@lunora/codegen 1.0.0-alpha.61 → 1.0.0-alpha.63

package/dist/packem_shared/{emit-Cz-5gRp0.mjs → emit-Bp0nOR_O.mjs}

@@ -1,4 +1,4 @@
-import{agentComponent as Je}from"@lunora/agent/component";import{LunoraError as X}from"@lunora/errors";import{n as $}from"./paths-BmX5O1sG.mjs";const Ve=[{contextProperty:"access",key:"access",moduleSpecifier:"@lunora/cloudflare-access"},{appMethod:{configKey:"ai",doc:"Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`).",method:"ai"},contextProperty:"ai",key:"ai",moduleSpecifier:"@lunora/ai"},{appMethod:{configKey:"analytics",doc:"Override the Analytics Engine dataset backing `ctx.analytics` (defaults to `env.ANALYTICS`).",method:"analytics"},contextProperty:"analytics",key:"analytics",moduleSpecifier:"@lunora/bindings/analytics",serverCtxField:{field:`
+import{agentComponent as Ge}from"@lunora/agent/component";import{LunoraError as X}from"@lunora/errors";import{n as v}from"./paths-BmX5O1sG.mjs";const Ve=[{contextProperty:"access",key:"access",moduleSpecifier:"@lunora/cloudflare-access"},{appMethod:{configKey:"ai",doc:"Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`).",method:"ai"},contextProperty:"ai",key:"ai",moduleSpecifier:"@lunora/ai"},{appMethod:{configKey:"analytics",doc:"Override the Analytics Engine dataset backing `ctx.analytics` (defaults to `env.ANALYTICS`).",method:"analytics"},contextProperty:"analytics",key:"analytics",moduleSpecifier:"@lunora/bindings/analytics",serverCtxField:{field:`
     /** Analytics Engine telemetry sink. Fire-and-forget and sampled; do not read it back in-handler. */
     readonly analytics: import("@lunora/bindings/analytics").AnalyticsClient;`,tier:"every"}},{appMethod:{configKey:"browser",doc:"Override the Browser Rendering binding backing `ctx.browser` (defaults to `env.BROWSER`).",method:"browser"},contextProperty:"browser",key:"browser",moduleSpecifier:"@lunora/browser",serverCtxField:{field:`
     /** Browser Rendering (screenshots/PDF/scrape). Non-deterministic — available only in actions. */
@@ -15,38 +15,38 @@ import{agentComponent as Je}from"@lunora/agent/component";import{LunoraError as
     /**
      * R2 SQL over Apache Iceberg tables (window functions, DISTINCT, set operations). Non-deterministic — available only in actions. Reads here are NOT tracked by Lunora live queries.
      */
-    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],Wt=Ve,Ut=new Map(Wt.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),Zn=Ve.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),He=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,Kt=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),ze=e=>e.column!==void 0,Qt=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
+    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],Ut=Ve,Kt=new Map(Ut.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),rr=Ve.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),He=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,Qt=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),ze=e=>e.column!==void 0,Jt=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
 `;case"boolean":return`if (typeof ${t} !== "boolean") return DEFER;
 `;case"date":case"number":case"timestamp":return`if (typeof ${t} !== "number" || !Number.isFinite(${t})) return DEFER;
 `;case"null":return`if (${t} !== null) return DEFER;
 `;default:return`if (typeof ${t} !== "string") return DEFER;
 `}},Gt=(e,t)=>{const n=e.literalValue?.trim();if(!(n===void 0||!He.test(n)))return{out:t,pre:`if (${t} !== ${n}) return DEFER;
-`}},De=(e,t,n)=>{if(!ze(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(Kt.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:Qt(e.kind,t)};switch(e.kind){case"array":return Jt(e,t,n);case"literal":return Gt(e,t);case"object":return Ht(e,t,n);default:return}}},Jt=(e,t,n)=>{const{inner:a}=e;if(!a)return;const r=n.next(),o=`__arr${String(r)}`,s=`__i${String(r)}`,i=`__e${String(r)}`,l=De(a,i,n);if(!l)return;const u=`if (!Array.isArray(${t})) return DEFER;
+`}},De=(e,t,n)=>{if(!ze(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(Qt.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:Jt(e.kind,t)};switch(e.kind){case"array":return Vt(e,t,n);case"literal":return Gt(e,t);case"object":return zt(e,t,n);default:return}}},Vt=(e,t,n)=>{const{inner:r}=e;if(!r)return;const a=n.next(),o=`__arr${String(a)}`,s=`__i${String(a)}`,i=`__e${String(a)}`,l=De(r,i,n);if(!l)return;const u=`if (!Array.isArray(${t})) return DEFER;
 const ${o} = new Array(${t}.length);
 for (let ${s} = 0; ${s} < ${t}.length; ${s}++) {
 const ${i} = ${t}[${s}];
 ${l.pre}${o}[${s}] = ${l.out};
 }
-`;return{out:o,pre:u}},Vt=(e,t,n,a)=>{const r=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||ze(t))return;const{inner:s}=t;if(!s)return;const i=De(s,n,a);if(!i)return;const l=a.next(),u=`__has${String(l)}`,p=`__val${String(l)}`,b=`let ${u} = false;
+`;return{out:o,pre:u}},Ht=(e,t,n,r)=>{const a=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||ze(t))return;const{inner:s}=t;if(!s)return;const i=De(s,n,r);if(!i)return;const l=r.next(),u=`__has${String(l)}`,p=`__val${String(l)}`,b=`let ${u} = false;
 let ${p};
 if (${n} !== undefined) {
 ${i.pre}${p} = ${i.out};
 ${u} = true;
 }
-`;return{entry:`...(${u} ? { ${r}: ${p} } : {})`,pre:b}}const o=De(t,n,a);if(o)return{entry:`${r}: ${o.out}`,pre:o.pre}},Xe=(e,t,n)=>{let a="";const r=[];for(const o of Object.keys(e)){const s=e[o];if(!s)return;const i=Vt(o,s,t(o),n);if(!i)return;a+=i.pre,r.push(i.entry)}return{entries:r.join(", "),pre:a}},Ht=(e,t,n)=>{const a=e.shape??{},r=Xe(a,l=>`${t}[${JSON.stringify(l)}]`,n);if(!r)return;const o=n.next(),s=`__obj${String(o)}`,i=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
-${r.pre}const ${s} = { ${r.entries} };
-`;return{out:s,pre:i}},zt=e=>{let t=0;const n=Xe(e,a=>`source[${JSON.stringify(a)}]`,{next:()=>(t+=1,t)});if(n)return`(source) => {
+`;return{entry:`...(${u} ? { ${a}: ${p} } : {})`,pre:b}}const o=De(t,n,r);if(o)return{entry:`${a}: ${o.out}`,pre:o.pre}},Xe=(e,t,n)=>{let r="";const a=[];for(const o of Object.keys(e)){const s=e[o];if(!s)return;const i=Ht(o,s,t(o),n);if(!i)return;r+=i.pre,a.push(i.entry)}return{entries:a.join(", "),pre:r}},zt=(e,t,n)=>{const r=e.shape??{},a=Xe(r,l=>`${t}[${JSON.stringify(l)}]`,n);if(!a)return;const o=n.next(),s=`__obj${String(o)}`,i=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
+${a.pre}const ${s} = { ${a.entries} };
+`;return{out:s,pre:i}},Xt=e=>{let t=0;const n=Xe(e,r=>`source[${JSON.stringify(r)}]`,{next:()=>(t+=1,t)});if(n)return`(source) => {
 if (typeof source !== "object" || source === null || Array.isArray(source)) return DEFER;
 ${n.pre}return { ${n.entries} };
 }`},k=`// GENERATED by @lunora/codegen — do not edit.
 // Run \`lunora codegen\` to regenerate.
 
-`,V=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},Ye=/^[A-Za-z_$][\w$]*$/u,Xt=/^[\w./-]+$/u,m=(e,t)=>{if(!Ye.test(e))throw new X("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Ce=e=>e.charAt(0).toUpperCase()+e.slice(1),O=e=>Ye.test(e)?e:JSON.stringify(e),Yt={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",from:"unknown",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},Zt=e=>{if(e===void 0)return"unknown";if(!He.test(e))throw new X("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},N=e=>{const t=Yt[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?N(e.inner):"unknown"}>`;case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return Zt(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,a])=>`${O(n)}: ${N(a)}`).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?N(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?N(e.keyType):"string",a=e.valueType?N(e.valueType):"unknown";return`Record<${n}, ${a}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>N(n)).join(" | "):"never";default:return"unknown"}},he=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,a])=>{const r=O(n);if(a.kind==="optional"){const o=a.inner?N(a.inner):"unknown";return`${r}?: ${o}`}return`${r}: ${N(a)}`}).join("; ")} }`},en=e=>e.kind==="optional"||!!e.column?.hasDefault,tn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([a,r])=>{const o=r.kind==="optional"&&r.inner?r.inner:r,s=N(o),i=O(a);return en(r)?`    ${i}?: ${s};`:`    ${i}: ${s};`}).join(`
+`,V=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},Ye=/^[A-Za-z_$][\w$]*$/u,Yt=/^[\w./-]+$/u,m=(e,t)=>{if(!Ye.test(e))throw new X("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Ce=e=>e.charAt(0).toUpperCase()+e.slice(1),A=e=>Ye.test(e)?e:JSON.stringify(e),Zt={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",from:"unknown",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},en=e=>{if(e===void 0)return"unknown";if(!He.test(e))throw new X("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},T=e=>{const t=Zt[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?T(e.inner):"unknown"}>`;case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return en(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,r])=>`${A(n)}: ${T(r)}`).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?T(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?T(e.keyType):"string",r=e.valueType?T(e.valueType):"unknown";return`Record<${n}, ${r}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>T(n)).join(" | "):"never";default:return"unknown"}},he=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,r])=>{const a=A(n);if(r.kind==="optional"){const o=r.inner?T(r.inner):"unknown";return`${a}?: ${o}`}return`${a}: ${T(r)}`}).join("; ")} }`},tn=e=>e.kind==="optional"||!!e.column?.hasDefault,nn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([r,a])=>{const o=a.kind==="optional"&&a.inner?a.inner:a,s=T(o),i=A(r);return tn(a)?`    ${i}?: ${s};`:`    ${i}: ${s};`}).join(`
 `),n=t?`
 ${t}
 `:"";return`export interface Insert_${e.name} {
     _id?: Id<"${e.name}">;
-    _creationTime?: number;${n}}`},er=(e,t=!1)=>{const n=V(t);for(const c of e.tables)m(c.name,"table name");const a=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",r=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",o=e.tables.map(c=>{const g=Object.entries(c.shape).map(([T,x])=>{const A=O(T);if(x.kind==="optional"){const _=x.inner?N(x.inner):"unknown";return`    ${A}?: ${_};`}return`    ${A}: ${N(x)};`}).join(`
+    _creationTime?: number;${n}}`},ar=(e,t=!1)=>{const n=V(t);for(const c of e.tables)m(c.name,"table name");const r=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",a=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",o=e.tables.map(c=>{const g=Object.entries(c.shape).map(([R,S])=>{const x=A(R);if(S.kind==="optional"){const _=S.inner?T(S.inner):"unknown";return`    ${x}?: ${_};`}return`    ${x}: ${T(S)};`}).join(`
 `),f=g?`
 ${g}
 `:"";return`export interface Doc_${c.name} {
@@ -58,10 +58,10 @@ ${g}
 `),l=e.tables.map(c=>{const g=c.shardMode==="global"?"":c.searchIndexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
 `),u=e.tables.map(c=>{const g=c.rankIndexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
 `),p=e.tables.map(c=>{const g=c.shardMode==="global"?"":(c.geoIndexes??[]).map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
-`),b=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",w=e.tables.map(c=>tn(c)).join(`
+`),b=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",w=e.tables.map(c=>nn(c)).join(`
 
-`),v=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
-`),d=e.tables.map(c=>{const g=c.relations.map(f=>(m(f.table,"relation target table"),`        ${O(f.name)}: ${f.kind==="one"?"OneRelation":"ManyRelation"}<"${f.table}">;`)).join(`
+`),$=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
+`),d=e.tables.map(c=>{const g=c.relations.map(f=>(m(f.table,"relation target table"),`        ${A(f.name)}: ${f.kind==="one"?"OneRelation":"ManyRelation"}<"${f.table}">;`)).join(`
 `);return g?`    ${c.name}: {
 ${g}
     };`:`    ${c.name}: {};`}).join(`
@@ -97,7 +97,7 @@ export type {
     WhereOperators,
 } from "${n.serverDataModel}";
 
-export type TableName = ${a};
+export type TableName = ${r};
 
 /**
  * The tables **this app declared** — every {@link TableName} except those an add-on
@@ -114,7 +114,7 @@ export type TableName = ${a};
  * const EXPORTED: readonly AppTableName[] = ["nodes", "tagColors"];
  * \`\`\`
  */
-export type AppTableName = ${r};
+export type AppTableName = ${a};
 
 export type Id<TName extends string> = string & { readonly __table: TName };
 
@@ -164,7 +164,7 @@ ${w}
 
 /** Per-table insert shape, accepted by \`ctx.db.<table>.insert(...)\`. */
 export interface InsertModel {
-${v}
+${$}
 }
 
 export type Insert<T extends keyof DataModel> = InsertModel[T];
@@ -234,11 +234,11 @@ export interface OrmWriter extends OrmReader {
     replace: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmReplaceBuilder<T>;
     update: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmUpdateBuilder<T>;
 }
-`},nn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,rn=/^(?:\.\.?\/)*_generated\//u,_e=e=>e.replaceAll(nn,(t,n)=>`import("${n.replace(rn,"./")}")`),Ie=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),Qe=e=>{const t=new Map;for(const a of e){const r=t.get(a.filePath)??[];r.push(a),t.set(a.filePath,r)}const n=([a,r])=>{const o=r.map(s=>{const i=he(s.args),l=_e(s.returnType);return`        ${s.exportName}: FunctionReference<"${s.kind}", ${i}, ${l}>;`}).join(`
-`);return`    ${O($(a))}: {
+`},rn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,an=/^(?:\.\.?\/)*_generated\//u,on=/\.[A-Za-z]\w*$/u,_e=e=>e.replaceAll(rn,(t,n)=>{const r=n.replace(an,"./");return`import("${on.test(r)?r:`${r}.js`}")`}),sn=/import\("@lunora\/(?<pkg>client|do|runtime|server|values)(?<subpath>\/[^"]*)?"\)/gu,Ze=(e,t)=>t?e.replaceAll(sn,(n,r,a)=>`import("lunorash/${r}${a??""}")`):e,Ie=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),Qe=e=>{const t=new Map;for(const r of e){const a=t.get(r.filePath)??[];a.push(r),t.set(r.filePath,a)}const n=([r,a])=>{const o=a.toSorted((s,i)=>s.exportName.localeCompare(i.exportName)).map(s=>{const i=he(s.args),l=_e(s.returnType);return`        ${s.exportName}: FunctionReference<"${s.kind}", ${i}, ${l}>;`}).join(`
+`);return`    ${A(v(r))}: {
 ${o}
-    };`};return[...t.entries()].toSorted(([a],[r])=>a.localeCompare(r)).map(a=>n(a)).join(`
-`)},an=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let a="";if(e.length>0&&(a+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),a+=`
+    };`};return[...t.entries()].toSorted(([r],[a])=>r.localeCompare(a)).map(r=>n(r)).join(`
+`)},ln=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let r="";if(e.length>0&&(r+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),r+=`
 /** A typed reference to a durable workflow, addressable for \`cronJobs()\` targets. Mirrors \`@lunora/scheduler\`'s \`WorkflowReference\` structurally. */
 export interface WorkflowReference<Params = Record<string, unknown>> {
     readonly isLunoraWorkflow: true;
@@ -246,9 +246,9 @@ export interface WorkflowReference<Params = Record<string, unknown>> {
     readonly binding: string;
     readonly name: string;
 }
-`,e.length>0){const r=[...e].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=r.map(i=>`    ${i.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${i.exportName}>>;`).join(`
-`),s=r.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.exportName)} },`).join(`
-`);a+=`
+`,e.length>0){const a=[...e].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=a.map(i=>`    ${i.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${i.exportName}>>;`).join(`
+`),s=a.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.exportName)} },`).join(`
+`);r+=`
 /** This project's durable workflows, addressable as typed references (e.g. \`crons.daily("digest", …, workflows.digestPipeline, params)\`). */
 export interface WorkflowsRef {
 ${o}
@@ -258,9 +258,9 @@ export const workflows: WorkflowsRef = {
 ${s}
 };
 `,n.push(`import type * as lunoraWorkflowDefinitions from "../workflows.js";
-`)}if(t.length>0){const r=[...t].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=r.map(i=>`    ${i.exportName}: WorkflowReference<AgentRunInput>;`).join(`
-`),s=r.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.name)} },`).join(`
-`);a+=`
+`)}if(t.length>0){const a=[...t].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=a.map(i=>`    ${i.exportName}: WorkflowReference<AgentRunInput>;`).join(`
+`),s=a.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.name)} },`).join(`
+`);r+=`
 /** This project's durable agents, addressable as typed references for \`cronJobs()\` — each fire starts a fresh agent run (e.g. \`crons.daily("sweep", …, agents.support, { input, threadKey })\`). */
 export interface AgentsRef {
 ${o}
@@ -270,7 +270,7 @@ export const agents: AgentsRef = {
 ${s}
 };
 `,n.push(`import type { AgentRunInput } from "@lunora/agent";
-`)}return{block:a,importLine:n.join("")}},on=()=>Object.keys(Je().functions).toSorted((e,t)=>e.localeCompare(t)),Ze=e=>new Set(e.filter(t=>$(t.filePath)==="agents").map(t=>t.exportName)),sn=()=>new Set(Object.entries(Je().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),ln=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const a=Ze(t),r=sn(),o=t.find(i=>$(i.filePath)==="agents"&&r.has(i.exportName));if(o)throw new X("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const s=on().filter(i=>!a.has(i));return s.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
+`)}return{block:r,importLine:n.join("")}},dn=()=>Object.keys(Ge().functions).toSorted((e,t)=>e.localeCompare(t)),et=e=>new Set(e.filter(t=>v(t.filePath)==="agents").map(t=>t.exportName)),cn=()=>new Set(Object.entries(Ge().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),un=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const r=et(t),a=cn(),o=t.find(i=>v(i.filePath)==="agents"&&a.has(i.exportName));if(o)throw new X("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const s=dn().filter(i=>!r.has(i));return s.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
 `,lines:s.map(i=>`    "agents:${i}": lunoraAgentRuntimeFunctions.${i} as unknown as RegisteredLunoraFunction,`).join(`
 `),prelude:`
 /**
@@ -279,44 +279,44 @@ ${s}
  * subscribe to the public queries (\`agents:agentMessages\` is the live thread view).
  */
 const lunoraAgentRuntimeFunctions = agentComponent().functions;
-`}},dn=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(a=>$(a.filePath)==="sandbox"&&a.exportName==="invoke");if(n)throw new X("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
-`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},cn=(e,t)=>{if(e.length===0)return[];const n=Ze(t),a=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const r of e)r.voice&&a.push({args:{threadKey:{kind:"string"}},exportName:`${r.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return a.filter(r=>!n.has(r.exportName))},un=e=>{const t=e.filter(s=>s.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const s of t){const i=n.get(s.filePath)??[];i.push(s),n.set(s.filePath,i)}const a=[...n.entries()].toSorted(([s],[i])=>s.localeCompare(i)),r=a.map(([s,i])=>{const l=i.map(u=>{const p=_e(u.chunkType??"unknown");return`        ${O(u.exportName)}: HttpStreamRef<${p}, ${he(u.searchParams)}, ${he(u.params)}>;`}).join(`
-`);return`    ${O($(s))}: {
+`}},pn=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(r=>v(r.filePath)==="sandbox"&&r.exportName==="invoke");if(n)throw new X("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
+`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},hn=(e,t)=>{if(e.length===0)return[];const n=et(t),r=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const a of e)a.voice&&r.push({args:{threadKey:{kind:"string"}},exportName:`${a.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return r.filter(a=>!n.has(a.exportName))},gn=(e,t)=>{if(e.length===0)return[];const n=new Set(t.filter(r=>v(r.filePath)==="mutators").map(r=>r.exportName));return e.filter(r=>!n.has(r.exportName)).map(r=>({args:r.args,exportName:r.exportName,filePath:r.filePath,kind:"mutation",returnType:r.returnType}))},mn=e=>{const t=e.filter(s=>s.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const s of t){const i=n.get(s.filePath)??[];i.push(s),n.set(s.filePath,i)}const r=[...n.entries()].toSorted(([s],[i])=>s.localeCompare(i)),a=r.map(([s,i])=>{const l=i.map(u=>{const p=_e(u.chunkType??"unknown");return`        ${A(u.exportName)}: HttpStreamRef<${p}, ${he(u.searchParams)}, ${he(u.params)}>;`}).join(`
+`);return`    ${A(v(s))}: {
 ${l}
     };`}).join(`
-`),o=a.map(([s,i])=>{const l=i.map(u=>`        ${O(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
-`);return`    ${O($(s))}: {
+`),o=r.map(([s,i])=>{const l=i.map(u=>`        ${A(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
+`);return`    ${A(v(s))}: {
 ${l}
     },`}).join(`
 `);return{block:`
 /** This project's HTTP-SSE stream routes (\`httpRoute.<verb>(path).stream()\`), addressable as typed references for \`client.httpStream\` / \`useHttpStream\`. */
 export interface HttpStreamsRef {
-${r}
+${a}
 }
 
 export const httpStreams: HttpStreamsRef = {
 ${o}
 };
-`,body:r}},tr=e=>{const{agents:t=[],functions:n,httpRoutes:a=[],useUmbrella:r=!1,workflows:o=[]}=e,s=V(r),i=[...n.filter(x=>x.visibility!=="internal"),...cn(t,n)],l=n.filter(x=>x.visibility==="internal"),u=Qe(i),p=Qe(l),b=un(a),w=`${u}
-${p}
-${b.body}`,v=Ie(w),d=v.length>0?`
-import type { ${v.join(", ")} } from "./dataModel.js";
-`:"",c=u?`
-${u}
+`,body:a}},or=e=>{const{agents:t=[],functions:n,httpRoutes:r=[],mutators:a=[],useUmbrella:o=!1,workflows:s=[]}=e,i=V(o),l=[...n.filter(x=>x.visibility!=="internal"),...hn(t,n),...gn(a,n)],u=n.filter(x=>x.visibility==="internal"),p=Qe(l),b=Qe(u),w=mn(r),$=`${p}
+${b}
+${w.body}`,d=Ie($),c=d.length>0?`
+import type { ${d.join(", ")} } from "./dataModel.js";
 `:"",g=p?`
 ${p}
-`:"",f=an(o,t),T=b.block===""?"FunctionReference":"FunctionReference, HttpStreamRef";return`${k}import { anyApi } from "${s.serverTypes}";
-import type { ${T} } from "${s.client}";
-${f.importLine}${d}
-export interface ApiTypes {${c}}
+`:"",f=b?`
+${b}
+`:"",R=ln(s,t),S=w.block===""?"FunctionReference":"FunctionReference, HttpStreamRef";return Ze(`${k}import { anyApi } from "${i.serverTypes}";
+import type { ${S} } from "${i.client}";
+${R.importLine}${c}
+export interface ApiTypes {${g}}
 
 export const api = anyApi as unknown as ApiTypes;
 
 /** Internal functions — callable only server-side via \`ctx.run*\`, never from a client. */
-export interface InternalApiTypes {${g}}
+export interface InternalApiTypes {${f}}
 
 export const internal = anyApi as unknown as InternalApiTypes;
-${f.block}${b.block}`},nr=e=>e?`${k}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
+${R.block}${w.block}`,o)},ir=e=>e?`${k}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
 import type { SeedClient, SeedClientOptions } from "@lunora/seed";
 
 import schema from "../schema.js";
@@ -333,7 +333,7 @@ import type { InsertModel } from "./dataModel.js";
  * const { posts } = await seed.posts((x) => x([10, 20]));
  */
 export const createSeedClient = (options?: SeedClientOptions): SeedClient<InsertModel> => createSeedClientBase<InsertModel>(schema, options);
-`:"",rr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const a=V(n),r=l=>l.table===void 0?"Row":`Doc<${JSON.stringify(l.table)}> & Row`,o=e.map(l=>{m(l.exportName,"shape export name");const u=r(l),p=he(l.args),b=Object.keys(l.args).length>0,w=b?`        args: ${p};`:`        args?: ${p};`,v=b?`(args: ${p}) => void`:`(args?: ${p}) => void`,d=`${l.exportName}CollectionOptions`;return`/** Options for the \`${l.exportName}\` shape binding. */
+`:"",sr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const r=V(n),a=l=>l.table===void 0?"Row":`Doc<${JSON.stringify(l.table)}> & Row`,o=e.map(l=>{m(l.exportName,"shape export name");const u=a(l),p=he(l.args),b=Object.keys(l.args).length>0,w=b?`        args: ${p};`:`        args?: ${p};`,$=b?`(args: ${p}) => void`:`(args?: ${p}) => void`,d=`${l.exportName}CollectionOptions`;return`/** Options for the \`${l.exportName}\` shape binding. */
 export interface ${Ce(d)} {
 ${w}
     /**
@@ -373,21 +373,21 @@ export const ${l.exportName}CollectionOptions = (options: ${Ce(d)}): LunoraColle
 /** Live collection for the \`${l.exportName}\` shape, with its sync controls. */
 export const ${l.exportName}Collection = (
     options: ${Ce(d)},
-): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${v} } => {
+): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${$} } => {
     const { checkpoints, config, scope } = ${l.exportName}CollectionOptions(options);
 
     return { checkpoints, collection: createCollection(config), scope };
 };`}).join(`
 
 `),s=Ie(o),i=s.length>0?`import type { ${s.join(", ")} } from "./dataModel.js";
-`:"";return`${k}import type { LunoraClient, SubscriptionError } from "${a.client}";
+`:"";return`${k}import type { LunoraClient, SubscriptionError } from "${r.client}";
 import { lunoraCollectionOptions } from "@lunora/db/collections";
 import type { CheckpointRegistry, LunoraCollectionOptions, Row } from "@lunora/db";
 import type { Collection } from "@tanstack/db";
 import { createCollection } from "@tanstack/db";
 ${i}
 ${o}
-`},pn=(e,t)=>`lunora_${$(e)}_${String(t)}`,hn=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
+`},fn=(e,t)=>`lunora_${v(e)}_${String(t)}`,bn=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
     const registered = LUNORA_FUNCTIONS[functionPath];
 
     if (!registered) {
@@ -395,40 +395,40 @@ ${o}
     }
 
     return (await registered.handler(context, args ?? {})) as R;
-};`,gn=(e,t,n=[],a=[])=>{const r=new Map,o=d=>{r.has(d)||r.set(d,pn(d,r.size))};for(const d of e)o(d.filePath);for(const d of t)o(d.filePath);for(const d of n)o(d.filePath);for(const d of a)o(d.filePath);const s=[...r.entries()].map(([d,c])=>{if(!Xt.test(d))throw new X("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(d)}`);return`import * as ${c} from "../${d}.js";`}).join(`
-`),i=e.map(d=>`    "${$(d.filePath)}:${d.exportName}": ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
-`),l=t.map(d=>`    ${JSON.stringify(d.id)}: ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredDataMigration,`).join(`
-`),u=n.map(d=>`    "${$(d.filePath)}:${d.exportName}": ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
-`),p=a.map(d=>`    "${d.exportName}": ${r.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredShape,`).join(`
-`),b=n.map(d=>`${$(d.filePath)}:${d.exportName}`),w=[i,u].filter(d=>d.length>0).join(`
-`),v=e.map(d=>{if(d.lifecycle||Object.keys(d.args).length===0)return;const c=zt(d.args);return c===void 0?void 0:`installCompiledValidatorMap(${r.get(d.filePath)??""}.${d.exportName}.args, ${c});`}).filter(d=>d!==void 0).join(`
+};`,yn=(e,t,n=[],r=[])=>{const a=new Map,o=d=>{a.has(d)||a.set(d,fn(d,a.size))};for(const d of e)o(d.filePath);for(const d of t)o(d.filePath);for(const d of n)o(d.filePath);for(const d of r)o(d.filePath);const s=[...a.entries()].map(([d,c])=>{if(!Yt.test(d))throw new X("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(d)}`);return`import * as ${c} from "../${d}.js";`}).join(`
+`),i=e.map(d=>`    "${v(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),l=t.map(d=>`    ${JSON.stringify(d.id)}: ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredDataMigration,`).join(`
+`),u=n.map(d=>`    "${v(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),p=r.map(d=>`    "${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredShape,`).join(`
+`),b=n.map(d=>`${v(d.filePath)}:${d.exportName}`),w=[i,u].filter(d=>d.length>0).join(`
+`),$=e.map(d=>{if(d.lifecycle||Object.keys(d.args).length===0)return;const c=Xt(d.args);return c===void 0?void 0:`installCompiledValidatorMap(${a.get(d.filePath)??""}.${d.exportName}.args, ${c});`}).filter(d=>d!==void 0).join(`
 `);return{dispatchBody:w.length>0?`
 ${w}
 `:"",importBlock:s.length>0?`${s}
 
-`:"",installBlock:v,migrationBody:l.length>0?`
+`:"",installBlock:$,migrationBody:l.length>0?`
 ${l}
 `:"",mutatorPaths:b,shapeBody:p.length>0?`
 ${p}
-`:""}},mn=e=>{const t=new Map;for(const r of e){const o=t.get(r.filePath)??[];o.push(r),t.set(r.filePath,o)}const n=[...t.entries()].toSorted(([r],[o])=>r.localeCompare(o)),a=n.map(([r,o])=>{const s=o.map(i=>{const l=he(i.args),u=l==="{}"?"?":"",p=_e(i.returnType);return i.kind==="stream"?`        ${i.exportName}: (args${u}: ${l}) => Promise<AsyncIterable<${p}>>;`:`        ${i.exportName}: (args${u}: ${l}) => Promise<${p}>;`}).join(`
-`);return`    ${O($(r))}: {
+`:""}},wn=e=>{const t=new Map;for(const a of e){const o=t.get(a.filePath)??[];o.push(a),t.set(a.filePath,o)}const n=[...t.entries()].toSorted(([a],[o])=>a.localeCompare(o)),r=n.map(([a,o])=>{const s=o.map(i=>{const l=he(i.args),u=l==="{}"?"?":"",p=_e(i.returnType);return i.kind==="stream"?`        ${i.exportName}: (args${u}: ${l}) => Promise<AsyncIterable<${p}>>;`:`        ${i.exportName}: (args${u}: ${l}) => Promise<${p}>;`}).join(`
+`);return`    ${A(v(a))}: {
 ${s}
     };`}).join(`
-`);return{implementation:n.map(([r,o])=>{const s=$(r),i=o.map(l=>`        ${l.exportName}: (args) => callRegistered(context, "${s}:${l.exportName}", args),`).join(`
-`);return`    ${O(s)}: {
+`);return{implementation:n.map(([a,o])=>{const s=v(a),i=o.map(l=>`        ${l.exportName}: (args) => callRegistered(context, "${s}:${l.exportName}", args),`).join(`
+`);return`    ${A(s)}: {
 ${i}
     },`}).join(`
-`),types:a}},fn=(e,t=[])=>{const n=new Set;for(const a of e.tables)for(const r of Object.values(a.shape)){const o=r.kind==="optional"&&r.inner?r.inner:r;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const a of t)a!==""&&a!=="default"&&n.add(a);return["default",...[...n].toSorted((a,r)=>a.localeCompare(r))]},ar=({agents:e=[],containers:t=[],env:n,hasAccessFacade:a=!1,hasAi:r=!1,hasAnalytics:o=!1,hasBrowser:s=!1,hasFlags:i=!1,hasHyperdrive:l=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:b=!1,hasPayments:w=!1,hasPipelines:v=!1,hasR2sql:d=!1,hasX402:c=!1,identity:g,queues:f=[],schema:T,storageRuleBuckets:x=[],useUmbrella:A=!1,workflows:_=[]}={})=>{const y=V(A),Y=fn(T??{tables:[]},x).map(h=>JSON.stringify(h)).join(" | "),Z=r?`import type { LunoraAi } from "@lunora/ai";
-`:"",ee=r?`
+`),types:r}},xn=(e,t=[])=>{const n=new Set;for(const r of e.tables)for(const a of Object.values(r.shape)){const o=a.kind==="optional"&&a.inner?a.inner:a;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const r of t)r!==""&&r!=="default"&&n.add(r);return["default",...[...n].toSorted((r,a)=>r.localeCompare(a))]},lr=({agents:e=[],containers:t=[],env:n,hasAccessFacade:r=!1,hasAi:a=!1,hasAnalytics:o=!1,hasBrowser:s=!1,hasFlags:i=!1,hasHyperdrive:l=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:b=!1,hasPayments:w=!1,hasPipelines:$=!1,hasR2sql:d=!1,hasX402:c=!1,identity:g,queues:f=[],schema:R,storageRuleBuckets:S=[],useUmbrella:x=!1,workflows:_=[]}={})=>{const y=V(x),Y=xn(R??{tables:[]},S).map(h=>JSON.stringify(h)).join(" | "),Z=a?`import type { LunoraAi } from "@lunora/ai";
+`:"",ee=a?`
     readonly ai: LunoraAi;`:"",I=w?`import type { LunoraPayment } from "@lunora/payment";
 `:"",j=w?`
-    readonly payments: LunoraPayment;`:"",S=c?`import type { X402Pay } from "@lunora/x402/pay";
+    readonly payments: LunoraPayment;`:"",N=c?`import type { X402Pay } from "@lunora/x402/pay";
 `:"",W=c?`
     readonly x402: X402Pay;`:"",L=t.length>0?`import type { ContainerAccessor } from "@lunora/container";
 `:"",te=t.length>0?`
     readonly containers: {${t.map(h=>`
         readonly ${h.exportName}: ContainerAccessor;`).join("")}
-    };`:"",H=[...r?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...t.map(h=>(m(h.bindingName,`container binding "${h.bindingName}"`),`    /** Durable Object namespace for the \`${h.exportName}\` container. */
+    };`:"",H=[...a?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...t.map(h=>(m(h.bindingName,`container binding "${h.bindingName}"`),`    /** Durable Object namespace for the \`${h.exportName}\` container. */
     readonly ${h.bindingName}?: unknown;`)),..._.map(h=>(m(h.bindingName,`workflow binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` workflow. */
     readonly ${h.bindingName}?: unknown;`)),...f.map(h=>(m(h.bindingName,`queue binding "${h.bindingName}"`),`    /** Queue producer binding for the \`${h.exportName}\` queue. */
     readonly ${h.bindingName}?: unknown;`)),...e.map(h=>(m(h.bindingName,`agent binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` agent. */
@@ -451,7 +451,7 @@ ${H}`:""}
 }
 
 /** Alias for {@link CloudflareBindings} — the typed shape of \`env\`. */
-export type Env = CloudflareBindings;`,P=(h,Te)=>Te?Ut.get(h)?.field??"":"",U=P("kv",p),E=P("analytics",o),K=P("hyperdrive",l),ne=P("browser",s),re=P("images",u),ae=P("pipelines",v),Q=P("r2sql",d),M=a?`
+export type Env = CloudflareBindings;`,P=(h,Te)=>Te?Kt.get(h)?.field??"":"",U=P("kv",p),E=P("analytics",o),K=P("hyperdrive",l),ne=P("browser",s),re=P("images",u),ae=P("pipelines",$),Q=P("r2sql",d),M=r?`
     /** Verified Cloudflare Access identity — a synchronous facade over the resolved claims (email / groups / hasGroup / claims). Anonymous when no Access token is present. */
     readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",q=i?`
     /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
@@ -508,7 +508,7 @@ type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: (
 `:"",Oe=n?`
 
 /** This app's declared env contract (\`defineEnv\` in \`lunora/env.ts\`) — the validated, coercion-aware shape of \`ctx.env\`. */
-export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",de=n?' | "env"':"",ce=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${k}import { createPolicyDsl, initLunora, v as vBase } from "${y.server}";
+export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",de=n?' | "env"':"",ce=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${k}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${y.server}";
 import type {
     ActionBuilder,
     ActionCtx as ActionCtxBase,
@@ -521,15 +521,18 @@ import type {
     InternalQueryBuilder,
     MutationBuilder,
     MutationCtx as MutationCtxBase,
+    MutatorDefinition,
     QueryBuilder,
     QueryCtx as QueryCtxBase,
     ReadOnlyStorage,
+    RegisteredMutator,
     Storage as StorageBase,
     TableReader,
+    Validator,
 } from "${y.server}";
 
 import type { DataModel, DatabaseReaderFacade, DatabaseWriterFacade, Doc, Id as IdOfTable, OrmReader, OrmWriter, Relations, TableName } from "./dataModel.js";
-${Z}${I}${S}${L}${z}${we}${ke}${$e}${Ne}
+${Z}${I}${N}${L}${z}${we}${ke}${$e}${Ne}
 export type { AppTableName, DataModel, Doc, Id, TableName } from "./dataModel.js";
 
 /** Storage buckets this schema declares (\`v.storage("name")\`), narrowing \`ctx.storage.bucket(name)\`. */
@@ -632,6 +635,24 @@ export const internalMutation = lunoraBuilders.internalMutation as unknown as In
 /** \`internalAction\` builder bound to this project's typed {@link ActionCtx} — never exposed on \`api\`. */
 export const internalAction = lunoraBuilders.internalAction as unknown as InternalActionBuilder<ActionCtx, EmptyArgs>;
 
+/**
+ * \`defineMutator\` bound to this project's typed {@link MutationCtx} — declare
+ * custom mutators (\`lunora/mutators.ts\`) with it instead of importing from
+ * \`${y.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
+ * schema-typed \`ctx.db\` (\`ctx.db.query("nodes")\` resolves \`Doc<"nodes">\`,
+ * \`ctx.db.patch(id, …)\` takes an \`Id<"nodes">\`) with no hand-written ctx type and
+ * no \`as unknown as\` cast. Runtime-identical to the package export; only the
+ * context type narrows, so discovery finds a mutator authored either way.
+ * @example
+ * export const setText = defineMutator({
+ *     args: { id: v.id("nodes"), text: v.string() },
+ *     server: async (ctx, args) => { await ctx.db.patch(args.id, { text: args.text }); },
+ * });
+ */
+export const defineMutator = defineMutatorBase as unknown as <Args extends Record<string, Validator> = Record<string, Validator>, ClientTx = unknown, R = unknown>(
+    definition: MutatorDefinition<Args, MutationCtx, ClientTx, R>,
+) => RegisteredMutator<Args, MutationCtx, ClientTx, R>;
+
 /**
  * \`definePolicy\` bound to THIS schema's {@link DataModel} + {@link Relations}.
  * Import it from here (\`./_generated/server\`) instead of \`@lunora/server\` to get
@@ -659,12 +680,12 @@ export const definePolicy = createPolicyDsl<DataModel, Relations${Re}>();
 export const v = vBase as unknown as Omit<typeof vBase, "id"> & {
     id: <T extends TableName>(table: T) => ColumnValidator<IdOfTable<T>, IdOfTable<T>>;
 };
-`},bn=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${$(n.filePath)}:${n.exportName}`);return t},or=e=>{const{agents:t=[],functions:n,migrations:a=[],mutators:r=[],shapes:o=[],useUmbrella:s=!1,usesSandbox:i=!1}=e,l=n.length>0,u=V(s),{dispatchBody:p,importBlock:b,installBlock:w,migrationBody:v,mutatorPaths:d,shapeBody:c}=gn(n,a,r,o),g=ln(t,n),f=dn(i,n),T=[g.lines,f.lines].filter(C=>C.length>0).join(`
-`);let x=p;T.length>0&&(x=p.length>0?`${p.trimEnd()}
-${T}
+`},kn=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${v(n.filePath)}:${n.exportName}`);return t},dr=e=>{const{agents:t=[],functions:n,migrations:r=[],mutators:a=[],shapes:o=[],useUmbrella:s=!1,usesSandbox:i=!1}=e,l=n.length>0,u=V(s),{dispatchBody:p,importBlock:b,installBlock:w,migrationBody:$,mutatorPaths:d,shapeBody:c}=yn(n,r,a,o),g=un(t,n),f=pn(i,n),R=[g.lines,f.lines].filter(C=>C.length>0).join(`
+`);let S=p;R.length>0&&(S=p.length>0?`${p.trimEnd()}
+${R}
 `:`
-${T}
-`);const A=bn(n),_=o.length>0?`import type { RegisteredShape } from "${u.server}";
+${R}
+`);const x=kn(n),_=o.length>0?`import type { RegisteredShape } from "${u.server}";
 `:"",y=o.length>0?`
 /**
  * Replication-shape registry — one entry per \`defineShape\` in \`lunora/shapes.ts\`.
@@ -688,14 +709,14 @@ export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${d.map(C=>JSO
  * parser as a zero-allocation fast path; anything it can't model is deferred.
  */
 ${w}
-`:"",I=mn(n),j=I.types?`
+`:"",I=wn(n),j=I.types?`
 ${I.types}
-`:"",S=I.implementation?`
+`:"",N=I.implementation?`
 ${I.implementation}
 `:"",W=Ie(I.types),L=W.length>0?`import type { ${W.join(", ")} } from "./dataModel.js";
-`:"",te=l?"context":"_context",H=l?`${hn}
+`:"",te=l?"context":"_context",H=l?`${bn}
 
-`:"";return`${k}${b}${g.importLine}${f.importLine}${Z}${_}import { LunoraError } from "${u.server}";
+`:"";return Ze(`${k}${b}${g.importLine}${f.importLine}${Z}${_}import { LunoraError } from "${u.server}";
 import type { ActionCtx, MutationCtx, QueryCtx } from "./server.js";
 ${L}
 /**
@@ -721,7 +742,7 @@ ${g.prelude}${f.prelude}
  * Static dispatch table. The key matches the \`__lunoraRef\` the client
  * emits (\`api[namespace][fn].__lunoraRef === "namespace:fn"\`).
  */
-export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${x}};
+export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${S}};
 ${ee}${y}${Y}
 /**
  * Connection-lifecycle manifest: the function paths the generated ShardDO
@@ -730,8 +751,8 @@ ${ee}${y}${Y}
  * DO runs every hook under the socket's verified identity via system dispatch.
  */
 export const LUNORA_LIFECYCLE_HOOKS: { connect: readonly string[]; disconnect: readonly string[] } = {
-    connect: [${A.connect.map(C=>JSON.stringify(C)).join(", ")}],
-    disconnect: [${A.disconnect.map(C=>JSON.stringify(C)).join(", ")}],
+    connect: [${x.connect.map(C=>JSON.stringify(C)).join(", ")}],
+    disconnect: [${x.disconnect.map(C=>JSON.stringify(C)).join(", ")}],
 };
 
 /**
@@ -765,7 +786,7 @@ export type CallerCtx = ActionCtx | MutationCtx | QueryCtx;
 export interface Caller {${j}}
 
 ${H}/** Build a {@link Caller} bound to \`context\` (typically a handler's \`ctx\`). */
-export const createCaller = (${te}: CallerCtx): Caller => ({${S}});
+export const createCaller = (${te}: CallerCtx): Caller => ({${N}});
 
 /**
  * Single registered data migration, narrowed to the shape the per-shard runner
@@ -784,8 +805,8 @@ export interface RegisteredDataMigration {
  * Registry of online data migrations keyed by \`defineMigration\`'s \`id\`. The
  * shard DO's admin RPC and the CLI resolve migrations to run through this map.
  */
-export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${v}};
-`},yn=e=>{const t={};for(const n of e.tables){const a={};for(const[r,o]of Object.entries(n.shape)){const s=o.kind==="optional"&&o.inner?o.inner:o;s.kind==="id"&&s.tableName!==void 0&&(a[r]=s.tableName)}Object.keys(a).length>0&&(t[n.name]=a)}return t},wn=e=>{const t={};for(const n of e.tables){const a=[];for(const[r,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&a.push(r);a.length>0&&(t[n.name]=a)}return t},xn=e=>{const t={};for(const n of e.tables){const a=[...n.indexes.map(r=>({fields:[...r.fields],name:r.name,type:"index",...r.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(r=>({fields:[r.field,...r.filterFields??[]],name:r.name,type:"search"})),...(n.geoIndexes??[]).map(r=>({fields:[r.field],name:r.name,type:"geo"})),...n.rankIndexes.map(r=>({fields:r.sortBy.map(o=>o.field),name:r.name,type:"rank"})),...n.vectorIndexes.map(r=>({fields:r.field===void 0?[]:[r.field],name:r.name,type:"vector"}))];a.length>0&&(t[n.name]=a)}return t},kn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},vn=e=>{const t={};for(const n of e.tables){const a=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[r,o]of Object.entries(n.shape)){const s=o.kind==="optional"||!!o.column?.hasDefault,i=o.kind==="optional"&&o.inner?o.inner:o,l={name:r,optional:s,type:i.kind};i.kind==="id"&&i.tableName!==void 0&&(l.ref=i.tableName),i.kind==="storage"&&(l.isStorage=!0),a.push(l)}t[n.name]=a}return t},$n=e=>e?{importFragment:"serveRelationFanout, ",override:`
+export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${$}};
+`,s)},vn=e=>{const t={};for(const n of e.tables){const r={};for(const[a,o]of Object.entries(n.shape)){const s=o.kind==="optional"&&o.inner?o.inner:o;s.kind==="id"&&s.tableName!==void 0&&(r[a]=s.tableName)}Object.keys(r).length>0&&(t[n.name]=r)}return t},$n=e=>{const t={};for(const n of e.tables){const r=[];for(const[a,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&r.push(a);r.length>0&&(t[n.name]=r)}return t},Sn=e=>{const t={};for(const n of e.tables){const r=[...n.indexes.map(a=>({fields:[...a.fields],name:a.name,type:"index",...a.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(a=>({fields:[a.field,...a.filterFields??[]],name:a.name,type:"search"})),...(n.geoIndexes??[]).map(a=>({fields:[a.field],name:a.name,type:"geo"})),...n.rankIndexes.map(a=>({fields:a.sortBy.map(o=>o.field),name:a.name,type:"rank"})),...n.vectorIndexes.map(a=>({fields:a.field===void 0?[]:[a.field],name:a.name,type:"vector"}))];r.length>0&&(t[n.name]=r)}return t},Rn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},Nn=e=>{const t={};for(const n of e.tables){const r=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[a,o]of Object.entries(n.shape)){const s=o.kind==="optional"||!!o.column?.hasDefault,i=o.kind==="optional"&&o.inner?o.inner:o,l={name:a,optional:s,type:i.kind};i.kind==="id"&&i.tableName!==void 0&&(l.ref=i.tableName),i.kind==="storage"&&(l.isStorage=!0),r.push(l)}t[n.name]=r}return t},On=e=>e?{importFragment:"serveRelationFanout, ",override:`
         protected override async runRelationFanoutRead(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
             this.ensureMigrated();
 
@@ -793,7 +814,7 @@ export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${v}}
 
             return serveRelationFanout(schema as unknown as SchemaLike, db, functionPath, args);
         }
-`}:{importFragment:"",override:""},Sn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
+`}:{importFragment:"",override:""},Tn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
             const aiBinding = config.ai?.(env) ?? (env as Record<string, unknown>).AI;
             // Correlate AI-Gateway-routed calls with the Lunora trace: thread the
             // function path + trace id into createAi, which folds them into the
@@ -824,7 +845,7 @@ const aiStub: LunoraAi = {
         ${t}
     }) as unknown as LunoraAi["workersai"],
 };
-`}},D={build:"",configField:"",contextField:"",importLines:[],stub:""},Rn=e=>{if(!e)return D;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
+`}},D={build:"",configField:"",contextField:"",importLines:[],stub:""},An=e=>{if(!e)return D;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
             const kvBinding = config.kv?.(env) ?? (env as Record<string, unknown>).KV;
             const kv: Kv = kvBinding ? createKv({ namespace: kvBinding as KVNamespaceLike }) : kvStub;
 `,configField:`
@@ -850,7 +871,7 @@ const kvStub: Kv = {
         ${t}
     },
 };
-`}},Nn=(e,t)=>e?{build:`
+`}},Ln=(e,t)=>e?{build:`
             const flags: import("${t}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
@@ -859,28 +880,28 @@ const kvStub: Kv = {
             });
 `,configField:`
     flags?: (env: Record<string, unknown>) => import("${t}").Provider;`,contextField:`
-                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:D,On=e=>e?{build:`
+                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:D,Cn=e=>e?{build:`
             const { notify, push } = createNotify(notifyConfig, env, { log, metrics });
 `,configField:"",contextField:`
                 notify,
-                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:D,Tn=e=>e?{build:`
+                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:D,Dn=e=>e?{build:`
             const envConfig = lunoraEnvContract.${e.exportName}(env);
 `,configField:"",contextField:`
-                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:D,An=e=>e?{build:`
+                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:D,_n=e=>e?{build:`
             const access = accessFacade(identity, userId);
 `,configField:"",contextField:`
-                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:D,Ln=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const a=i=>`
+                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:D,In=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const r=i=>`
             const env = (this.env ?? {}) as Record<string, unknown>;
             const flags: import("${n}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
                 provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
                 targetingKey: ${i},
-            });`,r=`
+            });`,a=`
 /** Statically-discovered feature flags (\`ctx.flags.<type>("key")\` reads) served via \`__lunora_admin__:listFlags\` + the reactive \`__lunora_flags__:\` channel. */
 const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number" | "object" | "string" }> = ${JSON.stringify(e,void 0,4)};
 `,o=`
-        protected override async evaluateFlags(context?: Record<string, unknown>): Promise<FlagsResult> {${a("undefined")}
+        protected override async evaluateFlags(context?: Record<string, unknown>): Promise<FlagsResult> {${r("undefined")}
             const evalContext = context as import("${n}").EvaluationContext | undefined;
             const evaluations: FlagsResult["flags"] = [];
 
@@ -901,7 +922,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
             return { configured: true, flags: evaluations };
         }
 `,s=`
-        protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<unknown> {${a("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
+        protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<unknown> {${r("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
             const key = typeof args.key === "string" ? args.key : "";
 
             // SECURITY: the reactive channel is public (any socket, no auth). Serve
@@ -933,7 +954,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
 
             return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
         }
-`;return{constant:r,evaluateOverride:o,subscriptionOverride:s}},Cn=e=>{if(!e)return D;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
+`;return{constant:a,evaluateOverride:o,subscriptionOverride:s}},Pn=e=>{if(!e)return D;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
             const analyticsBinding = config.analytics?.(env) ?? (env as Record<string, unknown>).ANALYTICS;
             const analytics: AnalyticsClient = analyticsBinding ? createAnalytics(analyticsBinding as AnalyticsEngineDatasetLike) : analyticsStub;
 `,configField:`
@@ -947,7 +968,7 @@ const analyticsStub: AnalyticsClient = {
         ${t}
     },
 };
-`}},Dn=e=>{if(!e)return D;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
+`}},En=e=>{if(!e)return D;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
             const imagesBinding = config.images?.(env) ?? (env as Record<string, unknown>).IMAGES;
             const images: Images = imagesBinding ? createImages({ binding: imagesBinding as ImagesBindingLike }) : imagesStub;
 `,configField:`
@@ -961,7 +982,7 @@ const imagesStub: Images = {
         ${t}
     },
 };
-`}},_n=e=>e?{build:`
+`}},Fn=e=>e?{build:`
             const sql: SqlClient = config.sql ? config.sql(env) : sqlStub;
 `,configField:`
     sql?: (env: Record<string, unknown>) => SqlClient;`,contextField:`
@@ -971,7 +992,7 @@ const sqlStub: SqlClient = {
         throw new Error("ctx.sql: provide a \\\`sql\\\` config thunk that builds a SqlClient from your driver, e.g. \\\`sql: (env) => fromPostgresJs(postgres(env.HYPERDRIVE.connectionString))\\\`.");
     },
 };
-`}:D,In=e=>{if(!e)return D;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`.\");";return{build:`
+`}:D,Mn=e=>{if(!e)return D;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`.\");";return{build:`
             const browser: Browser = config.browser ? config.browser(env) : browserStub;
 `,configField:`
     browser?: (env: Record<string, unknown>) => Browser;`,contextField:`
@@ -993,7 +1014,7 @@ const browserStub: Browser = {
         ${t}
     },
 };
-`}},Pn=e=>{if(!e)return D;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
+`}},qn=e=>{if(!e)return D;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
             const r2sqlEnv = env as Record<string, unknown>;
             const r2sqlAccountId = (r2sqlEnv.R2_SQL_ACCOUNT_ID ?? r2sqlEnv.CLOUDFLARE_ACCOUNT_ID) as string | undefined;
             const r2sqlToken = r2sqlEnv.R2_SQL_TOKEN as string | undefined;
@@ -1025,7 +1046,7 @@ const r2sqlStub: R2SqlClient = {
         ${t}
     },
 };
-`}},En=e=>e?{build:`
+`}},Bn=e=>e?{build:`
             const pipelinesBinding = config.pipelines?.(env) ?? (env as Record<string, unknown>).PIPELINES;
             const pipelines: PipelineClient = pipelinesBinding ? createPipelines({ binding: pipelinesBinding as PipelineBindingLike }) : pipelinesStub;
 `,configField:`
@@ -1035,14 +1056,14 @@ const pipelinesStub: PipelineClient = {
         throw new Error("ctx.pipelines: no Pipelines binding found. Add a \\\`pipelines\\\` binding (env.PIPELINES) to wrangler.jsonc, or pass \\\`pipelines\\\` to createShardDO().");
     },
 };
-`}:D,ir=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",a=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
+`}:D,cr=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",r=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
 export class ${o.className} extends LunoraContainer {
     public constructor(ctx: ConstructorParameters<typeof LunoraContainer>[0], env: Record<string, unknown>) {
         super(ctx, env, ${o.exportName}, "${o.exportName}"${n});
     }
 }
 `)).join(`
-`),r=e.map(o=>o.exportName).join(", ");return`${k}/**
+`),a=e.map(o=>o.exportName).join(", ");return`${k}/**
  * Container-enabled Durable Object classes for the containers declared in
  * \`lunora/containers.ts\`. Re-export them from your worker entry — wrangler
  * requires each \`containers[].class_name\` to be exported by the worker:
@@ -1056,11 +1077,11 @@ export class ${o.className} extends LunoraContainer {
  */
 import { LunoraContainer } from "@lunora/container/do";
 
-import { ${r} } from "../containers.js";
+import { ${a} } from "../containers.js";
 
 export { ContainerProxy } from "@lunora/container/do";
 
-${a}`},Fn=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const a of e)m(a.exportName,`container export "${a.exportName}"`),m(a.bindingName,`container binding "${a.bindingName}"`);const n=e.map(a=>{const r=a.maxInstances===void 0?"":`, maxInstances: ${String(a.maxInstances)}`;return`    { binding: "${a.bindingName}", exportName: "${a.exportName}"${r} },`}).join(`
+${r}`},jn=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const r of e)m(r.exportName,`container export "${r.exportName}"`),m(r.bindingName,`container binding "${r.bindingName}"`);const n=e.map(r=>{const a=r.maxInstances===void 0?"":`, maxInstances: ${String(r.maxInstances)}`;return`    { binding: "${r.bindingName}", exportName: "${r.exportName}"${a} },`}).join(`
 `);return{build:`
             const containers = createContainerContext(env, LUNORA_CONTAINERS, ${t?JSON.stringify(t):"undefined"}, this.getCurrentTraceparent());
 `,contextField:`
@@ -1069,14 +1090,14 @@ ${a}`},Fn=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[]
 const LUNORA_CONTAINERS: ReadonlyArray<ContainerBindingSpec> = [
 ${n}
 ];
-`}},sr=e=>{if(e.length===0)return"";const t=e.map(a=>(m(a.exportName,`workflow export "${a.exportName}"`),m(a.className,`workflow class "${a.className}"`),`/** WorkflowEntrypoint for the \`${a.exportName}\` definition (binding \`${a.bindingName}\`). */
-export class ${a.className} extends LunoraWorkflow<WorkflowParamsOf<typeof ${a.exportName}>, WorkflowOutputOf<typeof ${a.exportName}>> {
+`}},ur=e=>{if(e.length===0)return"";const t=e.map(r=>(m(r.exportName,`workflow export "${r.exportName}"`),m(r.className,`workflow class "${r.className}"`),`/** WorkflowEntrypoint for the \`${r.exportName}\` definition (binding \`${r.bindingName}\`). */
+export class ${r.className} extends LunoraWorkflow<WorkflowParamsOf<typeof ${r.exportName}>, WorkflowOutputOf<typeof ${r.exportName}>> {
     public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
-        super(ctx, env, ${a.exportName}, "${a.exportName}");
+        super(ctx, env, ${r.exportName}, "${r.exportName}");
     }
 }
 `)).join(`
-`),n=e.map(a=>a.exportName).join(", ");return`${k}/**
+`),n=e.map(r=>r.exportName).join(", ");return`${k}/**
  * WorkflowEntrypoint classes for the workflows declared in
  * \`lunora/workflows.ts\`. Re-export them from your worker entry — wrangler
  * requires each \`workflows[].class_name\` to be exported by the worker:
@@ -1097,21 +1118,21 @@ type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params
 /** Output type carried by a \`defineWorkflow\` definition (its phantom \`__output\`), so each entrypoint keeps the authored return type. */
 type WorkflowOutputOf<Definition> = Definition extends { __output?: infer Output } ? Output : unknown;
 
-${t}`},lr=e=>{if(e.length===0)return"";const t=e.filter(r=>r.voice).length>0,n=e.map(r=>{m(r.exportName,`agent export "${r.exportName}"`),m(r.className,`agent class "${r.className}"`);const o=`/** WorkflowEntrypoint for the \`${r.exportName}\` agent (binding \`${r.bindingName}\`). */
-export class ${r.className} extends LunoraWorkflow<AgentRunInput, AgentRunResult> {
+${t}`},pr=e=>{if(e.length===0)return"";const t=e.filter(a=>a.voice).length>0,n=e.map(a=>{m(a.exportName,`agent export "${a.exportName}"`),m(a.className,`agent class "${a.className}"`);const o=`/** WorkflowEntrypoint for the \`${a.exportName}\` agent (binding \`${a.bindingName}\`). */
+export class ${a.className} extends LunoraWorkflow<AgentRunInput, AgentRunResult> {
     public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
-        super(ctx, env, compileAgentWorkflow(${r.exportName}, "${r.exportName}"), "${r.exportName}");
+        super(ctx, env, compileAgentWorkflow(${a.exportName}, "${a.exportName}"), "${a.exportName}");
     }
 }
-`;if(!r.voice)return o;const s=r.voiceClassName??"",i=r.voiceBindingName??"";m(s,`agent voice class "${s}"`);const l=`
-/** Voice-session Durable Object for the \`${r.exportName}\` agent (binding \`${i}\`). */
+`;if(!a.voice)return o;const s=a.voiceClassName??"",i=a.voiceBindingName??"";m(s,`agent voice class "${s}"`);const l=`
+/** Voice-session Durable Object for the \`${a.exportName}\` agent (binding \`${i}\`). */
 export class ${s} extends VoiceSessionDO {
     public constructor(ctx: ConstructorParameters<typeof VoiceSessionDO>[0], env: Record<string, unknown>) {
-        super(ctx, env, ${r.exportName}, "${r.exportName}");
+        super(ctx, env, ${a.exportName}, "${a.exportName}");
     }
 }
 `;return`${o}${l}`}).join(`
-`),a=e.map(r=>r.exportName).join(", ");return`${k}/**
+`),r=e.map(a=>a.exportName).join(", ");return`${k}/**
  * WorkflowEntrypoint classes for the agents declared in \`lunora/agents.ts\`.
  * Each \`defineAgent\` compiles a replay-safe tool-loop onto a Cloudflare
  * Workflow. Re-export them from your worker entry — wrangler requires each
@@ -1123,9 +1144,9 @@ import LunoraWorkflow from "@lunora/workflow/do";
 ${t?'import { compileAgentWorkflow, VoiceSessionDO } from "@lunora/agent";':'import { compileAgentWorkflow } from "@lunora/agent";'}
 import type { AgentRunInput, AgentRunResult } from "@lunora/agent";
 
-import { ${a} } from "../agents.js";
+import { ${r} } from "../agents.js";
 
-${n}`},dr=e=>{const t=e.filter(r=>r.mode==="push");if(t.length===0)return"";for(const r of t)m(r.exportName,`queue export "${r.exportName}"`);const n=t.map(r=>r.exportName).join(", "),a=t.map(r=>`    ${JSON.stringify(r.name)}: { definition: ${r.exportName}, exportName: ${JSON.stringify(r.exportName)} },`).join(`
+${n}`},hr=e=>{const t=e.filter(a=>a.mode==="push");if(t.length===0)return"";for(const a of t)m(a.exportName,`queue export "${a.exportName}"`);const n=t.map(a=>a.exportName).join(", "),r=t.map(a=>`    ${JSON.stringify(a.name)}: { definition: ${a.exportName}, exportName: ${JSON.stringify(a.exportName)} },`).join(`
 `);return`${k}/**
  * Push-consumer registry for the queues declared in \`lunora/queues.ts\`. The
  * composed worker's \`queue(batch, env, ctx)\` entry routes each delivered batch
@@ -1138,9 +1159,9 @@ import { ${n} } from "../queues.js";
 
 /** Stable wrangler queue name → { definition, exportName } for batch routing. */
 export const LUNORA_QUEUE_REGISTRY: QueueRegistry = {
-${a}
+${r}
 };
-`},Mn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
+`},Wn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
 `);return{build:`
             const workflows = createWorkflowContext(env, LUNORA_WORKFLOWS);
 `,contextField:`
@@ -1149,7 +1170,7 @@ ${a}
 const LUNORA_WORKFLOWS: ReadonlyArray<WorkflowBindingSpec> = [
 ${t}
 ];
-`}},qn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
+`}},Un=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
 `);return{build:`
             const queues = createQueueContext(env, LUNORA_QUEUES);
 `,contextField:`
@@ -1158,7 +1179,7 @@ ${t}
 const LUNORA_QUEUES: ReadonlyArray<QueueBindingSpec> = [
 ${t}
 ];
-`}},Bn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
+`}},Kn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
 `);return{build:`
             const agents = createAgentContext(env, LUNORA_AGENTS);
 `,contextField:`
@@ -1167,21 +1188,21 @@ ${t}
 const LUNORA_AGENTS: ReadonlyArray<AgentBindingSpec> = [
 ${t}
 ];
-`}},jn=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
+`}},Qn=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
 /** Read-only declared-workflow metadata (discovered from \`lunora/workflows.ts\`) served via \`__lunora_admin__:listWorkflows\` for the studio's workflows view. */
 const LUNORA_WORKFLOWS_INFO: WorkflowsResult = ${JSON.stringify(t,void 0,4)};
 `,override:`
         protected override workflowsMetadata(): WorkflowsResult {
             return LUNORA_WORKFLOWS_INFO;
         }
-`}},Wn=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
+`}},Jn=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
 /** Read-only declared-queue metadata (discovered from \`lunora/queues.ts\`) served via \`__lunora_admin__:listQueues\` for the studio's queues view. */
 const LUNORA_QUEUES_INFO: QueuesResult = ${JSON.stringify(t,void 0,4)};
 `,override:`
         protected override queuesMetadata(): QueuesResult {
             return LUNORA_QUEUES_INFO;
         }
-`}},Un=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
+`}},Gn=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
             const payments: LunoraPayment = config.payment
                 ? paymentsFromContext({ auth: { userId: userId ?? null }, db: db as unknown as LunoraPaymentDbLike }, config.payment(env))
                 : paymentStub;
@@ -1217,7 +1238,7 @@ const paymentStub: LunoraPayment = {
         ${t}
     },
 } as unknown as LunoraPayment;
-`}},Kn=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
+`}},Vn=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
             const x402: X402Pay = config.x402
                 ? lazyX402Pay(config.x402(env), { getSecret: (name: string) => secrets.get(name) })
                 : x402Stub;
@@ -1229,7 +1250,7 @@ const x402Stub: X402Pay = {
         throw new Error("ctx.x402: no pay rail configured. Pass \\\`x402\\\` to createShardDO().");
     },
 } as unknown as X402Pay;
-`}:{build:"",configField:"",contextField:"",imports:[],stub:""},Qn=(e,t,n,a)=>["AdvisoryFinding","DatabaseWriterLike","DataMigrationLike",...a?["FlagsResult"]:[],"MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike","TelemetrySink",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],cr=({advisories:e=[],agents:t=[],containers:n=[],env:a,flagKeys:r=[],hasAccessFacade:o=!1,hasAi:s=!1,hasAnalytics:i=!1,hasBrowser:l=!1,hasFlags:u=!1,hasHyperdrive:p=!1,hasImages:b=!1,hasKv:w=!1,hasNotify:v=!1,hasPayments:d=!1,hasPipelines:c=!1,hasR2sql:g=!1,hasX402:f=!1,maskMetadata:T,mutators:x=[],queues:A=[],rlsMetadata:_,schema:y,shapes:Y=[],storageRules:Z,studioFeatures:ee,useUmbrella:I=!1,workflows:j=[]})=>{const S=V(I),W=x.length>0,L=Y.length>0,{build:te,configField:H,contextField:C,stub:P}=Sn(s),U=An(o),E=Rn(w),K=Nn(u,S.flags),ne=Ln(r,u,S.flags),re=On(v),ae=Tn(a),Q=Cn(i),M=Dn(b),q=_n(p),B=In(l),F=Pn(g),z=En(c),{build:ye,contextField:ge,importLines:me,specs:oe}=qn(A),{build:we,contextField:xe,importLines:fe,specs:ie}=Fn(n,y.jurisdiction),{build:ke,contextField:ve,importLines:be,specs:$e}=Mn(j),{build:Se,contextField:se,importLines:le,specs:Re}=Bn(t),{build:Ne,configField:Oe,contextField:de,imports:ce,stub:h}=Un(d),{build:Te,configField:et,imports:tt,stub:nt}=Kn(f),rt=e,at=_??{policies:[],roles:[]},ot=T??{columns:[]},it=Z??{rules:[]},st=ee??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:lt,override:dt}=jn(j),{constant:ct,override:ut}=Wn(A),G=y.vectorIndexes.length>0,ue=y.tables.some(R=>R.shardMode==="global"),Ae=y.tables.some(R=>R.shardMode==="global"&&R.globalBackend==="hyperdrive"),Ee=y.tables.some(R=>R.shardMode==="global"&&R.globalBackend!=="hyperdrive"),J=y.tables.some(R=>R.externalSource!==void 0);if(Ee&&Ae)throw new X("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Le=y.tables.length>0,pt=yn(y),ht=xn(y),gt=vn(y),mt=wn(y),Fe=kn(y),Me=Qn(G,j.length>0,A.length>0,u);L&&Me.push("WhereInput");const qe=$n(ue),ft=L?`
+`}:{build:"",configField:"",contextField:"",imports:[],stub:""},Hn=(e,t,n,r)=>["AdvisoryFinding","DatabaseWriterLike","DataMigrationLike",...r?["FlagsResult"]:[],"MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike","TelemetrySink",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],gr=({advisories:e=[],agents:t=[],containers:n=[],env:r,flagKeys:a=[],hasAccessFacade:o=!1,hasAi:s=!1,hasAnalytics:i=!1,hasBrowser:l=!1,hasFlags:u=!1,hasHyperdrive:p=!1,hasImages:b=!1,hasKv:w=!1,hasNotify:$=!1,hasPayments:d=!1,hasPipelines:c=!1,hasR2sql:g=!1,hasX402:f=!1,maskMetadata:R,mutators:S=[],queues:x=[],rlsMetadata:_,schema:y,shapes:Y=[],storageRules:Z,studioFeatures:ee,useUmbrella:I=!1,workflows:j=[]})=>{const N=V(I),W=S.length>0,L=Y.length>0,{build:te,configField:H,contextField:C,stub:P}=Tn(s),U=_n(o),E=An(w),K=Ln(u,N.flags),ne=In(a,u,N.flags),re=Cn($),ae=Dn(r),Q=Pn(i),M=En(b),q=Fn(p),B=Mn(l),F=qn(g),z=Bn(c),{build:ye,contextField:ge,importLines:me,specs:oe}=Un(x),{build:we,contextField:xe,importLines:fe,specs:ie}=jn(n,y.jurisdiction),{build:ke,contextField:ve,importLines:be,specs:$e}=Wn(j),{build:Se,contextField:se,importLines:le,specs:Re}=Kn(t),{build:Ne,configField:Oe,contextField:de,imports:ce,stub:h}=Gn(d),{build:Te,configField:tt,imports:nt,stub:rt}=Vn(f),at=e,ot=_??{policies:[],roles:[]},it=R??{columns:[]},st=Z??{rules:[]},lt=ee??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:dt,override:ct}=Qn(j),{constant:ut,override:pt}=Jn(x),J=y.vectorIndexes.length>0,ue=y.tables.some(O=>O.shardMode==="global"),Ae=y.tables.some(O=>O.shardMode==="global"&&O.globalBackend==="hyperdrive"),Ee=y.tables.some(O=>O.shardMode==="global"&&O.globalBackend!=="hyperdrive"),G=y.tables.some(O=>O.externalSource!==void 0);if(Ee&&Ae)throw new X("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Le=y.tables.length>0,ht=vn(y),gt=Sn(y),mt=Nn(y),ft=$n(y),Fe=Rn(y),Me=Hn(J,j.length>0,x.length>0,u);L&&Me.push("WhereInput");const qe=On(ue),bt=L?`
         protected override resolveShape(name: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string } | undefined {
             const shape = LUNORA_SHAPES[name];
 
@@ -1282,15 +1303,15 @@ const x402Stub: X402Pay = {
 
             return { columns: shape.columns, effectiveWhere, global: isGlobal, table: shape.table };
         }
-`:"",bt=W?`
+`:"",yt=W?`
         protected override isCustomMutator(functionPath: string): boolean {
             return LUNORA_MUTATOR_PATHS.has(functionPath);
         }
-`:"",yt=L?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",wt=L?"assertShapeShardable, ":"",pe=[`import type { ${Me.join(", ")} } from "${S.do}";`,`import { applyCdcChanges, ${wt}createShardCtxDb, ${J?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}runDataMigration, runShardMigrations, ${qe.importFragment}ShardDO as ShardDOBase } from "${S.do}";`,...J?[`import type { ExternalSourceLike, SourceClientLike } from "${S.do}";`]:[],L?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${S.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${S.server}";`];Le&&pe.push(`import { bindOrm, bindTableFacade } from "${S.server}";`),G&&pe.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),s&&pe.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),pe.push(...U.importLines,...E.importLines,...K.importLines,...re.importLines,...ae.importLines,...Q.importLines,...M.importLines,...q.importLines,...B.importLines,...F.importLines,...z.importLines,...fe,...be,...me,...le,...ce,...tt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...W?["LUNORA_MUTATOR_PATHS"]:[],...L?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const xt=G?`
-    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",kt=Ee?`
-    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",vt=Ae?`
-    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",$t=J?`
-    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",St=ue?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",Rt=G?`
+`:"",wt=L?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",xt=L?"assertShapeShardable, ":"",pe=[`import type { ${Me.join(", ")} } from "${N.do}";`,`import { applyCdcChanges, ${xt}createShardCtxDb, ${G?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}runDataMigration, runShardMigrations, ${qe.importFragment}ShardDO as ShardDOBase } from "${N.do}";`,...G?[`import type { ExternalSourceLike, SourceClientLike } from "${N.do}";`]:[],L?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${N.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${N.server}";`];Le&&pe.push(`import { bindOrm, bindTableFacade } from "${N.server}";`),J&&pe.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),s&&pe.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),pe.push(...U.importLines,...E.importLines,...K.importLines,...re.importLines,...ae.importLines,...Q.importLines,...M.importLines,...q.importLines,...B.importLines,...F.importLines,...z.importLines,...fe,...be,...me,...le,...ce,...nt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...W?["LUNORA_MUTATOR_PATHS"]:[],...L?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const kt=J?`
+    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",vt=Ee?`
+    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",$t=Ae?`
+    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",St=G?`
+    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",Rt=ue?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",Nt=J?`
 const vectorsStub: VectorSearchLike = {
     deleteByIds: async () => {
         throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
@@ -1308,7 +1329,7 @@ const vectorsStub: VectorSearchLike = {
         throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
     },
 };
-`:"",Nt=G?`
+`:"",Ot=J?`
             let vectors: VectorSearchLike;
             let onWrite: WriteHook | undefined;
 
@@ -1323,7 +1344,7 @@ const vectorsStub: VectorSearchLike = {
             }
 `:"",Be=ue?`
                 globalDb,`:"",je=`
-                auth: { identity: identity ?? null, userId: userId ?? null },`,Ot=G?`{${je}
+                auth: { identity: identity ?? null, userId: userId ?? null },`,Tt=J?`{${je}
                 broadcast: (delta) => {
                     this.recordChangedTable(delta.table);
                 },
@@ -1348,10 +1369,10 @@ const vectorsStub: VectorSearchLike = {
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
                 storage,${Be}
-            }`,Tt=G?`
-                vectors,`:"",At=Le?`
-                orm: bindOrm(facade),`:"",Lt="",We=Ae?"config.hyperdriveGlobal":"config.d1",Ct=ue?`            const globalDb: DatabaseWriterLike = ${We}?.(env, { identity, userId }) ?? globalDbStub;
-`:"",Dt=L&&ue?`
+            }`,At=J?`
+                vectors,`:"",Lt=Le?`
+                orm: bindOrm(facade),`:"",Ct="",We=Ae?"config.hyperdriveGlobal":"config.d1",Dt=ue?`            const globalDb: DatabaseWriterLike = ${We}?.(env, { identity, userId }) ?? globalDbStub;
+`:"",_t=L&&ue?`
         protected override async readGlobalShapeRows(resolved: { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string }, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<Array<{ doc: Record<string, unknown>; id: string }>> {
             const env = this.env as Record<string, unknown>;
             const globalDb: DatabaseWriterLike = ${We}?.(env, identity) ?? globalDbStub;
@@ -1381,10 +1402,10 @@ const vectorsStub: VectorSearchLike = {
 
             return rows;
         }
-`:"",_t=J?`
+`:"",It=G?`
 const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
-`:"",It=J?`
+`:"",Pt=G?`
         protected override async pollExternalSources(): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
@@ -1485,10 +1506,10 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
 
             return nextDueAt;
         }
-`:"",Ue=Fe.length>0,Pt=J||Ue?`
+`:"",Ue=Fe.length>0,Et=G||Ue?`
         public constructor(state: ShardDOState, env: unknown) {
             super(state, env);
-${J?`
+${G?`
             const autoSourced = Object.values((schema as unknown as SchemaLike).tables).some((definition) => {
                 const source = (definition as { externalSource?: ExternalSourceLike }).externalSource;
 
@@ -1503,21 +1524,21 @@ ${J?`
                 void this.scheduleTtlSweep();
             }
 `:""}        }
-`:"",Et=Le?`
+`:"",Ft=Le?`
             const facade = db as unknown as Record<string, ReturnType<typeof bindTableFacade>>;
-${y.tables.map(R=>`            facade[${JSON.stringify(R.name)}] = bindTableFacade(db, ${JSON.stringify(R.name)});`).join(`
+${y.tables.map(O=>`            facade[${JSON.stringify(O.name)}] = bindTableFacade(db, ${JSON.stringify(O.name)});`).join(`
 `)}
-`:"",Ft=`${U.build}${E.build}${K.build}${Q.build}${ae.build}
+`:"",Mt=`${U.build}${E.build}${K.build}${Q.build}${ae.build}
             const secrets = createSecrets(env);
-`,Mt=`${U.contextField}${E.contextField}${K.contextField}${re.contextField}${Q.contextField}${ae.contextField}
-                secrets,`,qt=re.build,Ke=b||p||l||g||c||f,Bt=Ke?`
+`,qt=`${U.contextField}${E.contextField}${K.contextField}${re.contextField}${Q.contextField}${ae.contextField}
+                secrets,`,Bt=re.build,Ke=b||p||l||g||c||f,jt=Ke?`
             // ActionCtx-only helpers (external, non-deterministic I/O): constructed
             // and attached only for an \`action\` so query/mutation ctx never carry them.
             if (isAction) {
 ${M.build}${q.build}${B.build}${F.build}${z.build}${Te}${[...b?["                ctx.images = images;"]:[],...p?["                ctx.sql = sql;"]:[],...l?["                ctx.browser = browser;"]:[],...g?["                ctx.r2sql = r2sql;"]:[],...c?["                ctx.pipelines = pipelines;"]:[],...f?["                ctx.x402 = x402;"]:[]].join(`
 `)}
             }
-`:"",jt=Ke?`            const isAction = LUNORA_FUNCTIONS[options.functionPath ?? ""]?.kind === "action";
+`:"",Wt=Ke?`            const isAction = LUNORA_FUNCTIONS[options.functionPath ?? ""]?.kind === "action";
 `:"";return`${k}${pe.join(`
 `)}
 
@@ -1528,42 +1549,42 @@ interface FunctionReference {
 }
 
 /** Foreign-key columns per table (\`v.id("target")\` fields) for the data browser. */
-const LUNORA_TABLE_REFS: Record<string, Record<string, string>> = ${JSON.stringify(pt,void 0,4)};
+const LUNORA_TABLE_REFS: Record<string, Record<string, string>> = ${JSON.stringify(ht,void 0,4)};
 
 /** Declared indexes per table (secondary, search, geo, rank, vector) for the schema viewer. */
-const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(ht,void 0,4)};
+const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(gt,void 0,4)};
 
 /** Columns per table (typed, with PK/FK markers) for the studio's schema diagram, served via \`__lunora_admin__:describeTable\`. */
-const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(gt,void 0,4)};
+const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(mt,void 0,4)};
 
 /** Storage-key columns per table (\`v.storage(...)\` fields) for the file browser's records↔files join. */
-const LUNORA_STORAGE_COLUMNS: Record<string, string[]> = ${JSON.stringify(mt,void 0,4)};
+const LUNORA_STORAGE_COLUMNS: Record<string, string[]> = ${JSON.stringify(ft,void 0,4)};
 
 /** Declarative TTL policies (\`.ttl(field, { after? })\`) the DO alarm sweep auto-expires rows for. */
 const LUNORA_TTL_SWEEPS: Array<{ after?: number; field: string; softDeleteField?: string; table: string }> = ${JSON.stringify(Fe,void 0,4)};
 
 /** Static schema advisories (computed by @lunora/advisor at codegen time) served via \`__lunora_admin__:getAdvisories\`. */
-const LUNORA_ADVISORIES: AdvisoryFinding[] = ${JSON.stringify(rt,void 0,4)};
+const LUNORA_ADVISORIES: AdvisoryFinding[] = ${JSON.stringify(at,void 0,4)};
 
 /** Read-only RLS metadata (policies + roles discovered from \`.use(rls(...))\` chains) served via \`__lunora_admin__:rlsPolicies\` for the studio's RLS inspector. */
-const LUNORA_RLS_METADATA: RlsPoliciesResult = ${JSON.stringify(at,void 0,4)};
+const LUNORA_RLS_METADATA: RlsPoliciesResult = ${JSON.stringify(ot,void 0,4)};
 
 /** Read-only masking metadata (table + column + strategy discovered from \`.use(mask(...))\` chains) served via \`__lunora_admin__:maskPolicies\` for the studio's data-browser mask preview. */
-const LUNORA_MASK_METADATA: MaskPoliciesResult = ${JSON.stringify(ot,void 0,4)};
+const LUNORA_MASK_METADATA: MaskPoliciesResult = ${JSON.stringify(it,void 0,4)};
 
 /** Read-only storage access-rule metadata (discovered from \`.use(storageRules(...))\` chains) served via \`__lunora_admin__:storageRules\` for the studio's access-rules view. */
-const LUNORA_STORAGE_RULES: StorageRulesResult = ${JSON.stringify(it,void 0,4)};
+const LUNORA_STORAGE_RULES: StorageRulesResult = ${JSON.stringify(st,void 0,4)};
 
 /** Which optional package-backed features this app wires up (discovered from imports / \`ctx.*\` reads / schema signals) served via \`__lunora_admin__:studioFeatures\` so the studio hides nav pages whose package isn't enabled. */
-const LUNORA_STUDIO_FEATURES: StudioFeaturesResult = ${JSON.stringify(st,void 0,4)};
-${ne.constant}${yt}${lt}${ct}${ie}${$e}${oe}${Re}
+const LUNORA_STUDIO_FEATURES: StudioFeaturesResult = ${JSON.stringify(lt,void 0,4)};
+${ne.constant}${wt}${dt}${ut}${ie}${$e}${oe}${Re}
 export interface ShardDOConfig {
     /** Opt into change-data-capture: records a post-image to \`__cdc_log\` on every write (backs streaming export + replay-PITR). */
     cdc?: boolean;
     /** Optional telemetry sink. When supplied, each \`ctx.log.*\` call is forwarded to \`sink.onLog\`. Pass the SAME sink you give \`createWorker({ observability })\` (which drives \`onRpc\`) to route both RPC and log events. */
     observability?: (env: Record<string, unknown>) => TelemetrySink | undefined;
     scheduler?: (env: Record<string, unknown>) => unknown;
-    storage?: (env: Record<string, unknown>) => unknown;${xt}${H}${E.configField}${K.configField}${Q.configField}${M.configField}${q.configField}${B.configField}${F.configField}${z.configField}${Oe}${et}${kt}${vt}${$t}
+    storage?: (env: Record<string, unknown>) => unknown;${kt}${H}${E.configField}${K.configField}${Q.configField}${M.configField}${q.configField}${B.configField}${F.configField}${z.configField}${Oe}${tt}${vt}${$t}${St}
 }
 
 const schedulerStub = {
@@ -1601,7 +1622,7 @@ const storageStub = {
         throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
     },
 };
-${St}${_t}${Rt}${P}${E.stub}${K.stub}${Q.stub}${M.stub}${q.stub}${B.stub}${F.stub}${z.stub}${h}${nt}${Lt}
+${Rt}${It}${Nt}${P}${E.stub}${K.stub}${Q.stub}${M.stub}${q.stub}${B.stub}${F.stub}${z.stub}${h}${rt}${Ct}
 // Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
 // referencing call fails loudly with a clear error instead of overflowing the
 // stack. Tracked across the awaited handler chain (one DO invocation is
@@ -1638,7 +1659,7 @@ const dispatchRun = async (expected: FunctionKind, functionPath: string, args: R
  * from the worker entry so wrangler binds it by name.
  */
 export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOState, env: unknown) => ShardDOBase =>
-    class extends ShardDOBase {${Pt}
+    class extends ShardDOBase {${Et}
         private migrated = false;
 
         public override async handleRpc(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
@@ -1714,7 +1735,7 @@ ${qe.override}
                 iterator: (signal) => (registered.handler as (context: unknown, args: Record<string, unknown>, signal: AbortSignal) => AsyncIterable<unknown>)(this.buildCtx({ functionPath }), args, signal),
             };
         }
-${bt}${ft}${Dt}${It}
+${yt}${bt}${_t}${Pt}
         protected override lifecycleHookPaths(event: "connect" | "disconnect"): readonly string[] {
             return LUNORA_LIFECYCLE_HOOKS[event];
         }
@@ -1754,7 +1775,7 @@ ${bt}${ft}${Dt}${It}
         protected override studioFeatures(): StudioFeaturesResult {
             return LUNORA_STUDIO_FEATURES;
         }
-${ne.evaluateOverride}${ne.subscriptionOverride}${dt}${ut}
+${ne.evaluateOverride}${ne.subscriptionOverride}${ct}${pt}
         protected override advisories(): AdvisoryFinding[] {
             return LUNORA_ADVISORIES;
         }
@@ -1976,7 +1997,7 @@ ${ne.evaluateOverride}${ne.subscriptionOverride}${dt}${ut}
             // dispatch path) fall back to the per-request fields as before.
             const userId = options.identity ? options.identity.userId : this.getCurrentUserId();
             const identity = options.identity ? options.identity.identity : this.getCurrentIdentity();
-${Nt}${te}${Ft}${we}${ke}${ye}${Se}
+${Ot}${te}${Mt}${we}${ke}${ye}${Se}
             const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
             // Build the storage adapter once and share it between \`ctx.storage\`
             // and \`ctx.db.system._storage\` so both read the same R2 binding. The
@@ -2003,13 +2024,13 @@ ${Nt}${te}${Ft}${we}${ke}${ye}${Se}
             // so both write to the same trace.
             const span = this.makeDispatchSpan(traceAnchor, observability);
 
-${Ct}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
+${Dt}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
             // adds aggregate counters (call count, total time, per-operation
             // breakdown) to the wide event rather than a span per call, so a
             // handler making hundreds of queries stays readable. See
             // \`instrumentDatabase\` for the \`"spans"\` / \`"off"\` levels.
-            const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${Ot}), logFunctionPath, traceAnchor, observability);
-${Et}${Ne}
+            const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${Tt}), logFunctionPath, traceAnchor, observability);
+${Ft}${Ne}
 
             // \`ctx.trace\` / \`ctx.metrics\`: spans and measurements to the same sink.
             // The trace anchor is threaded explicitly for the same reason \`identity\`
@@ -2017,7 +2038,7 @@ ${Et}${Ne}
             // writing mutation's trace from the shared per-request field.
             const trace = this.makeTracer(logFunctionPath, observability, traceAnchor);
             const metrics = this.makeMetrics(logFunctionPath, observability);
-${qt}
+${Bt}
             // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
             // captured ONCE so the whole handler body sees a single stable value.
             // Query/mutation handlers must be deterministic (they may be re-run on
@@ -2040,13 +2061,13 @@ ${qt}
                 ip: this.getCurrentIp(),
                 log,
                 metrics,
-                now,${At}
+                now,${Lt}
                 scheduler,
                 span,
                 storage,
-                trace,${Tt}${C}${Mt}${de}${xe}${ve}${ge}${se}
+                trace,${At}${C}${qt}${de}${xe}${ve}${ge}${se}
             };
-${jt}${Bt}
+${Wt}${jt}
             ctx.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, ctx);
             ctx.runMutation = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("mutation", reference.__lunoraRef, fnArgs, ctx);
             ctx.runQuery = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("query", reference.__lunoraRef, fnArgs, ctx);
@@ -2054,21 +2075,21 @@ ${jt}${Bt}
             return ctx;
         }
     };
-`},Pe=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:N(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?Pe(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},Gn=(e,t,n)=>{m(e,"drizzle column name");const a=Pe(t),r=t.kind==="optional"&&t.inner?t.inner:t,o=a.mode?`, { mode: "${a.mode}" }`:"";let s=`${a.builder}("${e}"${o})`;return a.typeAnnotation&&(s+=`.$type<${a.typeAnnotation}>()`),r.kind==="id"&&r.tableName&&n.has(r.tableName)&&(s+=`.references(() => ${r.tableName}._id)`),a.notNull&&(s+=".notNull()"),s},Jn=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(a=>(m(a,"drizzle index field"),`t.${a}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},Vn=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([r,o])=>`    ${r}: ${Gn(r,o,t)},`)].join(`
-`),a=e.indexes.length>0?`, (t) => ({
-${e.indexes.map(r=>Jn(r)).join(`
+`},Pe=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:T(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?Pe(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},zn=(e,t,n)=>{m(e,"drizzle column name");const r=Pe(t),a=t.kind==="optional"&&t.inner?t.inner:t,o=r.mode?`, { mode: "${r.mode}" }`:"";let s=`${r.builder}("${e}"${o})`;return r.typeAnnotation&&(s+=`.$type<${r.typeAnnotation}>()`),a.kind==="id"&&a.tableName&&n.has(a.tableName)&&(s+=`.references(() => ${a.tableName}._id)`),r.notNull&&(s+=".notNull()"),s},Xn=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(r=>(m(r,"drizzle index field"),`t.${r}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},Yn=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([a,o])=>`    ${a}: ${zn(a,o,t)},`)].join(`
+`),r=e.indexes.length>0?`, (t) => ({
+${e.indexes.map(a=>Xn(a)).join(`
 `)}
 })`:"";return`export const ${e.name} = sqliteTable("${e.name}", {
 ${n}
-}${a});`},Hn=e=>{const t=new Set,n=new Set;t.add("text"),t.add("integer"),t.add("sqliteTable");for(const a of e){for(const r of Object.values(a.shape)){const o=Pe(r);t.add(o.builder)}for(const r of a.indexes)n.add(r.unique?"uniqueIndex":"index")}return{columns:[...t].toSorted((a,r)=>a.localeCompare(r)),indexes:[...n].toSorted((a,r)=>a.localeCompare(r))}},Ge=(e,t=!1)=>{if(e.length===0)return`${k}export {};
-`;const n=V(t),{columns:a,indexes:r}=Hn(e),o=[...r,...a].toSorted((l,u)=>l.localeCompare(u)),s=new Set(e.map(l=>l.name)),i=e.map(l=>Vn(l,s)).join(`
+}${r});`},Zn=e=>{const t=new Set,n=new Set;t.add("text"),t.add("integer"),t.add("sqliteTable");for(const r of e){for(const a of Object.values(r.shape)){const o=Pe(a);t.add(o.builder)}for(const a of r.indexes)n.add(a.unique?"uniqueIndex":"index")}return{columns:[...t].toSorted((r,a)=>r.localeCompare(a)),indexes:[...n].toSorted((r,a)=>r.localeCompare(a))}},Je=(e,t=!1)=>{if(e.length===0)return`${k}export {};
+`;const n=V(t),{columns:r,indexes:a}=Zn(e),o=[...a,...r].toSorted((l,u)=>l.localeCompare(u)),s=new Set(e.map(l=>l.name)),i=e.map(l=>Yn(l,s)).join(`
 
 `);return`${k}import { ${o.join(", ")} } from "${n.serverDrizzle}";
 
 ${i}
-`},ur=(e,t=!1)=>{const n=e.tables.filter(r=>r.shardMode==="global"),a=e.tables.filter(r=>r.shardMode!=="global");return{global:Ge(n,t),shard:Ge(a,t)}},pr=e=>{const t=[],n=new Map;for(const i of e){const l=n.get(i.cron);l?l.push(i):(n.set(i.cron,[i]),t.push(i.cron))}const a=t.map(i=>`    ${JSON.stringify(i)},`).join(`
-`),r=a.length>0?`
-${a}
+`},mr=(e,t=!1)=>{const n=e.tables.filter(a=>a.shardMode==="global"),r=e.tables.filter(a=>a.shardMode!=="global");return{global:Je(n,t),shard:Je(r,t)}},fr=e=>{const t=[],n=new Map;for(const i of e){const l=n.get(i.cron);l?l.push(i):(n.set(i.cron,[i]),t.push(i.cron))}const r=t.map(i=>`    ${JSON.stringify(i)},`).join(`
+`),a=r.length>0?`
+${r}
 `:"",o=[...n.entries()].map(([i,l])=>{const u=l.map(p=>{const b=p.workflow?`workflow: ${JSON.stringify(p.workflow.binding)}`:`functionPath: ${JSON.stringify(p.functionPath)}`;return`        { name: ${JSON.stringify(p.name)}, ${b}, args: ${JSON.stringify(p.args)} },`}).join(`
 `);return`    ${JSON.stringify(i)}: [
 ${u}
@@ -2093,14 +2114,14 @@ export interface LunoraCronJob {
  * Deduplicated cron schedules — mirror of wrangler's \`triggers.crons\`. The
  * Lunora vite plugin keeps \`wrangler.jsonc\` in sync with this array.
  */
-export const LUNORA_CRON_TRIGGERS: ReadonlyArray<string> = [${r}];
+export const LUNORA_CRON_TRIGGERS: ReadonlyArray<string> = [${a}];
 
 /**
  * Dispatcher map keyed by cron expression. The Worker's \`scheduled()\` handler
  * looks up \`event.cron\` here and dispatches every job in the list.
  */
 export const LUNORA_CRONS: Record<string, ReadonlyArray<LunoraCronJob>> = {${s}};
-`},hr=e=>{const t=[...e].toSorted((a,r)=>a.name.localeCompare(r.name)).map(a=>{const r=[`name: ${JSON.stringify(a.name)}`,`table: ${JSON.stringify(a.table)}`];return a.field!==void 0&&r.push(`field: ${JSON.stringify(a.field)}`),a.dimensions!==void 0&&r.push(`dimensions: ${JSON.stringify(a.dimensions)}`),a.metric!==void 0&&r.push(`metric: ${JSON.stringify(a.metric)}`),a.metadata!==void 0&&r.push(`metadata: ${JSON.stringify(a.metadata)}`),`    { ${r.join(", ")} },`}).join(`
+`},br=e=>{const t=[...e].toSorted((r,a)=>r.name.localeCompare(a.name)).map(r=>{const a=[`name: ${JSON.stringify(r.name)}`,`table: ${JSON.stringify(r.table)}`];return r.field!==void 0&&a.push(`field: ${JSON.stringify(r.field)}`),r.dimensions!==void 0&&a.push(`dimensions: ${JSON.stringify(r.dimensions)}`),r.metric!==void 0&&a.push(`metric: ${JSON.stringify(r.metric)}`),r.metadata!==void 0&&a.push(`metadata: ${JSON.stringify(r.metadata)}`),`    { ${a.join(", ")} },`}).join(`
 `),n=t.length>0?`
 ${t}
 `:"";return`${k}/**
@@ -2124,4 +2145,4 @@ export interface LunoraVectorIndex {
  * \`createWorker({ vectorIntrospector })\` to back the studio's vector browser.
  */
 export const LUNORA_VECTOR_INDEXES: ReadonlyArray<LunoraVectorIndex> = [${n}];
-`},gr=e=>{const t=new Set,n=[];for(const a of e)t.has(a.cron)||(t.add(a.cron),n.push(a.cron));return n};export{sr as D,lr as E,er as G,cr as K,ir as L,pr as X,hr as Y,gr as Z,dr as _,wn as a,nr as b,Zn as c,or as g,tr as n,rr as o,Wt as r,ar as u,k as w,ur as z};
+`},yr=e=>{const t=new Set,n=[];for(const r of e)t.has(r.cron)||(t.add(r.cron),n.push(r.cron));return n};export{pr as B,ar as H,gr as J,ur as M,$n as X,cr as _,Ut as a,dr as b,sr as c,rr as d,mr as e,lr as h,hr as j,ir as l,br as n,yr as r,or as s,fr as t,k as w};