@lunora/codegen 1.0.0-alpha.55 → 1.0.0-alpha.57

package/dist/packem_shared/emit-BYVxPDqO.mjs

@@ -0,0 +1,2127 @@
+import{agentComponent as Je}from"@lunora/agent/component";import{LunoraError as X}from"@lunora/errors";import{n as $}from"./paths-BmX5O1sG.mjs";const Ve=[{contextProperty:"access",key:"access",moduleSpecifier:"@lunora/cloudflare-access"},{appMethod:{configKey:"ai",doc:"Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`).",method:"ai"},contextProperty:"ai",key:"ai",moduleSpecifier:"@lunora/ai"},{appMethod:{configKey:"analytics",doc:"Override the Analytics Engine dataset backing `ctx.analytics` (defaults to `env.ANALYTICS`).",method:"analytics"},contextProperty:"analytics",key:"analytics",moduleSpecifier:"@lunora/bindings/analytics",serverCtxField:{field:`
+    /** Analytics Engine telemetry sink. Fire-and-forget and sampled; do not read it back in-handler. */
+    readonly analytics: import("@lunora/bindings/analytics").AnalyticsClient;`,tier:"every"}},{appMethod:{configKey:"browser",doc:"Override the Browser Rendering binding backing `ctx.browser` (defaults to `env.BROWSER`).",method:"browser"},contextProperty:"browser",key:"browser",moduleSpecifier:"@lunora/browser",serverCtxField:{field:`
+    /** Browser Rendering (screenshots/PDF/scrape). Non-deterministic — available only in actions. */
+    readonly browser: import("@lunora/browser").Browser;`,tier:"action"}},{contextProperty:"containers",key:"container",moduleSpecifier:"@lunora/container"},{contextProperty:"flags",key:"flags",moduleSpecifier:"@lunora/flags"},{appMethod:{configKey:"sql",doc:"Wire the Hyperdrive SQL client backing `ctx.sql` — build it with `createHyperdrive` + `fromPostgresJs`/`fromNodePg`/`fromMysql2`.",method:"hyperdrive"},contextProperty:"sql",key:"hyperdrive",moduleSpecifier:"@lunora/hyperdrive",serverCtxField:{field:`
+    /**
+     * External database access via Hyperdrive. Non-deterministic — available only in actions. Writes here are NOT tracked by Lunora live queries; subscriptions will not re-run on external DB changes.
+     */
+    readonly sql: import("@lunora/hyperdrive").SqlClient;`,tier:"action"}},{appMethod:{configKey:"images",doc:"Override the Images binding backing `ctx.images` (defaults to `env.IMAGES`).",method:"images"},contextProperty:"images",key:"images",moduleSpecifier:"@lunora/bindings/images",serverCtxField:{field:`
+    /** Cloudflare Images transforms (resize/format/optimize). Non-deterministic — available only in actions. */
+    readonly images: import("@lunora/bindings/images").Images;`,tier:"action"}},{appMethod:{configKey:"kv",doc:"Override the Workers KV binding backing `ctx.kv` (defaults to `env.KV`).",method:"kv"},contextProperty:"kv",key:"kv",moduleSpecifier:"@lunora/bindings/kv",serverCtxField:{field:`
+    readonly kv: import("@lunora/bindings/kv").Kv;`,tier:"every"}},{key:"mail",moduleSpecifier:"@lunora/mail"},{appMethod:{configKey:"payment",doc:"Wire the payment options backing `ctx.payments`.",method:"payment"},contextProperty:"payments",key:"payments",moduleSpecifier:"@lunora/payment"},{appMethod:{configKey:"x402",doc:"Wire the x402 agent-wallet pay rail backing `ctx.x402` — a payment-enabled `fetch` that answers `402` challenges under a mandatory spend policy (ActionCtx-only; spends real funds).",method:"x402"},contextProperty:"x402",key:"x402",moduleSpecifier:"@lunora/x402/pay"},{contextProperty:"pipelines",key:"pipelines",moduleSpecifier:"@lunora/bindings/pipelines",serverCtxField:{field:`
+    /** Pipelines ingestion sink (durable, R2-backed). Fire-and-forget and batched; do not read it back in-handler. */
+    readonly pipelines: import("@lunora/bindings/pipelines").PipelineClient;`,tier:"action"}},{appMethod:{configKey:"r2sql",doc:"Wire the R2 SQL client backing `ctx.r2sql` — build it with `createR2Sql({ accountId, apiToken, bucket })` (defaults to env `R2_SQL_TOKEN` / `R2_SQL_ACCOUNT_ID` / `R2_SQL_BUCKET`).",method:"r2sql"},contextProperty:"r2sql",key:"r2sql",moduleSpecifier:"@lunora/bindings/r2sql",serverCtxField:{field:`
+    /**
+     * R2 SQL over Apache Iceberg tables (window functions, DISTINCT, set operations). Non-deterministic — available only in actions. Reads here are NOT tracked by Lunora live queries.
+     */
+    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],Wt=Ve,Ut=new Map(Wt.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),Zn=Ve.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),He=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,Kt=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),ze=e=>e.column!==void 0,Qt=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
+`;case"boolean":return`if (typeof ${t} !== "boolean") return DEFER;
+`;case"date":case"number":case"timestamp":return`if (typeof ${t} !== "number" || !Number.isFinite(${t})) return DEFER;
+`;case"null":return`if (${t} !== null) return DEFER;
+`;default:return`if (typeof ${t} !== "string") return DEFER;
+`}},Gt=(e,t)=>{const n=e.literalValue?.trim();if(!(n===void 0||!He.test(n)))return{out:t,pre:`if (${t} !== ${n}) return DEFER;
+`}},De=(e,t,n)=>{if(!ze(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(Kt.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:Qt(e.kind,t)};switch(e.kind){case"array":return Jt(e,t,n);case"literal":return Gt(e,t);case"object":return Ht(e,t,n);default:return}}},Jt=(e,t,n)=>{const{inner:a}=e;if(!a)return;const r=n.next(),o=`__arr${String(r)}`,s=`__i${String(r)}`,i=`__e${String(r)}`,l=De(a,i,n);if(!l)return;const u=`if (!Array.isArray(${t})) return DEFER;
+const ${o} = new Array(${t}.length);
+for (let ${s} = 0; ${s} < ${t}.length; ${s}++) {
+const ${i} = ${t}[${s}];
+${l.pre}${o}[${s}] = ${l.out};
+}
+`;return{out:o,pre:u}},Vt=(e,t,n,a)=>{const r=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||ze(t))return;const{inner:s}=t;if(!s)return;const i=De(s,n,a);if(!i)return;const l=a.next(),u=`__has${String(l)}`,p=`__val${String(l)}`,b=`let ${u} = false;
+let ${p};
+if (${n} !== undefined) {
+${i.pre}${p} = ${i.out};
+${u} = true;
+}
+`;return{entry:`...(${u} ? { ${r}: ${p} } : {})`,pre:b}}const o=De(t,n,a);if(o)return{entry:`${r}: ${o.out}`,pre:o.pre}},Xe=(e,t,n)=>{let a="";const r=[];for(const o of Object.keys(e)){const s=e[o];if(!s)return;const i=Vt(o,s,t(o),n);if(!i)return;a+=i.pre,r.push(i.entry)}return{entries:r.join(", "),pre:a}},Ht=(e,t,n)=>{const a=e.shape??{},r=Xe(a,l=>`${t}[${JSON.stringify(l)}]`,n);if(!r)return;const o=n.next(),s=`__obj${String(o)}`,i=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
+${r.pre}const ${s} = { ${r.entries} };
+`;return{out:s,pre:i}},zt=e=>{let t=0;const n=Xe(e,a=>`source[${JSON.stringify(a)}]`,{next:()=>(t+=1,t)});if(n)return`(source) => {
+if (typeof source !== "object" || source === null || Array.isArray(source)) return DEFER;
+${n.pre}return { ${n.entries} };
+}`},k=`// GENERATED by @lunora/codegen — do not edit.
+// Run \`lunora codegen\` to regenerate.
+
+`,V=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},Ye=/^[A-Za-z_$][\w$]*$/u,Xt=/^[\w./-]+$/u,m=(e,t)=>{if(!Ye.test(e))throw new X("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Ce=e=>e.charAt(0).toUpperCase()+e.slice(1),O=e=>Ye.test(e)?e:JSON.stringify(e),Yt={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",from:"unknown",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},Zt=e=>{if(e===void 0)return"unknown";if(!He.test(e))throw new X("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},N=e=>{const t=Yt[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?N(e.inner):"unknown"}>`;case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return Zt(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,a])=>`${O(n)}: ${N(a)}`).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?N(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?N(e.keyType):"string",a=e.valueType?N(e.valueType):"unknown";return`Record<${n}, ${a}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>N(n)).join(" | "):"never";default:return"unknown"}},he=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,a])=>{const r=O(n);if(a.kind==="optional"){const o=a.inner?N(a.inner):"unknown";return`${r}?: ${o}`}return`${r}: ${N(a)}`}).join("; ")} }`},en=e=>e.kind==="optional"||!!e.column?.hasDefault,tn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([a,r])=>{const o=r.kind==="optional"&&r.inner?r.inner:r,s=N(o),i=O(a);return en(r)?`    ${i}?: ${s};`:`    ${i}: ${s};`}).join(`
+`),n=t?`
+${t}
+`:"";return`export interface Insert_${e.name} {
+    _id?: Id<"${e.name}">;
+    _creationTime?: number;${n}}`},er=(e,t=!1)=>{const n=V(t);for(const c of e.tables)m(c.name,"table name");const a=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",r=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",o=e.tables.map(c=>{const g=Object.entries(c.shape).map(([T,x])=>{const A=O(T);if(x.kind==="optional"){const _=x.inner?N(x.inner):"unknown";return`    ${A}?: ${_};`}return`    ${A}: ${N(x)};`}).join(`
+`),f=g?`
+${g}
+`:"";return`export interface Doc_${c.name} {
+    _id: Id<"${c.name}">;
+    _creationTime: number;${f}}`}).join(`
+
+`),s=e.tables.map(c=>`    ${c.name}: Doc_${c.name};`).join(`
+`),i=e.tables.map(c=>{const g=c.indexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
+`),l=e.tables.map(c=>{const g=c.shardMode==="global"?"":c.searchIndexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
+`),u=e.tables.map(c=>{const g=c.rankIndexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
+`),p=e.tables.map(c=>{const g=c.shardMode==="global"?"":(c.geoIndexes??[]).map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
+`),b=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",w=e.tables.map(c=>tn(c)).join(`
+
+`),v=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
+`),d=e.tables.map(c=>{const g=c.relations.map(f=>(m(f.table,"relation target table"),`        ${O(f.name)}: ${f.kind==="one"?"OneRelation":"ManyRelation"}<"${f.table}">;`)).join(`
+`);return g?`    ${c.name}: {
+${g}
+    };`:`    ${c.name}: {};`}).join(`
+`);return`${k}import type {
+    DatabaseReaderFacade as DatabaseReaderFacadeOf,
+    DatabaseWriterFacade as DatabaseWriterFacadeOf,
+    LoadWith as LoadWithOf,
+    TableReaderFacade as TableReaderFacadeOf,
+    TableWriterFacade as TableWriterFacadeOf,
+    WithArg as WithArgOf,
+} from "${n.serverDataModel}";
+
+export type {
+    AggregateOp,
+    GroupByEntry,
+    OrderBy,
+    QueryArgs,
+    QueryPage,
+    RankPage,
+    RankResult,
+    RestrictableQueryOptions,
+    RestrictableQueryOptionsOf,
+    SearchFilterBuilder,
+    SearchReader,
+    TableAggregateOptions,
+    TableAggregateOptionsOf,
+    TableGroupByOptions,
+    TableGroupByOptionsOf,
+    TableRankOptions,
+    TableRankPageOptions,
+    Where,
+    WhereOf,
+    WhereOperators,
+} from "${n.serverDataModel}";
+
+export type TableName = ${a};
+
+/**
+ * The tables **this app declared** — every {@link TableName} except those an add-on
+ * contributed through \`defineSchema(...).extend(...)\`.
+ *
+ * An add-on's tables are real tables and stay in \`TableName\` (they are queryable,
+ * they appear in \`DataModel\`), but an app enumerating "my tables" should not have to
+ * know they exist: an account-deletion sweep, an export, a migration allowlist, or a
+ * helper generic over a table union is about the app's own data, and every add-on
+ * added or removed would otherwise silently change the correct answer.
+ *
+ * \`\`\`ts
+ * // Doesn't need to mention \`ratelimit_buckets\`, and won't drift when an add-on lands.
+ * const EXPORTED: readonly AppTableName[] = ["nodes", "tagColors"];
+ * \`\`\`
+ */
+export type AppTableName = ${r};
+
+export type Id<TName extends string> = string & { readonly __table: TName };
+
+${o}
+
+export interface DataModel {
+${s}
+}
+
+export type Doc<T extends keyof DataModel> = DataModel[T];
+
+/**
+ * Per-table index name union. \`never\` for tables without secondary indexes.
+ * Used by \`TableReader.withIndex()\` to constrain callers to declared names.
+ */
+export interface IndexNamesByTable {
+${i}
+}
+
+export type IndexName<T extends keyof DataModel> = IndexNamesByTable[T];
+
+/** Per-table search-index name union. \`never\` for tables without searchIndex. */
+export interface SearchIndexNamesByTable {
+${l}
+}
+
+export type SearchIndexName<T extends keyof DataModel> = SearchIndexNamesByTable[T];
+
+/** Per-table rank-index name union. \`never\` for tables without a rankIndex. */
+export interface RankIndexNamesByTable {
+${u}
+}
+
+export type RankIndexName<T extends keyof DataModel> = RankIndexNamesByTable[T];
+
+/** Per-table geo-index name union. \`never\` for tables without a geoIndex. */
+export interface GeoIndexNamesByTable {
+${p}
+}
+
+export type GeoIndexName<T extends keyof DataModel> = GeoIndexNamesByTable[T];
+
+/** Union of declared vector index names. \`never\` when none are declared. */
+export type VectorIndexName = ${b};
+
+${w}
+
+/** Per-table insert shape, accepted by \`ctx.db.<table>.insert(...)\`. */
+export interface InsertModel {
+${v}
+}
+
+export type Insert<T extends keyof DataModel> = InsertModel[T];
+
+/**
+ * Phantom relation descriptors. They carry the relation kind and target table
+ * as type parameters only — there is no runtime value — so the \`with\` argument
+ * and its return type can be inferred from {@link Relations}.
+ */
+export interface OneRelation<Target extends keyof DataModel> {
+    readonly __relationKind: "one";
+    readonly __target: Target;
+}
+
+export interface ManyRelation<Target extends keyof DataModel> {
+    readonly __relationKind: "many";
+    readonly __target: Target;
+}
+
+/** Per-table relation map keyed by accessor name. \`{}\` for tables with none. */
+export interface Relations {
+${d}
+}
+
+/** The \`with\` argument for table \`T\` — see \`@lunora/server/data-model\`. */
+export type WithArg<T extends keyof DataModel> = WithArgOf<DataModel, Relations, T>;
+
+/** \`Doc<T>\` narrowed to exactly the relations requested in the with-arg \`W\`. */
+export type LoadWith<T extends keyof DataModel, W> = LoadWithOf<DataModel, Relations, T, W>;
+
+/** Read-only typed table accessor exposed on \`QueryCtx.db.<table>\`. */
+export type TableReaderFacade<T extends keyof DataModel> = TableReaderFacadeOf<DataModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, T, GeoIndexNamesByTable>;
+
+/** Read-write typed table accessor exposed on \`MutationCtx.db.<table>\` / \`ActionCtx.db.<table>\`. */
+export type TableWriterFacade<T extends keyof DataModel> = TableWriterFacadeOf<DataModel, InsertModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, T, GeoIndexNamesByTable>;
+
+/** Per-table read facade — \`ctx.db.<table>\` on a \`QueryCtx\`. */
+export type DatabaseReaderFacade = DatabaseReaderFacadeOf<DataModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, GeoIndexNamesByTable>;
+
+/** Per-table read-write facade — \`ctx.db.<table>\` on a \`MutationCtx\` / \`ActionCtx\`. */
+export type DatabaseWriterFacade = DatabaseWriterFacadeOf<DataModel, InsertModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, GeoIndexNamesByTable>;
+
+/** Insert builder returned by \`ctx.orm.insert(table)\`. */
+export interface OrmInsertBuilder<T extends keyof DataModel> {
+    values: (values: Insert<T>) => Promise<Id<T>>;
+}
+
+/** Replace builder returned by \`ctx.orm.replace(table, id)\` — swaps the whole document. */
+export interface OrmReplaceBuilder<T extends keyof DataModel> {
+    with: (values: Insert<T>) => Promise<void>;
+}
+
+/** Update builder returned by \`ctx.orm.update(table, id)\` — patches the named fields. */
+export interface OrmUpdateBuilder<T extends keyof DataModel> {
+    set: (values: Partial<Insert<T>>) => Promise<void>;
+}
+
+/** Read-only ORM surface — \`ctx.orm\` on a \`QueryCtx\`. Mirrors \`ctx.db\` reads under a kitcn-style \`query\` namespace. */
+export interface OrmReader {
+    query: DatabaseReaderFacade;
+}
+
+/** Read-write ORM surface — \`ctx.orm\` on a \`MutationCtx\` / \`ActionCtx\`. Writes are addressed by id, like \`ctx.db\`. */
+export interface OrmWriter extends OrmReader {
+    delete: <T extends keyof DataModel>(table: T, id: Id<T>) => Promise<void>;
+    insert: <T extends keyof DataModel>(table: T) => OrmInsertBuilder<T>;
+    replace: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmReplaceBuilder<T>;
+    update: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmUpdateBuilder<T>;
+}
+`},nn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,rn=/^(?:\.\.?\/)*_generated\//u,_e=e=>e.replaceAll(nn,(t,n)=>`import("${n.replace(rn,"./")}")`),Ie=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),Qe=e=>{const t=new Map;for(const a of e){const r=t.get(a.filePath)??[];r.push(a),t.set(a.filePath,r)}const n=([a,r])=>{const o=r.map(s=>{const i=he(s.args),l=_e(s.returnType);return`        ${s.exportName}: FunctionReference<"${s.kind}", ${i}, ${l}>;`}).join(`
+`);return`    ${O($(a))}: {
+${o}
+    };`};return[...t.entries()].toSorted(([a],[r])=>a.localeCompare(r)).map(a=>n(a)).join(`
+`)},an=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let a="";if(e.length>0&&(a+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),a+=`
+/** A typed reference to a durable workflow, addressable for \`cronJobs()\` targets. Mirrors \`@lunora/scheduler\`'s \`WorkflowReference\` structurally. */
+export interface WorkflowReference<Params = Record<string, unknown>> {
+    readonly isLunoraWorkflow: true;
+    readonly __params?: Params;
+    readonly binding: string;
+    readonly name: string;
+}
+`,e.length>0){const r=[...e].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=r.map(i=>`    ${i.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${i.exportName}>>;`).join(`
+`),s=r.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.exportName)} },`).join(`
+`);a+=`
+/** This project's durable workflows, addressable as typed references (e.g. \`crons.daily("digest", …, workflows.digestPipeline, params)\`). */
+export interface WorkflowsRef {
+${o}
+}
+
+export const workflows: WorkflowsRef = {
+${s}
+};
+`,n.push(`import type * as lunoraWorkflowDefinitions from "../workflows.js";
+`)}if(t.length>0){const r=[...t].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=r.map(i=>`    ${i.exportName}: WorkflowReference<AgentRunInput>;`).join(`
+`),s=r.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.name)} },`).join(`
+`);a+=`
+/** This project's durable agents, addressable as typed references for \`cronJobs()\` — each fire starts a fresh agent run (e.g. \`crons.daily("sweep", …, agents.support, { input, threadKey })\`). */
+export interface AgentsRef {
+${o}
+}
+
+export const agents: AgentsRef = {
+${s}
+};
+`,n.push(`import type { AgentRunInput } from "@lunora/agent";
+`)}return{block:a,importLine:n.join("")}},on=()=>Object.keys(Je().functions).toSorted((e,t)=>e.localeCompare(t)),Ze=e=>new Set(e.filter(t=>$(t.filePath)==="agents").map(t=>t.exportName)),sn=()=>new Set(Object.entries(Je().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),ln=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const a=Ze(t),r=sn(),o=t.find(i=>$(i.filePath)==="agents"&&r.has(i.exportName));if(o)throw new X("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const s=on().filter(i=>!a.has(i));return s.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
+`,lines:s.map(i=>`    "agents:${i}": lunoraAgentRuntimeFunctions.${i} as unknown as RegisteredLunoraFunction,`).join(`
+`),prelude:`
+/**
+ * The \`@lunora/agent\` runtime component — auto-registered because \`lunora/agents.ts\`
+ * declares agents. The durable loop dispatches the internal mutations; clients
+ * subscribe to the public queries (\`agents:agentMessages\` is the live thread view).
+ */
+const lunoraAgentRuntimeFunctions = agentComponent().functions;
+`}},dn=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(a=>$(a.filePath)==="sandbox"&&a.exportName==="invoke");if(n)throw new X("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
+`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},cn=(e,t)=>{if(e.length===0)return[];const n=Ze(t),a=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const r of e)r.voice&&a.push({args:{threadKey:{kind:"string"}},exportName:`${r.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return a.filter(r=>!n.has(r.exportName))},un=e=>{const t=e.filter(s=>s.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const s of t){const i=n.get(s.filePath)??[];i.push(s),n.set(s.filePath,i)}const a=[...n.entries()].toSorted(([s],[i])=>s.localeCompare(i)),r=a.map(([s,i])=>{const l=i.map(u=>{const p=_e(u.chunkType??"unknown");return`        ${O(u.exportName)}: HttpStreamRef<${p}, ${he(u.searchParams)}, ${he(u.params)}>;`}).join(`
+`);return`    ${O($(s))}: {
+${l}
+    };`}).join(`
+`),o=a.map(([s,i])=>{const l=i.map(u=>`        ${O(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
+`);return`    ${O($(s))}: {
+${l}
+    },`}).join(`
+`);return{block:`
+/** This project's HTTP-SSE stream routes (\`httpRoute.<verb>(path).stream()\`), addressable as typed references for \`client.httpStream\` / \`useHttpStream\`. */
+export interface HttpStreamsRef {
+${r}
+}
+
+export const httpStreams: HttpStreamsRef = {
+${o}
+};
+`,body:r}},tr=e=>{const{agents:t=[],functions:n,httpRoutes:a=[],useUmbrella:r=!1,workflows:o=[]}=e,s=V(r),i=[...n.filter(x=>x.visibility!=="internal"),...cn(t,n)],l=n.filter(x=>x.visibility==="internal"),u=Qe(i),p=Qe(l),b=un(a),w=`${u}
+${p}
+${b.body}`,v=Ie(w),d=v.length>0?`
+import type { ${v.join(", ")} } from "./dataModel.js";
+`:"",c=u?`
+${u}
+`:"",g=p?`
+${p}
+`:"",f=an(o,t),T=b.block===""?"FunctionReference":"FunctionReference, HttpStreamRef";return`${k}import { anyApi } from "${s.serverTypes}";
+import type { ${T} } from "${s.client}";
+${f.importLine}${d}
+export interface ApiTypes {${c}}
+
+export const api = anyApi as unknown as ApiTypes;
+
+/** Internal functions — callable only server-side via \`ctx.run*\`, never from a client. */
+export interface InternalApiTypes {${g}}
+
+export const internal = anyApi as unknown as InternalApiTypes;
+${f.block}${b.block}`},nr=e=>e?`${k}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
+import type { SeedClient, SeedClientOptions } from "@lunora/seed";
+
+import schema from "../schema.js";
+import type { InsertModel } from "./dataModel.js";
+
+/**
+ * Schema-aware seed client with this project's \`InsertModel\` and runtime schema
+ * pre-bound. Each table is a method; call it with a count, a range, explicit
+ * partial rows, or per-field overrides. Foreign keys connect to rows seeded
+ * earlier in the run, and FK-parent tables are seeded automatically.
+ * @example
+ * const seed = createSeedClient({ seed: 1 });
+ * const { users } = await seed.users(5);
+ * const { posts } = await seed.posts((x) => x([10, 20]));
+ */
+export const createSeedClient = (options?: SeedClientOptions): SeedClient<InsertModel> => createSeedClientBase<InsertModel>(schema, options);
+`:"",rr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const a=V(n),r=l=>l.table===void 0?"Row":`Doc<${JSON.stringify(l.table)}> & Row`,o=e.map(l=>{m(l.exportName,"shape export name");const u=r(l),p=he(l.args),b=Object.keys(l.args).length>0,w=b?`        args: ${p};`:`        args?: ${p};`,v=b?`(args: ${p}) => void`:`(args?: ${p}) => void`,d=`${l.exportName}CollectionOptions`;return`/** Options for the \`${l.exportName}\` shape binding. */
+export interface ${Ce(d)} {
+${w}
+    /**
+     * Share the optimistic-overlay gate with other collections + mutators on this
+     * shard. Defaults to the shared per-shard registry, which is almost always what
+     * you want — pass one only to isolate this collection's gate.
+     */
+    checkpoints?: CheckpointRegistry;
+    /** The Lunora client to subscribe through. */
+    client: LunoraClient;
+    /** Row key extractor — defaults to \`row._id\`. Override when the app keys rows by a natural column. */
+    getKey?: (row: ${u}) => string;
+    /** \`"eager"\` starts syncing at creation; \`"lazy"\` (default) on the first subscriber. */
+    load?: "eager" | "lazy";
+    /** Notified when the underlying subscription errors; the collection always leaves \`loading\`. */
+    onError?: (error: SubscriptionError) => void;
+    /** Routes the subscription to a shard's DO. **Required for a \`.shardBy()\` table** — without it the watermark lands in the default bucket. */
+    shardKey?: string;
+}
+
+/**
+ * Collection options for the \`${l.exportName}\` replication shape: \`config\` for
+ * \`createCollection\`, plus the \`checkpoints\` registry to hand \`bindMutators\` and
+ * \`scope\` to re-point the subscription.
+ */
+export const ${l.exportName}CollectionOptions = (options: ${Ce(d)}): LunoraCollectionOptions<${u}> =>
+    lunoraCollectionOptions<${u}>({
+        client: options.client,
+        ...(options.checkpoints === undefined ? {} : { checkpoints: options.checkpoints }),
+        ...(options.getKey === undefined ? {} : { getKey: options.getKey }),
+        ...(options.load === undefined ? {} : { load: options.load }),
+        ...(options.onError === undefined ? {} : { onError: options.onError }),
+        ...(options.shardKey === undefined ? {} : { shardKey: options.shardKey }),
+        shape: { args: options.args, name: ${JSON.stringify(l.exportName)}, ...(options.shardKey === undefined ? {} : { shardKey: options.shardKey }) },
+    });
+
+/** Live collection for the \`${l.exportName}\` shape, with its sync controls. */
+export const ${l.exportName}Collection = (
+    options: ${Ce(d)},
+): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${v} } => {
+    const { checkpoints, config, scope } = ${l.exportName}CollectionOptions(options);
+
+    return { checkpoints, collection: createCollection(config), scope };
+};`}).join(`
+
+`),s=Ie(o),i=s.length>0?`import type { ${s.join(", ")} } from "./dataModel.js";
+`:"";return`${k}import type { LunoraClient, SubscriptionError } from "${a.client}";
+import { lunoraCollectionOptions } from "@lunora/db/collections";
+import type { CheckpointRegistry, LunoraCollectionOptions, Row } from "@lunora/db";
+import type { Collection } from "@tanstack/db";
+import { createCollection } from "@tanstack/db";
+${i}
+${o}
+`},pn=(e,t)=>`lunora_${$(e)}_${String(t)}`,hn=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
+    const registered = LUNORA_FUNCTIONS[functionPath];
+
+    if (!registered) {
+        throw new LunoraError("FUNCTION_NOT_FOUND", \`function not registered: \${functionPath}\`);
+    }
+
+    return (await registered.handler(context, args ?? {})) as R;
+};`,gn=(e,t,n=[],a=[])=>{const r=new Map,o=d=>{r.has(d)||r.set(d,pn(d,r.size))};for(const d of e)o(d.filePath);for(const d of t)o(d.filePath);for(const d of n)o(d.filePath);for(const d of a)o(d.filePath);const s=[...r.entries()].map(([d,c])=>{if(!Xt.test(d))throw new X("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(d)}`);return`import * as ${c} from "../${d}.js";`}).join(`
+`),i=e.map(d=>`    "${$(d.filePath)}:${d.exportName}": ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),l=t.map(d=>`    ${JSON.stringify(d.id)}: ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredDataMigration,`).join(`
+`),u=n.map(d=>`    "${$(d.filePath)}:${d.exportName}": ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),p=a.map(d=>`    "${d.exportName}": ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredShape,`).join(`
+`),b=n.map(d=>`${$(d.filePath)}:${d.exportName}`),w=[i,u].filter(d=>d.length>0).join(`
+`),v=e.map(d=>{if(d.lifecycle||Object.keys(d.args).length===0)return;const c=zt(d.args);return c===void 0?void 0:`installCompiledValidatorMap(${r.get(d.filePath)??""}.${d.exportName}.args, ${c});`}).filter(d=>d!==void 0).join(`
+`);return{dispatchBody:w.length>0?`
+${w}
+`:"",importBlock:s.length>0?`${s}
+
+`:"",installBlock:v,migrationBody:l.length>0?`
+${l}
+`:"",mutatorPaths:b,shapeBody:p.length>0?`
+${p}
+`:""}},mn=e=>{const t=new Map;for(const r of e){const o=t.get(r.filePath)??[];o.push(r),t.set(r.filePath,o)}const n=[...t.entries()].toSorted(([r],[o])=>r.localeCompare(o)),a=n.map(([r,o])=>{const s=o.map(i=>{const l=he(i.args),u=l==="{}"?"?":"",p=_e(i.returnType);return i.kind==="stream"?`        ${i.exportName}: (args${u}: ${l}) => Promise<AsyncIterable<${p}>>;`:`        ${i.exportName}: (args${u}: ${l}) => Promise<${p}>;`}).join(`
+`);return`    ${O($(r))}: {
+${s}
+    };`}).join(`
+`);return{implementation:n.map(([r,o])=>{const s=$(r),i=o.map(l=>`        ${l.exportName}: (args) => callRegistered(context, "${s}:${l.exportName}", args),`).join(`
+`);return`    ${O(s)}: {
+${i}
+    },`}).join(`
+`),types:a}},fn=(e,t=[])=>{const n=new Set;for(const a of e.tables)for(const r of Object.values(a.shape)){const o=r.kind==="optional"&&r.inner?r.inner:r;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const a of t)a!==""&&a!=="default"&&n.add(a);return["default",...[...n].toSorted((a,r)=>a.localeCompare(r))]},ar=({agents:e=[],containers:t=[],env:n,hasAccessFacade:a=!1,hasAi:r=!1,hasAnalytics:o=!1,hasBrowser:s=!1,hasFlags:i=!1,hasHyperdrive:l=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:b=!1,hasPayments:w=!1,hasPipelines:v=!1,hasR2sql:d=!1,hasX402:c=!1,identity:g,queues:f=[],schema:T,storageRuleBuckets:x=[],useUmbrella:A=!1,workflows:_=[]}={})=>{const y=V(A),Y=fn(T??{tables:[]},x).map(h=>JSON.stringify(h)).join(" | "),Z=r?`import type { LunoraAi } from "@lunora/ai";
+`:"",ee=r?`
+    readonly ai: LunoraAi;`:"",I=w?`import type { LunoraPayment } from "@lunora/payment";
+`:"",j=w?`
+    readonly payments: LunoraPayment;`:"",S=c?`import type { X402Pay } from "@lunora/x402/pay";
+`:"",W=c?`
+    readonly x402: X402Pay;`:"",L=t.length>0?`import type { ContainerAccessor } from "@lunora/container";
+`:"",te=t.length>0?`
+    readonly containers: {${t.map(h=>`
+        readonly ${h.exportName}: ContainerAccessor;`).join("")}
+    };`:"",H=[...r?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...t.map(h=>(m(h.bindingName,`container binding "${h.bindingName}"`),`    /** Durable Object namespace for the \`${h.exportName}\` container. */
+    readonly ${h.bindingName}?: unknown;`)),..._.map(h=>(m(h.bindingName,`workflow binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` workflow. */
+    readonly ${h.bindingName}?: unknown;`)),...f.map(h=>(m(h.bindingName,`queue binding "${h.bindingName}"`),`    /** Queue producer binding for the \`${h.exportName}\` queue. */
+    readonly ${h.bindingName}?: unknown;`)),...e.map(h=>(m(h.bindingName,`agent binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` agent. */
+    readonly ${h.bindingName}?: unknown;`))].join(`
+`),C=`
+
+/**
+ * This project's Cloudflare bindings, as far as codegen can discover them from
+ * \`lunora/\` source — the container/workflow Durable Object namespaces and the
+ * conventional Workers AI binding. Bindings the config layer reconciles from
+ * user-named wrangler config (R2/KV/D1/\`services\`/queues/…) aren't statically
+ * visible here, so the open index signature keeps them reachable (cast at the
+ * use site). Service bindings (\`env.<SERVICE>.fetch(...)\` / RPC stubs) live
+ * under this signature too — Lunora can't type a third-party worker's RPC
+ * surface, so treat them as \`Fetcher\`/\`Service<unknown>\` and cast.
+ */
+export interface CloudflareBindings {
+    readonly [binding: string]: unknown;${H?`
+${H}`:""}
+}
+
+/** Alias for {@link CloudflareBindings} — the typed shape of \`env\`. */
+export type Env = CloudflareBindings;`,P=(h,Te)=>Te?Ut.get(h)?.field??"":"",U=P("kv",p),E=P("analytics",o),K=P("hyperdrive",l),ne=P("browser",s),re=P("images",u),ae=P("pipelines",v),Q=P("r2sql",d),M=a?`
+    /** Verified Cloudflare Access identity — a synchronous facade over the resolved claims (email / groups / hasGroup / claims). Anonymous when no Access token is present. */
+    readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",q=i?`
+    /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
+    readonly flags: import("${y.flags}").LunoraFlags;`:"",B=b?`
+    /** Multi-channel notifications (@lunora/notify): send / chat / inApp / webhook plus the push device sub-facade. Sends are external I/O — confine them to action handlers. */
+    readonly notify: import("@lunora/notify").LunoraNotify;
+    /** Device push sub-facade — the same object as ctx.notify.push (register / send / broadcast). Sends belong in action handlers. */
+    readonly push: import("@lunora/notify").LunoraPush;`:"",F=_.length>0,z=F?`import type { WorkflowHandle } from "@lunora/workflow";
+import type * as lunoraWorkflowDefinitions from "../workflows.js";
+`:"",ye=F?`
+
+/** Params type carried by a \`defineWorkflow\` definition (its phantom \`__params\`). */
+type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params }
+    ? unknown extends Params
+        ? Record<string, unknown>
+        : NonNullable<Params>
+    : Record<string, unknown>;
+
+/** This project's declared workflows, addressable from \`ctx.workflows\` by their \`lunora/workflows.ts\` export name. */
+export interface LunoraWorkflows {
+${_.map(h=>`    get(name: ${JSON.stringify(h.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${h.exportName}>>;`).join(`
+`)}
+}`:"",ge=F?' | "workflows"':"",me=F?`
+    readonly workflows: LunoraWorkflows;`:"",oe=f.length>0,we=oe?`import type { QueueProducer } from "@lunora/queue";
+import type * as lunoraQueueDefinitions from "../queues.js";
+`:"",xe=oe?`
+
+/** Message body type carried by a \`defineQueue\` definition (its phantom \`__lunoraBody\`). */
+type QueueBodyOf<Definition> = Definition extends { __lunoraBody?: infer Body } ? (unknown extends Body ? unknown : NonNullable<Body>) : unknown;
+
+/** This project's declared queues, addressable from \`ctx.queues\` by their \`lunora/queues.ts\` export name. */
+export interface LunoraQueues {
+${f.map(h=>`    readonly ${h.exportName}: QueueProducer<QueueBodyOf<typeof lunoraQueueDefinitions.${h.exportName}>>;`).join(`
+`)}
+}`:"",fe=oe?`
+    readonly queues: LunoraQueues;`:"",ie=e.length>0,ke=ie?`import type { AgentHandle } from "@lunora/agent";
+`:"",ve=ie?`
+
+/** This project's declared agents, addressable from \`ctx.agents\` by their \`lunora/agents.ts\` export name. */
+export interface LunoraAgents {
+${e.map(h=>(m(h.exportName,`agent export "${h.exportName}"`),`    readonly ${h.exportName}: AgentHandle;`)).join(`
+`)}
+}`:"",be=ie?`
+    readonly agents: LunoraAgents;`:"",$e=g?`import type { InferIdentity } from "${y.server}";
+import type * as lunoraIdentityContract from "../identity.js";
+`:"",Se=g?`
+
+/** This app's declared identity claim contract (\`defineIdentity\` in \`lunora/identity.ts\`) — the typed shape of \`ctx.auth.getIdentity()\`, the RLS policy \`ctx.auth.identity\`, and the \`authorizeShard\`/\`authorizeFanOut\` identity argument. */
+export type Identity = InferIdentity<typeof lunoraIdentityContract.${g.exportName}>;
+
+/** \`ctx.auth\` narrowed so \`getIdentity()\` resolves the declared {@link Identity} contract instead of the untyped claim bag. */
+type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: () => Promise<Identity | null> };`:"",se=g?' | "auth"':"",le=g?`
+    readonly auth: NarrowedAuth;`:"",Re=g?", Identity":"",Ne=n?`import type * as lunoraEnvContract from "../env.js";
+`:"",Oe=n?`
+
+/** This app's declared env contract (\`defineEnv\` in \`lunora/env.ts\`) — the validated, coercion-aware shape of \`ctx.env\`. */
+export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",de=n?' | "env"':"",ce=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${k}import { createPolicyDsl, initLunora, v as vBase } from "${y.server}";
+import type {
+    ActionBuilder,
+    ActionCtx as ActionCtxBase,
+    ColumnValidator,
+    DatabaseReader,
+    DatabaseWriter,
+    EmptyArgs,
+    InternalActionBuilder,
+    InternalMutationBuilder,
+    InternalQueryBuilder,
+    MutationBuilder,
+    MutationCtx as MutationCtxBase,
+    QueryBuilder,
+    QueryCtx as QueryCtxBase,
+    ReadOnlyStorage,
+    Storage as StorageBase,
+    TableReader,
+} from "${y.server}";
+
+import type { DataModel, DatabaseReaderFacade, DatabaseWriterFacade, Doc, Id as IdOfTable, OrmReader, OrmWriter, Relations, TableName } from "./dataModel.js";
+${Z}${I}${S}${L}${z}${we}${ke}${$e}${Ne}
+export type { AppTableName, DataModel, Doc, Id, TableName } from "./dataModel.js";
+
+/** Storage buckets this schema declares (\`v.storage("name")\`), narrowing \`ctx.storage.bucket(name)\`. */
+export type StorageBucketName = ${Y};${C}${ye}${xe}${ve}${Se}${Oe}
+
+/**
+ * Project-typed contexts. The base contexts from \`@lunora/server\` are
+ * untyped against the schema; here \`db\` is widened to the generated per-table
+ * facade (\`ctx.db.<table>.findMany(...)\`) while keeping the legacy structural
+ * \`db.get\`/\`db.query\` surface for back-compat, and \`storage\` is narrowed so
+ * \`ctx.storage.bucket(name)\` autocompletes the declared buckets.
+ */
+/**
+ * The Convex-style fluent reader \`ctx.db.query(table)\`, bound to this schema:
+ * a table-name literal narrows the row type, so \`.collect()\` / \`.first()\` /
+ * \`.take()\` (and the \`.withIndex()\` / \`.filter()\` / \`.order()\` chain) resolve
+ * as \`Doc<table>\` with no \`as unknown as Doc<...>\` casts. The per-table accessor
+ * \`ctx.db.<table>\` stays available alongside it via the facade.
+ *
+ * Intersected with the wide \`(string) => TableReader\` signature so the bound
+ * \`ctx.db\` is still structurally assignable to schema-agnostic consumers that
+ * call \`db.query(someString)\` (e.g. \`@lunora/ratelimit\`'s \`createDbStore\`).
+ */
+type TypedTableQuery = (<T extends TableName>(table: T) => TableReader<Doc<T>>) & ((table: string) => TableReader);
+
+/**
+ * The point read \`ctx.db.get(id)\`, bound to this schema: an \`Id<"table">\`
+ * carries its table name, so the resolved document is typed \`Doc<table>\` (or
+ * \`null\` when absent) with no \`as Doc<...>\` cast. Mirrors {@link TypedTableQuery}.
+ */
+type TypedTableGet = <T extends TableName>(id: IdOfTable<T>) => Promise<Doc<T> | null>;
+
+/**
+ * Resolves the \`asId\` table argument: a literal in {@link TableName} passes through, a
+ * genuinely-wide \`string\` (a computed name) passes through, and any OTHER literal
+ * collapses to \`never\` so it fails to typecheck.
+ *
+ * The \`string extends T\` arm is what distinguishes "the caller passed a computed
+ * string" from "the caller passed a misspelled literal" — only the wide \`string\` type
+ * is a supertype of \`string\`.
+ */
+type AsIdTable<T extends string> = T extends TableName ? T : string extends T ? T : never;
+
+/**
+ * The id parse boundary \`ctx.db.asId(table, id)\`, bound to this schema: a misspelled
+ * table literal is a compile error rather than a call that hands back a confidently-
+ * branded id for a table that does not exist. Mirrors {@link TypedTableQuery} /
+ * {@link TypedTableGet}.
+ *
+ * Deliberately NOT an intersection with a wide \`(string, string) => string\` overload:
+ * overload resolution would fall through to it for a bad literal, silently restoring
+ * the very typo hole this narrowing exists to close. {@link AsIdTable} instead keeps a
+ * computed table name working — and keeps \`ctx.db\` structurally assignable to
+ * schema-agnostic consumers — without accepting an invalid literal.
+ */
+type TypedAsId = <T extends string>(tableName: AsIdTable<T>, id: string) => IdOfTable<T & TableName>;
+
+export interface QueryCtx extends Omit<QueryCtxBase, "db" | "storage"${se}${de}> {
+    readonly db: Omit<DatabaseReader, "asId" | "query" | "get"> & DatabaseReaderFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
+    readonly orm: OrmReader;
+    readonly storage: ReadOnlyStorage<StorageBucketName>;${M}${U}${q}${B}${E}${ce}${le}
+}
+
+export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${ge}${se}${de}> {
+    readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
+    readonly orm: OrmWriter;
+    readonly storage: ReadOnlyStorage<StorageBucketName>;${M}${U}${q}${B}${E}${ce}${me}${fe}${be}${le}
+}
+
+export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${ge}${se}${de}> {
+    readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
+    readonly orm: OrmWriter;
+    readonly storage: StorageBase<StorageBucketName>;${M}${ee}${j}${W}${te}${U}${q}${B}${K}${ne}${re}${E}${ae}${Q}${ce}${me}${fe}${be}${le}
+}
+
+/**
+ * Procedure builders bound to this project's typed contexts. Chain
+ * \`.input({...})\` to declare args, \`.use(middleware)\` for rate limiting / RLS /
+ * masking (each middleware may refine \`ctx\`), then the terminal
+ * \`.query()\` / \`.mutation()\` / \`.action()\` with a \`({ ctx, args }) => ...\`
+ * handler. \`.output(validator)\` and (queries) \`.stream()\` are also available.
+ */
+const lunoraBuilders = initLunora.dataModel<DataModel>().create();
+
+/** \`query\` builder bound to this project's typed {@link QueryCtx}. */
+export const query = lunoraBuilders.query as unknown as QueryBuilder<QueryCtx, EmptyArgs>;
+
+/** \`mutation\` builder bound to this project's typed {@link MutationCtx}. */
+export const mutation = lunoraBuilders.mutation as unknown as MutationBuilder<MutationCtx, EmptyArgs>;
+
+/** \`action\` builder bound to this project's typed {@link ActionCtx}. */
+export const action = lunoraBuilders.action as unknown as ActionBuilder<ActionCtx, EmptyArgs>;
+
+/** \`internalQuery\` builder bound to this project's typed {@link QueryCtx} — never exposed on \`api\`. */
+export const internalQuery = lunoraBuilders.internalQuery as unknown as InternalQueryBuilder<QueryCtx, EmptyArgs>;
+
+/** \`internalMutation\` builder bound to this project's typed {@link MutationCtx} — never exposed on \`api\`. */
+export const internalMutation = lunoraBuilders.internalMutation as unknown as InternalMutationBuilder<MutationCtx, EmptyArgs>;
+
+/** \`internalAction\` builder bound to this project's typed {@link ActionCtx} — never exposed on \`api\`. */
+export const internalAction = lunoraBuilders.internalAction as unknown as InternalActionBuilder<ActionCtx, EmptyArgs>;
+
+/**
+ * \`definePolicy\` bound to THIS schema's {@link DataModel} + {@link Relations}.
+ * Import it from here (\`./_generated/server\`) instead of \`@lunora/server\` to get
+ * a relation-aware RLS authoring surface: \`table\` autocompletes to a real table
+ * name and the \`when\` predicate type-checks against the table's columns **and**
+ * its declared relations — \`{ author: { is: {...} } }\`, \`{ posts: { some: {...} } }\`,
+ * etc. (the \`@lunora/do\` pre-resolver resolves relation predicates on reads).
+ * Runtime-identical to \`@lunora/server\`'s \`definePolicy\`; only the types narrow,
+ * so the \`rls()\` chain discovers a policy authored either way the same.
+ */
+export const definePolicy = createPolicyDsl<DataModel, Relations${Re}>();
+
+/**
+ * The validator builder \`v\`, with \`v.id(...)\` constrained to THIS schema's
+ * table names — so the argument autocompletes and returns a precise
+ * \`Id<"table">\`. Identical to \`@lunora/server\`'s \`v\` at runtime; the only
+ * difference is the tightened \`id\` type.
+ *
+ * Import \`v\` from here (\`./_generated/server\`) in your queries/mutations/actions
+ * to get table-name autocomplete. \`lunora/schema.ts\` can't use it — it is the
+ * file that defines the table names, so they aren't known yet there; pass the
+ * names as string literals and the generated \`Id<"table">\` types still catch a
+ * typo wherever the id is used.
+ */
+export const v = vBase as unknown as Omit<typeof vBase, "id"> & {
+    id: <T extends TableName>(table: T) => ColumnValidator<IdOfTable<T>, IdOfTable<T>>;
+};
+`},bn=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${$(n.filePath)}:${n.exportName}`);return t},or=e=>{const{agents:t=[],functions:n,migrations:a=[],mutators:r=[],shapes:o=[],useUmbrella:s=!1,usesSandbox:i=!1}=e,l=n.length>0,u=V(s),{dispatchBody:p,importBlock:b,installBlock:w,migrationBody:v,mutatorPaths:d,shapeBody:c}=gn(n,a,r,o),g=ln(t,n),f=dn(i,n),T=[g.lines,f.lines].filter(C=>C.length>0).join(`
+`);let x=p;T.length>0&&(x=p.length>0?`${p.trimEnd()}
+${T}
+`:`
+${T}
+`);const A=bn(n),_=o.length>0?`import type { RegisteredShape } from "${u.server}";
+`:"",y=o.length>0?`
+/**
+ * Replication-shape registry — one entry per \`defineShape\` in \`lunora/shapes.ts\`.
+ * The generated ShardDO's \`resolveShape\` override looks a shape up by name and
+ * evaluates its trusted \`compileWhere(ctx, args)\` to authorize + scope a
+ * \`shape_subscribe\` (reads-as-permissions).
+ */
+export const LUNORA_SHAPES: Record<string, RegisteredShape> = {${c}};
+`:"",Y=d.length>0?`
+/**
+ * Custom-mutator function paths — the \`LUNORA_FUNCTIONS\` keys the generated
+ * ShardDO's \`isCustomMutator\` override routes through the client-watermark push
+ * protocol (\`x-lunora-client-id\`/\`x-lunora-client-seq\` ordering).
+ */
+export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${d.map(C=>JSON.stringify(C)).join(", ")}]);
+`:"",Z=w.length>0?`import { DEFER_VALIDATION as DEFER, installCompiledValidatorMap } from "${u.values}";
+`:"",ee=w.length>0?`
+/**
+ * AOT-compiled argument validators (Worker-safe, no \`eval\`). Each is installed
+ * onto its function's live \`.args\` object and consulted by the interpreted
+ * parser as a zero-allocation fast path; anything it can't model is deferred.
+ */
+${w}
+`:"",I=mn(n),j=I.types?`
+${I.types}
+`:"",S=I.implementation?`
+${I.implementation}
+`:"",W=Ie(I.types),L=W.length>0?`import type { ${W.join(", ")} } from "./dataModel.js";
+`:"",te=l?"context":"_context",H=l?`${hn}
+
+`:"";return`${k}${b}${g.importLine}${f.importLine}${Z}${_}import { LunoraError } from "${u.server}";
+import type { ActionCtx, MutationCtx, QueryCtx } from "./server.js";
+${L}
+/**
+ * Single registered function, narrowed to the shape \`handleRpc\` needs.
+ * The real argument validators / return types are checked elsewhere — at
+ * the dispatch site we erase to \`unknown\` so a single map can host every
+ * registered function.
+ */
+export interface RegisteredLunoraFunction {
+    kind: "action" | "mutation" | "query" | "stream";
+    args: Record<string, unknown>;
+    /**
+     * For \`"action" | "mutation" | "query"\` the handler is awaited and its result returned.
+     * For \`"stream"\` the handler returns an \`AsyncIterable\` synchronously and takes an
+     * \`AbortSignal\` as a third argument — the runtime drives it frame-by-frame.
+     */
+    handler: ((context: unknown, args: Record<string, unknown>) => Promise<unknown> | unknown) | ((context: unknown, args: Record<string, unknown>, signal?: AbortSignal) => AsyncIterable<unknown>);
+    /** \`"internal"\` functions are rejected on the external RPC path; absence === public. */
+    visibility?: "internal" | "public";
+}
+${g.prelude}${f.prelude}
+/**
+ * Static dispatch table. The key matches the \`__lunoraRef\` the client
+ * emits (\`api[namespace][fn].__lunoraRef === "namespace:fn"\`).
+ */
+export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${x}};
+${ee}${y}${Y}
+/**
+ * Connection-lifecycle manifest: the function paths the generated ShardDO
+ * dispatches when a client's WebSocket connects (\`connect\`) or disconnects
+ * (\`disconnect\`). Each path also resolves through {@link LUNORA_FUNCTIONS}; the
+ * DO runs every hook under the socket's verified identity via system dispatch.
+ */
+export const LUNORA_LIFECYCLE_HOOKS: { connect: readonly string[]; disconnect: readonly string[] } = {
+    connect: [${A.connect.map(C=>JSON.stringify(C)).join(", ")}],
+    disconnect: [${A.disconnect.map(C=>JSON.stringify(C)).join(", ")}],
+};
+
+/**
+ * Resolve and invoke a registered function from an external caller. Throws a
+ * LunoraError-shaped object (404) when the path is unknown — the runtime's
+ * structural error mapper turns that into the right HTTP status. Internal
+ * functions are treated as not-found so their existence never leaks to clients.
+ */
+export const dispatchLunoraFunction = async (functionPath: string, context: unknown, args: Record<string, unknown>): Promise<unknown> => {
+    const registered = LUNORA_FUNCTIONS[functionPath];
+
+    if (!registered || registered.visibility === "internal") {
+        throw new LunoraError("FUNCTION_NOT_FOUND", \`function not registered: \${functionPath}\`);
+    }
+
+    return registered.handler(context, args);
+};
+
+/**
+ * A handler context accepted by {@link createCaller}. The runtime context the
+ * shard DO builds is uniform across kinds, so any handler's \`ctx\` works here.
+ */
+export type CallerCtx = ActionCtx | MutationCtx | QueryCtx;
+
+/**
+ * Typed, in-process server-to-server caller. Every registered function — public
+ * *and* internal — is reachable; each call dispatches against the same shard
+ * with the supplied \`context\`, exactly like \`ctx.runQuery\`/\`runMutation\`/
+ * \`runAction\` but without re-stating the function path.
+ */
+export interface Caller {${j}}
+
+${H}/** Build a {@link Caller} bound to \`context\` (typically a handler's \`ctx\`). */
+export const createCaller = (${te}: CallerCtx): Caller => ({${S}});
+
+/**
+ * Single registered data migration, narrowed to the shape the per-shard runner
+ * consumes. \`up\`/\`down\` are erased to a structural transform; the authoring
+ * validation lives in \`defineMigration\`.
+ */
+export interface RegisteredDataMigration {
+    batchSize?: number;
+    down?: (document: Record<string, unknown>) => Record<string, unknown> | undefined;
+    id: string;
+    table: string;
+    up: (document: Record<string, unknown>) => Record<string, unknown> | undefined;
+}
+
+/**
+ * Registry of online data migrations keyed by \`defineMigration\`'s \`id\`. The
+ * shard DO's admin RPC and the CLI resolve migrations to run through this map.
+ */
+export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${v}};
+`},yn=e=>{const t={};for(const n of e.tables){const a={};for(const[r,o]of Object.entries(n.shape)){const s=o.kind==="optional"&&o.inner?o.inner:o;s.kind==="id"&&s.tableName!==void 0&&(a[r]=s.tableName)}Object.keys(a).length>0&&(t[n.name]=a)}return t},wn=e=>{const t={};for(const n of e.tables){const a=[];for(const[r,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&a.push(r);a.length>0&&(t[n.name]=a)}return t},xn=e=>{const t={};for(const n of e.tables){const a=[...n.indexes.map(r=>({fields:[...r.fields],name:r.name,type:"index",...r.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(r=>({fields:[r.field,...r.filterFields??[]],name:r.name,type:"search"})),...(n.geoIndexes??[]).map(r=>({fields:[r.field],name:r.name,type:"geo"})),...n.rankIndexes.map(r=>({fields:r.sortBy.map(o=>o.field),name:r.name,type:"rank"})),...n.vectorIndexes.map(r=>({fields:r.field===void 0?[]:[r.field],name:r.name,type:"vector"}))];a.length>0&&(t[n.name]=a)}return t},kn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},vn=e=>{const t={};for(const n of e.tables){const a=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[r,o]of Object.entries(n.shape)){const s=o.kind==="optional"||!!o.column?.hasDefault,i=o.kind==="optional"&&o.inner?o.inner:o,l={name:r,optional:s,type:i.kind};i.kind==="id"&&i.tableName!==void 0&&(l.ref=i.tableName),i.kind==="storage"&&(l.isStorage=!0),a.push(l)}t[n.name]=a}return t},$n=e=>e?{importFragment:"serveRelationFanout, ",override:`
+        protected override async runRelationFanoutRead(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
+            this.ensureMigrated();
+
+            const { db } = this.buildCtx({ functionPath }) as { db: DatabaseWriterLike };
+
+            return serveRelationFanout(schema as unknown as SchemaLike, db, functionPath, args);
+        }
+`}:{importFragment:"",override:""},Sn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
+            const aiBinding = config.ai?.(env) ?? (env as Record<string, unknown>).AI;
+            // Correlate AI-Gateway-routed calls with the Lunora trace: thread the
+            // function path + trace id into createAi, which folds them into the
+            // gateway's native \`metadata\` only when a gateway is configured (absent
+            // otherwise). Mirror the tracer's anchor guard — a deferred subscription
+            // re-run must not borrow a concurrent dispatch's trace, so read
+            // \`getCurrentTrace()\` only on the synchronous (non-threaded-identity) path.
+            const aiTrace = options.identity ? undefined : this.getCurrentTrace();
+            const ai: LunoraAi = aiBinding
+                ? createAi({ binding: aiBinding as AiBindingLike, env: env as Record<string, unknown>, metadata: { functionPath: options.functionPath, traceId: aiTrace?.traceId } })
+                : aiStub;
+`,configField:`
+    ai?: (env: Record<string, unknown>) => AiBindingLike;`,contextField:`
+                ai,`,stub:`
+const aiStub: LunoraAi = {
+    embeddingModel: () => {
+        ${t}
+    },
+    model: () => {
+        ${t}
+    },
+    run: async () => {
+        ${t}
+    },
+    // workersai is a callable-with-properties; a bare throwing arrow isn't
+    // structurally assignable, so cast it. Never invoked (the stub throws first).
+    workersai: (() => {
+        ${t}
+    }) as unknown as LunoraAi["workersai"],
+};
+`}},D={build:"",configField:"",contextField:"",importLines:[],stub:""},Rn=e=>{if(!e)return D;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
+            const kvBinding = config.kv?.(env) ?? (env as Record<string, unknown>).KV;
+            const kv: Kv = kvBinding ? createKv({ namespace: kvBinding as KVNamespaceLike }) : kvStub;
+`,configField:`
+    kv?: (env: Record<string, unknown>) => KVNamespaceLike;`,contextField:`
+                kv,`,importLines:['import type { Kv, KVNamespaceLike } from "@lunora/bindings/kv";','import { createKv } from "@lunora/bindings/kv";'],stub:`
+const kvStub: Kv = {
+    delete: async () => {
+        ${t}
+    },
+    get: async () => {
+        ${t}
+    },
+    getRaw: async () => {
+        ${t}
+    },
+    getWithMetadata: async () => {
+        ${t}
+    },
+    list: async () => {
+        ${t}
+    },
+    put: async () => {
+        ${t}
+    },
+};
+`}},Nn=(e,t)=>e?{build:`
+            const flags: import("${t}").LunoraFlags = createFlags({
+                hooks: flagsConfig.hooks,
+                logger: flagsConfig.logger,
+                provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
+                targetingKey: () => flagsConfig.identify?.({ identity: identity ?? null, userId: userId ?? null }),
+            });
+`,configField:`
+    flags?: (env: Record<string, unknown>) => import("${t}").Provider;`,contextField:`
+                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:D,On=e=>e?{build:`
+            const { notify, push } = createNotify(notifyConfig, env, { log, metrics });
+`,configField:"",contextField:`
+                notify,
+                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:D,Tn=e=>e?{build:`
+            const envConfig = lunoraEnvContract.${e.exportName}(env);
+`,configField:"",contextField:`
+                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:D,An=e=>e?{build:`
+            const access = accessFacade(identity, userId);
+`,configField:"",contextField:`
+                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:D,Ln=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const a=i=>`
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const flags: import("${n}").LunoraFlags = createFlags({
+                hooks: flagsConfig.hooks,
+                logger: flagsConfig.logger,
+                provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
+                targetingKey: ${i},
+            });`,r=`
+/** Statically-discovered feature flags (\`ctx.flags.<type>("key")\` reads) served via \`__lunora_admin__:listFlags\` + the reactive \`__lunora_flags__:\` channel. */
+const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number" | "object" | "string" }> = ${JSON.stringify(e,void 0,4)};
+`,o=`
+        protected override async evaluateFlags(context?: Record<string, unknown>): Promise<FlagsResult> {${a("undefined")}
+            const evalContext = context as import("${n}").EvaluationContext | undefined;
+            const evaluations: FlagsResult["flags"] = [];
+
+            for (const entry of LUNORA_FLAG_KEYS) {
+                // eslint-disable-next-line no-await-in-loop -- flags evaluate sequentially; each shares the single memoized provider client
+                const details =
+                    entry.type === "boolean"
+                        ? await flags.details.boolean(entry.key, false, evalContext)
+                        : entry.type === "number"
+                          ? await flags.details.number(entry.key, 0, evalContext)
+                          : entry.type === "string"
+                            ? await flags.details.string(entry.key, "", evalContext)
+                            : await flags.details.object(entry.key, {}, evalContext);
+
+                evaluations.push({ errorCode: details.errorCode, key: entry.key, reason: details.reason, type: entry.type, value: details.value, variant: details.variant });
+            }
+
+            return { configured: true, flags: evaluations };
+        }
+`,s=`
+        protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<unknown> {${a("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
+            const key = typeof args.key === "string" ? args.key : "";
+
+            // SECURITY: the reactive channel is public (any socket, no auth). Serve
+            // ONLY statically-discovered flag keys — an arbitrary client-supplied key
+            // would let a subscriber probe the value of internal/unreleased flags the
+            // app never exposes. Unknown key ⇒ the "nothing to deliver" sentinel.
+            // eslint-disable-next-line unicorn/no-null -- the base hook's "nothing to deliver" sentinel
+            if (key.length === 0 || !LUNORA_FLAG_KEYS.some((entry) => entry.key === key)) {
+                return Promise.resolve(null);
+            }
+
+            // SECURITY: evaluate under the socket's server-verified identity ONLY
+            // (the targetingKey resolved above). Client-supplied targeting context is
+            // NOT honored on this public channel — otherwise a subscriber could spoof
+            // targeting attributes (e.g. plan/role) to unlock a flag gated on them.
+            const context = undefined;
+
+            if (args.type === "number") {
+                return flags.number(key, typeof args.default === "number" ? args.default : 0, context);
+            }
+
+            if (args.type === "string") {
+                return flags.string(key, typeof args.default === "string" ? args.default : "", context);
+            }
+
+            if (args.type === "object") {
+                return flags.object(key, (args.default ?? {}) as import("${n}").JsonValue, context);
+            }
+
+            return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
+        }
+`;return{constant:r,evaluateOverride:o,subscriptionOverride:s}},Cn=e=>{if(!e)return D;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
+            const analyticsBinding = config.analytics?.(env) ?? (env as Record<string, unknown>).ANALYTICS;
+            const analytics: AnalyticsClient = analyticsBinding ? createAnalytics(analyticsBinding as AnalyticsEngineDatasetLike) : analyticsStub;
+`,configField:`
+    analytics?: (env: Record<string, unknown>) => AnalyticsEngineDatasetLike;`,contextField:`
+                analytics,`,importLines:['import type { AnalyticsClient, AnalyticsEngineDatasetLike } from "@lunora/bindings/analytics";','import { createAnalytics } from "@lunora/bindings/analytics";'],stub:`
+const analyticsStub: AnalyticsClient = {
+    track: () => {
+        ${t}
+    },
+    writeDataPoint: () => {
+        ${t}
+    },
+};
+`}},Dn=e=>{if(!e)return D;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
+            const imagesBinding = config.images?.(env) ?? (env as Record<string, unknown>).IMAGES;
+            const images: Images = imagesBinding ? createImages({ binding: imagesBinding as ImagesBindingLike }) : imagesStub;
+`,configField:`
+    images?: (env: Record<string, unknown>) => ImagesBindingLike;`,contextField:`
+                images,`,importLines:['import type { Images, ImagesBindingLike } from "@lunora/bindings/images";','import { createImages } from "@lunora/bindings/images";'],stub:`
+const imagesStub: Images = {
+    info: async () => {
+        ${t}
+    },
+    transform: async () => {
+        ${t}
+    },
+};
+`}},_n=e=>e?{build:`
+            const sql: SqlClient = config.sql ? config.sql(env) : sqlStub;
+`,configField:`
+    sql?: (env: Record<string, unknown>) => SqlClient;`,contextField:`
+                sql,`,importLines:['import type { SqlClient } from "@lunora/hyperdrive";'],stub:`
+const sqlStub: SqlClient = {
+    query: async () => {
+        throw new Error("ctx.sql: provide a \\\`sql\\\` config thunk that builds a SqlClient from your driver, e.g. \\\`sql: (env) => fromPostgresJs(postgres(env.HYPERDRIVE.connectionString))\\\`.");
+    },
+};
+`}:D,In=e=>{if(!e)return D;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`.\");";return{build:`
+            const browser: Browser = config.browser ? config.browser(env) : browserStub;
+`,configField:`
+    browser?: (env: Record<string, unknown>) => Browser;`,contextField:`
+                browser,`,importLines:['import type { Browser } from "@lunora/browser";'],stub:`
+const browserStub: Browser = {
+    content: async () => {
+        ${t}
+    },
+    launch: async () => {
+        ${t}
+    },
+    pdf: async () => {
+        ${t}
+    },
+    scrape: async () => {
+        ${t}
+    },
+    screenshot: async () => {
+        ${t}
+    },
+};
+`}},Pn=e=>{if(!e)return D;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
+            const r2sqlEnv = env as Record<string, unknown>;
+            const r2sqlAccountId = (r2sqlEnv.R2_SQL_ACCOUNT_ID ?? r2sqlEnv.CLOUDFLARE_ACCOUNT_ID) as string | undefined;
+            const r2sqlToken = r2sqlEnv.R2_SQL_TOKEN as string | undefined;
+            const r2sqlBucket = r2sqlEnv.R2_SQL_BUCKET as string | undefined;
+            const r2sql: R2SqlClient = config.r2sql
+                ? config.r2sql(env)
+                : r2sqlAccountId && r2sqlToken && r2sqlBucket
+                  ? createR2Sql({ accountId: r2sqlAccountId, apiToken: r2sqlToken, bucket: r2sqlBucket })
+                  : r2sqlStub;
+`,configField:`
+    r2sql?: (env: Record<string, unknown>) => R2SqlClient;`,contextField:"",importLines:['import type { R2SqlClient } from "@lunora/bindings/r2sql";','import { createR2Sql } from "@lunora/bindings/r2sql";'],stub:`
+const r2sqlStub: R2SqlClient = {
+    describe: async () => {
+        ${t}
+    },
+    explain: async () => {
+        ${t}
+    },
+    from: () => {
+        ${t}
+    },
+    query: async () => {
+        ${t}
+    },
+    showDatabases: async () => {
+        ${t}
+    },
+    showTables: async () => {
+        ${t}
+    },
+};
+`}},En=e=>e?{build:`
+            const pipelinesBinding = config.pipelines?.(env) ?? (env as Record<string, unknown>).PIPELINES;
+            const pipelines: PipelineClient = pipelinesBinding ? createPipelines({ binding: pipelinesBinding as PipelineBindingLike }) : pipelinesStub;
+`,configField:`
+    pipelines?: (env: Record<string, unknown>) => PipelineBindingLike;`,contextField:"",importLines:['import type { PipelineBindingLike, PipelineClient } from "@lunora/bindings/pipelines";','import { createPipelines } from "@lunora/bindings/pipelines";'],stub:`
+const pipelinesStub: PipelineClient = {
+    send: async () => {
+        throw new Error("ctx.pipelines: no Pipelines binding found. Add a \\\`pipelines\\\` binding (env.PIPELINES) to wrangler.jsonc, or pass \\\`pipelines\\\` to createShardDO().");
+    },
+};
+`}:D,ir=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",a=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
+export class ${o.className} extends LunoraContainer {
+    public constructor(ctx: ConstructorParameters<typeof LunoraContainer>[0], env: Record<string, unknown>) {
+        super(ctx, env, ${o.exportName}, "${o.exportName}"${n});
+    }
+}
+`)).join(`
+`),r=e.map(o=>o.exportName).join(", ");return`${k}/**
+ * Container-enabled Durable Object classes for the containers declared in
+ * \`lunora/containers.ts\`. Re-export them from your worker entry — wrangler
+ * requires each \`containers[].class_name\` to be exported by the worker:
+ *
+ * \`export * from "./lunora/_generated/containers.js";\`
+ *
+ * \`ContainerProxy\` is re-exported alongside them: the egress-interception path
+ * (\`allowedHosts\`/\`deniedHosts\`/\`interceptHttps\` and the runtime
+ * \`handle.egress\` controls) routes container outbound traffic through this
+ * WorkerEntrypoint, so it too must be exported by the deployed worker.
+ */
+import { LunoraContainer } from "@lunora/container/do";
+
+import { ${r} } from "../containers.js";
+
+export { ContainerProxy } from "@lunora/container/do";
+
+${a}`},Fn=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const a of e)m(a.exportName,`container export "${a.exportName}"`),m(a.bindingName,`container binding "${a.bindingName}"`);const n=e.map(a=>{const r=a.maxInstances===void 0?"":`, maxInstances: ${String(a.maxInstances)}`;return`    { binding: "${a.bindingName}", exportName: "${a.exportName}"${r} },`}).join(`
+`);return{build:`
+            const containers = createContainerContext(env, LUNORA_CONTAINERS, ${t?JSON.stringify(t):"undefined"}, this.getCurrentTraceparent());
+`,contextField:`
+                containers,`,importLines:['import type { ContainerBindingSpec } from "@lunora/container";','import { createContainerContext } from "@lunora/container";'],specs:`
+/** Wiring specs for \`ctx.containers\` (codegen-derived from \`lunora/containers.ts\`). */
+const LUNORA_CONTAINERS: ReadonlyArray<ContainerBindingSpec> = [
+${n}
+];
+`}},sr=e=>{if(e.length===0)return"";const t=e.map(a=>(m(a.exportName,`workflow export "${a.exportName}"`),m(a.className,`workflow class "${a.className}"`),`/** WorkflowEntrypoint for the \`${a.exportName}\` definition (binding \`${a.bindingName}\`). */
+export class ${a.className} extends LunoraWorkflow<WorkflowParamsOf<typeof ${a.exportName}>, WorkflowOutputOf<typeof ${a.exportName}>> {
+    public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
+        super(ctx, env, ${a.exportName}, "${a.exportName}");
+    }
+}
+`)).join(`
+`),n=e.map(a=>a.exportName).join(", ");return`${k}/**
+ * WorkflowEntrypoint classes for the workflows declared in
+ * \`lunora/workflows.ts\`. Re-export them from your worker entry — wrangler
+ * requires each \`workflows[].class_name\` to be exported by the worker:
+ *
+ * \`export * from "./lunora/_generated/workflows.js";\`
+ */
+import LunoraWorkflow from "@lunora/workflow/do";
+
+import { ${n} } from "../workflows.js";
+
+/** Params type carried by a \`defineWorkflow\` definition (its phantom \`__params\`), so each entrypoint keeps the authored \`ctx.params\` type. */
+type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params }
+    ? unknown extends Params
+        ? Record<string, unknown>
+        : NonNullable<Params>
+    : Record<string, unknown>;
+
+/** Output type carried by a \`defineWorkflow\` definition (its phantom \`__output\`), so each entrypoint keeps the authored return type. */
+type WorkflowOutputOf<Definition> = Definition extends { __output?: infer Output } ? Output : unknown;
+
+${t}`},lr=e=>{if(e.length===0)return"";const t=e.filter(r=>r.voice).length>0,n=e.map(r=>{m(r.exportName,`agent export "${r.exportName}"`),m(r.className,`agent class "${r.className}"`);const o=`/** WorkflowEntrypoint for the \`${r.exportName}\` agent (binding \`${r.bindingName}\`). */
+export class ${r.className} extends LunoraWorkflow<AgentRunInput, AgentRunResult> {
+    public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
+        super(ctx, env, compileAgentWorkflow(${r.exportName}, "${r.exportName}"), "${r.exportName}");
+    }
+}
+`;if(!r.voice)return o;const s=r.voiceClassName??"",i=r.voiceBindingName??"";m(s,`agent voice class "${s}"`);const l=`
+/** Voice-session Durable Object for the \`${r.exportName}\` agent (binding \`${i}\`). */
+export class ${s} extends VoiceSessionDO {
+    public constructor(ctx: ConstructorParameters<typeof VoiceSessionDO>[0], env: Record<string, unknown>) {
+        super(ctx, env, ${r.exportName}, "${r.exportName}");
+    }
+}
+`;return`${o}${l}`}).join(`
+`),a=e.map(r=>r.exportName).join(", ");return`${k}/**
+ * WorkflowEntrypoint classes for the agents declared in \`lunora/agents.ts\`.
+ * Each \`defineAgent\` compiles a replay-safe tool-loop onto a Cloudflare
+ * Workflow. Re-export them from your worker entry — wrangler requires each
+ * \`workflows[].class_name\` to be exported by the worker:
+ *
+ * \`export * from "./lunora/_generated/agents.js";\`${t?"\n *\n * Voice-enabled agents ALSO get a `VoiceSessionDO` subclass here — a real\n * Durable Object (unlike the Workflow), so wrangler needs both its\n * `durable_objects` binding and its `class_name` export (the same re-export\n * line covers it).":""}
+ */
+import LunoraWorkflow from "@lunora/workflow/do";
+${t?'import { compileAgentWorkflow, VoiceSessionDO } from "@lunora/agent";':'import { compileAgentWorkflow } from "@lunora/agent";'}
+import type { AgentRunInput, AgentRunResult } from "@lunora/agent";
+
+import { ${a} } from "../agents.js";
+
+${n}`},dr=e=>{const t=e.filter(r=>r.mode==="push");if(t.length===0)return"";for(const r of t)m(r.exportName,`queue export "${r.exportName}"`);const n=t.map(r=>r.exportName).join(", "),a=t.map(r=>`    ${JSON.stringify(r.name)}: { definition: ${r.exportName}, exportName: ${JSON.stringify(r.exportName)} },`).join(`
+`);return`${k}/**
+ * Push-consumer registry for the queues declared in \`lunora/queues.ts\`. The
+ * composed worker's \`queue(batch, env, ctx)\` entry routes each delivered batch
+ * by \`batch.queue\` to the matching \`defineQueue\` handler. Wired automatically
+ * by \`defineApp\` — you don't import this directly.
+ */
+import type { QueueRegistry } from "@lunora/queue";
+
+import { ${n} } from "../queues.js";
+
+/** Stable wrangler queue name → { definition, exportName } for batch routing. */
+export const LUNORA_QUEUE_REGISTRY: QueueRegistry = {
+${a}
+};
+`},Mn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
+`);return{build:`
+            const workflows = createWorkflowContext(env, LUNORA_WORKFLOWS);
+`,contextField:`
+                workflows,`,importLines:['import type { WorkflowBindingSpec } from "@lunora/workflow";','import { createWorkflowContext } from "@lunora/workflow";'],specs:`
+/** Wiring specs for \`ctx.workflows\` (codegen-derived from \`lunora/workflows.ts\`). */
+const LUNORA_WORKFLOWS: ReadonlyArray<WorkflowBindingSpec> = [
+${t}
+];
+`}},qn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
+`);return{build:`
+            const queues = createQueueContext(env, LUNORA_QUEUES);
+`,contextField:`
+                queues,`,importLines:['import type { QueueBindingSpec } from "@lunora/queue";','import { createQueueContext } from "@lunora/queue";'],specs:`
+/** Wiring specs for \`ctx.queues\` (codegen-derived from \`lunora/queues.ts\`). */
+const LUNORA_QUEUES: ReadonlyArray<QueueBindingSpec> = [
+${t}
+];
+`}},Bn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
+`);return{build:`
+            const agents = createAgentContext(env, LUNORA_AGENTS);
+`,contextField:`
+                agents,`,importLines:['import { createAgentContext } from "@lunora/agent";','import type { AgentBindingSpec } from "@lunora/agent";'],specs:`
+/** Wiring specs for \`ctx.agents\` (codegen-derived from \`lunora/agents.ts\`). */
+const LUNORA_AGENTS: ReadonlyArray<AgentBindingSpec> = [
+${t}
+];
+`}},jn=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
+/** Read-only declared-workflow metadata (discovered from \`lunora/workflows.ts\`) served via \`__lunora_admin__:listWorkflows\` for the studio's workflows view. */
+const LUNORA_WORKFLOWS_INFO: WorkflowsResult = ${JSON.stringify(t,void 0,4)};
+`,override:`
+        protected override workflowsMetadata(): WorkflowsResult {
+            return LUNORA_WORKFLOWS_INFO;
+        }
+`}},Wn=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
+/** Read-only declared-queue metadata (discovered from \`lunora/queues.ts\`) served via \`__lunora_admin__:listQueues\` for the studio's queues view. */
+const LUNORA_QUEUES_INFO: QueuesResult = ${JSON.stringify(t,void 0,4)};
+`,override:`
+        protected override queuesMetadata(): QueuesResult {
+            return LUNORA_QUEUES_INFO;
+        }
+`}},Un=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
+            const payments: LunoraPayment = config.payment
+                ? paymentsFromContext({ auth: { userId: userId ?? null }, db: db as unknown as LunoraPaymentDbLike }, config.payment(env))
+                : paymentStub;
+`,configField:`
+    payment?: (env: Record<string, unknown>) => PaymentsFromContextOptions;`,contextField:`
+                payments,`,stub:`
+const paymentStub: LunoraPayment = {
+    attach: () => {
+        ${t}
+    },
+    cancelSubscription: () => {
+        ${t}
+    },
+    check: () => {
+        ${t}
+    },
+    createCheckout: () => {
+        ${t}
+    },
+    createPortalSession: () => {
+        ${t}
+    },
+    handleWebhook: () => {
+        ${t}
+    },
+    listBalances: () => {
+        ${t}
+    },
+    listSubscriptions: () => {
+        ${t}
+    },
+    track: () => {
+        ${t}
+    },
+} as unknown as LunoraPayment;
+`}},Kn=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
+            const x402: X402Pay = config.x402
+                ? lazyX402Pay(config.x402(env), { getSecret: (name: string) => secrets.get(name) })
+                : x402Stub;
+`,configField:`
+    x402?: (env: Record<string, unknown>) => X402PayConfig;`,contextField:`
+                x402,`,stub:`
+const x402Stub: X402Pay = {
+    fetch: () => {
+        throw new Error("ctx.x402: no pay rail configured. Pass \\\`x402\\\` to createShardDO().");
+    },
+} as unknown as X402Pay;
+`}:{build:"",configField:"",contextField:"",imports:[],stub:""},Qn=(e,t,n,a)=>["AdvisoryFinding","DatabaseWriterLike","DataMigrationLike",...a?["FlagsResult"]:[],"LogSink","MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],cr=({advisories:e=[],agents:t=[],containers:n=[],env:a,flagKeys:r=[],hasAccessFacade:o=!1,hasAi:s=!1,hasAnalytics:i=!1,hasBrowser:l=!1,hasFlags:u=!1,hasHyperdrive:p=!1,hasImages:b=!1,hasKv:w=!1,hasNotify:v=!1,hasPayments:d=!1,hasPipelines:c=!1,hasR2sql:g=!1,hasX402:f=!1,maskMetadata:T,mutators:x=[],queues:A=[],rlsMetadata:_,schema:y,shapes:Y=[],storageRules:Z,studioFeatures:ee,useUmbrella:I=!1,workflows:j=[]})=>{const S=V(I),W=x.length>0,L=Y.length>0,{build:te,configField:H,contextField:C,stub:P}=Sn(s),U=An(o),E=Rn(w),K=Nn(u,S.flags),ne=Ln(r,u,S.flags),re=On(v),ae=Tn(a),Q=Cn(i),M=Dn(b),q=_n(p),B=In(l),F=Pn(g),z=En(c),{build:ye,contextField:ge,importLines:me,specs:oe}=qn(A),{build:we,contextField:xe,importLines:fe,specs:ie}=Fn(n,y.jurisdiction),{build:ke,contextField:ve,importLines:be,specs:$e}=Mn(j),{build:Se,contextField:se,importLines:le,specs:Re}=Bn(t),{build:Ne,configField:Oe,contextField:de,imports:ce,stub:h}=Un(d),{build:Te,configField:et,imports:tt,stub:nt}=Kn(f),rt=e,at=_??{policies:[],roles:[]},ot=T??{columns:[]},it=Z??{rules:[]},st=ee??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:lt,override:dt}=jn(j),{constant:ct,override:ut}=Wn(A),G=y.vectorIndexes.length>0,ue=y.tables.some(R=>R.shardMode==="global"),Ae=y.tables.some(R=>R.shardMode==="global"&&R.globalBackend==="hyperdrive"),Ee=y.tables.some(R=>R.shardMode==="global"&&R.globalBackend!=="hyperdrive"),J=y.tables.some(R=>R.externalSource!==void 0);if(Ee&&Ae)throw new X("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Le=y.tables.length>0,pt=yn(y),ht=xn(y),gt=vn(y),mt=wn(y),Fe=kn(y),Me=Qn(G,j.length>0,A.length>0,u);L&&Me.push("WhereInput");const qe=$n(ue),ft=L?`
+        protected override resolveShape(name: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string } | undefined {
+            const shape = LUNORA_SHAPES[name];
+
+            if (!shape) {
+                return undefined;
+            }
+
+            this.ensureMigrated();
+
+            // Trusted ctx from the socket's OWN verified identity — the client
+            // supplies only the shape name + args; \`compileWhere\` validates the
+            // args then runs the shape's \`where(ctx, args)\` under that identity,
+            // so which rows replicate is a server decision (reads-as-permissions).
+            const ctx = this.buildCtx({ functionPath: \`__shape__:\${name}\`, identity });
+            // \`ownerField\` resolves an \`owner: true\` shape: only here is the table's
+            // \`.ownedBy(field)\` column in scope, so the DO hands it to the shape
+            // rather than every shape restating the ownership check in its \`where\`.
+            const shapeWhere = shape.compileWhere(ctx, args, {
+                ownerField: (schema as unknown as { tables: Record<string, { ownerField?: string }> }).tables[shape.table]?.ownerField,
+            }) as unknown as WhereInput;
+
+            // AND-compose with the table's RLS read base-where. A shape runs no
+            // procedure, so the \`.use(rls(...))\` middleware never fires; without
+            // this merge its reads would bypass every read policy on the table
+            // (rows the caller can't see would replicate). \`composeShapeReadWhere\`
+            // evaluates the table's read policies under this same trusted ctx —
+            // exactly the request-time path — and fails closed under a
+            // \`.rls("required")\` schema for a non-\`.public()\`, policy-less table.
+            const effectiveWhere = composeShapeReadWhere(LUNORA_RLS_READ_REGISTRY, {
+                ctx,
+                identity: identity?.identity ?? null,
+                rlsRequired: (schema as unknown as { rlsMode?: string }).rlsMode === "required",
+                roles: (ctx as { auth?: { roles?: readonly string[] } }).auth?.roles ?? [],
+                shapeWhere,
+                table: shape.table,
+                tablePublic: (schema as unknown as { tables: Record<string, { isPublic?: boolean }> }).tables[shape.table]?.isPublic === true,
+                userId: identity?.userId ?? null,
+            });
+
+            // A live shape pokes only from its OWN shard's op-log, so a \`where()\`
+            // that joins to a \`.shardBy()\` table (rows in another DO) is rejected
+            // here — the first point the compiled predicate + shard modes are both
+            // known. Remedy: denormalize, or move the joined table to \`.global()\`.
+            assertShapeShardable(effectiveWhere, schema as unknown as SchemaLike, shape.table);
+
+            // A \`.global()\` table lives in D1 (no per-DO op-log): flag it so the
+            // base serves it through the latency-tiered poll path (\`readGlobalShapeRows\`)
+            // instead of the CDC poke path.
+            const isGlobal = (schema as unknown as SchemaLike).tables[shape.table]?.shardMode?.kind === "global";
+
+            return { columns: shape.columns, effectiveWhere, global: isGlobal, table: shape.table };
+        }
+`:"",bt=W?`
+        protected override isCustomMutator(functionPath: string): boolean {
+            return LUNORA_MUTATOR_PATHS.has(functionPath);
+        }
+`:"",yt=L?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",wt=L?"assertShapeShardable, ":"",pe=[`import type { ${Me.join(", ")} } from "${S.do}";`,`import { applyCdcChanges, ${wt}createShardCtxDb, ${J?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}runDataMigration, runShardMigrations, ${qe.importFragment}ShardDO as ShardDOBase } from "${S.do}";`,...J?[`import type { ExternalSourceLike, SourceClientLike } from "${S.do}";`]:[],L?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${S.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${S.server}";`];Le&&pe.push(`import { bindOrm, bindTableFacade } from "${S.server}";`),G&&pe.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),s&&pe.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),pe.push(...U.importLines,...E.importLines,...K.importLines,...re.importLines,...ae.importLines,...Q.importLines,...M.importLines,...q.importLines,...B.importLines,...F.importLines,...z.importLines,...fe,...be,...me,...le,...ce,...tt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...W?["LUNORA_MUTATOR_PATHS"]:[],...L?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const xt=G?`
+    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",kt=Ee?`
+    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",vt=Ae?`
+    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",$t=J?`
+    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",St=ue?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",Rt=G?`
+const vectorsStub: VectorSearchLike = {
+    deleteByIds: async () => {
+        throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
+    },
+    getByIds: async () => {
+        throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
+    },
+    query: async () => {
+        throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
+    },
+    upsert: async () => {
+        throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
+    },
+    upsertNow: async () => {
+        throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
+    },
+};
+`:"",Nt=G?`
+            let vectors: VectorSearchLike;
+            let onWrite: WriteHook | undefined;
+
+            if (config.vectors) {
+                const lunora = createVectors({ indexes: config.vectors(env) });
+
+                vectors = createContextVectors(lunora);
+                onWrite = createVectorSyncHook({ schema: schema as unknown as VectorSchemaLike, vectors });
+            } else {
+                vectors = vectorsStub;
+                onWrite = undefined;
+            }
+`:"",Be=ue?`
+                globalDb,`:"",je=`
+                auth: { identity: identity ?? null, userId: userId ?? null },`,Ot=G?`{${je}
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                enforceRls: true,
+                onIndexUse: this.getCtxDbIndexUseHook(),
+                onRead: options.onRead ?? this.getCtxDbReadHook(),
+                onWrite,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+                storage,${Be}
+            }`:`{${je}
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                enforceRls: true,
+                onIndexUse: this.getCtxDbIndexUseHook(),
+                onRead: options.onRead ?? this.getCtxDbReadHook(),
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+                storage,${Be}
+            }`,Tt=G?`
+                vectors,`:"",At=Le?`
+                orm: bindOrm(facade),`:"",Lt="",We=Ae?"config.hyperdriveGlobal":"config.d1",Ct=ue?`            const globalDb: DatabaseWriterLike = ${We}?.(env, { identity, userId }) ?? globalDbStub;
+`:"",Dt=L&&ue?`
+        protected override async readGlobalShapeRows(resolved: { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string }, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<Array<{ doc: Record<string, unknown>; id: string }>> {
+            const env = this.env as Record<string, unknown>;
+            const globalDb: DatabaseWriterLike = ${We}?.(env, identity) ?? globalDbStub;
+            const rows: Array<{ doc: Record<string, unknown>; id: string }> = [];
+
+            let cursor: null | string = null;
+
+            // Drain every page of the global membership so the seed/diff sees the
+            // full rowset (D1 \`findMany\` is paginated). Stop one row past the cap:
+            // a broad \`.global()\` shape would otherwise materialize an unbounded
+            // array before the caller's \`withinGlobalShapeBound\` check rejects it,
+            // so bail early and let the caller fail it closed.
+            do {
+                // eslint-disable-next-line no-await-in-loop -- sequential page drain to assemble the full membership
+                const page = await globalDb.findMany(resolved.table, { cursor, where: resolved.effectiveWhere });
+
+                for (const doc of page.page) {
+                    rows.push({ doc, id: String((doc as { _id?: unknown })._id) });
+
+                    if (rows.length > ShardDOBase.GLOBAL_SHAPE_MAX_ROWS) {
+                        return rows;
+                    }
+                }
+
+                cursor = page.isDone ? null : page.continueCursor;
+            } while (cursor !== null);
+
+            return rows;
+        }
+`:"",_t=J?`
+const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
+const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
+`:"",It=J?`
+        protected override async pollExternalSources(): Promise<number | undefined> {
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const sourced = Object.entries((schema as unknown as SchemaLike).tables)
+                .map(([table, definition]) => [table, (definition as { externalSource?: ExternalSourceLike }).externalSource] as const)
+                .filter((entry): entry is [string, ExternalSourceLike] => entry[1] !== undefined);
+
+            if (sourced.length === 0) {
+                return undefined;
+            }
+
+            const shardKey = this.currentShardKey();
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            let clients = sourceClientCache.get(this);
+
+            if (clients === undefined) {
+                clients = new Map();
+                sourceClientCache.set(this, clients);
+            }
+
+            let polledAt = sourcePollAtCache.get(this);
+
+            if (polledAt === undefined) {
+                polledAt = new Map();
+                sourcePollAtCache.set(this, polledAt);
+            }
+
+            const now = Date.now();
+            // \`nextDueAt\` tracks the EARLIEST next-due timestamp across every
+            // non-manual source; the shared alarm re-arms there instead of the
+            // fixed 2 s global-shape floor, so a large \`refresh.everyMs\` actually
+            // sleeps until it's due. Stays \`undefined\` when every source is
+            // \`refresh: "manual"\`, so the shared alarm goes idle for this tier.
+            let nextDueAt: number | undefined;
+
+            for (const [table, source] of sourced) {
+                if (source.refresh === "manual") {
+                    continue;
+                }
+
+                if (isSourceDue(source.refresh, polledAt.get(table), now)) {
+                    try {
+                        let client = clients.get(source.binding);
+
+                        if (client === undefined) {
+                            client = config.sourceClient?.(env, source.binding);
+
+                            if (client !== undefined) {
+                                clients.set(source.binding, client);
+                            }
+                        }
+
+                        if (client === undefined) {
+                            // No SqlClient resolved for this binding (host never wired
+                            // \`config.sourceClient\`, or wired it wrong). Surface it in the
+                            // Logs panel and stamp \`polledAt\` so a persistent misconfig backs
+                            // off to \`refresh.everyMs\` instead of retrying every alarm tick.
+                            this.recordExternalSourceError(table, new Error(\`external-source: no sourceClient resolved for binding "\${source.binding}"\`));
+                        } else if (source.mode === "incremental") {
+                            // Incremental (plan 136): pull only rows past the durable
+                            // watermark (or a full-pull seed/reconcile), upsert-only.
+                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; sequential keeps the writer transaction simple
+                            await pullExternalSourceIncrementalTick(this.sql as SqlExec, writer, client, table, source, shardKey, now);
+                        } else {
+                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
+                            await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
+                        }
+
+                        // Timestamp AFTER the poll finishes, not the batch-start \`now\` — a
+                        // poll that outruns \`everyMs\` must not make \`nextDueAt\` (below)
+                        // stale-immediate and re-arm the alarm in a hammering loop.
+                        polledAt.set(table, Date.now());
+                    } catch (error) {
+                        this.recordExternalSourceError(table, error);
+                        // Stamp on failure too, so a persistently failing source throttles
+                        // to \`refresh.everyMs\` rather than being hammered every tick.
+                        polledAt.set(table, Date.now());
+                    }
+                }
+
+                // This source's own next-due time, read AFTER the poll-or-skip above
+                // so a just-polled source reports \`now + everyMs\` (its FRESH due
+                // time), not the stale pre-poll one. An omitted \`refresh\` (poll
+                // every tick) is due again immediately.
+                const sourceNextDueAt = source.refresh === undefined ? now : (polledAt.get(table) ?? now) + source.refresh.everyMs;
+
+                nextDueAt = nextDueAt === undefined ? sourceNextDueAt : Math.min(nextDueAt, sourceNextDueAt);
+            }
+
+            return nextDueAt;
+        }
+`:"",Ue=Fe.length>0,Pt=J||Ue?`
+        public constructor(state: ShardDOState, env: unknown) {
+            super(state, env);
+${J?`
+            const autoSourced = Object.values((schema as unknown as SchemaLike).tables).some((definition) => {
+                const source = (definition as { externalSource?: ExternalSourceLike }).externalSource;
+
+                return source !== undefined && source.refresh !== "manual";
+            });
+
+            if (autoSourced) {
+                void this.scheduleSourcePoll();
+            }
+`:""}${Ue?`
+            if (LUNORA_TTL_SWEEPS.length > 0) {
+                void this.scheduleTtlSweep();
+            }
+`:""}        }
+`:"",Et=Le?`
+            const facade = db as unknown as Record<string, ReturnType<typeof bindTableFacade>>;
+${y.tables.map(R=>`            facade[${JSON.stringify(R.name)}] = bindTableFacade(db, ${JSON.stringify(R.name)});`).join(`
+`)}
+`:"",Ft=`${U.build}${E.build}${K.build}${Q.build}${ae.build}
+            const secrets = createSecrets(env);
+`,Mt=`${U.contextField}${E.contextField}${K.contextField}${re.contextField}${Q.contextField}${ae.contextField}
+                secrets,`,qt=re.build,Ke=b||p||l||g||c||f,Bt=Ke?`
+            // ActionCtx-only helpers (external, non-deterministic I/O): constructed
+            // and attached only for an \`action\` so query/mutation ctx never carry them.
+            if (isAction) {
+${M.build}${q.build}${B.build}${F.build}${z.build}${Te}${[...b?["                ctx.images = images;"]:[],...p?["                ctx.sql = sql;"]:[],...l?["                ctx.browser = browser;"]:[],...g?["                ctx.r2sql = r2sql;"]:[],...c?["                ctx.pipelines = pipelines;"]:[],...f?["                ctx.x402 = x402;"]:[]].join(`
+`)}
+            }
+`:"",jt=Ke?`            const isAction = LUNORA_FUNCTIONS[options.functionPath ?? ""]?.kind === "action";
+`:"";return`${k}${pe.join(`
+`)}
+
+type FunctionKind = "action" | "mutation" | "query";
+
+interface FunctionReference {
+    __lunoraRef: string;
+}
+
+/** Foreign-key columns per table (\`v.id("target")\` fields) for the data browser. */
+const LUNORA_TABLE_REFS: Record<string, Record<string, string>> = ${JSON.stringify(pt,void 0,4)};
+
+/** Declared indexes per table (secondary, search, geo, rank, vector) for the schema viewer. */
+const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(ht,void 0,4)};
+
+/** Columns per table (typed, with PK/FK markers) for the studio's schema diagram, served via \`__lunora_admin__:describeTable\`. */
+const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(gt,void 0,4)};
+
+/** Storage-key columns per table (\`v.storage(...)\` fields) for the file browser's records↔files join. */
+const LUNORA_STORAGE_COLUMNS: Record<string, string[]> = ${JSON.stringify(mt,void 0,4)};
+
+/** Declarative TTL policies (\`.ttl(field, { after? })\`) the DO alarm sweep auto-expires rows for. */
+const LUNORA_TTL_SWEEPS: Array<{ after?: number; field: string; softDeleteField?: string; table: string }> = ${JSON.stringify(Fe,void 0,4)};
+
+/** Static schema advisories (computed by @lunora/advisor at codegen time) served via \`__lunora_admin__:getAdvisories\`. */
+const LUNORA_ADVISORIES: AdvisoryFinding[] = ${JSON.stringify(rt,void 0,4)};
+
+/** Read-only RLS metadata (policies + roles discovered from \`.use(rls(...))\` chains) served via \`__lunora_admin__:rlsPolicies\` for the studio's RLS inspector. */
+const LUNORA_RLS_METADATA: RlsPoliciesResult = ${JSON.stringify(at,void 0,4)};
+
+/** Read-only masking metadata (table + column + strategy discovered from \`.use(mask(...))\` chains) served via \`__lunora_admin__:maskPolicies\` for the studio's data-browser mask preview. */
+const LUNORA_MASK_METADATA: MaskPoliciesResult = ${JSON.stringify(ot,void 0,4)};
+
+/** Read-only storage access-rule metadata (discovered from \`.use(storageRules(...))\` chains) served via \`__lunora_admin__:storageRules\` for the studio's access-rules view. */
+const LUNORA_STORAGE_RULES: StorageRulesResult = ${JSON.stringify(it,void 0,4)};
+
+/** Which optional package-backed features this app wires up (discovered from imports / \`ctx.*\` reads / schema signals) served via \`__lunora_admin__:studioFeatures\` so the studio hides nav pages whose package isn't enabled. */
+const LUNORA_STUDIO_FEATURES: StudioFeaturesResult = ${JSON.stringify(st,void 0,4)};
+${ne.constant}${yt}${lt}${ct}${ie}${$e}${oe}${Re}
+export interface ShardDOConfig {
+    /** Opt into change-data-capture: records a post-image to \`__cdc_log\` on every write (backs streaming export + replay-PITR). */
+    cdc?: boolean;
+    /** Optional telemetry sink. When supplied, each \`ctx.log.*\` call is forwarded to \`sink.onLog\`. Pass the SAME sink you give \`createWorker({ observability })\` (which drives \`onRpc\`) to route both RPC and log events. */
+    observability?: (env: Record<string, unknown>) => LogSink | undefined;
+    scheduler?: (env: Record<string, unknown>) => unknown;
+    storage?: (env: Record<string, unknown>) => unknown;${xt}${H}${E.configField}${K.configField}${Q.configField}${M.configField}${q.configField}${B.configField}${F.configField}${z.configField}${Oe}${et}${kt}${vt}${$t}
+}
+
+const schedulerStub = {
+    cancel: async () => {
+        throw new Error("ctx.scheduler: no scheduler configured. Pass \`scheduler\` to createShardDO().");
+    },
+    runAfter: async () => {
+        throw new Error("ctx.scheduler: no scheduler configured. Pass \`scheduler\` to createShardDO().");
+    },
+    runAt: async () => {
+        throw new Error("ctx.scheduler: no scheduler configured. Pass \`scheduler\` to createShardDO().");
+    },
+};
+
+const storageStub = {
+    delete: async () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+    download: async () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+    getMetadata: async () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+    getSignedUrl: async () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+    getUrl: () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+    list: async () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+    upload: async () => {
+        throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
+    },
+};
+${St}${_t}${Rt}${P}${E.stub}${K.stub}${Q.stub}${M.stub}${q.stub}${B.stub}${F.stub}${z.stub}${h}${nt}${Lt}
+// Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
+// referencing call fails loudly with a clear error instead of overflowing the
+// stack. Tracked across the awaited handler chain (one DO invocation is
+// single-threaded), so the counter reflects true nesting depth.
+const MAX_RUN_DEPTH = 32;
+let runDepth = 0;
+
+const dispatchRun = async (expected: FunctionKind, functionPath: string, args: Record<string, unknown>, ctx: unknown): Promise<unknown> => {
+    const registered = LUNORA_FUNCTIONS[functionPath];
+
+    if (!registered) {
+        throw new Error(\`unknown function: \${functionPath}\`);
+    }
+
+    if (registered.kind !== expected) {
+        throw new Error(\`ctx.run\${expected[0]!.toUpperCase()}\${expected.slice(1)}: "\${functionPath}" is registered as a \${registered.kind}, not a \${expected}\`);
+    }
+
+    if (runDepth >= MAX_RUN_DEPTH) {
+        throw new LunoraError("RUN_DEPTH_EXCEEDED", \`ctx.run*: composition depth limit (\${MAX_RUN_DEPTH}) exceeded — likely a cyclic runQuery/runMutation\`);
+    }
+
+    runDepth += 1;
+
+    try {
+        return await registered.handler(ctx, args);
+    } finally {
+        runDepth -= 1;
+    }
+};
+
+/**
+ * Build the project's shard Durable Object. Export the result as \`ShardDO\`
+ * from the worker entry so wrangler binds it by name.
+ */
+export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOState, env: unknown) => ShardDOBase =>
+    class extends ShardDOBase {${Pt}
+        private migrated = false;
+
+        public override async handleRpc(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
+            const registered = LUNORA_FUNCTIONS[functionPath];
+
+            // Internal functions are reachable server-side only: via \`ctx.run*\`
+            // composition, or a trusted system dispatch (scheduler/cron, marked by
+            // \`isSystemDispatch()\`). A client RPC never carries that flag, so its
+            // internals stay not-found and never leak across the external boundary.
+            if (!registered || (registered.visibility === "internal" && !this.isSystemDispatch())) {
+                throw new LunoraError("FUNCTION_NOT_FOUND", \`function not registered: \${functionPath}\`);
+            }
+
+            this.ensureMigrated();
+
+            const ctx = this.buildCtx({ functionPath });
+
+            // A mutation's writes must commit all-or-nothing: wrap its dispatch in
+            // the DO's BEGIN/COMMIT span so any throw (a validator, an RLS denial,
+            // an OCC conflict, a failed row mid-\`insertMany\`/\`patchMany\`) rolls
+            // back every write the mutation made. Queries are read-only and actions
+            // do external I/O that can't be rolled back, so both dispatch directly.
+            // \`ctx.run*\` composition runs inside this span (it never re-enters
+            // handleRpc); runInTransaction's own guard rejects accidental nesting.
+            //
+            // The replay bookkeeping (idempotency dedup row + custom-mutator
+            // watermark advance) commits INSIDE this span via
+            // \`commitMutationBookkeeping\`, so the writes, the dedup row, and the
+            // watermark are atomic — a crash can't leave the writes durable without
+            // the replay guard.
+            if (registered.kind === "mutation") {
+                return this.runInTransaction(async () => {
+                    const result = await registered.handler(ctx, args);
+
+                    this.commitMutationBookkeeping(result);
+
+                    return result;
+                });
+            }
+
+            return registered.handler(ctx, args);
+        }
+${qe.override}
+        protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<{ result: unknown; tables: Set<string> } | null> {
+            const registered = LUNORA_FUNCTIONS[functionPath];
+
+            if (!registered || registered.kind !== "query" || registered.visibility === "internal") {
+                return null;
+            }
+
+            this.ensureMigrated();
+
+            const tables = new Set<string>();
+            // Identity is threaded EXPLICITLY from the (deferred/interleaved)
+            // subscription caller — never read from the shared per-request field
+            // here — so a concurrent RPC can't leak its identity into this re-run.
+            const ctx = this.buildCtx({ functionPath, identity, onRead: (table) => tables.add(table) });
+            const result = await registered.handler(ctx, args);
+
+            return { result, tables };
+        }
+
+        protected override executeStream(functionPath: string, args: Record<string, unknown>): null | { iterator: (signal: AbortSignal) => AsyncIterable<unknown> } {
+            const registered = LUNORA_FUNCTIONS[functionPath];
+
+            if (!registered || registered.kind !== "stream" || registered.visibility === "internal") {
+                return null;
+            }
+
+            this.ensureMigrated();
+
+            return {
+                iterator: (signal) => (registered.handler as (context: unknown, args: Record<string, unknown>, signal: AbortSignal) => AsyncIterable<unknown>)(this.buildCtx({ functionPath }), args, signal),
+            };
+        }
+${bt}${ft}${Dt}${It}
+        protected override lifecycleHookPaths(event: "connect" | "disconnect"): readonly string[] {
+            return LUNORA_LIFECYCLE_HOOKS[event];
+        }
+
+        protected override tableRefs(table: string): Record<string, string> | undefined {
+            return LUNORA_TABLE_REFS[table];
+        }
+
+        protected override tableIndexes(table: string): Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }> {
+            return LUNORA_TABLE_INDEXES[table] ?? [];
+        }
+
+        protected override ttlSweeps(): ReadonlyArray<{ after?: number; field: string; softDeleteField?: string; table: string }> {
+            return LUNORA_TTL_SWEEPS;
+        }
+
+        protected override tableColumns(table: string): Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }> {
+            return LUNORA_TABLE_COLUMNS[table] ?? [];
+        }
+
+        protected override storageColumns(): Record<string, string[]> {
+            return LUNORA_STORAGE_COLUMNS;
+        }
+
+        protected override rlsMetadata(): RlsPoliciesResult {
+            return LUNORA_RLS_METADATA;
+        }
+
+        protected override maskMetadata(): MaskPoliciesResult {
+            return LUNORA_MASK_METADATA;
+        }
+
+        protected override storageRulesMetadata(): StorageRulesResult {
+            return LUNORA_STORAGE_RULES;
+        }
+
+        protected override studioFeatures(): StudioFeaturesResult {
+            return LUNORA_STUDIO_FEATURES;
+        }
+${ne.evaluateOverride}${ne.subscriptionOverride}${dt}${ut}
+        protected override advisories(): AdvisoryFinding[] {
+            return LUNORA_ADVISORIES;
+        }
+
+        protected override async runShardDataMigration(args: RunShardMigrationArgs): Promise<MigrationRunResult> {
+            const migration = LUNORA_MIGRATIONS[args.id];
+
+            if (!migration) {
+                throw new LunoraError("MIGRATION_NOT_FOUND", \`data migration "\${args.id}" is not registered\`, { status: 404 });
+            }
+
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            return runDataMigration({
+                batchSize: args.batchSize,
+                direction: args.direction,
+                dryRun: args.dryRun,
+                maxBatches: args.maxBatches,
+                migration: migration as unknown as DataMigrationLike,
+                // Flush after each batch so live migrationStatus subscribers see
+                // progress mid-run (the base method records the reserved state
+                // table the raw-SQL progress write is invisible to the tracker).
+                onBatch: () => this.flushMigrationProgress(),
+                sql: this.sql as SqlExec,
+                writer,
+            });
+        }
+
+        protected override async runShardWrite(args: RunShardWriteArgs): Promise<RunShardWriteResult> {
+            const definition = (schema as unknown as SchemaLike).tables[args.table];
+
+            if (!definition) {
+                throw new LunoraError("UNKNOWN_TABLE", \`unknown table: \${args.table}\`, { status: 404 });
+            }
+
+            // \`.global()\` tables live in D1, not this DO's SQLite — editing them
+            // here would corrupt nothing but would fail confusingly, so reject up
+            // front with a clear code the studio can surface.
+            if (definition.shardMode?.kind === "global") {
+                throw new LunoraError("GLOBAL_TABLE_NOT_EDITABLE", \`table "\${args.table}" is global; edit it through D1, not the shard\`, { status: 400 });
+            }
+
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            if (args.op === "insert") {
+                const id = await writer.insert(args.table, args.doc ?? {});
+
+                return { id, op: "insert" };
+            }
+
+            if (args.op === "delete") {
+                await writer.delete(args.id ?? "");
+
+                return { id: args.id ?? null, op: "delete" };
+            }
+
+            if (args.op === "replace") {
+                await writer.replace(args.id ?? "", args.doc ?? {});
+
+                return { id: args.id ?? null, op: "replace" };
+            }
+
+            await writer.patch(args.id ?? "", args.doc ?? {});
+
+            return { id: args.id ?? null, op: "patch" };
+        }
+
+        protected override async deleteRowThroughWriter(table: string, id: string): Promise<void> {
+            const definition = (schema as unknown as SchemaLike).tables[table];
+
+            if (!definition) {
+                throw new LunoraError("UNKNOWN_TABLE", \`unknown table: \${table}\`, { status: 404 });
+            }
+
+            // \`.global()\` tables live in D1, not this DO's SQLite — the same
+            // guard \`runShardWrite\` applies to single-row edits.
+            if (definition.shardMode?.kind === "global") {
+                throw new LunoraError("GLOBAL_TABLE_NOT_EDITABLE", \`table "\${table}" is global; edit it through D1, not the shard\`, { status: 400 });
+            }
+
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            // Routes through the writer (not raw SQL) so FTS / aggregate / rank
+            // shadow tables stay in sync and \`onDelete\` cascades fire — the
+            // bounded loop lives in the base \`runShardBulkDelete\`.
+            await writer.delete(id);
+        }
+
+        protected override async runShardRankBefore(args: RunShardRankBeforeArgs): Promise<{ before: number; total: number }> {
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            // \`rankBefore\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
+            // but the shard writer from \`createShardCtxDb\` always defines it.
+            if (!writer.rankBefore) {
+                throw new LunoraError("NOT_IMPLEMENTED", "rankBefore is unavailable on the shard writer", { status: 500 });
+            }
+
+            return writer.rankBefore(args.table, args.index, {
+                partitionKey: args.partitionKey,
+                rowId: args.rowId,
+                sortValues: args.sortValues,
+            });
+        }
+
+        protected override async runShardRankPage(args: RunShardRankPageArgs): Promise<ShardRankPageResult> {
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            // \`rankPageRows\` is optional on \`DatabaseWriterLike\` (the D1 twin omits it),
+            // but the shard writer from \`createShardCtxDb\` always defines it. The sort
+            // directions live in the schema's rankIndex, so the shard reads them itself;
+            // \`args.directions\` is only the coordinator's comparator hint and isn't forwarded.
+            if (!writer.rankPageRows) {
+                throw new LunoraError("NOT_IMPLEMENTED", "rankPage is unavailable on the shard writer", { status: 500 });
+            }
+
+            return writer.rankPageRows(args.table, args.index, {
+                after: args.after,
+                cursor: args.cursor,
+                partitionKey: args.partitionKey,
+                take: args.take,
+            });
+        }
+
+        protected override async runShardApplyCdc(args: RunShardApplyCdcArgs): Promise<{ applied: number }> {
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            await applyCdcChanges(writer, args.changes);
+
+            return { applied: args.changes.length };
+        }
+
+        protected override ensureMigrated(): void {
+            if (this.migrated) {
+                return;
+            }
+
+            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false });
+            this.migrated = true;
+        }
+
+        private buildCtx(options: { functionPath?: string; identity?: { identity?: Record<string, unknown>; userId?: string }; onRead?: (table: string) => void } = {}): unknown {
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            // When the caller threads an explicit identity (subscription seed /
+            // refresh — both run in deferred/interleaved contexts), use it by
+            // value and NEVER read the shared per-request identity field, which a
+            // concurrent RPC may have re-set. Otherwise (the synchronous RPC
+            // dispatch path) fall back to the per-request fields as before.
+            const userId = options.identity ? options.identity.userId : this.getCurrentUserId();
+            const identity = options.identity ? options.identity.identity : this.getCurrentIdentity();
+${Nt}${te}${Ft}${we}${ke}${ye}${Se}
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            // Build the storage adapter once and share it between \`ctx.storage\`
+            // and \`ctx.db.system._storage\` so both read the same R2 binding. The
+            // \`storageStub\` fallback satisfies SystemReaderStorageLike structurally
+            // (its \`list\`/\`getMetadata\` throw the "no storage configured" error).
+            const storage = asBucketStorage(config.storage?.(env) ?? storageStub) as unknown as SystemReaderStorageLike;
+            // \`ctx.log\`: the DO base builds the attributed logger (structured
+            // fields + \`.with(...)\` child + trace correlation) and routes each call
+            // to the optional \`observability\` sink. It also buffers the line (studio
+            // Logs panel) and emits a structured console event the dev-server formats.
+            //
+            // Resolved BEFORE \`ctx.db\` below, because the database is wrapped in
+            // auto-instrumentation that needs the sink, the trace anchor, and the
+            // dispatch's wide-event handle.
+            const observability = config.observability?.(env);
+            const logFunctionPath = options.functionPath ?? "";
+            const log = this.makeLogger(logFunctionPath, observability);
+            const traceAnchor = this.resolveDispatchAnchor(Boolean(options.identity));
+
+            // \`ctx.span\`: the handle onto the DISPATCH's own span — the wide-event
+            // surface. Attributes attached here accumulate for the whole request
+            // and are folded into the one span it already emits, instead of
+            // becoming N separate log lines. Shares \`traceAnchor\` with \`ctx.trace\`
+            // so both write to the same trace.
+            const span = this.makeDispatchSpan(traceAnchor, observability);
+
+${Ct}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
+            // adds aggregate counters (call count, total time, per-operation
+            // breakdown) to the wide event rather than a span per call, so a
+            // handler making hundreds of queries stays readable. See
+            // \`instrumentDatabase\` for the \`"spans"\` / \`"off"\` levels.
+            const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${Ot}), logFunctionPath, traceAnchor, observability);
+${Et}${Ne}
+
+            // \`ctx.trace\` / \`ctx.metrics\`: spans and measurements to the same sink.
+            // The trace anchor is threaded explicitly for the same reason \`identity\`
+            // is — a deferred caller (a subscription re-run) must not inherit the
+            // writing mutation's trace from the shared per-request field.
+            const trace = this.makeTracer(logFunctionPath, observability, traceAnchor);
+            const metrics = this.makeMetrics(logFunctionPath, observability);
+${qt}
+            // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
+            // captured ONCE so the whole handler body sees a single stable value.
+            // Query/mutation handlers must be deterministic (they may be re-run on
+            // OCC retry / subscription re-eval), so they must read time through
+            // \`ctx.now\` instead of \`Date.now()\` — the \`nondeterministic_query_mutation\`
+            // advisor flags the latter. Actions may still use ambient \`Date.now()\`.
+            const now = Date.now();
+
+            const ctx: Record<string, unknown> = {
+                auth: {
+                    getIdentity: async () => identity ?? null,
+                    userId: userId ?? null,
+                },
+                db,
+                // Instrumented \`fetch\`: a CLIENT span per outbound call plus W3C
+                // \`traceparent\` propagation, so time spent in a downstream service
+                // is visible and its spans join this trace. Degrades to the bare
+                // global when no sink is configured.
+                fetch: this.makeFetch(logFunctionPath, traceAnchor, observability),
+                ip: this.getCurrentIp(),
+                log,
+                metrics,
+                now,${At}
+                scheduler,
+                span,
+                storage,
+                trace,${Tt}${C}${Mt}${de}${xe}${ve}${ge}${se}
+            };
+${jt}${Bt}
+            ctx.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, ctx);
+            ctx.runMutation = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("mutation", reference.__lunoraRef, fnArgs, ctx);
+            ctx.runQuery = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("query", reference.__lunoraRef, fnArgs, ctx);
+
+            return ctx;
+        }
+    };
+`},Pe=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:N(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?Pe(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},Gn=(e,t,n)=>{m(e,"drizzle column name");const a=Pe(t),r=t.kind==="optional"&&t.inner?t.inner:t,o=a.mode?`, { mode: "${a.mode}" }`:"";let s=`${a.builder}("${e}"${o})`;return a.typeAnnotation&&(s+=`.$type<${a.typeAnnotation}>()`),r.kind==="id"&&r.tableName&&n.has(r.tableName)&&(s+=`.references(() => ${r.tableName}._id)`),a.notNull&&(s+=".notNull()"),s},Jn=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(a=>(m(a,"drizzle index field"),`t.${a}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},Vn=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([r,o])=>`    ${r}: ${Gn(r,o,t)},`)].join(`
+`),a=e.indexes.length>0?`, (t) => ({
+${e.indexes.map(r=>Jn(r)).join(`
+`)}
+})`:"";return`export const ${e.name} = sqliteTable("${e.name}", {
+${n}
+}${a});`},Hn=e=>{const t=new Set,n=new Set;t.add("text"),t.add("integer"),t.add("sqliteTable");for(const a of e){for(const r of Object.values(a.shape)){const o=Pe(r);t.add(o.builder)}for(const r of a.indexes)n.add(r.unique?"uniqueIndex":"index")}return{columns:[...t].toSorted((a,r)=>a.localeCompare(r)),indexes:[...n].toSorted((a,r)=>a.localeCompare(r))}},Ge=(e,t=!1)=>{if(e.length===0)return`${k}export {};
+`;const n=V(t),{columns:a,indexes:r}=Hn(e),o=[...r,...a].toSorted((l,u)=>l.localeCompare(u)),s=new Set(e.map(l=>l.name)),i=e.map(l=>Vn(l,s)).join(`
+
+`);return`${k}import { ${o.join(", ")} } from "${n.serverDrizzle}";
+
+${i}
+`},ur=(e,t=!1)=>{const n=e.tables.filter(r=>r.shardMode==="global"),a=e.tables.filter(r=>r.shardMode!=="global");return{global:Ge(n,t),shard:Ge(a,t)}},pr=e=>{const t=[],n=new Map;for(const i of e){const l=n.get(i.cron);l?l.push(i):(n.set(i.cron,[i]),t.push(i.cron))}const a=t.map(i=>`    ${JSON.stringify(i)},`).join(`
+`),r=a.length>0?`
+${a}
+`:"",o=[...n.entries()].map(([i,l])=>{const u=l.map(p=>{const b=p.workflow?`workflow: ${JSON.stringify(p.workflow.binding)}`:`functionPath: ${JSON.stringify(p.functionPath)}`;return`        { name: ${JSON.stringify(p.name)}, ${b}, args: ${JSON.stringify(p.args)} },`}).join(`
+`);return`    ${JSON.stringify(i)}: [
+${u}
+    ],`}).join(`
+`),s=o.length>0?`
+${o}
+`:"";return`${k}/**
+ * One scheduled cron invocation. Exactly one target is set: \`functionPath\` is
+ * the \`namespace:fn\` dispatch ref (matches \`__lunoraRef\`), invoked on the
+ * shard; \`workflow\` is a \`WORKFLOW_*\` binding name whose durable workflow is
+ * started fresh per fire. \`args\` are forwarded verbatim (a workflow's become
+ * its \`params\`).
+ */
+export interface LunoraCronJob {
+    args: Record<string, unknown>;
+    functionPath?: string;
+    name: string;
+    workflow?: string;
+}
+
+/**
+ * Deduplicated cron schedules — mirror of wrangler's \`triggers.crons\`. The
+ * Lunora vite plugin keeps \`wrangler.jsonc\` in sync with this array.
+ */
+export const LUNORA_CRON_TRIGGERS: ReadonlyArray<string> = [${r}];
+
+/**
+ * Dispatcher map keyed by cron expression. The Worker's \`scheduled()\` handler
+ * looks up \`event.cron\` here and dispatches every job in the list.
+ */
+export const LUNORA_CRONS: Record<string, ReadonlyArray<LunoraCronJob>> = {${s}};
+`},hr=e=>{const t=[...e].toSorted((a,r)=>a.name.localeCompare(r.name)).map(a=>{const r=[`name: ${JSON.stringify(a.name)}`,`table: ${JSON.stringify(a.table)}`];return a.field!==void 0&&r.push(`field: ${JSON.stringify(a.field)}`),a.dimensions!==void 0&&r.push(`dimensions: ${JSON.stringify(a.dimensions)}`),a.metric!==void 0&&r.push(`metric: ${JSON.stringify(a.metric)}`),a.metadata!==void 0&&r.push(`metadata: ${JSON.stringify(a.metadata)}`),`    { ${r.join(", ")} },`}).join(`
+`),n=t.length>0?`
+${t}
+`:"";return`${k}/**
+ * One vector index declared in \`schema.ts\` — an inline \`.vectorize()\` column
+ * or a standalone \`defineVectorIndex()\`. \`field\` is the source column (absent
+ * for a \`select\`-derived Shape B index); \`metadata\` lists the row fields
+ * mirrored into Vectorize for filtering.
+ */
+export interface LunoraVectorIndex {
+    dimensions?: number;
+    field?: string;
+    metadata?: ReadonlyArray<string>;
+    metric?: "cosine" | "dot-product" | "euclidean";
+    name: string;
+    table: string;
+}
+
+/**
+ * Static registry of every vector index in the schema, sorted by name.
+ * Vectorize cannot enumerate indexes at runtime, so the worker passes this to
+ * \`createWorker({ vectorIntrospector })\` to back the studio's vector browser.
+ */
+export const LUNORA_VECTOR_INDEXES: ReadonlyArray<LunoraVectorIndex> = [${n}];
+`},gr=e=>{const t=new Set,n=[];for(const a of e)t.has(a.cron)||(t.add(a.cron),n.push(a.cron));return n};export{sr as D,lr as E,er as G,cr as K,ir as L,pr as X,hr as Y,gr as Z,dr as _,wn as a,nr as b,Zn as c,or as g,tr as n,rr as o,Wt as r,ar as u,k as w,ur as z};