@powerhousedao/reactor-api 6.2.3-dev.43 → 6.2.3-dev.45

package/dist/index.mjs

@@ -1,7 +1,8 @@
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="65e47e18-15f4-5a67-b94b-f6e795c1eb9b")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="e3951045-d29d-5cf1-b068-0ee1e9b26631")}catch(e){}}();
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
-import { A as RefusalNotRecordedError, C as AuthorizationPolicy, D as AuthenticationRequiredError, E as AuthEvaluationUnsupportedError, O as ForbiddenError, S as createCanonicalDocumentIdResolver, T as createAuthorizationService, _ as loadProcessors, a as pieceListLocation, b as callerSubject, c as buildGraphQlDocument, d as buildGraphqlOperations, f as isSubgraphClass, g as loadDocumentModels, k as MalformedStoredOperationError, l as buildGraphQlDriveDocument, m as extractUpgradeManifests, o as piecesFromCdnList, p as debounce, r as PIECE_SOURCE_LIST, s as piecesFromListModule, u as buildGraphqlOperation, v as loadSubgraphs, w as AuthorizedDocumentHandle, x as CanonicalDocumentIdResolutionError, y as BaseSubgraph } from "./pieces-DRY6haAO.mjs";
+import { A as AuthenticationRequiredError, C as callerSubject, D as AuthorizedDocumentHandle, E as AuthorizationPolicy, M as MalformedStoredOperationError, N as RefusalNotRecordedError, O as createAuthorizationService, S as BaseSubgraph, T as createCanonicalDocumentIdResolver, b as loadSubgraphs, c as piecesFromListModule, d as buildGraphQlDriveDocument, f as buildGraphqlOperation, g as extractUpgradeManifests, h as debounce, i as PIECE_SOURCE_LIST, j as ForbiddenError, k as AuthEvaluationUnsupportedError, l as extractDocumentModels, m as isSubgraphClass, o as pieceListLocation, p as buildGraphqlOperations, s as piecesFromCdnList, t as extractSubgraphs, u as buildGraphQlDocument, v as loadDocumentModels, w as CanonicalDocumentIdResolutionError, x as manifestDeclaredSubgraphs, y as loadProcessors } from "./subgraph-extraction-DTFoN_bS.mjs";
+import { l as createDurableNodeFs, n as openCurrentPgliteForVerify, r as preparePgliteDataDir, u as resolvePgliteFsync } from "./pglite-node-Ow9i5Rb4.mjs";
 import { findPackageJSON, isBuiltin } from "node:module";
 import { AnalyticsQueryEngine } from "@powerhousedao/analytics-engine-core";
 import { AnalyticsModel, AnalyticsResolvers, typedefs } from "@powerhousedao/analytics-engine-graphql";
@@ -14,7 +15,7 @@ import path, { isAbsolute, join } from "node:path";
 import { match } from "path-to-regexp";
 import posix from "node:path/posix";
 import { Readable } from "node:stream";
-import fs, { existsSync, readFileSync, watchFile } from "node:fs";
+import nodeFs, { existsSync, readFileSync, watchFile } from "node:fs";
 import { pipeline } from "node:stream/promises";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { pathToFileURL } from "node:url";
@@ -46,7 +47,7 @@ import { createRelationalDb } from "@powerhousedao/shared/processors";
 import { Kysely, Migrator, sql } from "kysely";
 import { fetchDelegationCredential, resolveSwitchboardEndpoint, verifyAuthBearerToken } from "@renown/sdk";
 import { PGlite } from "@electric-sql/pglite";
-import { AtomicNodeFs } from "@powerhousedao/pglite-fs";
+import { NodeFS } from "@electric-sql/pglite/nodefs";
 import knex from "knex";
 import ClientPgLite from "knex-pglite";
 import { KyselyKnexDialect, PGColdDialect } from "kysely-knex";
@@ -373,11 +374,11 @@ async function createGatewayAdapter(type, logger) {
 async function createHttpAdapter(type) {
 	switch (type) {
 		case "express": {
-			const { createExpressHttpAdapter } = await import("./adapter-http-express-CWqziB1p.mjs");
+			const { createExpressHttpAdapter } = await import("./adapter-http-express-P0t-mdMV.mjs");
 			return createExpressHttpAdapter();
 		}
 		case "fastify": {
-			const { createFastifyHttpAdapter } = await import("./adapter-http-fastify-CYZQ6FFv.mjs");
+			const { createFastifyHttpAdapter } = await import("./adapter-http-fastify-D0OP5q9K.mjs");
 			return createFastifyHttpAdapter();
 		}
 	}
@@ -622,7 +623,7 @@ function writeError(res, status, message) {
 }
 //#endregion
 //#region src/http/route-service.ts
-const logger$2 = childLogger(["reactor-api", "http-routes"]);
+const logger$3 = childLogger(["reactor-api", "http-routes"]);
 /** The segment package routes live under, inside the host's base path. */
 const PACKAGE_ROUTE_SEGMENT = "api";
 /** The namespace core's own subgraphs and services register under. */
@@ -717,7 +718,7 @@ var HttpRouteService = class {
 			return this.scopeFor(packageKey);
 		} catch (error) {
 			if (!(error instanceof InvalidNamespaceError)) throw error;
-			logger$2.warn("Package \"@package\" cannot host HTTP routes: @reason", packageKey, error.message);
+			logger$3.warn("Package \"@package\" cannot host HTTP routes: @reason", packageKey, error.message);
 			return new UnroutableScope(packageKey, error.message);
 		}
 	}
@@ -824,7 +825,7 @@ var HttpScope = class {
 			path: routePath,
 			handles
 		});
-		logger$2.debug("Registered @route for @package", key, this.owner);
+		logger$3.debug("Registered @route for @package", key, this.owner);
 		return {
 			url: `${this.#publicUrl}${routePath}`,
 			dispose: () => {
@@ -847,7 +848,7 @@ var HttpScope = class {
 				transport: resolveTransport(req, this.#trustProxy)
 			});
 		} catch (error) {
-			logger$2.error("Route handler failed for @package", this.owner, error);
+			logger$3.error("Route handler failed for @package", this.owner, error);
 			writeError(res, 500, "Internal server error");
 		}
 	}
@@ -1127,7 +1128,7 @@ function parseWebhookBody(raw, contentType) {
 }
 //#endregion
 //#region src/http/webhook-service.ts
-const logger$1 = childLogger(["reactor-api", "webhooks"]);
+const logger$2 = childLogger(["reactor-api", "webhooks"]);
 /** The flat, token-addressed path family. */
 const WEBHOOK_SEGMENT = "webhooks";
 const DEFAULT_MAX_BODY_BYTES = 1048576;
@@ -1272,7 +1273,7 @@ var WebhookService = class {
 					raw
 				});
 				if (!result.ok) {
-					logger$1.warn("Rejected webhook delivery for @package/@endpoint: @reason", row.namespace, row.endpoint, result.reason);
+					logger$2.warn("Rejected webhook delivery for @package/@endpoint: @reason", row.namespace, row.endpoint, result.reason);
 					writeError(res, 401, "Signature verification failed");
 					return;
 				}
@@ -1312,7 +1313,7 @@ var WebhookService = class {
 				res.end(reply.body);
 			} else res.end();
 		} catch (error) {
-			logger$1.error("Webhook delivery failed for @method", req.method, error);
+			logger$2.error("Webhook delivery failed for @method", req.method, error);
 			writeError(res, 500, "Internal server error");
 		}
 	}
@@ -1491,7 +1492,7 @@ var MemoryWebhookStore = class {
 };
 //#endregion
 //#region src/utils/create-schema.ts
-const logger = childLogger(["reactor-api", "create-schema"]);
+const logger$1 = childLogger(["reactor-api", "create-schema"]);
 /**
 * Revision type - matches the definition in reactor/schema.graphql.
 * Used by PHDocument and document mutation results.
@@ -1545,7 +1546,7 @@ const dedupeTypeDefinitions = (doc) => {
 		const name = def.name?.value;
 		if (!name) return true;
 		if (seen.has(name)) {
-			logger.debug(`Dropping duplicate type definition: ${name}`);
+			logger$1.debug(`Dropping duplicate type definition: ${name}`);
 			return false;
 		}
 		seen.add(name);
@@ -1679,7 +1680,7 @@ const getDocumentModelTypeDefs = (documentModels, typeDefs$1) => {
 	documentModels.forEach(({ documentModel }) => {
 		const dmSchemaName = getDocumentModelSchemaName(documentModel.global);
 		if (addedDocumentModels.has(dmSchemaName)) {
-			logger.debug(`Skipping document model with duplicate name: ${dmSchemaName}`);
+			logger$1.debug(`Skipping document model with duplicate name: ${dmSchemaName}`);
 			return;
 		}
 		addedDocumentModels.add(dmSchemaName);
@@ -1794,7 +1795,7 @@ function extractTypeNames(schema) {
 	try {
 		return definedTypeNames(parseSdl(schema), ALL_PREFIX_KINDS);
 	} catch (error) {
-		logger.debug(`Skipping unparseable schema: ${String(error)}`);
+		logger$1.debug(`Skipping unparseable schema: ${String(error)}`);
 		return [];
 	}
 }
@@ -6826,10 +6827,10 @@ const ADMIN_USERS = getAdminUsers();
 //#endregion
 //#region src/graphql/system/version.ts
 function getVersion() {
-	return "6.2.3-dev.43";
+	return "6.2.3-dev.45";
 }
 function getGitHash() {
-	return "0b88089cbe91ce46358825aaac9178e217429276";
+	return "3c5c126a624df85976c11f2773d85226b4e2432b";
 }
 function getGitUrl() {
 	return buildTreeUrl(getGitHash());
@@ -7294,21 +7295,20 @@ async function removeLink(link) {
 function piecesBaseUrl(registryUrl, packageName, version) {
 	return `${registryUrl.endsWith("/") ? registryUrl : `${registryUrl}/`}-/cdn/${packageName}@${version}/node/pieces/`;
 }
-function documentModelsOf(module) {
-	return Object.values(module).filter((m) => m !== null && typeof m === "object" && "documentModel" in m && m.documentModel !== null);
-}
 /**
 * Extract subgraph classes from the imported subgraphs/index.mjs module shape.
 *
 * The published bundle uses `export * as Foo from "./file"`, which Node turns
 * into `{ Foo: <namespace>, … }`. The inner namespace's keys come from the
 * source file's named exports — typically `Subgraph` / `default` / the class
-* name itself — so the shape varies. Flatten one level and keep callables.
+* name itself — so the shape varies.
 *
-* Exported for direct unit testing against synthetic module shapes.
+* Delegates to the unified acceptance rule every package loader shares
+* (`extractSubgraphs`), kept as an export because it is part of the package's
+* public API and is unit-tested directly against synthetic module shapes.
 */
 function extractSubgraphsFromModule(module) {
-	return Object.values(module).flatMap((namespace) => Object.values(namespace)).filter((s) => typeof s === "function");
+	return extractSubgraphs(module);
 }
 /**
 * Loads document models, subgraphs, and processors from an HTTP registry.
@@ -7429,7 +7429,7 @@ var HttpPackageLoader = class {
 	async loadDocumentModels(packageSpec) {
 		const { name: packageName } = this.parsePackageSpec(packageSpec);
 		const { module } = await this.importDocumentModels(packageSpec);
-		const models = documentModelsOf(module);
+		const models = extractDocumentModels(module);
 		this.logger.verbose(`Loaded ${models.length} document models from ${packageName}`);
 		return models;
 	}
@@ -7536,7 +7536,7 @@ var HttpDocumentModelLoader = class {
 		let models = this.packageModulesCache.get(packageName);
 		if (!models) {
 			const { module, filePath } = await this.loader.importDocumentModels(packageName);
-			models = documentModelsOf(module);
+			models = extractDocumentModels(module);
 			this.packageModulesCache.set(packageName, models);
 			if (filePath) this.packageFileCache.set(packageName, filePath);
 		}
@@ -7592,7 +7592,7 @@ var ImportPackageLoader = class {
 		this.logger.verbose(`Loading document models from package: ${identifier}`);
 		const pkgModule = await loadDocumentModels(identifier);
 		if (pkgModule) {
-			const models = Object.values(pkgModule).filter((m) => m !== null && typeof m === "object" && "documentModel" in m);
+			const models = extractDocumentModels(pkgModule);
 			this.logger.verbose(`  ➜  Loaded ${models.length} Document Models from: ${identifier}`);
 			return models;
 		} else {
@@ -7614,11 +7614,9 @@ var ImportPackageLoader = class {
 			this.logger.verbose(`  ➜  No Subgraphs found: ${identifier}`);
 			return [];
 		}
-		const subgraphs = Object.values(pkgModule).map((subgraph) => {
-			return Object.values(subgraph);
-		});
-		this.logger.verbose(`  ➜  Loaded Subgraphs from: ${identifier}`);
-		return subgraphs.flat();
+		const subgraphs = extractSubgraphs(pkgModule);
+		this.logger.verbose(`  ➜  Loaded ${subgraphs.length} Subgraphs from: ${identifier}`);
+		return subgraphs;
 	}
 	async loadProcessors(identifier) {
 		this.logger.verbose(`Loading processors from package: ${identifier}`);
@@ -7806,6 +7804,10 @@ var PackageManager = class {
 				this.logger.debug("[@loader] Failed to load subgraphs from package @package: @error", loader.name, pkg, error);
 			}
 			this.maybeWarnAllLoadersFailed("subgraphs", pkg, succeeded, failures);
+			if (allSubgraphs.length === 0) {
+				const declared = manifestDeclaredSubgraphs(pkg);
+				if (declared.length > 0) this.logger.warn("Package @pkg declares subgraphs in powerhouse.manifest.json (@declared) but none was loaded; check the exports of subgraphs/index.ts", pkg, declared.join(", "));
+			}
 			subgraphsMap.set(pkg, allSubgraphs);
 		}
 		return subgraphsMap;
@@ -9163,45 +9165,30 @@ function resolveRenownSource(value, logger) {
 }
 //#endregion
 //#region src/utils/db.ts
+const logger = childLogger(["reactor-api", "db"]);
 const PGLITE_UTC_PARSERS = { 1114: (value) => /* @__PURE__ */ new Date(`${value.replace(" ", "T")}Z`) };
-function isPG(connectionString) {
-	if (connectionString.startsWith("postgresql://") || connectionString.startsWith("postgres://")) return true;
-	return false;
+function isPostgresConnectionString(connectionString) {
+	return connectionString.startsWith("postgresql://") || connectionString.startsWith("postgres://");
 }
-/**
-* Cache of DB clients keyed by connection string. Reactor-api's read-model
-* layer wires analytics, attachments, and document-permissions as separate
-* consumers but they all target the same logical database (one postgres
-* instance, many schemas). Without caching:
-*   - PGlite: two `new PGlite(samePath)` calls mean two embedded postgres
-*     processes contending for the same data dir, racing shutdown syncs
-*     and silently losing writes — a correctness bug.
-*   - Postgres: each consumer opens an independent pool against the same
-*     backend — wasteful but correct.
-* Caching by connection string returns the same knex/PGlite pair to every
-* consumer so writes coexist in one MemoryFS and one atomic snapshot, and
-* postgres callers get connection-pool dedup for free.
-*
-* Entries are evicted from inside the wrapped `knex.destroy()` below, so a
-* teardown + re-init in the same process (tests, hot-reloads) constructs
-* a fresh client instead of returning a closed pool.
-*/
 const IN_MEMORY_CACHE_KEY = Symbol("getDbClient:in-memory");
 const dbClientCache = /* @__PURE__ */ new Map();
 function getDbClient(connectionString = void 0, pgliteFactory) {
 	const cacheKey = connectionString ?? IN_MEMORY_CACHE_KEY;
 	const cached = dbClientCache.get(cacheKey);
 	if (cached) return cached;
-	const isPg = connectionString && isPG(connectionString);
+	const isPg = connectionString && isPostgresConnectionString(connectionString);
 	const client = isPg ? "pg" : ClientPgLite;
 	const pgliteInstance = isPg ? void 0 : pgliteFactory ? pgliteFactory(connectionString) : connectionString ? new PGlite({
-		fs: new AtomicNodeFs(connectionString),
+		fs: createDurableNodeFs(NodeFS, connectionString, {
+			fsync: resolvePgliteFsync(process.env),
+			logger
+		}),
 		parsers: PGLITE_UTC_PARSERS
 	}) : new PGlite({ parsers: PGLITE_UTC_PARSERS });
 	const connection = isPg ? { connectionString } : { pglite: pgliteInstance };
 	if (connectionString && !isPg) {
 		const dirPath = path.resolve(connectionString, "..");
-		if (!fs.existsSync(dirPath)) fs.mkdirSync(dirPath, { recursive: true });
+		if (!nodeFs.existsSync(dirPath)) nodeFs.mkdirSync(dirPath, { recursive: true });
 	}
 	const knexInstance = knex({
 		client,
@@ -9375,7 +9362,11 @@ function resolveAttachmentStoragePath(options) {
 * (when on-disk PGlite is in use); callers are expected to run them as part
 * of API teardown so PGlite WAL is flushed and the data-dir lock is released.
 */
-async function initializeDatabaseAndAnalytics(dbPath, pgliteFactory) {
+async function initializeDatabaseAndAnalytics(dbPath, pgliteFactory, logger) {
+	if (!pgliteFactory && dbPath && !isPostgresConnectionString(dbPath)) await preparePgliteDataDir(dbPath, {
+		openForVerify: openCurrentPgliteForVerify,
+		logger
+	});
 	const { db, knex, pglite } = getDbClient(dbPath, pgliteFactory);
 	const relationalDb = createRelationalDb(db);
 	const analyticsStore = new PostgresAnalyticsStore({ knex });
@@ -9383,7 +9374,7 @@ async function initializeDatabaseAndAnalytics(dbPath, pgliteFactory) {
 	return {
 		relationalDb,
 		analyticsStore,
-		closers: makeDbClosers(knex, pglite)
+		closers: makeDbClosers(knex, pglite, logger)
 	};
 }
 /**
@@ -9392,10 +9383,15 @@ async function initializeDatabaseAndAnalytics(dbPath, pgliteFactory) {
 * (which is what the application talks to), then PGlite flushes WAL and
 * unlocks the data dir.
 */
-function makeDbClosers(knexInstance, pglite) {
+function makeDbClosers(knexInstance, pglite, logger) {
 	const closers = [() => knexInstance.destroy()];
 	if (pglite) closers.push(async () => {
-		if (!pglite.closed) await pglite.close();
+		if (pglite.closed) return;
+		try {
+			await pglite.close();
+		} catch (err) {
+			logger.warn(`PGlite close failed: ${String(err)}`);
+		}
 	});
 	return closers;
 }
@@ -9660,12 +9656,12 @@ async function _setupCommonInfrastructure(options) {
 		} else logger.warn("Anonymous callers are admitted on every transport, including WebSocket subscriptions: REQUIRE_AUTHENTICATED_CALLER is not set. The authorization policy gates the reactor's own documents, but a package-provided subgraph authorizes nothing on its own. Set REQUIRE_AUTHENTICATED_CALLER=true to refuse anonymous callers before any subgraph sees them.");
 	}
 	const dbClosers = [];
-	const { relationalDb, analyticsStore, closers: analyticsClosers } = await initializeDatabaseAndAnalytics(options.dbPath, options.pgliteFactory);
+	const { relationalDb, analyticsStore, closers: analyticsClosers } = await initializeDatabaseAndAnalytics(options.dbPath, options.pgliteFactory, logger);
 	dbClosers.push(...analyticsClosers);
 	let documentPermissionService = options.documentPermissionService;
 	if (!documentPermissionService && DOCUMENT_PERMISSIONS_ENABLED === "true") {
 		const { db, knex, pglite } = getDbClient(options.dbPath, options.pgliteFactory);
-		dbClosers.push(...makeDbClosers(knex, pglite));
+		dbClosers.push(...makeDbClosers(knex, pglite, logger));
 		await runMigrations(db);
 		logger.info("Document permission migrations completed");
 		documentPermissionService = new DocumentPermissionService(db, { defaultProtection });
@@ -9680,7 +9676,7 @@ async function _setupCommonInfrastructure(options) {
 	const attachmentStoragePath = resolveAttachmentStoragePath(options);
 	await mkdir(attachmentStoragePath, { recursive: true });
 	const { db: attachmentDb, knex: attachmentKnex, pglite: attachmentPglite } = getDbClient(options.dbPath, options.pgliteFactory);
-	dbClosers.push(...makeDbClosers(attachmentKnex, attachmentPglite));
+	dbClosers.push(...makeDbClosers(attachmentKnex, attachmentPglite, logger));
 	const ATTACHMENT_SWEEP_INTERVAL_MS = 36e5;
 	const attachmentBackend = await createStartupAttachmentBackend({ db: attachmentDb });
 	const attachmentBuilder = new AttachmentBuilder(attachmentDb, attachmentStoragePath).withReservationSweepMs(ATTACHMENT_SWEEP_INTERVAL_MS);
@@ -10090,7 +10086,7 @@ var PackageManagementService = class {
 	}
 };
 //#endregion
-export { ADMIN_USERS, ActionCandidateInputSchema, ActionContextInputSchema, ActionInputSchema, AddRelationshipDocument, AnalyticsSubgraph, AttachmentAccessFailed, AttachmentAccessService, AttachmentAccessUnavailable, AttachmentClientProvider, AuthDecision, AuthDecisionSchema, AuthEvaluationUnsupportedError, AuthService, AuthSubgraph, AuthenticationRequiredError, AuthorizationPolicy, AuthorizedAttachmentService, AuthorizedDocumentHandle, BaseSubgraph, CORE_PACKAGE_NAME, CanonicalDocumentIdResolutionError, ChannelMetaInputSchema, CreateDocumentDocument, CreateEmptyDocumentDocument, DeleteDocumentDocument, DeleteDocumentsDocument, DocumentChangeType, DocumentChangeTypeSchema, DocumentChangesDocument, DocumentOperationsFilterInputSchema, DocumentPermissionService, DocumentRelationshipFieldsFragmentDoc, EvaluateActionsDocument, FindDocumentsDocument, ForbiddenError, GetDocumentDocument, GetDocumentIncomingRelationshipEdgesDocument, GetDocumentIncomingRelationshipsDocument, GetDocumentModelsDocument, GetDocumentOperationsDocument, GetDocumentOutgoingRelationshipEdgesDocument, GetDocumentOutgoingRelationshipsDocument, GetDocumentWithOperationsDocument, GetJobStatusDocument, GraphQLManager, HttpDocumentModelLoader, HttpPackageLoader, HttpRouteService, ImportPackageLoader, InMemoryPackageStorage, InvalidNamespaceError, JobChangesDocument, MalformedStoredOperationError, MemoryWebhookStore, MoveRelationshipDocument, MutateDocumentAsyncDocument, MutateDocumentDocument, OperationContextInputSchema, OperationInputSchema, OperationWithContextInputSchema, OperationsFilterInputSchema, PACKAGE_ROUTE_SEGMENT, PGLITE_UTC_PARSERS, PackageManagementService, PackageManager, PackagesSubgraph, PagingInputSchema, PhDocumentFieldsFragmentDoc, PollSyncEnvelopesDocument, PrivacyPermissionAdapter, PropagationMode, PropagationModeSchema, PushSyncEnvelopesDocument, ReactorSignerAppInputSchema, ReactorSignerInputSchema, ReactorSignerUserInputSchema, ReactorSubgraph, RefusalNotRecordedError, RelationalWebhookStore, RemoteCursorInputSchema, RemoteFilterInputSchema, RemoveRelationshipDocument, RenameDocumentDocument, SearchFilterInputSchema, SetPreferredEditorDocument, SyncEnvelopeInputSchema, SyncEnvelopeType, SyncEnvelopeTypeSchema, SyncRefusalInputSchema, SystemSubgraph, TouchChannelDocument, TouchChannelInputSchema, UpdateRelationshipDocument, ViewFilterInputSchema, WEBHOOK_SEGMENT, WS_AUTH_CLOSE_REASONS, WS_CLOSE_REASON_AUTHENTICATION_REQUIRED, WS_CLOSE_REASON_BEARER_REJECTED, WebhookService, assertAttachmentPolicyReadsAllowed, assertAuthRequiredForDocumentPermissions, assertCredentialVerifierForSource, assertHostMountPath, assertRequireAuthenticatedCallerAllowed, assertSkipCredentialVerificationAllowed, buildGraphQlDocument, buildGraphQlDriveDocument, buildGraphqlOperation, buildGraphqlOperations, buildSubgraphSchemaModule, callerSubject, createAuthFetchMiddleware, createCanonicalDocumentIdResolver, createGatewayAdapter, createHttpAdapter, createMergedSchema, createReactorGraphQLClient, createRenownCredentialVerifier, createSchema, createWsAuthHandlers, decodeExplorerUrlState, definedNonNullAnySchema, driveIdFromUrl, extractSubgraphsFromModule, generateDocumentModelSchema, getAuthContext, getDbClient, getDocumentModelSchemaName, getDocumentModelTypeDefs, getExplorerPrefix, getGitHash, getGitUrl, getSdk, getUniqueDocumentModels, getUniqueUpgradeManifests, getVersion, initAnalyticsStoreSql, initializeAndStartAPI, isDefinedNonNullAny, isExpectedLoaderMiss, isSubgraphClass, namespacePath, namespaceSegments, newWebhookToken, parseDriveUrl, parseWebhookBody, piecesBaseUrl, redactHeaders, renderGraphqlPlayground, resolvePackageName, resolveRenownConfig, verifyWebhook };
+export { ADMIN_USERS, ActionCandidateInputSchema, ActionContextInputSchema, ActionInputSchema, AddRelationshipDocument, AnalyticsSubgraph, AttachmentAccessFailed, AttachmentAccessService, AttachmentAccessUnavailable, AttachmentClientProvider, AuthDecision, AuthDecisionSchema, AuthEvaluationUnsupportedError, AuthService, AuthSubgraph, AuthenticationRequiredError, AuthorizationPolicy, AuthorizedAttachmentService, AuthorizedDocumentHandle, BaseSubgraph, CORE_PACKAGE_NAME, CanonicalDocumentIdResolutionError, ChannelMetaInputSchema, CreateDocumentDocument, CreateEmptyDocumentDocument, DeleteDocumentDocument, DeleteDocumentsDocument, DocumentChangeType, DocumentChangeTypeSchema, DocumentChangesDocument, DocumentOperationsFilterInputSchema, DocumentPermissionService, DocumentRelationshipFieldsFragmentDoc, EvaluateActionsDocument, FindDocumentsDocument, ForbiddenError, GetDocumentDocument, GetDocumentIncomingRelationshipEdgesDocument, GetDocumentIncomingRelationshipsDocument, GetDocumentModelsDocument, GetDocumentOperationsDocument, GetDocumentOutgoingRelationshipEdgesDocument, GetDocumentOutgoingRelationshipsDocument, GetDocumentWithOperationsDocument, GetJobStatusDocument, GraphQLManager, HttpDocumentModelLoader, HttpPackageLoader, HttpRouteService, ImportPackageLoader, InMemoryPackageStorage, InvalidNamespaceError, JobChangesDocument, MalformedStoredOperationError, MemoryWebhookStore, MoveRelationshipDocument, MutateDocumentAsyncDocument, MutateDocumentDocument, OperationContextInputSchema, OperationInputSchema, OperationWithContextInputSchema, OperationsFilterInputSchema, PACKAGE_ROUTE_SEGMENT, PGLITE_UTC_PARSERS, PackageManagementService, PackageManager, PackagesSubgraph, PagingInputSchema, PhDocumentFieldsFragmentDoc, PollSyncEnvelopesDocument, PrivacyPermissionAdapter, PropagationMode, PropagationModeSchema, PushSyncEnvelopesDocument, ReactorSignerAppInputSchema, ReactorSignerInputSchema, ReactorSignerUserInputSchema, ReactorSubgraph, RefusalNotRecordedError, RelationalWebhookStore, RemoteCursorInputSchema, RemoteFilterInputSchema, RemoveRelationshipDocument, RenameDocumentDocument, SearchFilterInputSchema, SetPreferredEditorDocument, SyncEnvelopeInputSchema, SyncEnvelopeType, SyncEnvelopeTypeSchema, SyncRefusalInputSchema, SystemSubgraph, TouchChannelDocument, TouchChannelInputSchema, UpdateRelationshipDocument, ViewFilterInputSchema, WEBHOOK_SEGMENT, WS_AUTH_CLOSE_REASONS, WS_CLOSE_REASON_AUTHENTICATION_REQUIRED, WS_CLOSE_REASON_BEARER_REJECTED, WebhookService, assertAttachmentPolicyReadsAllowed, assertAuthRequiredForDocumentPermissions, assertCredentialVerifierForSource, assertHostMountPath, assertRequireAuthenticatedCallerAllowed, assertSkipCredentialVerificationAllowed, buildGraphQlDocument, buildGraphQlDriveDocument, buildGraphqlOperation, buildGraphqlOperations, buildSubgraphSchemaModule, callerSubject, createAuthFetchMiddleware, createCanonicalDocumentIdResolver, createGatewayAdapter, createHttpAdapter, createMergedSchema, createReactorGraphQLClient, createRenownCredentialVerifier, createSchema, createWsAuthHandlers, decodeExplorerUrlState, definedNonNullAnySchema, driveIdFromUrl, extractSubgraphs, extractSubgraphsFromModule, generateDocumentModelSchema, getAuthContext, getDbClient, getDocumentModelSchemaName, getDocumentModelTypeDefs, getExplorerPrefix, getGitHash, getGitUrl, getSdk, getUniqueDocumentModels, getUniqueUpgradeManifests, getVersion, initAnalyticsStoreSql, initializeAndStartAPI, isDefinedNonNullAny, isExpectedLoaderMiss, isPostgresConnectionString, isSubgraphClass, namespacePath, namespaceSegments, newWebhookToken, parseDriveUrl, parseWebhookBody, piecesBaseUrl, redactHeaders, renderGraphqlPlayground, resolvePackageName, resolveRenownConfig, verifyWebhook };
 
 //# sourceMappingURL=index.mjs.map
-//# debugId=65e47e18-15f4-5a67-b94b-f6e795c1eb9b
+//# debugId=e3951045-d29d-5cf1-b068-0ee1e9b26631