@lunora/codegen 1.0.0-alpha.44 → 1.0.0-alpha.46

package/dist/index.d.mts

@@ -122,8 +122,10 @@ interface ExternalSourceIR {
   binding: string;
   /** Whether a `columns` projection allow-list was given. */
   columns?: ReadonlyArray<string>;
-  /** `true` when a `reconcileEveryMs` was given — reserved for a future incremental mode's delete-visibility lint; not on the typed `.source()` surface today. */
+  /** `true` when a `reconcileEveryMs` was given — one of the two incremental delete-visibility paths the `external_source_incremental_no_delete_path` lint checks. */
   hasReconcile?: boolean;
+  /** `true` when a `softDeleteColumn` was given — the other incremental delete-visibility path. */
+  hasSoftDelete?: boolean;
   /** `true` when a `tenantBy` mapper was given — the tenant-isolation boundary the `external_source_unscoped` lint checks. */
   hasTenantBy: boolean;
   /** The `idColumn` literal, when given (defaults to `"id"` at runtime). */
@@ -1933,6 +1935,20 @@ declare const discoverRlsProcedures: (project: Project, lunoraDirectory: string)
 */
 declare const discoverRlsMetadata: (project: Project, lunoraDirectory: string) => RlsMetadataIR;
 /**
+* Which sandbox tools a project imports from `@lunora/agent` (main entry or the
+* `/sandbox` subpath), detected by NAMED value import. Drives two things:
+* registering the `sandbox:invoke` dispatcher (either tool) and provisioning the
+* `BROWSER` wrangler binding (`browserTool` — the browser op runs on
+* `ctx.browser` inside the dispatcher).
+*/
+interface SandboxUsage {
+  /** `import { browserTool } from "@lunora/agent"` (or `/sandbox`) appears in `lunora/`. */
+  usesSandboxBrowser: boolean;
+  /** `import { containerTool } from "@lunora/agent"` (or `/sandbox`) appears in `lunora/`. */
+  usesSandboxContainer: boolean;
+}
+declare const discoverSandboxUsage: (project: Project, lunoraDirectory: string) => SandboxUsage;
+/**
 * Load `&lt;projectRoot>/lunora/schema.ts`, find `defineSchema({...})`, and
 * return a structural IR. Throws if the file or call cannot be found.
 */
@@ -2805,4 +2821,4 @@ declare const secretKindOf: (value: string) => string | undefined;
 /** A redacted preview of a secret value — first 4 chars plus its length, never the full value. */
 declare const redact: (value: string) => string;
 declare const VERSION = "0.0.0";
-export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type CronJobIR, type DriftChange, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcEmitInput, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type R2sqlCallIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SHAPES_FILENAME, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, evaluateSchemaDrift, formatAdvisories, lintSchema, parseSchemaSnapshot, redact, refreshCodegenProject, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, validatorIrToJsonSchema };
+export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type CronJobIR, type DriftChange, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcEmitInput, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type R2sqlCallIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SHAPES_FILENAME, type SandboxUsage, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSandboxUsage, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, evaluateSchemaDrift, formatAdvisories, lintSchema, parseSchemaSnapshot, redact, refreshCodegenProject, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, validatorIrToJsonSchema };

package/dist/index.d.ts

@@ -122,8 +122,10 @@ interface ExternalSourceIR {
   binding: string;
   /** Whether a `columns` projection allow-list was given. */
   columns?: ReadonlyArray<string>;
-  /** `true` when a `reconcileEveryMs` was given — reserved for a future incremental mode's delete-visibility lint; not on the typed `.source()` surface today. */
+  /** `true` when a `reconcileEveryMs` was given — one of the two incremental delete-visibility paths the `external_source_incremental_no_delete_path` lint checks. */
   hasReconcile?: boolean;
+  /** `true` when a `softDeleteColumn` was given — the other incremental delete-visibility path. */
+  hasSoftDelete?: boolean;
   /** `true` when a `tenantBy` mapper was given — the tenant-isolation boundary the `external_source_unscoped` lint checks. */
   hasTenantBy: boolean;
   /** The `idColumn` literal, when given (defaults to `"id"` at runtime). */
@@ -1933,6 +1935,20 @@ declare const discoverRlsProcedures: (project: Project, lunoraDirectory: string)
 */
 declare const discoverRlsMetadata: (project: Project, lunoraDirectory: string) => RlsMetadataIR;
 /**
+* Which sandbox tools a project imports from `@lunora/agent` (main entry or the
+* `/sandbox` subpath), detected by NAMED value import. Drives two things:
+* registering the `sandbox:invoke` dispatcher (either tool) and provisioning the
+* `BROWSER` wrangler binding (`browserTool` — the browser op runs on
+* `ctx.browser` inside the dispatcher).
+*/
+interface SandboxUsage {
+  /** `import { browserTool } from "@lunora/agent"` (or `/sandbox`) appears in `lunora/`. */
+  usesSandboxBrowser: boolean;
+  /** `import { containerTool } from "@lunora/agent"` (or `/sandbox`) appears in `lunora/`. */
+  usesSandboxContainer: boolean;
+}
+declare const discoverSandboxUsage: (project: Project, lunoraDirectory: string) => SandboxUsage;
+/**
 * Load `&lt;projectRoot>/lunora/schema.ts`, find `defineSchema({...})`, and
 * return a structural IR. Throws if the file or call cannot be found.
 */
@@ -2805,4 +2821,4 @@ declare const secretKindOf: (value: string) => string | undefined;
 /** A redacted preview of a secret value — first 4 chars plus its length, never the full value. */
 declare const redact: (value: string) => string;
 declare const VERSION = "0.0.0";
-export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type CronJobIR, type DriftChange, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcEmitInput, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type R2sqlCallIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SHAPES_FILENAME, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, evaluateSchemaDrift, formatAdvisories, lintSchema, parseSchemaSnapshot, redact, refreshCodegenProject, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, validatorIrToJsonSchema };
+export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type CronJobIR, type DriftChange, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcEmitInput, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type R2sqlCallIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SHAPES_FILENAME, type SandboxUsage, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSandboxUsage, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, evaluateSchemaDrift, formatAdvisories, lintSchema, parseSchemaSnapshot, redact, refreshCodegenProject, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, validatorIrToJsonSchema };

package/dist/index.mjs

@@ -1,9 +1,9 @@
-export { formatAdvisories, lintSchema } from './packem_shared/formatAdvisories-DRhEiJUz.mjs';
+export { formatAdvisories, lintSchema } from './packem_shared/formatAdvisories-BmF7Mplc.mjs';
 export { CodegenDiagnosticError, diagnosticAt } from './packem_shared/CodegenDiagnosticError-DyQ5FwkM.mjs';
-export { AGENTS_FILENAME, discoverAgents } from './packem_shared/AGENTS_FILENAME-BksnAJgx.mjs';
+export { AGENTS_FILENAME, discoverAgents } from './packem_shared/AGENTS_FILENAME-Cxx7wiSs.mjs';
 export { default as discoverAuthApiCalls } from './packem_shared/discoverAuthApiCalls-Dx3K42rk.mjs';
 export { CONTAINERS_FILENAME, discoverContainers } from './packem_shared/CONTAINERS_FILENAME-DjpXMqhp.mjs';
-export { default as discoverCrons } from './packem_shared/discoverCrons-_aosTRLr.mjs';
+export { default as discoverCrons } from './packem_shared/discoverCrons-DvqkEWdx.mjs';
 export { FLAGS_FILENAME, discoverFlags } from './packem_shared/FLAGS_FILENAME-Dg4mKUuz.mjs';
 export { discoverFunctions } from './packem_shared/discoverFunctions-BJ-qR7Rg.mjs';
 export { default as discoverHttpRoutes } from './packem_shared/discoverHttpRoutes-daCzuTe8.mjs';
@@ -16,15 +16,16 @@ export { default as discoverQueries } from './packem_shared/discoverQueries-CJnn
 export { QUEUES_FILENAME, discoverQueues } from './packem_shared/QUEUES_FILENAME-Xv6Vy-Ku.mjs';
 export { default as discoverR2sqlCalls } from './packem_shared/discoverR2sqlCalls-pnpicWfz.mjs';
 export { discoverRlsMetadata, default as discoverRlsProcedures } from './packem_shared/discoverRlsMetadata-DppniPUH.mjs';
-export { default as discoverSchema } from './packem_shared/discoverSchema-DFWVgU5o.mjs';
+export { discoverSandboxUsage } from './packem_shared/discoverSandboxUsage-BUM2r90k.mjs';
+export { default as discoverSchema } from './packem_shared/discoverSchema-BaSAvooG.mjs';
 export { SHAPES_FILENAME, discoverShapes } from './packem_shared/SHAPES_FILENAME-DOhPGi-6.mjs';
 export { default as discoverStorageRulesMetadata } from './packem_shared/discoverStorageRulesMetadata-CnHl2rXD.mjs';
-export { WORKFLOWS_FILENAME, discoverWorkflows } from './packem_shared/WORKFLOWS_FILENAME-B2By8S4s.mjs';
-export { G as GENERATED_HEADER, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './packem_shared/emit-C_29WVlW.mjs';
-export { emitApp } from './packem_shared/emitApp-C9oljiZd.mjs';
-export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-saZ_-kl4.mjs';
-export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-Cyttekkt.mjs';
-export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-CMjGZSa1.mjs';
+export { WORKFLOWS_FILENAME, discoverWorkflows } from './packem_shared/WORKFLOWS_FILENAME-Dtuzvluc.mjs';
+export { G as GENERATED_HEADER, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './packem_shared/emit-DzOk6uuP.mjs';
+export { emitApp } from './packem_shared/emitApp-DDXi_E8N.mjs';
+export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-5t2Tpo16.mjs';
+export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-DYr4zeJA.mjs';
+export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-JnnVthcj.mjs';
 export { SCHEMA_SNAPSHOT_VERSION, SchemaSnapshotParseError, buildSchemaSnapshot, diffSchemaSnapshots, evaluateSchemaDrift, parseSchemaSnapshot, serializeSchemaSnapshot } from './packem_shared/SCHEMA_SNAPSHOT_VERSION-D0ARY6rL.mjs';
 export { schemaFromIr } from './packem_shared/schemaFromIr-DTYsLBaA.mjs';
 export { LUNORA_ERROR_CODES, validatorIrToJsonSchema } from './packem_shared/LUNORA_ERROR_CODES-DvTLozCu.mjs';

package/dist/packem_shared/{AGENTS_FILENAME-BksnAJgx.mjs → AGENTS_FILENAME-Cxx7wiSs.mjs}

@@ -1,7 +1,8 @@
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { agentDefaultName, agentClassName, agentBindingName, voiceBindingName, voiceClassName } from '@lunora/agent/naming';
-import { SyntaxKind, Node } from 'ts-morph';
+import { LunoraError } from '@lunora/errors';
+import { Node, SyntaxKind } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
 
 const AGENTS_FILENAME = "agents.ts";
@@ -79,17 +80,23 @@ const agentFromCall = (call, exportName) => {
   }
   return ir;
 };
+const unwrapToCallExpression = (node) => {
+  let current = node;
+  while (current && (Node.isAsExpression(current) || Node.isSatisfiesExpression(current) || Node.isParenthesizedExpression(current))) {
+    current = current.getExpression();
+  }
+  return current && Node.isCallExpression(current) ? current : void 0;
+};
 const agentsFromSource = (source) => {
   const agents = [];
   for (const declaration of source.getVariableDeclarations()) {
     if (!declaration.isExported()) {
       continue;
     }
-    const initializer = declaration.getInitializer();
-    if (initializer?.getKind() !== SyntaxKind.CallExpression) {
+    const call = unwrapToCallExpression(declaration.getInitializer());
+    if (!call) {
       continue;
     }
-    const call = initializer;
     const callee = call.getExpression();
     if (!Node.isIdentifier(callee) || !isDefineAgent(callee)) {
       continue;
@@ -102,6 +109,40 @@ const agentsFromSource = (source) => {
   }
   return agents;
 };
+const assertUniqueNames = (agents) => {
+  const seenNames = /* @__PURE__ */ new Map();
+  const seenBindings = /* @__PURE__ */ new Map();
+  const seenClasses = /* @__PURE__ */ new Map();
+  for (const agent of agents) {
+    const priorName = seenNames.get(agent.name);
+    if (priorName !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_AGENT_NAME",
+        `Duplicate agent name "${agent.name}": produced by both "${priorName}" and "${agent.exportName}". Deployed agent names must be unique across the project.`,
+        { status: 500 }
+      );
+    }
+    seenNames.set(agent.name, agent.exportName);
+    const priorBinding = seenBindings.get(agent.bindingName);
+    if (priorBinding !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_AGENT_BINDING",
+        `Duplicate agent binding "${agent.bindingName}": produced by both "${priorBinding}" and "${agent.exportName}". Agent export names must yield unique binding names.`,
+        { status: 500 }
+      );
+    }
+    seenBindings.set(agent.bindingName, agent.exportName);
+    const priorClass = seenClasses.get(agent.className);
+    if (priorClass !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_AGENT_CLASS",
+        `Duplicate agent class "${agent.className}": produced by both "${priorClass}" and "${agent.exportName}". Agent export names must yield unique generated class names.`,
+        { status: 500 }
+      );
+    }
+    seenClasses.set(agent.className, agent.exportName);
+  }
+};
 const discoverAgents = (project, lunoraDirectory) => {
   const agentsPath = join(lunoraDirectory, AGENTS_FILENAME);
   if (!existsSync(agentsPath)) {
@@ -110,6 +151,7 @@ const discoverAgents = (project, lunoraDirectory) => {
   const source = project.getSourceFile(agentsPath) ?? project.addSourceFileAtPath(agentsPath);
   const agents = agentsFromSource(source);
   agents.sort((a, b) => a.exportName.localeCompare(b.exportName));
+  assertUniqueNames(agents);
   return agents;
 };
 

package/dist/packem_shared/{GENERATED_HEADER-7W9f2IG3.mjs → GENERATED_HEADER-nn-wrIA3.mjs}

@@ -1,4 +1,4 @@
 import '@lunora/agent/component';
 import '@lunora/errors';
-export { G as GENERATED_HEADER, n as buildStorageColumns, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, o as emitQueues, p as emitSeed, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './emit-C_29WVlW.mjs';
+export { G as GENERATED_HEADER, n as buildStorageColumns, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, o as emitQueues, p as emitSeed, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './emit-DzOk6uuP.mjs';
 import './paths-BRd6JHuF.mjs';

package/dist/packem_shared/{OPENRPC_VERSION-Cyttekkt.mjs → OPENRPC_VERSION-DYr4zeJA.mjs}

@@ -1,4 +1,4 @@
-import { G as GENERATED_HEADER } from './emit-C_29WVlW.mjs';
+import { G as GENERATED_HEADER } from './emit-DzOk6uuP.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { argsObjectSchema, LUNORA_ERROR_CODES } from './LUNORA_ERROR_CODES-DvTLozCu.mjs';
 

package/dist/packem_shared/{SCHEMA_SNAPSHOT_FILENAME-CMjGZSa1.mjs → SCHEMA_SNAPSHOT_FILENAME-JnnVthcj.mjs}

@@ -3,14 +3,14 @@ import { join, dirname } from 'node:path';
 import { performance } from 'node:perf_hooks';
 import { LunoraError } from '@lunora/errors';
 import { Node, SyntaxKind, Project } from 'ts-morph';
-import { lintSchema } from './formatAdvisories-DRhEiJUz.mjs';
+import { lintSchema } from './formatAdvisories-BmF7Mplc.mjs';
 import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall, inlineHandler as inlineHandler$1, procedureHandler, chainUsesWrappedCall, isDatabaseAccessor, chainHasStep, discoverFunctions } from './discoverFunctions-BJ-qR7Rg.mjs';
-import { discoverAgents } from './AGENTS_FILENAME-BksnAJgx.mjs';
+import { discoverAgents } from './AGENTS_FILENAME-Cxx7wiSs.mjs';
 import discoverAuthApiCalls from './discoverAuthApiCalls-Dx3K42rk.mjs';
 import { discoverContainers } from './CONTAINERS_FILENAME-DjpXMqhp.mjs';
-import discoverCrons from './discoverCrons-_aosTRLr.mjs';
+import discoverCrons from './discoverCrons-DvqkEWdx.mjs';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
-import { C as CAPABILITIES, n as buildStorageColumns, f as emitDataModel, a as emitApi, i as emitServer, h as emitFunctions, j as emitShard, b as emitCollections, c as emitContainers, l as emitWorkflows, e as emitAgents, o as emitQueues, d as emitCrons, k as emitVectors, g as emitDrizzleSchema, p as emitSeed, m as emitWranglerCronTriggers } from './emit-C_29WVlW.mjs';
+import { C as CAPABILITIES, n as buildStorageColumns, f as emitDataModel, a as emitApi, i as emitServer, h as emitFunctions, j as emitShard, b as emitCollections, c as emitContainers, l as emitWorkflows, e as emitAgents, o as emitQueues, d as emitCrons, k as emitVectors, g as emitDrizzleSchema, p as emitSeed, m as emitWranglerCronTriggers } from './emit-DzOk6uuP.mjs';
 import { discoverFlagKeys } from './FLAGS_FILENAME-Dg4mKUuz.mjs';
 import discoverHttpRoutes from './discoverHttpRoutes-daCzuTe8.mjs';
 import discoverInserts from './discoverInserts-DI4q5NxE.mjs';
@@ -22,15 +22,16 @@ import discoverQueries from './discoverQueries-CJnnnLpd.mjs';
 import { discoverQueues } from './QUEUES_FILENAME-Xv6Vy-Ku.mjs';
 import discoverR2sqlCalls from './discoverR2sqlCalls-pnpicWfz.mjs';
 import discoverRlsProcedures, { discoverRlsMetadata } from './discoverRlsMetadata-DppniPUH.mjs';
-import discoverSchema from './discoverSchema-DFWVgU5o.mjs';
+import { discoverSandboxUsage } from './discoverSandboxUsage-BUM2r90k.mjs';
+import discoverSchema from './discoverSchema-BaSAvooG.mjs';
 import { secretKindOf, redact } from './redact-oTmsol5A.mjs';
 import { discoverShapes } from './SHAPES_FILENAME-DOhPGi-6.mjs';
 import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-CnHl2rXD.mjs';
 import { e as enclosingExportName$2 } from './discover-ast-CT6BgBr4.mjs';
-import { discoverWorkflows } from './WORKFLOWS_FILENAME-B2By8S4s.mjs';
-import { emitApp } from './emitApp-C9oljiZd.mjs';
-import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-saZ_-kl4.mjs';
-import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-Cyttekkt.mjs';
+import { discoverWorkflows } from './WORKFLOWS_FILENAME-Dtuzvluc.mjs';
+import { emitApp } from './emitApp-DDXi_E8N.mjs';
+import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-5t2Tpo16.mjs';
+import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-DYr4zeJA.mjs';
 import { buildSchemaSnapshot, serializeSchemaSnapshot } from './SCHEMA_SNAPSHOT_VERSION-D0ARY6rL.mjs';
 
 const HTTP_VERBS$1 = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);
@@ -2699,41 +2700,6 @@ const discoverRelationLoads = (project, lunoraDirectory) => {
   return rows;
 };
 
-const SANDBOX_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/agent", "@lunora/agent/sandbox"]);
-const scanImportDeclaration = (declaration) => {
-  const found = { usesSandboxBrowser: false, usesSandboxContainer: false };
-  if (!SANDBOX_MODULE_SPECIFIERS.has(declaration.getModuleSpecifierValue()) || declaration.isTypeOnly()) {
-    return found;
-  }
-  for (const named of declaration.getNamedImports()) {
-    if (named.isTypeOnly()) {
-      continue;
-    }
-    const name = named.getNameNode().getText();
-    if (name === "browserTool") {
-      found.usesSandboxBrowser = true;
-    } else if (name === "containerTool") {
-      found.usesSandboxContainer = true;
-    }
-  }
-  return found;
-};
-const discoverSandboxUsage = (project, lunoraDirectory) => {
-  const usage = { usesSandboxBrowser: false, usesSandboxContainer: false };
-  for (const filePath of listLunoraSourceFiles(lunoraDirectory)) {
-    const sourceFile = project.getSourceFile(filePath) ?? project.addSourceFileAtPath(filePath);
-    for (const declaration of sourceFile.getImportDeclarations()) {
-      const found = scanImportDeclaration(declaration);
-      usage.usesSandboxBrowser ||= found.usesSandboxBrowser;
-      usage.usesSandboxContainer ||= found.usesSandboxContainer;
-    }
-    if (usage.usesSandboxBrowser && usage.usesSandboxContainer) {
-      break;
-    }
-  }
-  return usage;
-};
-
 const literalValueOf = (node) => {
   if (Node.isStringLiteral(node) || Node.isNoSubstitutionTemplateLiteral(node)) {
     return node.getLiteralText();
@@ -3155,6 +3121,44 @@ const findTsconfig = (startPath) => {
   return void 0;
 };
 const toPosixPath = (path) => path.replaceAll("\\", "/");
+const assertNoWorkflowAgentCollision = (workflows, agents) => {
+  const namesByLabel = /* @__PURE__ */ new Map();
+  const bindingsByLabel = /* @__PURE__ */ new Map();
+  const classesByLabel = /* @__PURE__ */ new Map();
+  for (const workflow of workflows) {
+    namesByLabel.set(workflow.name, `workflow "${workflow.exportName}"`);
+    bindingsByLabel.set(workflow.bindingName, `workflow "${workflow.exportName}"`);
+    classesByLabel.set(workflow.className, `workflow "${workflow.exportName}"`);
+  }
+  for (const agent of agents) {
+    const priorName = namesByLabel.get(agent.name);
+    if (priorName !== void 0) {
+      throw new LunoraError(
+        // eslint-disable-next-line no-secrets/no-secrets -- an error code, not a secret
+        "DUPLICATE_WORKFLOW_NAME",
+        `Duplicate deployed name "${agent.name}": produced by both ${priorName} and agent "${agent.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,
+        { status: 500 }
+      );
+    }
+    const priorBinding = bindingsByLabel.get(agent.bindingName);
+    if (priorBinding !== void 0) {
+      throw new LunoraError(
+        // eslint-disable-next-line no-secrets/no-secrets -- an error code, not a secret
+        "DUPLICATE_WORKFLOW_BINDING",
+        `Duplicate binding "${agent.bindingName}": produced by both ${priorBinding} and agent "${agent.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,
+        { status: 500 }
+      );
+    }
+    const priorClass = classesByLabel.get(agent.className);
+    if (priorClass !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_WORKFLOW_CLASS",
+        `Duplicate generated class "${agent.className}": produced by both ${priorClass} and agent "${agent.exportName}". Workflow and agent export names must yield unique generated class names.`,
+        { status: 500 }
+      );
+    }
+  }
+};
 const createCodegenProject = (lunoraDirectory) => {
   const tsconfigPath = findTsconfig(lunoraDirectory);
   return tsconfigPath ? new Project({ skipAddingFilesFromTsConfig: false, tsConfigFilePath: tsconfigPath, useInMemoryFileSystem: false }) : new Project({ skipAddingFilesFromTsConfig: true, useInMemoryFileSystem: false });
@@ -3203,6 +3207,7 @@ const runCodegen = (options) => {
   const workflows = discoverWorkflows(project, lunoraDirectory);
   const queues = discoverQueues(project, lunoraDirectory);
   const agents = discoverAgents(project, lunoraDirectory);
+  assertNoWorkflowAgentCollision(workflows, agents);
   const crons = discoverCrons(project, lunoraDirectory, workflows, agents);
   const containers = discoverContainers(project, lunoraDirectory);
   const advisories = options.lint === false ? [] : lintSchema({

package/dist/packem_shared/{WORKFLOWS_FILENAME-B2By8S4s.mjs → WORKFLOWS_FILENAME-Dtuzvluc.mjs}

@@ -2,7 +2,7 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { LunoraError } from '@lunora/errors';
 import { workflowDefaultName, workflowClassName, workflowBindingName } from '@lunora/workflow';
-import { SyntaxKind, Node } from 'ts-morph';
+import { Node, SyntaxKind } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
 
 const WORKFLOWS_FILENAME = "workflows.ts";
@@ -88,17 +88,23 @@ const workflowFromCall = (call, exportName) => {
   }
   return ir;
 };
+const unwrapToCallExpression = (node) => {
+  let current = node;
+  while (current && (Node.isAsExpression(current) || Node.isSatisfiesExpression(current) || Node.isParenthesizedExpression(current))) {
+    current = current.getExpression();
+  }
+  return current && Node.isCallExpression(current) ? current : void 0;
+};
 const workflowsFromSource = (source) => {
   const workflows = [];
   for (const declaration of source.getVariableDeclarations()) {
     if (!declaration.isExported()) {
       continue;
     }
-    const initializer = declaration.getInitializer();
-    if (initializer?.getKind() !== SyntaxKind.CallExpression) {
+    const call = unwrapToCallExpression(declaration.getInitializer());
+    if (!call) {
       continue;
     }
-    const call = initializer;
     const callee = call.getExpression();
     if (!Node.isIdentifier(callee) || !isDefineWorkflow(callee)) {
       continue;

package/dist/packem_shared/{buildOpenApiDocument-saZ_-kl4.mjs → buildOpenApiDocument-5t2Tpo16.mjs}

@@ -1,4 +1,4 @@
-import { G as GENERATED_HEADER } from './emit-C_29WVlW.mjs';
+import { G as GENERATED_HEADER } from './emit-DzOk6uuP.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { LUNORA_ERROR_CODES, objectSchema, argsObjectSchema, validatorIrToJsonSchema } from './LUNORA_ERROR_CODES-DvTLozCu.mjs';
 

package/dist/packem_shared/{discoverCrons-_aosTRLr.mjs → discoverCrons-DvqkEWdx.mjs}

@@ -46,7 +46,7 @@ const rootIdentifierOf = (node) => {
 };
 const stringArgument = (call, index) => {
   const argument = call.getArguments()[index];
-  return argument && Node.isStringLiteral(argument) ? argument.getLiteralValue() : void 0;
+  return argument && (Node.isStringLiteral(argument) || Node.isNoSubstitutionTemplateLiteral(argument)) ? argument.getLiteralValue() : void 0;
 };
 const literalValue = (node, jobName) => {
   if (Node.isStringLiteral(node) || Node.isNoSubstitutionTemplateLiteral(node)) {
@@ -165,12 +165,27 @@ const resolveTarget = (call, index, jobName, workflowsByName, agentsByName) => {
   }
   if (argument && Node.isIdentifier(argument)) {
     const workflow = workflowsByName.get(argument.getText());
+    const agent = agentsByName.get(argument.getText());
+    if (workflow && agent) {
+      throw diagnosticAt(
+        argument,
+        `Cron job "${jobName}" references "${argument.getText()}", which is ambiguous: a workflow and an agent are both declared under that name.`,
+        {
+          code: "CRON_NON_STATIC_FN",
+          name: "LunoraError",
+          status: 500
+        }
+      );
+    }
     if (workflow) {
       return workflowTarget(workflow);
     }
+    if (agent) {
+      return agentTarget(agent);
+    }
     throw diagnosticAt(
       argument,
-      `Cron job "${jobName}" references "${argument.getText()}", which is neither a function (internal.file.fn / api.file.fn) nor a declared workflow in lunora/workflows.ts.`,
+      `Cron job "${jobName}" references "${argument.getText()}", which is neither a function (internal.file.fn / api.file.fn) nor a declared workflow in lunora/workflows.ts nor a declared agent in lunora/agents.ts.`,
       {
         code: "CRON_NON_STATIC_FN",
         name: "LunoraError",

package/dist/packem_shared/discoverSandboxUsage-BUM2r90k.mjs

@@ -0,0 +1,38 @@
+import { listLunoraSourceFiles } from './discoverFunctions-BJ-qR7Rg.mjs';
+
+const SANDBOX_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/agent", "@lunora/agent/sandbox"]);
+const scanImportDeclaration = (declaration) => {
+  const found = { usesSandboxBrowser: false, usesSandboxContainer: false };
+  if (!SANDBOX_MODULE_SPECIFIERS.has(declaration.getModuleSpecifierValue()) || declaration.isTypeOnly()) {
+    return found;
+  }
+  for (const named of declaration.getNamedImports()) {
+    if (named.isTypeOnly()) {
+      continue;
+    }
+    const name = named.getNameNode().getText();
+    if (name === "browserTool") {
+      found.usesSandboxBrowser = true;
+    } else if (name === "containerTool") {
+      found.usesSandboxContainer = true;
+    }
+  }
+  return found;
+};
+const discoverSandboxUsage = (project, lunoraDirectory) => {
+  const usage = { usesSandboxBrowser: false, usesSandboxContainer: false };
+  for (const filePath of listLunoraSourceFiles(lunoraDirectory)) {
+    const sourceFile = project.getSourceFile(filePath) ?? project.addSourceFileAtPath(filePath);
+    for (const declaration of sourceFile.getImportDeclarations()) {
+      const found = scanImportDeclaration(declaration);
+      usage.usesSandboxBrowser ||= found.usesSandboxBrowser;
+      usage.usesSandboxContainer ||= found.usesSandboxContainer;
+    }
+    if (usage.usesSandboxBrowser && usage.usesSandboxContainer) {
+      break;
+    }
+  }
+  return usage;
+};
+
+export { discoverSandboxUsage };

package/dist/packem_shared/{discoverSchema-DFWVgU5o.mjs → discoverSchema-BaSAvooG.mjs}

@@ -428,6 +428,7 @@ const parseSourceCall = (args) => {
     binding: stringPropertyOf(first, "binding") ?? "",
     columns: stringArrayPropertyOf(first, "columns"),
     hasReconcile: first.getProperty("reconcileEveryMs") !== void 0,
+    hasSoftDelete: first.getProperty("softDeleteColumn") !== void 0,
     hasTenantBy: first.getProperty("tenantBy") !== void 0,
     idColumn: stringPropertyOf(first, "idColumn"),
     mode: stringPropertyOf(first, "mode"),

package/dist/packem_shared/{emit-C_29WVlW.mjs → emit-DzOk6uuP.mjs}

@@ -760,12 +760,23 @@ ${objectMembers}
 };
 const agentRuntimeFunctionNames = () => Object.keys(agentComponent().functions).toSorted((a, b) => a.localeCompare(b));
 const takenAgentFunctionNames = (functions) => new Set(functions.filter((definition) => sanitizeNamespace(definition.filePath) === "agents").map((definition) => definition.exportName));
+const internalAgentRuntimeFunctionNames = () => new Set(
+  Object.entries(agentComponent().functions).filter(([, definition]) => definition.visibility === "internal").map(([name]) => name)
+);
 const renderAgentFunctionRegistry = (agents, functions) => {
   const empty = { importLine: "", lines: "", prelude: "" };
   if (agents.length === 0) {
     return empty;
   }
   const taken = takenAgentFunctionNames(functions);
+  const internal = internalAgentRuntimeFunctionNames();
+  const shadowedInternal = functions.find((definition) => sanitizeNamespace(definition.filePath) === "agents" && internal.has(definition.exportName));
+  if (shadowedInternal) {
+    throw new LunoraError(
+      "INTERNAL",
+      `@lunora/codegen: "agents:${shadowedInternal.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${shadowedInternal.exportName}" export in ${shadowedInternal.filePath}`
+    );
+  }
   const names = agentRuntimeFunctionNames().filter((name) => !taken.has(name));
   if (names.length === 0) {
     return empty;
@@ -2668,7 +2679,7 @@ const LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCT
   const shapeGuardImport = hasShapes ? "assertShapeShardable, " : "";
   const importLines = [
     `import type { ${doTypeImports.join(", ")} } from "${base.do}";`,
-    `import { applyCdcChanges, ${shapeGuardImport}createShardCtxDb, ${hasSourcedTables ? "isSourceDue, pullExternalSourceTick, " : ""}runDataMigration, runShardMigrations, ${relationFanout.importFragment}ShardDO as ShardDOBase } from "${base.do}";`,
+    `import { applyCdcChanges, ${shapeGuardImport}createShardCtxDb, ${hasSourcedTables ? "isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, " : ""}runDataMigration, runShardMigrations, ${relationFanout.importFragment}ShardDO as ShardDOBase } from "${base.do}";`,
     ...hasSourcedTables ? [`import type { ExternalSourceLike, SourceClientLike } from "${base.do}";`] : [],
     // `asBucketStorage` (the bucket-aware `ctx.storage` wrapper) and
     // `createSecrets` (the `ctx.secrets` core built-in) live in
@@ -2875,14 +2886,14 @@ const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
 ` : "";
   const externalSourceOverride = hasSourcedTables ? `
-        protected override async pollExternalSources(): Promise<number> {
+        protected override async pollExternalSources(): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
                 .map(([table, definition]) => [table, (definition as { externalSource?: ExternalSourceLike }).externalSource] as const)
                 .filter((entry): entry is [string, ExternalSourceLike] => entry[1] !== undefined);
 
             if (sourced.length === 0) {
-                return 0;
+                return undefined;
             }
 
             const shardKey = this.currentShardKey();
@@ -2912,54 +2923,68 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
             }
 
             const now = Date.now();
-            // \`active\` counts non-manual sources: while > 0 the alarm re-arms; a
-            // manual-only schema returns 0 so the shared alarm goes idle.
-            let active = 0;
+            // \`nextDueAt\` tracks the EARLIEST next-due timestamp across every
+            // non-manual source; the shared alarm re-arms there instead of the
+            // fixed 2 s global-shape floor, so a large \`refresh.everyMs\` actually
+            // sleeps until it's due. Stays \`undefined\` when every source is
+            // \`refresh: "manual"\`, so the shared alarm goes idle for this tier.
+            let nextDueAt: number | undefined;
 
             for (const [table, source] of sourced) {
                 if (source.refresh === "manual") {
                     continue;
                 }
 
-                active += 1;
-
-                if (!isSourceDue(source.refresh, polledAt.get(table), now)) {
-                    continue;
-                }
+                if (isSourceDue(source.refresh, polledAt.get(table), now)) {
+                    try {
+                        let client = clients.get(source.binding);
 
-                try {
-                    let client = clients.get(source.binding);
+                        if (client === undefined) {
+                            client = config.sourceClient?.(env, source.binding);
 
-                    if (client === undefined) {
-                        client = config.sourceClient?.(env, source.binding);
+                            if (client !== undefined) {
+                                clients.set(source.binding, client);
+                            }
+                        }
 
-                        if (client !== undefined) {
-                            clients.set(source.binding, client);
+                        if (client === undefined) {
+                            // No SqlClient resolved for this binding (host never wired
+                            // \`config.sourceClient\`, or wired it wrong). Surface it in the
+                            // Logs panel and stamp \`polledAt\` so a persistent misconfig backs
+                            // off to \`refresh.everyMs\` instead of retrying every alarm tick.
+                            this.recordExternalSourceError(table, new Error(\`external-source: no sourceClient resolved for binding "\${source.binding}"\`));
+                        } else if (source.mode === "incremental") {
+                            // Incremental (plan 136): pull only rows past the durable
+                            // watermark (or a full-pull seed/reconcile), upsert-only.
+                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; sequential keeps the writer transaction simple
+                            await pullExternalSourceIncrementalTick(this.sql as SqlExec, writer, client, table, source, shardKey, now);
+                        } else {
+                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
+                            await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
                         }
-                    }
 
-                    if (client === undefined) {
-                        // No SqlClient resolved for this binding (host never wired
-                        // \`config.sourceClient\`, or wired it wrong). Surface it in the
-                        // Logs panel and stamp \`polledAt\` so a persistent misconfig backs
-                        // off to \`refresh.everyMs\` instead of retrying every alarm tick.
-                        this.recordExternalSourceError(table, new Error(\`external-source: no sourceClient resolved for binding "\${source.binding}"\`));
-                        polledAt.set(table, now);
-                        continue;
+                        // Timestamp AFTER the poll finishes, not the batch-start \`now\` — a
+                        // poll that outruns \`everyMs\` must not make \`nextDueAt\` (below)
+                        // stale-immediate and re-arm the alarm in a hammering loop.
+                        polledAt.set(table, Date.now());
+                    } catch (error) {
+                        this.recordExternalSourceError(table, error);
+                        // Stamp on failure too, so a persistently failing source throttles
+                        // to \`refresh.everyMs\` rather than being hammered every tick.
+                        polledAt.set(table, Date.now());
                     }
-
-                    // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
-                    await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
-                    polledAt.set(table, now);
-                } catch (error) {
-                    this.recordExternalSourceError(table, error);
-                    // Stamp on failure too, so a persistently failing source throttles
-                    // to \`refresh.everyMs\` rather than being hammered every tick.
-                    polledAt.set(table, now);
                 }
+
+                // This source's own next-due time, read AFTER the poll-or-skip above
+                // so a just-polled source reports \`now + everyMs\` (its FRESH due
+                // time), not the stale pre-poll one. An omitted \`refresh\` (poll
+                // every tick) is due again immediately.
+                const sourceNextDueAt = source.refresh === undefined ? now : (polledAt.get(table) ?? now) + source.refresh.everyMs;
+
+                nextDueAt = nextDueAt === undefined ? sourceNextDueAt : Math.min(nextDueAt, sourceNextDueAt);
             }
 
-            return active;
+            return nextDueAt;
         }
 ` : "";
   const sourceConstructorOverride = hasSourcedTables ? `

package/dist/packem_shared/{emitApp-C9oljiZd.mjs → emitApp-DDXi_E8N.mjs}

@@ -1,4 +1,4 @@
-import { A as APP_METHOD_CAPABILITIES, G as GENERATED_HEADER } from './emit-C_29WVlW.mjs';
+import { A as APP_METHOD_CAPABILITIES, G as GENERATED_HEADER } from './emit-DzOk6uuP.mjs';
 
 const hasFlagKey = (key) => `has${key.charAt(0).toUpperCase()}${key.slice(1)}`;
 const LONG_TAIL = APP_METHOD_CAPABILITIES.map(

package/dist/packem_shared/{formatAdvisories-DRhEiJUz.mjs → formatAdvisories-BmF7Mplc.mjs}

@@ -22,6 +22,7 @@ const toAdvisorSchema = (schema) => {
         externallyManaged: table.externallyManaged ?? false,
         externalSource: table.externalSource ? {
           hasReconcile: table.externalSource.hasReconcile ?? false,
+          hasSoftDelete: table.externalSource.hasSoftDelete ?? false,
           hasTenantBy: table.externalSource.hasTenantBy,
           mode: table.externalSource.mode,
           unanalyzable: table.externalSource.unanalyzable

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.44",
+  "version": "1.0.0-alpha.46",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,8 +46,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.28",
-    "@lunora/agent": "1.0.0-alpha.2",
+    "@lunora/advisor": "1.0.0-alpha.30",
+    "@lunora/agent": "1.0.0-alpha.4",
     "@lunora/container": "1.0.0-alpha.12",
     "@lunora/errors": "1.0.0-alpha.5",
     "@lunora/queue": "1.0.0-alpha.8",