@lunora/codegen 1.0.0-alpha.329 → 1.0.0-alpha.330

package/dist/packem_shared/{shard-BtImwCVL.mjs → shard-CsfiXxV0.mjs}

@@ -1,4 +1,4 @@
-import{LunoraError as $t}from"@lunora/errors";import{serializeSchemaSnapshot as qt,hashSchemaSnapshot as Ft}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{isHyperdriveGlobalTable as Ut,isD1GlobalTable as Bt}from"./isD1GlobalTable-udvHAAzD.mjs";import{r as jt}from"./json-data-Chfs2Cz5.mjs";import{r as L,e as Wt,a as Ht,b as Vt,c as Kt,d as Gt,f as Qt,g as Jt,h as zt,i as Yt,j as Xt,k as Zt,l as er,m as tr,n as rr,o as nr,p as ar,q as sr}from"./shard-runtime-BpoCV-aM.mjs";import{u as z,i as or,G as ir,d as dr}from"./shared-DnCokNcE.mjs";import{p as cr}from"./platform-8oj7iXQy.mjs";import{i as lr}from"./schema-BgM8A3XV.mjs";const h=(n,e)=>`((): (() => ${e}) => { let cached: ${e} | undefined; return () => (cached ??= JSON.parse(${JSON.stringify(JSON.stringify(n))}) as ${e}); })()`,oe=["categories","description","facing","level","remediation","title"],ur=n=>{const e={};return{advisoryRows:n.map(a=>{let r=e[a.name];return r||(r=Object.fromEntries(oe.filter(s=>s in a).map(s=>[s,a[s]])),e[a.name]=r),Object.fromEntries(Object.entries(a).filter(([s,d])=>!oe.includes(s)||JSON.stringify(d)!==JSON.stringify(r[s])))}),advisoryRules:e}},hr=`        /**
+import{LunoraError as de}from"@lunora/errors";import{serializeSchemaSnapshot as Ht,hashSchemaSnapshot as Vt}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{isHyperdriveGlobalTable as Kt,isD1GlobalTable as Gt}from"./isD1GlobalTable-udvHAAzD.mjs";import{r as Qt}from"./json-data-Chfs2Cz5.mjs";import{r as E,e as Jt,a as zt,b as Yt,c as Xt,d as Zt,f as er,g as tr,h as rr,i as nr,j as ar,k as sr,l as or,m as ir,n as dr,o as cr,p as lr,q as ur}from"./shard-runtime-BpoCV-aM.mjs";import{u as Y,i as hr,a as pr,I as mr,c as gr,G as fr,d as br}from"./shared-DnCokNcE.mjs";import{p as wr}from"./platform-8oj7iXQy.mjs";import{i as yr}from"./schema-BgM8A3XV.mjs";const h=(n,e)=>`((): (() => ${e}) => { let cached: ${e} | undefined; return () => (cached ??= JSON.parse(${JSON.stringify(JSON.stringify(n))}) as ${e}); })()`,ce=["categories","description","facing","level","remediation","title"],vr=n=>{const e={};return{advisoryRows:n.map(a=>{let r=e[a.name];return r||(r=Object.fromEntries(ce.filter(o=>o in a).map(o=>[o,a[o]])),e[a.name]=r),Object.fromEntries(Object.entries(a).filter(([o,d])=>!ce.includes(o)||JSON.stringify(d)!==JSON.stringify(r[o])))}),advisoryRules:e}},kr=`        /**
          * The bare writer every admin/maintenance entry point writes through.
          *
          * Admin and maintenance writes go through the SAME reactive-cache hooks as a
@@ -30,7 +30,7 @@ import{LunoraError as $t}from"@lunora/errors";import{serializeSchemaSnapshot as
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
             });
-        }`,m=(n="")=>`            const writer = this.adminWriter(${n});`,pr=`${hr}
+        }`,g=(n="")=>`            const writer = this.adminWriter(${n});`,Sr=`${kr}
 
         protected override async runShardDataMigration(args: RunShardMigrationArgs): Promise<MigrationRunResult> {
             this.ensureMigrated();
@@ -47,7 +47,7 @@ import{LunoraError as $t}from"@lunora/errors";import{serializeSchemaSnapshot as
                 throw new LunoraError("MIGRATION_NOT_FOUND", \`data migration "\${args.id}" is not registered\`, { status: 404 });
             }
 
-${m()}
+${g()}
 
             return runDataMigration({
                 ...(args.batchSize === undefined ? {} : { batchSize: args.batchSize }),
@@ -80,7 +80,7 @@ ${m()}
 
             this.ensureMigrated();
 
-${m("headroom ?? this.transactionHeadroom()")}
+${g("headroom ?? this.transactionHeadroom()")}
 
             if (args.op === "insert") {
                 const id = await writer.insert(args.table, args.doc ?? {});
@@ -135,7 +135,7 @@ ${m("headroom ?? this.transactionHeadroom()")}
         protected override async runShardExport(args: RunShardExportArgs): Promise<ExportRow[]> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             const rows: ExportRow[] = [];
 
@@ -152,7 +152,7 @@ ${m()}
         protected override async runShardImport(args: RunShardImportArgs): Promise<ImportShardResult> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`importShardRows\` inserts with \`allowExplicitId\`, so a source
             // database's \`_id\`s carry across verbatim and every foreign key
@@ -163,7 +163,7 @@ ${m()}
         protected override async runShardRankBefore(args: RunShardRankBeforeArgs): Promise<{ before: number; total: number }> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`rankBefore\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
             // but the shard writer from \`createShardCtxDb\` always defines it.
@@ -181,7 +181,7 @@ ${m()}
         protected override async runShardFindRelated(args: RunShardFindRelatedArgs): Promise<RelatedPage> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`related\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
             // but the shard writer from \`createShardCtxDb\` always defines it — it
@@ -199,7 +199,7 @@ ${m()}
         protected override async runShardRankPage(args: RunShardRankPageArgs): Promise<ShardRankPageResult> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             // \`rankPageRows\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
             // but the shard writer from \`createShardCtxDb\` always defines it. The sort
@@ -220,18 +220,18 @@ ${m()}
         protected override async runShardApplyCdc(args: RunShardApplyCdcArgs): Promise<{ applied: number }> {
             this.ensureMigrated();
 
-${m()}
+${g()}
 
             await applyCdcChanges(writer, args.changes);
 
             return { applied: args.changes.length };
-        }`,mr=({actionOnlyBuild:n,actionOnlyFields:e,agentsBuild:t,agentsContextField:a,containersBuild:r,containersContextField:s,databaseOptions:d,everyContextBuild:g,everyContextField:y,facadeBlock:c,globalDatabaseLine:f,lazyFunctions:l=!1,notifyBuild:I,ormContextField:v,paymentsBuild:P,paymentsContextField:N,queuesBuild:k,queuesContextField:M,topicsBuild:i,topicsContextField:b,vectorsBuild:$,vectorsContextField:q,workflowsBuild:F,workflowsContextField:A})=>{const D=e.length>0,U=v===""?"{ db }":"{ db, orm: bindOrm(facade) }",x=v===""?"":`
-                orm: databaseContext.orm,`,u=v===""?"":`
-                                orm: { configurable: true, enumerable: true, value: mutationDatabase.orm, writable: true },`,T=D?`
+        }`,Rr=({actionOnlyBuild:n,actionOnlyFields:e,agentsBuild:t,agentsContextField:a,containersBuild:r,containersContextField:o,databaseOptions:d,everyContextBuild:f,everyContextField:v,facadeBlock:l,globalDatabaseLine:b,lazyFunctions:c=!1,notifyBuild:L,ormContextField:S,paymentsBuild:R,paymentsContextField:I,queuesBuild:P,queuesContextField:k,topicsBuild:N,topicsContextField:i,vectorsBuild:w,vectorsContextField:M,workflowsBuild:$,workflowsContextField:q})=>{const x=e.length>0,F=S===""?"{ db }":"{ db, orm: bindOrm(facade) }",U=S===""?"":`
+                orm: databaseContext.orm,`,O=S===""?"":`
+                                orm: { configurable: true, enumerable: true, value: mutationDatabase.orm, writable: true },`,u=x?`
             // ActionCtx-only helpers (external, non-deterministic I/O): constructed
             // and attached only for an \`action\` so query/mutation ctx never carry them.
             if (isAction) {
-${n.replaceAll(/^(?=.)/gmu,"    ")}${e.map(R=>`                ctx.${R} = ${R};`).join(`
+${n.replaceAll(/^(?=.)/gmu,"    ")}${e.map(p=>`                ctx.${p} = ${p};`).join(`
 `)}
             }
 `:"";return`        private buildCtx(options: { bookmarks?: DispatchBookmark | undefined; functionPath?: string | undefined; headroom?: TransactionHeadroomTracker | undefined; identity?: SubscriptionIdentity | undefined; kind?: "query" | undefined; onRead?: ((table: string, idOrScan?: string) => void) | undefined; onReadRange?: ((range: KeyRange) => void) | undefined; scope?: QueryReadScope | undefined; trusted?: boolean | undefined } = {}): unknown {
@@ -261,7 +261,7 @@ ${n.replaceAll(/^(?=.)/gmu,"    ")}${e.map(R=>`                ctx.${R} = ${R};`
                 };
             })();
             const { identity, ip, userId } = caller;
-${$}${g}${r}${F}${k}${i}${t}
+${w}${f}${r}${$}${P}${N}${t}
             // Which dispatch this ctx belongs to. Drives the two deferral facades
             // below and the \`ctx.run*\` caller guard; a ctx built for an
             // admin/lifecycle path has no registered function, and so no kind. An
@@ -367,7 +367,7 @@ ${$}${g}${r}${F}${k}${i}${t}
             // so both write to the same trace.
             const span = this.makeDispatchSpan(traceAnchor, observability);
 
-${f}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
+${b}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
             // adds aggregate counters (call count, total time, per-operation
             // breakdown) to the wide event rather than a span per call, so a
             // handler making hundreds of queries stays readable. See
@@ -376,11 +376,11 @@ ${f}            // \`ctx.db\`, wrapped in automatic instrumentation: by default
             // mutation must rebuild its DB and table/ORM views with its own queue.
             const makeDatabaseContext = (scheduler: SchedulerLike) => {
                 const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${d}), logFunctionPath, traceAnchor, observability);
-${c}                return ${U};
+${l}                return ${F};
             };
             const databaseContext = makeDatabaseContext(scheduler);
             const db = databaseContext.db;
-${P}
+${R}
 
             // \`ctx.trace\` / \`ctx.metrics\`: spans and measurements to the same sink.
             // The trace anchor is threaded explicitly for the same reason \`identity\`
@@ -388,7 +388,7 @@ ${P}
             // writing mutation's trace from the shared per-request field.
             const trace = this.makeTracer(logFunctionPath, observability, traceAnchor);
             const metrics = this.makeMetrics(logFunctionPath, observability);
-${I}
+${L}
             // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
             // captured ONCE so the whole handler body sees a single stable value.
             // A \`query\` handler is re-run by every live subscription that reads it,
@@ -439,21 +439,21 @@ ${I}
                 // to the handler so code that signs its own URLs (a copy-in
                 // \`createStorage\`) can fall back to it too. \`undefined\` for a
                 // query and for a deferred dispatch, for the reasons given there.
-                origin: requestOrigin,${x}
+                origin: requestOrigin,${U}
                 scheduler,
                 span,
                 storage: contextStorage,
-                trace,${q}${y}${N}${s}${A}${M}${b}${a}
+                trace,${M}${v}${I}${o}${q}${k}${i}${a}
             };
-${D?`            const isAction = contextKind === "action";
-`:""}${T}
-${l?`            const captureScope = (): (() => void) => {
+${x?`            const isAction = contextKind === "action";
+`:""}${u}
+${c?`            const captureScope = (): (() => void) => {
                 const requestScope = this.captureRequestScope();
                 return () => this.restoreRequestScope(requestScope);
             };
 
 `:""}            const installRun = (target: Record<string, unknown>, kind: typeof contextKind): void => {
-                target.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, target, kind${l?", undefined, captureScope":""});
+                target.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, target, kind${c?", undefined, captureScope":""});
                 // The composed mutation runs under the SAME wrapper the top-level RPC
                 // uses, so "do the transactional work in a mutation and call it from the
                 // action" — the recipe the docs give for atomicity — actually is atomic.
@@ -469,7 +469,7 @@ ${l?`            const captureScope = (): (() => void) => {
 
                             return Object.defineProperties({}, {
                                 ...Object.getOwnPropertyDescriptors(target),
-                                db: { configurable: true, enumerable: true, value: mutationDatabase.db, writable: true },${u}
+                                db: { configurable: true, enumerable: true, value: mutationDatabase.db, writable: true },${O}
                                 scheduler: { configurable: true, enumerable: true, value: mutationScheduler, writable: true },
                                 storage: { configurable: true, enumerable: true, value: withDeferredDeletes(storage), writable: true },
                             });
@@ -479,7 +479,7 @@ ${l?`            const captureScope = (): (() => void) => {
                         installRun(mutationCtx, kind);
                     }
 
-                    return dispatchRun("mutation", reference.__lunoraRef, fnArgs, mutationCtx, kind, async (work) => this.runMutationTransaction(mutationCtx, work)${l?", captureScope":""});
+                    return dispatchRun("mutation", reference.__lunoraRef, fnArgs, mutationCtx, kind, async (work) => this.runMutationTransaction(mutationCtx, work)${c?", captureScope":""});
                 };
                 // \`ctx.runQuery(ref, args, { untracked: true })\` runs the sub-query on
                 // its OWN query context, built without the subscription's read-footprint
@@ -502,7 +502,7 @@ ${l?`            const captureScope = (): (() => void) => {
                         runOptions?.untracked === true
                             ? this.buildCtx({ bookmarks: options.bookmarks, functionPath: options.functionPath, headroom: options.headroom, identity: caller, kind: "query", scope: options.scope })
                             : queryContext(),
-                        kind,${l?`
+                        kind,${c?`
                         undefined,
                         captureScope,`:""}
                     );
@@ -526,7 +526,7 @@ ${l?`            const captureScope = (): (() => void) => {
 
                 if (queryView === undefined) {
                     const descriptors: PropertyDescriptorMap = Object.getOwnPropertyDescriptors(ctx);
-${e.map(R=>`                    delete descriptors.${R};
+${e.map(p=>`                    delete descriptors.${p};
 `).join("")}                    // Writable and configurable, like the plain fields they replace.
                     const field = (value: unknown): PropertyDescriptor => ({ configurable: true, enumerable: true, value, writable: true });
 
@@ -545,7 +545,7 @@ ${e.map(R=>`                    delete descriptors.${R};
             installRun(ctx, contextKind);
 
             return ctx;
-        }`},ie=`// Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
+        }`},le=`// Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
 // referencing call fails loudly with a clear error instead of overflowing the
 // stack. Tracked across the awaited handler chain (one DO invocation is
 // single-threaded), so the counter reflects true nesting depth.
@@ -611,7 +611,7 @@ const dispatchRun = async (
     } finally {
         runDepth -= 1;
     }
-};`,gr=n=>n?ie.replace("    runTransactional?: (work: () => Promise<unknown>) => Promise<unknown>,",`    runTransactional?: (work: () => Promise<unknown>) => Promise<unknown>,
+};`,xr=n=>n?le.replace("    runTransactional?: (work: () => Promise<unknown>) => Promise<unknown>,",`    runTransactional?: (work: () => Promise<unknown>) => Promise<unknown>,
     captureScope?: () => () => void,`).replace(`    try {
         // A mutation composed from an action`,`    try {
         let loaded = getLoadedFunction(functionPath);
@@ -632,7 +632,7 @@ const dispatchRun = async (
 
         const loadedFunction = loaded;
 
-        // A mutation composed from an action`).replaceAll("registered.handler","loadedFunction.handler"):ie,fr=`        public override async handleRpc(functionPath: string, args: Record<string, unknown>, headroom?: TransactionHeadroomTracker, scope?: QueryReadScope, bookmarks?: DispatchBookmark): Promise<unknown> {
+        // A mutation composed from an action`).replaceAll("registered.handler","loadedFunction.handler"):le,Or=`        public override async handleRpc(functionPath: string, args: Record<string, unknown>, headroom?: TransactionHeadroomTracker, scope?: QueryReadScope, bookmarks?: DispatchBookmark): Promise<unknown> {
 __PREPARE_FUNCTION__            const registered = LUNORA_FUNCTIONS[functionPath];
 
             // Internal functions are reachable server-side only: via \`ctx.run*\`
@@ -816,7 +816,7 @@ __COMMITTED_CATCH__            } finally {
         // \`ctx.scheduler\` call that reached the buffer in the first place.
         protected override scheduleOutboxScheduler(): SchedulerLike | undefined {
             return config.scheduler?.((this.env ?? {}) as Record<string, unknown>) as SchedulerLike | undefined;
-        }`,br=`        protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): Promise<{ ranges?: Map<string, KeyRange[]>; result: unknown; tables: Set<string> } | null> {
+        }`,Ar=`        protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): Promise<{ ranges?: Map<string, KeyRange[]>; result: unknown; tables: Set<string> } | null> {
             const registered = LUNORA_FUNCTIONS[functionPath];
 
             if (!registered || registered.kind !== "query" || registered.visibility === "internal") {
@@ -857,7 +857,7 @@ __PREPARE_FUNCTION__            this.ensureMigrated();
                 // \`ctx.auth\` stream as nobody — or as a concurrent RPC's caller.
                 iterator: (signal) => (registered.handler as (context: unknown, args: Record<string, unknown>, signal: AbortSignal) => AsyncIterable<unknown>)(this.buildCtx({ functionPath, identity }), args, signal),
             };
-        }`,wr=`            } catch (error) {
+        }`,Dr=`            } catch (error) {
                 // The write committed before this failed. Mark the error so the caller can tell
                 // a durable write from a rollback: the rethrow still reaches the caller unchanged.
                 if (typeof error === "object" && error !== null) {
@@ -865,7 +865,7 @@ __PREPARE_FUNCTION__            this.ensureMigrated();
                 }
 
                 throw error;
-`,yr=(n,e=!1)=>{const t=e?`            const registeredBeforeLoad = LUNORA_FUNCTIONS[functionPath];
+`,Tr=(n,e=!1)=>{const t=e?`            const registeredBeforeLoad = LUNORA_FUNCTIONS[functionPath];
 
             if (registeredBeforeLoad?.visibility === "internal" && !this.isSystemDispatch()) {
                 throw new LunoraError("FUNCTION_NOT_FOUND", "function not registered: " + functionPath);
@@ -882,7 +882,7 @@ __PREPARE_FUNCTION__            this.ensureMigrated();
                 }
             }
 
-`:"";return fr.replace("__COMMITTED_CATCH__",n?wr:"").replace("__PREPARE_FUNCTION__",`${t}${a}`)},vr=n=>{const e={};for(const t of n.tables){const a={};for(const[r,s]of Object.entries(t.shape)){const d=z(s);d.kind==="id"&&d.tableName!==void 0&&(a[r]=d.tableName)}Object.keys(a).length>0&&(e[t.name]=a)}return e},kr=n=>{const e={};for(const t of n.tables){const a=[];for(const[r,s]of Object.entries(t.shape))z(s).kind==="storage"&&a.push(r);a.length>0&&(e[t.name]=a)}return e},Sr=n=>{const e={};for(const t of n.tables){const a=[...t.indexes.map(r=>({fields:[...r.fields],name:r.name,type:"index",...r.unique===!0?{unique:!0}:{}})),...t.searchIndexes.map(r=>({fields:[r.field,...r.filterFields??[]],name:r.name,type:"search"})),...(t.geoIndexes??[]).map(r=>({fields:[r.field],name:r.name,type:"geo"})),...t.rankIndexes.map(r=>({fields:r.sortBy.map(s=>s.field),name:r.name,type:"rank"})),...t.vectorIndexes.map(r=>({fields:r.field===void 0?[]:[r.field],name:r.name,type:"vector"}))];a.length>0&&(e[t.name]=a)}return e},Rr=n=>{const e=[];for(const t of n.tables)!t.ttl||t.shardMode==="global"||e.push({...t.ttl.after===void 0?{}:{after:t.ttl.after},field:t.ttl.field,...t.softDelete?{softDeleteField:t.softDelete.field}:{},table:t.name});return e},xr=n=>{if(n.kind!=="union"||n.members===void 0||n.members.length===0)return;const e=[];for(const t of n.members){if(t.kind!=="literal"||t.literalValue===void 0)return;try{const a=JSON.parse(t.literalValue);if(typeof a!="string")return;e.push(a)}catch{return}}return e},Or=(n,e,t)=>{const a=z(e),r={name:n,optional:or(e),type:a.kind};if(a.kind==="id"&&a.tableName!==void 0){r.ref=a.tableName;const d=t.get(n);d!==void 0&&(r.onDelete=d)}a.kind==="storage"&&(r.isStorage=!0,a.bucket!==void 0&&(r.bucket=a.bucket));const s=xr(a);return s!==void 0&&(r.enumValues=s),a.column?.notNull===!1&&(r.nullable=!0),r},Ar=n=>{const e={};for(const t of n.tables){const a=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"},...t.commitOrdered===!0?[{name:"_commitSeq",optional:!1,type:"number"}]:[]],r=new Map(t.relations.flatMap(s=>s.kind==="one"?[[s.field,s.onDelete]]:[]));for(const[s,d]of Object.entries(t.shape))a.push(Or(s,d,r));e[t.name]=a}return e},Dr=({hasMutators:n,hasShapes:e,rlsData:t})=>{const a=e?`
+`:"";return Or.replace("__COMMITTED_CATCH__",n?Dr:"").replace("__PREPARE_FUNCTION__",`${t}${a}`)},Cr=n=>{const e={};for(const t of n.tables){const a={};for(const[r,o]of Object.entries(t.shape)){const d=Y(o);d.kind==="id"&&d.tableName!==void 0&&(a[r]=d.tableName)}Object.keys(a).length>0&&(e[t.name]=a)}return e},_r=n=>{const e={};for(const t of n.tables){const a=[];for(const[r,o]of Object.entries(t.shape))Y(o).kind==="storage"&&a.push(r);a.length>0&&(e[t.name]=a)}return e},Er=n=>{const e={};for(const t of n.tables){const a=[...t.indexes.map(r=>({fields:[...r.fields],name:r.name,type:"index",...r.unique===!0?{unique:!0}:{}})),...t.searchIndexes.map(r=>({fields:[r.field,...r.filterFields??[]],name:r.name,type:"search"})),...(t.geoIndexes??[]).map(r=>({fields:[r.field],name:r.name,type:"geo"})),...t.rankIndexes.map(r=>({fields:r.sortBy.map(o=>o.field),name:r.name,type:"rank"})),...t.vectorIndexes.map(r=>({fields:r.field===void 0?[]:[r.field],name:r.name,type:"vector"}))];a.length>0&&(e[t.name]=a)}return e},Lr=n=>{const e=[];for(const t of n.tables)!t.ttl||t.shardMode==="global"||e.push({...t.ttl.after===void 0?{}:{after:t.ttl.after},field:t.ttl.field,...t.softDelete?{softDeleteField:t.softDelete.field}:{},table:t.name});return e},Ir=n=>{if(n.kind!=="union"||n.members===void 0||n.members.length===0)return;const e=[];for(const t of n.members){if(t.kind!=="literal"||t.literalValue===void 0)return;try{const a=JSON.parse(t.literalValue);if(typeof a!="string")return;e.push(a)}catch{return}}return e},Pr=(n,e,t)=>{const a=Y(e),r={name:n,optional:hr(e),type:a.kind};if(a.kind==="id"&&a.tableName!==void 0){r.ref=a.tableName;const d=t.get(n);d!==void 0&&(r.onDelete=d)}a.kind==="storage"&&(r.isStorage=!0,a.bucket!==void 0&&(r.bucket=a.bucket));const o=Ir(a);return o!==void 0&&(r.enumValues=o),a.column?.notNull===!1&&(r.nullable=!0),r},Nr=n=>{const e={};for(const t of n.tables){const a=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"},...t.commitOrdered===!0?[{name:"_commitSeq",optional:!1,type:"number"}]:[]],r=new Map(t.relations.flatMap(o=>o.kind==="one"?[[o.field,o.onDelete]]:[]));for(const[o,d]of Object.entries(t.shape))a.push(Pr(o,d,r));e[t.name]=a}return e},Mr=({hasMutators:n,hasShapes:e,rlsData:t})=>{const a=e?`
         protected override resolveShape(name: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string } | undefined {
             const shape = LUNORA_SHAPES[name];
 
@@ -945,14 +945,14 @@ __PREPARE_FUNCTION__            this.ensureMigrated();
 
             return { ...(shape.columns === undefined ? {} : { columns: shape.columns }), effectiveWhere, global: isGlobal, table: shape.table };
         }
-`:"",r=e?[...new Set(t.policies.filter(c=>c.on==="read"&&c.table!=="").map(c=>c.table))].toSorted((c,f)=>c.localeCompare(f)):[],s=r.length>0?`
+`:"",r=e?[...new Set(t.policies.filter(l=>l.on==="read"&&l.table!=="").map(l=>l.table))].toSorted((l,b)=>l.localeCompare(b)):[],o=r.length>0?`
 /** Refuses to boot a shape that would replicate around the read policies its table is governed by (\`defineShape({ use })\` is how a shape opts in; \`use: []\` acknowledges an ungoverned one). */
 assertShapesDeclareReadPolicies(LUNORA_SHAPES, ${JSON.stringify(r)}, (schema as unknown as { rlsMode?: string }).rlsMode === "required");
 `:"";return{customMutatorOverride:n?`
         protected override isCustomMutator(functionPath: string): boolean {
             return LUNORA_MUTATOR_PATHS.has(functionPath);
         }
-`:"",shapeGuardImport:e?"assertShapeShardable, ":"",shapeReadPolicyAssertion:s,shapeReadPolicyImport:s===""?"":"assertShapesDeclareReadPolicies, ",shapeResolveOverride:a}},Tr=(n,e)=>n?`
+`:"",shapeGuardImport:e?"assertShapeShardable, ":"",shapeReadPolicyAssertion:o,shapeReadPolicyImport:o===""?"":"assertShapesDeclareReadPolicies, ",shapeResolveOverride:a}},$r=(n,e)=>n?`
         protected override async readGlobalShapeRows(resolved: { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string }, identity?: SubscriptionIdentity): Promise<Array<{ doc: Record<string, unknown>; id: string }>> {
             const env = this.env as Record<string, unknown>;
             // A shape read performs no writes, so the widened request only needs
@@ -1018,7 +1018,7 @@ assertShapesDeclareReadPolicies(LUNORA_SHAPES, ${JSON.stringify(r)}, (schema as
 
             return globalDb.cdcChangedTables?.(sinceSeq, cursorOnly === undefined ? {} : { cursorOnly });
         }
-`:"",Cr=n=>({externalSourceOverride:n?`
+`:"",qr=n=>({externalSourceOverride:n?`
         protected override async pollExternalSources(trace?: TraceRefLike): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
@@ -1171,8 +1171,8 @@ assertShapesDeclareReadPolicies(LUNORA_SHAPES, ${JSON.stringify(r)}, (schema as
 `:"",sourceClientCacheConst:n?`
 const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
-`:""}),Er=(n,e)=>{const t=e.length>0,r=n?L("vectorsStub: VectorSearchLike","ctx.vectors: no vectors configured. Pass `vectors` to createShardDO().",["deleteByIds","getByIds","query","upsert","upsertMany","upsertNow"]):"",s=t?`            const vectorShardKey = this.currentShardKey();
-`:"",d=t?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",y=`, { ${["deferAfterCommit: (work) => this.deferAfterCommit(work)",...t?["namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey",`shardedIndexNames: [${e.map(l=>JSON.stringify(l)).join(", ")}]`]:[]].join(", ")} }`,c=n?`
+`:""}),Fr=(n,e)=>{const t=e.length>0,r=n?E("vectorsStub: VectorSearchLike","ctx.vectors: no vectors configured. Pass `vectors` to createShardDO().",["deleteByIds","getByIds","query","upsert","upsertMany","upsertNow"]):"",o=t?`            const vectorShardKey = this.currentShardKey();
+`:"",d=t?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",v=`, { ${["deferAfterCommit: (work) => this.deferAfterCommit(work)",...t?["namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey",`shardedIndexNames: [${e.map(c=>JSON.stringify(c)).join(", ")}]`]:[]].join(", ")} }`,l=n?`
             const vectorSync = this.vectorSync(env);
             // Vectorize lives outside this shard's SQLite, so a query whose result
             // depends on a similarity search cannot be proven current on reconnect —
@@ -1189,7 +1189,7 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
             }
 
             const lunora = createVectors({ indexes: config.vectors(env) });
-${s}            const vectors = createContextVectors(lunora${y});
+${o}            const vectors = createContextVectors(lunora${v});
 
             return {
                 backfill: createVectorBackfillSync({ ${d}schema: schema as unknown as VectorSchemaLike, upsertMany: lunora.upsertMany, vectors }),
@@ -1215,14 +1215,39 @@ ${s}            const vectors = createContextVectors(lunora${y});
                 ordered: async (read, work) => this.runOrderedAfterWrites(read, work),
             });
         }
-`:"",vectorsBuild:c,vectorsStub:r}},Wr=({advisories:n=[],advisorProcedures:e=[],agents:t=[],capabilities:a=new Set,containers:r=[],env:s,flagKeys:d=[],hasFlags:g=!1,hasNotify:y=!1,hasRooms:c=!1,hasSockets:f=!1,lazyFunctions:l=!1,hasVectors:I=!0,liveStreams:v=!1,maskMetadata:P,mutators:N=[],queues:k=[],rlsMetadata:M,schema:i,schemaSnapshot:b,shapes:$=[],storageRules:q,studioFeatures:F,services:A=[],topics:D=[],useUmbrella:U=!1,workflows:x=[]})=>{const u=dr(U),T=N.length>0,S=$.length>0,R=b===void 0?"":qt(b),de=b===void 0?"":`
+`:"",vectorsBuild:l,vectorsStub:r}},Xr=({advisories:n=[],advisorProcedures:e=[],agents:t=[],capabilities:a=new Set,containers:r=[],env:o,flagKeys:d=[],hasFlags:f=!1,hasNotify:v=!1,hasRooms:l=!1,hasSockets:b=!1,lazyFunctions:c=!1,hasVectors:L=!0,liveStreamDeclarations:S=[],liveStreams:R=!1,maskMetadata:I,mutators:P=[],queues:k=[],rlsMetadata:N,schema:i,schemaSnapshot:w,shapes:M=[],storageRules:$,studioFeatures:q,services:x=[],topics:F=[],useUmbrella:U=!1,workflows:O=[]})=>{const u=br(U),B=P.length>0,p=M.length>0,ue=w===void 0?"":Ht(w),he=w===void 0?"":`
 /** Structural schema snapshot + its content hash, recorded in the shard's \`__lunora_schema_history\` ledger on cold start so the studio can show a schema-version timeline and diff any two versions. */
-const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(Ft(b))}, json: ${JSON.stringify(R)} };
-`,ce=b===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",w=Wt(a),C=Ht(g,u.flags),B=Vt(d,g,u.flags),j=sr(y),W=Kt(s),{build:le,contextField:ue,importLines:he,specs:pe}=Gt(cr(k)),{build:me,contextField:ge,importLines:fe,specs:be}=Qt(D,k),H=Jt(A,u.server),{build:we,contextField:ye,importLines:ve,specs:ke}=zt(r,i.jurisdiction),{build:Se,contextField:Re,importLines:xe,specs:Oe}=Yt(x),{build:Ae,contextField:De,importLines:Te,specs:Ce}=Xt(t),{build:Ee,configField:_e,contextField:Le,imports:Ie,stub:Pe}=Zt(a.has("payments")),Ne=n,{advisoryRules:Me,advisoryRows:$e}=ur(Ne),qe=e,Y=M??{policies:[],roles:[]},Fe=P??{columns:[]},Ue=q??{rules:[]},Be=F??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,privacy:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:je,override:We}=er(x),{constant:He,override:Ve}=tr(k),p=I&&i.vectorIndexes.length>0,V=new Set(i.tables.filter(o=>lr(o)).map(o=>o.name)),X=p&&i.vectorIndexes.some(o=>V.has(o.table)),O=i.tables.some(o=>o.shardMode==="global"),K=rr(V),G=i.tables.some(o=>Ut(o)),Z=i.tables.some(o=>Bt(o)),E=i.tables.some(o=>o.externalSource!==void 0),ee=i.tables.some(o=>o.memory===!0),Q=i.tables.some(o=>o.shardMode!=="global"&&o.searchIndexes.length>0);if(Z&&G)throw new $t("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const J=i.tables.length>0,Ke=vr(i),Ge=Sr(i),Qe=Ar(i),Je=kr(i),te=Rr(i),re=nr(p,x.length>0,k.length>0,g,Q);S&&re.push("WhereInput");const ne=ar(O),{customMutatorOverride:ze,shapeGuardImport:Ye,shapeReadPolicyAssertion:Xe,shapeReadPolicyImport:Ze,shapeResolveOverride:et}=Dr({hasMutators:T,hasShapes:S,rlsData:Y}),_=[`import type { ${re.join(", ")} } from "${u.do}";`,`import { applyCdcChanges, createStableIdFactory, ${Q?"backfillSearchIndexes, ":""}${p?"backfillVectorIndexes, ":""}buildReprojectionMigration, ${ee?"clearMemoryTables, ":""}${Ye}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${E?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}markUnvouchableReads, ${X?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${ne.importFragment}ShardDO as ShardDOBase } from "${u.do}";`,...E?[`import type { ExternalSourceLike, SourceClientLike, TraceRefLike } from "${u.do}";`]:[],S?`import { asBucketStorage, ${Ze}beginDeferredDeletes, beginDeferredSchedules, composeShapeReadWhere, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${u.server}";`:`import { asBucketStorage, beginDeferredDeletes, beginDeferredSchedules, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${u.server}";`];J&&_.push(`import { bindOrm, bindTableFacade } from "${u.server}";`),p&&_.push('import type { SchemaLike as VectorSchemaLike, VectorBackfillSync, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectorBackfillSync, createVectors, createVectorSyncHook, vectorBackfillTargets } from "@lunora/bindings/vectors";'),_.push(...w.importLines,...C.importLines,...j.importLines,...W.importLines,...ve,...xe,...he,...fe,...H.importLines,...Te,...Ie,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...l?["getLoadedFunction","loadFunction"]:[],...T?["LUNORA_MUTATOR_PATHS"]:[],...c?["LUNORA_ROOMS"]:[],...f?["LUNORA_SOCKETS"]:[],...S?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const tt=p?`
-    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",rt=Z?`
-    d1?: (env: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string }) => DatabaseWriterLike | undefined;`:"",nt=G?`
-    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",at=E?`
-    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",st="ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().",ot="ctx.scheduler: no scheduler configured. Pass `scheduler` to createShardDO().",it="ctx.storage: no storage configured. Pass `storage` to createShardDO().",dt=O?L("globalDbStub: DatabaseWriterLike",st,["aggregate","count","delete","explain","findFirst","findFirstOrThrow","findMany","get","groupBy","insert","normalizeId","patch","query","rank","rankPage","replace"],{sync:["normalizeId","query"]}):"",{vectorSyncMethod:ct,vectorsBuild:lt,vectorsStub:ut}=Er(p,X?i.vectorIndexes.filter(o=>V.has(o.table)).map(o=>o.name):[]),ht=`{
+const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(Vt(w))}, json: ${JSON.stringify(ue)} };
+`,pe=w===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",y=Jt(a),T=zt(f,u.flags),j=Yt(d,f,u.flags),W=ur(v),H=Xt(o),{build:me,contextField:ge,importLines:fe,specs:be}=Zt(wr(k)),{build:we,contextField:ye,importLines:ve,specs:ke}=er(F,k),V=tr(x,u.server),{build:Se,contextField:Re,importLines:xe,specs:Oe}=rr(r,i.jurisdiction),{build:Ae,contextField:De,importLines:Te,specs:Ce}=nr(O),{build:_e,contextField:Ee,importLines:Le,specs:Ie}=ar(t),{build:Pe,configField:Ne,contextField:Me,imports:$e,stub:qe}=sr(a.has("payments")),Fe=n,{advisoryRules:Ue,advisoryRows:Be}=vr(Fe),je=e,X=N??{policies:[],roles:[]},We=I??{columns:[]},He=$??{rules:[]},Ve=q??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,privacy:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:Ke,override:Ge}=or(O),{constant:Qe,override:Je}=ir(k),m=L&&i.vectorIndexes.length>0,K=new Set(i.tables.filter(s=>yr(s)).map(s=>s.name)),Z=m&&i.vectorIndexes.some(s=>K.has(s.table)),A=i.tables.some(s=>s.shardMode==="global"),G=dr(K),Q=i.tables.some(s=>Kt(s)),ee=i.tables.some(s=>Gt(s)),C=i.tables.some(s=>s.externalSource!==void 0),te=i.tables.some(s=>s.memory===!0),J=i.tables.some(s=>s.shardMode!=="global"&&s.searchIndexes.length>0);if(ee&&Q)throw new de("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const z=i.tables.length>0,ze=Cr(i),Ye=Er(i),Xe=Nr(i),Ze=_r(i),re=Lr(i),ne=cr(m,O.length>0,k.length>0,f,J);p&&ne.push("WhereInput");const ae=lr(A),{customMutatorOverride:et,shapeGuardImport:tt,shapeReadPolicyAssertion:rt,shapeReadPolicyImport:nt,shapeResolveOverride:at}=Mr({hasMutators:B,hasShapes:p,rlsData:X}),D=R?S:[];for(const s of D)if(pr(s.exportName,"live stream export name"),!mr.test(s.filePath))throw new de("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe live stream file path: ${JSON.stringify(s.filePath)}`);const st=c?[]:D.map(s=>`import { ${s.exportName} as liveStream_${s.exportName} } from "../${s.filePath}.js";`),ot=`        protected override liveStreams() {
+            return { ${D.map(s=>`${gr(s.id)}: liveStream_${s.exportName}`).join(", ")} };
+        }
+`,it=`        private readonly liveStreamLoaders = new Map<string, () => Promise<{ validatePublish: (topic: string, payload: unknown) => unknown }>>([
+${D.map(s=>`            [${JSON.stringify(s.id)}, () => import("../${s.filePath}.js").then((module) => module.${s.exportName})],`).join(`
+`)}
+        ]);
+
+        private readonly loadedLiveStreams = new Map<string, { validatePublish: (topic: string, payload: unknown) => unknown }>();
+
+        protected override loadLiveStream(stream: string): Promise<void> | undefined {
+            const load = this.loadedLiveStreams.has(stream) ? undefined : this.liveStreamLoaders.get(stream);
+
+            return load === undefined
+                ? undefined
+                : load().then((declaration) => {
+                      this.loadedLiveStreams.set(stream, declaration);
+                  });
+        }
+
+        // Only the streams a publish has already loaded: a stream not yet loaded was either never published to or is
+        // unknown, and either way \`declaredLivePayload\` refuses what this does not hold.
+        protected override liveStreams() {
+            return Object.fromEntries(this.loadedLiveStreams);
+        }
+`;let se="";D.length>0&&(se=c?it:ot);const _=[`import type { ${ne.join(", ")} } from "${u.do}";`,`import { applyCdcChanges, createStableIdFactory, ${J?"backfillSearchIndexes, ":""}${m?"backfillVectorIndexes, ":""}buildReprojectionMigration, ${te?"clearMemoryTables, ":""}${tt}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${C?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}markUnvouchableReads, ${Z?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${ae.importFragment}ShardDO as ShardDOBase } from "${u.do}";`,...C?[`import type { ExternalSourceLike, SourceClientLike, TraceRefLike } from "${u.do}";`]:[],p?`import { asBucketStorage, ${nt}beginDeferredDeletes, beginDeferredSchedules, composeShapeReadWhere, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${u.server}";`:`import { asBucketStorage, beginDeferredDeletes, beginDeferredSchedules, createSecrets, flushDeferredDeletes, LunoraError, withDeferredDeletes, withDeferredSchedules } from "${u.server}";`];z&&_.push(`import { bindOrm, bindTableFacade } from "${u.server}";`),m&&_.push('import type { SchemaLike as VectorSchemaLike, VectorBackfillSync, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectorBackfillSync, createVectors, createVectorSyncHook, vectorBackfillTargets } from "@lunora/bindings/vectors";'),_.push(...y.importLines,...T.importLines,...W.importLines,...H.importLines,...xe,...Te,...fe,...ve,...V.importLines,...Le,...$e,"",'import schema from "../schema.js";',...st,`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...c?["getLoadedFunction","loadFunction"]:[],...B?["LUNORA_MUTATOR_PATHS"]:[],...l?["LUNORA_ROOMS"]:[],...b?["LUNORA_SOCKETS"]:[],...p?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const dt=m?`
+    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",ct=ee?`
+    d1?: (env: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string }) => DatabaseWriterLike | undefined;`:"",lt=Q?`
+    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",ut=C?`
+    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",ht="ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().",pt="ctx.scheduler: no scheduler configured. Pass `scheduler` to createShardDO().",mt="ctx.storage: no storage configured. Pass `storage` to createShardDO().",gt=A?E("globalDbStub: DatabaseWriterLike",ht,["aggregate","count","delete","explain","findFirst","findFirstOrThrow","findMany","get","groupBy","insert","normalizeId","patch","query","rank","rankPage","replace"],{sync:["normalizeId","query"]}):"",{vectorSyncMethod:ft,vectorsBuild:bt,vectorsStub:wt}=Fr(m,Z?i.vectorIndexes.filter(s=>K.has(s.table)).map(s=>s.name):[]),yt=`{
                 ...this.ctxDbTuning(),
                 auth: { identity: identity ?? null, userId: userId ?? null },
                 broadcast: (delta) => {
@@ -1262,7 +1287,7 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
                 // fallback rather than reporting into a no-op.
                 ...(options.onReadRange !== undefined
                     ? { onReadRange: options.onReadRange }
-                    : options.scope === undefined ? {} : { onReadRange: this.getCtxDbReadRangeHook(options.scope) }),${p?`
+                    : options.scope === undefined ? {} : { onReadRange: this.getCtxDbReadRangeHook(options.scope) }),${m?`
                 // Vectorize is outside this shard's SQLite and cannot roll back, so
                 // the sync is held until the mutation's transaction has COMMITTED
                 // (\`deferAfterCommit\`) instead of running inline. Inline, a write
@@ -1274,11 +1299,11 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
-                storage,${O?`
+                storage,${A?`
                 globalDb,`:""}
-            }`,pt=p?`
-                vectors,`:"",mt=J?`
-                orm: bindOrm(facade),`:"",ae=G?"config.hyperdriveGlobal":"config.d1",gt=O?`            const bookmark = this.getInboundBookmark();
+            }`,vt=m?`
+                vectors,`:"",kt=z?`
+                orm: bindOrm(facade),`:"",oe=Q?"config.hyperdriveGlobal":"config.d1",St=A?`            const bookmark = this.getInboundBookmark();
             const globalRequest = {
                 ...this.globalCdcOptions(config.cdc ?? false),
                 ...(bookmark === undefined ? {} : { bookmark }),
@@ -1286,26 +1311,26 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
                 onBookmark: (bookmarkValue: string | undefined) => { if (options.bookmarks !== undefined) { options.bookmarks.value = bookmarkValue; } },
                 ...(userId === undefined ? {} : { userId }),
             };
-            const globalDb: DatabaseWriterLike = ${ae}?.(env, globalRequest) ?? globalDbStub;
-`:"",ft=Tr(S&&O,ae),bt=c?`        protected override roomHandlerPath(topic: string): string | undefined {
+            const globalDb: DatabaseWriterLike = ${oe}?.(env, globalRequest) ?? globalDbStub;
+`:"",Rt=$r(p&&A,oe),xt=l?`        protected override roomHandlerPath(topic: string): string | undefined {
             // Own properties only: a plain object would resolve \`toString\` and the like to inherited functions.
             return Object.hasOwn(LUNORA_ROOMS, topic) ? LUNORA_ROOMS[topic] : undefined;
         }
-`:"",wt=f?`        protected override socketRoute(path: string): { auth: boolean; functionPath: string } | undefined {
+`:"",Ot=b?`        protected override socketRoute(path: string): { auth: boolean; functionPath: string } | undefined {
             return LUNORA_SOCKETS[path];
         }
-`:"",{externalSourceOverride:yt,sourceBootstrap:vt,sourceClientCacheConst:kt}=Cr(E),St=`
+`:"",{externalSourceOverride:At,sourceBootstrap:Dt,sourceClientCacheConst:Tt}=qr(C),Ct=`
         protected override async runShardInit(): Promise<void> {
             this.ensureMigrated();
-${ee?`            clearMemoryTables(this.sql as SqlExec, schema as unknown as SchemaLike);
+${te?`            clearMemoryTables(this.sql as SqlExec, schema as unknown as SchemaLike);
 `:""}
             await this.dispatchShardInit();
         }
-`,Rt=te.length>0?`
+`,_t=re.length>0?`
             if (LUNORA_TTL_SWEEPS.length > 0) {
                 void this.scheduleTtlSweep();
             }
-`:"",xt=`
+`:"",Et=`
         public constructor(state: ShardDOState, env: unknown) {
             super(state, env, {
                 // Every writer this file builds spreads the ctxDbTuning() slice —
@@ -1322,7 +1347,7 @@ ${ee?`            clearMemoryTables(this.sql as SqlExec, schema as unknown as Sc
                 // exists — a trigger that fails first still flushes and fuses.
                 ...(config.observability === undefined ? {} : { telemetrySink: () => config.observability?.((env ?? {}) as Record<string, unknown>) }),
             });
-${vt}${Rt}        }
+${Dt}${_t}        }
 
         protected override isCacheableQuery(functionPath: string): boolean {
             // NOT \`kind === "query"\` alone. A cache hit answers without running
@@ -1346,7 +1371,7 @@ ${vt}${Rt}        }
         protected override isPaidFunction(functionPath: string): boolean {
             return LUNORA_FUNCTIONS[functionPath]?.x402 !== undefined;
         }
-`,se=l?`
+`,ie=c?`
         protected override prepareFunction(functionPath: string, reason: "rpc" | "subscription" | "stream" | "reactor"): Promise<void> | undefined {
             const registered = LUNORA_FUNCTIONS[functionPath];
             const allowsInternal = reason === "reactor" || (reason === "rpc" && this.isSystemDispatch());
@@ -1361,25 +1386,25 @@ ${vt}${Rt}        }
 
             return loadFunction(functionPath).then(() => undefined);
         }
-`:"",Ot=se===""?`
+`:"",Lt=ie===""?`
 
-`:`${se}
-`,At=gr(l),Dt=l?`            const preparation = this.prepareFunction(functionPath, "subscription");
+`:`${ie}
+`,It=xr(c),Pt=c?`            const preparation = this.prepareFunction(functionPath, "subscription");
             if (preparation !== undefined) await preparation;
-`:"",Tt=br.replace("__PREPARE_FUNCTION__",Dt),Ct=yr(c,l),Et=J?`
+`:"",Nt=Ar.replace("__PREPARE_FUNCTION__",Pt),Mt=Tr(l,c),$t=z?`
             const facade = db as unknown as Record<string, ReturnType<typeof bindTableFacade>>;
-${i.tables.map(o=>`            facade[${JSON.stringify(o.name)}] = bindTableFacade(db, ${JSON.stringify(o.name)});`).join(`
+${i.tables.map(s=>`            facade[${JSON.stringify(s.name)}] = bindTableFacade(db, ${JSON.stringify(s.name)});`).join(`
 `)}
-`:"",_t=`${w.everyBuild}${C.build}${W.build}
+`:"",qt=`${y.everyBuild}${T.build}${H.build}
             const secrets = createSecrets(env);
-`,Lt=`${w.everyFields}${C.contextField}${j.contextField}${W.contextField}
-                secrets,`,It=j.build,Pt=v?`
+`,Ft=`${y.everyFields}${T.contextField}${W.contextField}${H.contextField}
+                secrets,`,Ut=W.build,Bt=R?`
             const live = {
-                publish: async (topic: string, payload: unknown, publishOptions: { shardKey?: string; stream: string }): Promise<void> => {
-                    await this.publishLiveFromAction(topic, payload, publishOptions);
+                publish: async (ref: { __lunoraLive: string; topic: string }, payload: unknown, publishOptions?: { shardKey?: string }): Promise<void> => {
+                    await this.publishLiveFromAction(ref.topic, payload, { ...publishOptions, stream: ref.__lunoraLive });
                 },
             };
-`:"",Nt=[...w.actionFields,...A.length>0?["services"]:[],...v?["live"]:[]],Mt=`${w.actionBuild}${H.build}${Pt}`;return`${ir}${_.join(`
+`:"",jt=[...y.actionFields,...x.length>0?["services"]:[],...R?["live"]:[]],Wt=`${y.actionBuild}${V.build}${Bt}`;return`${fr}${_.join(`
 `)}
 
 type FunctionKind = "action" | "mutation" | "query";
@@ -1389,13 +1414,13 @@ interface FunctionReference {
 }
 
 /** Foreign-key columns per table (\`v.id("target")\` fields) for the data browser. */
-const LUNORA_TABLE_REFS = ${h(Ke,"Record<string, Record<string, string>>")};
+const LUNORA_TABLE_REFS = ${h(ze,"Record<string, Record<string, string>>")};
 
 /** Declared indexes per table (secondary, search, geo, rank, vector) for the schema viewer. */
-const LUNORA_TABLE_INDEXES = ${h(Ge,'Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>>')};
+const LUNORA_TABLE_INDEXES = ${h(Ye,'Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>>')};
 
 /** Columns per table (typed, with PK/FK markers) for the studio's schema diagram, served via \`__lunora_admin__:describeTable\`. */
-const LUNORA_TABLE_COLUMNS = ${h(Qe,`Record<
+const LUNORA_TABLE_COLUMNS = ${h(Xe,`Record<
     string,
     Array<{
         bucket?: string;
@@ -1412,16 +1437,16 @@ const LUNORA_TABLE_COLUMNS = ${h(Qe,`Record<
 >`)};
 
 /** Storage-key columns per table (\`v.storage(...)\` fields) for the file browser's records↔files join. */
-const LUNORA_STORAGE_COLUMNS = ${h(Je,"Record<string, string[]>")};
+const LUNORA_STORAGE_COLUMNS = ${h(Ze,"Record<string, string[]>")};
 
 /** Declarative TTL policies (\`.ttl(field, { after? })\`) the DO alarm sweep auto-expires rows for. */
-const LUNORA_TTL_SWEEPS = ${jt(te,"Array<{ after?: number; field: string; softDeleteField?: string; table: string }>")};
+const LUNORA_TTL_SWEEPS = ${Qt(re,"Array<{ after?: number; field: string; softDeleteField?: string; table: string }>")};
 
 /** Static schema advisories (computed by @lunora/advisor at codegen time) served via \`__lunora_admin__:getAdvisories\`. */
-const LUNORA_ADVISORY_RULES = ${h(Me,"Record<string, Partial<AdvisoryFinding>>")};
+const LUNORA_ADVISORY_RULES = ${h(Ue,"Record<string, Partial<AdvisoryFinding>>")};
 
 /** Per-finding rows; rule-level text lives once in \`LUNORA_ADVISORY_RULES\` and is merged back on first read. */
-const LUNORA_ADVISORY_ROWS = ${h($e,"Array<Partial<AdvisoryFinding> & { name: string }>")};
+const LUNORA_ADVISORY_ROWS = ${h(Be,"Array<Partial<AdvisoryFinding> & { name: string }>")};
 
 const LUNORA_ADVISORIES = ((): (() => AdvisoryFinding[]) => {
     let cached: AdvisoryFinding[] | undefined;
@@ -1429,20 +1454,20 @@ const LUNORA_ADVISORIES = ((): (() => AdvisoryFinding[]) => {
 })();
 
 /** Every declared procedure (discovered by @lunora/codegen) served via \`__lunora_admin__:getAdvisorProcedures\` — the health map's denominator. */
-const LUNORA_ADVISOR_PROCEDURES = ${h(qe,"AdvisorProcedure[]")};
+const LUNORA_ADVISOR_PROCEDURES = ${h(je,"AdvisorProcedure[]")};
 
 /** Read-only RLS metadata (policies + roles discovered from \`.use(rls(...))\` chains) served via \`__lunora_admin__:rlsPolicies\` for the studio's RLS inspector. */
-const LUNORA_RLS_METADATA = ${h(Y,"RlsPoliciesResult")};
-${Xe}
+const LUNORA_RLS_METADATA = ${h(X,"RlsPoliciesResult")};
+${rt}
 /** Read-only masking metadata (table + column + strategy discovered from \`.use(mask(...))\` chains) served via \`__lunora_admin__:maskPolicies\` for the studio's data-browser mask preview. */
-const LUNORA_MASK_METADATA = ${h(Fe,"MaskPoliciesResult")};
+const LUNORA_MASK_METADATA = ${h(We,"MaskPoliciesResult")};
 
 /** Read-only storage access-rule metadata (discovered from \`.use(storageRules(...))\` chains) served via \`__lunora_admin__:storageRules\` for the studio's access-rules view. */
-const LUNORA_STORAGE_RULES = ${h(Ue,"StorageRulesResult")};
+const LUNORA_STORAGE_RULES = ${h(He,"StorageRulesResult")};
 
 /** Which optional package-backed features this app wires up (discovered from imports / \`ctx.*\` reads / schema signals) served via \`__lunora_admin__:studioFeatures\` so the studio hides nav pages whose package isn't enabled. */
-const LUNORA_STUDIO_FEATURES = ${h(Be,"StudioFeaturesResult")};
-${de}${K.constant}${B.constant}${je}${He}${ke}${Oe}${pe}${be}${H.specs}${Ce}
+const LUNORA_STUDIO_FEATURES = ${h(Ve,"StudioFeaturesResult")};
+${he}${G.constant}${j.constant}${Ke}${Qe}${Oe}${Ce}${be}${ke}${V.specs}${Ie}
 export interface ShardDOConfig {
     /** Opt into change-data-capture: records a post-image to \`__cdc_log\` on every write (backs streaming export + replay-PITR). */
     cdc?: boolean;
@@ -1459,25 +1484,25 @@ export interface ShardDOConfig {
     /** \`unknown\` because \`@lunora/scheduler\`'s \`Scheduler\` is not assignable to \`SchedulerLike\`; the shard casts it. */
     scheduler?: (env: Record<string, unknown>) => unknown;
     /** \`origin\` is the origin the current \`/rpc\` request reached the worker on — the fallback base for signed object URLs when no \`publicBaseUrl\` is configured. \`undefined\` off the synchronous dispatch path. */
-    storage?: (env: Record<string, unknown>, origin?: string) => unknown;${tt}${w.configFields}${C.configField}${_e}${rt}${nt}${at}${K.configField}
+    storage?: (env: Record<string, unknown>, origin?: string) => unknown;${dt}${y.configFields}${T.configField}${Ne}${ct}${lt}${ut}${G.configField}
 }
-${L("schedulerStub",ot,["cancel","runAfter","runAt"])}${L("storageStub",it,["createMultipartUpload","delete","download","generateUploadUrl","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","list","resumeMultipartUpload","store","upload"],{sync:["getUrl","resumeMultipartUpload"]})}${dt}${kt}${ut}${w.stubs}${Pe}
-${At}
+${E("schedulerStub",pt,["cancel","runAfter","runAt"])}${E("storageStub",mt,["createMultipartUpload","delete","download","generateUploadUrl","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","list","resumeMultipartUpload","store","upload"],{sync:["getUrl","resumeMultipartUpload"]})}${gt}${Tt}${wt}${y.stubs}${qe}
+${It}
 
 /**
  * Build the project's shard Durable Object. Export the result as \`ShardDO\`
  * from the worker entry so wrangler binds it by name.
  */
 export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOState, env: unknown) => ShardDOBase =>
-    class extends ShardDOBase {${xt}
-        private migrated = false;${Ot}${Ct}
-${ne.override}
-${Tt}
-${ze}${et}${ft}${yt}
+    class extends ShardDOBase {${Et}
+        private migrated = false;${Lt}${Mt}
+${ae.override}
+${Nt}
+${et}${at}${Rt}${At}
         protected override lifecycleHookPaths(event: "connect" | "disconnect" | "init" | "reactor" | "whisper"): readonly string[] {
             return LUNORA_LIFECYCLE_HOOKS[event];
         }
-${bt}${wt}${K.override}${St}
+${xt}${Ot}${se}${G.override}${Ct}
         // One \`onQueryChange\` dispatch. Mirrors \`executeSubscription\` — the
         // socket-terminated half of the same reactivity — and differs only in who
         // consumes the result: the base's \`dispatchReactors\` stores the digest as
@@ -1498,7 +1523,7 @@ ${bt}${wt}${K.override}${St}
         // would instead run an app's reactor as whichever user happened to write
         // last, which is worse than running it as nobody.
         protected override async runReactor(functionPath: string, previousDigest?: string): Promise<{ digest: string; ran: boolean; tables: readonly string[] } | undefined> {
-${l?`            const requestScope = this.captureRequestScope();
+${c?`            const requestScope = this.captureRequestScope();
             const preparation = this.prepareFunction(functionPath, "reactor");
 
             if (preparation !== undefined) {
@@ -1576,7 +1601,7 @@ ${l?`            const requestScope = this.captureRequestScope();
         protected override studioFeatures(): StudioFeaturesResult {
             return LUNORA_STUDIO_FEATURES();
         }
-${B.evaluateOverride}${B.subscriptionOverride}${We}${Ve}
+${j.evaluateOverride}${j.subscriptionOverride}${Ge}${Je}
         protected override advisories(): AdvisoryFinding[] {
             return LUNORA_ADVISORIES();
         }
@@ -1585,17 +1610,17 @@ ${B.evaluateOverride}${B.subscriptionOverride}${We}${Ve}
             return LUNORA_ADVISOR_PROCEDURES();
         }
 
-${pr}
+${Sr}
 
         protected override ensureMigrated(): void {
             if (this.migrated) {
                 return;
             }
 
-            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false${ce} });
+            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false${pe} });
             this.migrated = true;
         }
-${Q?`
+${J?`
         protected override runShardSearchBackfill(options: { maxPages?: number }): SearchBackfillProgress {
             // Migrations create the fts5 companions; without them every backfill
             // statement would raise "no such table" on a shard that has never
@@ -1604,7 +1629,7 @@ ${Q?`
 
             return backfillSearchIndexes(this.sql as SqlExec, schema as unknown as SchemaLike, options);
         }
-`:""}${ct}
-${mr({lazyFunctions:l,actionOnlyFields:Nt,agentsBuild:Ae,agentsContextField:De,containersBuild:we,containersContextField:ye,databaseOptions:ht,everyContextBuild:_t,everyContextField:Lt,facadeBlock:Et,globalDatabaseLine:gt,notifyBuild:It,ormContextField:mt,paymentsBuild:Ee,paymentsContextField:Le,queuesBuild:le,queuesContextField:ue,topicsBuild:me,topicsContextField:ge,vectorsBuild:lt,vectorsContextField:pt,workflowsBuild:Se,workflowsContextField:Re,actionOnlyBuild:Mt})}
+`:""}${ft}
+${Rr({lazyFunctions:c,actionOnlyFields:jt,agentsBuild:_e,agentsContextField:Ee,containersBuild:Se,containersContextField:Re,databaseOptions:yt,everyContextBuild:qt,everyContextField:Ft,facadeBlock:$t,globalDatabaseLine:St,notifyBuild:Ut,ormContextField:kt,paymentsBuild:Pe,paymentsContextField:Me,queuesBuild:me,queuesContextField:ge,topicsBuild:we,topicsContextField:ye,vectorsBuild:bt,vectorsContextField:vt,workflowsBuild:Ae,workflowsContextField:De,actionOnlyBuild:Wt})}
     };
-`};export{kr as b,Wr as e};
+`};export{_r as b,Xr as e};