal: 'aal1' | 'aal2' | 'aal3';
     };
     /** The limit the route spends, or false when it has none. */
     limit: RateLimitConfig | false;
+    /** The route asks for the device's attestation (when the environment's switch is on). */
+    attest: boolean;
 }
 export interface ContractOptions {
     /** The app's database runs each request as its caller's identity (or keeps its claims). */

package/types/backend/src/router.d.ts

@@ -11,6 +11,8 @@ export interface Route {
     params: ParamMeta[];
     meta: RouteMeta;
     controllerAuth: AuthSpec | undefined;
+    /** The controller's attest: true, which a route's own option overrides. */
+    controllerAttest: boolean | undefined;
 }
 export declare function routeTable(controllers: Function[]): Route[];
 export type Match = {

package/types/internal/src/modules/ai.d.ts

@@ -1775,6 +1775,10 @@ export type Settings = {
      * How much chat history the project keeps; a message past it is refused (history_full) until chats are deleted. A free project keeps 500 MiB at most; null: no fixed limit — a project with paid rights keeps all of it, paid by use, unless it says a limit of its own.
      */
     history_limit_bytes: number | null;
+    /**
+     * The most the project spends a month on Palbase's models (the platform's provider keys), in US dollars at what it is billed; past it a call they would serve is refused (402 ai_budget_reached) until the month turns (UTC) or the budget is raised, and the organization's owners are emailed once. null: none. The project's own provider keys are not counted: their provider bills them.
+     */
+    monthly_budget_usd: number | null;
     /**
      * How many messages one user sends a minute (default 20).
      */
@@ -1792,11 +1796,60 @@ export type SettingsRequest = {
      * A limit of the project's own: a free project at most the plan's 500 MiB (it may keep less, not more), a project with paid rights at most 1 TiB. null clears it: the plan's is kept (free: 500 MiB; with paid rights: none).
      */
     history_limit_bytes?: number | null;
+    /**
+     * A monthly budget for Palbase's models, in US dollars (cents at most): 0.01 to 1000000. null takes it away. Set by an owner or an admin of the project's organization, in Studio or with the CLI; a key's or a token's request naming it is refused (403): what spends the money does not raise its own limit.
+     */
+    monthly_budget_usd?: number | null;
     /**
      * 1 to 600.
      */
     user_messages_per_minute?: number;
 };
+/**
+ * What the project's use of Palbase's models (the platform's provider keys) has cost this month, and what it may still spend. A month brings a dollar of it free: a Free project's own, a paying account's once for all its projects. Past it a Free project uses its own provider keys; a Pay as you go one pays from its balance, at the provider's price and 10%.
+ */
+export type Spend = {
+    /**
+     * What is left of a Free project's free dollar this month; null on a paying one (its account's free dollar is its bill's).
+     */
+    free_left_usd: number | null;
+    /**
+     * Whose the free dollar is: the project's own (project) or its account's, all its projects together (account).
+     */
+    free_scope: "project" | "account";
+    /**
+     * The month's free use of Palbase's models, in US dollars.
+     */
+    free_usd: number;
+    /**
+     * The month (UTC, YYYY-MM).
+     */
+    month: string;
+    /**
+     * The budget the project's owners set (null: none).
+     */
+    monthly_budget_usd: number | null;
+    /**
+     * free (no paid rights: its free dollar, then its own keys), pay_as_you_go (its account's balance pays past the free dollar) or exempt (measured, not charged).
+     */
+    plan: "free" | "pay_as_you_go" | "exempt";
+    /**
+     * Whether Palbase's models serve the project now. When not, a call to them is refused (402) unless the project connected its own key for the model's provider.
+     */
+    platform_keys: boolean;
+    /**
+     * Why Palbase's models serve it no more this month: budget (its monthly budget is spent) or payment (its free dollar is spent and it has no payment account with a balance).
+     */
+    reason?: "budget" | "payment";
+    /**
+     * The day the month's free dollar and budget start again (UTC, YYYY-MM-DD).
+     */
+    resets_on: string;
+    /**
+     * The month's use of Palbase's models, in US dollars at what it is billed (the provider's price and 10%), before the free dollar is taken off.
+     */
+    spent_usd: number;
+};
 /**
  * The turn a stop stopped.
  */
@@ -2199,6 +2252,10 @@ export type Use = {
      * When.
      */
     created_at: string;
+    /**
+     * Its tokens are in part an estimate: a reasoning call cut before its answer, whose provider never said what its hidden thinking came to, billed as the time the model thought at its measured speed, rounded down.
+     */
+    estimated: boolean;
     /**
      * The use's id.
      */
@@ -2388,7 +2445,7 @@ export type VoiceSession = {
      */
     chat_id: string;
     /**
-     * Why it ended: close_requested, member_removed, chat_deleted, replaced (its member started another), lost (the engine no longer holds it), or the provider's word.
+     * Why it ended: close_requested, member_removed, chat_deleted, replaced (its member started another), lost (the engine no longer holds it), ai_limit_reached (its project's free AI, monthly AI budget or what its account can pay is spent, and it ran on Palbase's models), or the provider's word.
      */
     close_reason?: string;
     /**
@@ -3302,12 +3359,20 @@ export declare function client(t: Transport): {
     /**
      * Change what the project allows its chats
      *
-     * A field left out is left as it is. The history kept may be lowered, not raised past the plan's.
+     * A field left out is left as it is. The history kept may be lowered, not raised past the plan's. A monthly budget is kept by Palbase's billing: on a stack that bills no AI it is refused (409 no_billing).
      */
     putSettings(input: {
         body: SettingsRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
         signal?: AbortSignal;
     }): Promise<Reply<200, Settings>>;
+    /**
+     * What the project's AI on Palbase's models costs this month
+     *
+     * The month's spend on Palbase's models at what it is billed, the free dollar a month brings and what is left of it, the monthly budget, and whether Palbase's models serve the project now — and if not, why.
+     */
+    getSpend(input?: {
+        signal?: AbortSignal;
+    }): Promise<Reply<200, Spend>>;
     /**
      * The tools an agent may be given
      *

package/types/internal/src/modules/analytics.d.ts

@@ -298,9 +298,9 @@ export type CaptureRequest = {
      */
     app_version?: string;
     /**
-     * Who did it (256 characters at most). With a user's token, the user's id instead.
+     * Who did it (256 characters at most). With a user's token, the user's id instead; with user_id, the user's id. Required unless user_id names the user.
      */
-    distinct_id: string;
+    distinct_id?: string;
     /**
      * The event's name: a letter or $, then letters, digits and _.:-$; 64 at most.
      */
@@ -323,6 +323,10 @@ export type CaptureRequest = {
      * Unix milliseconds on the device's clock.
      */
     timestamp?: number;
+    /**
+     * The user whose event it is: the project's server alone names one (its secret key) — their own event, as their app sends it signed in, on their timeline and acted on by their journeys. An app's event is its signed-in user's; one that names user_id is refused (invalid_user_id).
+     */
+    user_id?: string;
 };
 /**
  * Every event a project's timelines can hold: the platform modules', and those its apps and backend sent in the window.

package/types/internal/src/modules/auth.d.ts

@@ -790,7 +790,7 @@ export type AssetLinkTarget = {
  */
 export type AssetLinks = AssetLinkStatement[];
 /**
- * One request's App Attest evidence and the request it claims to be bound to.
+ * One request's device attestation evidence (App Attest on iOS, a Keystore signature on Android) and the request it claims to be bound to.
  */
 export type AttestAssertionCheck = {
     /**
@@ -812,11 +812,11 @@ export type AttestAssertionCheck = {
      */
     path?: string;
     /**
-     * authenticatorData (37 bytes) followed by clientDataHash (32 bytes), base64.
+     * iOS: authenticatorData (37 bytes) followed by clientDataHash (32 bytes). Android: 0x01, the device's counter (8 bytes, big-endian) and clientDataHash (32 bytes). Base64.
      */
     payload?: string;
     /**
-     * DER-encoded ECDSA signature, base64.
+     * DER-encoded ECDSA signature, base64: App Attest's on iOS; on Android, ECDSA-SHA256 over the payload by the enrolled key.
      */
     signature?: string;
 };
@@ -846,9 +846,17 @@ export type AttestObservationBatch = {
     incapable?: number;
     no_sdk?: number;
     unknown?: number;
+    /**
+     * Requests with evidence that verified: they pass under enforce.
+     */
+    verified?: number;
+    /**
+     * Requests with evidence that would be refused under enforce.
+     */
+    refused?: number;
 };
 /**
- * What the customer runtime saw in the window, by device capability, and the mode in force.
+ * What the customer runtime saw in the window: callers by device capability, what the evidence it verified came to, and the mode in force.
  */
 export type AttestObservationSummary = {
     capable: number;
@@ -856,6 +864,14 @@ export type AttestObservationSummary = {
     mode: "off" | "monitor" | "enforce";
     no_sdk: number;
     unknown: number;
+    /**
+     * Requests with evidence that verified: they pass under enforce.
+     */
+    verified: number;
+    /**
+     * Requests with evidence that would be refused under enforce.
+     */
+    refused: number;
 };
 export type AttestPolicy = {
     mode: "off" | "monitor" | "enforce";
@@ -1454,18 +1470,18 @@ export type Device = {
     trusted: boolean;
 };
 /**
- * A Play Integrity verdict to enrol an Android device with.
+ * An Android Keystore key's attestation to verify.
  */
 export type DeviceAttestAndroidRequest = {
-    device_name?: string;
     /**
-     * The app's package name, whose Play Console project issued the token.
+     * The key's attestation certificate chain from `KeyStore.getCertificateChain`, leaf first, each certificate DER in base64.
      */
-    package_name: string;
+    certificate_chain: string[];
     /**
-     * The Play Integrity token.
+     * The challenge from `POST /auth/devices/challenge`, base64, exactly as received.
      */
-    verdict_token: string;
+    challenge: string;
+    device_name?: string;
 };
 /**
  * An App Attest attestation to verify.
@@ -4625,11 +4641,14 @@ export declare function client(t: Transport): {
         signal?: AbortSignal;
     }): Promise<Reply<200, DeviceList>>;
     /**
-     * Enrol an Android device with Play Integrity
+     * Enrol an Android device with Key Attestation
      *
-     * Decodes a Play Integrity verdict token for the named package and, when the verdict passes, stores the device as verified under the signed-in user. A verdict that fails is refused with 403 and its reason (`emulator_detected`, `device_integrity_failed`) and stores nothing. A token this project cannot decode answers 400 `invalid_verdict_token`. 409 `play_integrity_not_configured`: this project has no Play Integrity integration. 503 `integrity_service_unavailable`: Google could not be reached; retry after `Retry-After`. The device has no key yet: bind the app's key with `POST /auth/devices/bind`.
+     * Verifies an Android Keystore key's attestation and stores the key as a verified device, so the device can sign its requests to a backend route that requires attestation. The app generates an EC P-256 signing key in the Android Keystore with the challenge from `POST /auth/devices/challenge` as its attestation challenge and sends the key's certificate chain. The chain must end in one of Google's hardware attestation roots with no certificate on Google's revocation list; the key must be in the TEE or StrongBox and generated there; the device must be locked with a verified boot; and the attesting app's package and signing certificate must be those of an Android app registered with this environment. No session is required: with a valid user token the device is enrolled under that user, otherwise under the installation anchor in `X-Palbase-Installation-Anchor` (the anchor the challenge was issued for). A caller with neither is refused with 401. The challenge is spent by this call. 400: the request cannot be evaluated (`missing_fields`, `invalid_certificate_chain`, `invalid_challenge` — not issued for this anchor or already spent, `invalid_installation_anchor`). 403: the chain was evaluated and refused, the reason being the code (`untrusted_root`, `software_key` — an emulator or a software keystore, `device_not_locked`, `unverified_boot`, `package_mismatch`, `signature_mismatch`, `certificate_revoked`, `certificate_expired`, `challenge_mismatch`, `key_not_generated`, `invalid_key`). 409 `android_app_not_configured`: no Android app is registered with this environment. 503: the challenge store (`challenge_unavailable`) or Google's revocation list (`revocation_list_unavailable`) cannot be reached; retry after `Retry-After`. Rate limited per IP address.
      */
     attestAndroidDevice(input: {
+        headers?: {
+            "X-Palbase-Installation-Anchor"?: string;
+        };
         body: DeviceAttestAndroidRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
         signal?: AbortSignal;
     }): Promise<Reply<200, Device>>;
@@ -4648,7 +4667,7 @@ export declare function client(t: Transport): {
     /**
      * Bind a public key to a device
      *
-     * Stores the signing key of one of the signed-in user's devices — once. The device must be `verified` and have no key yet: an Android device after `POST /auth/devices/attest/android`, whose Play Integrity verdict certifies no key. A device that already has a key (every App Attest device: attestation establishes its key) answers 409 `device_key_bound`; to use a new key, enrol a new device and delete the old one. A device that is not verified answers 400 `device_not_verified`. `public_key` must be a DER SubjectPublicKeyInfo holding an ECDSA key, or the call answers 400 `invalid_public_key`.
+     * Stores the signing key of one of the signed-in user's devices — once. The device must be `verified` and have no key yet. A device that already has a key — every device enrolled with App Attest or Android Key Attestation: enrolment establishes its key — answers 409 `device_key_bound`; to use a new key, enrol a new device and delete the old one. A device that is not verified answers 400 `device_not_verified`. `public_key` must be a DER SubjectPublicKeyInfo holding an ECDSA key, or the call answers 400 `invalid_public_key`.
      */
     bindDeviceKey(input: {
         body: DeviceBindRequest; /** Stops the call: the request in flight, a wait before a retry, a proof-of-work being solved. */
@@ -4657,7 +4676,7 @@ export declare function client(t: Transport): {
     /**
      * Get a single-use enrolment challenge
      *
-     * Issues a single-use challenge, valid for 5 minutes, that the device embeds in its App Attest attestation and sends back to `POST /auth/devices/attest/ios`. No session is required. When a valid user token is sent, the challenge is scoped to that user; otherwise it is scoped to the installation anchor in `X-Palbase-Installation-Anchor`. A caller with neither gets a freshly minted anchor in `installation_anchor` and must send it back in `X-Palbase-Installation-Anchor` on the attest call. An anchor header that is not an issued `ins_…` anchor answers 400 `invalid_installation_anchor`. Rate limited per IP address. Takes no request body.
+     * Issues a single-use challenge, valid for 5 minutes, that the device embeds in its attestation — App Attest's, or an Android Keystore key's — and sends back to `POST /auth/devices/attest/ios` or `POST /auth/devices/attest/android`. No session is required. When a valid user token is sent, the challenge is scoped to that user; otherwise it is scoped to the installation anchor in `X-Palbase-Installation-Anchor`. A caller with neither gets a freshly minted anchor in `installation_anchor` and must send it back in `X-Palbase-Installation-Anchor` on the attest call. An anchor header that is not an issued `ins_…` anchor answers 400 `invalid_installation_anchor`. Rate limited per IP address. Takes no request body.
      */
     createDeviceChallenge(input?: {
         headers?: {