@lunora/codegen 1.0.0-alpha.85 → 1.0.0-alpha.86

package/dist/packem_shared/{emit-B7IUlWwi.mjs → emit-DMvG162j.mjs}

@@ -15,89 +15,57 @@ import{agentComponent as tt}from"@lunora/agent/component";import{LunoraError as
     /**
      * R2 SQL over Apache Iceberg tables (window functions, DISTINCT, set operations). Non-deterministic — available only in actions. Reads here are NOT tracked by Lunora live queries.
      */
-    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],ln=nt,dn=new Map(ln.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),Or=nt.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),rt=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,cn=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),at=e=>e.column!==void 0,un=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
+    readonly r2sql: import("@lunora/bindings/r2sql").R2SqlClient;`,tier:"action"}},{contextProperty:"scheduler",key:"scheduler",moduleSpecifier:"@lunora/scheduler"},{contextProperty:"storage",key:"storage",moduleSpecifier:"@lunora/storage"},{appMethod:{configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},contextProperty:"vectors",key:"vectors",moduleSpecifier:"@lunora/bindings/vectors"},{contextProperty:"workflows",key:"workflows",moduleSpecifier:"@lunora/workflow"}],ln=nt,dn=new Map(ln.flatMap(e=>e.serverCtxField?[[e.key,e.serverCtxField]]:[])),Ar=nt.flatMap(e=>"appMethod"in e?[{appMethod:e.appMethod,key:e.key}]:[]),rt=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,cn=new Set(["any","bigint","boolean","date","id","null","number","storage","string","timestamp"]),at=e=>e.column!==void 0,un=(e,t)=>{switch(e){case"bigint":return`if (typeof ${t} !== "bigint") return DEFER;
 `;case"boolean":return`if (typeof ${t} !== "boolean") return DEFER;
 `;case"date":case"number":case"timestamp":return`if (typeof ${t} !== "number" || !Number.isFinite(${t})) return DEFER;
 `;case"null":return`if (${t} !== null) return DEFER;
 `;default:return`if (typeof ${t} !== "string") return DEFER;
 `}},pn=(e,t)=>{const n=e.literalValue?.trim();if(!(n===void 0||!rt.test(n)))return{out:t,pre:`if (${t} !== ${n}) return DEFER;
-`}},Me=(e,t,n)=>{if(!at(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(cn.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:un(e.kind,t)};switch(e.kind){case"array":return hn(e,t,n);case"literal":return pn(e,t);case"object":return mn(e,t,n);default:return}}},hn=(e,t,n)=>{const{inner:r}=e;if(!r)return;const a=n.next(),o=`__arr${String(a)}`,i=`__i${String(a)}`,s=`__e${String(a)}`,l=Me(r,s,n);if(!l)return;const u=`if (!Array.isArray(${t})) return DEFER;
+`}},qe=(e,t,n)=>{if(!at(e)&&!(e.hasRefinement||e.sourceText!==void 0)){if(cn.has(e.kind))return e.kind==="any"?{out:t,pre:""}:{out:t,pre:un(e.kind,t)};switch(e.kind){case"array":return hn(e,t,n);case"literal":return pn(e,t);case"object":return mn(e,t,n);default:return}}},hn=(e,t,n)=>{const{inner:r}=e;if(!r)return;const a=n.next(),o=`__arr${String(a)}`,i=`__i${String(a)}`,s=`__e${String(a)}`,d=qe(r,s,n);if(!d)return;const u=`if (!Array.isArray(${t})) return DEFER;
 const ${o} = new Array(${t}.length);
 for (let ${i} = 0; ${i} < ${t}.length; ${i}++) {
 const ${s} = ${t}[${i}];
-${l.pre}${o}[${i}] = ${l.out};
+${d.pre}${o}[${i}] = ${d.out};
 }
-`;return{out:o,pre:u}},gn=(e,t,n,r)=>{const a=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||at(t))return;const{inner:i}=t;if(!i)return;const s=Me(i,n,r);if(!s)return;const l=r.next(),u=`__has${String(l)}`,p=`__val${String(l)}`,f=`let ${u} = false;
+`;return{out:o,pre:u}},gn=(e,t,n,r)=>{const a=JSON.stringify(e);if(t.kind==="optional"){if(t.hasRefinement||t.sourceText!==void 0||at(t))return;const{inner:i}=t;if(!i)return;const s=qe(i,n,r);if(!s)return;const d=r.next(),u=`__has${String(d)}`,p=`__val${String(d)}`,g=`let ${u} = false;
 let ${p};
 if (${n} !== undefined) {
 ${s.pre}${p} = ${s.out};
 ${u} = true;
 }
-`;return{entry:`...(${u} ? { ${a}: ${p} } : {})`,pre:f}}const o=Me(t,n,r);if(o)return{entry:`${a}: ${o.out}`,pre:o.pre}},ot=(e,t,n)=>{let r="";const a=[];for(const o of Object.keys(e)){const i=e[o];if(!i)return;const s=gn(o,i,t(o),n);if(!s)return;r+=s.pre,a.push(s.entry)}return{entries:a.join(", "),pre:r}},mn=(e,t,n)=>{const r=e.shape??{},a=ot(r,l=>`${t}[${JSON.stringify(l)}]`,n);if(!a)return;const o=n.next(),i=`__obj${String(o)}`,s=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
+`;return{entry:`...(${u} ? { ${a}: ${p} } : {})`,pre:g}}const o=qe(t,n,r);if(o)return{entry:`${a}: ${o.out}`,pre:o.pre}},ot=(e,t,n)=>{let r="";const a=[];for(const o of Object.keys(e)){const i=e[o];if(!i)return;const s=gn(o,i,t(o),n);if(!s)return;r+=s.pre,a.push(s.entry)}return{entries:a.join(", "),pre:r}},mn=(e,t,n)=>{const r=e.shape??{},a=ot(r,d=>`${t}[${JSON.stringify(d)}]`,n);if(!a)return;const o=n.next(),i=`__obj${String(o)}`,s=`if (typeof ${t} !== "object" || ${t} === null || Array.isArray(${t})) return DEFER;
 ${a.pre}const ${i} = { ${a.entries} };
 `;return{out:i,pre:s}},fn=e=>{let t=0;const n=ot(e,r=>`source[${JSON.stringify(r)}]`,{next:()=>(t+=1,t)});if(n)return`(source) => {
 if (typeof source !== "object" || source === null || Array.isArray(source)) return DEFER;
 ${n.pre}return { ${n.entries} };
-}`},v=`// GENERATED by @lunora/codegen — do not edit.
+}`},S=`// GENERATED by @lunora/codegen — do not edit.
 // Run \`lunora codegen\` to regenerate.
 
-`,G=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},st=/^[A-Za-z_$][\w$]*$/u,bn=/^[\w./-]+$/u,m=(e,t)=>{if(!st.test(e))throw new Z("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Fe=e=>e.charAt(0).toUpperCase()+e.slice(1),D=e=>st.test(e)?e:JSON.stringify(e),yn={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},wn=e=>{if(e===void 0)return"unknown";if(!rt.test(e))throw new Z("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},C=e=>{const t=yn[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?C(e.inner):"unknown"}>`;case"from":return e.tsType??"unknown";case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return wn(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,r])=>it(n,r)).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?C(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?C(e.keyType):"string",r=e.valueType?C(e.valueType):"unknown";return`Record<${n}, ${r}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>C(n)).join(" | "):"never";default:return"unknown"}},it=(e,t)=>{const n=D(e);if(t.kind==="optional"){const r=t.inner?C(t.inner):"unknown";return`${n}?: ${r}`}return`${n}: ${C(t)}`},me=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,r])=>it(n,r)).join("; ")} }`},xn=e=>e.kind==="optional"||!!e.column?.hasDefault,kn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([r,a])=>{const o=a.kind==="optional"&&a.inner?a.inner:a,i=C(o),s=D(r);return xn(a)?`    ${s}?: ${i};`:`    ${s}: ${i};`}).join(`
+`,ee=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},st=/^[A-Za-z_$][\w$]*$/u,bn=/^[\w./-]+$/u,m=(e,t)=>{if(!st.test(e))throw new Z("INTERNAL",`@lunora/codegen: ${t} is not a valid JS identifier: ${JSON.stringify(e)}`)},Fe=e=>e.charAt(0).toUpperCase()+e.slice(1),I=e=>st.test(e)?e:JSON.stringify(e),yn={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},wn=e=>{if(e===void 0)return"unknown";if(!rt.test(e))throw new Z("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},N=e=>{const t=yn[e.kind];if(t!==void 0)return t;switch(e.kind){case"array":return`Array<${e.inner?N(e.inner):"unknown"}>`;case"from":return e.tsType??"unknown";case"id":{const n=e.tableName??"_unknown_";return m(n,"v.id() table name"),`Id<"${n}">`}case"literal":return wn(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([n,r])=>it(n,r)).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?N(e.inner):"unknown"} | undefined`;case"record":{const n=e.keyType?N(e.keyType):"string",r=e.valueType?N(e.valueType):"unknown";return`Record<${n}, ${r}>`}case"union":return e.members&&e.members.length>0?e.members.map(n=>N(n)).join(" | "):"never";default:return"unknown"}},it=(e,t)=>{const n=I(e);if(t.kind==="optional"){const r=t.inner?N(t.inner):"unknown";return`${n}?: ${r}`}return`${n}: ${N(t)}`},fe=e=>{const t=Object.entries(e);return t.length===0?"{}":`{ ${t.map(([n,r])=>it(n,r)).join("; ")} }`},xn=e=>e.kind==="optional"||!!e.column?.hasDefault,kn=e=>{m(e.name,"table name");const t=Object.entries(e.shape).map(([r,a])=>{const o=a.kind==="optional"&&a.inner?a.inner:a,i=N(o),s=I(r);return xn(a)?`    ${s}?: ${i};`:`    ${s}: ${i};`}).join(`
 `),n=t?`
 ${t}
 `:"";return`export interface Insert_${e.name} {
     _id?: Id<"${e.name}">;
-    _creationTime?: number;${n}}`},Tr=(e,t=!1)=>{const n=G(t);for(const c of e.tables)m(c.name,"table name");const r=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",a=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",o=e.tables.map(c=>{const g=Object.entries(c.shape).map(([k,$])=>{const T=D(k);if($.kind==="optional"){const O=$.inner?C($.inner):"unknown";return`    ${T}?: ${O};`}return`    ${T}: ${C($)};`}).join(`
-`),b=g?`
-${g}
+    _creationTime?: number;${n}}`},Be="schema",Lr=e=>{for(const c of e.tables)m(c.name,"table name");const t=e.tables.map(c=>`"${c.name}"`).join(" | ")||"never",n=e.tables.filter(c=>c.extensionKey===void 0).map(c=>`"${c.name}"`).join(" | ")||"never",r=e.tables.map(c=>{const l=Object.entries(c.shape).map(([x,k])=>{const v=I(x);if(k.kind==="optional"){const A=k.inner?N(k.inner):"unknown";return`    ${v}?: ${A};`}return`    ${v}: ${N(k)};`}).join(`
+`),f=l?`
+${l}
 `:"";return`export interface Doc_${c.name} {
     _id: Id<"${c.name}">;
-    _creationTime: number;${b}}`}).join(`
-
-`),i=e.tables.map(c=>`    ${c.name}: Doc_${c.name};`).join(`
-`),s=e.tables.map(c=>{const g=c.indexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
-`),l=e.tables.map(c=>{const g=c.searchIndexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
-`),u=e.tables.map(c=>{const g=c.rankIndexes.map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
-`),p=e.tables.map(c=>{const g=c.shardMode==="global"?"":(c.geoIndexes??[]).map(b=>JSON.stringify(b.name)).join(" | ");return`    ${c.name}: ${g||"never"};`}).join(`
-`),f=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",y=e.tables.map(c=>kn(c)).join(`
-
-`),N=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
-`),d=e.tables.map(c=>{const g=c.relations.map(b=>(m(b.table,"relation target table"),`        ${D(b.name)}: ${b.kind==="one"?"OneRelation":"ManyRelation"}<"${b.table}">;`)).join(`
-`);return g?`    ${c.name}: {
-${g}
+    _creationTime: number;${f}}`}).join(`
+
+`),a=e.tables.map(c=>`    ${c.name}: Doc_${c.name};`).join(`
+`),o=e.tables.map(c=>{const l=c.indexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${l||"never"};`}).join(`
+`),i=e.tables.map(c=>{const l=c.searchIndexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${l||"never"};`}).join(`
+`),s=e.tables.map(c=>{const l=c.rankIndexes.map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${l||"never"};`}).join(`
+`),d=e.tables.map(c=>{const l=c.shardMode==="global"?"":(c.geoIndexes??[]).map(f=>JSON.stringify(f.name)).join(" | ");return`    ${c.name}: ${l||"never"};`}).join(`
+`),u=e.vectorIndexes.map(c=>JSON.stringify(c.name)).join(" | ")||"never",p=e.tables.map(c=>kn(c)).join(`
+
+`),g=e.tables.map(c=>`    ${c.name}: Insert_${c.name};`).join(`
+`),b=e.tables.map(c=>{const l=c.relations.map(f=>(m(f.table,"relation target table"),`        ${I(f.name)}: ${f.kind==="one"?"OneRelation":"ManyRelation"}<"${f.table}">;`)).join(`
+`);return l?`    ${c.name}: {
+${l}
     };`:`    ${c.name}: {};`}).join(`
-`);return`${v}import type {
-    DatabaseReaderFacade as DatabaseReaderFacadeOf,
-    DatabaseWriterFacade as DatabaseWriterFacadeOf,
-    LoadWith as LoadWithOf,
-    TableReaderFacade as TableReaderFacadeOf,
-    TableWriterFacade as TableWriterFacadeOf,
-    WithArg as WithArgOf,
-} from "${n.serverDataModel}";
-
-export type {
-    AggregateOp,
-    GroupByEntry,
-    OrderBy,
-    QueryArgs,
-    QueryPage,
-    RankPage,
-    RankResult,
-    RestrictableQueryOptions,
-    RestrictableQueryOptionsOf,
-    SearchFilterBuilder,
-    SearchReader,
-    TableAggregateOptions,
-    TableAggregateOptionsOf,
-    TableGroupByOptions,
-    TableGroupByOptionsOf,
-    TableRankOptions,
-    TableRankPageOptions,
-    Where,
-    WhereOf,
-    WhereOperators,
-} from "${n.serverDataModel}";
-
-export type TableName = ${r};
+`);return D(`${S}export type TableName = ${t};
 
 /**
  * The tables **this app declared** — every {@link TableName} except those an add-on
@@ -114,14 +82,14 @@ export type TableName = ${r};
  * const EXPORTED: readonly AppTableName[] = ["nodes", "tagColors"];
  * \`\`\`
  */
-export type AppTableName = ${a};
+export type AppTableName = ${n};
 
 export type Id<TName extends string> = string & { readonly __table: TName };
 
-${o}
+${r}
 
 export interface DataModel {
-${i}
+${a}
 }
 
 export type Doc<T extends keyof DataModel> = DataModel[T];
@@ -131,40 +99,40 @@ export type Doc<T extends keyof DataModel> = DataModel[T];
  * Used by \`TableReader.withIndex()\` to constrain callers to declared names.
  */
 export interface IndexNamesByTable {
-${s}
+${o}
 }
 
 export type IndexName<T extends keyof DataModel> = IndexNamesByTable[T];
 
 /** Per-table search-index name union. \`never\` for tables without searchIndex. */
 export interface SearchIndexNamesByTable {
-${l}
+${i}
 }
 
 export type SearchIndexName<T extends keyof DataModel> = SearchIndexNamesByTable[T];
 
 /** Per-table rank-index name union. \`never\` for tables without a rankIndex. */
 export interface RankIndexNamesByTable {
-${u}
+${s}
 }
 
 export type RankIndexName<T extends keyof DataModel> = RankIndexNamesByTable[T];
 
 /** Per-table geo-index name union. \`never\` for tables without a geoIndex. */
 export interface GeoIndexNamesByTable {
-${p}
+${d}
 }
 
 export type GeoIndexName<T extends keyof DataModel> = GeoIndexNamesByTable[T];
 
 /** Union of declared vector index names. \`never\` when none are declared. */
-export type VectorIndexName = ${f};
+export type VectorIndexName = ${u};
 
-${y}
+${p}
 
 /** Per-table insert shape, accepted by \`ctx.db.<table>.insert(...)\`. */
 export interface InsertModel {
-${N}
+${g}
 }
 
 export type Insert<T extends keyof DataModel> = InsertModel[T];
@@ -186,59 +154,14 @@ export interface ManyRelation<Target extends keyof DataModel> {
 
 /** Per-table relation map keyed by accessor name. \`{}\` for tables with none. */
 export interface Relations {
-${d}
-}
-
-/** The \`with\` argument for table \`T\` — see \`@lunora/server/data-model\`. */
-export type WithArg<T extends keyof DataModel> = WithArgOf<DataModel, Relations, T>;
-
-/** \`Doc<T>\` narrowed to exactly the relations requested in the with-arg \`W\`. */
-export type LoadWith<T extends keyof DataModel, W> = LoadWithOf<DataModel, Relations, T, W>;
-
-/** Read-only typed table accessor exposed on \`QueryCtx.db.<table>\`. */
-export type TableReaderFacade<T extends keyof DataModel> = TableReaderFacadeOf<DataModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, T, GeoIndexNamesByTable>;
-
-/** Read-write typed table accessor exposed on \`MutationCtx.db.<table>\` / \`ActionCtx.db.<table>\`. */
-export type TableWriterFacade<T extends keyof DataModel> = TableWriterFacadeOf<DataModel, InsertModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, T, GeoIndexNamesByTable>;
-
-/** Per-table read facade — \`ctx.db.<table>\` on a \`QueryCtx\`. */
-export type DatabaseReaderFacade = DatabaseReaderFacadeOf<DataModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, GeoIndexNamesByTable>;
-
-/** Per-table read-write facade — \`ctx.db.<table>\` on a \`MutationCtx\` / \`ActionCtx\`. */
-export type DatabaseWriterFacade = DatabaseWriterFacadeOf<DataModel, InsertModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, GeoIndexNamesByTable>;
-
-/** Insert builder returned by \`ctx.orm.insert(table)\`. */
-export interface OrmInsertBuilder<T extends keyof DataModel> {
-    values: (values: Insert<T>) => Promise<Id<T>>;
-}
-
-/** Replace builder returned by \`ctx.orm.replace(table, id)\` — swaps the whole document. */
-export interface OrmReplaceBuilder<T extends keyof DataModel> {
-    with: (values: Insert<T>) => Promise<void>;
-}
-
-/** Update builder returned by \`ctx.orm.update(table, id)\` — patches the named fields. */
-export interface OrmUpdateBuilder<T extends keyof DataModel> {
-    set: (values: Partial<Insert<T>>) => Promise<void>;
+${b}
 }
 
-/** Read-only ORM surface — \`ctx.orm\` on a \`QueryCtx\`. Mirrors \`ctx.db\` reads under a kitcn-style \`query\` namespace. */
-export interface OrmReader {
-    query: DatabaseReaderFacade;
-}
-
-/** Read-write ORM surface — \`ctx.orm\` on a \`MutationCtx\` / \`ActionCtx\`. Writes are addressed by id, like \`ctx.db\`. */
-export interface OrmWriter extends OrmReader {
-    delete: <T extends keyof DataModel>(table: T, id: Id<T>) => Promise<void>;
-    insert: <T extends keyof DataModel>(table: T) => OrmInsertBuilder<T>;
-    replace: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmReplaceBuilder<T>;
-    update: <T extends keyof DataModel>(table: T, id: Id<T>) => OrmUpdateBuilder<T>;
-}
-`},vn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,lt=/^(?:\.\.?\/)*_generated\//u,dt=/\.[A-Za-z]\w*$/u,qe=e=>e.replaceAll(vn,(t,n)=>{const r=n.replace(lt,"./");return`import("${dt.test(r)?r:`${r}.js`}")`}),$n=/import\("(?<spec>\.\.?\/[^"]+)"\)/gu,Sn=/^(?:\.\.?\/)+/u,Rn=e=>{const t=[];for(const n of e.split("/"))if(!(n===""||n===".")){if(n===".."&&t.length>0&&t.at(-1)!==".."){t.pop();continue}t.push(n)}return t.join("/")},Be=(e,t)=>e.replaceAll($n,(n,r)=>{if(lt.test(r.replace(Sn,"")))return n;const a=t.includes("/")?t.slice(0,t.lastIndexOf("/")):"",o=`../${Rn(`${a}/${r}`)}`;return`import("${dt.test(o)?o:`${o}.js`}")`}),Nn=["client","do","errors","flags","observability","platform","ratelimit","runtime","server","values"],On=new RegExp(String.raw`import\("@lunora/(?<pkg>${Nn.join("|")})(?<subpath>/[^"]*)?"\)`,"gu"),Tn={flags:new Set(["/web"]),platform:new Set},ct=(e,t)=>t?e.replaceAll(On,(n,r,a)=>{const o=Tn[r];return a&&o&&!o.has(a)?n:`import("lunorash/${r}${a??""}")`}):e,je=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),An=e=>e.output===void 0||e.output.kind==="any"?e.returnType:C(e.output),Ze=e=>{const t=new Map;for(const r of e){const a=t.get(r.filePath)??[];a.push(r),t.set(r.filePath,a)}const n=([r,a])=>{const o=a.toSorted((i,s)=>i.exportName.localeCompare(s.exportName)).map(i=>{const s=me(i.args),l=qe(Be(An(i),i.filePath));return`        ${i.exportName}: FunctionReference<"${i.kind}", ${s}, ${l}>;`}).join(`
-`);return`    ${D(R(r))}: {
+`,Be)},vn=/import\("(?<spec>(?:\.\.?\/)*_generated\/[^"]+)"\)/gu,lt=/^(?:\.\.?\/)*_generated\//u,dt=/\.[A-Za-z]\w*$/u,$n=e=>e.replaceAll(vn,(t,n)=>{const r=n.replace(lt,"./");return`import("${dt.test(r)?r:`${r}.js`}")`}),Sn=/import\("(?<spec>\.\.?\/[^"]+)"\)/gu,Rn=/^(?:\.\.?\/)+/u,Nn=e=>{const t=[];for(const n of e.split("/"))if(!(n===""||n===".")){if(n===".."&&t.length>0&&t.at(-1)!==".."){t.pop();continue}t.push(n)}return t.join("/")},Tn=(e,t)=>e.replaceAll(Sn,(n,r)=>{if(lt.test(r.replace(Rn,"")))return n;const a=t.includes("/")?t.slice(0,t.lastIndexOf("/")):"",o=`../${Nn(`${a}/${r}`)}`;return`import("${dt.test(o)?o:`${o}.js`}")`}),D=(e,t)=>$n(Tn(e,t)),On=["client","do","errors","flags","observability","platform","ratelimit","runtime","server","values"],An=new RegExp(String.raw`import\("@lunora/(?<pkg>${On.join("|")})(?<subpath>/[^"]*)?"\)`,"gu"),Ln={flags:new Set(["/web"]),platform:new Set},ct=(e,t)=>t?e.replaceAll(An,(n,r,a)=>{const o=Ln[r];return a&&o&&!o.has(a)?n:`import("lunorash/${r}${a??""}")`}):e,je=e=>["Doc","Id"].filter(t=>new RegExp(String.raw`\b${t}<`,"u").test(e)),Cn=e=>e.output===void 0||e.output.kind==="any"?e.returnType:N(e.output),Ze=e=>{const t=new Map;for(const r of e){const a=t.get(r.filePath)??[];a.push(r),t.set(r.filePath,a)}const n=([r,a])=>{const o=a.toSorted((i,s)=>i.exportName.localeCompare(s.exportName)).map(i=>{const s=D(fe(i.args),i.filePath),d=D(Cn(i),i.filePath);return`        ${i.exportName}: FunctionReference<"${i.kind}", ${s}, ${d}>;`}).join(`
+`);return`    ${I(R(r))}: {
 ${o}
     };`};return[...t.entries()].toSorted(([r],[a])=>r.localeCompare(a)).map(r=>n(r)).join(`
-`)},Ln=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let r="";if(e.length>0&&(r+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),r+=`
+`)},In=(e,t)=>{if(e.length===0&&t.length===0)return{block:"",importLine:""};const n=[];let r="";if(e.length>0&&(r+="\n/** Params type carried by a `defineWorkflow` definition (its phantom `__params`). */\ntype WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params } ? (unknown extends Params ? Record<string, unknown> : Params) : Record<string, unknown>;\n"),r+=`
 /** A typed reference to a durable workflow, addressable for \`cronJobs()\` targets. Mirrors \`@lunora/scheduler\`'s \`WorkflowReference\` structurally. */
 export interface WorkflowReference<Params = Record<string, unknown>> {
     readonly isLunoraWorkflow: true;
@@ -246,7 +169,7 @@ export interface WorkflowReference<Params = Record<string, unknown>> {
     readonly binding: string;
     readonly name: string;
 }
-`,e.length>0){const a=[...e].toSorted((s,l)=>s.exportName.localeCompare(l.exportName)),o=a.map(s=>`    ${s.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${s.exportName}>>;`).join(`
+`,e.length>0){const a=[...e].toSorted((s,d)=>s.exportName.localeCompare(d.exportName)),o=a.map(s=>`    ${s.exportName}: WorkflowReference<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${s.exportName}>>;`).join(`
 `),i=a.map(s=>`    ${s.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(s.bindingName)}, name: ${JSON.stringify(s.exportName)} },`).join(`
 `);r+=`
 /** This project's durable workflows, addressable as typed references (e.g. \`crons.daily("digest", …, workflows.digestPipeline, params)\`). */
@@ -258,7 +181,7 @@ export const workflows: WorkflowsRef = {
 ${i}
 };
 `,n.push(`import type * as lunoraWorkflowDefinitions from "../workflows.js";
-`)}if(t.length>0){const a=[...t].toSorted((s,l)=>s.exportName.localeCompare(l.exportName)),o=a.map(s=>`    ${s.exportName}: WorkflowReference<AgentRunInput>;`).join(`
+`)}if(t.length>0){const a=[...t].toSorted((s,d)=>s.exportName.localeCompare(d.exportName)),o=a.map(s=>`    ${s.exportName}: WorkflowReference<AgentRunInput>;`).join(`
 `),i=a.map(s=>`    ${s.exportName}: { isLunoraWorkflow: true, binding: ${JSON.stringify(s.bindingName)}, name: ${JSON.stringify(s.name)} },`).join(`
 `);r+=`
 /** This project's durable agents, addressable as typed references for \`cronJobs()\` — each fire starts a fresh agent run (e.g. \`crons.daily("sweep", …, agents.support, { input, threadKey })\`). */
@@ -270,7 +193,7 @@ export const agents: AgentsRef = {
 ${i}
 };
 `,n.push(`import type { AgentRunInput } from "@lunora/agent";
-`)}return{block:r,importLine:n.join("")}},Cn=()=>Object.keys(tt().functions).toSorted((e,t)=>e.localeCompare(t)),ut=e=>new Set(e.filter(t=>R(t.filePath)==="agents").map(t=>t.exportName)),In=()=>new Set(Object.entries(tt().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),Dn=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const r=ut(t),a=In(),o=t.find(s=>R(s.filePath)==="agents"&&a.has(s.exportName));if(o)throw new Z("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const i=Cn().filter(s=>!r.has(s));return i.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
+`)}return{block:r,importLine:n.join("")}},Dn=()=>Object.keys(tt().functions).toSorted((e,t)=>e.localeCompare(t)),ut=e=>new Set(e.filter(t=>R(t.filePath)==="agents").map(t=>t.exportName)),_n=()=>new Set(Object.entries(tt().functions).filter(([,e])=>e.visibility==="internal").map(([e])=>e)),En=(e,t)=>{const n={importLine:"",lines:"",prelude:""};if(e.length===0)return n;const r=ut(t),a=_n(),o=t.find(s=>R(s.filePath)==="agents"&&a.has(s.exportName));if(o)throw new Z("INTERNAL",`@lunora/codegen: "agents:${o.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${o.exportName}" export in ${o.filePath}`);const i=Dn().filter(s=>!r.has(s));return i.length===0?n:{importLine:`import { agentComponent } from "@lunora/agent/component";
 `,lines:i.map(s=>`    "agents:${s}": lunoraAgentRuntimeFunctions.${s} as unknown as RegisteredLunoraFunction,`).join(`
 `),prelude:`
 /**
@@ -279,14 +202,14 @@ ${i}
  * subscribe to the public queries (\`agents:agentMessages\` is the live thread view).
  */
 const lunoraAgentRuntimeFunctions = agentComponent().functions;
-`}},_n=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(r=>R(r.filePath)==="sandbox"&&r.exportName==="invoke");if(n)throw new Z("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
-`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},En=(e,t)=>{if(e.length===0)return[];const n=ut(t),r=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const a of e)a.voice&&r.push({args:{threadKey:{kind:"string"}},exportName:`${a.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return r.filter(a=>!n.has(a.exportName))},Pn=(e,t)=>{if(e.length===0)return[];const n=new Set(t.filter(r=>R(r.filePath)==="mutators").map(r=>r.exportName));return e.filter(r=>!n.has(r.exportName)).map(r=>({args:r.args,exportName:r.exportName,filePath:r.filePath,kind:"mutation",returnType:r.returnType}))},Fn=e=>{const t=e.filter(i=>i.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const i of t){const s=n.get(i.filePath)??[];s.push(i),n.set(i.filePath,s)}const r=[...n.entries()].toSorted(([i],[s])=>i.localeCompare(s)),a=r.map(([i,s])=>{const l=s.map(u=>{const p=qe(Be(u.chunkType??"unknown",u.filePath));return`        ${D(u.exportName)}: HttpStreamRef<${p}, ${me(u.searchParams)}, ${me(u.params)}>;`}).join(`
-`);return`    ${D(R(i))}: {
-${l}
+`}},Pn=(e,t)=>{if(!e)return{importLine:"",lines:"",prelude:""};const n=t.find(r=>R(r.filePath)==="sandbox"&&r.exportName==="invoke");if(n)throw new Z("INTERNAL",`@lunora/codegen: "sandbox:invoke" is reserved for the batteries-included sandbox tool dispatcher (browserTool/containerTool) — rename the "invoke" export in ${n.filePath}`);return{importLine:`import { sandboxComponent } from "@lunora/agent/component";
+`,lines:'    "sandbox:invoke": lunoraSandbox.invoke as unknown as RegisteredLunoraFunction,',prelude:"\n/**\n * The `@lunora/agent` sandbox dispatcher — auto-registered because `lunora/`\n * imports a sandbox tool (`browserTool`/`containerTool`). The batteries-included\n * tools dispatch to this internal action, which runs on an action ctx carrying\n * `ctx.browser` + `ctx.containers` (the durable tool step itself has neither).\n */\nconst lunoraSandbox = sandboxComponent();\n"}},Mn=(e,t)=>{if(e.length===0)return[];const n=ut(t),r=[{args:{key:{kind:"string"},limit:{inner:{kind:"number"},kind:"optional"}},exportName:"agentMessages",filePath:"agents",kind:"query",returnType:"Record<string, unknown>[]"},{args:{decision:{kind:"union",members:[{kind:"literal",literalValue:'"approve"'},{kind:"literal",literalValue:'"reject"'}]},instanceId:{kind:"string"},note:{inner:{kind:"string"},kind:"optional"},threadKey:{kind:"string"},toolCallId:{kind:"string"}},exportName:"agentResolveApproval",filePath:"agents",kind:"mutation",returnType:"{ resolved: boolean }"},{args:{agent:{kind:"string"},input:{kind:"string"},threadKey:{kind:"string"},title:{inner:{kind:"string"},kind:"optional"}},exportName:"agentRun",filePath:"agents",kind:"mutation",returnType:"{ id: string; threadKey: string }"},{args:{key:{kind:"string"}},exportName:"agentState",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"},{args:{key:{kind:"string"}},exportName:"agentThread",filePath:"agents",kind:"query",returnType:"Record<string, unknown> | undefined"}];for(const a of e)a.voice&&r.push({args:{threadKey:{kind:"string"}},exportName:`${a.exportName}Voice`,filePath:"agents",kind:"stream",returnType:"Record<string, unknown>"});return r.filter(a=>!n.has(a.exportName))},Fn=(e,t)=>{if(e.length===0)return[];const n=new Set(t.filter(r=>R(r.filePath)==="mutators").map(r=>r.exportName));return e.filter(r=>!n.has(r.exportName)).map(r=>({args:r.args,exportName:r.exportName,filePath:r.filePath,kind:"mutation",returnType:r.returnType}))},qn=e=>{const t=e.filter(i=>i.stream);if(t.length===0)return{block:"",body:""};const n=new Map;for(const i of t){const s=n.get(i.filePath)??[];s.push(i),n.set(i.filePath,s)}const r=[...n.entries()].toSorted(([i],[s])=>i.localeCompare(s)),a=r.map(([i,s])=>{const d=s.map(u=>{const p=D(u.chunkType??"unknown",u.filePath),g=D(fe(u.searchParams),u.filePath),b=D(fe(u.params),u.filePath);return`        ${I(u.exportName)}: HttpStreamRef<${p}, ${g}, ${b}>;`}).join(`
+`);return`    ${I(R(i))}: {
+${d}
     };`}).join(`
-`),o=r.map(([i,s])=>{const l=s.map(u=>`        ${D(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
-`);return`    ${D(R(i))}: {
-${l}
+`),o=r.map(([i,s])=>{const d=s.map(u=>`        ${I(u.exportName)}: { method: ${JSON.stringify(u.method)}, path: ${JSON.stringify(u.path)} },`).join(`
+`);return`    ${I(R(i))}: {
+${d}
     },`}).join(`
 `);return{block:`
 /** This project's HTTP-SSE stream routes (\`httpRoute.<verb>(path).stream()\`), addressable as typed references for \`client.httpStream\` / \`useHttpStream\`. */
@@ -297,26 +220,26 @@ ${a}
 export const httpStreams: HttpStreamsRef = {
 ${o}
 };
-`,body:a}},Ar=e=>{const{agents:t=[],functions:n,httpRoutes:r=[],mutators:a=[],useUmbrella:o=!1,workflows:i=[]}=e,s=G(o),l=[...n.filter(S=>S.visibility!=="internal"),...En(t,n),...Pn(a,n)],u=n.filter(S=>S.visibility==="internal"),p=Ze(l),f=Ze(u),y=Fn(r),N=`${p}
-${f}
-${y.body}`,d=je(N),c=d.length>0?`
-import type { ${d.join(", ")} } from "./dataModel.js";
-`:"",g=p?`
+`,body:a}},Cr=e=>{const{agents:t=[],functions:n,httpRoutes:r=[],mutators:a=[],useUmbrella:o=!1,workflows:i=[]}=e,s=ee(o),d=[...n.filter($=>$.visibility!=="internal"),...Mn(t,n),...Fn(a,n)],u=n.filter($=>$.visibility==="internal"),p=Ze(d),g=Ze(u),b=qn(r),c=`${p}
+${g}
+${b.body}`,l=je(c),f=l.length>0?`
+import type { ${l.join(", ")} } from "./dataModel.js";
+`:"",x=p?`
 ${p}
-`:"",b=f?`
-${f}
-`:"",k=Ln(i,t),$=`export interface ApiTypes {${g}}
+`:"",k=g?`
+${g}
+`:"",v=In(i,t),A=`export interface ApiTypes {${x}}
 
 export const api = anyApi as unknown as ApiTypes;
 
 /** Internal functions — callable only server-side via \`ctx.run*\`, never from a client. */
-export interface InternalApiTypes {${b}}
+export interface InternalApiTypes {${k}}
 
 export const internal = anyApi as unknown as InternalApiTypes;
-${k.block}${y.block}`,T=[...$.includes("FunctionReference<")?["FunctionReference"]:[],...y.block===""?[]:["HttpStreamRef"]],O=T.length>0?`import type { ${T.join(", ")} } from "${s.client}";
-`:"";return ct(`${v}import { anyApi } from "${s.client}";
-${O}${k.importLine}${c}
-${$}`,o)},Lr=e=>e?`${v}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
+${v.block}${b.block}`,P=[...A.includes("FunctionReference<")?["FunctionReference"]:[],...b.block===""?[]:["HttpStreamRef"]],L=P.length>0?`import type { ${P.join(", ")} } from "${s.client}";
+`:"";return ct(`${S}import { anyApi } from "${s.client}";
+${L}${v.importLine}${f}
+${A}`,o)},Ir=e=>e?`${S}import { createSeedClient as createSeedClientBase } from "@lunora/seed";
 import type { SeedClient, SeedClientOptions } from "@lunora/seed";
 
 import schema from "../schema.js";
@@ -333,9 +256,9 @@ import type { InsertModel } from "./dataModel.js";
  * const { posts } = await seed.posts((x) => x([10, 20]));
  */
 export const createSeedClient = (options?: SeedClientOptions): SeedClient<InsertModel> => createSeedClientBase<InsertModel>(schema, options);
-`:"",Cr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const r=G(n),a=l=>l.table===void 0?"Row":`Doc<${JSON.stringify(l.table)}> & Row`,o=e.map(l=>{m(l.exportName,"shape export name");const u=a(l),p=me(l.args),f=Object.keys(l.args).length>0,y=f?`        args: ${p};`:`        args?: ${p};`,N=f?`(args: ${p}) => void`:`(args?: ${p}) => void`,d=`${l.exportName}CollectionOptions`;return`/** Options for the \`${l.exportName}\` shape binding. */
-export interface ${Fe(d)} {
-${y}
+`:"",Dr=(e,t,n=!1)=>{if(e.length===0||!t)return"";const r=ee(n),a=d=>d.table===void 0?"Row":`Doc<${JSON.stringify(d.table)}> & Row`,o=e.map(d=>{m(d.exportName,"shape export name");const u=a(d),p=D(fe(d.args),d.filePath),g=Object.keys(d.args).length>0,b=g?`        args: ${p};`:`        args?: ${p};`,c=g?`(args: ${p}) => void`:`(args?: ${p}) => void`,l=`${d.exportName}CollectionOptions`;return`/** Options for the \`${d.exportName}\` shape binding. */
+export interface ${Fe(l)} {
+${b}
     /**
      * Share the optimistic-overlay gate with other collections + mutators on this
      * shard. Defaults to the shared per-shard registry, which is almost always what
@@ -355,11 +278,11 @@ ${y}
 }
 
 /**
- * Collection options for the \`${l.exportName}\` replication shape: \`config\` for
+ * Collection options for the \`${d.exportName}\` replication shape: \`config\` for
  * \`createCollection\`, plus the \`checkpoints\` registry to hand \`bindMutators\` and
  * \`scope\` to re-point the subscription.
  */
-export const ${l.exportName}CollectionOptions = (options: ${Fe(d)}): LunoraCollectionOptions<${u}> =>
+export const ${d.exportName}CollectionOptions = (options: ${Fe(l)}): LunoraCollectionOptions<${u}> =>
     lunoraCollectionOptions<${u}>({
         client: options.client,
         ...(options.checkpoints === undefined ? {} : { checkpoints: options.checkpoints }),
@@ -367,27 +290,27 @@ export const ${l.exportName}CollectionOptions = (options: ${Fe(d)}): LunoraColle
         ...(options.load === undefined ? {} : { load: options.load }),
         ...(options.onError === undefined ? {} : { onError: options.onError }),
         ...(options.shardKey === undefined ? {} : { shardKey: options.shardKey }),
-        shape: { args: options.args, name: ${JSON.stringify(l.exportName)}, ...(options.shardKey === undefined ? {} : { shardKey: options.shardKey }) },
+        shape: { args: options.args, name: ${JSON.stringify(d.exportName)}, ...(options.shardKey === undefined ? {} : { shardKey: options.shardKey }) },
     });
 
-/** Live collection for the \`${l.exportName}\` shape, with its sync controls. */
-export const ${l.exportName}Collection = (
-    options: ${Fe(d)},
-): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${N} } => {
-    const { checkpoints, config, scope } = ${l.exportName}CollectionOptions(options);
+/** Live collection for the \`${d.exportName}\` shape, with its sync controls. */
+export const ${d.exportName}Collection = (
+    options: ${Fe(l)},
+): { checkpoints: CheckpointRegistry; collection: Collection<${u}, string>; scope: ${c} } => {
+    const { checkpoints, config, scope } = ${d.exportName}CollectionOptions(options);
 
     return { checkpoints, collection: createCollection(config), scope };
 };`}).join(`
 
 `),i=je(o),s=i.length>0?`import type { ${i.join(", ")} } from "./dataModel.js";
-`:"";return`${v}import type { LunoraClient, SubscriptionError } from "${r.client}";
+`:"";return`${S}import type { LunoraClient, SubscriptionError } from "${r.client}";
 import { lunoraCollectionOptions } from "@lunora/db/collections";
 import type { CheckpointRegistry, LunoraCollectionOptions, Row } from "@lunora/db";
 import type { Collection } from "@tanstack/db";
 import { createCollection } from "@tanstack/db";
 ${s}
 ${o}
-`},Mn=(e,t)=>`lunora_${R(e)}_${String(t)}`,qn=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
+`},Bn=(e,t)=>`lunora_${R(e)}_${String(t)}`,jn=`const callRegistered = async <R>(context: CallerCtx, functionPath: string, args: Record<string, unknown> | undefined): Promise<R> => {
     const registered = LUNORA_FUNCTIONS[functionPath];
 
     if (!registered) {
@@ -395,45 +318,45 @@ ${o}
     }
 
     return (await registered.handler(context, args ?? {})) as R;
-};`,Bn=(e,t,n=[],r=[])=>{const a=new Map,o=d=>{a.has(d)||a.set(d,Mn(d,a.size))};for(const d of e)o(d.filePath);for(const d of t)o(d.filePath);for(const d of n)o(d.filePath);for(const d of r)o(d.filePath);const i=[...a.entries()].map(([d,c])=>{if(!bn.test(d))throw new Z("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(d)}`);return`import * as ${c} from "../${d}.js";`}).join(`
-`),s=e.map(d=>`    "${R(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
-`),l=t.map(d=>`    ${JSON.stringify(d.id)}: ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredDataMigration,`).join(`
-`),u=n.map(d=>`    "${R(d.filePath)}:${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredLunoraFunction,`).join(`
-`),p=r.map(d=>`    "${d.exportName}": ${a.get(d.filePath)??""}.${d.exportName} as unknown as RegisteredShape,`).join(`
-`),f=n.map(d=>`${R(d.filePath)}:${d.exportName}`),y=[s,u].filter(d=>d.length>0).join(`
-`),N=e.map(d=>{if(d.lifecycle||Object.keys(d.args).length===0)return;const c=fn(d.args);return c===void 0?void 0:`installCompiledValidatorMap(${a.get(d.filePath)??""}.${d.exportName}.args, ${c});`}).filter(d=>d!==void 0).join(`
-`);return{dispatchBody:y.length>0?`
-${y}
+};`,Wn=(e,t,n=[],r=[])=>{const a=new Map,o=l=>{a.has(l)||a.set(l,Bn(l,a.size))};for(const l of e)o(l.filePath);for(const l of t)o(l.filePath);for(const l of n)o(l.filePath);for(const l of r)o(l.filePath);const i=[...a.entries()].map(([l,f])=>{if(!bn.test(l))throw new Z("INTERNAL",`@lunora/codegen: refusing to emit import for unsafe file path: ${JSON.stringify(l)}`);return`import * as ${f} from "../${l}.js";`}).join(`
+`),s=e.map(l=>`    "${R(l.filePath)}:${l.exportName}": ${a.get(l.filePath)??""}.${l.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),d=t.map(l=>`    ${JSON.stringify(l.id)}: ${a.get(l.filePath)??""}.${l.exportName} as unknown as RegisteredDataMigration,`).join(`
+`),u=n.map(l=>`    "${R(l.filePath)}:${l.exportName}": ${a.get(l.filePath)??""}.${l.exportName} as unknown as RegisteredLunoraFunction,`).join(`
+`),p=r.map(l=>`    "${l.exportName}": ${a.get(l.filePath)??""}.${l.exportName} as unknown as RegisteredShape,`).join(`
+`),g=n.map(l=>`${R(l.filePath)}:${l.exportName}`),b=[s,u].filter(l=>l.length>0).join(`
+`),c=e.map(l=>{if(l.lifecycle||Object.keys(l.args).length===0)return;const f=fn(l.args);return f===void 0?void 0:`installCompiledValidatorMap(${a.get(l.filePath)??""}.${l.exportName}.args, ${f});`}).filter(l=>l!==void 0).join(`
+`);return{dispatchBody:b.length>0?`
+${b}
 `:"",importBlock:i.length>0?`${i}
 
-`:"",installBlock:N,migrationBody:l.length>0?`
-${l}
-`:"",mutatorPaths:f,shapeBody:p.length>0?`
+`:"",installBlock:c,migrationBody:d.length>0?`
+${d}
+`:"",mutatorPaths:g,shapeBody:p.length>0?`
 ${p}
-`:""}},jn=e=>{const t=new Map;for(const a of e){const o=t.get(a.filePath)??[];o.push(a),t.set(a.filePath,o)}const n=[...t.entries()].toSorted(([a],[o])=>a.localeCompare(o)),r=n.map(([a,o])=>{const i=o.map(s=>{const l=me(s.args),u=l==="{}"?"?":"",p=qe(Be(s.returnType,s.filePath));return s.kind==="stream"?`        ${s.exportName}: (args${u}: ${l}) => Promise<AsyncIterable<${p}>>;`:`        ${s.exportName}: (args${u}: ${l}) => Promise<${p}>;`}).join(`
-`);return`    ${D(R(a))}: {
+`:""}},Un=e=>{const t=new Map;for(const a of e){const o=t.get(a.filePath)??[];o.push(a),t.set(a.filePath,o)}const n=[...t.entries()].toSorted(([a],[o])=>a.localeCompare(o)),r=n.map(([a,o])=>{const i=o.map(s=>{const d=D(fe(s.args),s.filePath),u=d==="{}"?"?":"",p=D(s.returnType,s.filePath);return s.kind==="stream"?`        ${s.exportName}: (args${u}: ${d}) => Promise<AsyncIterable<${p}>>;`:`        ${s.exportName}: (args${u}: ${d}) => Promise<${p}>;`}).join(`
+`);return`    ${I(R(a))}: {
 ${i}
     };`}).join(`
-`);return{implementation:n.map(([a,o])=>{const i=R(a),s=o.map(l=>`        ${l.exportName}: (args) => callRegistered(context, "${i}:${l.exportName}", args),`).join(`
-`);return`    ${D(i)}: {
+`);return{implementation:n.map(([a,o])=>{const i=R(a),s=o.map(d=>`        ${d.exportName}: (args) => callRegistered(context, "${i}:${d.exportName}", args),`).join(`
+`);return`    ${I(i)}: {
 ${s}
     },`}).join(`
-`),types:r}},Wn=(e,t=[])=>{const n=new Set;for(const r of e.tables)for(const a of Object.values(r.shape)){const o=a.kind==="optional"&&a.inner?a.inner:a;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const r of t)r!==""&&r!=="default"&&n.add(r);return["default",...[...n].toSorted((r,a)=>r.localeCompare(a))]},Ir=({agents:e=[],containers:t=[],env:n,hasAccessFacade:r=!1,hasAi:a=!1,hasAnalytics:o=!1,hasBrowser:i=!1,hasFlags:s=!1,hasHyperdrive:l=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:f=!1,hasPayments:y=!1,hasPipelines:N=!1,hasR2sql:d=!1,hasX402:c=!1,identity:g,queues:b=[],schema:k,storageRuleBuckets:$=[],useUmbrella:T=!1,workflows:O=[]}={})=>{const S=G(T),x=Wn(k??{tables:[]},$).map(h=>JSON.stringify(h)).join(" | "),P=a?`import type { LunoraAi } from "@lunora/ai";
-`:"",ee=a?`
-    readonly ai: LunoraAi;`:"",F=y?`import type { LunoraPayment } from "@lunora/payment";
-`:"",te=y?`
-    readonly payments: LunoraPayment;`:"",ne=c?`import type { X402Pay } from "@lunora/x402/pay";
-`:"",B=c?`
-    readonly x402: X402Pay;`:"",A=t.length>0?`import type { ContainerAccessor } from "@lunora/container";
+`),types:r}},Kn=(e,t=[])=>{const n=new Set;for(const r of e.tables)for(const a of Object.values(r.shape)){const o=a.kind==="optional"&&a.inner?a.inner:a;o.kind==="storage"&&typeof o.bucket=="string"&&o.bucket!==""&&n.add(o.bucket)}for(const r of t)r!==""&&r!=="default"&&n.add(r);return["default",...[...n].toSorted((r,a)=>r.localeCompare(a))]},_r=({agents:e=[],containers:t=[],env:n,hasAccessFacade:r=!1,hasAi:a=!1,hasAnalytics:o=!1,hasBrowser:i=!1,hasFlags:s=!1,hasHyperdrive:d=!1,hasImages:u=!1,hasKv:p=!1,hasNotify:g=!1,hasPayments:b=!1,hasPipelines:c=!1,hasR2sql:l=!1,hasX402:f=!1,identity:x,queues:k=[],schema:v,storageRuleBuckets:A=[],useUmbrella:P=!1,workflows:L=[]}={})=>{const $=ee(P),w=Kn(v??{tables:[]},A).map(h=>JSON.stringify(h)).join(" | "),M=a?`import type { LunoraAi } from "@lunora/ai";
+`:"",te=a?`
+    readonly ai: LunoraAi;`:"",F=b?`import type { LunoraPayment } from "@lunora/payment";
+`:"",ne=b?`
+    readonly payments: LunoraPayment;`:"",re=f?`import type { X402Pay } from "@lunora/x402/pay";
+`:"",j=f?`
+    readonly x402: X402Pay;`:"",T=t.length>0?`import type { ContainerAccessor } from "@lunora/container";
 `:"",z=t.length>0?`
     readonly containers: {${t.map(h=>`
         readonly ${h.exportName}: ContainerAccessor;`).join("")}
-    };`:"",L=[...a?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...t.map(h=>(m(h.bindingName,`container binding "${h.bindingName}"`),`    /** Durable Object namespace for the \`${h.exportName}\` container. */
-    readonly ${h.bindingName}?: unknown;`)),...O.map(h=>(m(h.bindingName,`workflow binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` workflow. */
-    readonly ${h.bindingName}?: unknown;`)),...b.map(h=>(m(h.bindingName,`queue binding "${h.bindingName}"`),`    /** Queue producer binding for the \`${h.exportName}\` queue. */
+    };`:"",O=[...a?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...t.map(h=>(m(h.bindingName,`container binding "${h.bindingName}"`),`    /** Durable Object namespace for the \`${h.exportName}\` container. */
+    readonly ${h.bindingName}?: unknown;`)),...L.map(h=>(m(h.bindingName,`workflow binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` workflow. */
+    readonly ${h.bindingName}?: unknown;`)),...k.map(h=>(m(h.bindingName,`queue binding "${h.bindingName}"`),`    /** Queue producer binding for the \`${h.exportName}\` queue. */
     readonly ${h.bindingName}?: unknown;`)),...e.map(h=>(m(h.bindingName,`agent binding "${h.bindingName}"`),`    /** Workflow binding for the \`${h.exportName}\` agent. */
     readonly ${h.bindingName}?: unknown;`))].join(`
-`),I=`
+`),C=`
 
 /**
  * This project's Cloudflare bindings, as far as codegen can discover them from
@@ -446,26 +369,26 @@ ${s}
  * surface, so treat them as \`Fetcher\`/\`Service<unknown>\` and cast.
  */
 export interface CloudflareBindings {
-    readonly [binding: string]: unknown;${L?`
-${L}`:""}
+    readonly [binding: string]: unknown;${O?`
+${O}`:""}
 }
 
 /** Alias for {@link CloudflareBindings} — the typed shape of \`env\`. */
-export type Env = CloudflareBindings;`,M=(h,_e)=>_e?dn.get(h)?.field??"":"",re=M("kv",p),ae=M("analytics",o),ke=M("hyperdrive",l),ve=M("browser",i),$e=M("images",u),oe=M("pipelines",N),K=M("r2sql",d),E=(k?.vectorIndexes.length??0)>0,Q=E?' | "vectors"':"",X=E?`
-    readonly vectors: VectorSearch<VectorIndexName>;`:"",se=E?`
-    readonly vectors: VectorSearchReader<VectorIndexName>;`:"",H=E?`import type { VectorSearch, VectorSearchReader } from "${S.server}";
+export type Env = CloudflareBindings;`,q=(h,Ee)=>Ee?dn.get(h)?.field??"":"",ae=q("kv",p),oe=q("analytics",o),ve=q("hyperdrive",d),$e=q("browser",i),Se=q("images",u),se=q("pipelines",c),Q=q("r2sql",l),E=(v?.vectorIndexes.length??0)>0,H=E?' | "vectors"':"",X=E?`
+    readonly vectors: VectorSearch<VectorIndexName>;`:"",ie=E?`
+    readonly vectors: VectorSearchReader<VectorIndexName>;`:"",V=E?`import type { VectorSearch, VectorSearchReader } from "${$.server}";
 import type { VectorIndexName } from "./dataModel.js";
-`:"",j=r?`
+`:"",W=r?`
     /** Verified Cloudflare Access identity — a synchronous facade over the resolved claims (email / groups / hasGroup / claims). Anonymous when no Access token is present. */
-    readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",W=s?`
+    readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",U=s?`
     /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
-    readonly flags: import("${S.flags}").LunoraFlags;`:"",U=f?`
+    readonly flags: import("${$.flags}").LunoraFlags;`:"",K=g?`
     /** Multi-channel notifications (@lunora/notify): send / chat / inApp / webhook plus the push device sub-facade. Sends are external I/O — confine them to action handlers. */
     readonly notify: import("@lunora/notify").LunoraNotify;
     /** Device push sub-facade — the same object as ctx.notify.push (register / send / broadcast). Sends belong in action handlers. */
-    readonly push: import("@lunora/notify").LunoraPush;`:"",q=O.length>0,Y=q?`import type { WorkflowHandle } from "@lunora/workflow";
+    readonly push: import("@lunora/notify").LunoraPush;`:"",B=L.length>0,Y=B?`import type { WorkflowHandle } from "@lunora/workflow";
 import type * as lunoraWorkflowDefinitions from "../workflows.js";
-`:"",Se=q?`
+`:"",Re=B?`
 
 /** Params type carried by a \`defineWorkflow\` definition (its phantom \`__params\`). */
 type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params }
@@ -476,43 +399,43 @@ type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params
 
 /** This project's declared workflows, addressable from \`ctx.workflows\` by their \`lunora/workflows.ts\` export name. */
 export interface LunoraWorkflows {
-${O.map(h=>`    get(name: ${JSON.stringify(h.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${h.exportName}>>;`).join(`
+${L.map(h=>`    get(name: ${JSON.stringify(h.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${h.exportName}>>;`).join(`
 `)}
-}`:"",fe=q?' | "workflows"':"",be=q?`
-    readonly workflows: LunoraWorkflows;`:"",ie=b.length>0,Re=ie?`import type { QueueProducer } from "@lunora/queue";
+}`:"",be=B?' | "workflows"':"",ye=B?`
+    readonly workflows: LunoraWorkflows;`:"",le=k.length>0,Ne=le?`import type { QueueProducer } from "@lunora/queue";
 import type * as lunoraQueueDefinitions from "../queues.js";
-`:"",Ne=ie?`
+`:"",Te=le?`
 
 /** Message body type carried by a \`defineQueue\` definition (its phantom \`__lunoraBody\`). */
 type QueueBodyOf<Definition> = Definition extends { __lunoraBody?: infer Body } ? (unknown extends Body ? unknown : NonNullable<Body>) : unknown;
 
 /** This project's declared queues, addressable from \`ctx.queues\` by their \`lunora/queues.ts\` export name. */
 export interface LunoraQueues {
-${b.map(h=>`    readonly ${h.exportName}: QueueProducer<QueueBodyOf<typeof lunoraQueueDefinitions.${h.exportName}>>;`).join(`
+${k.map(h=>`    readonly ${h.exportName}: QueueProducer<QueueBodyOf<typeof lunoraQueueDefinitions.${h.exportName}>>;`).join(`
 `)}
-}`:"",ye=ie?`
-    readonly queues: LunoraQueues;`:"",le=e.length>0,Oe=le?`import type { AgentHandle } from "@lunora/agent";
-`:"",Te=le?`
+}`:"",we=le?`
+    readonly queues: LunoraQueues;`:"",de=e.length>0,Oe=de?`import type { AgentHandle } from "@lunora/agent";
+`:"",Ae=de?`
 
 /** This project's declared agents, addressable from \`ctx.agents\` by their \`lunora/agents.ts\` export name. */
 export interface LunoraAgents {
 ${e.map(h=>(m(h.exportName,`agent export "${h.exportName}"`),`    readonly ${h.exportName}: AgentHandle;`)).join(`
 `)}
-}`:"",we=le?`
-    readonly agents: LunoraAgents;`:"",Ae=g?`import type { InferIdentity } from "${S.server}";
+}`:"",xe=de?`
+    readonly agents: LunoraAgents;`:"",Le=x?`import type { InferIdentity } from "${$.server}";
 import type * as lunoraIdentityContract from "../identity.js";
-`:"",Le=g?`
+`:"",Ce=x?`
 
 /** This app's declared identity claim contract (\`defineIdentity\` in \`lunora/identity.ts\`) — the typed shape of \`ctx.auth.getIdentity()\`, the RLS policy \`ctx.auth.identity\`, and the \`authorizeShard\`/\`authorizeFanOut\` identity argument. */
-export type Identity = InferIdentity<typeof lunoraIdentityContract.${g.exportName}>;
+export type Identity = InferIdentity<typeof lunoraIdentityContract.${x.exportName}>;
 
 /** \`ctx.auth\` narrowed so \`getIdentity()\` resolves the declared {@link Identity} contract instead of the untyped claim bag. */
-type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: () => Promise<Identity | null> };`:"",de=g?' | "auth"':"",ce=g?`
-    readonly auth: NarrowedAuth;`:"",Ce=g?", Identity":"",Ie=n?`import type * as lunoraEnvContract from "../env.js";
-`:"",De=n?`
+type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: () => Promise<Identity | null> };`:"",ce=x?' | "auth"':"",ue=x?`
+    readonly auth: NarrowedAuth;`:"",Ie=x?", Identity":"",De=n?`import type * as lunoraEnvContract from "../env.js";
+`:"",_e=n?`
 
 /** This app's declared env contract (\`defineEnv\` in \`lunora/env.ts\`) — the validated, coercion-aware shape of \`ctx.env\`. */
-export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",ue=n?' | "env"':"",pe=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${v}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${S.server}";
+export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${n.exportName}>;`:"",pe=n?' | "env"':"",he=n?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${S}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${$.server}";
 import type {
     ActionBuilder,
     ActionCtx as ActionCtxBase,
@@ -533,14 +456,102 @@ import type {
     Storage as StorageBase,
     TableReader,
     Validator,
-} from "${S.server}";
+} from "${$.server}";
+
+import type {
+    DatabaseReaderFacade as DatabaseReaderFacadeOf,
+    DatabaseWriterFacade as DatabaseWriterFacadeOf,
+    LoadWith as LoadWithOf,
+    TableReaderFacade as TableReaderFacadeOf,
+    TableWriterFacade as TableWriterFacadeOf,
+    WithArg as WithArgOf,
+} from "${$.serverDataModel}";
+
+export type {
+    AggregateOp,
+    GroupByEntry,
+    OrderBy,
+    QueryArgs,
+    QueryPage,
+    RankPage,
+    RankResult,
+    RestrictableQueryOptions,
+    RestrictableQueryOptionsOf,
+    SearchFilterBuilder,
+    SearchReader,
+    TableAggregateOptions,
+    TableAggregateOptionsOf,
+    TableGroupByOptions,
+    TableGroupByOptionsOf,
+    TableRankOptions,
+    TableRankPageOptions,
+    Where,
+    WhereOf,
+    WhereOperators,
+} from "${$.serverDataModel}";
 
-import type { DataModel, DatabaseReaderFacade, DatabaseWriterFacade, Doc, GeoIndexNamesByTable, Id as IdOfTable, IndexNamesByTable, OrmReader, OrmWriter, Relations, SearchIndexNamesByTable, TableName } from "./dataModel.js";
-${H}${P}${F}${ne}${A}${Y}${Re}${Oe}${Ae}${Ie}
+import type { DataModel, Doc, GeoIndexNamesByTable, Id as IdOfTable, IndexNamesByTable, Insert, InsertModel, RankIndexNamesByTable, Relations, SearchIndexNamesByTable, TableName } from "./dataModel.js";
+${V}${M}${F}${re}${T}${Y}${Ne}${Oe}${Le}${De}
 export type { AppTableName, DataModel, Doc, Id, TableName } from "./dataModel.js";
 
+/**
+ * The query-DSL bindings: \`@lunora/server/data-model\`'s generics parameterized
+ * over this project's \`DataModel\` / \`InsertModel\` / \`Relations\` / index maps.
+ *
+ * They live here rather than in \`dataModel.ts\` because they are the half that
+ * needs the SERVER package. Keeping \`dataModel.ts\` free of it lets a sibling
+ * package — a web app, another Worker — compile \`api.ts\` for its \`Doc\`/\`Id\`
+ * types without installing a server dependency to do it.
+ */
+
+/** The \`with\` argument for table \`T\` — see \`@lunora/server/data-model\`. */
+export type WithArg<T extends keyof DataModel> = WithArgOf<DataModel, Relations, T>;
+
+/** \`Doc<T>\` narrowed to exactly the relations requested in the with-arg \`W\`. */
+export type LoadWith<T extends keyof DataModel, W> = LoadWithOf<DataModel, Relations, T, W>;
+
+/** Read-only typed table accessor exposed on \`QueryCtx.db.<table>\`. */
+export type TableReaderFacade<T extends keyof DataModel> = TableReaderFacadeOf<DataModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, T, GeoIndexNamesByTable>;
+
+/** Read-write typed table accessor exposed on \`MutationCtx.db.<table>\` / \`ActionCtx.db.<table>\`. */
+export type TableWriterFacade<T extends keyof DataModel> = TableWriterFacadeOf<DataModel, InsertModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, T, GeoIndexNamesByTable>;
+
+/** Per-table read facade — \`ctx.db.<table>\` on a \`QueryCtx\`. */
+export type DatabaseReaderFacade = DatabaseReaderFacadeOf<DataModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, GeoIndexNamesByTable>;
+
+/** Per-table read-write facade — \`ctx.db.<table>\` on a \`MutationCtx\` / \`ActionCtx\`. */
+export type DatabaseWriterFacade = DatabaseWriterFacadeOf<DataModel, InsertModel, Relations, RankIndexNamesByTable, SearchIndexNamesByTable, GeoIndexNamesByTable>;
+
+/** Insert builder returned by \`ctx.orm.insert(table)\`. */
+export interface OrmInsertBuilder<T extends keyof DataModel> {
+    values: (values: Insert<T>) => Promise<IdOfTable<T>>;
+}
+
+/** Replace builder returned by \`ctx.orm.replace(table, id)\` — swaps the whole document. */
+export interface OrmReplaceBuilder<T extends keyof DataModel> {
+    with: (values: Insert<T>) => Promise<void>;
+}
+
+/** Update builder returned by \`ctx.orm.update(table, id)\` — patches the named fields. */
+export interface OrmUpdateBuilder<T extends keyof DataModel> {
+    set: (values: Partial<Insert<T>>) => Promise<void>;
+}
+
+/** Read-only ORM surface — \`ctx.orm\` on a \`QueryCtx\`. Mirrors \`ctx.db\` reads under a kitcn-style \`query\` namespace. */
+export interface OrmReader {
+    query: DatabaseReaderFacade;
+}
+
+/** Read-write ORM surface — \`ctx.orm\` on a \`MutationCtx\` / \`ActionCtx\`. Writes are addressed by id, like \`ctx.db\`. */
+export interface OrmWriter extends OrmReader {
+    delete: <T extends keyof DataModel>(table: T, id: IdOfTable<T>) => Promise<void>;
+    insert: <T extends keyof DataModel>(table: T) => OrmInsertBuilder<T>;
+    replace: <T extends keyof DataModel>(table: T, id: IdOfTable<T>) => OrmReplaceBuilder<T>;
+    update: <T extends keyof DataModel>(table: T, id: IdOfTable<T>) => OrmUpdateBuilder<T>;
+}
+
 /** Storage buckets this schema declares (\`v.storage("name")\`), narrowing \`ctx.storage.bucket(name)\`. */
-export type StorageBucketName = ${x};${I}${Se}${Ne}${Te}${Le}${De}
+export type StorageBucketName = ${w};${C}${Re}${Te}${Ae}${Ce}${_e}
 
 /**
  * Project-typed contexts. The base contexts from \`@lunora/server\` are
@@ -603,22 +614,22 @@ type AsIdTable<T extends string> = T extends TableName ? T : string extends T ?
  */
 type TypedAsId = <T extends string>(tableName: AsIdTable<T>, id: string) => IdOfTable<T & TableName>;
 
-export interface QueryCtx extends Omit<QueryCtxBase, "db" | "storage"${Q}${de}${ue}> {
+export interface QueryCtx extends Omit<QueryCtxBase, "db" | "storage"${H}${ce}${pe}> {
     readonly db: Omit<DatabaseReader, "asId" | "query" | "get"> & DatabaseReaderFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmReader;
-    readonly storage: ReadOnlyStorage<StorageBucketName>;${se}${j}${re}${W}${U}${ae}${pe}${ce}
+    readonly storage: ReadOnlyStorage<StorageBucketName>;${ie}${W}${ae}${U}${K}${oe}${he}${ue}
 }
 
-export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${Q}${fe}${de}${ue}> {
+export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${H}${be}${ce}${pe}> {
     readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmWriter;
-    readonly storage: ReadOnlyStorage<StorageBucketName>;${X}${j}${re}${W}${U}${ae}${pe}${be}${ye}${we}${ce}
+    readonly storage: ReadOnlyStorage<StorageBucketName>;${X}${W}${ae}${U}${K}${oe}${he}${ye}${we}${xe}${ue}
 }
 
-export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${Q}${fe}${de}${ue}> {
+export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${H}${be}${ce}${pe}> {
     readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmWriter;
-    readonly storage: StorageBase<StorageBucketName>;${X}${j}${ee}${te}${B}${z}${re}${W}${U}${ke}${ve}${$e}${ae}${oe}${K}${pe}${be}${ye}${we}${ce}
+    readonly storage: StorageBase<StorageBucketName>;${X}${W}${te}${ne}${j}${z}${ae}${U}${K}${ve}${$e}${Se}${oe}${se}${Q}${he}${ye}${we}${xe}${ue}
 }
 
 /**
@@ -651,7 +662,7 @@ export const internalAction = lunoraBuilders.internalAction as unknown as Intern
 /**
  * \`defineMutator\` bound to this project's typed {@link MutationCtx} — declare
  * custom mutators (\`lunora/mutators.ts\`) with it instead of importing from
- * \`${S.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
+ * \`${$.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
  * schema-typed \`ctx.db\` (\`ctx.db.query("nodes")\` resolves \`Doc<"nodes">\`,
  * \`ctx.db.patch(id, …)\` takes an \`Id<"nodes">\`) with no hand-written ctx type and
  * no \`as unknown as\` cast. Runtime-identical to the package export; only the
@@ -676,7 +687,7 @@ export const defineMutator = defineMutatorBase as unknown as <Args extends Recor
  * Runtime-identical to \`@lunora/server\`'s \`definePolicy\`; only the types narrow,
  * so the \`rls()\` chain discovers a policy authored either way the same.
  */
-export const definePolicy = createPolicyDsl<DataModel, Relations${Ce}>();
+export const definePolicy = createPolicyDsl<DataModel, Relations${Ie}>();
 
 /**
  * The validator builder \`v\`, with \`v.id(...)\` constrained to THIS schema's
@@ -693,45 +704,45 @@ export const definePolicy = createPolicyDsl<DataModel, Relations${Ce}>();
 export const v = vBase as unknown as Omit<typeof vBase, "id"> & {
     id: <T extends TableName>(table: T) => ColumnValidator<IdOfTable<T>, IdOfTable<T>>;
 };
-`},Un=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${R(n.filePath)}:${n.exportName}`);return t},Dr=e=>{const{agents:t=[],functions:n,migrations:r=[],mutators:a=[],shapes:o=[],useUmbrella:i=!1,usesSandbox:s=!1}=e,l=n.length>0,u=G(i),{dispatchBody:p,importBlock:f,installBlock:y,migrationBody:N,mutatorPaths:d,shapeBody:c}=Bn(n,r,a,o),g=Dn(t,n),b=_n(s,n),k=[g.lines,b.lines].filter(I=>I.length>0).join(`
-`);let $=p;k.length>0&&($=p.length>0?`${p.trimEnd()}
-${k}
+`},Qn=e=>{const t={connect:[],disconnect:[]};for(const n of e)n.lifecycle&&t[n.lifecycle].push(`${R(n.filePath)}:${n.exportName}`);return t},Er=e=>{const{agents:t=[],functions:n,migrations:r=[],mutators:a=[],shapes:o=[],useUmbrella:i=!1,usesSandbox:s=!1}=e,d=n.length>0,u=ee(i),{dispatchBody:p,importBlock:g,installBlock:b,migrationBody:c,mutatorPaths:l,shapeBody:f}=Wn(n,r,a,o),x=En(t,n),k=Pn(s,n),v=[x.lines,k.lines].filter(C=>C.length>0).join(`
+`);let A=p;v.length>0&&(A=p.length>0?`${p.trimEnd()}
+${v}
 `:`
-${k}
-`);const T=Un(n),O=o.length>0?`import type { RegisteredShape } from "${u.server}";
-`:"",S=o.length>0?`
+${v}
+`);const P=Qn(n),L=o.length>0?`import type { RegisteredShape } from "${u.server}";
+`:"",$=o.length>0?`
 /**
  * Replication-shape registry — one entry per \`defineShape\` in \`lunora/shapes.ts\`.
  * The generated ShardDO's \`resolveShape\` override looks a shape up by name and
  * evaluates its trusted \`compileWhere(ctx, args)\` to authorize + scope a
  * \`shape_subscribe\` (reads-as-permissions).
  */
-export const LUNORA_SHAPES: Record<string, RegisteredShape> = {${c}};
-`:"",x=d.length>0?`
+export const LUNORA_SHAPES: Record<string, RegisteredShape> = {${f}};
+`:"",w=l.length>0?`
 /**
  * Custom-mutator function paths — the \`LUNORA_FUNCTIONS\` keys the generated
  * ShardDO's \`isCustomMutator\` override routes through the client-watermark push
  * protocol (\`x-lunora-client-id\`/\`x-lunora-client-seq\` ordering).
  */
-export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${d.map(I=>JSON.stringify(I)).join(", ")}]);
-`:"",P=y.length>0?`import { DEFER_VALIDATION as DEFER, installCompiledValidatorMap } from "${u.values}";
-`:"",ee=y.length>0?`
+export const LUNORA_MUTATOR_PATHS: ReadonlySet<string> = new Set([${l.map(C=>JSON.stringify(C)).join(", ")}]);
+`:"",M=b.length>0?`import { DEFER_VALIDATION as DEFER, installCompiledValidatorMap } from "${u.values}";
+`:"",te=b.length>0?`
 /**
  * AOT-compiled argument validators (Worker-safe, no \`eval\`). Each is installed
  * onto its function's live \`.args\` object and consulted by the interpreted
  * parser as a zero-allocation fast path; anything it can't model is deferred.
  */
-${y}
-`:"",F=jn(n),te=F.types?`
+${b}
+`:"",F=Un(n),ne=F.types?`
 ${F.types}
-`:"",ne=F.implementation?`
+`:"",re=F.implementation?`
 ${F.implementation}
-`:"",B=je(F.types),A=B.length>0?`import type { ${B.join(", ")} } from "./dataModel.js";
-`:"",z=l?"context":"_context",L=l?`${qn}
+`:"",j=je(F.types),T=j.length>0?`import type { ${j.join(", ")} } from "./dataModel.js";
+`:"",z=d?"context":"_context",O=d?`${jn}
 
-`:"";return ct(`${v}${f}${g.importLine}${b.importLine}${P}${O}import { LunoraError } from "${u.server}";
+`:"";return ct(`${S}${g}${x.importLine}${k.importLine}${M}${L}import { LunoraError } from "${u.server}";
 import type { ActionCtx, MutationCtx, QueryCtx } from "./server.js";
-${A}
+${T}
 /**
  * Single registered function, narrowed to the shape \`handleRpc\` needs.
  * The real argument validators / return types are checked elsewhere — at
@@ -750,13 +761,13 @@ export interface RegisteredLunoraFunction {
     /** \`"internal"\` functions are rejected on the external RPC path; absence === public. */
     visibility?: "internal" | "public";
 }
-${g.prelude}${b.prelude}
+${x.prelude}${k.prelude}
 /**
  * Static dispatch table. The key matches the \`__lunoraRef\` the client
  * emits (\`api[namespace][fn].__lunoraRef === "namespace:fn"\`).
  */
-export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${$}};
-${ee}${S}${x}
+export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${A}};
+${te}${$}${w}
 /**
  * Connection-lifecycle manifest: the function paths the generated ShardDO
  * dispatches when a client's WebSocket connects (\`connect\`) or disconnects
@@ -764,8 +775,8 @@ ${ee}${S}${x}
  * DO runs every hook under the socket's verified identity via system dispatch.
  */
 export const LUNORA_LIFECYCLE_HOOKS: { connect: readonly string[]; disconnect: readonly string[] } = {
-    connect: [${T.connect.map(I=>JSON.stringify(I)).join(", ")}],
-    disconnect: [${T.disconnect.map(I=>JSON.stringify(I)).join(", ")}],
+    connect: [${P.connect.map(C=>JSON.stringify(C)).join(", ")}],
+    disconnect: [${P.disconnect.map(C=>JSON.stringify(C)).join(", ")}],
 };
 
 /**
@@ -796,10 +807,10 @@ export type CallerCtx = ActionCtx | MutationCtx | QueryCtx;
  * with the supplied \`context\`, exactly like \`ctx.runQuery\`/\`runMutation\`/
  * \`runAction\` but without re-stating the function path.
  */
-export interface Caller {${te}}
+export interface Caller {${ne}}
 
-${L}/** Build a {@link Caller} bound to \`context\` (typically a handler's \`ctx\`). */
-export const createCaller = (${z}: CallerCtx): Caller => ({${ne}});
+${O}/** Build a {@link Caller} bound to \`context\` (typically a handler's \`ctx\`). */
+export const createCaller = (${z}: CallerCtx): Caller => ({${re}});
 
 /**
  * Single registered data migration, narrowed to the shape the per-shard runner
@@ -818,8 +829,8 @@ export interface RegisteredDataMigration {
  * Registry of online data migrations keyed by \`defineMigration\`'s \`id\`. The
  * shard DO's admin RPC and the CLI resolve migrations to run through this map.
  */
-export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${N}};
-`,i)},Kn=e=>{const t={};for(const n of e.tables){const r={};for(const[a,o]of Object.entries(n.shape)){const i=o.kind==="optional"&&o.inner?o.inner:o;i.kind==="id"&&i.tableName!==void 0&&(r[a]=i.tableName)}Object.keys(r).length>0&&(t[n.name]=r)}return t},Qn=e=>{const t={};for(const n of e.tables){const r=[];for(const[a,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&r.push(a);r.length>0&&(t[n.name]=r)}return t},Hn=e=>{const t={};for(const n of e.tables){const r=[...n.indexes.map(a=>({fields:[...a.fields],name:a.name,type:"index",...a.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(a=>({fields:[a.field,...a.filterFields??[]],name:a.name,type:"search"})),...(n.geoIndexes??[]).map(a=>({fields:[a.field],name:a.name,type:"geo"})),...n.rankIndexes.map(a=>({fields:a.sortBy.map(o=>o.field),name:a.name,type:"rank"})),...n.vectorIndexes.map(a=>({fields:a.field===void 0?[]:[a.field],name:a.name,type:"vector"}))];r.length>0&&(t[n.name]=r)}return t},Jn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},Vn=e=>{const t={};for(const n of e.tables){const r=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[a,o]of Object.entries(n.shape)){const i=o.kind==="optional"||!!o.column?.hasDefault,s=o.kind==="optional"&&o.inner?o.inner:o,l={name:a,optional:i,type:s.kind};s.kind==="id"&&s.tableName!==void 0&&(l.ref=s.tableName),s.kind==="storage"&&(l.isStorage=!0),r.push(l)}t[n.name]=r}return t},Gn=e=>e?{importFragment:"serveRelationFanout, ",override:`
+export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${c}};
+`,i)},Hn=e=>{const t={};for(const n of e.tables){const r={};for(const[a,o]of Object.entries(n.shape)){const i=o.kind==="optional"&&o.inner?o.inner:o;i.kind==="id"&&i.tableName!==void 0&&(r[a]=i.tableName)}Object.keys(r).length>0&&(t[n.name]=r)}return t},Vn=e=>{const t={};for(const n of e.tables){const r=[];for(const[a,o]of Object.entries(n.shape))(o.kind==="optional"&&o.inner?o.inner:o).kind==="storage"&&r.push(a);r.length>0&&(t[n.name]=r)}return t},Jn=e=>{const t={};for(const n of e.tables){const r=[...n.indexes.map(a=>({fields:[...a.fields],name:a.name,type:"index",...a.unique===!0?{unique:!0}:{}})),...n.searchIndexes.map(a=>({fields:[a.field,...a.filterFields??[]],name:a.name,type:"search"})),...(n.geoIndexes??[]).map(a=>({fields:[a.field],name:a.name,type:"geo"})),...n.rankIndexes.map(a=>({fields:a.sortBy.map(o=>o.field),name:a.name,type:"rank"})),...n.vectorIndexes.map(a=>({fields:a.field===void 0?[]:[a.field],name:a.name,type:"vector"}))];r.length>0&&(t[n.name]=r)}return t},Gn=e=>{const t=[];for(const n of e.tables)!n.ttl||n.shardMode==="global"||t.push({...n.ttl.after===void 0?{}:{after:n.ttl.after},field:n.ttl.field,...n.softDelete?{softDeleteField:n.softDelete.field}:{},table:n.name});return t},zn=e=>{const t={};for(const n of e.tables){const r=[{name:"_id",optional:!1,pk:!0,type:"id"},{name:"_creationTime",optional:!1,type:"number"}];for(const[a,o]of Object.entries(n.shape)){const i=o.kind==="optional"||!!o.column?.hasDefault,s=o.kind==="optional"&&o.inner?o.inner:o,d={name:a,optional:i,type:s.kind};s.kind==="id"&&s.tableName!==void 0&&(d.ref=s.tableName),s.kind==="storage"&&(d.isStorage=!0),r.push(d)}t[n.name]=r}return t},Xn=e=>e?{importFragment:"serveRelationFanout, ",override:`
         protected override async runRelationFanoutRead(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
             this.ensureMigrated();
 
@@ -827,7 +838,7 @@ export const LUNORA_MIGRATIONS: Record<string, RegisteredDataMigration> = {${N}}
 
             return serveRelationFanout(schema as unknown as SchemaLike, db, functionPath, args);
         }
-`}:{importFragment:"",override:""},zn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
+`}:{importFragment:"",override:""},Yn=e=>{if(!e)return{build:"",configField:"",contextField:"",stub:""};const t='throw new Error("ctx.ai: no AI binding found. Add an \\`ai\\` binding (env.AI) to wrangler.jsonc, or pass \\`ai\\` to createShardDO().");';return{build:`
             const aiBinding = config.ai?.(env) ?? (env as Record<string, unknown>).AI;
             // Correlate AI-Gateway-routed calls with the Lunora trace: thread the
             // function path + trace id into createAi, which folds them into the
@@ -858,7 +869,7 @@ const aiStub: LunoraAi = {
         ${t}
     }) as unknown as LunoraAi["workersai"],
 };
-`}},_={build:"",configField:"",contextField:"",importLines:[],stub:""},Xn=e=>{if(!e)return _;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
+`}},_={build:"",configField:"",contextField:"",importLines:[],stub:""},Zn=e=>{if(!e)return _;const t='throw new Error("ctx.kv: no KV binding found. Add a \\`kv_namespaces\\` binding (env.KV) to wrangler.jsonc, or pass \\`kv\\` to createShardDO().");';return{build:`
             const kvBinding = config.kv?.(env) ?? (env as Record<string, unknown>).KV;
             const kv: Kv = kvBinding ? createKv({ namespace: kvBinding as KVNamespaceLike }) : kvStub;
 `,configField:`
@@ -884,7 +895,7 @@ const kvStub: Kv = {
         ${t}
     },
 };
-`}},Yn=(e,t)=>e?{build:`
+`}},er=(e,t)=>e?{build:`
             const flags: import("${t}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
@@ -893,17 +904,17 @@ const kvStub: Kv = {
             });
 `,configField:`
     flags?: (env: Record<string, unknown>) => import("${t}").Provider;`,contextField:`
-                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:_,Zn=e=>e?{build:`
+                flags,`,importLines:[`import { createFlags } from "${t}";`,'import flagsConfig from "../flags.js";'],stub:""}:_,tr=e=>e?{build:`
             const { notify, push } = createNotify(notifyConfig, env, { log, metrics });
 `,configField:"",contextField:`
                 notify,
-                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:_,er=e=>e?{build:`
+                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:_,nr=e=>e?{build:`
             const envConfig = lunoraEnvContract.${e.exportName}(env);
 `,configField:"",contextField:`
-                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:_,tr=e=>e?{build:`
+                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:_,rr=e=>e?{build:`
             const access = accessFacade(identity, userId);
 `,configField:"",contextField:`
-                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:_,nr=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const r=s=>`
+                access,`,importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}:_,ar=(e,t,n)=>{if(!t)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const r=s=>`
             const env = (this.env ?? {}) as Record<string, unknown>;
             const flags: import("${n}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
@@ -967,7 +978,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
 
             return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
         }
-`;return{constant:a,evaluateOverride:o,subscriptionOverride:i}},rr=e=>{if(!e)return _;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
+`;return{constant:a,evaluateOverride:o,subscriptionOverride:i}},or=e=>{if(!e)return _;const t='throw new Error("ctx.analytics: no Analytics Engine binding found. Add an \\`analytics_engine_datasets\\` binding (env.ANALYTICS) to wrangler.jsonc, or pass \\`analytics\\` to createShardDO().");';return{build:`
             const analyticsBinding = config.analytics?.(env) ?? (env as Record<string, unknown>).ANALYTICS;
             const analytics: AnalyticsClient = analyticsBinding ? createAnalytics(analyticsBinding as AnalyticsEngineDatasetLike) : analyticsStub;
 `,configField:`
@@ -981,7 +992,7 @@ const analyticsStub: AnalyticsClient = {
         ${t}
     },
 };
-`}},ar=e=>{if(!e)return _;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
+`}},sr=e=>{if(!e)return _;const t='throw new Error("ctx.images: no Images binding found. Add an \\`images\\` binding (env.IMAGES) to wrangler.jsonc, or pass \\`images\\` to createShardDO().");';return{build:`
             const imagesBinding = config.images?.(env) ?? (env as Record<string, unknown>).IMAGES;
             const images: Images = imagesBinding ? createImages({ binding: imagesBinding as ImagesBindingLike }) : imagesStub;
 `,configField:`
@@ -995,7 +1006,7 @@ const imagesStub: Images = {
         ${t}
     },
 };
-`}},or=e=>e?{build:`
+`}},ir=e=>e?{build:`
             const sql: SqlClient = config.sql ? config.sql(env) : sqlStub;
 `,configField:`
     sql?: (env: Record<string, unknown>) => SqlClient;`,contextField:`
@@ -1005,7 +1016,7 @@ const sqlStub: SqlClient = {
         throw new Error("ctx.sql: provide a \\\`sql\\\` config thunk that builds a SqlClient from your driver, e.g. \\\`sql: (env) => fromPostgresJs(postgres(env.HYPERDRIVE.connectionString))\\\`.");
     },
 };
-`}:_,sr=e=>{if(!e)return _;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`. Session reuse (connect/sessions) additionally needs those two exports passed the same way.\");";return{build:`
+`}:_,lr=e=>{if(!e)return _;const t="throw new Error(\"ctx.browser: provide a \\`browser\\` config thunk, e.g. \\`browser: (env) => createBrowser({ binding: env.BROWSER, launch })\\` with \\`import { launch } from '@cloudflare/playwright'\\`. Session reuse (connect/sessions) additionally needs those two exports passed the same way.\");";return{build:`
             const browser: Browser = config.browser ? config.browser(env) : browserStub;
 `,configField:`
     browser?: (env: Record<string, unknown>) => Browser;`,contextField:`
@@ -1033,7 +1044,7 @@ const browserStub: Browser = {
         ${t}
     },
 };
-`}},ir=e=>{if(!e)return _;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
+`}},dr=e=>{if(!e)return _;const t='throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");';return{build:`
             const r2sqlEnv = env as Record<string, unknown>;
             const r2sqlAccountId = (r2sqlEnv.R2_SQL_ACCOUNT_ID ?? r2sqlEnv.CLOUDFLARE_ACCOUNT_ID) as string | undefined;
             const r2sqlToken = r2sqlEnv.R2_SQL_TOKEN as string | undefined;
@@ -1065,7 +1076,7 @@ const r2sqlStub: R2SqlClient = {
         ${t}
     },
 };
-`}},lr=e=>e?{build:`
+`}},cr=e=>e?{build:`
             const pipelinesBinding = config.pipelines?.(env) ?? (env as Record<string, unknown>).PIPELINES;
             const pipelines: PipelineClient = pipelinesBinding ? createPipelines({ binding: pipelinesBinding as PipelineBindingLike }) : pipelinesStub;
 `,configField:`
@@ -1075,14 +1086,14 @@ const pipelinesStub: PipelineClient = {
         throw new Error("ctx.pipelines: no Pipelines binding found. Add a \\\`pipelines\\\` binding (env.PIPELINES) to wrangler.jsonc, or pass \\\`pipelines\\\` to createShardDO().");
     },
 };
-`}:_,_r=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",r=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
+`}:_,Pr=(e,t)=>{if(e.length===0)return"";const n=t?`, ${JSON.stringify(t)}`:"",r=e.map(o=>(m(o.exportName,`container export "${o.exportName}"`),m(o.className,`container class "${o.className}"`),`/** Container DO for the \`${o.exportName}\` definition (binding \`${o.bindingName}\`). */
 export class ${o.className} extends LunoraContainer {
     public constructor(ctx: ConstructorParameters<typeof LunoraContainer>[0], env: Record<string, unknown>) {
         super(ctx, env, ${o.exportName}, "${o.exportName}"${n});
     }
 }
 `)).join(`
-`),a=e.map(o=>o.exportName).join(", ");return`${v}/**
+`),a=e.map(o=>o.exportName).join(", ");return`${S}/**
  * Container-enabled Durable Object classes for the containers declared in
  * \`lunora/containers.ts\`. Re-export them from your worker entry — wrangler
  * requires each \`containers[].class_name\` to be exported by the worker:
@@ -1100,7 +1111,7 @@ import { ${a} } from "../containers.js";
 
 export { ContainerProxy } from "@lunora/container/do";
 
-${r}`},dr=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const r of e)m(r.exportName,`container export "${r.exportName}"`),m(r.bindingName,`container binding "${r.bindingName}"`);const n=e.map(r=>{const a=r.maxInstances===void 0?"":`, maxInstances: ${String(r.maxInstances)}`;return`    { binding: "${r.bindingName}", exportName: "${r.exportName}"${a} },`}).join(`
+${r}`},ur=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const r of e)m(r.exportName,`container export "${r.exportName}"`),m(r.bindingName,`container binding "${r.bindingName}"`);const n=e.map(r=>{const a=r.maxInstances===void 0?"":`, maxInstances: ${String(r.maxInstances)}`;return`    { binding: "${r.bindingName}", exportName: "${r.exportName}"${a} },`}).join(`
 `);return{build:`
             const containers = createContainerContext(env, LUNORA_CONTAINERS, ${t?JSON.stringify(t):"undefined"}, this.getCurrentTraceparent());
 `,contextField:`
@@ -1109,14 +1120,14 @@ ${r}`},dr=(e,t)=>{if(e.length===0)return{build:"",contextField:"",importLines:[]
 const LUNORA_CONTAINERS: ReadonlyArray<ContainerBindingSpec> = [
 ${n}
 ];
-`}},Er=e=>{if(e.length===0)return"";const t=e.map(r=>(m(r.exportName,`workflow export "${r.exportName}"`),m(r.className,`workflow class "${r.className}"`),`/** WorkflowEntrypoint for the \`${r.exportName}\` definition (binding \`${r.bindingName}\`). */
+`}},Mr=e=>{if(e.length===0)return"";const t=e.map(r=>(m(r.exportName,`workflow export "${r.exportName}"`),m(r.className,`workflow class "${r.className}"`),`/** WorkflowEntrypoint for the \`${r.exportName}\` definition (binding \`${r.bindingName}\`). */
 export class ${r.className} extends LunoraWorkflow<WorkflowParamsOf<typeof ${r.exportName}>, WorkflowOutputOf<typeof ${r.exportName}>> {
     public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
         super(ctx, env, ${r.exportName}, "${r.exportName}");
     }
 }
 `)).join(`
-`),n=e.map(r=>r.exportName).join(", ");return`${v}/**
+`),n=e.map(r=>r.exportName).join(", ");return`${S}/**
  * WorkflowEntrypoint classes for the workflows declared in
  * \`lunora/workflows.ts\`. Re-export them from your worker entry — wrangler
  * requires each \`workflows[].class_name\` to be exported by the worker:
@@ -1137,21 +1148,21 @@ type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params
 /** Output type carried by a \`defineWorkflow\` definition (its phantom \`__output\`), so each entrypoint keeps the authored return type. */
 type WorkflowOutputOf<Definition> = Definition extends { __output?: infer Output } ? Output : unknown;
 
-${t}`},Pr=e=>{if(e.length===0)return"";const t=e.filter(a=>a.voice).length>0,n=e.map(a=>{m(a.exportName,`agent export "${a.exportName}"`),m(a.className,`agent class "${a.className}"`);const o=`/** WorkflowEntrypoint for the \`${a.exportName}\` agent (binding \`${a.bindingName}\`). */
+${t}`},Fr=e=>{if(e.length===0)return"";const t=e.filter(a=>a.voice).length>0,n=e.map(a=>{m(a.exportName,`agent export "${a.exportName}"`),m(a.className,`agent class "${a.className}"`);const o=`/** WorkflowEntrypoint for the \`${a.exportName}\` agent (binding \`${a.bindingName}\`). */
 export class ${a.className} extends LunoraWorkflow<AgentRunInput, AgentRunResult> {
     public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
         super(ctx, env, compileAgentWorkflow(${a.exportName}, "${a.exportName}"), "${a.exportName}");
     }
 }
-`;if(!a.voice)return o;const i=a.voiceClassName??"",s=a.voiceBindingName??"";m(i,`agent voice class "${i}"`);const l=`
+`;if(!a.voice)return o;const i=a.voiceClassName??"",s=a.voiceBindingName??"";m(i,`agent voice class "${i}"`);const d=`
 /** Voice-session Durable Object for the \`${a.exportName}\` agent (binding \`${s}\`). */
 export class ${i} extends VoiceSessionDO {
     public constructor(ctx: ConstructorParameters<typeof VoiceSessionDO>[0], env: Record<string, unknown>) {
         super(ctx, env, ${a.exportName}, "${a.exportName}");
     }
 }
-`;return`${o}${l}`}).join(`
-`),r=e.map(a=>a.exportName).join(", ");return`${v}/**
+`;return`${o}${d}`}).join(`
+`),r=e.map(a=>a.exportName).join(", ");return`${S}/**
  * WorkflowEntrypoint classes for the agents declared in \`lunora/agents.ts\`.
  * Each \`defineAgent\` compiles a replay-safe tool-loop onto a Cloudflare
  * Workflow. Re-export them from your worker entry — wrangler requires each
@@ -1165,8 +1176,8 @@ import type { AgentRunInput, AgentRunResult } from "@lunora/agent";
 
 import { ${r} } from "../agents.js";
 
-${n}`},Fr=e=>{const t=e.filter(a=>a.mode==="push");if(t.length===0)return"";for(const a of t)m(a.exportName,`queue export "${a.exportName}"`);const n=t.map(a=>a.exportName).join(", "),r=t.map(a=>`    ${JSON.stringify(a.name)}: { definition: ${a.exportName}, exportName: ${JSON.stringify(a.exportName)} },`).join(`
-`);return`${v}/**
+${n}`},qr=e=>{const t=e.filter(a=>a.mode==="push");if(t.length===0)return"";for(const a of t)m(a.exportName,`queue export "${a.exportName}"`);const n=t.map(a=>a.exportName).join(", "),r=t.map(a=>`    ${JSON.stringify(a.name)}: { definition: ${a.exportName}, exportName: ${JSON.stringify(a.exportName)} },`).join(`
+`);return`${S}/**
  * Push-consumer registry for the queues declared in \`lunora/queues.ts\`. The
  * composed worker's \`queue(batch, env, ctx)\` entry routes each delivered batch
  * by \`batch.queue\` to the matching \`defineQueue\` handler. Wired automatically
@@ -1180,7 +1191,7 @@ import { ${n} } from "../queues.js";
 export const LUNORA_QUEUE_REGISTRY: QueueRegistry = {
 ${r}
 };
-`},cr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
+`},pr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`workflow export "${n.exportName}"`),m(n.bindingName,`workflow binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}" },`).join(`
 `);return{build:`
             const workflows = createWorkflowContext(env, LUNORA_WORKFLOWS);
 `,contextField:`
@@ -1189,7 +1200,7 @@ ${r}
 const LUNORA_WORKFLOWS: ReadonlyArray<WorkflowBindingSpec> = [
 ${t}
 ];
-`}},ur=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
+`}},hr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`queue export "${n.exportName}"`),m(n.bindingName,`queue binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}", name: ${JSON.stringify(n.name)} },`).join(`
 `);return{build:`
             const queues = createQueueContext(env, LUNORA_QUEUES);
 `,contextField:`
@@ -1198,7 +1209,7 @@ ${t}
 const LUNORA_QUEUES: ReadonlyArray<QueueBindingSpec> = [
 ${t}
 ];
-`}},pr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
+`}},gr=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)m(n.exportName,`agent export "${n.exportName}"`),m(n.bindingName,`agent binding "${n.bindingName}"`);const t=e.map(n=>`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${n.publicRun===!0?", publicRun: true":""} },`).join(`
 `);return{build:`
             const agents = createAgentContext(env, LUNORA_AGENTS);
 `,contextField:`
@@ -1207,21 +1218,21 @@ ${t}
 const LUNORA_AGENTS: ReadonlyArray<AgentBindingSpec> = [
 ${t}
 ];
-`}},hr=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
+`}},mr=e=>{if(e.length===0)return{constant:"",override:""};const t={workflows:e.map(n=>({binding:n.bindingName,className:n.className,exportName:n.exportName,name:n.name}))};return{constant:`
 /** Read-only declared-workflow metadata (discovered from \`lunora/workflows.ts\`) served via \`__lunora_admin__:listWorkflows\` for the studio's workflows view. */
 const LUNORA_WORKFLOWS_INFO: WorkflowsResult = ${JSON.stringify(t,void 0,4)};
 `,override:`
         protected override workflowsMetadata(): WorkflowsResult {
             return LUNORA_WORKFLOWS_INFO;
         }
-`}},gr=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
+`}},fr=e=>{if(e.length===0)return{constant:"",override:""};const t={queues:e.map(n=>({binding:n.bindingName,...n.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:n.tuning.deadLetterQueue},exportName:n.exportName,mode:n.mode,name:n.name}))};return{constant:`
 /** Read-only declared-queue metadata (discovered from \`lunora/queues.ts\`) served via \`__lunora_admin__:listQueues\` for the studio's queues view. */
 const LUNORA_QUEUES_INFO: QueuesResult = ${JSON.stringify(t,void 0,4)};
 `,override:`
         protected override queuesMetadata(): QueuesResult {
             return LUNORA_QUEUES_INFO;
         }
-`}},mr=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
+`}},br=e=>{if(!e)return{build:"",configField:"",contextField:"",imports:[],stub:""};const t='throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");';return{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
             const payments: LunoraPayment = config.payment
                 ? paymentsFromContext({ auth: { userId: userId ?? null }, db: db as unknown as LunoraPaymentDbLike }, config.payment(env))
                 : paymentStub;
@@ -1257,7 +1268,7 @@ const paymentStub: LunoraPayment = {
         ${t}
     },
 } as unknown as LunoraPayment;
-`}},fr=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
+`}},yr=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
             const x402: X402Pay = config.x402
                 ? lazyX402Pay(config.x402(env), { getSecret: (name: string) => secrets.get(name) })
                 : x402Stub;
@@ -1269,10 +1280,10 @@ const x402Stub: X402Pay = {
         throw new Error("ctx.x402: no pay rail configured. Pass \\\`x402\\\` to createShardDO().");
     },
 } as unknown as X402Pay;
-`}:{build:"",configField:"",contextField:"",imports:[],stub:""},br=(e,t,n,r)=>["AdvisorProcedure","AdvisoryFinding","DatabaseWriterLike","DataMigrationLike","ExportRow",...r?["FlagsResult"]:[],"ImportShardResult","KeyRange","MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardExportArgs","RunShardImportArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","TransactionHeadroomTracker","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike","TelemetrySink",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],Mr=({advisories:e=[],advisorProcedures:t=[],agents:n=[],containers:r=[],env:a,flagKeys:o=[],hasAccessFacade:i=!1,hasAi:s=!1,hasAnalytics:l=!1,hasBrowser:u=!1,hasFlags:p=!1,hasHyperdrive:f=!1,hasImages:y=!1,hasKv:N=!1,hasNotify:d=!1,hasPayments:c=!1,hasPipelines:g=!1,hasR2sql:b=!1,hasX402:k=!1,maskMetadata:$,mutators:T=[],queues:O=[],rlsMetadata:S,schema:x,schemaSnapshot:P,shapes:ee=[],storageRules:F,studioFeatures:te,useUmbrella:ne=!1,workflows:B=[]})=>{const A=G(ne),z=T.length>0,L=ee.length>0,I=P===void 0?"":on(P),M=P===void 0?"":`
+`}:{build:"",configField:"",contextField:"",imports:[],stub:""},wr=(e,t,n,r)=>["AdvisorProcedure","AdvisoryFinding","DatabaseWriterLike","DataMigrationLike","ExportRow",...r?["FlagsResult"]:[],"ImportShardResult","KeyRange","MaskPoliciesResult","MigrationRunResult",...n?["QueuesResult"]:[],"RunShardApplyCdcArgs","RunShardExportArgs","RunShardImportArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike","TransactionHeadroomTracker","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SystemReaderStorageLike","TelemetrySink",...t?["WorkflowsResult"]:[],...e?["WriteHook"]:[]],Br=({advisories:e=[],advisorProcedures:t=[],agents:n=[],containers:r=[],env:a,flagKeys:o=[],hasAccessFacade:i=!1,hasAi:s=!1,hasAnalytics:d=!1,hasBrowser:u=!1,hasFlags:p=!1,hasHyperdrive:g=!1,hasImages:b=!1,hasKv:c=!1,hasNotify:l=!1,hasPayments:f=!1,hasPipelines:x=!1,hasR2sql:k=!1,hasX402:v=!1,maskMetadata:A,mutators:P=[],queues:L=[],rlsMetadata:$,schema:w,schemaSnapshot:M,shapes:te=[],storageRules:F,studioFeatures:ne,useUmbrella:re=!1,workflows:j=[]})=>{const T=ee(re),z=P.length>0,O=te.length>0,C=M===void 0?"":on(M),q=M===void 0?"":`
 /** Structural schema snapshot + its content hash, recorded in the shard's \`__lunora_schema_history\` ledger on cold start so the studio can show a schema-version timeline and diff any two versions. */
-const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(sn(P))}, json: ${JSON.stringify(I)} };
-`,re=P===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",{build:ae,configField:ke,contextField:ve,stub:$e}=zn(s),oe=tr(i),K=Xn(N),E=Yn(p,A.flags),Q=nr(o,p,A.flags),X=Zn(d),se=er(a),H=rr(l),j=ar(y),W=or(f),U=sr(u),q=ir(b),Y=lr(g),{build:Se,contextField:fe,importLines:be,specs:ie}=ur(O),{build:Re,contextField:Ne,importLines:ye,specs:le}=dr(r,x.jurisdiction),{build:Oe,contextField:Te,importLines:we,specs:Ae}=cr(B),{build:Le,contextField:de,importLines:ce,specs:Ce}=pr(n),{build:Ie,configField:De,contextField:ue,imports:pe,stub:h}=mr(c),{build:_e,configField:ht,imports:gt,stub:mt}=fr(k),ft=e,bt=t,yt=S??{policies:[],roles:[]},wt=$??{columns:[]},xt=F??{rules:[]},kt=te??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:vt,override:$t}=hr(B),{constant:St,override:Rt}=gr(O),J=x.vectorIndexes.length>0,Ue=new Set(x.tables.filter(w=>typeof w.shardMode=="object"&&w.shardMode.kind==="shardBy").map(w=>w.name)),xe=x.vectorIndexes.some(w=>Ue.has(w.table)),he=x.tables.some(w=>w.shardMode==="global"),Ee=x.tables.some(w=>w.shardMode==="global"&&w.globalBackend==="hyperdrive"),Ke=x.tables.some(w=>w.shardMode==="global"&&w.globalBackend!=="hyperdrive"),V=x.tables.some(w=>w.externalSource!==void 0);if(Ke&&Ee)throw new Z("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Pe=x.tables.length>0,Nt=Kn(x),Ot=Hn(x),Tt=Vn(x),At=Qn(x),Qe=Jn(x),He=br(J,B.length>0,O.length>0,p);L&&He.push("WhereInput");const Je=Gn(he),Lt=L?`
+const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.stringify(sn(M))}, json: ${JSON.stringify(C)} };
+`,ae=M===void 0?"":", schemaSnapshot: LUNORA_SCHEMA_SNAPSHOT",{build:oe,configField:ve,contextField:$e,stub:Se}=Yn(s),se=rr(i),Q=Zn(c),E=er(p,T.flags),H=ar(o,p,T.flags),X=tr(l),ie=nr(a),V=or(d),W=sr(b),U=ir(g),K=lr(u),B=dr(k),Y=cr(x),{build:Re,contextField:be,importLines:ye,specs:le}=hr(L),{build:Ne,contextField:Te,importLines:we,specs:de}=ur(r,w.jurisdiction),{build:Oe,contextField:Ae,importLines:xe,specs:Le}=pr(j),{build:Ce,contextField:ce,importLines:ue,specs:Ie}=gr(n),{build:De,configField:_e,contextField:pe,imports:he,stub:h}=br(f),{build:Ee,configField:ht,imports:gt,stub:mt}=yr(v),ft=e,bt=t,yt=$??{policies:[],roles:[]},wt=A??{columns:[]},xt=F??{rules:[]},kt=ne??{analytics:!1,auth:!1,containers:!1,flags:!1,kv:!1,mail:!1,notifications:!1,payments:!1,queues:!1,scheduler:!1,storage:!1,vectors:!1,workflows:!1},{constant:vt,override:$t}=mr(j),{constant:St,override:Rt}=fr(L),J=w.vectorIndexes.length>0,Ue=new Set(w.tables.filter(y=>typeof y.shardMode=="object"&&y.shardMode.kind==="shardBy").map(y=>y.name)),ke=w.vectorIndexes.some(y=>Ue.has(y.table)),ge=w.tables.some(y=>y.shardMode==="global"),Pe=w.tables.some(y=>y.shardMode==="global"&&y.globalBackend==="hyperdrive"),Ke=w.tables.some(y=>y.shardMode==="global"&&y.globalBackend!=="hyperdrive"),G=w.tables.some(y=>y.externalSource!==void 0);if(Ke&&Pe)throw new Z("INTERNAL",'lunora codegen: mixing `.global()` (D1) and `.global({ backend: "hyperdrive" })` tables in one app is not supported yet — use a single global backend.');const Me=w.tables.length>0,Nt=Hn(w),Tt=Jn(w),Ot=zn(w),At=Vn(w),Qe=Gn(w),He=wr(J,j.length>0,L.length>0,p);O&&He.push("WhereInput");const Ve=Xn(ge),Lt=O?`
         protected override resolveShape(name: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string } | undefined {
             const shape = LUNORA_SHAPES[name];
 
@@ -1329,11 +1340,11 @@ const LUNORA_SCHEMA_SNAPSHOT: { hash: string; json: string } = { hash: ${JSON.st
         protected override isCustomMutator(functionPath: string): boolean {
             return LUNORA_MUTATOR_PATHS.has(functionPath);
         }
-`:"",It=L?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",Dt=L?"assertShapeShardable, ":"",ge=[`import type { ${He.join(", ")} } from "${A.do}";`,`import { applyCdcChanges, ${Dt}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${V?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}${xe?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${Je.importFragment}ShardDO as ShardDOBase } from "${A.do}";`,...V?[`import type { ExternalSourceLike, SourceClientLike } from "${A.do}";`]:[],L?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${A.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${A.server}";`];Pe&&ge.push(`import { bindOrm, bindTableFacade } from "${A.server}";`),J&&ge.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),s&&ge.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),ge.push(...oe.importLines,...K.importLines,...E.importLines,...X.importLines,...se.importLines,...H.importLines,...j.importLines,...W.importLines,...U.importLines,...q.importLines,...Y.importLines,...ye,...we,...be,...ce,...pe,...gt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...z?["LUNORA_MUTATOR_PATHS"]:[],...L?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const _t=J?`
+`:"",It=O?"\n/** Per-table RLS read policies (hoisted from `.use(rls(...))` chains) the shape resolver AND-merges into each `defineShape` predicate so partial replication honours read policies. */\nconst LUNORA_RLS_READ_REGISTRY = buildRlsReadRegistry(Object.values(LUNORA_FUNCTIONS));\n":"",Dt=O?"assertShapeShardable, ":"",me=[`import type { ${He.join(", ")} } from "${T.do}";`,`import { applyCdcChanges, ${Dt}createReadFootprint, createShardCtxDb, exportShardRows, importShardRows, ${G?"isSourceDue, pullExternalSourceIncrementalTick, pullExternalSourceTick, ":""}${ke?"ROOT_SHARD_NAME, ":""}runDataMigration, runShardMigrations, ${Ve.importFragment}ShardDO as ShardDOBase } from "${T.do}";`,...G?[`import type { ExternalSourceLike, SourceClientLike } from "${T.do}";`]:[],O?`import { asBucketStorage, buildRlsReadRegistry, composeShapeReadWhere, createSecrets, LunoraError } from "${T.server}";`:`import { asBucketStorage, createSecrets, LunoraError } from "${T.server}";`];Me&&me.push(`import { bindOrm, bindTableFacade } from "${T.server}";`),J&&me.push('import type { SchemaLike as VectorSchemaLike, VectorizeIndexLike, VectorSearchLike } from "@lunora/bindings/vectors";','import { createContextVectors, createVectors, createVectorSyncHook } from "@lunora/bindings/vectors";'),s&&me.push('import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'),me.push(...se.importLines,...Q.importLines,...E.importLines,...X.importLines,...ie.importLines,...V.importLines,...W.importLines,...U.importLines,...K.importLines,...B.importLines,...Y.importLines,...we,...xe,...ye,...ue,...he,...gt,"",'import schema from "../schema.js";',`import { ${["LUNORA_FUNCTIONS","LUNORA_LIFECYCLE_HOOKS","LUNORA_MIGRATIONS",...z?["LUNORA_MUTATOR_PATHS"]:[],...O?["LUNORA_SHAPES"]:[]].join(", ")} } from "./functions.js";`);const _t=J?`
     vectors?: (env: Record<string, unknown>) => Record<string, VectorizeIndexLike>;`:"",Et=Ke?`
-    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Pt=Ee?`
-    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Ft=V?`
-    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",Mt=he?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",qt=J?`
+    d1?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Pt=Pe?`
+    hyperdriveGlobal?: (env: Record<string, unknown>, request?: { identity?: Record<string, unknown>; userId?: string }) => DatabaseWriterLike | undefined;`:"",Mt=G?`
+    sourceClient?: (env: Record<string, unknown>, binding: string) => { query: <Row = Record<string, unknown>>(text: string, params?: readonly unknown[]) => Promise<Row[]> } | undefined;`:"",Ft=ge?'\nconst globalDbStub: DatabaseWriterLike = {\n    aggregate: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    count: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    delete: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirst: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findFirstOrThrow: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    findMany: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    get: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    groupBy: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    insert: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    normalizeId: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    patch: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    query: () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rank: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    rankPage: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n    replace: async () => {\n        throw new Error("ctx.db.<globalTable>: no global backend configured. Pass `d1` or `hyperdriveGlobal` to createShardDO().");\n    },\n};\n':"",qt=J?`
 const vectorsStub: VectorSearchLike = {
     deleteByIds: async () => {
         throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
@@ -1351,9 +1362,9 @@ const vectorsStub: VectorSearchLike = {
         throw new Error("ctx.vectors: no vectors configured. Pass \`vectors\` to createShardDO().");
     },
 };
-`:"",Bt=xe?`
+`:"",Bt=ke?`
                 const vectorShardKey = this.currentShardKey();
-`:"",jt=xe?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",Wt=xe?`, { namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, shardedIndexNames: [${x.vectorIndexes.filter(w=>Ue.has(w.table)).map(w=>JSON.stringify(w.name)).join(", ")}] }`:"",Ut=J?`
+`:"",jt=ke?"namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, ":"",Wt=ke?`, { namespace: vectorShardKey === ROOT_SHARD_NAME ? undefined : vectorShardKey, shardedIndexNames: [${w.vectorIndexes.filter(y=>Ue.has(y.table)).map(y=>JSON.stringify(y.name)).join(", ")}] }`:"",Ut=J?`
             let vectors: VectorSearchLike;
             let onWrite: WriteHook | undefined;
 
@@ -1366,7 +1377,7 @@ ${Bt}
                 vectors = vectorsStub;
                 onWrite = undefined;
             }
-`:"",Ve=he?`
+`:"",Je=ge?`
                 globalDb,`:"",Ge=`
                 auth: { identity: identity ?? null, userId: userId ?? null },`,Kt=J?`{${Ge}
                 broadcast: (delta) => {
@@ -1382,7 +1393,7 @@ ${Bt}
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
-                storage,${Ve}
+                storage,${Je}
             }`:`{${Ge}
                 broadcast: (delta) => {
                     this.recordChangedTable(delta.table, delta.indexKeys);
@@ -1396,11 +1407,11 @@ ${Bt}
                 scheduler,
                 schema: schema as unknown as SchemaLike,
                 sql: this.sql as SqlExec,
-                storage,${Ve}
+                storage,${Je}
             }`,Qt=J?`
-                vectors,`:"",Ht=Pe?`
-                orm: bindOrm(facade),`:"",Jt="",ze=Ee?"config.hyperdriveGlobal":"config.d1",Vt=he?`            const globalDb: DatabaseWriterLike = ${ze}?.(env, { identity, userId }) ?? globalDbStub;
-`:"",Gt=L&&he?`
+                vectors,`:"",Ht=Me?`
+                orm: bindOrm(facade),`:"",Vt="",ze=Pe?"config.hyperdriveGlobal":"config.d1",Jt=ge?`            const globalDb: DatabaseWriterLike = ${ze}?.(env, { identity, userId }) ?? globalDbStub;
+`:"",Gt=O&&ge?`
         protected override async readGlobalShapeRows(resolved: { columns?: readonly string[]; effectiveWhere?: WhereInput; global?: boolean; table: string }, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<Array<{ doc: Record<string, unknown>; id: string }>> {
             const env = this.env as Record<string, unknown>;
             const globalDb: DatabaseWriterLike = ${ze}?.(env, identity) ?? globalDbStub;
@@ -1430,10 +1441,10 @@ ${Bt}
 
             return rows;
         }
-`:"",zt=V?`
+`:"",zt=G?`
 const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
-`:"",Xt=V?`
+`:"",Xt=G?`
         protected override async pollExternalSources(): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
@@ -1569,10 +1580,10 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
 
             return nextDueAt;
         }
-`:"",Xe=Qe.length>0,Yt=V||Xe?`
+`:"",Xe=Qe.length>0,Yt=G||Xe?`
         public constructor(state: ShardDOState, env: unknown) {
             super(state, env);
-${V?`
+${G?`
             const autoSourced = Object.values((schema as unknown as SchemaLike).tables).some((definition) => {
                 const source = (definition as { externalSource?: ExternalSourceLike }).externalSource;
 
@@ -1587,22 +1598,22 @@ ${V?`
                 void this.scheduleTtlSweep();
             }
 `:""}        }
-`:"",Zt=Pe?`
+`:"",Zt=Me?`
             const facade = db as unknown as Record<string, ReturnType<typeof bindTableFacade>>;
-${x.tables.map(w=>`            facade[${JSON.stringify(w.name)}] = bindTableFacade(db, ${JSON.stringify(w.name)});`).join(`
+${w.tables.map(y=>`            facade[${JSON.stringify(y.name)}] = bindTableFacade(db, ${JSON.stringify(y.name)});`).join(`
 `)}
-`:"",en=`${oe.build}${K.build}${E.build}${H.build}${se.build}
+`:"",en=`${se.build}${Q.build}${E.build}${V.build}${ie.build}
             const secrets = createSecrets(env);
-`,tn=`${oe.contextField}${K.contextField}${E.contextField}${X.contextField}${H.contextField}${se.contextField}
-                secrets,`,nn=X.build,Ye=y||f||u||b||g||k,rn=Ye?`
+`,tn=`${se.contextField}${Q.contextField}${E.contextField}${X.contextField}${V.contextField}${ie.contextField}
+                secrets,`,nn=X.build,Ye=b||g||u||k||x||v,rn=Ye?`
             // ActionCtx-only helpers (external, non-deterministic I/O): constructed
             // and attached only for an \`action\` so query/mutation ctx never carry them.
             if (isAction) {
-${j.build}${W.build}${U.build}${q.build}${Y.build}${_e}${[...y?["                ctx.images = images;"]:[],...f?["                ctx.sql = sql;"]:[],...u?["                ctx.browser = browser;"]:[],...b?["                ctx.r2sql = r2sql;"]:[],...g?["                ctx.pipelines = pipelines;"]:[],...k?["                ctx.x402 = x402;"]:[]].join(`
+${W.build}${U.build}${K.build}${B.build}${Y.build}${Ee}${[...b?["                ctx.images = images;"]:[],...g?["                ctx.sql = sql;"]:[],...u?["                ctx.browser = browser;"]:[],...k?["                ctx.r2sql = r2sql;"]:[],...x?["                ctx.pipelines = pipelines;"]:[],...v?["                ctx.x402 = x402;"]:[]].join(`
 `)}
             }
 `:"",an=Ye?`            const isAction = LUNORA_FUNCTIONS[options.functionPath ?? ""]?.kind === "action";
-`:"";return`${v}${ge.join(`
+`:"";return`${S}${me.join(`
 `)}
 
 type FunctionKind = "action" | "mutation" | "query";
@@ -1615,10 +1626,10 @@ interface FunctionReference {
 const LUNORA_TABLE_REFS: Record<string, Record<string, string>> = ${JSON.stringify(Nt,void 0,4)};
 
 /** Declared indexes per table (secondary, search, geo, rank, vector) for the schema viewer. */
-const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(Ot,void 0,4)};
+const LUNORA_TABLE_INDEXES: Record<string, Array<{ fields: string[]; name: string; type: "geo" | "index" | "rank" | "search" | "vector"; unique?: boolean }>> = ${JSON.stringify(Tt,void 0,4)};
 
 /** Columns per table (typed, with PK/FK markers) for the studio's schema diagram, served via \`__lunora_admin__:describeTable\`. */
-const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(Tt,void 0,4)};
+const LUNORA_TABLE_COLUMNS: Record<string, Array<{ isStorage?: boolean; name: string; optional: boolean; pk?: boolean; ref?: string; type: string }>> = ${JSON.stringify(Ot,void 0,4)};
 
 /** Storage-key columns per table (\`v.storage(...)\` fields) for the file browser's records↔files join. */
 const LUNORA_STORAGE_COLUMNS: Record<string, string[]> = ${JSON.stringify(At,void 0,4)};
@@ -1643,14 +1654,14 @@ const LUNORA_STORAGE_RULES: StorageRulesResult = ${JSON.stringify(xt,void 0,4)};
 
 /** Which optional package-backed features this app wires up (discovered from imports / \`ctx.*\` reads / schema signals) served via \`__lunora_admin__:studioFeatures\` so the studio hides nav pages whose package isn't enabled. */
 const LUNORA_STUDIO_FEATURES: StudioFeaturesResult = ${JSON.stringify(kt,void 0,4)};
-${M}${Q.constant}${It}${vt}${St}${le}${Ae}${ie}${Ce}
+${q}${H.constant}${It}${vt}${St}${de}${Le}${le}${Ie}
 export interface ShardDOConfig {
     /** Opt into change-data-capture: records a post-image to \`__cdc_log\` on every write (backs streaming export + replay-PITR). */
     cdc?: boolean;
     /** Optional telemetry sink. When supplied, each \`ctx.log.*\` call is forwarded to \`sink.onLog\`. Pass the SAME sink you give \`createWorker({ observability })\` (which drives \`onRpc\`) to route both RPC and log events. */
     observability?: (env: Record<string, unknown>) => TelemetrySink | undefined;
     scheduler?: (env: Record<string, unknown>) => unknown;
-    storage?: (env: Record<string, unknown>) => unknown;${_t}${ke}${K.configField}${E.configField}${H.configField}${j.configField}${W.configField}${U.configField}${q.configField}${Y.configField}${De}${ht}${Et}${Pt}${Ft}
+    storage?: (env: Record<string, unknown>) => unknown;${_t}${ve}${Q.configField}${E.configField}${V.configField}${W.configField}${U.configField}${K.configField}${B.configField}${Y.configField}${_e}${ht}${Et}${Pt}${Mt}
 }
 
 const schedulerStub = {
@@ -1688,7 +1699,7 @@ const storageStub = {
         throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
     },
 };
-${Mt}${zt}${qt}${$e}${K.stub}${E.stub}${H.stub}${j.stub}${W.stub}${U.stub}${q.stub}${Y.stub}${h}${mt}${Jt}
+${Ft}${zt}${qt}${Se}${Q.stub}${E.stub}${V.stub}${W.stub}${U.stub}${K.stub}${B.stub}${Y.stub}${h}${mt}${Vt}
 // Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
 // referencing call fails loudly with a clear error instead of overflowing the
 // stack. Tracked across the awaited handler chain (one DO invocation is
@@ -1774,7 +1785,7 @@ export const createShardDO = (config: ShardDOConfig = {}): new (state: ShardDOSt
 
             return registered.handler(ctx, args);
         }
-${Je.override}
+${Ve.override}
         protected override async executeSubscription(functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<{ ranges?: Map<string, KeyRange[]>; result: unknown; tables: Set<string> } | null> {
             const registered = LUNORA_FUNCTIONS[functionPath];
 
@@ -1849,7 +1860,7 @@ ${Ct}${Lt}${Gt}${Xt}
         protected override studioFeatures(): StudioFeaturesResult {
             return LUNORA_STUDIO_FEATURES;
         }
-${Q.evaluateOverride}${Q.subscriptionOverride}${$t}${Rt}
+${H.evaluateOverride}${H.subscriptionOverride}${$t}${Rt}
         protected override advisories(): AdvisoryFinding[] {
             return LUNORA_ADVISORIES;
         }
@@ -2133,7 +2144,7 @@ ${Q.evaluateOverride}${Q.subscriptionOverride}${$t}${Rt}
                 return;
             }
 
-            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false${re} });
+            runShardMigrations(this.sql as SqlExec, schema as unknown as SchemaLike, { cdc: config.cdc ?? false${ae} });
             this.migrated = true;
         }
 
@@ -2146,7 +2157,7 @@ ${Q.evaluateOverride}${Q.subscriptionOverride}${$t}${Rt}
             // dispatch path) fall back to the per-request fields as before.
             const userId = options.identity ? options.identity.userId : this.getCurrentUserId();
             const identity = options.identity ? options.identity.identity : this.getCurrentIdentity();
-${Ut}${ae}${en}${Re}${Oe}${Se}${Le}
+${Ut}${oe}${en}${Ne}${Oe}${Re}${Ce}
             const scheduler = (config.scheduler?.(env) ?? schedulerStub) as SchedulerLike;
             // Build the storage adapter once and share it between \`ctx.storage\`
             // and \`ctx.db.system._storage\` so both read the same R2 binding. The
@@ -2173,13 +2184,13 @@ ${Ut}${ae}${en}${Re}${Oe}${Se}${Le}
             // so both write to the same trace.
             const span = this.makeDispatchSpan(traceAnchor, observability);
 
-${Vt}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
+${Jt}            // \`ctx.db\`, wrapped in automatic instrumentation: by default this
             // adds aggregate counters (call count, total time, per-operation
             // breakdown) to the wide event rather than a span per call, so a
             // handler making hundreds of queries stays readable. See
             // \`instrumentDatabase\` for the \`"spans"\` / \`"off"\` levels.
             const db: DatabaseWriterLike = this.instrumentDb(createShardCtxDb(${Kt}), logFunctionPath, traceAnchor, observability);
-${Zt}${Ie}
+${Zt}${De}
 
             // \`ctx.trace\` / \`ctx.metrics\`: spans and measurements to the same sink.
             // The trace anchor is threaded explicitly for the same reason \`identity\`
@@ -2214,7 +2225,7 @@ ${nn}
                 scheduler,
                 span,
                 storage,
-                trace,${Qt}${ve}${tn}${ue}${Ne}${Te}${fe}${de}
+                trace,${Qt}${$e}${tn}${pe}${Te}${Ae}${be}${ce}
             };
 ${an}${rn}
             ctx.runAction = (reference: FunctionReference, fnArgs: Record<string, unknown>) => dispatchRun("action", reference.__lunoraRef, fnArgs, ctx);
@@ -2224,30 +2235,30 @@ ${an}${rn}
             return ctx;
         }
     };
-`},We=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:C(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?We(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},pt=(e,t)=>{const n=e.kind==="optional"&&e.inner?e.inner:e;return n.kind==="id"&&n.tableName!==void 0&&t.has(n.tableName)?n.tableName:void 0},yr=(e,t,n)=>{m(e,"drizzle column name");const r=We(t),a=r.mode?`, { mode: "${r.mode}" }`:"";let o=`${r.builder}("${e}"${a})`;r.typeAnnotation&&(o+=`.$type<${r.typeAnnotation}>()`);const i=pt(t,n);return i!==void 0&&(o+=`.references((): AnySQLiteColumn => ${i}._id)`),r.notNull&&(o+=".notNull()"),o},wr=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(r=>(m(r,"drizzle index field"),`t.${r}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},xr=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([a,o])=>`    ${a}: ${yr(a,o,t)},`)].join(`
+`},We=e=>{switch(e.kind){case"array":case"object":case"record":case"union":return{builder:"text",mode:"json",notNull:!0,typeAnnotation:N(e)};case"bigint":return{builder:"blob",mode:"bigint",notNull:!0};case"boolean":return{builder:"integer",mode:"boolean",notNull:!0};case"bytes":return{builder:"blob",mode:"buffer",notNull:!0};case"date":case"timestamp":return{builder:"integer",notNull:!0};case"from":return{builder:"text",notNull:!0,typeAnnotation:N(e)};case"id":return{builder:"text",notNull:!0};case"literal":{const t=e.literalValue??"";return t.startsWith('"')||t.startsWith("'")?{builder:"text",notNull:!0}:t==="true"||t==="false"?{builder:"integer",mode:"boolean",notNull:!0}:t==="null"?{builder:"text",notNull:!0}:{builder:"real",notNull:!0}}case"null":return{builder:"text",notNull:!0};case"number":return{builder:"real",notNull:!0};case"optional":return{...e.inner?We(e.inner):{builder:"text",notNull:!1},notNull:!1};case"storage":case"string":return{builder:"text",notNull:!0};default:return{builder:"text",notNull:!0}}},pt=(e,t)=>{const n=e.kind==="optional"&&e.inner?e.inner:e;return n.kind==="id"&&n.tableName!==void 0&&t.has(n.tableName)?n.tableName:void 0},xr=(e,t,n)=>{m(e,"drizzle column name");const r=We(t),a=r.mode?`, { mode: "${r.mode}" }`:"";let o=`${r.builder}("${e}"${a})`;r.typeAnnotation&&(o+=`.$type<${r.typeAnnotation}>()`);const i=pt(t,n);return i!==void 0&&(o+=`.references((): AnySQLiteColumn => ${i}._id)`),r.notNull&&(o+=".notNull()"),o},kr=e=>{m(e.name,"drizzle index name");const t=e.unique?"uniqueIndex":"index",n=e.fields.map(r=>(m(r,"drizzle index field"),`t.${r}`)).join(", ");return`    ${e.name}: ${t}("${e.name}").on(${n}),`},vr=(e,t)=>{m(e.name,"table name");const n=['    _id: text("_id").primaryKey(),','    _creationTime: integer("_creationTime").notNull(),',...Object.entries(e.shape).map(([a,o])=>`    ${a}: ${xr(a,o,t)},`)].join(`
 `),r=e.indexes.length>0?`, (t) => ({
-${e.indexes.map(a=>wr(a)).join(`
+${e.indexes.map(a=>kr(a)).join(`
 `)}
 })`:"";return`export const ${e.name} = sqliteTable("${e.name}", {
 ${n}
-}${r});`},kr=e=>e.typeAnnotation?.includes('Id<"')??!1,vr=(e,t)=>{const n=new Set(["integer","sqliteTable","text"]),r=new Set;let a=!1,o=!1;for(const i of e){for(const s of Object.values(i.shape)){const l=We(s);n.add(l.builder),o=o||kr(l),a=a||pt(s,t)!==void 0}for(const s of i.indexes)r.add(s.unique?"uniqueIndex":"index")}return{columns:[...n].toSorted((i,s)=>i.localeCompare(s)),indexes:[...r].toSorted((i,s)=>i.localeCompare(s)),needsAnyColumn:a,needsId:o}},et=(e,t=!1)=>{if(e.length===0)return`${v}export {};
-`;const n=G(t),r=new Set(e.map(f=>f.name)),{columns:a,indexes:o,needsAnyColumn:i,needsId:s}=vr(e,r),l=[...o,...a].toSorted((f,y)=>f.localeCompare(y)),u=e.map(f=>xr(f,r)).join(`
+}${r});`},$r=e=>e.typeAnnotation?.includes('Id<"')??!1,Sr=(e,t)=>{const n=new Set(["integer","sqliteTable","text"]),r=new Set;let a=!1,o=!1;for(const i of e){for(const s of Object.values(i.shape)){const d=We(s);n.add(d.builder),o=o||$r(d),a=a||pt(s,t)!==void 0}for(const s of i.indexes)r.add(s.unique?"uniqueIndex":"index")}return{columns:[...n].toSorted((i,s)=>i.localeCompare(s)),indexes:[...r].toSorted((i,s)=>i.localeCompare(s)),needsAnyColumn:a,needsId:o}},et=(e,t=!1)=>{if(e.length===0)return`${S}export {};
+`;const n=ee(t),r=new Set(e.map(g=>g.name)),{columns:a,indexes:o,needsAnyColumn:i,needsId:s}=Sr(e,r),d=[...o,...a].toSorted((g,b)=>g.localeCompare(b)),u=e.map(g=>vr(g,r)).join(`
 
 `),p=[i?`import type { AnySQLiteColumn } from "${n.serverDrizzle}";
 `:"",s?`import type { Id } from "./dataModel.js";
-`:""].join("");return`${v}import { ${l.join(", ")} } from "${n.serverDrizzle}";
+`:""].join("");return`${S}import { ${d.join(", ")} } from "${n.serverDrizzle}";
 ${p}
 ${u}
-`},qr=(e,t=!1)=>{const n=e.tables.filter(a=>a.shardMode==="global"),r=e.tables.filter(a=>a.shardMode!=="global");return{global:et(n,t),shard:et(r,t)}},Br=e=>{const t=[],n=new Map;for(const s of e){const l=n.get(s.cron);l?l.push(s):(n.set(s.cron,[s]),t.push(s.cron))}const r=t.map(s=>`    ${JSON.stringify(s)},`).join(`
+`},jr=(e,t=!1)=>{const n=e.tables.filter(a=>a.shardMode==="global"),r=e.tables.filter(a=>a.shardMode!=="global");return{global:D(et(n,t),Be),shard:D(et(r,t),Be)}},Wr=e=>{const t=[],n=new Map;for(const s of e){const d=n.get(s.cron);d?d.push(s):(n.set(s.cron,[s]),t.push(s.cron))}const r=t.map(s=>`    ${JSON.stringify(s)},`).join(`
 `),a=r.length>0?`
 ${r}
-`:"",o=[...n.entries()].map(([s,l])=>{const u=l.map(p=>{const f=p.workflow?`workflow: ${JSON.stringify(p.workflow.binding)}`:`functionPath: ${JSON.stringify(p.functionPath)}`;return`        { name: ${JSON.stringify(p.name)}, ${f}, args: ${JSON.stringify(p.args)} },`}).join(`
+`:"",o=[...n.entries()].map(([s,d])=>{const u=d.map(p=>{const g=p.workflow?`workflow: ${JSON.stringify(p.workflow.binding)}`:`functionPath: ${JSON.stringify(p.functionPath)}`;return`        { name: ${JSON.stringify(p.name)}, ${g}, args: ${JSON.stringify(p.args)} },`}).join(`
 `);return`    ${JSON.stringify(s)}: [
 ${u}
     ],`}).join(`
 `),i=o.length>0?`
 ${o}
-`:"";return`${v}/**
+`:"";return`${S}/**
  * One scheduled cron invocation. Exactly one target is set: \`functionPath\` is
  * the \`namespace:fn\` dispatch ref (matches \`__lunoraRef\`), invoked on the
  * shard; \`workflow\` is a \`WORKFLOW_*\` binding name whose durable workflow is
@@ -2272,10 +2283,10 @@ export const LUNORA_CRON_TRIGGERS: ReadonlyArray<string> = [${a}];
  * looks up \`event.cron\` here and dispatches every job in the list.
  */
 export const LUNORA_CRONS: Record<string, ReadonlyArray<LunoraCronJob>> = {${i}};
-`},jr=e=>{const t=[...e].toSorted((r,a)=>r.name.localeCompare(a.name)).map(r=>{const a=[`name: ${JSON.stringify(r.name)}`,`table: ${JSON.stringify(r.table)}`];return r.field!==void 0&&a.push(`field: ${JSON.stringify(r.field)}`),r.dimensions!==void 0&&a.push(`dimensions: ${JSON.stringify(r.dimensions)}`),r.metric!==void 0&&a.push(`metric: ${JSON.stringify(r.metric)}`),r.metadata!==void 0&&a.push(`metadata: ${JSON.stringify(r.metadata)}`),`    { ${a.join(", ")} },`}).join(`
+`},Ur=e=>{const t=[...e].toSorted((r,a)=>r.name.localeCompare(a.name)).map(r=>{const a=[`name: ${JSON.stringify(r.name)}`,`table: ${JSON.stringify(r.table)}`];return r.field!==void 0&&a.push(`field: ${JSON.stringify(r.field)}`),r.dimensions!==void 0&&a.push(`dimensions: ${JSON.stringify(r.dimensions)}`),r.metric!==void 0&&a.push(`metric: ${JSON.stringify(r.metric)}`),r.metadata!==void 0&&a.push(`metadata: ${JSON.stringify(r.metadata)}`),`    { ${a.join(", ")} },`}).join(`
 `),n=t.length>0?`
 ${t}
-`:"";return`${v}/**
+`:"";return`${S}/**
  * One vector index declared in \`schema.ts\` — an inline \`.vectorize()\` column
  * or a standalone \`defineVectorIndex()\`. \`field\` is the source column (absent
  * for a \`select\`-derived Shape B index); \`metadata\` lists the row fields
@@ -2296,4 +2307,4 @@ export interface LunoraVectorIndex {
  * \`createWorker({ vectorIntrospector })\` to back the studio's vector browser.
  */
 export const LUNORA_VECTOR_INDEXES: ReadonlyArray<LunoraVectorIndex> = [${n}];
-`},Wr=e=>{const t=new Set,n=[];for(const r of e)t.has(r.cron)||(t.add(r.cron),n.push(r.cron));return n};export{jr as $,Wr as A,Dr as B,Cr as C,Ar as I,Lr as O,Ir as P,v as R,Br as S,Nn as a,Mr as b,Qn as c,Tr as g,Pr as i,Fr as l,Or as n,_r as o,ln as r,Er as s,qr as v};
+`},Kr=e=>{const t=new Set,n=[];for(const r of e)t.has(r.cron)||(t.add(r.cron),n.push(r.cron));return n};export{jr as $,Wr as A,_r as B,Cr as C,Dr as E,Ir as L,Ur as N,S,Kr as T,Vn as a,On as b,Fr as c,qr as d,Lr as g,Mr as l,Ar as n,Er as q,ln as r,Pr as s,Br as x};