@lunora/do 1.0.0-alpha.13 → 1.0.0-alpha.15

package/dist/index.d.mts

@@ -1214,6 +1214,36 @@ interface SocketAttachment {
   whispers?: string[];
 }
 /**
+* A `shape_subscribe`'s resolved query: which `table` to replicate, the
+* identity-scoped `effectiveWhere` (the shape predicate AND-merged with the
+* table's RLS read base-where), the optional projected `columns` allow-list,
+* and whether the table is `.global()` (served by the latency-tiered poll path
+* rather than the CDC poke path). The codegen subclass's `resolveShape` builds
+* it under the socket's verified identity, so the membership query the poke
+* protocol runs is RLS-correct by construction.
+*/
+interface ResolvedShape {
+  columns?: ReadonlyArray<string>;
+  effectiveWhere?: WhereInput;
+  /** `true` when the shape's table is `.global()` (lives in D1, not this DO's SQLite) — no per-DO op-log to diff, so served by the poll path. */
+  global?: boolean;
+  table: string;
+}
+/**
+* Identity a subscription/shape query is executed under, threaded EXPLICITLY
+* into the codegen `resolveShape`/`buildCtx` rather than read from the shared,
+* per-request identity fields. The value passed is the socket's OWN verified
+* identity (stamped on the {@link SocketAttachment} at the WS upgrade from the
+* runtime-minted `x-lunora-userid`/`x-lunora-identity` headers the client can't
+* forge), passed BY VALUE so a deferred refresh or interleaved RPC can't clobber
+* it. An anonymous socket leaves both fields `undefined`, so an RLS/`ctx.auth`
+* query fails closed (empty/denied) rather than leaking another user's data.
+*/
+interface SubscriptionIdentity {
+  identity?: Record<string, unknown>;
+  userId?: string;
+}
+/**
 * One-shot backfill of every declared aggregate index. Used by tests and
 * production hosts that want to populate counters up-front instead of on first
 * read. Idempotent: counter rows that already exist are left alone, so it's
@@ -2317,6 +2347,112 @@ interface RenderedSql {
 * identifiers quoted and placeholders numbered the way that engine expects.
 */
 declare const renderSql: (engine: SqlEngine, query: SQL) => RenderedSql;
+/** The result of {@link diffExternalSource}: the changes to replay, and the baseline the next tick diffs from. */
+interface ExternalSourceDiffResult {
+  /** Ordered for `applyCdcChanges`: upserts in pulled order, then deletes in baseline order. */
+  changes: CdcChange[];
+  /** `id → canonical-value JSON` — pass back as the `baseline` next tick (or persist for an incremental cursor). */
+  nextBaseline: Map<string, string>;
+}
+/**
+* Project a row to the document the ingest loop stores + compares on: `_id` plus
+* either the `columns` allow-list or every field except the framework-assigned
+* `_creationTime` (which the source never supplies). Returned as a plain object;
+* key order is irrelevant because {@link stableStringify} sorts keys. Used for BOTH
+* the pulled side here and the local baseline, so the two are byte-identical for an
+* unchanged row.
+*/
+
+/**
+* Diff a sourced table's freshly-pulled membership against the local baseline.
+* Returns the `CdcChange[]` to apply (in stable order: upserts in pulled order,
+* then deletes in baseline order) and the next baseline (`id → canonical JSON`).
+*/
+declare const diffExternalSource: (pulled: ReadonlyArray<Record<string, unknown>>, baseline: ReadonlyMap<string, string>, options: {
+  columns?: ReadonlyArray<string>;
+  table: string;
+}) => ExternalSourceDiffResult;
+/** The outcome of one materialize pass: how many changes were applied, and the baseline the next tick diffs from. */
+interface MaterializeResult {
+  /** Number of `CdcChange`s applied (inserts + updates + deletes). Zero on a steady-state tick. */
+  applied: number;
+  /** `id → projected-value JSON` — the post-tick membership, to feed back as `baseline` next tick. */
+  nextBaseline: Map<string, string>;
+}
+/**
+* Diff `pulled` against `baseline` and apply the delta to `writer`. Returns the
+* applied count and the next baseline. A steady-state tick (membership unchanged)
+* applies nothing and returns `applied: 0`.
+*/
+declare const materializeExternalRows: (writer: DatabaseWriterLike, pulled: ReadonlyArray<Record<string, unknown>>, baseline: ReadonlyMap<string, string>, options: {
+  columns?: ReadonlyArray<string>;
+  table: string;
+}) => Promise<MaterializeResult>;
+/**
+* Read the materialized table's current membership as the canonical full-pull
+* baseline (`id → canonical JSON`). Reuses the shape scanner (`selectShapeRows`)
+* and the SAME {@link projectExternalSourceRow} + {@link stableStringify} the diff
+* uses, so a stored row (with `_creationTime` + arbitrary key order) compares
+* byte-identical to its freshly-pulled source counterpart — an unchanged row
+* produces no spurious update.
+*/
+declare const readExternalSourceBaseline: (sql: SqlExec, table: string, columns?: ReadonlyArray<string>) => Map<string, string>;
+/**
+* Run one full-pull materialize tick: read the table's current membership as the
+* baseline, diff the freshly-pulled rows against it, and apply the delta. This is
+* the system-driven loop body the DO poll alarm calls — the table IS the baseline
+* (design §1 Fact A), so no separate snapshot is kept. Pass both the read handle
+* (`sql`) and the validated `writer` (the DO has both); they must address the same
+* table.
+*/
+declare const runExternalSourceTick: (sql: SqlExec, writer: DatabaseWriterLike, pulled: ReadonlyArray<Record<string, unknown>>, options: {
+  columns?: ReadonlyArray<string>;
+  table: string;
+}) => Promise<MaterializeResult>;
+/** The minimal SqlClient surface the poll loop calls (mirrors `@lunora/hyperdrive`'s `SqlClient`). */
+interface SourceClientLike {
+  query: <Row = Record<string, unknown>>(text: string, parameters?: ReadonlyArray<unknown>) => Promise<Row[]>;
+}
+/** Poll cadence: `"manual"` (never auto-poll) or a minimum interval between polls. */
+type SourceRefresh = "manual" | {
+  everyMs: number;
+};
+/** The runtime `.source(...)` config the poll loop reads — a structural mirror of `@lunora/server`'s `ExternalSourceDefinition` (only the fields the tick uses). */
+interface ExternalSourceLike {
+  binding: string;
+  columns?: ReadonlyArray<string>;
+  idColumn?: string;
+  map?: (row: Record<string, unknown>) => Record<string, unknown>;
+  query: string;
+  refresh?: SourceRefresh;
+  tenantBy?: (shardKey: string) => ReadonlyArray<unknown>;
+}
+/**
+* Lift an external row to a Lunora document: the `idColumn` value becomes a
+* stringified `_id`, then either `map` shapes the body or every other column is
+* copied verbatim. Throws on a missing/null id, and on a non-scalar id, so a
+* misconfigured query fails loudly instead of materializing rows under the literal
+* id `"undefined"` (or collapsing many rows onto one id). Shared with
+* `@lunora/hyperdrive`'s `projectSourceRow`.
+*/
+declare const liftSourceId: (row: Record<string, unknown>, options?: {
+  idColumn?: string;
+  map?: (row: Record<string, unknown>) => Record<string, unknown>;
+}) => Record<string, unknown>;
+/**
+* Whether a source should poll on this alarm tick. `"manual"` never auto-polls;
+* `{ everyMs }` polls at most once per interval (the alarm floor still bounds it
+* from below); an omitted `refresh` polls every tick. `lastPolledMs` is `undefined`
+* before the first poll (always due).
+*/
+declare const isSourceDue: (refresh: SourceRefresh | undefined, lastPolledMs: number | undefined, nowMs: number) => boolean;
+/**
+* Pull a sourced table's tenant slice from `client`, project each row through
+* {@link liftSourceId}, and materialize it via {@link runExternalSourceTick}
+* (read local baseline → diff → apply through the validated CDC writer). The
+* per-table body the DO poll alarm runs; `shardKey` binds into `tenantBy`.
+*/
+declare const pullExternalSourceTick: (sql: SqlExec, writer: DatabaseWriterLike, client: SourceClientLike, table: string, source: ExternalSourceLike, shardKey: string) => Promise<MaterializeResult>;
 /**
 * Reserved `functionPath` prefix for admin introspection RPCs. These travel
 * over the same `/_lunora/rpc` → shard `/rpc` path as ordinary functions, but
@@ -2371,6 +2507,7 @@ declare const ADMIN_FUNCTIONS: {
   readonly getAuditLog: "__lunora_admin__:getAuditLog";
   readonly getAuthMetrics: "__lunora_admin__:getAuthMetrics";
   readonly getCapturedMail: "__lunora_admin__:getCapturedMail";
+  readonly getFanoutMetrics: "__lunora_admin__:getFanoutMetrics";
   readonly getFunctionStats: "__lunora_admin__:getFunctionStats";
   readonly listSubscriptions: "__lunora_admin__:listSubscriptions";
   readonly listTableIndexes: "__lunora_admin__:listTableIndexes";
@@ -3944,31 +4081,6 @@ interface SubscriptionOutcome {
   tables: Set<string>;
 }
 /**
-* A shape resolved to its concrete query plan, the return of the
-* {@link ShardDO.resolveShape} hook. The codegen subclass composes the shape's
-* own predicate with the caller's RLS read base-where into `effectiveWhere`
-* under the socket's verified identity (the client never supplies it), so the
-* membership query the poke protocol runs is RLS-correct by construction.
-*
-* `columns`, when present, projects each row-op's `value` to that subset (the
-* shape's declared column allow-list); absent ⇒ the full document is shipped.
-*/
-interface ResolvedShape {
-  columns?: ReadonlyArray<string>;
-  effectiveWhere?: WhereInput;
-  /**
-  * `true` when the shape's table is `.global()` (lives in D1, not this DO's
-  * SQLite). A global shape has **no per-DO op-log** to diff, so it is served
-  * by the **latency-tiered poll path** ({@link ShardDO.seedGlobalShape} +
-  * {@link ShardDO.refreshGlobalShape}) instead of the CDC poke path — seeded
-  * from {@link ShardDO.readGlobalShapeRows} and refreshed on an alarm tick.
-  * The codegen subclass sets it from the schema's `shardMode`; absent ⇒ a
-  * shard-local (poke-live) shape.
-  */
-  global?: boolean;
-  table: string;
-}
-/**
 * Classification of a watermarked custom-mutator push against the shard's
 * `__client_watermark`: `expected` is the next in-order sequence, `kind`
 * whether the push is a replay (`"already"`), the next one (`"next"`), or an
@@ -3979,35 +4091,6 @@ type ClientMutationClass = {
   kind: "already" | "gap" | "next";
 };
 /**
-* Identity a subscription query is executed under, threaded EXPLICITLY into
-* `executeSubscription` → `buildCtx` rather than read from the shared,
-* per-request `currentRequestUserId`/`currentRequestIdentity` instance fields.
-*
-* The value passed is the socket's OWN verified identity, captured at the WS
-* upgrade from the runtime-forwarded, server-minted `x-lunora-userid` /
-* `x-lunora-identity` headers (the client cannot forge them — the runtime
-* strips any client-supplied copies) and stamped on the {@link SocketAttachment}.
-* `seedSubscription` and `refreshSubscriptions` read it off the attachment and
-* pass it here BY VALUE — never by reading the mutable per-request
-* `currentRequestUserId`/`currentRequestIdentity` instance fields, which a
-* deferred (`waitUntil`) refresh or a concurrently-interleaved RPC could be
-* mutating. That value-passing is what keeps a subscription re-run from
-* observing or clobbering an in-flight RPC's identity.
-*
-* Developer-facing consequence: a query that authorizes or filters on the
-* caller's identity — via `.use(rls(...))` or by reading `ctx.auth.userId` —
-* evaluates over the live channel under the CONNECTING user, so its seed and
-* every write-driven refresh return that user's rows, matching the one-shot
-* `fetch` RPC. An anonymous socket (no identity resolved at upgrade) leaves
-* both fields `undefined`, so such a query fails closed (empty/denied) rather
-* than leaking another user's data. See the lunora-realtime skill
-* ("Authorization & live queries").
-*/
-interface SubscriptionIdentity {
-  identity?: Record<string, unknown>;
-  userId?: string;
-}
-/**
 * Optional shard-level configuration passed through `super(state, env, …)`.
 * Reserved as a bag rather than positional args so subclasses don't break
 * when new knobs land. Today the only knob is the reactive cache; future
@@ -4441,6 +4524,35 @@ declare abstract class ShardDO {
   */
   private readonly metrics;
   /**
+  * Running fan-out cost counters surfaced by the
+  * `__lunora_admin__:getFanoutMetrics` RPC — one tally for the reactive
+  * shape-poke path (`pokeShapeSubscribers`) and one for the whisper broadcast
+  * path (`broadcastWhisper`). Each pass records the sockets it iterated (the
+  * O(subscribers) cost) and delivered to. In-memory and reset on
+  * hibernation/restart, sharing `metrics.sinceMs` as the "since this instance
+  * woke" epoch. This is the observability half of plan 075's auto-elastic
+  * relay tier (Phase 1): measure the per-flush fan-out cost so the promotion
+  * threshold is grounded in real numbers, with no behavior change.
+  */
+  private readonly fanout;
+  /**
+  * The runtime's Durable Object namespace binding name (e.g. `"SHARD"`),
+  * forwarded as `x-lunora-shard-binding` on every request so a DO can address
+  * its siblings (`this.env[binding].getByName(...)`) for the relay hub. Absent
+  * in single-DO mode / the unit harness — when absent, the relay tier is inert
+  * and whispers stay shard-local (no behavior change). In-memory; re-learned per
+  * request.
+  */
+  private shardBinding;
+  /**
+  * The auto-elastic fan-out relay collaborator (plan 075) — an {@link OwnerRelay}
+  * or {@link RelayMember} chosen ONCE from this DO's name, or `undefined` for an
+  * unnamed (single-DO) DO where the relay tier is inert. All relay state +
+  * transport lives on it, reached back through the {@link RelayHost} adapter, so
+  * owner-only state can never sit next to relay-only state on this class.
+  */
+  private readonly relay;
+  /**
   * Declared indexes (`table:index`) a query has exercised since this instance
   * woke, stamped by `getCtxDbIndexUseHook`. In-memory and reset on
   * hibernation/restart — drives the `unused_index` runtime advisory.
@@ -5181,6 +5293,14 @@ declare abstract class ShardDO {
   */
   protected resolveShape(_name: string, _args: Record<string, unknown>, _identity?: SubscriptionIdentity): ResolvedShape | undefined;
   /**
+  * The RLS-uniform gate (plan 075 Phase 3): whether a reactive shape may be
+  * relay-multicast — i.e. one delta is correct for **every** subscriber. The owner
+  * decides it (see {@link OwnerRelay.isShapeRelayUniform} — a static RLS read-policy
+  * guard plus claim-exhaustive `Proxy` probes, fail-closed); this thin delegation
+  * is the seam the gate test exercises. A non-owner DO is never relay-uniform.
+  */
+  protected isShapeRelayUniform(name: string, args: Record<string, unknown>): boolean;
+  /**
   * Read the FULL current membership of a `.global()`-table shape from its D1
   * (or Hyperdrive) backend — the seed/poll source for the latency-tiered
   * global shape path. A `.global()` table lives in another store with no
@@ -5198,6 +5318,32 @@ declare abstract class ShardDO {
   */
   protected readGlobalShapeRows(_resolved: ResolvedShape, _identity?: SubscriptionIdentity): Promise<ShapeRow[]>;
   /**
+  * Poll external-source (`.source(...)`) tables once (plan 077): materialize
+  * each sourced table's freshly-pulled tenant slice into this DO's SQLite. The
+  * base `ShardDO` has no sourced tables, so it returns `0` and the ingest tier
+  * stays dormant — zero behavior change for every existing DO. The codegen
+  * subclass overrides it to, per sourced table, build a `createShardCtxDb`
+  * writer, read the tenant slice from Hyperdrive under this DO's shard key, and
+  * run `runExternalSourceTick` (read local baseline → diff → apply via the
+  * validated CDC writer). Returns the number of sourced tables still being
+  * polled, so the shared poll alarm ({@link ShardDO.alarm}) re-arms while ingest
+  * is active.
+  */
+  protected pollExternalSources(): Promise<number>;
+  /**
+  * Arm the shared poll alarm for external-source ingest (plan 077). The alarm is
+  * shared with the global-shape poll tier; the codegen subclass calls this once
+  * (on construction / first sourced write) so a sourced DO starts its ingest
+  * loop, after which {@link ShardDO.alarm} re-arms itself while
+  * {@link ShardDO.pollExternalSources} reports remaining work. Idempotent; a
+  * no-op when the runtime exposes no `setAlarm` (unit harness).
+  */
+  protected scheduleSourcePoll(): Promise<void>;
+  /** This DO's shard key (its DO name), or `__root__` for the single-DO default. The `tenantBy` mapper binds it into the source query. */
+  protected currentShardKey(): string;
+  /** Record a contained external-source ingest failure (one sourced table's poll) into the log ring without aborting the others. */
+  protected recordExternalSourceError(table: string, error: unknown): void;
+  /**
   * Look up a streaming-query function and return a thunk that produces the
   * `AsyncIterable&lt;unknown>` when handed an {@link AbortSignal}. The codegen
   * subclass overrides this to dispatch via `LUNORA_FUNCTIONS`; the base
@@ -5390,6 +5536,26 @@ declare abstract class ShardDO {
   */
   private errorToResponse;
   /**
+  * Batch dispatch (plan 088). Applies each `calls[]` entry through the SAME
+  * single-call `/rpc` path (via a nested `this.fetch`), **sequentially**, so
+  * the per-`(identity, mutationId)` idempotency dedup and the per-client
+  * `__client_watermark` ordering are enforced entry-by-entry exactly as for an
+  * individual call — no duplication of the dispatch core, no reordering.
+  *
+  * Failures are **per-slot, not fail-fast**: an entry that throws (or a
+  * custom-mutator `OUT_OF_ORDER` gap) is captured in its own result slot and
+  * later entries still run. Ordering is still safe — a later same-client
+  * mutator after a gap re-classifies as a gap too (the watermark never
+  * advanced), so it cannot apply out of order; unrelated entries/queries are
+  * independent. The response is `{ results: [{ id, status, body }] }` in
+  * request order; each `body` is the untouched single-call envelope (its
+  * `result` already wire-encoded), so the client demuxes + decodes each
+  * exactly as one call.
+  */
+  private handleBatchRpc;
+  /** Dispatch one batch entry through the single-call `/rpc` path and capture its envelope (plan 088). */
+  private dispatchBatchEntry;
+  /**
   * Serve a reserved admin-introspection RPC (`__lunora_admin__:*`) for the
   * data browser. Gated by `env.LUNORA_ADMIN_TOKEN`: introspection is
   * **disabled unless the token is configured**, and when it is, the request
@@ -5674,6 +5840,16 @@ declare abstract class ShardDO {
   * Read-only: it touches no SQLite and mutates no socket state.
   */
   private collectSubscriptions;
+  /**
+  * Assemble the `__lunora_admin__:getFanoutMetrics` payload for the Studio
+  * fan-out observability panel (plan 075 Phase 1). The point-in-time topic
+  * subscriber counts are folded live from each socket's attachment via
+  * {@link summarizeFanoutTopics}; the running per-path cost counters are the
+  * in-memory {@link ShardDO.fanout} tallies, sharing `metrics.sinceMs` as the
+  * "since this instance woke" epoch. Read-only: touches no SQLite and mutates
+  * no socket state.
+  */
+  private collectFanoutMetrics;
   /** Resolve a `getAuditLog` admin read, parsing the optional `limit`/`sinceSeq` cursor args and ensuring the reserved table first. */
   private readAdminAuditLog;
   /**
@@ -5943,6 +6119,18 @@ declare abstract class ShardDO {
   */
   private seedOpLogShape;
   /**
+  * Compute an op-log shape seed (cursor, epoch, the resume base, and the
+  * membership `rowsPatch`) WITHOUT sending — the shared core of
+  * {@link ShardDO.seedOpLogShape} (sends to a local socket) and the owner relay's
+  * `buildShapeSeedFrames` (serializes the frames for a relay to deliver, plan 075
+  * Phase 3, via the {@link RelayHost} seam). Resume only when CDC is on, the client is on this
+  * epoch, its checkpoint doesn't run ahead of ours, and the log still covers it;
+  * else a full re-seed. A fully-compacted log only proves "nothing missed" when
+  * the client is already at `cursor`.
+  * @returns the cursor/epoch, the resume base (`baseCheckpoint`), and the membership patch
+  */
+  private computeOpLogShapeSeed;
+  /**
   * Fan the membership diff of every shape affected by this flush to its
   * subscribers — the partial-replication parallel to
   * {@link ShardDO.refreshSubscriptions}, called alongside it from
@@ -6168,6 +6356,15 @@ declare abstract class ShardDO {
   * on older runtimes, where it degrades to a no-op.
   */
   private armWebSocketKeepalive;
+  /**
+  * Route the non-RPC requests `fetch` handles before the shard-local RPC
+  * endpoint: a WebSocket upgrade, and the internal `/_lunora/relay` owner↔relay
+  * control channel (never reachable by a client — the runtime forwards only
+  * worker-internal traffic there). Returns `undefined` for an RPC request, which
+  * `fetch` then dispatches.
+  * @returns the routed response, or `undefined` when this is an RPC request
+  */
+  private routeNonRpc;
   private handleWebSocketUpgrade;
   /**
   * Whether this shard has a `__cdc_log` table. The single source of the
@@ -6215,6 +6412,14 @@ declare abstract class ShardDO {
   * but per-topic auth does not exist here; see `whisperSubscribe` on the client.
   */
   private broadcastWhisper;
+  /**
+  * Deliver an already-serialized whisper `frame` to every local socket joined to
+  * `topic`, excluding `exclude` (the sender, or `undefined` for a frame the relay
+  * hub forwarded in — its sender lives on another DO). Records the fan-out pass
+  * for `getFanoutMetrics` (plan 075 Phase 1). Pure delivery — no SQLite, no CDC.
+  * @returns the number of sockets the frame was sent to
+  */
+  private deliverWhisperLocal;
   private readAttachment;
 }
 /**
@@ -6411,4 +6616,4 @@ interface WhereSqlStrategy {
 * `undefined` when the input imposes no constraint (empty `where`).
 */
 declare const compileWhereSql: (where: WhereInput | undefined, strategy: WhereSqlStrategy) => SQL | undefined;
-export { ADMIN_FUNCTIONS, ADMIN_FUNCTION_PREFIX, AGGREGATE_SQL_FUNCTION, AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, type AdvisoriesResult, type AdvisoryFinding, type AggregateIndexDefinitionLike, type AggregateOp, type AggregateOptions, type AggregateResult, type AggregateTally, type ApplyOnDeleteOptions, type AuditEntry, type AuditLogResult, type AuthMetrics, type AuthMetricsBucket, type BroadcastDelta, CDC_LOG_TABLE, type CacheEntry, type CapturedMailRow, type CdcChange, type Clock, type ColumnMeta, type ColumnMetaLike, ConflictError, type CountArgs, CountRlsUnsupportedError, type CtxDbOptions, DATA_MIGRATION_STATE_TABLE, DEFAULT_MAX_RELATION_KEYS, type DataMigrationDocument, type DataMigrationLike, type DataMigrationTransform, type DatabaseWriterLike, type DependencyTracker, type DeployInfo, type ExportRow, type ExportShardAdminArgs, type ExportShardArgs, FLAGS_FUNCTION_PREFIX, FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_TABLE, type FacetColumnOptions, type FacetColumnResult, type FacetValue, type FieldOperators, type FlagEvaluation, type FlagsResult, type FunctionCallStat, type FunctionMetricBucket, type FunctionMetricIndexHit, type FunctionStatsResult, type GroupByEntry, type GroupByOptions, type HibernatableWebSocket, type IdGenerator, type ImportError, type ImportShardAdminArgs, type ImportShardArgs, type ImportShardResult, type IndexDefinitionLike, type IndexRangeBuilderLike, LogBuffer, type LogEntry, type LogEventInput, type LogLevel, type LogSink, MAIL_RETENTION, MAIL_TABLE, MAX_SQL_ROWS, MIN_ADMIN_TOKEN_LENGTH, MIN_AUTH_SECRET_LENGTH, type MaskColumnMetadata, type MaskPoliciesResult, type MigrationDirection, type MigrationRunResult, type MigrationStatus, type MigrationStatusRow, type MutationDelta, type NestedWith, NotFoundError, NotUniqueError, type OnDeleteActionLike, type OrderByInput, type OrderKey, type PaginationOptions, type PitrBookmarkResult, type PitrRestoreArgs, type PitrRestoreResult, type PitrStorage, type QueryArgs, type QueryPage, type QueueMetadata, type QueuesResult, RANK_TIEBREAK, RELATION_FUNCTION_PREFIX, RLS_UNWRAP_SYMBOL, ROOT_DO_SIZE_WARN_BYTES, ROOT_SHARD_NAME, type RankDirection, type RankIndexDefinitionLike, type RankOptions, type RankPage, type RankPageOptions, type RankPageRow, type RankPageRowKey, type RankResult, type RankSortKeyLike, ReactiveCache, type ReactiveCacheOptions, type ReadHook, type ReadTablePageOptions, type RecordAuthEventInput, type RecordFunctionMetricInput, type RecordMailInput, type RelationDefinitionLike, type RenderedSql, type ResolveRelationPredicatesOptions, type ResolveWithOptions, type RestrictableQueryOptions, type RlsPoliciesResult, type RlsPolicyMetadata, RlsRequiredError, type RlsRoleMetadata, type RpcRequest, type RunDataMigrationOptions, type RunShardApplyCdcArgs, type RunShardApplyCdcResult, type RunShardBulkDeleteArgs, type RunShardBulkDeleteResult, type RunShardExportArgs, type RunShardImportArgs, type RunShardMigrationArgs, type RunShardRankBeforeArgs, type RunShardRankPageArgs, type RunShardWriteArgs, type RunShardWriteResult, type RunTriggersOptions, SCAN_DEP, SESSION_DO_TTL_DEFAULT, SHARD_REGISTRY_DO_NAME, type ScheduledFunctionDoc, type SchedulerLike, type SchemaLike, type SearchFilterBuilderLike, type SecurityAuditResult, type SecurityFinding, type SecurityFindingKind, type SecurityFindingLevel, type SelectMatchingIdsOptions, type ServerDefaultContextLike, SessionDO, type SessionRecord, type SettingEntry, type SettingKind, type SettingsResult, type ShapeSubscriptionQuery, ShardDO, type ShardDOOptions, type ShardDOState, type ShardRankPageResult, ShardRegistryDO, type SocketAttachment, type SortDirection, type SqlConsoleResult, type SqlCursor, type SqlEngine, type SqlExec, type StorageRuleMetadata, type StorageRulesResult, type StudioFeaturesResult, type SubscriptionEnvelope, type SubscriptionOutcome, type SubscriptionQuery, type SystemDatabaseReader, type SystemDoc, type SystemQuery, type SystemReaderOptions, type SystemReaderSchedulerLike, type SystemReaderStorageLike, type SystemTableName, type TableColumnsResult, type TableDefinitionLike, type TableIndexInfo, type TableIndexesResult, type TableInfo, type TablePage, type TableReaderLike, type TablesColumnsResult, type TransactionSqlLike, type TriggerContextLike, type TriggerDefinitionLike, type TriggerEventLike, type TriggerOpLike, type TriggerTimingLike, type ValidatorLike, type WhereInput, type WhereSqlStrategy, type WithInput, type WorkflowMetadata, type WorkflowsResult, type WriteEvent, type WriteHook, aggregateSqlFunction, aggregateTableName, applyCdcChanges, applyOnDelete, applySelect, armRestore, assertFlatPredicate, assertReadonly, assertShapeShardable, assertValidClientId, backfillAggregateIndexes, backfillRankIndexes, buildFtsMatch, buildSecurityAudit, buildSeekWhere, clearCapturedMail, coerceAggregateNumber, compileWhereSql, containsRelationPredicate, createDependencyTracker, createShardCtxDb, createSystemReader, decodeCursor, depKey, encodeAggregateKey, encodeCursor, encodePartitionKey, ensureAuthMetricsTables, ensureFunctionMetricsTables, ensureMailTable, exportShardRows, exportShardTable, facetColumn, fanOutScalarCounts, foldAggregateTally, ftsTableName, guardWriter, hasTrigger, importShardRows, isRelationPredicate, listTables, matchesRankStaticWhere, matchesStaticWhere, mergeWhere, normalizeCountArgument, normalizeIdStructurally, normalizeOrderKeys, parseExportShardArgs, parseImportShardArgs, planAggregateLookup, rankTableName, reactiveCacheKey, readAggregateValue, readAuthMetrics, readBookmark, readCapturedMail, readCdcChanges, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetrics, readFunctionMetricsTotals, readMigrationStatus, readTablePage, recordAuthEvent, recordCapturedMail, recordFunctionMetric, renderSql, resolveRankPartition, resolveRelationPredicates, resolveWith, runDataMigration, runReadonlySql, runRowValidators, runShardMigrations, runTriggers, scoreDocument, selectExportTables, selectIndexForAggregate, selectIndexForCount, selectIndexForGroupBy, selectMatchingIds, serveRelationFanout, softDeleteScope, sortColumnName, stableStringify, stringifySearchText, subscriptionListDeltas, throwingScheduler, tokenizeSearch, trimCdcChanges, validateImportRow };
+export { ADMIN_FUNCTIONS, ADMIN_FUNCTION_PREFIX, AGGREGATE_SQL_FUNCTION, AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, type AdvisoriesResult, type AdvisoryFinding, type AggregateIndexDefinitionLike, type AggregateOp, type AggregateOptions, type AggregateResult, type AggregateTally, type ApplyOnDeleteOptions, type AuditEntry, type AuditLogResult, type AuthMetrics, type AuthMetricsBucket, type BroadcastDelta, CDC_LOG_TABLE, type CacheEntry, type CapturedMailRow, type CdcChange, type Clock, type ColumnMeta, type ColumnMetaLike, ConflictError, type CountArgs, CountRlsUnsupportedError, type CtxDbOptions, DATA_MIGRATION_STATE_TABLE, DEFAULT_MAX_RELATION_KEYS, type DataMigrationDocument, type DataMigrationLike, type DataMigrationTransform, type DatabaseWriterLike, type DependencyTracker, type DeployInfo, type ExportRow, type ExportShardAdminArgs, type ExportShardArgs, type ExternalSourceDiffResult, type ExternalSourceLike, FLAGS_FUNCTION_PREFIX, FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_TABLE, type FacetColumnOptions, type FacetColumnResult, type FacetValue, type FieldOperators, type FlagEvaluation, type FlagsResult, type FunctionCallStat, type FunctionMetricBucket, type FunctionMetricIndexHit, type FunctionStatsResult, type GroupByEntry, type GroupByOptions, type HibernatableWebSocket, type IdGenerator, type ImportError, type ImportShardAdminArgs, type ImportShardArgs, type ImportShardResult, type IndexDefinitionLike, type IndexRangeBuilderLike, LogBuffer, type LogEntry, type LogEventInput, type LogLevel, type LogSink, MAIL_RETENTION, MAIL_TABLE, MAX_SQL_ROWS, MIN_ADMIN_TOKEN_LENGTH, MIN_AUTH_SECRET_LENGTH, type MaskColumnMetadata, type MaskPoliciesResult, type MaterializeResult, type MigrationDirection, type MigrationRunResult, type MigrationStatus, type MigrationStatusRow, type MutationDelta, type NestedWith, NotFoundError, NotUniqueError, type OnDeleteActionLike, type OrderByInput, type OrderKey, type PaginationOptions, type PitrBookmarkResult, type PitrRestoreArgs, type PitrRestoreResult, type PitrStorage, type QueryArgs, type QueryPage, type QueueMetadata, type QueuesResult, RANK_TIEBREAK, RELATION_FUNCTION_PREFIX, RLS_UNWRAP_SYMBOL, ROOT_DO_SIZE_WARN_BYTES, ROOT_SHARD_NAME, type RankDirection, type RankIndexDefinitionLike, type RankOptions, type RankPage, type RankPageOptions, type RankPageRow, type RankPageRowKey, type RankResult, type RankSortKeyLike, ReactiveCache, type ReactiveCacheOptions, type ReadHook, type ReadTablePageOptions, type RecordAuthEventInput, type RecordFunctionMetricInput, type RecordMailInput, type RelationDefinitionLike, type RenderedSql, type ResolveRelationPredicatesOptions, type ResolveWithOptions, type RestrictableQueryOptions, type RlsPoliciesResult, type RlsPolicyMetadata, RlsRequiredError, type RlsRoleMetadata, type RpcRequest, type RunDataMigrationOptions, type RunShardApplyCdcArgs, type RunShardApplyCdcResult, type RunShardBulkDeleteArgs, type RunShardBulkDeleteResult, type RunShardExportArgs, type RunShardImportArgs, type RunShardMigrationArgs, type RunShardRankBeforeArgs, type RunShardRankPageArgs, type RunShardWriteArgs, type RunShardWriteResult, type RunTriggersOptions, SCAN_DEP, SESSION_DO_TTL_DEFAULT, SHARD_REGISTRY_DO_NAME, type ScheduledFunctionDoc, type SchedulerLike, type SchemaLike, type SearchFilterBuilderLike, type SecurityAuditResult, type SecurityFinding, type SecurityFindingKind, type SecurityFindingLevel, type SelectMatchingIdsOptions, type ServerDefaultContextLike, SessionDO, type SessionRecord, type SettingEntry, type SettingKind, type SettingsResult, type ShapeSubscriptionQuery, ShardDO, type ShardDOOptions, type ShardDOState, type ShardRankPageResult, ShardRegistryDO, type SocketAttachment, type SortDirection, type SourceClientLike, type SourceRefresh, type SqlConsoleResult, type SqlCursor, type SqlEngine, type SqlExec, type StorageRuleMetadata, type StorageRulesResult, type StudioFeaturesResult, type SubscriptionEnvelope, type SubscriptionOutcome, type SubscriptionQuery, type SystemDatabaseReader, type SystemDoc, type SystemQuery, type SystemReaderOptions, type SystemReaderSchedulerLike, type SystemReaderStorageLike, type SystemTableName, type TableColumnsResult, type TableDefinitionLike, type TableIndexInfo, type TableIndexesResult, type TableInfo, type TablePage, type TableReaderLike, type TablesColumnsResult, type TransactionSqlLike, type TriggerContextLike, type TriggerDefinitionLike, type TriggerEventLike, type TriggerOpLike, type TriggerTimingLike, type ValidatorLike, type WhereInput, type WhereSqlStrategy, type WithInput, type WorkflowMetadata, type WorkflowsResult, type WriteEvent, type WriteHook, aggregateSqlFunction, aggregateTableName, applyCdcChanges, applyOnDelete, applySelect, armRestore, assertFlatPredicate, assertReadonly, assertShapeShardable, assertValidClientId, backfillAggregateIndexes, backfillRankIndexes, buildFtsMatch, buildSecurityAudit, buildSeekWhere, clearCapturedMail, coerceAggregateNumber, compileWhereSql, containsRelationPredicate, createDependencyTracker, createShardCtxDb, createSystemReader, decodeCursor, depKey, diffExternalSource, encodeAggregateKey, encodeCursor, encodePartitionKey, ensureAuthMetricsTables, ensureFunctionMetricsTables, ensureMailTable, exportShardRows, exportShardTable, facetColumn, fanOutScalarCounts, foldAggregateTally, ftsTableName, guardWriter, hasTrigger, importShardRows, isRelationPredicate, isSourceDue, liftSourceId, listTables, matchesRankStaticWhere, matchesStaticWhere, materializeExternalRows, mergeWhere, normalizeCountArgument, normalizeIdStructurally, normalizeOrderKeys, parseExportShardArgs, parseImportShardArgs, planAggregateLookup, pullExternalSourceTick, rankTableName, reactiveCacheKey, readAggregateValue, readAuthMetrics, readBookmark, readCapturedMail, readCdcChanges, readExternalSourceBaseline, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetrics, readFunctionMetricsTotals, readMigrationStatus, readTablePage, recordAuthEvent, recordCapturedMail, recordFunctionMetric, renderSql, resolveRankPartition, resolveRelationPredicates, resolveWith, runDataMigration, runExternalSourceTick, runReadonlySql, runRowValidators, runShardMigrations, runTriggers, scoreDocument, selectExportTables, selectIndexForAggregate, selectIndexForCount, selectIndexForGroupBy, selectMatchingIds, serveRelationFanout, softDeleteScope, sortColumnName, stableStringify, stringifySearchText, subscriptionListDeltas, throwingScheduler, tokenizeSearch, trimCdcChanges, validateImportRow };