@lunora/codegen 1.0.0-alpha.81 → 1.0.0-alpha.83

package/dist/packem_shared/{emit-CCw5fiXq.mjs → emit-B7IUlWwi.mjs}

@@ -1,4 +1,4 @@
-import{agentComponent as Ye}from"@lunora/agent/component";import{LunoraError as Z}from"@lunora/errors";import{serializeSchemaSnapshot as zt,hashSchemaSnapshot as Xt}from"./SCHEMA_SNAPSHOT_VERSION-CFhF_hmg.mjs";import{n as S}from"./paths-BmX5O1sG.mjs";const Ze=[{contextProperty:"access",key:"access",moduleSpecifier:"@lunora/cloudflare-access"},{appMethod:{configKey:"ai",doc:"Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`).",method:"ai"},contextProperty:"ai",key:"ai",moduleSpecifier:"@lunora/ai"},{appMethod:{configKey:"analytics",doc:"Override the Analytics Engine dataset backing `ctx.analytics` (defaults to `env.ANALYTICS`).",method:"analytics"},contextProperty:"analytics",key:"analytics",moduleSpecifier:"@lunora/bindings/analytics",serverCtxField:{field:`
+import{agentComponent as tt}from"@lunora/agent/component";import{LunoraError as Z}from"@lunora/errors";import{serializeSchemaSnapshot as on,hashSchemaSnapshot as sn}from"./SCHEMA_SNAPSHOT_VERSION-CFhF_hmg.mjs";import{n as R}from"./paths-BmX5O1sG.mjs";const nt=[{contextProperty:"access",key:"access",moduleSpecifier:"@lunora/cloudflare-access"},{appMethod:{configKey:"ai",doc:"Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`).",method:"ai"},contextProperty:"ai",key:"ai",moduleSpecifier:"@lunora/ai"},{appMethod:{configKey:"analytics",doc:"Override the Analytics Engine dataset backing `ctx.analytics` (defaults to `env.ANALYTICS`).",method:"analytics"},contextProperty:"analytics",key:"analytics",moduleSpecifier:"@lunora/bindings/analytics",serverCtxField:{field:`
     /** Analytics Engine telemetry sink. Fire-and-forget and sampled; do not read it back in-handler. */
     readonly analytics: import("@lunora/bindings/analytics").AnalyticsClient;`,tier:"every"}},{appMethod:{configKey:"browser",doc:"Override the Browser Rendering binding backing `ctx.browser` (defaults to `env.BROWSER`).",method:"browser"},contextProperty:"browser",key:"browser",moduleSpecifier:"@lunora/browser",serverCtxField:{field:`
     /** Browser Rendering (screenshots/PDF/scrape). Non-deterministic — available only in actions. */
@@ -15,57 +15,57 @@ import{agentComponent as Ye}from"@lunora/agent/component";import{LunoraError as
     /**
      * R2 SQL over Apache Iceberg tables (window functions, DISTINCT, set operations). Non-deterministic — available only in actions. Reads here are NOT tracked by Lunora live queries.
      */
-    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],Yt=Ze,Zt=new Map(Yt.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),mr=Ze.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),et=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,en=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),tt=e=>e.column!==void 0,tn=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
+    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],ln=nt,dn=new Map(ln.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),Or=nt.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),rt=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,cn=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),at=e=>e.column!==void 0,un=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
 `;case"boolean":return`if (typeof ${t} !== "boolean") return DEFER;
 `;case"date":case"number":case"timestamp":return`if (typeof ${t} !== "number" || !Number.isFinite(${t})) return DEFER;
 `;case"null":return`if (${t} !== null) return DEFER;
 `;default:return`if (typeof ${t} !== "string") return DEFER;
-`}},nn=(e,t)=>{const n=e.literalValue?.trim();if(!(n===void 0||!et.test(n)))return{out:t,pre:`if (${t} !== ${n}) return DEFER;
-`}},Fe=(e,t,n)=>{if(!tt(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(en.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:tn(e.kind,t)};switch(e.kind){case"array":return rn(e,t,n);case"literal":return nn(e,t);case"object":return on(e,t,n);default:return}}},rn=(e,t,n)=>{const{inner:r}=e;if(!r)return;const a=n.next(),o=`__arr${String(a)}`,s=`__i${String(a)}`,i=`__e${String(a)}`,l=Fe(r,i,n);if(!l)return;const u=`if (!Array.isArray(${t})) return DEFER;
+`}},pn=(e,t)=>{const n=e.literalValue?.trim();if(!(n===void 0||!rt.test(n)))return{out:t,pre:`if (${t} !== ${n}) return DEFER;
+`}},Me=(e,t,n)=>{if(!at(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(cn.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:un(e.kind,t)};switch(e.kind){case"array":return hn(e,t,n);case"literal":return pn(e,t);case"object":return mn(e,t,n);default:return}}},hn=(e,t,n)=>{const{inner:r}=e;if(!r)return;const a=n.next(),o=`__arr${String(a)}`,i=`__i${String(a)}`,s=`__e${String(a)}`,l=Me(r,s,n);if(!l)return;const u=`if (!Array.isArray(${t})) return DEFER;
 const ${o} = new Array(${t}.length);
-for (let ${s} = 0; ${s} < ${t}.length; ${s}++) {
-const ${i} = ${t}[${s}];
-${l.pre}${o}[${s}] = ${l.out};
+for (let ${i} = 0; ${i} < ${t}.length; ${i}++) {
+const ${s} = ${t}[${i}];
+${l.pre}${o}[${i}] = ${l.out};
 }
-`;return{out:o,pre:u}},an=(e,t,n,r)=>{const a=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||tt(t))return;const{inner:s}=t;if(!s)return;const i=Fe(s,n,r);if(!i)return;const l=r.next(),u=`__has${String(l)}`,p=`__val${String(l)}`,f=`let ${u} = false;
+`;return{out:o,pre:u}},gn=(e,t,n,r)=>{const a=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||at(t))return;const{inner:i}=t;if(!i)return;const s=Me(i,n,r);if(!s)return;const l=r.next(),u=`__has${String(l)}`,p=`__val${String(l)}`,f=`let ${u} = false;
 let ${p};
 if (${n} !== undefined) {
-${i.pre}${p} = ${i.out};
+${s.pre}${p} = ${s.out};
 ${u} = true;
 }
-`;return{entry:`...(${u} ? { ${a}: ${p} } : {})`,pre:f}}const o=Fe(t,n,r);if(o)return{entry:`${a}: ${o.out}`,pre:o.pre}},nt=(e,t,n)=>{let r="";const a=[];for(const o of Object.keys(e)){const s=e[o];if(!s)return;const i=an(o,s,t(o),n);if(!i)return;r+=i.pre,a.push(i.entry)}return{entries:a.join(", "),pre:r}},on=(e,t,n)=>{const r=e.shape??{},a=nt(r,l=>`${t}[${JSON.stringify(l)}]`,n);if(!a)return;const o=n.next(),s=`__obj${String(o)}`,i=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
-${a.pre}const ${s} = { ${a.entries} };
-`;return{out:s,pre:i}},sn=e=>{let t=0;const n=nt(e,r=>`source[${JSON.stringify(r)}]`,{next:()=>(t+=1,t)});if(n)return`(source) => {
+`;return{entry:`...(${u} ? { ${a}: ${p} } : {})`,pre:f}}const o=Me(t,n,r);if(o)return{entry:`${a}: ${o.out}`,pre:o.pre}},ot=(e,t,n)=>{let r="";const a=[];for(const o of Object.keys(e)){const i=e[o];if(!i)return;const s=gn(o,i,t(o),n);if(!s)return;r+=s.pre,a.push(s.entry)}return{entries:a.join(", "),pre:r}},mn=(e,t,n)=>{const r=e.shape??{},a=ot(r,l=>`${t}[${JSON.stringify(l)}]`,n);if(!a)return;const o=n.next(),i=`__obj${String(o)}`,s=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
+${a.pre}const ${i} = { ${a.entries} };
+`;return{out:i,pre:s}},fn=e=>{let t=0;const n=ot(e,r=>`source[${JSON.stringify(r)}]`,{next:()=>(t+=1,t)});if(n)return`(source) => {
 if (typeof source !== "object" || source === null || Array.isArray(source)) return DEFER;
 ${n.pre}return { ${n.entries} };
-}`},k=`// GENERATED by @lunora/codegen — do not edit.
+}`},v=`// GENERATED by @lunora/codegen — do not edit.
 // Run \`lunora codegen\` to regenerate.
 
-`,H=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},rt=/^[A-Za-z_$][\w$]*$/u,ln=/^[\w./-]+$/u,m=(e,t)=>{if(!rt.test(e))throw new Z("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Ee=e=>e.charAt(0).toUpperCase()+e.slice(1),D=e=>rt.test(e)?e:JSON.stringify(e),dn={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},cn=e=>{if(e===void 0)return"unknown";if(!et.test(e))throw new Z("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},O=e=>{const t=dn[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?O(e.inner):"unknown"}>`;case"from":return e.tsType??"unknown";case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return cn(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,r])=>`${D(n)}: ${O(r)}`).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?O(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?O(e.keyType):"string",r=e.valueType?O(e.valueType):"unknown";return`Record<${n}, ${r}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>O(n)).join(" | "):"never";default:return"unknown"}},me=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,r])=>{const a=D(n);if(r.kind==="optional"){const o=r.inner?O(r.inner):"unknown";return`${a}?: ${o}`}return`${a}: ${O(r)}`}).join("; ")} }`},un=e=>e.kind==="optional"||!!e.column?.hasDefault,pn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([r,a])=>{const o=a.kind==="optional"&&a.inner?a.inner:a,s=O(o),i=D(r);return un(a)?`    ${i}?: ${s};`:`    ${i}: ${s};`}).join(`
+`,G=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},st=/^[A-Za-z_$][\w$]*$/u,bn=/^[\w./-]+$/u,m=(e,t)=>{if(!st.test(e))throw new Z("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Fe=e=>e.charAt(0).toUpperCase()+e.slice(1),D=e=>st.test(e)?e:JSON.stringify(e),yn={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},wn=e=>{if(e===void 0)return"unknown";if(!rt.test(e))throw new Z("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},C=e=>{const t=yn[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?C(e.inner):"unknown"}>`;case"from":return e.tsType??"unknown";case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return wn(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,r])=>it(n,r)).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?C(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?C(e.keyType):"string",r=e.valueType?C(e.valueType):"unknown";return`Record<${n}, ${r}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>C(n)).join(" | "):"never";default:return"unknown"}},it=(e,t)=>{const n=D(e);if(t.kind==="optional"){const r=t.inner?C(t.inner):"unknown";return`${n}?: ${r}`}return`${n}: ${C(t)}`},me=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,r])=>it(n,r)).join("; ")} }`},xn=e=>e.kind==="optional"||!!e.column?.hasDefault,kn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([r,a])=>{const o=a.kind==="optional"&&a.inner?a.inner:a,i=C(o),s=D(r);return xn(a)?`    ${s}?: ${i};`:`    ${s}: ${i};`}).join(`
 `),n=t?`
 ${t}
 `:"";return`export interface Insert_${e.name} {
     _id?: Id<"${e.name}">;
-    _creationTime?: number;${n}}`},fr=(e,t=!1)=>{const n=H(t);for(const c of e.tables)m(c.name,"table name");const r=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",a=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",o=e.tables.map(c=>{const g=Object.entries(c.shape).map(([x,v])=>{const T=D(x);if(v.kind==="optional"){const N=v.inner?O(v.inner):"unknown";return`    ${T}?: ${N};`}return`    ${T}: ${O(v)};`}).join(`
+    _creationTime?: number;${n}}`},Tr=(e,t=!1)=>{const n=G(t);for(const c of e.tables)m(c.name,"table name");const r=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",a=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",o=e.tables.map(c=>{const g=Object.entries(c.shape).map(([k,$])=>{const T=D(k);if($.kind==="optional"){const O=$.inner?C($.inner):"unknown";return`    ${T}?: ${O};`}return`    ${T}: ${C($)};`}).join(`
 `),b=g?`
 ${g}
 `:"";return`export interface Doc_${c.name} {
     _id: Id<"${c.name}">;
     _creationTime: number;${b}}`}).join(`
 
-`),s=e.tables.map(c=>`    ${c.name}: Doc_${c.name};`).join(`
-`),i=e.tables.map(c=>{const g=c.indexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
+`),i=e.tables.map(c=>`    ${c.name}: Doc_${c.name};`).join(`
+`),s=e.tables.map(c=>{const g=c.indexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
 `),l=e.tables.map(c=>{const g=c.searchIndexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
 `),u=e.tables.map(c=>{const g=c.rankIndexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
 `),p=e.tables.map(c=>{const g=c.shardMode==="global"?"":(c.geoIndexes??[]).map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
-`),f=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",y=e.tables.map(c=>pn(c)).join(`
+`),f=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",y=e.tables.map(c=>kn(c)).join(`
 
-`),R=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
+`),N=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
 `),d=e.tables.map(c=>{const g=c.relations.map(b=>(m(b.table,"relation target table"),`        ${D(b.name)}: ${b.kind==="one"?"OneRelation":"ManyRelation"}<"${b.table}">;`)).join(`
 `);return g?`    ${c.name}: {
 ${g}
     };`:`    ${c.name}: {};`}).join(`
-`);return`${k}import type {
+`);return`${v}import type {
     DatabaseReaderFacade as DatabaseReaderFacadeOf,
     DatabaseWriterFacade as DatabaseWriterFacadeOf,
     LoadWith as LoadWithOf,
@@ -121,7 +121,7 @@ export type Id<TName extends string> = string & { readonly __table: TName };
 ${o}
 
 export interface DataModel {
-${s}
+${i}
 }
 
 export type Doc<T extends keyof DataModel> = DataModel[T];
@@ -131,7 +131,7 @@ export type Doc<T extends keyof DataModel> = DataModel[T];
  * Used by \`TableReader.withIndex()\` to constrain callers to declared names.
  */
 export interface IndexNamesByTable {
-${i}
+${s}
 }
 
 export type IndexName<T extends keyof DataModel> = IndexNamesByTable[T];
@@ -164,7 +164,7 @@ ${y}
 
 /** Per-table insert shape, accepted by \`ctx.db.<table>.insert(...)\`. */
 export interface InsertModel {
-${R}
+${N}
 }
 
 export type Insert<T extends keyof DataModel> = InsertModel[T];
@@ -234,11 +234,11 @@ export interface OrmWriter extends OrmReader {
     replace: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmReplaceBuilder<T>;
     update: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmUpdateBuilder<T>;
 }
-`},hn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,gn=/^(?:\.\.?\/)*_generated\//u,mn=/\.[A-Za-z]\w*$/u,Me=e=>e.replaceAll(hn,(t,n)=>{const r=n.replace(gn,"./");return`import("${mn.test(r)?r:`${r}.js`}")`}),fn=/import\("@lunora\/(?<pkg>client|do|runtime|server|values)(?<subpath>\/[^"]*)?"\)/gu,at=(e,t)=>t?e.replaceAll(fn,(n,r,a)=>`import("lunorash/${r}${a??""}")`):e,qe=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),bn=e=>e.output===void 0||e.output.kind==="any"?e.returnType:O(e.output),ze=e=>{const t=new Map;for(const r of e){const a=t.get(r.filePath)??[];a.push(r),t.set(r.filePath,a)}const n=([r,a])=>{const o=a.toSorted((s,i)=>s.exportName.localeCompare(i.exportName)).map(s=>{const i=me(s.args),l=Me(bn(s));return`        ${s.exportName}: FunctionReference<"${s.kind}", ${i}, ${l}>;`}).join(`
-`);return`    ${D(S(r))}: {
+`},vn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,lt=/^(?:\.\.?\/)*_generated\//u,dt=/\.[A-Za-z]\w*$/u,qe=e=>e.replaceAll(vn,(t,n)=>{const r=n.replace(lt,"./");return`import("${dt.test(r)?r:`${r}.js`}")`}),$n=/import\("(?<spec>\.\.?\/[^"]+)"\)/gu,Sn=/^(?:\.\.?\/)+/u,Rn=e=>{const t=[];for(const n of e.split("/"))if(!(n===""||n===".")){if(n===".."&&t.length>0&&t.at(-1)!==".."){t.pop();continue}t.push(n)}return t.join("/")},Be=(e,t)=>e.replaceAll($n,(n,r)=>{if(lt.test(r.replace(Sn,"")))return n;const a=t.includes("/")?t.slice(0,t.lastIndexOf("/")):"",o=`../${Rn(`${a}/${r}`)}`;return`import("${dt.test(o)?o:`${o}.js`}")`}),Nn=["client","do","errors","flags","observability","platform","ratelimit","runtime","server","values"],On=new RegExp(String.raw`import\("@lunora/(?<pkg>${Nn.join("|")})(?<subpath>/[^"]*)?"\)`,"gu"),Tn={flags:new Set(["/web"]),platform:new Set},ct=(e,t)=>t?e.replaceAll(On,(n,r,a)=>{const o=Tn[r];return a&&o&&!o.has(a)?n:`import("lunorash/${r}${a??""}")`}):e,je=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),An=e=>e.output===void 0||e.output.kind==="any"?e.returnType:C(e.output),Ze=e=>{const t=new Map;for(const r of e){const a=t.get(r.filePath)??[];a.push(r),t.set(r.filePath,a)}const n=([r,a])=>{const o=a.toSorted((i,s)=>i.exportName.localeCompare(s.exportName)).map(i=>{const s=me(i.args),l=qe(Be(An(i),i.filePath));return`        ${i.exportName}: FunctionReference<"${i.kind}", ${s}, ${l}>;`}).join(`
+`);return`    ${D(R(r))}: {
 ${o}
     };`};return[...t.entries()].toSorted(([r],[a])=>r.localeCompare(a)).map(r=>n(r)).join(`
-`)},yn=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let r="";if(e.length>0&&(r+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),r+=`
+`)},Ln=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let r="";if(e.length>0&&(r+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),r+=`
 /** A typed reference to a durable workflow, addressable for \`cronJobs()\` targets. Mirrors \`@lunora/scheduler\`'s \`WorkflowReference\` structurally. */
 export interface WorkflowReference<Params = Record<string, unknown>> {
     readonly isLunoraWorkflow: true;
@@ -246,8 +246,8 @@ export interface WorkflowReference<Params = Record<string, unknown>> {
     readonly binding: string;
     readonly name: string;
 }
-`,e.length>0){const a=[...e].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=a.map(i=>`    ${i.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${i.exportName}>>;`).join(`
-`),s=a.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.exportName)} },`).join(`
+`,e.length>0){const a=[...e].toSorted((s,l)=>s.exportName.localeCompare(l.exportName)),o=a.map(s=>`    ${s.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${s.exportName}>>;`).join(`
+`),i=a.map(s=>`    ${s.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(s.bindingName)}, name: ${JSON.stringify(s.exportName)} },`).join(`
 `);r+=`
 /** This project's durable workflows, addressable as typed references (e.g. \`crons.daily("digest", …, workflows.digestPipeline, params)\`). */
 export interface WorkflowsRef {
@@ -255,11 +255,11 @@ ${o}
 }
 
 export const workflows: WorkflowsRef = {
-${s}
+${i}
 };
 `,n.push(`import type * as lunoraWorkflowDefinitions from "../workflows.js";
-`)}if(t.length>0){const a=[...t].toSorted((i,l)=>i.exportName.localeCompare(l.exportName)),o=a.map(i=>`    ${i.exportName}: WorkflowReference<AgentRunInput>;`).join(`
-`),s=a.map(i=>`    ${i.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(i.bindingName)}, name: ${JSON.stringify(i.name)} },`).join(`
+`)}if(t.length>0){const a=[...t].toSorted((s,l)=>s.exportName.localeCompare(l.exportName)),o=a.map(s=>`    ${s.exportName}: WorkflowReference<AgentRunInput>;`).join(`
+`),i=a.map(s=>`    ${s.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(s.bindingName)}, name: ${JSON.stringify(s.name)} },`).join(`
 `);r+=`
 /** This project's durable agents, addressable as typed references for \`cronJobs()\` — each fire starts a fresh agent run (e.g. \`crons.daily("sweep", …, agents.support, { input, threadKey })\`). */
 export interface AgentsRef {
@@ -267,11 +267,11 @@ ${o}
 }
 
 export const agents: AgentsRef = {
-${s}
+${i}
 };
 `,n.push(`import type { AgentRunInput } from "@lunora/agent";
-`)}return{block:r,importLine:n.join("")}},wn=()=>Object.keys(Ye().functions).toSorted((e,t)=>e.localeCompare(t)),ot=e=>new Set(e.filter(t=>S(t.filePath)==="agents").map(t=>t.exportName)),xn=()=>new Set(Object.entries(Ye().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),kn=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const r=ot(t),a=xn(),o=t.find(i=>S(i.filePath)==="agents"&&a.has(i.exportName));if(o)throw new Z("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const s=wn().filter(i=>!r.has(i));return s.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
-`,lines:s.map(i=>`    "agents:${i}": lunoraAgentRuntimeFunctions.${i} as unknown as RegisteredLunoraFunction,`).join(`
+`)}return{block:r,importLine:n.join("")}},Cn=()=>Object.keys(tt().functions).toSorted((e,t)=>e.localeCompare(t)),ut=e=>new Set(e.filter(t=>R(t.filePath)==="agents").map(t=>t.exportName)),In=()=>new Set(Object.entries(tt().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),Dn=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const r=ut(t),a=In(),o=t.find(s=>R(s.filePath)==="agents"&&a.has(s.exportName));if(o)throw new Z("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const i=Cn().filter(s=>!r.has(s));return i.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
+`,lines:i.map(s=>`    "agents:${s}": lunoraAgentRuntimeFunctions.${s} as unknown as RegisteredLunoraFunction,`).join(`
 `),prelude:`
 /**
  * The \`@lunora/agent\` runtime component — auto-registered because \`lunora/agents.ts\`
@@ -279,13 +279,13 @@ ${s}
  * subscribe to the public queries (\`agents:agentMessages\` is the live thread view).
  */
 const lunoraAgentRuntimeFunctions = agentComponent().functions;
-`}},vn=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(r=>S(r.filePath)==="sandbox"&&r.exportName==="invoke");if(n)throw new Z("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
-`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},$n=(e,t)=>{if(e.length===0)return[];const n=ot(t),r=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const a of e)a.voice&&r.push({args:{threadKey:{kind:"string"}},exportName:`${a.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return r.filter(a=>!n.has(a.exportName))},Sn=(e,t)=>{if(e.length===0)return[];const n=new Set(t.filter(r=>S(r.filePath)==="mutators").map(r=>r.exportName));return e.filter(r=>!n.has(r.exportName)).map(r=>({args:r.args,exportName:r.exportName,filePath:r.filePath,kind:"mutation",returnType:r.returnType}))},Rn=e=>{const t=e.filter(s=>s.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const s of t){const i=n.get(s.filePath)??[];i.push(s),n.set(s.filePath,i)}const r=[...n.entries()].toSorted(([s],[i])=>s.localeCompare(i)),a=r.map(([s,i])=>{const l=i.map(u=>{const p=Me(u.chunkType??"unknown");return`        ${D(u.exportName)}: HttpStreamRef<${p}, ${me(u.searchParams)}, ${me(u.params)}>;`}).join(`
-`);return`    ${D(S(s))}: {
+`}},_n=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(r=>R(r.filePath)==="sandbox"&&r.exportName==="invoke");if(n)throw new Z("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
+`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},En=(e,t)=>{if(e.length===0)return[];const n=ut(t),r=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const a of e)a.voice&&r.push({args:{threadKey:{kind:"string"}},exportName:`${a.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return r.filter(a=>!n.has(a.exportName))},Pn=(e,t)=>{if(e.length===0)return[];const n=new Set(t.filter(r=>R(r.filePath)==="mutators").map(r=>r.exportName));return e.filter(r=>!n.has(r.exportName)).map(r=>({args:r.args,exportName:r.exportName,filePath:r.filePath,kind:"mutation",returnType:r.returnType}))},Fn=e=>{const t=e.filter(i=>i.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const i of t){const s=n.get(i.filePath)??[];s.push(i),n.set(i.filePath,s)}const r=[...n.entries()].toSorted(([i],[s])=>i.localeCompare(s)),a=r.map(([i,s])=>{const l=s.map(u=>{const p=qe(Be(u.chunkType??"unknown",u.filePath));return`        ${D(u.exportName)}: HttpStreamRef<${p}, ${me(u.searchParams)}, ${me(u.params)}>;`}).join(`
+`);return`    ${D(R(i))}: {
 ${l}
     };`}).join(`
-`),o=r.map(([s,i])=>{const l=i.map(u=>`        ${D(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
-`);return`    ${D(S(s))}: {
+`),o=r.map(([i,s])=>{const l=s.map(u=>`        ${D(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
+`);return`    ${D(R(i))}: {
 ${l}
     },`}).join(`
 `);return{block:`
@@ -297,15 +297,15 @@ ${a}
 export const httpStreams: HttpStreamsRef = {
 ${o}
 };
-`,body:a}},br=e=>{const{agents:t=[],functions:n,httpRoutes:r=[],mutators:a=[],useUmbrella:o=!1,workflows:s=[]}=e,i=H(o),l=[...n.filter($=>$.visibility!=="internal"),...$n(t,n),...Sn(a,n)],u=n.filter($=>$.visibility==="internal"),p=ze(l),f=ze(u),y=Rn(r),R=`${p}
+`,body:a}},Ar=e=>{const{agents:t=[],functions:n,httpRoutes:r=[],mutators:a=[],useUmbrella:o=!1,workflows:i=[]}=e,s=G(o),l=[...n.filter(S=>S.visibility!=="internal"),...En(t,n),...Pn(a,n)],u=n.filter(S=>S.visibility==="internal"),p=Ze(l),f=Ze(u),y=Fn(r),N=`${p}
 ${f}
-${y.body}`,d=qe(R),c=d.length>0?`
+${y.body}`,d=je(N),c=d.length>0?`
 import type { ${d.join(", ")} } from "./dataModel.js";
 `:"",g=p?`
 ${p}
 `:"",b=f?`
 ${f}
-`:"",x=yn(s,t),v=`export interface ApiTypes {${g}}
+`:"",k=Ln(i,t),$=`export interface ApiTypes {${g}}
 
 export const api = anyApi as unknown as ApiTypes;
 
@@ -313,10 +313,10 @@ export const api = anyApi as unknown as ApiTypes;
 export interface InternalApiTypes {${b}}
 
 export const internal = anyApi as unknown as InternalApiTypes;
-${x.block}${y.block}`,T=[...v.includes("FunctionReference<")?["FunctionReference"]:[],...y.block===""?[]:["HttpStreamRef"]],N=T.length>0?`import type { ${T.join(", ")} } from "${i.client}";
-`:"";return at(`${k}import { anyApi } from "${i.serverTypes}";
-${N}${x.importLine}${c}
-${v}`,o)},yr=e=>e?`${k}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
+${k.block}${y.block}`,T=[...$.includes("FunctionReference<")?["FunctionReference"]:[],...y.block===""?[]:["HttpStreamRef"]],O=T.length>0?`import type { ${T.join(", ")} } from "${s.client}";
+`:"";return ct(`${v}import { anyApi } from "${s.client}";
+${O}${k.importLine}${c}
+${$}`,o)},Lr=e=>e?`${v}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
 import type { SeedClient, SeedClientOptions } from "@lunora/seed";
 
 import schema from "../schema.js";
@@ -333,8 +333,8 @@ import type { InsertModel } from "./dataModel.js";
  * const { posts } = await seed.posts((x) => x([10, 20]));
  */
 export const createSeedClient = (options?: SeedClientOptions): SeedClient<InsertModel> => createSeedClientBase<InsertModel>(schema, options);
-`:"",wr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const r=H(n),a=l=>l.table===void 0?"Row":`Doc<${JSON.stringify(l.table)}> & Row`,o=e.map(l=>{m(l.exportName,"shape export name");const u=a(l),p=me(l.args),f=Object.keys(l.args).length>0,y=f?`        args: ${p};`:`        args?: ${p};`,R=f?`(args: ${p}) => void`:`(args?: ${p}) => void`,d=`${l.exportName}CollectionOptions`;return`/** Options for the \`${l.exportName}\` shape binding. */
-export interface ${Ee(d)} {
+`:"",Cr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const r=G(n),a=l=>l.table===void 0?"Row":`Doc<${JSON.stringify(l.table)}> & Row`,o=e.map(l=>{m(l.exportName,"shape export name");const u=a(l),p=me(l.args),f=Object.keys(l.args).length>0,y=f?`        args: ${p};`:`        args?: ${p};`,N=f?`(args: ${p}) => void`:`(args?: ${p}) => void`,d=`${l.exportName}CollectionOptions`;return`/** Options for the \`${l.exportName}\` shape binding. */
+export interface ${Fe(d)} {
 ${y}
     /**
      * Share the optimistic-overlay gate with other collections + mutators on this
@@ -359,7 +359,7 @@ ${y}
  * \`createCollection\`, plus the \`checkpoints\` registry to hand \`bindMutators\` and
  * \`scope\` to re-point the subscription.
  */
-export const ${l.exportName}CollectionOptions = (options: ${Ee(d)}): LunoraCollectionOptions<${u}> =>
+export const ${l.exportName}CollectionOptions = (options: ${Fe(d)}): LunoraCollectionOptions<${u}> =>
     lunoraCollectionOptions<${u}>({
         client: options.client,
         ...(options.checkpoints === undefined ? {} : { checkpoints: options.checkpoints }),
@@ -372,22 +372,22 @@ export const ${l.exportName}CollectionOptions = (options: ${Ee(d)}): LunoraColle
 
 /** Live collection for the \`${l.exportName}\` shape, with its sync controls. */
 export const ${l.exportName}Collection = (
-    options: ${Ee(d)},
-): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${R} } => {
+    options: ${Fe(d)},
+): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${N} } => {
     const { checkpoints, config, scope } = ${l.exportName}CollectionOptions(options);
 
     return { checkpoints, collection: createCollection(config), scope };
 };`}).join(`
 
-`),s=qe(o),i=s.length>0?`import type { ${s.join(", ")} } from "./dataModel.js";
-`:"";return`${k}import type { LunoraClient, SubscriptionError } from "${r.client}";
+`),i=je(o),s=i.length>0?`import type { ${i.join(", ")} } from "./dataModel.js";
+`:"";return`${v}import type { LunoraClient, SubscriptionError } from "${r.client}";
 import { lunoraCollectionOptions } from "@lunora/db/collections";
 import type { CheckpointRegistry, LunoraCollectionOptions, Row } from "@lunora/db";
 import type { Collection } from "@tanstack/db";
 import { createCollection } from "@tanstack/db";
-${i}
+${s}
 ${o}
-`},Nn=(e,t)=>`lunora_${S(e)}_${String(t)}`,On=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
+`},Mn=(e,t)=>`lunora_${R(e)}_${String(t)}`,qn=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
     const registered = LUNORA_FUNCTIONS[functionPath];
 
     if (!registered) {
@@ -395,30 +395,30 @@ ${o}
     }
 
     return (await registered.handler(context, args ?? {})) as R;
-};`,Tn=(e,t,n=[],r=[])=>{const a=new Map,o=d=>{a.has(d)||a.set(d,Nn(d,a.size))};for(const d of e)o(d.filePath);for(const d of t)o(d.filePath);for(const d of n)o(d.filePath);for(const d of r)o(d.filePath);const s=[...a.entries()].map(([d,c])=>{if(!ln.test(d))throw new Z("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(d)}`);return`import * as ${c} from "../${d}.js";`}).join(`
-`),i=e.map(d=>`    "${S(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+};`,Bn=(e,t,n=[],r=[])=>{const a=new Map,o=d=>{a.has(d)||a.set(d,Mn(d,a.size))};for(const d of e)o(d.filePath);for(const d of t)o(d.filePath);for(const d of n)o(d.filePath);for(const d of r)o(d.filePath);const i=[...a.entries()].map(([d,c])=>{if(!bn.test(d))throw new Z("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(d)}`);return`import * as ${c} from "../${d}.js";`}).join(`
+`),s=e.map(d=>`    "${R(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
 `),l=t.map(d=>`    ${JSON.stringify(d.id)}: ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredDataMigration,`).join(`
-`),u=n.map(d=>`    "${S(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),u=n.map(d=>`    "${R(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
 `),p=r.map(d=>`    "${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredShape,`).join(`
-`),f=n.map(d=>`${S(d.filePath)}:${d.exportName}`),y=[i,u].filter(d=>d.length>0).join(`
-`),R=e.map(d=>{if(d.lifecycle||Object.keys(d.args).length===0)return;const c=sn(d.args);return c===void 0?void 0:`installCompiledValidatorMap(${a.get(d.filePath)??""}.${d.exportName}.args, ${c});`}).filter(d=>d!==void 0).join(`
+`),f=n.map(d=>`${R(d.filePath)}:${d.exportName}`),y=[s,u].filter(d=>d.length>0).join(`
+`),N=e.map(d=>{if(d.lifecycle||Object.keys(d.args).length===0)return;const c=fn(d.args);return c===void 0?void 0:`installCompiledValidatorMap(${a.get(d.filePath)??""}.${d.exportName}.args, ${c});`}).filter(d=>d!==void 0).join(`
 `);return{dispatchBody:y.length>0?`
 ${y}
-`:"",importBlock:s.length>0?`${s}
+`:"",importBlock:i.length>0?`${i}
 
-`:"",installBlock:R,migrationBody:l.length>0?`
+`:"",installBlock:N,migrationBody:l.length>0?`
 ${l}
 `:"",mutatorPaths:f,shapeBody:p.length>0?`
 ${p}
-`:""}},An=e=>{const t=new Map;for(const a of e){const o=t.get(a.filePath)??[];o.push(a),t.set(a.filePath,o)}const n=[...t.entries()].toSorted(([a],[o])=>a.localeCompare(o)),r=n.map(([a,o])=>{const s=o.map(i=>{const l=me(i.args),u=l==="{}"?"?":"",p=Me(i.returnType);return i.kind==="stream"?`        ${i.exportName}: (args${u}: ${l}) => Promise<AsyncIterable<${p}>>;`:`        ${i.exportName}: (args${u}: ${l}) => Promise<${p}>;`}).join(`
-`);return`    ${D(S(a))}: {
-${s}
-    };`}).join(`
-`);return{implementation:n.map(([a,o])=>{const s=S(a),i=o.map(l=>`        ${l.exportName}: (args) => callRegistered(context, "${s}:${l.exportName}", args),`).join(`
-`);return`    ${D(s)}: {
+`:""}},jn=e=>{const t=new Map;for(const a of e){const o=t.get(a.filePath)??[];o.push(a),t.set(a.filePath,o)}const n=[...t.entries()].toSorted(([a],[o])=>a.localeCompare(o)),r=n.map(([a,o])=>{const i=o.map(s=>{const l=me(s.args),u=l==="{}"?"?":"",p=qe(Be(s.returnType,s.filePath));return s.kind==="stream"?`        ${s.exportName}: (args${u}: ${l}) => Promise<AsyncIterable<${p}>>;`:`        ${s.exportName}: (args${u}: ${l}) => Promise<${p}>;`}).join(`
+`);return`    ${D(R(a))}: {
 ${i}
+    };`}).join(`
+`);return{implementation:n.map(([a,o])=>{const i=R(a),s=o.map(l=>`        ${l.exportName}: (args) => callRegistered(context, "${i}:${l.exportName}", args),`).join(`
+`);return`    ${D(i)}: {
+${s}
     },`}).join(`
-`),types:r}},Ln=(e,t=[])=>{const n=new Set;for(const r of e.tables)for(const a of Object.values(r.shape)){const o=a.kind==="optional"&&a.inner?a.inner:a;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const r of t)r!==""&&r!=="default"&&n.add(r);return["default",...[...n].toSorted((r,a)=>r.localeCompare(a))]},xr=({agents:e=[],containers:t=[],env:n,hasAccessFacade:r=!1,hasAi:a=!1,hasAnalytics:o=!1,hasBrowser:s=!1,hasFlags:i=!1,hasHyperdrive:l=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:f=!1,hasPayments:y=!1,hasPipelines:R=!1,hasR2sql:d=!1,hasX402:c=!1,identity:g,queues:b=[],schema:x,storageRuleBuckets:v=[],useUmbrella:T=!1,workflows:N=[]}={})=>{const $=H(T),w=Ln(x??{tables:[]},v).map(h=>JSON.stringify(h)).join(" | "),E=a?`import type { LunoraAi } from "@lunora/ai";
+`),types:r}},Wn=(e,t=[])=>{const n=new Set;for(const r of e.tables)for(const a of Object.values(r.shape)){const o=a.kind==="optional"&&a.inner?a.inner:a;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const r of t)r!==""&&r!=="default"&&n.add(r);return["default",...[...n].toSorted((r,a)=>r.localeCompare(a))]},Ir=({agents:e=[],containers:t=[],env:n,hasAccessFacade:r=!1,hasAi:a=!1,hasAnalytics:o=!1,hasBrowser:i=!1,hasFlags:s=!1,hasHyperdrive:l=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:f=!1,hasPayments:y=!1,hasPipelines:N=!1,hasR2sql:d=!1,hasX402:c=!1,identity:g,queues:b=[],schema:k,storageRuleBuckets:$=[],useUmbrella:T=!1,workflows:O=[]}={})=>{const S=G(T),x=Wn(k??{tables:[]},$).map(h=>JSON.stringify(h)).join(" | "),P=a?`import type { LunoraAi } from "@lunora/ai";
 `:"",ee=a?`
     readonly ai: LunoraAi;`:"",F=y?`import type { LunoraPayment } from "@lunora/payment";
 `:"",te=y?`
@@ -429,11 +429,11 @@ ${i}
     readonly containers: {${t.map(h=>`
         readonly ${h.exportName}: ContainerAccessor;`).join("")}
     };`:"",L=[...a?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...t.map(h=>(m(h.bindingName,`container binding "${h.bindingName}"`),`    /** Durable Object namespace for the \`${h.exportName}\` container. */
-    readonly ${h.bindingName}?: unknown;`)),...N.map(h=>(m(h.bindingName,`workflow binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` workflow. */
+    readonly ${h.bindingName}?: unknown;`)),...O.map(h=>(m(h.bindingName,`workflow binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` workflow. */
     readonly ${h.bindingName}?: unknown;`)),...b.map(h=>(m(h.bindingName,`queue binding "${h.bindingName}"`),`    /** Queue producer binding for the \`${h.exportName}\` queue. */
     readonly ${h.bindingName}?: unknown;`)),...e.map(h=>(m(h.bindingName,`agent binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` agent. */
     readonly ${h.bindingName}?: unknown;`))].join(`
-`),_=`
+`),I=`
 
 /**
  * This project's Cloudflare bindings, as far as codegen can discover them from
@@ -451,21 +451,21 @@ ${L}`:""}
 }
 
 /** Alias for {@link CloudflareBindings} — the typed shape of \`env\`. */
-export type Env = CloudflareBindings;`,M=(h,_e)=>_e?Zt.get(h)?.field??"":"",re=M("kv",p),ae=M("analytics",o),xe=M("hyperdrive",l),ke=M("browser",s),ve=M("images",u),oe=M("pipelines",R),K=M("r2sql",d),P=(x?.vectorIndexes.length??0)>0,Q=P?' | "vectors"':"",X=P?`
-    readonly vectors: VectorSearch<VectorIndexName>;`:"",ie=P?`
-    readonly vectors: VectorSearchReader<VectorIndexName>;`:"",J=P?`import type { VectorSearch, VectorSearchReader } from "${$.server}";
+export type Env = CloudflareBindings;`,M=(h,_e)=>_e?dn.get(h)?.field??"":"",re=M("kv",p),ae=M("analytics",o),ke=M("hyperdrive",l),ve=M("browser",i),$e=M("images",u),oe=M("pipelines",N),K=M("r2sql",d),E=(k?.vectorIndexes.length??0)>0,Q=E?' | "vectors"':"",X=E?`
+    readonly vectors: VectorSearch<VectorIndexName>;`:"",se=E?`
+    readonly vectors: VectorSearchReader<VectorIndexName>;`:"",H=E?`import type { VectorSearch, VectorSearchReader } from "${S.server}";
 import type { VectorIndexName } from "./dataModel.js";
 `:"",j=r?`
     /** Verified Cloudflare Access identity — a synchronous facade over the resolved claims (email / groups / hasGroup / claims). Anonymous when no Access token is present. */
-    readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",W=i?`
+    readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",W=s?`
     /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
-    readonly flags: import("${$.flags}").LunoraFlags;`:"",U=f?`
+    readonly flags: import("${S.flags}").LunoraFlags;`:"",U=f?`
     /** Multi-channel notifications (@lunora/notify): send / chat / inApp / webhook plus the push device sub-facade. Sends are external I/O — confine them to action handlers. */
     readonly notify: import("@lunora/notify").LunoraNotify;
     /** Device push sub-facade — the same object as ctx.notify.push (register / send / broadcast). Sends belong in action handlers. */
-    readonly push: import("@lunora/notify").LunoraPush;`:"",q=N.length>0,Y=q?`import type { WorkflowHandle } from "@lunora/workflow";
+    readonly push: import("@lunora/notify").LunoraPush;`:"",q=O.length>0,Y=q?`import type { WorkflowHandle } from "@lunora/workflow";
 import type * as lunoraWorkflowDefinitions from "../workflows.js";
-`:"",$e=q?`
+`:"",Se=q?`
 
 /** Params type carried by a \`defineWorkflow\` definition (its phantom \`__params\`). */
 type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params }
@@ -476,12 +476,12 @@ type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params
 
 /** This project's declared workflows, addressable from \`ctx.workflows\` by their \`lunora/workflows.ts\` export name. */
 export interface LunoraWorkflows {
-${N.map(h=>`    get(name: ${JSON.stringify(h.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${h.exportName}>>;`).join(`
+${O.map(h=>`    get(name: ${JSON.stringify(h.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${h.exportName}>>;`).join(`
 `)}
 }`:"",fe=q?' | "workflows"':"",be=q?`
-    readonly workflows: LunoraWorkflows;`:"",se=b.length>0,Se=se?`import type { QueueProducer } from "@lunora/queue";
+    readonly workflows: LunoraWorkflows;`:"",ie=b.length>0,Re=ie?`import type { QueueProducer } from "@lunora/queue";
 import type * as lunoraQueueDefinitions from "../queues.js";
-`:"",Re=se?`
+`:"",Ne=ie?`
 
 /** Message body type carried by a \`defineQueue\` definition (its phantom \`__lunoraBody\`). */
 type QueueBodyOf<Definition> = Definition extends { __lunoraBody?: infer Body } ? (unknown extends Body ? unknown : NonNullable<Body>) : unknown;
@@ -490,29 +490,29 @@ type QueueBodyOf<Definition> = Definition extends { __lunoraBody?: infer Body }
 export interface LunoraQueues {
 ${b.map(h=>`    readonly ${h.exportName}: QueueProducer<QueueBodyOf<typeof lunoraQueueDefinitions.${h.exportName}>>;`).join(`
 `)}
-}`:"",ye=se?`
-    readonly queues: LunoraQueues;`:"",le=e.length>0,Ne=le?`import type { AgentHandle } from "@lunora/agent";
-`:"",Oe=le?`
+}`:"",ye=ie?`
+    readonly queues: LunoraQueues;`:"",le=e.length>0,Oe=le?`import type { AgentHandle } from "@lunora/agent";
+`:"",Te=le?`
 
 /** This project's declared agents, addressable from \`ctx.agents\` by their \`lunora/agents.ts\` export name. */
 export interface LunoraAgents {
 ${e.map(h=>(m(h.exportName,`agent export "${h.exportName}"`),`    readonly ${h.exportName}: AgentHandle;`)).join(`
 `)}
 }`:"",we=le?`
-    readonly agents: LunoraAgents;`:"",Te=g?`import type { InferIdentity } from "${$.server}";
+    readonly agents: LunoraAgents;`:"",Ae=g?`import type { InferIdentity } from "${S.server}";
 import type * as lunoraIdentityContract from "../identity.js";
-`:"",Ae=g?`
+`:"",Le=g?`
 
 /** This app's declared identity claim contract (\`defineIdentity\` in \`lunora/identity.ts\`) — the typed shape of \`ctx.auth.getIdentity()\`, the RLS policy \`ctx.auth.identity\`, and the \`authorizeShard\`/\`authorizeFanOut\` identity argument. */
 export type Identity = InferIdentity<typeof lunoraIdentityContract.${g.exportName}>;
 
 /** \`ctx.auth\` narrowed so \`getIdentity()\` resolves the declared {@link Identity} contract instead of the untyped claim bag. */
 type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: () => Promise<Identity | null> };`:"",de=g?' | "auth"':"",ce=g?`
-    readonly auth: NarrowedAuth;`:"",Le=g?", Identity":"",Ce=n?`import type * as lunoraEnvContract from "../env.js";
+    readonly auth: NarrowedAuth;`:"",Ce=g?", Identity":"",Ie=n?`import type * as lunoraEnvContract from "../env.js";
 `:"",De=n?`
 
 /** This app's declared env contract (\`defineEnv\` in \`lunora/env.ts\`) — the validated, coercion-aware shape of \`ctx.env\`. */
-export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",ue=n?' | "env"':"",pe=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${k}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${$.server}";
+export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",ue=n?' | "env"':"",pe=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${v}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${S.server}";
 import type {
     ActionBuilder,
     ActionCtx as ActionCtxBase,
@@ -533,14 +533,14 @@ import type {
     Storage as StorageBase,
     TableReader,
     Validator,
-} from "${$.server}";
+} from "${S.server}";
 
-import type { DataModel, DatabaseReaderFacade, DatabaseWriterFacade, Doc, Id as IdOfTable, OrmReader, OrmWriter, Relations, TableName } from "./dataModel.js";
-${J}${E}${F}${ne}${A}${Y}${Se}${Ne}${Te}${Ce}
+import type { DataModel, DatabaseReaderFacade, DatabaseWriterFacade, Doc, GeoIndexNamesByTable, Id as IdOfTable, IndexNamesByTable, OrmReader, OrmWriter, Relations, SearchIndexNamesByTable, TableName } from "./dataModel.js";
+${H}${P}${F}${ne}${A}${Y}${Re}${Oe}${Ae}${Ie}
 export type { AppTableName, DataModel, Doc, Id, TableName } from "./dataModel.js";
 
 /** Storage buckets this schema declares (\`v.storage("name")\`), narrowing \`ctx.storage.bucket(name)\`. */
-export type StorageBucketName = ${w};${_}${$e}${Re}${Oe}${Ae}${De}
+export type StorageBucketName = ${x};${I}${Se}${Ne}${Te}${Le}${De}
 
 /**
  * Project-typed contexts. The base contexts from \`@lunora/server\` are
@@ -559,8 +559,17 @@ export type StorageBucketName = ${w};${_}${$e}${Re}${Oe}${Ae}${De}
  * Intersected with the wide \`(string) => TableReader\` signature so the bound
  * \`ctx.db\` is still structurally assignable to schema-agnostic consumers that
  * call \`db.query(someString)\` (e.g. \`@lunora/ratelimit\`'s \`createDbStore\`).
+ *
+ * The three index-name unions are what make \`.withIndex("by_TYPO")\` a compile
+ * error: each resolves to the table's declared names, or \`never\` when it
+ * declares none of that kind. Without them a renamed or dropped index left
+ * every call site typechecking, and the query either threw at runtime or
+ * degraded silently to a full table scan.
  */
-type TypedTableQuery = (<T extends TableName>(table: T) => TableReader<Doc<T>>) & ((table: string) => TableReader);
+type TypedTableQuery = (<T extends TableName>(
+    table: T,
+) => TableReader<Doc<T>, IndexNamesByTable[T], SearchIndexNamesByTable[T], GeoIndexNamesByTable[T]>) &
+    ((table: string) => TableReader);
 
 /**
  * The point read \`ctx.db.get(id)\`, bound to this schema: an \`Id<"table">\`
@@ -597,7 +606,7 @@ type TypedAsId = <T extends string>(tableName: AsIdTable<T>, id: string) => IdOf
 export interface QueryCtx extends Omit<QueryCtxBase, "db" | "storage"${Q}${de}${ue}> {
     readonly db: Omit<DatabaseReader, "asId" | "query" | "get"> & DatabaseReaderFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmReader;
-    readonly storage: ReadOnlyStorage<StorageBucketName>;${ie}${j}${re}${W}${U}${ae}${pe}${ce}
+    readonly storage: ReadOnlyStorage<StorageBucketName>;${se}${j}${re}${W}${U}${ae}${pe}${ce}
 }
 
 export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${Q}${fe}${de}${ue}> {
@@ -609,7 +618,7 @@ export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${Q}$
 export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${Q}${fe}${de}${ue}> {
     readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmWriter;
-    readonly storage: StorageBase<StorageBucketName>;${X}${j}${ee}${te}${B}${z}${re}${W}${U}${xe}${ke}${ve}${ae}${oe}${K}${pe}${be}${ye}${we}${ce}
+    readonly storage: StorageBase<StorageBucketName>;${X}${j}${ee}${te}${B}${z}${re}${W}${U}${ke}${ve}${$e}${ae}${oe}${K}${pe}${be}${ye}${we}${ce}
 }
 
 /**
@@ -642,7 +651,7 @@ export const internalAction = lunoraBuilders.internalAction as unknown as Intern
 /**
  * \`defineMutator\` bound to this project's typed {@link MutationCtx} — declare
  * custom mutators (\`lunora/mutators.ts\`) with it instead of importing from
- * \`${$.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
+ * \`${S.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
  * schema-typed \`ctx.db\` (\`ctx.db.query("nodes")\` resolves \`Doc<"nodes">\`,
  * \`ctx.db.patch(id, …)\` takes an \`Id<"nodes">\`) with no hand-written ctx type and
  * no \`as unknown as\` cast. Runtime-identical to the package export; only the
@@ -667,7 +676,7 @@ export const defineMutator = defineMutatorBase as unknown as <Args extends Recor
  * Runtime-identical to \`@lunora/server\`'s \`definePolicy\`; only the types narrow,
  * so the \`rls()\` chain discovers a policy authored either way the same.
  */
-export const definePolicy = createPolicyDsl<DataModel, Relations${Le}>();
+export const definePolicy = createPolicyDsl<DataModel, Relations${Ce}>();
 
 /**
  * The validator builder \`v\`, with \`v.id(...)\` constrained to THIS schema's
@@ -684,13 +693,13 @@ export const definePolicy = createPolicyDsl<DataModel, Relations${Le}>();
 export const v = vBase as unknown as Omit<typeof vBase, "id"> & {
     id: <T extends TableName>(table: T) => ColumnValidator<IdOfTable<T>, IdOfTable<T>>;
 };
-`},Cn=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${S(n.filePath)}:${n.exportName}`);return t},kr=e=>{const{agents:t=[],functions:n,migrations:r=[],mutators:a=[],shapes:o=[],useUmbrella:s=!1,usesSandbox:i=!1}=e,l=n.length>0,u=H(s),{dispatchBody:p,importBlock:f,installBlock:y,migrationBody:R,mutatorPaths:d,shapeBody:c}=Tn(n,r,a,o),g=kn(t,n),b=vn(i,n),x=[g.lines,b.lines].filter(_=>_.length>0).join(`
-`);let v=p;x.length>0&&(v=p.length>0?`${p.trimEnd()}
-${x}
+`},Un=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${R(n.filePath)}:${n.exportName}`);return t},Dr=e=>{const{agents:t=[],functions:n,migrations:r=[],mutators:a=[],shapes:o=[],useUmbrella:i=!1,usesSandbox:s=!1}=e,l=n.length>0,u=G(i),{dispatchBody:p,importBlock:f,installBlock:y,migrationBody:N,mutatorPaths:d,shapeBody:c}=Bn(n,r,a,o),g=Dn(t,n),b=_n(s,n),k=[g.lines,b.lines].filter(I=>I.length>0).join(`
+`);let $=p;k.length>0&&($=p.length>0?`${p.trimEnd()}
+${k}
 `:`
-${x}
-`);const T=Cn(n),N=o.length>0?`import type { RegisteredShape } from "${u.server}";
-`:"",$=o.length>0?`
+${k}
+`);const T=Un(n),O=o.length>0?`import type { RegisteredShape } from "${u.server}";
+`:"",S=o.length>0?`
 /**
  * Replication-shape registry — one entry per \`defineShape\` in \`lunora/shapes.ts\`.
  * The generated ShardDO's \`resolveShape\` override looks a shape up by name and
@@ -698,14 +707,14 @@ ${x}
  * \`shape_subscribe\` (reads-as-permissions).
  */
 export const LUNORA_SHAPES: Record<string, RegisteredShape> = {${c}};
-`:"",w=d.length>0?`
+`:"",x=d.length>0?`
 /**
  * Custom-mutator function paths — the \`LUNORA_FUNCTIONS\` keys the generated
  * ShardDO's \`isCustomMutator\` override routes through the client-watermark push
  * protocol (\`x-lunora-client-id\`/\`x-lunora-client-seq\` ordering).
  */
-export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${d.map(_=>JSON.stringify(_)).join(", ")}]);
-`:"",E=y.length>0?`import { DEFER_VALIDATION as DEFER, installCompiledValidatorMap } from "${u.values}";
+export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${d.map(I=>JSON.stringify(I)).join(", ")}]);
+`:"",P=y.length>0?`import { DEFER_VALIDATION as DEFER, installCompiledValidatorMap } from "${u.values}";
 `:"",ee=y.length>0?`
 /**
  * AOT-compiled argument validators (Worker-safe, no \`eval\`). Each is installed
@@ -713,14 +722,14 @@ export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${d.map(_=>JSO
  * parser as a zero-allocation fast path; anything it can't model is deferred.
  */
 ${y}
-`:"",F=An(n),te=F.types?`
+`:"",F=jn(n),te=F.types?`
 ${F.types}
 `:"",ne=F.implementation?`
 ${F.implementation}
-`:"",B=qe(F.types),A=B.length>0?`import type { ${B.join(", ")} } from "./dataModel.js";
-`:"",z=l?"context":"_context",L=l?`${On}
+`:"",B=je(F.types),A=B.length>0?`import type { ${B.join(", ")} } from "./dataModel.js";
+`:"",z=l?"context":"_context",L=l?`${qn}
 
-`:"";return at(`${k}${f}${g.importLine}${b.importLine}${E}${N}import { LunoraError } from "${u.server}";
+`:"";return ct(`${v}${f}${g.importLine}${b.importLine}${P}${O}import { LunoraError } from "${u.server}";
 import type { ActionCtx, MutationCtx, QueryCtx } from "./server.js";
 ${A}
 /**
@@ -746,8 +755,8 @@ ${g.prelude}${b.prelude}
  * Static dispatch table. The key matches the \`__lunoraRef\` the client
  * emits (\`api[namespace][fn].__lunoraRef === "namespace:fn"\`).
  */
-export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${v}};
-${ee}${$}${w}
+export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${$}};
+${ee}${S}${x}
 /**
  * Connection-lifecycle manifest: the function paths the generated ShardDO
  * dispatches when a client's WebSocket connects (\`connect\`) or disconnects
@@ -755,8 +764,8 @@ ${ee}${$}${w}
  * DO runs every hook under the socket's verified identity via system dispatch.
  */
 export const LUNORA_LIFECYCLE_HOOKS: { connect: readonly string[]; disconnect: readonly string[] } = {
-    connect: [${T.connect.map(_=>JSON.stringify(_)).join(", ")}],
-    disconnect: [${T.disconnect.map(_=>JSON.stringify(_)).join(", ")}],
+    connect: [${T.connect.map(I=>JSON.stringify(I)).join(", ")}],
+    disconnect: [${T.disconnect.map(I=>JSON.stringify(I)).join(", ")}],
 };
 
 /**
@@ -809,8 +818,8 @@ export interface RegisteredDataMigration {
  * Registry of online data migrations keyed by \`defineMigration\`'s \`id\`. The
  * shard DO's admin RPC and the CLI resolve migrations to run through this map.
  */
-export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${R}};
-`,s)},Dn=e=>{const t={};for(const n of e.tables){const r={};for(const[a,o]of Object.entries(n.shape)){const s=o.kind==="optional"&&o.inner?o.inner:o;s.kind==="id"&&s.tableName!==void 0&&(r[a]=s.tableName)}Object.keys(r).length>0&&(t[n.name]=r)}return t},_n=e=>{const t={};for(const n of e.tables){const r=[];for(const[a,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&r.push(a);r.length>0&&(t[n.name]=r)}return t},In=e=>{const t={};for(const n of e.tables){const r=[...n.indexes.map(a=>({fields:[...a.fields],name:a.name,type:"index",...a.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(a=>({fields:[a.field,...a.filterFields??[]],name:a.name,type:"search"})),...(n.geoIndexes??[]).map(a=>({fields:[a.field],name:a.name,type:"geo"})),...n.rankIndexes.map(a=>({fields:a.sortBy.map(o=>o.field),name:a.name,type:"rank"})),...n.vectorIndexes.map(a=>({fields:a.field===void 0?[]:[a.field],name:a.name,type:"vector"}))];r.length>0&&(t[n.name]=r)}return t},Pn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},En=e=>{const t={};for(const n of e.tables){const r=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[a,o]of Object.entries(n.shape)){const s=o.kind==="optional"||!!o.column?.hasDefault,i=o.kind==="optional"&&o.inner?o.inner:o,l={name:a,optional:s,type:i.kind};i.kind==="id"&&i.tableName!==void 0&&(l.ref=i.tableName),i.kind==="storage"&&(l.isStorage=!0),r.push(l)}t[n.name]=r}return t},Fn=e=>e?{importFragment:"serveRelationFanout, ",override:`
+export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${N}};
+`,i)},Kn=e=>{const t={};for(const n of e.tables){const r={};for(const[a,o]of Object.entries(n.shape)){const i=o.kind==="optional"&&o.inner?o.inner:o;i.kind==="id"&&i.tableName!==void 0&&(r[a]=i.tableName)}Object.keys(r).length>0&&(t[n.name]=r)}return t},Qn=e=>{const t={};for(const n of e.tables){const r=[];for(const[a,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&r.push(a);r.length>0&&(t[n.name]=r)}return t},Hn=e=>{const t={};for(const n of e.tables){const r=[...n.indexes.map(a=>({fields:[...a.fields],name:a.name,type:"index",...a.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(a=>({fields:[a.field,...a.filterFields??[]],name:a.name,type:"search"})),...(n.geoIndexes??[]).map(a=>({fields:[a.field],name:a.name,type:"geo"})),...n.rankIndexes.map(a=>({fields:a.sortBy.map(o=>o.field),name:a.name,type:"rank"})),...n.vectorIndexes.map(a=>({fields:a.field===void 0?[]:[a.field],name:a.name,type:"vector"}))];r.length>0&&(t[n.name]=r)}return t},Jn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},Vn=e=>{const t={};for(const n of e.tables){const r=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[a,o]of Object.entries(n.shape)){const i=o.kind==="optional"||!!o.column?.hasDefault,s=o.kind==="optional"&&o.inner?o.inner:o,l={name:a,optional:i,type:s.kind};s.kind==="id"&&s.tableName!==void 0&&(l.ref=s.tableName),s.kind==="storage"&&(l.isStorage=!0),r.push(l)}t[n.name]=r}return t},Gn=e=>e?{importFragment:"serveRelationFanout, ",override:`
         protected override async runRelationFanoutRead(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
             this.ensureMigrated();
 
@@ -818,7 +827,7 @@ export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${R}}
 
             return serveRelationFanout(schema as unknown as SchemaLike, db, functionPath, args);
         }
-`}:{importFragment:"",override:""},Mn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
+`}:{importFragment:"",override:""},zn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
             const aiBinding = config.ai?.(env) ?? (env as Record<string, unknown>).AI;
             // Correlate AI-Gateway-routed calls with the Lunora trace: thread the
             // function path + trace id into createAi, which folds them into the
@@ -849,7 +858,7 @@ const aiStub: LunoraAi = {
         ${t}
     }) as unknown as LunoraAi["workersai"],
 };
-`}},I={build:"",configField:"",contextField:"",importLines:[],stub:""},qn=e=>{if(!e)return I;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
+`}},_={build:"",configField:"",contextField:"",importLines:[],stub:""},Xn=e=>{if(!e)return _;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
             const kvBinding = config.kv?.(env) ?? (env as Record<string, unknown>).KV;
             const kv: Kv = kvBinding ? createKv({ namespace: kvBinding as KVNamespaceLike }) : kvStub;
 `,configField:`
@@ -875,7 +884,7 @@ const kvStub: Kv = {
         ${t}
     },
 };
-`}},Bn=(e,t)=>e?{build:`
+`}},Yn=(e,t)=>e?{build:`
             const flags: import("${t}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
@@ -884,23 +893,23 @@ const kvStub: Kv = {
             });
 `,configField:`
     flags?: (env: Record<string, unknown>) => import("${t}").Provider;`,contextField:`
-                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:I,jn=e=>e?{build:`
+                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:_,Zn=e=>e?{build:`
             const { notify, push } = createNotify(notifyConfig, env, { log, metrics });
 `,configField:"",contextField:`
                 notify,
-                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:I,Wn=e=>e?{build:`
+                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:_,er=e=>e?{build:`
             const envConfig = lunoraEnvContract.${e.exportName}(env);
 `,configField:"",contextField:`
-                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:I,Un=e=>e?{build:`
+                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:_,tr=e=>e?{build:`
             const access = accessFacade(identity, userId);
 `,configField:"",contextField:`
-                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:I,Kn=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const r=i=>`
+                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:_,nr=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const r=s=>`
             const env = (this.env ?? {}) as Record<string, unknown>;
             const flags: import("${n}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
                 provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
-                targetingKey: ${i},
+                targetingKey: ${s},
             });`,a=`
 /** Statically-discovered feature flags (\`ctx.flags.<type>("key")\` reads) served via \`__lunora_admin__:listFlags\` + the reactive \`__lunora_flags__:\` channel. */
 const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number" | "object" | "string" }> = ${JSON.stringify(e,void 0,4)};
@@ -925,7 +934,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
 
             return { configured: true, flags: evaluations };
         }
-`,s=`
+`,i=`
         protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<unknown> {${r("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
             const key = typeof args.key === "string" ? args.key : "";
 
@@ -958,7 +967,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
 
             return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
         }
-`;return{constant:a,evaluateOverride:o,subscriptionOverride:s}},Qn=e=>{if(!e)return I;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
+`;return{constant:a,evaluateOverride:o,subscriptionOverride:i}},rr=e=>{if(!e)return _;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
             const analyticsBinding = config.analytics?.(env) ?? (env as Record<string, unknown>).ANALYTICS;
             const analytics: AnalyticsClient = analyticsBinding ? createAnalytics(analyticsBinding as AnalyticsEngineDatasetLike) : analyticsStub;
 `,configField:`
@@ -972,7 +981,7 @@ const analyticsStub: AnalyticsClient = {
         ${t}
     },
 };
-`}},Jn=e=>{if(!e)return I;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
+`}},ar=e=>{if(!e)return _;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
             const imagesBinding = config.images?.(env) ?? (env as Record<string, unknown>).IMAGES;
             const images: Images = imagesBinding ? createImages({ binding: imagesBinding as ImagesBindingLike }) : imagesStub;
 `,configField:`
@@ -986,7 +995,7 @@ const imagesStub: Images = {
         ${t}
     },
 };
-`}},Vn=e=>e?{build:`
+`}},or=e=>e?{build:`
             const sql: SqlClient = config.sql ? config.sql(env) : sqlStub;
 `,configField:`
     sql?: (env: Record<string, unknown>) => SqlClient;`,contextField:`
@@ -996,7 +1005,7 @@ const sqlStub: SqlClient = {
         throw new Error("ctx.sql: provide a \\\`sql\\\` config thunk that builds a SqlClient from your driver, e.g. \\\`sql: (env) => fromPostgresJs(postgres(env.HYPERDRIVE.connectionString))\\\`.");
     },
 };
-`}:I,Gn=e=>{if(!e)return I;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`. Session reuse (connect/sessions) additionally needs those two exports passed the same way.\");";return{build:`
+`}:_,sr=e=>{if(!e)return _;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`. Session reuse (connect/sessions) additionally needs those two exports passed the same way.\");";return{build:`
             const browser: Browser = config.browser ? config.browser(env) : browserStub;
 `,configField:`
     browser?: (env: Record<string, unknown>) => Browser;`,contextField:`
@@ -1024,7 +1033,7 @@ const browserStub: Browser = {
         ${t}
     },
 };
-`}},Hn=e=>{if(!e)return I;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
+`}},ir=e=>{if(!e)return _;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
             const r2sqlEnv = env as Record<string, unknown>;
             const r2sqlAccountId = (r2sqlEnv.R2_SQL_ACCOUNT_ID ?? r2sqlEnv.CLOUDFLARE_ACCOUNT_ID) as string | undefined;
             const r2sqlToken = r2sqlEnv.R2_SQL_TOKEN as string | undefined;
@@ -1056,7 +1065,7 @@ const r2sqlStub: R2SqlClient = {
         ${t}
     },
 };
-`}},zn=e=>e?{build:`
+`}},lr=e=>e?{build:`
             const pipelinesBinding = config.pipelines?.(env) ?? (env as Record<string, unknown>).PIPELINES;
             const pipelines: PipelineClient = pipelinesBinding ? createPipelines({ binding: pipelinesBinding as PipelineBindingLike }) : pipelinesStub;
 `,configField:`
@@ -1066,14 +1075,14 @@ const pipelinesStub: PipelineClient = {
         throw new Error("ctx.pipelines: no Pipelines binding found. Add a \\\`pipelines\\\` binding (env.PIPELINES) to wrangler.jsonc, or pass \\\`pipelines\\\` to createShardDO().");
     },
 };
-`}:I,vr=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",r=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
+`}:_,_r=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",r=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
 export class ${o.className} extends LunoraContainer {
     public constructor(ctx: ConstructorParameters<typeof LunoraContainer>[0], env: Record<string, unknown>) {
         super(ctx, env, ${o.exportName}, "${o.exportName}"${n});
     }
 }
 `)).join(`
-`),a=e.map(o=>o.exportName).join(", ");return`${k}/**
+`),a=e.map(o=>o.exportName).join(", ");return`${v}/**
  * Container-enabled Durable Object classes for the containers declared in
  * \`lunora/containers.ts\`. Re-export them from your worker entry — wrangler
  * requires each \`containers[].class_name\` to be exported by the worker:
@@ -1091,7 +1100,7 @@ import { ${a} } from "../containers.js";
 
 export { ContainerProxy } from "@lunora/container/do";
 
-${r}`},Xn=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const r of e)m(r.exportName,`container export "${r.exportName}"`),m(r.bindingName,`container binding "${r.bindingName}"`);const n=e.map(r=>{const a=r.maxInstances===void 0?"":`, maxInstances: ${String(r.maxInstances)}`;return`    { binding: "${r.bindingName}", exportName: "${r.exportName}"${a} },`}).join(`
+${r}`},dr=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const r of e)m(r.exportName,`container export "${r.exportName}"`),m(r.bindingName,`container binding "${r.bindingName}"`);const n=e.map(r=>{const a=r.maxInstances===void 0?"":`, maxInstances: ${String(r.maxInstances)}`;return`    { binding: "${r.bindingName}", exportName: "${r.exportName}"${a} },`}).join(`
 `);return{build:`
             const containers = createContainerContext(env, LUNORA_CONTAINERS, ${t?JSON.stringify(t):"undefined"}, this.getCurrentTraceparent());
 `,contextField:`
@@ -1100,14 +1109,14 @@ ${r}`},Xn=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[]
 const LUNORA_CONTAINERS: ReadonlyArray<ContainerBindingSpec> = [
 ${n}
 ];
-`}},$r=e=>{if(e.length===0)return"";const t=e.map(r=>(m(r.exportName,`workflow export "${r.exportName}"`),m(r.className,`workflow class "${r.className}"`),`/** WorkflowEntrypoint for the \`${r.exportName}\` definition (binding \`${r.bindingName}\`). */
+`}},Er=e=>{if(e.length===0)return"";const t=e.map(r=>(m(r.exportName,`workflow export "${r.exportName}"`),m(r.className,`workflow class "${r.className}"`),`/** WorkflowEntrypoint for the \`${r.exportName}\` definition (binding \`${r.bindingName}\`). */
 export class ${r.className} extends LunoraWorkflow<WorkflowParamsOf<typeof ${r.exportName}>, WorkflowOutputOf<typeof ${r.exportName}>> {
     public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
         super(ctx, env, ${r.exportName}, "${r.exportName}");
     }
 }
 `)).join(`
-`),n=e.map(r=>r.exportName).join(", ");return`${k}/**
+`),n=e.map(r=>r.exportName).join(", ");return`${v}/**
  * WorkflowEntrypoint classes for the workflows declared in
  * \`lunora/workflows.ts\`. Re-export them from your worker entry — wrangler
  * requires each \`workflows[].class_name\` to be exported by the worker:
@@ -1128,21 +1137,21 @@ type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params
 /** Output type carried by a \`defineWorkflow\` definition (its phantom \`__output\`), so each entrypoint keeps the authored return type. */
 type WorkflowOutputOf<Definition> = Definition extends { __output?: infer Output } ? Output : unknown;
 
-${t}`},Sr=e=>{if(e.length===0)return"";const t=e.filter(a=>a.voice).length>0,n=e.map(a=>{m(a.exportName,`agent export "${a.exportName}"`),m(a.className,`agent class "${a.className}"`);const o=`/** WorkflowEntrypoint for the \`${a.exportName}\` agent (binding \`${a.bindingName}\`). */
+${t}`},Pr=e=>{if(e.length===0)return"";const t=e.filter(a=>a.voice).length>0,n=e.map(a=>{m(a.exportName,`agent export "${a.exportName}"`),m(a.className,`agent class "${a.className}"`);const o=`/** WorkflowEntrypoint for the \`${a.exportName}\` agent (binding \`${a.bindingName}\`). */
 export class ${a.className} extends LunoraWorkflow<AgentRunInput, AgentRunResult> {
     public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
         super(ctx, env, compileAgentWorkflow(${a.exportName}, "${a.exportName}"), "${a.exportName}");
     }
 }
-`;if(!a.voice)return o;const s=a.voiceClassName??"",i=a.voiceBindingName??"";m(s,`agent voice class "${s}"`);const l=`
-/** Voice-session Durable Object for the \`${a.exportName}\` agent (binding \`${i}\`). */
-export class ${s} extends VoiceSessionDO {
+`;if(!a.voice)return o;const i=a.voiceClassName??"",s=a.voiceBindingName??"";m(i,`agent voice class "${i}"`);const l=`
+/** Voice-session Durable Object for the \`${a.exportName}\` agent (binding \`${s}\`). */
+export class ${i} extends VoiceSessionDO {
     public constructor(ctx: ConstructorParameters<typeof VoiceSessionDO>[0], env: Record<string, unknown>) {
         super(ctx, env, ${a.exportName}, "${a.exportName}");
     }
 }
 `;return`${o}${l}`}).join(`
-`),r=e.map(a=>a.exportName).join(", ");return`${k}/**
+`),r=e.map(a=>a.exportName).join(", ");return`${v}/**
  * WorkflowEntrypoint classes for the agents declared in \`lunora/agents.ts\`.
  * Each \`defineAgent\` compiles a replay-safe tool-loop onto a Cloudflare
  * Workflow. Re-export them from your worker entry — wrangler requires each
@@ -1156,8 +1165,8 @@ import type { AgentRunInput, AgentRunResult } from "@lunora/agent";
 
 import { ${r} } from "../agents.js";
 
-${n}`},Rr=e=>{const t=e.filter(a=>a.mode==="push");if(t.length===0)return"";for(const a of t)m(a.exportName,`queue export "${a.exportName}"`);const n=t.map(a=>a.exportName).join(", "),r=t.map(a=>`    ${JSON.stringify(a.name)}: { definition: ${a.exportName}, exportName: ${JSON.stringify(a.exportName)} },`).join(`
-`);return`${k}/**
+${n}`},Fr=e=>{const t=e.filter(a=>a.mode==="push");if(t.length===0)return"";for(const a of t)m(a.exportName,`queue export "${a.exportName}"`);const n=t.map(a=>a.exportName).join(", "),r=t.map(a=>`    ${JSON.stringify(a.name)}: { definition: ${a.exportName}, exportName: ${JSON.stringify(a.exportName)} },`).join(`
+`);return`${v}/**
  * Push-consumer registry for the queues declared in \`lunora/queues.ts\`. The
  * composed worker's \`queue(batch, env, ctx)\` entry routes each delivered batch
  * by \`batch.queue\` to the matching \`defineQueue\` handler. Wired automatically
@@ -1171,7 +1180,7 @@ import { ${n} } from "../queues.js";
 export const LUNORA_QUEUE_REGISTRY: QueueRegistry = {
 ${r}
 };
-`},Yn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
+`},cr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
 `);return{build:`
             const workflows = createWorkflowContext(env, LUNORA_WORKFLOWS);
 `,contextField:`
@@ -1180,7 +1189,7 @@ ${r}
 const LUNORA_WORKFLOWS: ReadonlyArray<WorkflowBindingSpec> = [
 ${t}
 ];
-`}},Zn=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
+`}},ur=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
 `);return{build:`
             const queues = createQueueContext(env, LUNORA_QUEUES);
 `,contextField:`
@@ -1189,7 +1198,7 @@ ${t}
 const LUNORA_QUEUES: ReadonlyArray<QueueBindingSpec> = [
 ${t}
 ];
-`}},er=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
+`}},pr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
 `);return{build:`
             const agents = createAgentContext(env, LUNORA_AGENTS);
 `,contextField:`
@@ -1198,21 +1207,21 @@ ${t}
 const LUNORA_AGENTS: ReadonlyArray<AgentBindingSpec> = [
 ${t}
 ];
-`}},tr=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
+`}},hr=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
 /** Read-only declared-workflow metadata (discovered from \`lunora/workflows.ts\`) served via \`__lunora_admin__:listWorkflows\` for the studio's workflows view. */
 const LUNORA_WORKFLOWS_INFO: WorkflowsResult = ${JSON.stringify(t,void 0,4)};
 `,override:`
         protected override workflowsMetadata(): WorkflowsResult {
             return LUNORA_WORKFLOWS_INFO;
         }
-`}},nr=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
+`}},gr=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
 /** Read-only declared-queue metadata (discovered from \`lunora/queues.ts\`) served via \`__lunora_admin__:listQueues\` for the studio's queues view. */
 const LUNORA_QUEUES_INFO: QueuesResult = ${JSON.stringify(t,void 0,4)};
 `,override:`
         protected override queuesMetadata(): QueuesResult {
             return LUNORA_QUEUES_INFO;
         }
-`}},rr=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
+`}},mr=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
             const payments: LunoraPayment = config.payment
                 ? paymentsFromContext({ auth: { userId: userId ?? null }, db: db as unknown as LunoraPaymentDbLike }, config.payment(env))
                 : paymentStub;
@@ -1248,7 +1257,7 @@ const paymentStub: LunoraPayment = {
         ${t}
     },
 } as unknown as LunoraPayment;
-`}},ar=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
+`}},fr=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
             const x402: X402Pay = config.x402
                 ? lazyX402Pay(config.x402(env), { getSecret: (name: string) => secrets.get(name) })
                 : x402Stub;
@@ -1260,10 +1269,10 @@ const x402Stub: X402Pay = {
         throw new Error("ctx.x402: no pay rail configured. Pass \\\`x402\\\` to createShardDO().");
     },
 } as unknown as X402Pay;
-`}:{build:"",configField:"",contextField:"",imports:[],stub:""},or=(e,t,n,r)=>["AdvisorProcedure","AdvisoryFinding","DatabaseWriterLike","DataMigrationLike",...r?["FlagsResult"]:[],"KeyRange","MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","TransactionHeadroomTracker","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike","TelemetrySink",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],Nr=({advisories:e=[],advisorProcedures:t=[],agents:n=[],containers:r=[],env:a,flagKeys:o=[],hasAccessFacade:s=!1,hasAi:i=!1,hasAnalytics:l=!1,hasBrowser:u=!1,hasFlags:p=!1,hasHyperdrive:f=!1,hasImages:y=!1,hasKv:R=!1,hasNotify:d=!1,hasPayments:c=!1,hasPipelines:g=!1,hasR2sql:b=!1,hasX402:x=!1,maskMetadata:v,mutators:T=[],queues:N=[],rlsMetadata:$,schema:w,schemaSnapshot:E,shapes:ee=[],storageRules:F,studioFeatures:te,useUmbrella:ne=!1,workflows:B=[]})=>{const A=H(ne),z=T.length>0,L=ee.length>0,_=E===void 0?"":zt(E),M=E===void 0?"":`
+`}:{build:"",configField:"",contextField:"",imports:[],stub:""},br=(e,t,n,r)=>["AdvisorProcedure","AdvisoryFinding","DatabaseWriterLike","DataMigrationLike","ExportRow",...r?["FlagsResult"]:[],"ImportShardResult","KeyRange","MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardExportArgs","RunShardImportArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","TransactionHeadroomTracker","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike","TelemetrySink",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],Mr=({advisories:e=[],advisorProcedures:t=[],agents:n=[],containers:r=[],env:a,flagKeys:o=[],hasAccessFacade:i=!1,hasAi:s=!1,hasAnalytics:l=!1,hasBrowser:u=!1,hasFlags:p=!1,hasHyperdrive:f=!1,hasImages:y=!1,hasKv:N=!1,hasNotify:d=!1,hasPayments:c=!1,hasPipelines:g=!1,hasR2sql:b=!1,hasX402:k=!1,maskMetadata:$,mutators:T=[],queues:O=[],rlsMetadata:S,schema:x,schemaSnapshot:P,shapes:ee=[],storageRules:F,studioFeatures:te,useUmbrella:ne=!1,workflows:B=[]})=>{const A=G(ne),z=T.length>0,L=ee.length>0,I=P===void 0?"":on(P),M=P===void 0?"":`
 /** Structural schema snapshot + its content hash, recorded in the shard's \`__lunora_schema_history\` ledger on cold start so the studio can show a schema-version timeline and diff any two versions. */
-const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(Xt(E))}, json: ${JSON.stringify(_)} };
-`,re=E===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",{build:ae,configField:xe,contextField:ke,stub:ve}=Mn(i),oe=Un(s),K=qn(R),P=Bn(p,A.flags),Q=Kn(o,p,A.flags),X=jn(d),ie=Wn(a),J=Qn(l),j=Jn(y),W=Vn(f),U=Gn(u),q=Hn(b),Y=zn(g),{build:$e,contextField:fe,importLines:be,specs:se}=Zn(N),{build:Se,contextField:Re,importLines:ye,specs:le}=Xn(r,w.jurisdiction),{build:Ne,contextField:Oe,importLines:we,specs:Te}=Yn(B),{build:Ae,contextField:de,importLines:ce,specs:Le}=er(n),{build:Ce,configField:De,contextField:ue,imports:pe,stub:h}=rr(c),{build:_e,configField:st,imports:lt,stub:dt}=ar(x),ct=e,ut=t,pt=$??{policies:[],roles:[]},ht=v??{columns:[]},gt=F??{rules:[]},mt=te??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:ft,override:bt}=tr(B),{constant:yt,override:wt}=nr(N),V=w.vectorIndexes.length>0,he=w.tables.some(C=>C.shardMode==="global"),Ie=w.tables.some(C=>C.shardMode==="global"&&C.globalBackend==="hyperdrive"),je=w.tables.some(C=>C.shardMode==="global"&&C.globalBackend!=="hyperdrive"),G=w.tables.some(C=>C.externalSource!==void 0);if(je&&Ie)throw new Z("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Pe=w.tables.length>0,xt=Dn(w),kt=In(w),vt=En(w),$t=_n(w),We=Pn(w),Ue=or(V,B.length>0,N.length>0,p);L&&Ue.push("WhereInput");const Ke=Fn(he),St=L?`
+const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(sn(P))}, json: ${JSON.stringify(I)} };
+`,re=P===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",{build:ae,configField:ke,contextField:ve,stub:$e}=zn(s),oe=tr(i),K=Xn(N),E=Yn(p,A.flags),Q=nr(o,p,A.flags),X=Zn(d),se=er(a),H=rr(l),j=ar(y),W=or(f),U=sr(u),q=ir(b),Y=lr(g),{build:Se,contextField:fe,importLines:be,specs:ie}=ur(O),{build:Re,contextField:Ne,importLines:ye,specs:le}=dr(r,x.jurisdiction),{build:Oe,contextField:Te,importLines:we,specs:Ae}=cr(B),{build:Le,contextField:de,importLines:ce,specs:Ce}=pr(n),{build:Ie,configField:De,contextField:ue,imports:pe,stub:h}=mr(c),{build:_e,configField:ht,imports:gt,stub:mt}=fr(k),ft=e,bt=t,yt=S??{policies:[],roles:[]},wt=$??{columns:[]},xt=F??{rules:[]},kt=te??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:vt,override:$t}=hr(B),{constant:St,override:Rt}=gr(O),J=x.vectorIndexes.length>0,Ue=new Set(x.tables.filter(w=>typeof w.shardMode=="object"&&w.shardMode.kind==="shardBy").map(w=>w.name)),xe=x.vectorIndexes.some(w=>Ue.has(w.table)),he=x.tables.some(w=>w.shardMode==="global"),Ee=x.tables.some(w=>w.shardMode==="global"&&w.globalBackend==="hyperdrive"),Ke=x.tables.some(w=>w.shardMode==="global"&&w.globalBackend!=="hyperdrive"),V=x.tables.some(w=>w.externalSource!==void 0);if(Ke&&Ee)throw new Z("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Pe=x.tables.length>0,Nt=Kn(x),Ot=Hn(x),Tt=Vn(x),At=Qn(x),Qe=Jn(x),He=br(J,B.length>0,O.length>0,p);L&&He.push("WhereInput");const Je=Gn(he),Lt=L?`
         protected override resolveShape(name: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string } | undefined {
             const shape = LUNORA_SHAPES[name];
 
@@ -1316,15 +1325,15 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
 
             return { columns: shape.columns, effectiveWhere, global: isGlobal, table: shape.table };
         }
-`:"",Rt=z?`
+`:"",Ct=z?`
         protected override isCustomMutator(functionPath: string): boolean {
             return LUNORA_MUTATOR_PATHS.has(functionPath);
         }
-`:"",Nt=L?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",Ot=L?"assertShapeShardable, ":"",ge=[`import type { ${Ue.join(", ")} } from "${A.do}";`,`import { applyCdcChanges, ${Ot}createReadFootprint, createShardCtxDb, ${G?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}runDataMigration, runShardMigrations, ${Ke.importFragment}ShardDO as ShardDOBase } from "${A.do}";`,...G?[`import type { ExternalSourceLike, SourceClientLike } from "${A.do}";`]:[],L?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${A.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${A.server}";`];Pe&&ge.push(`import { bindOrm, bindTableFacade } from "${A.server}";`),V&&ge.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),i&&ge.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),ge.push(...oe.importLines,...K.importLines,...P.importLines,...X.importLines,...ie.importLines,...J.importLines,...j.importLines,...W.importLines,...U.importLines,...q.importLines,...Y.importLines,...ye,...we,...be,...ce,...pe,...lt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...z?["LUNORA_MUTATOR_PATHS"]:[],...L?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const Tt=V?`
-    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",At=je?`
-    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Lt=Ie?`
-    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Ct=G?`
-    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",Dt=he?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",_t=V?`
+`:"",It=L?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",Dt=L?"assertShapeShardable, ":"",ge=[`import type { ${He.join(", ")} } from "${A.do}";`,`import { applyCdcChanges, ${Dt}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${V?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}${xe?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${Je.importFragment}ShardDO as ShardDOBase } from "${A.do}";`,...V?[`import type { ExternalSourceLike, SourceClientLike } from "${A.do}";`]:[],L?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${A.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${A.server}";`];Pe&&ge.push(`import { bindOrm, bindTableFacade } from "${A.server}";`),J&&ge.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),s&&ge.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),ge.push(...oe.importLines,...K.importLines,...E.importLines,...X.importLines,...se.importLines,...H.importLines,...j.importLines,...W.importLines,...U.importLines,...q.importLines,...Y.importLines,...ye,...we,...be,...ce,...pe,...gt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...z?["LUNORA_MUTATOR_PATHS"]:[],...L?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const _t=J?`
+    vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",Et=Ke?`
+    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Pt=Ee?`
+    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Ft=V?`
+    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",Mt=he?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",qt=J?`
 const vectorsStub: VectorSearchLike = {
     deleteByIds: async () => {
         throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
@@ -1342,22 +1351,24 @@ const vectorsStub: VectorSearchLike = {
         throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
     },
 };
-`:"",It=V?`
+`:"",Bt=xe?`
+                const vectorShardKey = this.currentShardKey();
+`:"",jt=xe?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",Wt=xe?`, { namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, shardedIndexNames: [${x.vectorIndexes.filter(w=>Ue.has(w.table)).map(w=>JSON.stringify(w.name)).join(", ")}] }`:"",Ut=J?`
             let vectors: VectorSearchLike;
             let onWrite: WriteHook | undefined;
 
             if (config.vectors) {
                 const lunora = createVectors({ indexes: config.vectors(env) });
-
-                vectors = createContextVectors(lunora);
-                onWrite = createVectorSyncHook({ schema: schema as unknown as VectorSchemaLike, vectors });
+${Bt}
+                vectors = createContextVectors(lunora${Wt});
+                onWrite = createVectorSyncHook({ ${jt}schema: schema as unknown as VectorSchemaLike, vectors });
             } else {
                 vectors = vectorsStub;
                 onWrite = undefined;
             }
-`:"",Qe=he?`
-                globalDb,`:"",Je=`
-                auth: { identity: identity ?? null, userId: userId ?? null },`,Pt=V?`{${Je}
+`:"",Ve=he?`
+                globalDb,`:"",Ge=`
+                auth: { identity: identity ?? null, userId: userId ?? null },`,Kt=J?`{${Ge}
                 broadcast: (delta) => {
                     this.recordChangedTable(delta.table, delta.indexKeys);
                 },
@@ -1371,8 +1382,8 @@ const vectorsStub: VectorSearchLike = {
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
-                storage,${Qe}
-            }`:`{${Je}
+                storage,${Ve}
+            }`:`{${Ge}
                 broadcast: (delta) => {
                     this.recordChangedTable(delta.table, delta.indexKeys);
                 },
@@ -1385,14 +1396,14 @@ const vectorsStub: VectorSearchLike = {
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
-                storage,${Qe}
-            }`,Et=V?`
-                vectors,`:"",Ft=Pe?`
-                orm: bindOrm(facade),`:"",Mt="",Ve=Ie?"config.hyperdriveGlobal":"config.d1",qt=he?`            const globalDb: DatabaseWriterLike = ${Ve}?.(env, { identity, userId }) ?? globalDbStub;
-`:"",Bt=L&&he?`
+                storage,${Ve}
+            }`,Qt=J?`
+                vectors,`:"",Ht=Pe?`
+                orm: bindOrm(facade),`:"",Jt="",ze=Ee?"config.hyperdriveGlobal":"config.d1",Vt=he?`            const globalDb: DatabaseWriterLike = ${ze}?.(env, { identity, userId }) ?? globalDbStub;
+`:"",Gt=L&&he?`
         protected override async readGlobalShapeRows(resolved: { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string }, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<Array<{ doc: Record<string, unknown>; id: string }>> {
             const env = this.env as Record<string, unknown>;
-            const globalDb: DatabaseWriterLike = ${Ve}?.(env, identity) ?? globalDbStub;
+            const globalDb: DatabaseWriterLike = ${ze}?.(env, identity) ?? globalDbStub;
             const rows: Array<{ doc: Record<string, unknown>; id: string }> = [];
 
             let cursor: null | string = null;
@@ -1419,10 +1430,10 @@ const vectorsStub: VectorSearchLike = {
 
             return rows;
         }
-`:"",jt=G?`
+`:"",zt=V?`
 const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
-`:"",Wt=G?`
+`:"",Xt=V?`
         protected override async pollExternalSources(): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
@@ -1435,15 +1446,6 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
 
             const shardKey = this.currentShardKey();
             const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
-            const writer = createShardCtxDb({
-                broadcast: (delta) => {
-                    this.recordChangedTable(delta.table, delta.indexKeys);
-                },
-                cdc: config.cdc ?? false,
-                scheduler,
-                schema: schema as unknown as SchemaLike,
-                sql: this.sql as SqlExec,
-            });
 
             let clients = sourceClientCache.get(this);
 
@@ -1490,14 +1492,31 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
                             // Logs panel and stamp \`polledAt\` so a persistent misconfig backs
                             // off to \`refresh.everyMs\` instead of retrying every alarm tick.
                             this.recordExternalSourceError(table, new Error(\`external-source: no sourceClient resolved for binding "\${source.binding}"\`));
-                        } else if (source.mode === "incremental") {
-                            // Incremental (plan 136): pull only rows past the durable
-                            // watermark (or a full-pull seed/reconcile), upsert-only.
-                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; sequential keeps the writer transaction simple
-                            await pullExternalSourceIncrementalTick(this.sql as SqlExec, writer, client, table, source, shardKey, now);
                         } else {
-                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
-                            await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
+                            // A FRESH tracker per TABLE, not one shared across the whole
+                            // loop: one table's runaway pull must not spend a budget a
+                            // sibling table needs, and a limit hit here must not block
+                            // that sibling from getting its own full budget this tick.
+                            const writer = createShardCtxDb({
+                                broadcast: (delta) => {
+                                    this.recordChangedTable(delta.table, delta.indexKeys);
+                                },
+                                cdc: config.cdc ?? false,
+                                headroom: this.alarmHeadroom(),
+                                scheduler,
+                                schema: schema as unknown as SchemaLike,
+                                sql: this.sql as SqlExec,
+                            });
+
+                            if (source.mode === "incremental") {
+                                // Incremental (plan 136): pull only rows past the durable
+                                // watermark (or a full-pull seed/reconcile), upsert-only.
+                                // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; sequential keeps the writer transaction simple
+                                await pullExternalSourceIncrementalTick(this.sql as SqlExec, writer, client, table, source, shardKey, now);
+                            } else {
+                                // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
+                                await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
+                            }
                         }
 
                         // Timestamp AFTER the poll finishes, not the batch-start \`now\` — a
@@ -1505,6 +1524,33 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
                         // stale-immediate and re-arm the alarm in a hammering loop.
                         polledAt.set(table, Date.now());
                     } catch (error) {
+                        if (error instanceof LunoraError && error.code === "TRANSACTION_LIMIT_EXCEEDED") {
+                            // Batch full, not a genuine failure. Incremental mode only
+                            // persists its watermark AFTER a full apply (see
+                            // \`pullExternalSourceIncrementalTick\`), so this throw left it
+                            // untouched — the next tick safely re-pulls/re-applies the
+                            // SAME slice (idempotent upsert). Full-pull mode (and an
+                            // incremental source's own occasional full-pull/reconcile
+                            // sweep) has no resumable cursor at all — deliberately not
+                            // inventing one here; a retry just redoes the whole pull,
+                            // safe if wasteful. Either way: warn instead of
+                            // \`recordExternalSourceError\`, and leave \`polledAt\`
+                            // UNCHANGED (skip the stamp below via \`continue\`) so this
+                            // table stays "due" and \`nextPollAlarmTarget\`'s existing
+                            // due-now floor re-arms the shared alarm promptly — not a
+                            // fresh \`setAlarm(now)\`.
+                            this.logs.push({
+                                functionPath: \`source:\${table}\`,
+                                level: "warn",
+                                message: \`external-source poll for "\${table}" hit the transaction limit mid-batch; resuming next tick: \${error.message}\`,
+                                timestamp: Date.now(),
+                            });
+
+                            nextDueAt = nextDueAt === undefined ? now : Math.min(nextDueAt, now);
+
+                            continue;
+                        }
+
                         this.recordExternalSourceError(table, error);
                         // Stamp on failure too, so a persistently failing source throttles
                         // to \`refresh.everyMs\` rather than being hammered every tick.
@@ -1523,10 +1569,10 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
 
             return nextDueAt;
         }
-`:"",Ge=We.length>0,Ut=G||Ge?`
+`:"",Xe=Qe.length>0,Yt=V||Xe?`
         public constructor(state: ShardDOState, env: unknown) {
             super(state, env);
-${G?`
+${V?`
             const autoSourced = Object.values((schema as unknown as SchemaLike).tables).some((definition) => {
                 const source = (definition as { externalSource?: ExternalSourceLike }).externalSource;
 
@@ -1536,27 +1582,27 @@ ${G?`
             if (autoSourced) {
                 void this.scheduleSourcePoll();
             }
-`:""}${Ge?`
+`:""}${Xe?`
             if (LUNORA_TTL_SWEEPS.length > 0) {
                 void this.scheduleTtlSweep();
             }
 `:""}        }
-`:"",Kt=Pe?`
+`:"",Zt=Pe?`
             const facade = db as unknown as Record<string, ReturnType<typeof bindTableFacade>>;
-${w.tables.map(C=>`            facade[${JSON.stringify(C.name)}] = bindTableFacade(db, ${JSON.stringify(C.name)});`).join(`
+${x.tables.map(w=>`            facade[${JSON.stringify(w.name)}] = bindTableFacade(db, ${JSON.stringify(w.name)});`).join(`
 `)}
-`:"",Qt=`${oe.build}${K.build}${P.build}${J.build}${ie.build}
+`:"",en=`${oe.build}${K.build}${E.build}${H.build}${se.build}
             const secrets = createSecrets(env);
-`,Jt=`${oe.contextField}${K.contextField}${P.contextField}${X.contextField}${J.contextField}${ie.contextField}
-                secrets,`,Vt=X.build,He=y||f||u||b||g||x,Gt=He?`
+`,tn=`${oe.contextField}${K.contextField}${E.contextField}${X.contextField}${H.contextField}${se.contextField}
+                secrets,`,nn=X.build,Ye=y||f||u||b||g||k,rn=Ye?`
             // ActionCtx-only helpers (external, non-deterministic I/O): constructed
             // and attached only for an \`action\` so query/mutation ctx never carry them.
             if (isAction) {
-${j.build}${W.build}${U.build}${q.build}${Y.build}${_e}${[...y?["                ctx.images = images;"]:[],...f?["                ctx.sql = sql;"]:[],...u?["                ctx.browser = browser;"]:[],...b?["                ctx.r2sql = r2sql;"]:[],...g?["                ctx.pipelines = pipelines;"]:[],...x?["                ctx.x402 = x402;"]:[]].join(`
+${j.build}${W.build}${U.build}${q.build}${Y.build}${_e}${[...y?["                ctx.images = images;"]:[],...f?["                ctx.sql = sql;"]:[],...u?["                ctx.browser = browser;"]:[],...b?["                ctx.r2sql = r2sql;"]:[],...g?["                ctx.pipelines = pipelines;"]:[],...k?["                ctx.x402 = x402;"]:[]].join(`
 `)}
             }
-`:"",Ht=He?`            const isAction = LUNORA_FUNCTIONS[options.functionPath ?? ""]?.kind === "action";
-`:"";return`${k}${ge.join(`
+`:"",an=Ye?`            const isAction = LUNORA_FUNCTIONS[options.functionPath ?? ""]?.kind === "action";
+`:"";return`${v}${ge.join(`
 `)}
 
 type FunctionKind = "action" | "mutation" | "query";
@@ -1566,45 +1612,45 @@ interface FunctionReference {
 }
 
 /** Foreign-key columns per table (\`v.id("target")\` fields) for the data browser. */
-const LUNORA_TABLE_REFS: Record<string, Record<string, string>> = ${JSON.stringify(xt,void 0,4)};
+const LUNORA_TABLE_REFS: Record<string, Record<string, string>> = ${JSON.stringify(Nt,void 0,4)};
 
 /** Declared indexes per table (secondary, search, geo, rank, vector) for the schema viewer. */
-const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(kt,void 0,4)};
+const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(Ot,void 0,4)};
 
 /** Columns per table (typed, with PK/FK markers) for the studio's schema diagram, served via \`__lunora_admin__:describeTable\`. */
-const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(vt,void 0,4)};
+const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(Tt,void 0,4)};
 
 /** Storage-key columns per table (\`v.storage(...)\` fields) for the file browser's records↔files join. */
-const LUNORA_STORAGE_COLUMNS: Record<string, string[]> = ${JSON.stringify($t,void 0,4)};
+const LUNORA_STORAGE_COLUMNS: Record<string, string[]> = ${JSON.stringify(At,void 0,4)};
 
 /** Declarative TTL policies (\`.ttl(field, { after? })\`) the DO alarm sweep auto-expires rows for. */
-const LUNORA_TTL_SWEEPS: Array<{ after?: number; field: string; softDeleteField?: string; table: string }> = ${JSON.stringify(We,void 0,4)};
+const LUNORA_TTL_SWEEPS: Array<{ after?: number; field: string; softDeleteField?: string; table: string }> = ${JSON.stringify(Qe,void 0,4)};
 
 /** Static schema advisories (computed by @lunora/advisor at codegen time) served via \`__lunora_admin__:getAdvisories\`. */
-const LUNORA_ADVISORIES: AdvisoryFinding[] = ${JSON.stringify(ct,void 0,4)};
+const LUNORA_ADVISORIES: AdvisoryFinding[] = ${JSON.stringify(ft,void 0,4)};
 
 /** Every declared procedure (discovered by @lunora/codegen) served via \`__lunora_admin__:getAdvisorProcedures\` — the health map's denominator. */
-const LUNORA_ADVISOR_PROCEDURES: AdvisorProcedure[] = ${JSON.stringify(ut,void 0,4)};
+const LUNORA_ADVISOR_PROCEDURES: AdvisorProcedure[] = ${JSON.stringify(bt,void 0,4)};
 
 /** Read-only RLS metadata (policies + roles discovered from \`.use(rls(...))\` chains) served via \`__lunora_admin__:rlsPolicies\` for the studio's RLS inspector. */
-const LUNORA_RLS_METADATA: RlsPoliciesResult = ${JSON.stringify(pt,void 0,4)};
+const LUNORA_RLS_METADATA: RlsPoliciesResult = ${JSON.stringify(yt,void 0,4)};
 
 /** Read-only masking metadata (table + column + strategy discovered from \`.use(mask(...))\` chains) served via \`__lunora_admin__:maskPolicies\` for the studio's data-browser mask preview. */
-const LUNORA_MASK_METADATA: MaskPoliciesResult = ${JSON.stringify(ht,void 0,4)};
+const LUNORA_MASK_METADATA: MaskPoliciesResult = ${JSON.stringify(wt,void 0,4)};
 
 /** Read-only storage access-rule metadata (discovered from \`.use(storageRules(...))\` chains) served via \`__lunora_admin__:storageRules\` for the studio's access-rules view. */
-const LUNORA_STORAGE_RULES: StorageRulesResult = ${JSON.stringify(gt,void 0,4)};
+const LUNORA_STORAGE_RULES: StorageRulesResult = ${JSON.stringify(xt,void 0,4)};
 
 /** Which optional package-backed features this app wires up (discovered from imports / \`ctx.*\` reads / schema signals) served via \`__lunora_admin__:studioFeatures\` so the studio hides nav pages whose package isn't enabled. */
-const LUNORA_STUDIO_FEATURES: StudioFeaturesResult = ${JSON.stringify(mt,void 0,4)};
-${M}${Q.constant}${Nt}${ft}${yt}${le}${Te}${se}${Le}
+const LUNORA_STUDIO_FEATURES: StudioFeaturesResult = ${JSON.stringify(kt,void 0,4)};
+${M}${Q.constant}${It}${vt}${St}${le}${Ae}${ie}${Ce}
 export interface ShardDOConfig {
     /** Opt into change-data-capture: records a post-image to \`__cdc_log\` on every write (backs streaming export + replay-PITR). */
     cdc?: boolean;
     /** Optional telemetry sink. When supplied, each \`ctx.log.*\` call is forwarded to \`sink.onLog\`. Pass the SAME sink you give \`createWorker({ observability })\` (which drives \`onRpc\`) to route both RPC and log events. */
     observability?: (env: Record<string, unknown>) => TelemetrySink | undefined;
     scheduler?: (env: Record<string, unknown>) => unknown;
-    storage?: (env: Record<string, unknown>) => unknown;${Tt}${xe}${K.configField}${P.configField}${J.configField}${j.configField}${W.configField}${U.configField}${q.configField}${Y.configField}${De}${st}${At}${Lt}${Ct}
+    storage?: (env: Record<string, unknown>) => unknown;${_t}${ke}${K.configField}${E.configField}${H.configField}${j.configField}${W.configField}${U.configField}${q.configField}${Y.configField}${De}${ht}${Et}${Pt}${Ft}
 }
 
 const schedulerStub = {
@@ -1642,7 +1688,7 @@ const storageStub = {
         throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
     },
 };
-${Dt}${jt}${_t}${ve}${K.stub}${P.stub}${J.stub}${j.stub}${W.stub}${U.stub}${q.stub}${Y.stub}${h}${dt}${Mt}
+${Mt}${zt}${qt}${$e}${K.stub}${E.stub}${H.stub}${j.stub}${W.stub}${U.stub}${q.stub}${Y.stub}${h}${mt}${Jt}
 // Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
 // referencing call fails loudly with a clear error instead of overflowing the
 // stack. Tracked across the awaited handler chain (one DO invocation is
@@ -1679,10 +1725,10 @@ const dispatchRun = async (expected: FunctionKind, functionPath: string, args: R
  * from the worker entry so wrangler binds it by name.
  */
 export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOState, env: unknown) => ShardDOBase =>
-    class extends ShardDOBase {${Ut}
+    class extends ShardDOBase {${Yt}
         private migrated = false;
 
-        public override async handleRpc(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
+        public override async handleRpc(functionPath: string, args: Record<string, unknown>, headroom?: TransactionHeadroomTracker): Promise<unknown> {
             const registered = LUNORA_FUNCTIONS[functionPath];
 
             // Internal functions are reachable server-side only: via \`ctx.run*\`
@@ -1695,7 +1741,13 @@ export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOSt
 
             this.ensureMigrated();
 
-            const ctx = this.buildCtx({ functionPath });
+            // \`headroom\`, when the caller supplied one, is threaded straight
+            // through to \`buildCtx\` — bypassing its \`this.transactionHeadroom()\`
+            // fallback (the racy shared-field read) entirely for THIS dispatch.
+            // The main \`/rpc\` path always supplies one; \`dispatchLifecycle\` /
+            // \`handleRunAs\` don't mint their own and omit it, so they keep the
+            // prior fallback behavior unchanged.
+            const ctx = this.buildCtx({ functionPath, headroom });
 
             // A mutation's writes must commit all-or-nothing: wrap its dispatch in
             // the DO's BEGIN/COMMIT span so any throw (a validator, an RLS denial,
@@ -1722,7 +1774,7 @@ export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOSt
 
             return registered.handler(ctx, args);
         }
-${Ke.override}
+${Je.override}
         protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<{ ranges?: Map<string, KeyRange[]>; result: unknown; tables: Set<string> } | null> {
             const registered = LUNORA_FUNCTIONS[functionPath];
 
@@ -1757,7 +1809,7 @@ ${Ke.override}
                 iterator: (signal) => (registered.handler as (context: unknown, args: Record<string, unknown>, signal: AbortSignal) => AsyncIterable<unknown>)(this.buildCtx({ functionPath }), args, signal),
             };
         }
-${Rt}${St}${Bt}${Wt}
+${Ct}${Lt}${Gt}${Xt}
         protected override lifecycleHookPaths(event: "connect" | "disconnect"): readonly string[] {
             return LUNORA_LIFECYCLE_HOOKS[event];
         }
@@ -1797,7 +1849,7 @@ ${Rt}${St}${Bt}${Wt}
         protected override studioFeatures(): StudioFeaturesResult {
             return LUNORA_STUDIO_FEATURES;
         }
-${Q.evaluateOverride}${Q.subscriptionOverride}${bt}${wt}
+${Q.evaluateOverride}${Q.subscriptionOverride}${$t}${Rt}
         protected override advisories(): AdvisoryFinding[] {
             return LUNORA_ADVISORIES;
         }
@@ -1893,7 +1945,71 @@ ${Q.evaluateOverride}${Q.subscriptionOverride}${bt}${wt}
             return { id: args.id ?? null, op: "patch" };
         }
 
-        protected override async deleteRowThroughWriter(table: string, id: string): Promise<void> {
+        // The base \`ShardDO\` cannot build a schema-aware writer, so its
+        // \`runShardExport\`/\`runShardImport\` return \`[]\` and \`{inserted:{}}\`.
+        // Those are success-shaped: an empty export is what a correct export of
+        // an empty shard looks like, so a backup of a populated sharded schema
+        // reported success and wrote nothing, and an import reported success and
+        // dropped every row. Overriding both here is what makes the two admin
+        // RPCs real for a \`.shardBy()\` table.
+        //
+        // NOTE: the admin export RPC is not paginated — \`parseExportShardArgs\`
+        // takes \`tables\`/\`batchSize\` but no cursor, and the coordinator issues
+        // one call per shard — so the rows are collected into a single response.
+        // \`batchSize\` bounds the SQLite scan page, not the reply. A shard holding
+        // more rows than fit in the DO's memory budget will therefore fail the
+        // export rather than stream it. That is a loud failure where the bug this
+        // replaces was a silent empty one, but a cursor on the RPC is what makes
+        // this a complete backup path for large shards.
+        protected override async runShardExport(args: RunShardExportArgs): Promise<ExportRow[]> {
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table, delta.indexKeys);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            const rows: ExportRow[] = [];
+
+            // \`exportShardRows\` walks in keyset batches so a large table does not
+            // materialize at once inside the generator; the admin RPC's response
+            // is a single array, so it is collected here rather than streamed.
+            for await (const row of exportShardRows(writer, schema as unknown as SchemaLike, { batchSize: args.batchSize, tables: args.tables })) {
+                rows.push(row);
+            }
+
+            return rows;
+        }
+
+        protected override async runShardImport(args: RunShardImportArgs): Promise<ImportShardResult> {
+            this.ensureMigrated();
+
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
+            const writer = createShardCtxDb({
+                broadcast: (delta) => {
+                    this.recordChangedTable(delta.table, delta.indexKeys);
+                },
+                cdc: config.cdc ?? false,
+                scheduler,
+                schema: schema as unknown as SchemaLike,
+                sql: this.sql as SqlExec,
+            });
+
+            // \`importShardRows\` inserts with \`allowExplicitId\`, so a source
+            // database's \`_id\`s carry across verbatim and every foreign key
+            // referencing them stays valid without a second remapping pass.
+            return importShardRows(writer, schema as unknown as SchemaLike, { rows: args.rows, startLine: args.startLine });
+        }
+
+        protected override async deleteRowThroughWriter(table: string, id: string, headroom?: TransactionHeadroomTracker): Promise<void> {
             const definition = (schema as unknown as SchemaLike).tables[table];
 
             if (!definition) {
@@ -1915,6 +2031,13 @@ ${Q.evaluateOverride}${Q.subscriptionOverride}${bt}${wt}
                     this.recordChangedTable(delta.table, delta.indexKeys);
                 },
                 cdc: config.cdc ?? false,
+                // \`runShardBulkDelete\` (a normal \`/rpc\` dispatch) calls this with no
+                // explicit \`headroom\`, so it falls back to \`this.transactionHeadroom()\`
+                // — the SAME per-dispatch meter every other write goes through, mirroring
+                // \`buildCtx\`'s \`options.headroom ?? this.transactionHeadroom()\`. The TTL
+                // sweep (an alarm work item, no dispatch in flight) passes its own
+                // by-value tracker explicitly instead.
+                headroom: headroom ?? this.transactionHeadroom(),
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
@@ -2023,7 +2146,7 @@ ${Q.evaluateOverride}${Q.subscriptionOverride}${bt}${wt}
             // dispatch path) fall back to the per-request fields as before.
             const userId = options.identity ? options.identity.userId : this.getCurrentUserId();
             const identity = options.identity ? options.identity.identity : this.getCurrentIdentity();
-${It}${ae}${Qt}${Se}${Ne}${$e}${Ae}
+${Ut}${ae}${en}${Re}${Oe}${Se}${Le}
             const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
             // Build the storage adapter once and share it between \`ctx.storage\`
             // and \`ctx.db.system._storage\` so both read the same R2 binding. The
@@ -2050,13 +2173,13 @@ ${It}${ae}${Qt}${Se}${Ne}${$e}${Ae}
             // so both write to the same trace.
             const span = this.makeDispatchSpan(traceAnchor, observability);
 
-${qt}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
+${Vt}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
             // adds aggregate counters (call count, total time, per-operation
             // breakdown) to the wide event rather than a span per call, so a
             // handler making hundreds of queries stays readable. See
             // \`instrumentDatabase\` for the \`"spans"\` / \`"off"\` levels.
-            const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${Pt}), logFunctionPath, traceAnchor, observability);
-${Kt}${Ce}
+            const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${Kt}), logFunctionPath, traceAnchor, observability);
+${Zt}${Ie}
 
             // \`ctx.trace\` / \`ctx.metrics\`: spans and measurements to the same sink.
             // The trace anchor is threaded explicitly for the same reason \`identity\`
@@ -2064,7 +2187,7 @@ ${Kt}${Ce}
             // writing mutation's trace from the shared per-request field.
             const trace = this.makeTracer(logFunctionPath, observability, traceAnchor);
             const metrics = this.makeMetrics(logFunctionPath, observability);
-${Vt}
+${nn}
             // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
             // captured ONCE so the whole handler body sees a single stable value.
             // Query/mutation handlers must be deterministic (they may be re-run on
@@ -2087,13 +2210,13 @@ ${Vt}
                 ip: this.getCurrentIp(),
                 log,
                 metrics,
-                now,${Ft}
+                now,${Ht}
                 scheduler,
                 span,
                 storage,
-                trace,${Et}${ke}${Jt}${ue}${Re}${Oe}${fe}${de}
+                trace,${Qt}${ve}${tn}${ue}${Ne}${Te}${fe}${de}
             };
-${Ht}${Gt}
+${an}${rn}
             ctx.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, ctx);
             ctx.runMutation = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("mutation", reference.__lunoraRef, fnArgs, ctx);
             ctx.runQuery = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("query", reference.__lunoraRef, fnArgs, ctx);
@@ -2101,30 +2224,30 @@ ${Ht}${Gt}
             return ctx;
         }
     };
-`},Be=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:O(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?Be(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},it=(e,t)=>{const n=e.kind==="optional"&&e.inner?e.inner:e;return n.kind==="id"&&n.tableName!==void 0&&t.has(n.tableName)?n.tableName:void 0},ir=(e,t,n)=>{m(e,"drizzle column name");const r=Be(t),a=r.mode?`, { mode: "${r.mode}" }`:"";let o=`${r.builder}("${e}"${a})`;r.typeAnnotation&&(o+=`.$type<${r.typeAnnotation}>()`);const s=it(t,n);return s!==void 0&&(o+=`.references((): AnySQLiteColumn => ${s}._id)`),r.notNull&&(o+=".notNull()"),o},sr=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(r=>(m(r,"drizzle index field"),`t.${r}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},lr=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([a,o])=>`    ${a}: ${ir(a,o,t)},`)].join(`
+`},We=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:C(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?We(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},pt=(e,t)=>{const n=e.kind==="optional"&&e.inner?e.inner:e;return n.kind==="id"&&n.tableName!==void 0&&t.has(n.tableName)?n.tableName:void 0},yr=(e,t,n)=>{m(e,"drizzle column name");const r=We(t),a=r.mode?`, { mode: "${r.mode}" }`:"";let o=`${r.builder}("${e}"${a})`;r.typeAnnotation&&(o+=`.$type<${r.typeAnnotation}>()`);const i=pt(t,n);return i!==void 0&&(o+=`.references((): AnySQLiteColumn => ${i}._id)`),r.notNull&&(o+=".notNull()"),o},wr=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(r=>(m(r,"drizzle index field"),`t.${r}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},xr=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([a,o])=>`    ${a}: ${yr(a,o,t)},`)].join(`
 `),r=e.indexes.length>0?`, (t) => ({
-${e.indexes.map(a=>sr(a)).join(`
+${e.indexes.map(a=>wr(a)).join(`
 `)}
 })`:"";return`export const ${e.name} = sqliteTable("${e.name}", {
 ${n}
-}${r});`},dr=e=>e.typeAnnotation?.includes('Id<"')??!1,cr=(e,t)=>{const n=new Set(["integer","sqliteTable","text"]),r=new Set;let a=!1,o=!1;for(const s of e){for(const i of Object.values(s.shape)){const l=Be(i);n.add(l.builder),o=o||dr(l),a=a||it(i,t)!==void 0}for(const i of s.indexes)r.add(i.unique?"uniqueIndex":"index")}return{columns:[...n].toSorted((s,i)=>s.localeCompare(i)),indexes:[...r].toSorted((s,i)=>s.localeCompare(i)),needsAnyColumn:a,needsId:o}},Xe=(e,t=!1)=>{if(e.length===0)return`${k}export {};
-`;const n=H(t),r=new Set(e.map(f=>f.name)),{columns:a,indexes:o,needsAnyColumn:s,needsId:i}=cr(e,r),l=[...o,...a].toSorted((f,y)=>f.localeCompare(y)),u=e.map(f=>lr(f,r)).join(`
+}${r});`},kr=e=>e.typeAnnotation?.includes('Id<"')??!1,vr=(e,t)=>{const n=new Set(["integer","sqliteTable","text"]),r=new Set;let a=!1,o=!1;for(const i of e){for(const s of Object.values(i.shape)){const l=We(s);n.add(l.builder),o=o||kr(l),a=a||pt(s,t)!==void 0}for(const s of i.indexes)r.add(s.unique?"uniqueIndex":"index")}return{columns:[...n].toSorted((i,s)=>i.localeCompare(s)),indexes:[...r].toSorted((i,s)=>i.localeCompare(s)),needsAnyColumn:a,needsId:o}},et=(e,t=!1)=>{if(e.length===0)return`${v}export {};
+`;const n=G(t),r=new Set(e.map(f=>f.name)),{columns:a,indexes:o,needsAnyColumn:i,needsId:s}=vr(e,r),l=[...o,...a].toSorted((f,y)=>f.localeCompare(y)),u=e.map(f=>xr(f,r)).join(`
 
-`),p=[s?`import type { AnySQLiteColumn } from "${n.serverDrizzle}";
-`:"",i?`import type { Id } from "./dataModel.js";
-`:""].join("");return`${k}import { ${l.join(", ")} } from "${n.serverDrizzle}";
+`),p=[i?`import type { AnySQLiteColumn } from "${n.serverDrizzle}";
+`:"",s?`import type { Id } from "./dataModel.js";
+`:""].join("");return`${v}import { ${l.join(", ")} } from "${n.serverDrizzle}";
 ${p}
 ${u}
-`},Or=(e,t=!1)=>{const n=e.tables.filter(a=>a.shardMode==="global"),r=e.tables.filter(a=>a.shardMode!=="global");return{global:Xe(n,t),shard:Xe(r,t)}},Tr=e=>{const t=[],n=new Map;for(const i of e){const l=n.get(i.cron);l?l.push(i):(n.set(i.cron,[i]),t.push(i.cron))}const r=t.map(i=>`    ${JSON.stringify(i)},`).join(`
+`},qr=(e,t=!1)=>{const n=e.tables.filter(a=>a.shardMode==="global"),r=e.tables.filter(a=>a.shardMode!=="global");return{global:et(n,t),shard:et(r,t)}},Br=e=>{const t=[],n=new Map;for(const s of e){const l=n.get(s.cron);l?l.push(s):(n.set(s.cron,[s]),t.push(s.cron))}const r=t.map(s=>`    ${JSON.stringify(s)},`).join(`
 `),a=r.length>0?`
 ${r}
-`:"",o=[...n.entries()].map(([i,l])=>{const u=l.map(p=>{const f=p.workflow?`workflow: ${JSON.stringify(p.workflow.binding)}`:`functionPath: ${JSON.stringify(p.functionPath)}`;return`        { name: ${JSON.stringify(p.name)}, ${f}, args: ${JSON.stringify(p.args)} },`}).join(`
-`);return`    ${JSON.stringify(i)}: [
+`:"",o=[...n.entries()].map(([s,l])=>{const u=l.map(p=>{const f=p.workflow?`workflow: ${JSON.stringify(p.workflow.binding)}`:`functionPath: ${JSON.stringify(p.functionPath)}`;return`        { name: ${JSON.stringify(p.name)}, ${f}, args: ${JSON.stringify(p.args)} },`}).join(`
+`);return`    ${JSON.stringify(s)}: [
 ${u}
     ],`}).join(`
-`),s=o.length>0?`
+`),i=o.length>0?`
 ${o}
-`:"";return`${k}/**
+`:"";return`${v}/**
  * One scheduled cron invocation. Exactly one target is set: \`functionPath\` is
  * the \`namespace:fn\` dispatch ref (matches \`__lunoraRef\`), invoked on the
  * shard; \`workflow\` is a \`WORKFLOW_*\` binding name whose durable workflow is
@@ -2148,11 +2271,11 @@ export const LUNORA_CRON_TRIGGERS: ReadonlyArray<string> = [${a}];
  * Dispatcher map keyed by cron expression. The Worker's \`scheduled()\` handler
  * looks up \`event.cron\` here and dispatches every job in the list.
  */
-export const LUNORA_CRONS: Record<string, ReadonlyArray<LunoraCronJob>> = {${s}};
-`},Ar=e=>{const t=[...e].toSorted((r,a)=>r.name.localeCompare(a.name)).map(r=>{const a=[`name: ${JSON.stringify(r.name)}`,`table: ${JSON.stringify(r.table)}`];return r.field!==void 0&&a.push(`field: ${JSON.stringify(r.field)}`),r.dimensions!==void 0&&a.push(`dimensions: ${JSON.stringify(r.dimensions)}`),r.metric!==void 0&&a.push(`metric: ${JSON.stringify(r.metric)}`),r.metadata!==void 0&&a.push(`metadata: ${JSON.stringify(r.metadata)}`),`    { ${a.join(", ")} },`}).join(`
+export const LUNORA_CRONS: Record<string, ReadonlyArray<LunoraCronJob>> = {${i}};
+`},jr=e=>{const t=[...e].toSorted((r,a)=>r.name.localeCompare(a.name)).map(r=>{const a=[`name: ${JSON.stringify(r.name)}`,`table: ${JSON.stringify(r.table)}`];return r.field!==void 0&&a.push(`field: ${JSON.stringify(r.field)}`),r.dimensions!==void 0&&a.push(`dimensions: ${JSON.stringify(r.dimensions)}`),r.metric!==void 0&&a.push(`metric: ${JSON.stringify(r.metric)}`),r.metadata!==void 0&&a.push(`metadata: ${JSON.stringify(r.metadata)}`),`    { ${a.join(", ")} },`}).join(`
 `),n=t.length>0?`
 ${t}
-`:"";return`${k}/**
+`:"";return`${v}/**
  * One vector index declared in \`schema.ts\` — an inline \`.vectorize()\` column
  * or a standalone \`defineVectorIndex()\`. \`field\` is the source column (absent
  * for a \`select\`-derived Shape B index); \`metadata\` lists the row fields
@@ -2173,4 +2296,4 @@ export interface LunoraVectorIndex {
  * \`createWorker({ vectorIntrospector })\` to back the studio's vector browser.
  */
 export const LUNORA_VECTOR_INDEXES: ReadonlyArray<LunoraVectorIndex> = [${n}];
-`},Lr=e=>{const t=new Set,n=[];for(const r of e)t.has(r.cron)||(t.add(r.cron),n.push(r.cron));return n};export{xr as $,$r as G,vr as H,Sr as J,kr as N,k as R,Nr as a,_n as b,yr as c,mr as d,Ar as g,Lr as m,fr as n,Tr as p,Yt as r,Or as u,wr as x,br as y,Rr as z};
+`},Wr=e=>{const t=new Set,n=[];for(const r of e)t.has(r.cron)||(t.add(r.cron),n.push(r.cron));return n};export{jr as $,Wr as A,Dr as B,Cr as C,Ar as I,Lr as O,Ir as P,v as R,Br as S,Nn as a,Mr as b,Qn as c,Tr as g,Pr as i,Fr as l,Or as n,_r as o,ln as r,Er as s,qr as v};