@lunora/codegen 1.0.0-alpha.319 → 1.0.0-alpha.320

package/dist/packem_shared/{shard-DYYhXxEG.mjs → shard-CsOnD3Na.mjs}

@@ -1,4 +1,4 @@
-import{LunoraError as At}from"@lunora/errors";import{serializeSchemaSnapshot as Ot,hashSchemaSnapshot as Dt}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{isHyperdriveGlobalTable as Tt,isD1GlobalTable as Et}from"./isD1GlobalTable-udvHAAzD.mjs";import{r as Ct}from"./json-data-Chfs2Cz5.mjs";import{r as T,e as Lt,a as _t,b as It,c as Mt,d as Pt,f as Nt,g as $t,h as qt,i as Ft,j as Ut,k as Bt,l as Wt,m as jt,n as Ht,o as Vt,p as Kt,q as Gt}from"./shard-runtime-BQ6ZNigW.mjs";import{u as K,i as zt,G as Qt,d as Jt}from"./shared-DnCokNcE.mjs";import{p as Yt}from"./platform-8oj7iXQy.mjs";import{i as Xt}from"./schema-BgM8A3XV.mjs";const h=(n,e)=>`((): (() => ${e}) => { let cached: ${e} | undefined; return () => (cached ??= JSON.parse(${JSON.stringify(JSON.stringify(n))}) as ${e}); })()`,te=["categories","description","facing","level","remediation","title"],Zt=n=>{const e={};return{advisoryRows:n.map(a=>{let r=e[a.name];return r||(r=Object.fromEntries(te.filter(s=>s in a).map(s=>[s,a[s]])),e[a.name]=r),Object.fromEntries(Object.entries(a).filter(([s,d])=>!te.includes(s)||JSON.stringify(d)!==JSON.stringify(r[s])))}),advisoryRules:e}},er=`        /**
+import{LunoraError as It}from"@lunora/errors";import{serializeSchemaSnapshot as Pt,hashSchemaSnapshot as Nt}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{isHyperdriveGlobalTable as Mt,isD1GlobalTable as $t}from"./isD1GlobalTable-udvHAAzD.mjs";import{r as qt}from"./json-data-Chfs2Cz5.mjs";import{r as _,e as Ft,a as Ut,b as Bt,c as jt,d as Wt,f as Ht,g as Vt,h as Kt,i as Gt,j as Qt,k as Jt,l as zt,m as Yt,n as Xt,o as Zt,p as er,q as tr}from"./shard-runtime-BpoCV-aM.mjs";import{u as J,i as rr,G as nr,d as ar}from"./shared-DnCokNcE.mjs";import{p as sr}from"./platform-8oj7iXQy.mjs";import{i as or}from"./schema-BgM8A3XV.mjs";const h=(n,e)=>`((): (() => ${e}) => { let cached: ${e} | undefined; return () => (cached ??= JSON.parse(${JSON.stringify(JSON.stringify(n))}) as ${e}); })()`,oe=["categories","description","facing","level","remediation","title"],ir=n=>{const e={};return{advisoryRows:n.map(a=>{let r=e[a.name];return r||(r=Object.fromEntries(oe.filter(s=>s in a).map(s=>[s,a[s]])),e[a.name]=r),Object.fromEntries(Object.entries(a).filter(([s,d])=>!oe.includes(s)||JSON.stringify(d)!==JSON.stringify(r[s])))}),advisoryRules:e}},dr=`        /**
          * The bare writer every admin/maintenance entry point writes through.
          *
          * Admin and maintenance writes go through the SAME reactive-cache hooks as a
@@ -30,7 +30,7 @@ import{LunoraError as At}from"@lunora/errors";import{serializeSchemaSnapshot as
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
             });
-        }`,m=(n="")=>`            const writer = this.adminWriter(${n});`,tr=`${er}
+        }`,g=(n="")=>`            const writer = this.adminWriter(${n});`,cr=`${dr}
 
         protected override async runShardDataMigration(args: RunShardMigrationArgs): Promise<MigrationRunResult> {
             this.ensureMigrated();
@@ -47,7 +47,7 @@ import{LunoraError as At}from"@lunora/errors";import{serializeSchemaSnapshot as
                 throw new LunoraError("MIGRATION_NOT_FOUND", \`data migration "\${args.id}" is not registered\`, { status: 404 });
             }
 
-${m()}
+${g()}
 
             return runDataMigration({
                 ...(args.batchSize === undefined ? {} : { batchSize: args.batchSize }),
@@ -80,7 +80,7 @@ ${m()}
 
             this.ensureMigrated();
 
-${m("headroom ?? this.transactionHeadroom()")}
+${g("headroom ?? this.transactionHeadroom()")}
 
             if (args.op === "insert") {
                 const id = await writer.insert(args.table, args.doc ?? {});
@@ -135,7 +135,7 @@ ${m("headroom ?? this.transactionHeadroom()")}
         protected override async runShardExport(args: RunShardExportArgs): Promise<ExportRow[]> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             const rows: ExportRow[] = [];
 
@@ -152,7 +152,7 @@ ${m()}
         protected override async runShardImport(args: RunShardImportArgs): Promise<ImportShardResult> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`importShardRows\` inserts with \`allowExplicitId\`, so a source
             // database's \`_id\`s carry across verbatim and every foreign key
@@ -163,7 +163,7 @@ ${m()}
         protected override async runShardRankBefore(args: RunShardRankBeforeArgs): Promise<{ before: number; total: number }> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`rankBefore\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
             // but the shard writer from \`createShardCtxDb\` always defines it.
@@ -181,7 +181,7 @@ ${m()}
         protected override async runShardFindRelated(args: RunShardFindRelatedArgs): Promise<RelatedPage> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`related\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
             // but the shard writer from \`createShardCtxDb\` always defines it — it
@@ -199,7 +199,7 @@ ${m()}
         protected override async runShardRankPage(args: RunShardRankPageArgs): Promise<ShardRankPageResult> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`rankPageRows\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
             // but the shard writer from \`createShardCtxDb\` always defines it. The sort
@@ -220,16 +220,18 @@ ${m()}
         protected override async runShardApplyCdc(args: RunShardApplyCdcArgs): Promise<{ applied: number }> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             await applyCdcChanges(writer, args.changes);
 
             return { applied: args.changes.length };
-        }`,rr=({actionOnlyBuild:n,actionOnlyFields:e,agentsBuild:t,agentsContextField:a,containersBuild:r,containersContextField:s,databaseOptions:d,everyContextBuild:g,everyContextField:y,facadeBlock:c,globalDatabaseLine:w,notifyBuild:S,ormContextField:E,paymentsBuild:v,paymentsContextField:C,queuesBuild:i,queuesContextField:f,topicsBuild:L,topicsContextField:_,vectorsBuild:I,vectorsContextField:x,workflowsBuild:M,workflowsContextField:P})=>{const k=e.length>0,l=k?`
+        }`,lr=({actionOnlyBuild:n,actionOnlyFields:e,agentsBuild:t,agentsContextField:a,containersBuild:r,containersContextField:s,databaseOptions:d,everyContextBuild:f,everyContextField:v,facadeBlock:c,globalDatabaseLine:l,lazyFunctions:p=!1,notifyBuild:L,ormContextField:x,paymentsBuild:k,paymentsContextField:I,queuesBuild:i,queuesContextField:b,topicsBuild:P,topicsContextField:N,vectorsBuild:M,vectorsContextField:O,workflowsBuild:$,workflowsContextField:q})=>{const S=e.length>0,u=x===""?"{ db }":"{ db, orm: bindOrm(facade) }",D=x===""?"":`
+                orm: databaseContext.orm,`,w=x===""?"":`
+                                orm: { configurable: true, enumerable: true, value: mutationDatabase.orm, writable: true },`,F=S?`
             // ActionCtx-only helpers (external, non-deterministic I/O): constructed
             // and attached only for an \`action\` so query/mutation ctx never carry them.
             if (isAction) {
-${n.replaceAll(/^(?=.)/gmu,"    ")}${e.map(u=>`                ctx.${u} = ${u};`).join(`
+${n.replaceAll(/^(?=.)/gmu,"    ")}${e.map(R=>`                ctx.${R} = ${R};`).join(`
 `)}
             }
 `:"";return`        private buildCtx(options: { bookmarks?: DispatchBookmark | undefined; functionPath?: string | undefined; headroom?: TransactionHeadroomTracker | undefined; identity?: SubscriptionIdentity | undefined; kind?: "query" | undefined; onRead?: ((table: string, idOrScan?: string) => void) | undefined; onReadRange?: ((range: KeyRange) => void) | undefined; scope?: QueryReadScope | undefined; trusted?: boolean | undefined } = {}): unknown {
@@ -259,7 +261,7 @@ ${n.replaceAll(/^(?=.)/gmu,"    ")}${e.map(u=>`                ctx.${u} = ${u};`
                 };
             })();
             const { identity, ip, userId } = caller;
-${I}${g}${r}${M}${i}${L}${t}
+${M}${f}${r}${$}${i}${P}${t}
             // Which dispatch this ctx belongs to. Drives the two deferral facades
             // below and the \`ctx.run*\` caller guard; a ctx built for an
             // admin/lifecycle path has no registered function, and so no kind. An
@@ -275,11 +277,9 @@ ${I}${g}${r}${M}${i}${L}${t}
             // equivalent of an \`afterCommit\` hook, and the SchedulerDO persists the
             // job the moment it is called — so inside a mutation the call is BUFFERED
             // and replayed after the transaction commits (a rollback drops it).
-            // Wrapped on the same dispatches as the deferred-delete queue and for the
-            // same reason: \`ctx.runMutation\` hands the CALLER's ctx to the callee, so
-            // a mutation reached from an action schedules through the action's ctx.
-            // An action's own schedules stay immediate — the window is only open
-            // while a transaction is (see \`runMutationTransaction\`).
+            // Composed mutations get their own facade when the caller is outside
+            // a transaction. True nested calls share the enclosing facade and open
+            // a nested window. The action's own schedules stay immediate.
             //
             // Every kind but \`query\` is wrapped, because \`runMutationTransaction\`
             // is installed on \`ctx.runMutation\` for every kind but \`query\`: a
@@ -332,12 +332,11 @@ ${I}${g}${r}${M}${i}${L}${t}
                 ]);
             const storage = makeStorage(requestOrigin);
             // \`ctx.storage.deleteAfterCommit(key)\`, on every dispatch that can host
-            // a MUTATION handler — which is not only a mutation dispatch:
-            // \`ctx.runMutation\` hands the CALLER's ctx to the callee, so a mutation
-            // reached from an action runs on the action's ctx. Wrapping mutations
-            // alone made that composition throw a bare TypeError on a method the
-            // handler's own type promises. Queries stay unwrapped: they cannot host
-            // one, and their ctx is built on the hot subscription path.
+            // a MUTATION handler — which is not only a mutation dispatch. An
+            // action's composed mutation gets a child ctx with its own deferred
+            // delete queue, while mutations reuse the admitted ctx. Queries stay
+            // unwrapped: they cannot host one, and their ctx is built on the hot
+            // subscription path.
             //
             // Every dispatch wrapped here also flushes (see \`handleRpc\` and
             // \`runReactor\`) — a queue nothing drains leaks silently, which is worse
@@ -368,13 +367,20 @@ ${I}${g}${r}${M}${i}${L}${t}
             // so both write to the same trace.
             const span = this.makeDispatchSpan(traceAnchor, observability);
 
-${w}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
+${l}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
             // adds aggregate counters (call count, total time, per-operation
             // breakdown) to the wide event rather than a span per call, so a
             // handler making hundreds of queries stays readable. See
             // \`instrumentDatabase\` for the \`"spans"\` / \`"off"\` levels.
-            const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${d}), logFunctionPath, traceAnchor, observability);
-${c}${v}
+            // Schema triggers close over this DB's scheduler, so a composed
+            // mutation must rebuild its DB and table/ORM views with its own queue.
+            const makeDatabaseContext = (scheduler: SchedulerLike) => {
+                const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${d}), logFunctionPath, traceAnchor, observability);
+${c}                return ${u};
+            };
+            const databaseContext = makeDatabaseContext(scheduler);
+            const db = databaseContext.db;
+${k}
 
             // \`ctx.trace\` / \`ctx.metrics\`: spans and measurements to the same sink.
             // The trace anchor is threaded explicitly for the same reason \`identity\`
@@ -382,7 +388,7 @@ ${c}${v}
             // writing mutation's trace from the shared per-request field.
             const trace = this.makeTracer(logFunctionPath, observability, traceAnchor);
             const metrics = this.makeMetrics(logFunctionPath, observability);
-${S}
+${L}
             // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
             // captured ONCE so the whole handler body sees a single stable value.
             // A \`query\` handler is re-run by every live subscription that reads it,
@@ -433,21 +439,48 @@ ${S}
                 // to the handler so code that signs its own URLs (a copy-in
                 // \`createStorage\`) can fall back to it too. \`undefined\` for a
                 // query and for a deferred dispatch, for the reasons given there.
-                origin: requestOrigin,${E}
+                origin: requestOrigin,${D}
                 scheduler,
                 span,
                 storage: contextStorage,
-                trace,${x}${y}${C}${s}${P}${f}${_}${a}
+                trace,${O}${v}${I}${s}${q}${b}${N}${a}
+            };
+${S?`            const isAction = contextKind === "action";
+`:""}${F}
+${p?`            const captureScope = (): (() => void) => {
+                const requestScope = this.captureRequestScope();
+                return () => this.restoreRequestScope(requestScope);
             };
-${k?`            const isAction = contextKind === "action";
-`:""}${l}
-            const installRun = (target: Record<string, unknown>, kind: typeof contextKind): void => {
-                target.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, target, kind);
+
+`:""}            const installRun = (target: Record<string, unknown>, kind: typeof contextKind): void => {
+                target.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, target, kind${p?", undefined, captureScope":""});
                 // The composed mutation runs under the SAME wrapper the top-level RPC
                 // uses, so "do the transactional work in a mutation and call it from the
                 // action" — the recipe the docs give for atomicity — actually is atomic.
-                target.runMutation = (reference: FunctionReference, fnArgs: Record<string, unknown>) =>
-                    dispatchRun("mutation", reference.__lunoraRef, fnArgs, target, kind, async (work) => this.runMutationTransaction(target, work));
+                target.runMutation = (reference: FunctionReference, fnArgs: Record<string, unknown>) => {
+                    // An action can start sibling mutations concurrently. Each owns its
+                    // context and deferral queues; only calls from an admitted mutation
+                    // inherit that mutation's transaction.
+                    const mutationCtx: Record<string, unknown> = this.mutationContexts.has(target)
+                        ? target
+                        : (() => {
+                            const mutationScheduler = withDeferredSchedules(schedulerBase, this.scheduleOutbox());
+                            const mutationDatabase = makeDatabaseContext(mutationScheduler);
+
+                            return Object.defineProperties({}, {
+                                ...Object.getOwnPropertyDescriptors(target),
+                                db: { configurable: true, enumerable: true, value: mutationDatabase.db, writable: true },${w}
+                                scheduler: { configurable: true, enumerable: true, value: mutationScheduler, writable: true },
+                                storage: { configurable: true, enumerable: true, value: withDeferredDeletes(storage), writable: true },
+                            });
+                        })();
+
+                    if (mutationCtx !== target) {
+                        installRun(mutationCtx, kind);
+                    }
+
+                    return dispatchRun("mutation", reference.__lunoraRef, fnArgs, mutationCtx, kind, async (work) => this.runMutationTransaction(mutationCtx, work)${p?", captureScope":""});
+                };
                 // \`ctx.runQuery(ref, args, { untracked: true })\` runs the sub-query on
                 // its OWN query context, built without the subscription's read-footprint
                 // hooks — so its reads never enter this subscription's footprint and a
@@ -469,7 +502,9 @@ ${k?`            const isAction = contextKind === "action";
                         runOptions?.untracked === true
                             ? this.buildCtx({ bookmarks: options.bookmarks, functionPath: options.functionPath, headroom: options.headroom, identity: caller, kind: "query", scope: options.scope })
                             : queryContext(),
-                        kind,
+                        kind,${p?`
+                        undefined,
+                        captureScope,`:""}
                     );
             };
 
@@ -491,7 +526,7 @@ ${k?`            const isAction = contextKind === "action";
 
                 if (queryView === undefined) {
                     const descriptors: PropertyDescriptorMap = Object.getOwnPropertyDescriptors(ctx);
-${e.map(u=>`                    delete descriptors.${u};
+${e.map(R=>`                    delete descriptors.${R};
 `).join("")}                    // Writable and configurable, like the plain fields they replace.
                     const field = (value: unknown): PropertyDescriptor => ({ configurable: true, enumerable: true, value, writable: true });
 
@@ -510,7 +545,7 @@ ${e.map(u=>`                    delete descriptors.${u};
             installRun(ctx, contextKind);
 
             return ctx;
-        }`},nr=`// Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
+        }`},ie=`// Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
 // referencing call fails loudly with a clear error instead of overflowing the
 // stack. Tracked across the awaited handler chain (one DO invocation is
 // single-threaded), so the counter reflects true nesting depth.
@@ -576,8 +611,29 @@ const dispatchRun = async (
     } finally {
         runDepth -= 1;
     }
-};`,ar=`        public override async handleRpc(functionPath: string, args: Record<string, unknown>, headroom?: TransactionHeadroomTracker, scope?: QueryReadScope, bookmarks?: DispatchBookmark): Promise<unknown> {
-            const registered = LUNORA_FUNCTIONS[functionPath];
+};`,ur=n=>n?ie.replace("    runTransactional?: (work: () => Promise<unknown>) => Promise<unknown>,",`    runTransactional?: (work: () => Promise<unknown>) => Promise<unknown>,
+    captureScope?: () => () => void,`).replace(`    try {
+        // A mutation composed from an action`,`    try {
+        let loaded = getLoadedFunction(functionPath);
+
+        if (loaded === undefined) {
+            const restoreScope = captureScope?.();
+
+            try {
+                loaded = await loadFunction(functionPath);
+            } finally {
+                restoreScope?.();
+            }
+        }
+
+        if (!loaded) {
+            throw new Error(\`unknown function: \${functionPath}\`);
+        }
+
+        const loadedFunction = loaded;
+
+        // A mutation composed from an action`).replaceAll("registered.handler","loadedFunction.handler"):ie,hr=`        public override async handleRpc(functionPath: string, args: Record<string, unknown>, headroom?: TransactionHeadroomTracker, scope?: QueryReadScope, bookmarks?: DispatchBookmark): Promise<unknown> {
+__PREPARE_FUNCTION__            const registered = LUNORA_FUNCTIONS[functionPath];
 
             // Internal functions are reachable server-side only: via \`ctx.run*\`
             // composition, or a trusted system dispatch (scheduler/cron, marked by
@@ -631,14 +687,15 @@ const dispatchRun = async (
 
             const result = await registered.handler(ctx, args);
 
-            // An action is not itself transactional, but \`ctx.runMutation\` runs its
-            // submutations on THIS ctx, so anything they queued after their own
-            // transaction settled lands here. A dispatch with nothing queued no-ops.
+            // Composed mutations settle their own delete queues. An action can
+            // also queue deletes outside those mutations; drain its own queue here.
             await this.deferPastResponse(flushDeferredDeletes(ctx));
 
             return result;
         }
 
+        private readonly mutationContexts = new WeakSet<object>();
+
         /**
          * Run one mutation handler with the atomicity every caller of a mutation is
          * promised: a BEGIN/COMMIT span (with the single-writer gate
@@ -659,11 +716,9 @@ const dispatchRun = async (
          * scheduler flush.
          *
          * Both deferral windows are opened here and settled against the SAME
-         * outcome. The delete window is what keeps a composed mutation's queued
-         * object deletes off the caller's flush when it rolls back: \`ctx\` is
-         * shared, so without a window the keys are indistinguishable from the
-         * action's own and the action's flush destroys objects whose rows the
-         * rollback put back.
+         * outcome. True nested calls share their caller's context, so each window
+         * must discard its own failed delete and schedule intents even when the
+         * outer handler catches the error and commits.
          */
         private async runMutationTransaction<T>(ctx: unknown, work: () => Promise<T>): Promise<T> {
             const settleSchedules = beginDeferredSchedules(ctx as { scheduler?: unknown });
@@ -671,7 +726,7 @@ const dispatchRun = async (
             // settle first on every path and cannot mask the outcome.
             const settleDeletes = beginDeferredDeletes(ctx);
 
-            if (this.isInTransaction()) {
+            if (this.mutationContexts.has(ctx as object)) {
                 try {
                     const nested = await work();
 
@@ -690,7 +745,15 @@ const dispatchRun = async (
             let result: T;
 
             try {
-                result = await this.runInTransaction(work);
+                result = await this.runInTransaction(async () => {
+                    this.mutationContexts.add(ctx as object);
+
+                    try {
+                        return await work();
+                    } finally {
+                        this.mutationContexts.delete(ctx as object);
+                    }
+                }, { independent: true });
             } catch (error) {
                 // The span rolled back, so the rows are gone and the jobs that were
                 // to run "after I commit" must go with them. Dropping them is the
@@ -753,14 +816,14 @@ __COMMITTED_CATCH__            } finally {
         // \`ctx.scheduler\` call that reached the buffer in the first place.
         protected override scheduleOutboxScheduler(): SchedulerLike | undefined {
             return config.scheduler?.((this.env ?? {}) as Record<string, unknown>) as SchedulerLike | undefined;
-        }`,sr=`        protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): Promise<{ ranges?: Map<string, KeyRange[]>; result: unknown; tables: Set<string> } | null> {
+        }`,pr=`        protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): Promise<{ ranges?: Map<string, KeyRange[]>; result: unknown; tables: Set<string> } | null> {
             const registered = LUNORA_FUNCTIONS[functionPath];
 
             if (!registered || registered.kind !== "query" || registered.visibility === "internal") {
                 return null;
             }
 
-            this.ensureMigrated();
+__PREPARE_FUNCTION__            this.ensureMigrated();
 
             const footprint = createReadFootprint();
             // Identity is threaded EXPLICITLY from the (deferred/interleaved)
@@ -794,7 +857,7 @@ __COMMITTED_CATCH__            } finally {
                 // \`ctx.auth\` stream as nobody — or as a concurrent RPC's caller.
                 iterator: (signal) => (registered.handler as (context: unknown, args: Record<string, unknown>, signal: AbortSignal) => AsyncIterable<unknown>)(this.buildCtx({ functionPath, identity }), args, signal),
             };
-        }`,or=`            } catch (error) {
+        }`,mr=`            } catch (error) {
                 // The write committed before this failed. Mark the error so the caller can tell
                 // a durable write from a rollback: the rethrow still reaches the caller unchanged.
                 if (typeof error === "object" && error !== null) {
@@ -802,7 +865,24 @@ __COMMITTED_CATCH__            } finally {
                 }
 
                 throw error;
-`,ir=n=>ar.replace("__COMMITTED_CATCH__",n?or:""),dr=n=>{const e={};for(const t of n.tables){const a={};for(const[r,s]of Object.entries(t.shape)){const d=K(s);d.kind==="id"&&d.tableName!==void 0&&(a[r]=d.tableName)}Object.keys(a).length>0&&(e[t.name]=a)}return e},cr=n=>{const e={};for(const t of n.tables){const a=[];for(const[r,s]of Object.entries(t.shape))K(s).kind==="storage"&&a.push(r);a.length>0&&(e[t.name]=a)}return e},lr=n=>{const e={};for(const t of n.tables){const a=[...t.indexes.map(r=>({fields:[...r.fields],name:r.name,type:"index",...r.unique===!0?{unique:!0}:{}})),...t.searchIndexes.map(r=>({fields:[r.field,...r.filterFields??[]],name:r.name,type:"search"})),...(t.geoIndexes??[]).map(r=>({fields:[r.field],name:r.name,type:"geo"})),...t.rankIndexes.map(r=>({fields:r.sortBy.map(s=>s.field),name:r.name,type:"rank"})),...t.vectorIndexes.map(r=>({fields:r.field===void 0?[]:[r.field],name:r.name,type:"vector"}))];a.length>0&&(e[t.name]=a)}return e},hr=n=>{const e=[];for(const t of n.tables)!t.ttl||t.shardMode==="global"||e.push({...t.ttl.after===void 0?{}:{after:t.ttl.after},field:t.ttl.field,...t.softDelete?{softDeleteField:t.softDelete.field}:{},table:t.name});return e},ur=n=>{if(n.kind!=="union"||n.members===void 0||n.members.length===0)return;const e=[];for(const t of n.members){if(t.kind!=="literal"||t.literalValue===void 0)return;try{const a=JSON.parse(t.literalValue);if(typeof a!="string")return;e.push(a)}catch{return}}return e},pr=(n,e,t)=>{const a=K(e),r={name:n,optional:zt(e),type:a.kind};if(a.kind==="id"&&a.tableName!==void 0){r.ref=a.tableName;const d=t.get(n);d!==void 0&&(r.onDelete=d)}a.kind==="storage"&&(r.isStorage=!0,a.bucket!==void 0&&(r.bucket=a.bucket));const s=ur(a);return s!==void 0&&(r.enumValues=s),a.column?.notNull===!1&&(r.nullable=!0),r},mr=n=>{const e={};for(const t of n.tables){const a=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"},...t.commitOrdered===!0?[{name:"_commitSeq",optional:!1,type:"number"}]:[]],r=new Map(t.relations.flatMap(s=>s.kind==="one"?[[s.field,s.onDelete]]:[]));for(const[s,d]of Object.entries(t.shape))a.push(pr(s,d,r));e[t.name]=a}return e},gr=({hasMutators:n,hasShapes:e,rlsData:t})=>{const a=e?`
+`,gr=(n,e=!1)=>{const t=e?`            const registeredBeforeLoad = LUNORA_FUNCTIONS[functionPath];
+
+            if (registeredBeforeLoad?.visibility === "internal" && !this.isSystemDispatch()) {
+                throw new LunoraError("FUNCTION_NOT_FOUND", "function not registered: " + functionPath);
+            }
+
+`:"",a=e?`            const requestScope = this.captureRequestScope();
+            const preparation = this.prepareFunction(functionPath, "rpc");
+
+            if (preparation !== undefined) {
+                try {
+                    await preparation;
+                } finally {
+                    this.restoreRequestScope(requestScope);
+                }
+            }
+
+`:"";return hr.replace("__COMMITTED_CATCH__",n?mr:"").replace("__PREPARE_FUNCTION__",`${t}${a}`)},fr=n=>{const e={};for(const t of n.tables){const a={};for(const[r,s]of Object.entries(t.shape)){const d=J(s);d.kind==="id"&&d.tableName!==void 0&&(a[r]=d.tableName)}Object.keys(a).length>0&&(e[t.name]=a)}return e},br=n=>{const e={};for(const t of n.tables){const a=[];for(const[r,s]of Object.entries(t.shape))J(s).kind==="storage"&&a.push(r);a.length>0&&(e[t.name]=a)}return e},wr=n=>{const e={};for(const t of n.tables){const a=[...t.indexes.map(r=>({fields:[...r.fields],name:r.name,type:"index",...r.unique===!0?{unique:!0}:{}})),...t.searchIndexes.map(r=>({fields:[r.field,...r.filterFields??[]],name:r.name,type:"search"})),...(t.geoIndexes??[]).map(r=>({fields:[r.field],name:r.name,type:"geo"})),...t.rankIndexes.map(r=>({fields:r.sortBy.map(s=>s.field),name:r.name,type:"rank"})),...t.vectorIndexes.map(r=>({fields:r.field===void 0?[]:[r.field],name:r.name,type:"vector"}))];a.length>0&&(e[t.name]=a)}return e},yr=n=>{const e=[];for(const t of n.tables)!t.ttl||t.shardMode==="global"||e.push({...t.ttl.after===void 0?{}:{after:t.ttl.after},field:t.ttl.field,...t.softDelete?{softDeleteField:t.softDelete.field}:{},table:t.name});return e},vr=n=>{if(n.kind!=="union"||n.members===void 0||n.members.length===0)return;const e=[];for(const t of n.members){if(t.kind!=="literal"||t.literalValue===void 0)return;try{const a=JSON.parse(t.literalValue);if(typeof a!="string")return;e.push(a)}catch{return}}return e},kr=(n,e,t)=>{const a=J(e),r={name:n,optional:rr(e),type:a.kind};if(a.kind==="id"&&a.tableName!==void 0){r.ref=a.tableName;const d=t.get(n);d!==void 0&&(r.onDelete=d)}a.kind==="storage"&&(r.isStorage=!0,a.bucket!==void 0&&(r.bucket=a.bucket));const s=vr(a);return s!==void 0&&(r.enumValues=s),a.column?.notNull===!1&&(r.nullable=!0),r},Sr=n=>{const e={};for(const t of n.tables){const a=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"},...t.commitOrdered===!0?[{name:"_commitSeq",optional:!1,type:"number"}]:[]],r=new Map(t.relations.flatMap(s=>s.kind==="one"?[[s.field,s.onDelete]]:[]));for(const[s,d]of Object.entries(t.shape))a.push(kr(s,d,r));e[t.name]=a}return e},Rr=({hasMutators:n,hasShapes:e,rlsData:t})=>{const a=e?`
         protected override resolveShape(name: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string } | undefined {
             const shape = LUNORA_SHAPES[name];
 
@@ -865,14 +945,14 @@ __COMMITTED_CATCH__            } finally {
 
             return { ...(shape.columns === undefined ? {} : { columns: shape.columns }), effectiveWhere, global: isGlobal, table: shape.table };
         }
-`:"",r=e?[...new Set(t.policies.filter(c=>c.on==="read"&&c.table!=="").map(c=>c.table))].toSorted((c,w)=>c.localeCompare(w)):[],s=r.length>0?`
+`:"",r=e?[...new Set(t.policies.filter(c=>c.on==="read"&&c.table!=="").map(c=>c.table))].toSorted((c,l)=>c.localeCompare(l)):[],s=r.length>0?`
 /** Refuses to boot a shape that would replicate around the read policies its table is governed by (\`defineShape({ use })\` is how a shape opts in; \`use: []\` acknowledges an ungoverned one). */
 assertShapesDeclareReadPolicies(LUNORA_SHAPES, ${JSON.stringify(r)}, (schema as unknown as { rlsMode?: string }).rlsMode === "required");
 `:"";return{customMutatorOverride:n?`
         protected override isCustomMutator(functionPath: string): boolean {
             return LUNORA_MUTATOR_PATHS.has(functionPath);
         }
-`:"",shapeGuardImport:e?"assertShapeShardable, ":"",shapeReadPolicyAssertion:s,shapeReadPolicyImport:s===""?"":"assertShapesDeclareReadPolicies, ",shapeResolveOverride:a}},fr=(n,e)=>n?`
+`:"",shapeGuardImport:e?"assertShapeShardable, ":"",shapeReadPolicyAssertion:s,shapeReadPolicyImport:s===""?"":"assertShapesDeclareReadPolicies, ",shapeResolveOverride:a}},xr=(n,e)=>n?`
         protected override async readGlobalShapeRows(resolved: { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string }, identity?: SubscriptionIdentity): Promise<Array<{ doc: Record<string, unknown>; id: string }>> {
             const env = this.env as Record<string, unknown>;
             // A shape read performs no writes, so the widened request only needs
@@ -938,7 +1018,7 @@ assertShapesDeclareReadPolicies(LUNORA_SHAPES, ${JSON.stringify(r)}, (schema as
 
             return globalDb.cdcChangedTables?.(sinceSeq, cursorOnly === undefined ? {} : { cursorOnly });
         }
-`:"",br=n=>({externalSourceOverride:n?`
+`:"",Ar=n=>({externalSourceOverride:n?`
         protected override async pollExternalSources(trace?: TraceRefLike): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
@@ -1091,8 +1171,8 @@ assertShapesDeclareReadPolicies(LUNORA_SHAPES, ${JSON.stringify(r)}, (schema as
 `:"",sourceClientCacheConst:n?`
 const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
-`:""}),yr=(n,e)=>{const t=e.length>0,r=n?T("vectorsStub: VectorSearchLike","ctx.vectors: no vectors configured. Pass `vectors` to createShardDO().",["deleteByIds","getByIds","query","upsert","upsertMany","upsertNow"]):"",s=t?`            const vectorShardKey = this.currentShardKey();
-`:"",d=t?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",y=`, { ${["deferAfterCommit: (work) => this.deferAfterCommit(work)",...t?["namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey",`shardedIndexNames: [${e.map(S=>JSON.stringify(S)).join(", ")}]`]:[]].join(", ")} }`,c=n?`
+`:""}),Or=(n,e)=>{const t=e.length>0,r=n?_("vectorsStub: VectorSearchLike","ctx.vectors: no vectors configured. Pass `vectors` to createShardDO().",["deleteByIds","getByIds","query","upsert","upsertMany","upsertNow"]):"",s=t?`            const vectorShardKey = this.currentShardKey();
+`:"",d=t?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",v=`, { ${["deferAfterCommit: (work) => this.deferAfterCommit(work)",...t?["namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey",`shardedIndexNames: [${e.map(p=>JSON.stringify(p)).join(", ")}]`]:[]].join(", ")} }`,c=n?`
             const vectorSync = this.vectorSync(env);
             // Vectorize lives outside this shard's SQLite, so a query whose result
             // depends on a similarity search cannot be proven current on reconnect —
@@ -1109,7 +1189,7 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
             }
 
             const lunora = createVectors({ indexes: config.vectors(env) });
-${s}            const vectors = createContextVectors(lunora${y});
+${s}            const vectors = createContextVectors(lunora${v});
 
             return {
                 backfill: createVectorBackfillSync({ ${d}schema: schema as unknown as VectorSchemaLike, upsertMany: lunora.upsertMany, vectors }),
@@ -1135,14 +1215,14 @@ ${s}            const vectors = createContextVectors(lunora${y});
                 ordered: async (read, work) => this.runOrderedAfterWrites(read, work),
             });
         }
-`:"",vectorsBuild:c,vectorsStub:r}},Lr=({advisories:n=[],advisorProcedures:e=[],agents:t=[],capabilities:a=new Set,containers:r=[],env:s,flagKeys:d=[],hasFlags:g=!1,hasNotify:y=!1,hasRooms:c=!1,hasVectors:w=!0,maskMetadata:S,mutators:E=[],queues:v=[],rlsMetadata:C,schema:i,schemaSnapshot:f,shapes:L=[],storageRules:_,studioFeatures:I,services:x=[],topics:M=[],useUmbrella:P=!1,workflows:k=[]})=>{const l=Jt(P),N=E.length>0,u=L.length>0,re=f===void 0?"":Ot(f),ne=f===void 0?"":`
+`:"",vectorsBuild:c,vectorsStub:r}},Fr=({advisories:n=[],advisorProcedures:e=[],agents:t=[],capabilities:a=new Set,containers:r=[],env:s,flagKeys:d=[],hasFlags:f=!1,hasNotify:v=!1,hasRooms:c=!1,lazyFunctions:l=!1,hasVectors:p=!0,maskMetadata:L,mutators:x=[],queues:k=[],rlsMetadata:I,schema:i,schemaSnapshot:b,shapes:P=[],storageRules:N,studioFeatures:M,services:O=[],topics:$=[],useUmbrella:q=!1,workflows:S=[]})=>{const u=ar(q),D=x.length>0,w=P.length>0,F=b===void 0?"":Pt(b),z=b===void 0?"":`
 /** Structural schema snapshot + its content hash, recorded in the shard's \`__lunora_schema_history\` ledger on cold start so the studio can show a schema-version timeline and diff any two versions. */
-const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(Dt(f))}, json: ${JSON.stringify(re)} };
-`,ae=f===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",b=Lt(a),A=_t(g,l.flags),$=It(d,g,l.flags),q=Gt(y),F=Mt(s),{build:se,contextField:oe,importLines:ie,specs:de}=Pt(Yt(v)),{build:ce,contextField:le,importLines:he,specs:ue}=Nt(M,v),U=$t(x,l.server),{build:pe,contextField:me,importLines:ge,specs:fe}=qt(r,i.jurisdiction),{build:be,contextField:ye,importLines:we,specs:ve}=Ft(k),{build:ke,contextField:Se,importLines:Re,specs:xe}=Ut(t),{build:Ae,configField:Oe,contextField:De,imports:Te,stub:Ee}=Bt(a.has("payments")),Ce=n,{advisoryRules:Le,advisoryRows:_e}=Zt(Ce),Ie=e,G=C??{policies:[],roles:[]},Me=S??{columns:[]},Pe=_??{rules:[]},Ne=I??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,privacy:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:$e,override:qe}=Wt(k),{constant:Fe,override:Ue}=jt(v),p=w&&i.vectorIndexes.length>0,B=new Set(i.tables.filter(o=>Xt(o)).map(o=>o.name)),z=p&&i.vectorIndexes.some(o=>B.has(o.table)),R=i.tables.some(o=>o.shardMode==="global"),W=Ht(B),j=i.tables.some(o=>Tt(o)),Q=i.tables.some(o=>Et(o)),O=i.tables.some(o=>o.externalSource!==void 0),J=i.tables.some(o=>o.memory===!0),H=i.tables.some(o=>o.shardMode!=="global"&&o.searchIndexes.length>0);if(Q&&j)throw new At("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const V=i.tables.length>0,Be=dr(i),We=lr(i),je=mr(i),He=cr(i),Y=hr(i),X=Vt(p,k.length>0,v.length>0,g,H);u&&X.push("WhereInput");const Z=Kt(R),{customMutatorOverride:Ve,shapeGuardImport:Ke,shapeReadPolicyAssertion:Ge,shapeReadPolicyImport:ze,shapeResolveOverride:Qe}=gr({hasMutators:N,hasShapes:u,rlsData:G}),D=[`import type { ${X.join(", ")} } from "${l.do}";`,`import { applyCdcChanges, createStableIdFactory, ${H?"backfillSearchIndexes, ":""}${p?"backfillVectorIndexes, ":""}buildReprojectionMigration, ${J?"clearMemoryTables, ":""}${Ke}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${O?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}markUnvouchableReads, ${z?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${Z.importFragment}ShardDO as ShardDOBase } from "${l.do}";`,...O?[`import type { ExternalSourceLike, SourceClientLike, TraceRefLike } from "${l.do}";`]:[],u?`import { asBucketStorage, ${ze}beginDeferredDeletes, beginDeferredSchedules, composeShapeReadWhere, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${l.server}";`:`import { asBucketStorage, beginDeferredDeletes, beginDeferredSchedules, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${l.server}";`];V&&D.push(`import { bindOrm, bindTableFacade } from "${l.server}";`),p&&D.push('import type { SchemaLike as VectorSchemaLike, VectorBackfillSync, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectorBackfillSync, createVectors, createVectorSyncHook, vectorBackfillTargets } from "@lunora/bindings/vectors";'),D.push(...b.importLines,...A.importLines,...q.importLines,...F.importLines,...ge,...we,...ie,...he,...U.importLines,...Re,...Te,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...N?["LUNORA_MUTATOR_PATHS"]:[],...c?["LUNORA_ROOMS"]:[],...u?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const Je=p?`
-    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",Ye=Q?`
-    d1?: (env: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string }) => DatabaseWriterLike | undefined;`:"",Xe=j?`
-    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Ze=O?`
-    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",et="ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().",tt="ctx.scheduler: no scheduler configured. Pass `scheduler` to createShardDO().",rt="ctx.storage: no storage configured. Pass `storage` to createShardDO().",nt=R?T("globalDbStub: DatabaseWriterLike",et,["aggregate","count","delete","explain","findFirst","findFirstOrThrow","findMany","get","groupBy","insert","normalizeId","patch","query","rank","rankPage","replace"],{sync:["normalizeId","query"]}):"",{vectorSyncMethod:at,vectorsBuild:st,vectorsStub:ot}=yr(p,z?i.vectorIndexes.filter(o=>B.has(o.table)).map(o=>o.name):[]),it=`{
+const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(Nt(b))}, json: ${JSON.stringify(F)} };
+`,R=b===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",y=Ft(a),T=Ut(f,u.flags),U=Bt(d,f,u.flags),B=tr(v),j=jt(s),{build:de,contextField:ce,importLines:le,specs:ue}=Wt(sr(k)),{build:he,contextField:pe,importLines:me,specs:ge}=Ht($,k),W=Vt(O,u.server),{build:fe,contextField:be,importLines:we,specs:ye}=Kt(r,i.jurisdiction),{build:ve,contextField:ke,importLines:Se,specs:Re}=Gt(S),{build:xe,contextField:Ae,importLines:Oe,specs:De}=Qt(t),{build:Te,configField:Ce,contextField:Ee,imports:_e,stub:Le}=Jt(a.has("payments")),Ie=n,{advisoryRules:Pe,advisoryRows:Ne}=ir(Ie),Me=e,Y=I??{policies:[],roles:[]},$e=L??{columns:[]},qe=N??{rules:[]},Fe=M??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,privacy:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:Ue,override:Be}=zt(S),{constant:je,override:We}=Yt(k),m=p&&i.vectorIndexes.length>0,H=new Set(i.tables.filter(o=>or(o)).map(o=>o.name)),X=m&&i.vectorIndexes.some(o=>H.has(o.table)),A=i.tables.some(o=>o.shardMode==="global"),V=Xt(H),K=i.tables.some(o=>Mt(o)),Z=i.tables.some(o=>$t(o)),C=i.tables.some(o=>o.externalSource!==void 0),ee=i.tables.some(o=>o.memory===!0),G=i.tables.some(o=>o.shardMode!=="global"&&o.searchIndexes.length>0);if(Z&&K)throw new It("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Q=i.tables.length>0,He=fr(i),Ve=wr(i),Ke=Sr(i),Ge=br(i),te=yr(i),re=Zt(m,S.length>0,k.length>0,f,G);w&&re.push("WhereInput");const ne=er(A),{customMutatorOverride:Qe,shapeGuardImport:Je,shapeReadPolicyAssertion:ze,shapeReadPolicyImport:Ye,shapeResolveOverride:Xe}=Rr({hasMutators:D,hasShapes:w,rlsData:Y}),E=[`import type { ${re.join(", ")} } from "${u.do}";`,`import { applyCdcChanges, createStableIdFactory, ${G?"backfillSearchIndexes, ":""}${m?"backfillVectorIndexes, ":""}buildReprojectionMigration, ${ee?"clearMemoryTables, ":""}${Je}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${C?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}markUnvouchableReads, ${X?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${ne.importFragment}ShardDO as ShardDOBase } from "${u.do}";`,...C?[`import type { ExternalSourceLike, SourceClientLike, TraceRefLike } from "${u.do}";`]:[],w?`import { asBucketStorage, ${Ye}beginDeferredDeletes, beginDeferredSchedules, composeShapeReadWhere, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${u.server}";`:`import { asBucketStorage, beginDeferredDeletes, beginDeferredSchedules, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${u.server}";`];Q&&E.push(`import { bindOrm, bindTableFacade } from "${u.server}";`),m&&E.push('import type { SchemaLike as VectorSchemaLike, VectorBackfillSync, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectorBackfillSync, createVectors, createVectorSyncHook, vectorBackfillTargets } from "@lunora/bindings/vectors";'),E.push(...y.importLines,...T.importLines,...B.importLines,...j.importLines,...we,...Se,...le,...me,...W.importLines,...Oe,..._e,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...l?["getLoadedFunction","loadFunction"]:[],...D?["LUNORA_MUTATOR_PATHS"]:[],...c?["LUNORA_ROOMS"]:[],...w?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const Ze=m?`
+    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",et=Z?`
+    d1?: (env: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string }) => DatabaseWriterLike | undefined;`:"",tt=K?`
+    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",rt=C?`
+    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",nt="ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().",at="ctx.scheduler: no scheduler configured. Pass `scheduler` to createShardDO().",st="ctx.storage: no storage configured. Pass `storage` to createShardDO().",ot=A?_("globalDbStub: DatabaseWriterLike",nt,["aggregate","count","delete","explain","findFirst","findFirstOrThrow","findMany","get","groupBy","insert","normalizeId","patch","query","rank","rankPage","replace"],{sync:["normalizeId","query"]}):"",{vectorSyncMethod:it,vectorsBuild:dt,vectorsStub:ct}=Or(m,X?i.vectorIndexes.filter(o=>H.has(o.table)).map(o=>o.name):[]),lt=`{
                 ...this.ctxDbTuning(),
                 auth: { identity: identity ?? null, userId: userId ?? null },
                 broadcast: (delta) => {
@@ -1182,7 +1262,7 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
                 // fallback rather than reporting into a no-op.
                 ...(options.onReadRange !== undefined
                     ? { onReadRange: options.onReadRange }
-                    : options.scope === undefined ? {} : { onReadRange: this.getCtxDbReadRangeHook(options.scope) }),${p?`
+                    : options.scope === undefined ? {} : { onReadRange: this.getCtxDbReadRangeHook(options.scope) }),${m?`
                 // Vectorize is outside this shard's SQLite and cannot roll back, so
                 // the sync is held until the mutation's transaction has COMMITTED
                 // (\`deferAfterCommit\`) instead of running inline. Inline, a write
@@ -1194,11 +1274,11 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
-                storage,${R?`
+                storage,${A?`
                 globalDb,`:""}
-            }`,dt=p?`
-                vectors,`:"",ct=V?`
-                orm: bindOrm(facade),`:"",ee=j?"config.hyperdriveGlobal":"config.d1",lt=R?`            const bookmark = this.getInboundBookmark();
+            }`,ut=m?`
+                vectors,`:"",ht=Q?`
+                orm: bindOrm(facade),`:"",ae=K?"config.hyperdriveGlobal":"config.d1",pt=A?`            const bookmark = this.getInboundBookmark();
             const globalRequest = {
                 ...this.globalCdcOptions(config.cdc ?? false),
                 ...(bookmark === undefined ? {} : { bookmark }),
@@ -1206,23 +1286,23 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
                 onBookmark: (bookmarkValue: string | undefined) => { if (options.bookmarks !== undefined) { options.bookmarks.value = bookmarkValue; } },
                 ...(userId === undefined ? {} : { userId }),
             };
-            const globalDb: DatabaseWriterLike = ${ee}?.(env, globalRequest) ?? globalDbStub;
-`:"",ht=fr(u&&R,ee),ut=c?`        protected override roomHandlerPath(topic: string): string | undefined {
+            const globalDb: DatabaseWriterLike = ${ae}?.(env, globalRequest) ?? globalDbStub;
+`:"",mt=xr(w&&A,ae),gt=c?`        protected override roomHandlerPath(topic: string): string | undefined {
             // Own properties only: a plain object would resolve \`toString\` and the like to inherited functions.
             return Object.hasOwn(LUNORA_ROOMS, topic) ? LUNORA_ROOMS[topic] : undefined;
         }
-`:"",{externalSourceOverride:pt,sourceBootstrap:mt,sourceClientCacheConst:gt}=br(O),ft=`
+`:"",{externalSourceOverride:ft,sourceBootstrap:bt,sourceClientCacheConst:wt}=Ar(C),yt=`
         protected override async runShardInit(): Promise<void> {
             this.ensureMigrated();
-${J?`            clearMemoryTables(this.sql as SqlExec, schema as unknown as SchemaLike);
+${ee?`            clearMemoryTables(this.sql as SqlExec, schema as unknown as SchemaLike);
 `:""}
             await this.dispatchShardInit();
         }
-`,bt=Y.length>0?`
+`,vt=te.length>0?`
             if (LUNORA_TTL_SWEEPS.length > 0) {
                 void this.scheduleTtlSweep();
             }
-`:"",yt=`
+`:"",kt=`
         public constructor(state: ShardDOState, env: unknown) {
             super(state, env, {
                 // Every writer this file builds spreads the ctxDbTuning() slice —
@@ -1239,7 +1319,7 @@ ${J?`            clearMemoryTables(this.sql as SqlExec, schema as unknown as Sch
                 // exists — a trigger that fails first still flushes and fuses.
                 ...(config.observability === undefined ? {} : { telemetrySink: () => config.observability?.((env ?? {}) as Record<string, unknown>) }),
             });
-${mt}${bt}        }
+${bt}${vt}        }
 
         protected override isCacheableQuery(functionPath: string): boolean {
             // NOT \`kind === "query"\` alone. A cache hit answers without running
@@ -1263,14 +1343,34 @@ ${mt}${bt}        }
         protected override isPaidFunction(functionPath: string): boolean {
             return LUNORA_FUNCTIONS[functionPath]?.x402 !== undefined;
         }
-`,wt=V?`
+`,se=l?`
+        protected override prepareFunction(functionPath: string, reason: "rpc" | "subscription" | "stream" | "reactor"): Promise<void> | undefined {
+            const registered = LUNORA_FUNCTIONS[functionPath];
+            const allowsInternal = reason === "reactor" || (reason === "rpc" && this.isSystemDispatch());
+
+            if (registered?.visibility === "internal" && !allowsInternal) {
+                return;
+            }
+
+            if (getLoadedFunction(functionPath) !== undefined) {
+                return;
+            }
+
+            return loadFunction(functionPath).then(() => undefined);
+        }
+`:"",St=se===""?`
+
+`:`${se}
+`,Rt=ur(l),xt=l?`            const preparation = this.prepareFunction(functionPath, "subscription");
+            if (preparation !== undefined) await preparation;
+`:"",At=pr.replace("__PREPARE_FUNCTION__",xt),Ot=gr(c,l),Dt=Q?`
             const facade = db as unknown as Record<string, ReturnType<typeof bindTableFacade>>;
 ${i.tables.map(o=>`            facade[${JSON.stringify(o.name)}] = bindTableFacade(db, ${JSON.stringify(o.name)});`).join(`
 `)}
-`:"",vt=`${b.everyBuild}${A.build}${F.build}
+`:"",Tt=`${y.everyBuild}${T.build}${j.build}
             const secrets = createSecrets(env);
-`,kt=`${b.everyFields}${A.contextField}${q.contextField}${F.contextField}
-                secrets,`,St=q.build,Rt=[...b.actionFields,...x.length>0?["services"]:[]],xt=`${b.actionBuild}${U.build}`;return`${Qt}${D.join(`
+`,Ct=`${y.everyFields}${T.contextField}${B.contextField}${j.contextField}
+                secrets,`,Et=B.build,_t=[...y.actionFields,...O.length>0?["services"]:[]],Lt=`${y.actionBuild}${W.build}`;return`${nr}${E.join(`
 `)}
 
 type FunctionKind = "action" | "mutation" | "query";
@@ -1280,13 +1380,13 @@ interface FunctionReference {
 }
 
 /** Foreign-key columns per table (\`v.id("target")\` fields) for the data browser. */
-const LUNORA_TABLE_REFS = ${h(Be,"Record<string, Record<string, string>>")};
+const LUNORA_TABLE_REFS = ${h(He,"Record<string, Record<string, string>>")};
 
 /** Declared indexes per table (secondary, search, geo, rank, vector) for the schema viewer. */
-const LUNORA_TABLE_INDEXES = ${h(We,'Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>>')};
+const LUNORA_TABLE_INDEXES = ${h(Ve,'Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>>')};
 
 /** Columns per table (typed, with PK/FK markers) for the studio's schema diagram, served via \`__lunora_admin__:describeTable\`. */
-const LUNORA_TABLE_COLUMNS = ${h(je,`Record<
+const LUNORA_TABLE_COLUMNS = ${h(Ke,`Record<
     string,
     Array<{
         bucket?: string;
@@ -1303,16 +1403,16 @@ const LUNORA_TABLE_COLUMNS = ${h(je,`Record<
 >`)};
 
 /** Storage-key columns per table (\`v.storage(...)\` fields) for the file browser's records↔files join. */
-const LUNORA_STORAGE_COLUMNS = ${h(He,"Record<string, string[]>")};
+const LUNORA_STORAGE_COLUMNS = ${h(Ge,"Record<string, string[]>")};
 
 /** Declarative TTL policies (\`.ttl(field, { after? })\`) the DO alarm sweep auto-expires rows for. */
-const LUNORA_TTL_SWEEPS = ${Ct(Y,"Array<{ after?: number; field: string; softDeleteField?: string; table: string }>")};
+const LUNORA_TTL_SWEEPS = ${qt(te,"Array<{ after?: number; field: string; softDeleteField?: string; table: string }>")};
 
 /** Static schema advisories (computed by @lunora/advisor at codegen time) served via \`__lunora_admin__:getAdvisories\`. */
-const LUNORA_ADVISORY_RULES = ${h(Le,"Record<string, Partial<AdvisoryFinding>>")};
+const LUNORA_ADVISORY_RULES = ${h(Pe,"Record<string, Partial<AdvisoryFinding>>")};
 
 /** Per-finding rows; rule-level text lives once in \`LUNORA_ADVISORY_RULES\` and is merged back on first read. */
-const LUNORA_ADVISORY_ROWS = ${h(_e,"Array<Partial<AdvisoryFinding> & { name: string }>")};
+const LUNORA_ADVISORY_ROWS = ${h(Ne,"Array<Partial<AdvisoryFinding> & { name: string }>")};
 
 const LUNORA_ADVISORIES = ((): (() => AdvisoryFinding[]) => {
     let cached: AdvisoryFinding[] | undefined;
@@ -1320,20 +1420,20 @@ const LUNORA_ADVISORIES = ((): (() => AdvisoryFinding[]) => {
 })();
 
 /** Every declared procedure (discovered by @lunora/codegen) served via \`__lunora_admin__:getAdvisorProcedures\` — the health map's denominator. */
-const LUNORA_ADVISOR_PROCEDURES = ${h(Ie,"AdvisorProcedure[]")};
+const LUNORA_ADVISOR_PROCEDURES = ${h(Me,"AdvisorProcedure[]")};
 
 /** Read-only RLS metadata (policies + roles discovered from \`.use(rls(...))\` chains) served via \`__lunora_admin__:rlsPolicies\` for the studio's RLS inspector. */
-const LUNORA_RLS_METADATA = ${h(G,"RlsPoliciesResult")};
-${Ge}
+const LUNORA_RLS_METADATA = ${h(Y,"RlsPoliciesResult")};
+${ze}
 /** Read-only masking metadata (table + column + strategy discovered from \`.use(mask(...))\` chains) served via \`__lunora_admin__:maskPolicies\` for the studio's data-browser mask preview. */
-const LUNORA_MASK_METADATA = ${h(Me,"MaskPoliciesResult")};
+const LUNORA_MASK_METADATA = ${h($e,"MaskPoliciesResult")};
 
 /** Read-only storage access-rule metadata (discovered from \`.use(storageRules(...))\` chains) served via \`__lunora_admin__:storageRules\` for the studio's access-rules view. */
-const LUNORA_STORAGE_RULES = ${h(Pe,"StorageRulesResult")};
+const LUNORA_STORAGE_RULES = ${h(qe,"StorageRulesResult")};
 
 /** Which optional package-backed features this app wires up (discovered from imports / \`ctx.*\` reads / schema signals) served via \`__lunora_admin__:studioFeatures\` so the studio hides nav pages whose package isn't enabled. */
-const LUNORA_STUDIO_FEATURES = ${h(Ne,"StudioFeaturesResult")};
-${ne}${W.constant}${$.constant}${$e}${Fe}${fe}${ve}${de}${ue}${U.specs}${xe}
+const LUNORA_STUDIO_FEATURES = ${h(Fe,"StudioFeaturesResult")};
+${z}${V.constant}${U.constant}${Ue}${je}${ye}${Re}${ue}${ge}${W.specs}${De}
 export interface ShardDOConfig {
     /** Current authority for RPC and ordinary subscription deliveries; other live delivery modes are refused. */
     deliveryAuthorization?: (env: Record<string, unknown>) => DeliveryAuthorization;
@@ -1350,27 +1450,25 @@ export interface ShardDOConfig {
     /** \`unknown\` because \`@lunora/scheduler\`'s \`Scheduler\` is not assignable to \`SchedulerLike\`; the shard casts it. */
     scheduler?: (env: Record<string, unknown>) => unknown;
     /** \`origin\` is the origin the current \`/rpc\` request reached the worker on — the fallback base for signed object URLs when no \`publicBaseUrl\` is configured. \`undefined\` off the synchronous dispatch path. */
-    storage?: (env: Record<string, unknown>, origin?: string) => unknown;${Je}${b.configFields}${A.configField}${Oe}${Ye}${Xe}${Ze}${W.configField}
+    storage?: (env: Record<string, unknown>, origin?: string) => unknown;${Ze}${y.configFields}${T.configField}${Ce}${et}${tt}${rt}${V.configField}
 }
-${T("schedulerStub",tt,["cancel","runAfter","runAt"])}${T("storageStub",rt,["createMultipartUpload","delete","download","generateUploadUrl","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","list","resumeMultipartUpload","store","upload"],{sync:["getUrl","resumeMultipartUpload"]})}${nt}${gt}${ot}${b.stubs}${Ee}
-${nr}
+${_("schedulerStub",at,["cancel","runAfter","runAt"])}${_("storageStub",st,["createMultipartUpload","delete","download","generateUploadUrl","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","list","resumeMultipartUpload","store","upload"],{sync:["getUrl","resumeMultipartUpload"]})}${ot}${wt}${ct}${y.stubs}${Le}
+${Rt}
 
 /**
  * Build the project's shard Durable Object. Export the result as \`ShardDO\`
  * from the worker entry so wrangler binds it by name.
  */
 export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOState, env: unknown) => ShardDOBase =>
-    class extends ShardDOBase {${yt}
-        private migrated = false;
-
-${ir(c)}
-${Z.override}
-${sr}
-${Ve}${Qe}${ht}${pt}
+    class extends ShardDOBase {${kt}
+        private migrated = false;${St}${Ot}
+${ne.override}
+${At}
+${Qe}${Xe}${mt}${ft}
         protected override lifecycleHookPaths(event: "connect" | "disconnect" | "init" | "reactor" | "whisper"): readonly string[] {
             return LUNORA_LIFECYCLE_HOOKS[event];
         }
-${ut}${W.override}${ft}
+${gt}${V.override}${yt}
         // One \`onQueryChange\` dispatch. Mirrors \`executeSubscription\` — the
         // socket-terminated half of the same reactivity — and differs only in who
         // consumes the result: the base's \`dispatchReactors\` stores the digest as
@@ -1391,7 +1489,18 @@ ${ut}${W.override}${ft}
         // would instead run an app's reactor as whichever user happened to write
         // last, which is worse than running it as nobody.
         protected override async runReactor(functionPath: string, previousDigest?: string): Promise<{ digest: string; ran: boolean; tables: readonly string[] } | undefined> {
-            const registered = LUNORA_FUNCTIONS[functionPath];
+${l?`            const requestScope = this.captureRequestScope();
+            const preparation = this.prepareFunction(functionPath, "reactor");
+
+            if (preparation !== undefined) {
+                try {
+                    await preparation;
+                } finally {
+                    this.restoreRequestScope(requestScope);
+                }
+            }
+
+`:""}            const registered = LUNORA_FUNCTIONS[functionPath];
 
             if (!registered || registered.kind !== "mutation") {
                 return undefined;
@@ -1458,7 +1567,7 @@ ${ut}${W.override}${ft}
         protected override studioFeatures(): StudioFeaturesResult {
             return LUNORA_STUDIO_FEATURES();
         }
-${$.evaluateOverride}${$.subscriptionOverride}${qe}${Ue}
+${U.evaluateOverride}${U.subscriptionOverride}${Be}${We}
         protected override advisories(): AdvisoryFinding[] {
             return LUNORA_ADVISORIES();
         }
@@ -1467,17 +1576,17 @@ ${$.evaluateOverride}${$.subscriptionOverride}${qe}${Ue}
             return LUNORA_ADVISOR_PROCEDURES();
         }
 
-${tr}
+${cr}
 
         protected override ensureMigrated(): void {
             if (this.migrated) {
                 return;
             }
 
-            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false${ae} });
+            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false${R} });
             this.migrated = true;
         }
-${H?`
+${G?`
         protected override runShardSearchBackfill(options: { maxPages?: number }): SearchBackfillProgress {
             // Migrations create the fts5 companions; without them every backfill
             // statement would raise "no such table" on a shard that has never
@@ -1486,7 +1595,7 @@ ${H?`
 
             return backfillSearchIndexes(this.sql as SqlExec, schema as unknown as SchemaLike, options);
         }
-`:""}${at}
-${rr({actionOnlyFields:Rt,agentsBuild:ke,agentsContextField:Se,containersBuild:pe,containersContextField:me,databaseOptions:it,everyContextBuild:vt,everyContextField:kt,facadeBlock:wt,globalDatabaseLine:lt,notifyBuild:St,ormContextField:ct,paymentsBuild:Ae,paymentsContextField:De,queuesBuild:se,queuesContextField:oe,topicsBuild:ce,topicsContextField:le,vectorsBuild:st,vectorsContextField:dt,workflowsBuild:be,workflowsContextField:ye,actionOnlyBuild:xt})}
+`:""}${it}
+${lr({lazyFunctions:l,actionOnlyFields:_t,agentsBuild:xe,agentsContextField:Ae,containersBuild:fe,containersContextField:be,databaseOptions:lt,everyContextBuild:Tt,everyContextField:Ct,facadeBlock:Dt,globalDatabaseLine:pt,notifyBuild:Et,ormContextField:ht,paymentsBuild:Te,paymentsContextField:Ee,queuesBuild:de,queuesContextField:ce,topicsBuild:he,topicsContextField:pe,vectorsBuild:dt,vectorsContextField:ut,workflowsBuild:ve,workflowsContextField:ke,actionOnlyBuild:Lt})}
     };
-`};export{cr as b,Lr as e};
+`};export{br as b,Fr as e};