@powerhousedao/reactor 6.2.3-dev.23 → 6.2.3-dev.25

package/dist/index.js

@@ -1,10 +1,7 @@
-import { $ as parsePagingOptions, A as targetDocumentId, B as DuplicateOperationError, C as InvalidModuleError, D as createEmptyConsistencyToken, E as createConsistencyToken, F as buildDecisionModel, G as AuthorizationDeniedError, H as RevisionMismatchError, I as APPEND_CONDITION_FAILED_PREFIX, J as ExcessiveReshuffleError, K as DocumentDeletedError, L as AppendConditionFailedError, M as selectDecisionModel, N as documentDecisionModel, O as submittedActionIds, P as authDecisionModel, Q as matchesScope, R as DocumentAlreadyExistsError, S as DuplicateModuleError, T as GATED_DOCUMENT_ACTIONS, U as AuthEnforcementDisabledError, V as OptimisticLockError, W as AuthTimestampNotMonotonicError, X as RelationshipNotFoundError, Y as InvalidOperationTimestampError, Z as UpgradePreconditionFailedError, _ as DocumentMetaCache, a as createForwardingPoolInstrumentation, b as JobExecutorEventTypes, c as KyselyKeyframeStore, d as DriveCollectionId, et as throwIfAborted, f as KyselyExecutionScope, g as KyselyOperationIndex, h as KyselyWriteCache, i as runMigrations, j as decideAtHead, k as summarizeSubmittedActions, l as DocumentModelRegistry, m as EventBus, n as REACTOR_SCHEMA, o as instrumentPgPool, p as resolveFeatureFlags, q as DocumentNotFoundError, r as getMigrationStatus, s as KyselyOperationStore, t as DEFAULT_DRIVE_CONTAINER_TYPES, u as SimpleJobExecutor, v as CollectionMembershipCache, w as ModuleNotFoundError, x as DuplicateManifestError, y as DEFAULT_DEFERRED_JOB_TTL_MS, z as DocumentExistence } from "./drive-container-types-CS5IxDiA.js";
-import { n as ReactorEventTypes, t as EventBusAggregateError } from "./types-DMKLa0Ok.js";
-import { i as WorkerInitFailedError, r as WorkerExitedError, t as WorkerAbortTimeoutError } from "./errors-D3S6Eysd.js";
-import { a as KyselyDocumentView, c as ReadModelCoordinator, d as DEFAULT_READ_MODEL_YIELD_DEADLINE_MS, f as defaultReadModelIndexingConfig, i as DeletedDocumentRead, l as BaseReadModel, n as ConsistencyTracker, o as DOCUMENT_INDEXER_READ_MODEL, p as unchunkedReadModelIndexingConfig, r as makeConsistencyKey, s as DOCUMENT_VIEW_READ_MODEL, t as KyselyDocumentIndexer, u as DEFAULT_COMMIT_CHUNK_SIZE } from "./document-indexer-CQzTEE1o.js";
-import { n as errorToInfo, r as sanitizeArg, t as createForwardingLogger } from "./forwarding-logger-BBkMSxuJ.js";
-import { t as workerEntryPath } from "./worker-g03lNM42.js";
-import { DowngradeNotSupportedError, MAX_AUTH_GRANTS, UnsupportedDocumentModelVersionError, actions, actions as documentActions, createPresignedHeader, decide, deserializeSignature, garbageCollect, generateId, groupDocumentType, groupMembershipActionTypes, hashDocumentStateForScope, normalizeDocumentModelVersion, sortOperations, toTransportAction } from "@powerhousedao/shared/document-model";
+import { $ as DocumentNotFoundError, A as ModuleNotFoundError, B as authDecisionModel, C as DocumentMetaCache, D as DuplicateManifestError, E as JobExecutorEventTypes, F as summarizeSubmittedActions, G as DocumentExistence, H as APPEND_CONDITION_FAILED_PREFIX, I as targetDocumentId, J as RevisionMismatchError, K as DuplicateOperationError, L as decideAtHead, M as createConsistencyToken, N as createEmptyConsistencyToken, O as DuplicateModuleError, P as submittedActionIds, Q as DocumentDeletedError, R as selectDecisionModel, S as KyselyOperationIndex, T as DEFAULT_DEFERRED_JOB_TTL_MS, U as AppendConditionFailedError, V as buildDecisionModel, W as DocumentAlreadyExistsError, X as AuthTimestampNotMonotonicError, Y as AuthEnforcementDisabledError, Z as AuthorizationDeniedError, _ as DriveCollectionId, a as DEFAULT_DRIVE_CONTAINER_TYPES, at as EventBusAggregateError, b as EventBus, c as runMigrations, ct as parsePagingOptions, d as KyselyOperationStore, dt as __exportAll, et as ExcessiveReshuffleError, f as KyselyKeyframeStore, g as PassthroughSigner, h as verifyActionSignature, it as UpgradePreconditionFailedError, j as GATED_DOCUMENT_ACTIONS, k as InvalidModuleError, l as createForwardingPoolInstrumentation, lt as throwIfAborted, m as SimpleJobExecutor, n as errorToInfo, nt as InvalidSignatureError, o as REACTOR_SCHEMA, ot as ReactorEventTypes, p as DocumentModelRegistry, q as OptimisticLockError, r as sanitizeArg, rt as RelationshipNotFoundError, s as getMigrationStatus, st as matchesScope, t as createForwardingLogger, tt as InvalidOperationTimestampError, u as instrumentPgPool, v as KyselyExecutionScope, w as CollectionMembershipCache, x as KyselyWriteCache, y as resolveFeatureFlags, z as documentDecisionModel } from "./forwarding-logger-CSsCJ38f.js";
+import { i as WorkerInitFailedError, r as WorkerExitedError, t as WorkerAbortTimeoutError } from "./errors-BM_ULVWd.js";
+import { a as KyselyDocumentView, c as ReadModelCoordinator, d as DEFAULT_READ_MODEL_YIELD_DEADLINE_MS, f as defaultReadModelIndexingConfig, i as DeletedDocumentRead, l as BaseReadModel, n as ConsistencyTracker, o as DOCUMENT_INDEXER_READ_MODEL, p as unchunkedReadModelIndexingConfig, r as makeConsistencyKey, s as DOCUMENT_VIEW_READ_MODEL, t as KyselyDocumentIndexer, u as DEFAULT_COMMIT_CHUNK_SIZE } from "./document-indexer-zbdzqZ3K.js";
+import { DEFAULT_SIGNATURE_POLICY, DowngradeNotSupportedError, MAX_AUTH_GRANTS, UnsupportedDocumentModelVersionError, actionSignerIdentity, actionSigningTarget, actions, actions as documentActions, createCopyHeader, decide, deserializeSignature, garbageCollect, generateId, groupDocumentType, groupMembershipActionTypes, hashDocumentStateForScope, normalizeDocumentModelVersion, requestedSignaturePolicy, sortOperations, toTransportAction, withSignaturePolicy } from "@powerhousedao/shared/document-model";
 import { addFile, addFolder, copyNode, deleteNode, driveCreateDocument, generateNodesCopy, getDescendants, handleTargetNameCollisions, isFileNode, isFolderNode, moveNode, updateNode } from "@powerhousedao/shared/document-drive";
 import { v4 } from "uuid";
 import { ConsoleLogger, childLogger } from "document-model";
@@ -237,37 +234,31 @@ function getSharedActionScope(actions) {
 	return baseScope;
 }
 /**
-* Signs an action with the provided signer.
-* If the action already has valid signatures, it is returned unchanged.
+* Signs an action for `target`, the log it is written to. An action already
+* signed under a key is returned unchanged; one whose signer or last tuple has
+* no key is unsigned, and is signed like any other.
 */
-const signAction = async (action, signer, signal) => {
-	const existingSignatures = action.context?.signer?.signatures;
-	if (existingSignatures && existingSignatures.length > 0) return action;
-	const signature = await signer.signAction(action, signal);
+const signAction = async (action, signer, target, signal) => {
+	const existing = action.context?.signer;
+	if (existing?.app?.key && existing.signatures.at(-1)?.[1]) return action;
+	const signature = await signer.signAction(action, target, signal);
 	return {
 		...action,
 		context: {
 			...action.context,
 			signer: {
-				user: {
-					address: signer.user?.address || "",
-					networkId: signer.user?.networkId || "",
-					chainId: signer.user?.chainId || 0
-				},
-				app: {
-					name: signer.app?.name || "",
-					key: signer.app?.key || ""
-				},
+				...actionSignerIdentity(signer),
 				signatures: [signature]
 			}
 		}
 	};
 };
 /**
-* Signs multiple actions with the provided signer
+* Signs the actions of a job on `job.documentId`, each for the log it is
+* written to: a relationship action lands in its source document.
 */
-const signActions = async (actions, signer, signal) => {
-	return Promise.all(actions.map((action) => signAction(action, signer, signal)));
+const signActions = async (actions, signer, job, signal) => {
+	return Promise.all(actions.map((action) => signAction(action, signer, actionSigningTarget(action, job.documentId, job.branch), signal)));
 };
 function buildSingleJobMeta(jobId, callerMeta) {
 	return {
@@ -321,6 +312,10 @@ let JobStatus = /* @__PURE__ */ function(JobStatus) {
 * during construction, so the partial-`this` hazard does not apply.
 */
 var DriveClient = class {
+	client;
+	logger;
+	reactor;
+	signer;
 	constructor(client, logger, reactor, signer) {
 		this.client = client;
 		this.logger = logger;
@@ -329,11 +324,11 @@ var DriveClient = class {
 	}
 	async create(input, signal) {
 		this.logger.verbose("drives.create(@input)", input);
-		const driveDoc = driveCreateDocument({ global: {
+		const driveDoc = withSignaturePolicy(driveCreateDocument({ global: {
 			name: input.global.name || "",
 			icon: input.global.icon ?? null,
 			nodes: []
-		} });
+		} }), requestedSignaturePolicy(input, await this.client.getCreateSignaturePolicy()), { protocolVersions: input.protocolVersions });
 		if (input.preferredEditor) driveDoc.header.meta = {
 			...driveDoc.header.meta,
 			preferredEditor: input.preferredEditor
@@ -343,24 +338,25 @@ var DriveClient = class {
 	async addFile(driveIdentifier, document, parentFolder, signal) {
 		this.logger.verbose("drives.addFile(@driveIdentifier, @document, @parentFolder)", driveIdentifier, document.header.id, parentFolder);
 		const documentId = document.header.id;
+		const createInput = {
+			model: document.header.documentType,
+			version: 0,
+			documentId: document.header.id,
+			signing: {
+				signature: document.header.id,
+				publicKey: document.header.sig.publicKey,
+				nonce: document.header.sig.nonce,
+				createdAtUtcIso: document.header.createdAtUtcIso,
+				documentType: document.header.documentType
+			},
+			slug: document.header.slug,
+			name: document.header.name,
+			branch: document.header.branch,
+			meta: document.header.meta,
+			protocolVersions: document.header.protocolVersions ?? { "base-reducer": 2 }
+		};
 		const documentActions = await signActions([
-			createDocumentAction({
-				model: document.header.documentType,
-				version: 0,
-				documentId: document.header.id,
-				signing: {
-					signature: document.header.id,
-					publicKey: document.header.sig.publicKey,
-					nonce: document.header.sig.nonce,
-					createdAtUtcIso: document.header.createdAtUtcIso,
-					documentType: document.header.documentType
-				},
-				slug: document.header.slug,
-				name: document.header.name,
-				branch: document.header.branch,
-				meta: document.header.meta,
-				protocolVersions: document.header.protocolVersions ?? { "base-reducer": 2 }
-			}),
+			createDocumentAction(createInput),
 			upgradeDocumentAction({
 				documentId: document.header.id,
 				model: document.header.documentType,
@@ -369,13 +365,19 @@ var DriveClient = class {
 				initialState: document.state
 			}),
 			addRelationshipAction(driveIdentifier, documentId, "child")
-		], this.signer, signal);
+		], this.signer, {
+			documentId,
+			branch: "main"
+		}, signal);
 		const driveActions = await signActions([addFile({
 			id: documentId,
 			name: document.header.name || documentId,
 			documentType: document.header.documentType,
 			parentFolder
-		})], this.signer, signal);
+		})], this.signer, {
+			documentId: driveIdentifier,
+			branch: "main"
+		}, signal);
 		await this.runJobs([{
 			key: "document",
 			documentId,
@@ -465,18 +467,20 @@ var DriveClient = class {
 			});
 			resolvedNamesByTargetId.set(entry.targetId, resolved);
 		}
+		const policy = await this.client.getCreateSignaturePolicy();
 		for (const entry of copyPlan) {
 			const node = drive.state.global.nodes.find((n) => n.id === entry.srcId);
 			if (!node || !isFileNode(node)) continue;
 			const srcDoc = await this.client.get(entry.srcId, void 0, signal);
 			const duplicated = {
 				...srcDoc,
-				header: createPresignedHeader(entry.targetId, srcDoc.header.documentType),
+				header: createCopyHeader(srcDoc.header, entry.targetId, policy),
 				initialState: srcDoc.state,
 				operations: {}
 			};
 			const resolvedName = resolvedNamesByTargetId.get(entry.targetId);
 			if (resolvedName) duplicated.header.name = resolvedName;
+			entry.targetId = duplicated.header.id;
 			await this.addFile(driveIdentifier, duplicated, entry.targetParentFolder ?? void 0, signal);
 		}
 		return this.client.execute(driveIdentifier, "main", copyPlan.map((entry) => copyNode(entry)), signal);
@@ -512,7 +516,7 @@ var DriveClient = class {
 	async runJobs(jobs, signal) {
 		const batchResult = await this.reactor.executeBatch({ jobs }, signal);
 		const completedJobs = await Promise.all(Object.values(batchResult.jobs).map((job) => this.client.waitForJob(job, signal)));
-		for (const job of completedJobs) if (job.status === JobStatus.FAILED) throw this.toError(job);
+		for (const job of completedJobs) if (job.status === "FAILED") throw this.toError(job);
 		return completedJobs;
 	}
 	toError(job) {
@@ -529,8 +533,14 @@ var DriveClient = class {
 		}
 	}
 	async removeFileNode(driveId, fileId, signal) {
-		const relationshipActions = await signActions([removeRelationshipAction(driveId, fileId, "child")], this.signer, signal);
-		const driveActions = await signActions([deleteNode({ id: fileId })], this.signer, signal);
+		const relationshipActions = await signActions([removeRelationshipAction(driveId, fileId, "child")], this.signer, {
+			documentId: driveId,
+			branch: "main"
+		}, signal);
+		const driveActions = await signActions([deleteNode({ id: fileId })], this.signer, {
+			documentId: driveId,
+			branch: "main"
+		}, signal);
 		const batchResult = await this.reactor.executeBatch({ jobs: [{
 			key: "relationship",
 			documentId: driveId,
@@ -547,10 +557,10 @@ var DriveClient = class {
 			dependsOn: ["relationship"]
 		}] }, signal);
 		const completedJobs = await Promise.all(Object.values(batchResult.jobs).map((job) => this.client.waitForJob(job, signal)));
-		for (const job of completedJobs) if (job.status === JobStatus.FAILED) throw new Error(job.error?.message);
+		for (const job of completedJobs) if (job.status === "FAILED") throw new Error(job.error?.message);
 		const deleteJob = await this.reactor.deleteDocument(fileId, this.signer, signal);
 		const deleteCompleted = await this.client.waitForJob(deleteJob, signal);
-		if (deleteCompleted.status === JobStatus.FAILED) throw new Error(deleteCompleted.error?.message);
+		if (deleteCompleted.status === "FAILED") throw new Error(deleteCompleted.error?.message);
 	}
 };
 //#endregion
@@ -561,13 +571,15 @@ var DriveClient = class {
 * Only READ_READY and FAILED are truly terminal.
 */
 function isTerminalStatus(status) {
-	return status === JobStatus.READ_READY || status === JobStatus.FAILED;
+	return status === "READ_READY" || status === "FAILED";
 }
 /**
 * Event-driven implementation of IJobAwaiter.
 * Subscribes to operation events to detect job completion without polling.
 */
 var JobAwaiter = class {
+	eventBus;
+	getJobStatus;
 	pendingJobs = /* @__PURE__ */ new Map();
 	unsubscribers = [];
 	constructor(eventBus, getJobStatus) {
@@ -709,7 +721,7 @@ let DocumentChangeType = /* @__PURE__ */ function(DocumentChangeType) {
 * would diverge permanently. The document scope carries the metadata the same
 * argument covers. Grants gate domain-scope reads only.
 */
-const ALWAYS_READABLE_SCOPES = new Set(["auth", "document"]);
+const ALWAYS_READABLE_SCOPES = /* @__PURE__ */ new Set(["auth", "document"]);
 /** What a gate does with an uninitialized policy when told nothing. */
 const OPEN_BY_DEFAULT = { withholdUninitialized: false };
 /**
@@ -783,6 +795,9 @@ var BareReadGate = class {
 * list names is fetched.
 */
 var SeededStateReader = class {
+	documentView;
+	seed;
+	branch;
 	constructor(documentView, seed, branch) {
 		this.documentView = documentView;
 		this.seed = seed;
@@ -812,7 +827,7 @@ var SeededStateReader = class {
 		if (DocumentNotFoundError.isError(error)) return;
 		let exists;
 		try {
-			exists = await this.documentView.exists([documentId], DocumentExistence.LiveOnly, void 0, signal);
+			exists = await this.documentView.exists([documentId], "LiveOnly", void 0, signal);
 		} catch {
 			throw error;
 		}
@@ -833,6 +848,12 @@ var SeededStateReader = class {
 * from state no commit ever invalidates.
 */
 var ModelReadGate = class {
+	model;
+	documentView;
+	servesGroups;
+	operationIndex;
+	logger;
+	options;
 	constructor(model, documentView, servesGroups, operationIndex, logger, options = OPEN_BY_DEFAULT) {
 		this.model = model;
 		this.documentView = documentView;
@@ -972,7 +993,7 @@ function authSubjectFromSigner(signer) {
 function withAuthScope(view) {
 	if (view?.scopes && view.scopes.length > 0) return {
 		...view,
-		scopes: [...new Set([...view.scopes, "auth"])]
+		scopes: [.../* @__PURE__ */ new Set([...view.scopes, "auth"])]
 	};
 	return view;
 }
@@ -1049,8 +1070,9 @@ var ReactorClient = class {
 	documentView;
 	readGate;
 	actionEvaluation;
+	createSignaturePolicy;
 	drives;
-	constructor(logger, reactor, signer, subscriptionManager, jobAwaiter, documentIndexer, documentView, readGate = new BareReadGate(), actionEvaluation) {
+	constructor(logger, reactor, signer, subscriptionManager, jobAwaiter, documentIndexer, documentView, readGate = new BareReadGate(), actionEvaluation, createSignaturePolicy = DEFAULT_SIGNATURE_POLICY) {
 		this.logger = logger;
 		this.reactor = reactor;
 		this.signer = signer;
@@ -1060,6 +1082,7 @@ var ReactorClient = class {
 		this.documentView = documentView;
 		this.readGate = readGate;
 		this.actionEvaluation = actionEvaluation;
+		this.createSignaturePolicy = createSignaturePolicy;
 		this.drives = new DriveClient(this, logger, reactor, signer);
 		this.logger.verbose("ReactorClient initialized");
 	}
@@ -1150,7 +1173,7 @@ var ReactorClient = class {
 	/** True when the id is taken; a soft-deleted document's id is still taken. */
 	async isDocumentIdTaken(documentId, signal) {
 		this.logger.verbose("isDocumentIdTaken(@documentId)", documentId);
-		return (await this.documentView.exists([documentId], DocumentExistence.IncludingDeleted, void 0, signal))[0];
+		return (await this.documentView.exists([documentId], "IncludingDeleted", void 0, signal))[0];
 	}
 	/**
 	* Retrieves operations for a document
@@ -1403,13 +1426,17 @@ var ReactorClient = class {
 			scopeStates: document.state ?? {}
 		};
 	}
+	getCreateSignaturePolicy() {
+		return Promise.resolve(this.createSignaturePolicy);
+	}
 	/**
 	* Creates a document and waits for completion
 	*/
 	async create(document, parentIdentifier, signal) {
 		this.logger.verbose("create(@id, @parentIdentifier)", document.header.id, parentIdentifier);
 		const documentId = document.header.id;
-		const createActions = await signActions([createDocumentAction({
+		const branch = document.header.branch || "main";
+		const createInput = {
 			model: document.header.documentType,
 			version: 0,
 			documentId,
@@ -1425,23 +1452,30 @@ var ReactorClient = class {
 			branch: document.header.branch,
 			meta: document.header.meta,
 			protocolVersions: document.header.protocolVersions ?? { "base-reducer": 2 }
-		}), upgradeDocumentAction({
+		};
+		const createActions = await signActions([createDocumentAction(createInput), upgradeDocumentAction({
 			documentId,
 			model: document.header.documentType,
 			fromVersion: 0,
 			toVersion: normalizeDocumentModelVersion(document.state.document?.version),
 			initialState: document.state
-		})], this.signer, signal);
+		})], this.signer, {
+			documentId,
+			branch
+		}, signal);
 		const jobs = [{
 			key: "create",
 			documentId,
 			scope: getSharedActionScope(createActions),
-			branch: "main",
+			branch,
 			actions: createActions,
 			dependsOn: []
 		}];
 		if (parentIdentifier) {
-			const parentActions = await signActions([addRelationshipAction(parentIdentifier, documentId, "child")], this.signer, signal);
+			const parentActions = await signActions([addRelationshipAction(parentIdentifier, documentId, "child")], this.signer, {
+				documentId: parentIdentifier,
+				branch: "main"
+			}, signal);
 			jobs.push({
 				key: "parent",
 				documentId: parentIdentifier,
@@ -1453,7 +1487,7 @@ var ReactorClient = class {
 		}
 		const batchResult = await this.reactor.executeBatch({ jobs }, signal);
 		const completedJobs = await Promise.all(Object.values(batchResult.jobs).map((job) => this.waitForJob(job, signal)));
-		for (const job of completedJobs) if (job.status === JobStatus.FAILED) throw new Error(job.error?.message);
+		for (const job of completedJobs) if (job.status === "FAILED") throw new Error(job.error?.message);
 		const created = await this.reactor.get(documentId);
 		return this.gateDocument(created, void 0, signal);
 	}
@@ -1475,7 +1509,7 @@ var ReactorClient = class {
 			}, void 0);
 			if (!module) throw new Error(`Document model not found for type: ${documentModelType}`);
 		}
-		const document = module.utils.createDocument();
+		const document = withSignaturePolicy(module.utils.createDocument(), requestedSignaturePolicy(options, this.createSignaturePolicy), { protocolVersions: options?.protocolVersions });
 		document.state.document.version = normalizeDocumentModelVersion(module.version);
 		return this.create(document, options?.parentIdentifier, signal);
 	}
@@ -1501,19 +1535,26 @@ var ReactorClient = class {
 			const branch = document.header.branch || "main";
 			const fromVersion = normalizeDocumentModelVersion(document.state.document?.version);
 			let targetVersion = toVersion;
-			if (targetVersion === void 0) targetVersion = normalizeDocumentModelVersion((await this.getDocumentModelModule(documentType)).version);
+			if (targetVersion === void 0) {
+				const module = await this.getDocumentModelModule(documentType);
+				targetVersion = normalizeDocumentModelVersion(module.version);
+			}
 			if (targetVersion === fromVersion) return this.gateDocument(document, { branch }, signal);
 			if (targetVersion < fromVersion) throw new DowngradeNotSupportedError(documentType, fromVersion, targetVersion);
-			const signedActions = await signActions([upgradeDocumentAction({
+			const action = upgradeDocumentAction({
 				documentId,
 				model: documentType,
 				fromVersion,
 				toVersion: targetVersion,
 				revision: { ...document.header.revision }
-			})], this.signer, signal);
+			});
+			const signedActions = await signActions([action], this.signer, {
+				documentId,
+				branch
+			}, signal);
 			const jobInfo = await this.reactor.execute(documentId, branch, signedActions, signal);
 			const completedJob = await this.waitForJob(jobInfo, signal);
-			if (completedJob.status !== JobStatus.FAILED) {
+			if (completedJob.status !== "FAILED") {
 				const upgraded = await this.reactor.getByIdOrSlug(documentId, { branch }, completedJob.consistencyToken, signal);
 				return this.gateDocument(upgraded, { branch }, signal);
 			}
@@ -1540,10 +1581,14 @@ var ReactorClient = class {
 	*/
 	async execute(documentIdentifier, branch, actions, signal, subject) {
 		this.logger.verbose("execute(@documentIdentifier, @branch, @count actions)", documentIdentifier, branch, actions.length);
-		const signedActions = await signActions(actions, this.signer, signal);
-		const jobInfo = await this.reactor.execute(documentIdentifier, branch, signedActions, signal);
+		const documentId = await this.resolveWriteTarget(documentIdentifier, branch, actions, signal);
+		const signedActions = await signActions(actions, this.signer, {
+			documentId,
+			branch
+		}, signal);
+		const jobInfo = await this.reactor.execute(documentId, branch, signedActions, signal);
 		const completedJob = await this.waitForJob(jobInfo, signal);
-		if (completedJob.status === JobStatus.FAILED) throw new Error(completedJob.error?.message);
+		if (completedJob.status === "FAILED") throw new Error(completedJob.error?.message);
 		const view = {
 			branch,
 			subject
@@ -1556,18 +1601,41 @@ var ReactorClient = class {
 	*/
 	async executeAsync(documentIdentifier, branch, actions, signal) {
 		this.logger.verbose("executeAsync(@documentIdentifier, @branch, @count actions)", documentIdentifier, branch, actions.length);
-		const signedActions = await signActions(actions, this.signer, signal);
-		return this.reactor.execute(documentIdentifier, branch, signedActions, signal);
+		const documentId = await this.resolveWriteTarget(documentIdentifier, branch, actions, signal);
+		const signedActions = await signActions(actions, this.signer, {
+			documentId,
+			branch
+		}, signal);
+		return this.reactor.execute(documentId, branch, signedActions, signal);
+	}
+	/**
+	* The id a write on `identifier` is stored under, which its signatures bind.
+	* A create names its own id, and an id no slug maps to is taken as given, so
+	* a document still in flight resolves to itself.
+	*/
+	async resolveWriteTarget(identifier, branch, actions, signal) {
+		if (actions.some((action) => action.type === "CREATE_DOCUMENT")) return identifier;
+		const view = { branch };
+		const bySlug = await this.documentView.resolveSlug(identifier, view, void 0, signal);
+		if (bySlug === void 0 || bySlug === identifier) return identifier;
+		return this.documentView.resolveIdOrSlug(identifier, view, void 0, signal);
 	}
 	async executeBatch(request, signal) {
 		this.logger.verbose("executeBatch(@count jobs)", request.jobs.length);
-		const signedJobs = await Promise.all(request.jobs.map(async (job) => ({
-			...job,
-			actions: await signActions(job.actions, this.signer, signal)
-		})));
+		const signedJobs = await Promise.all(request.jobs.map(async (job) => {
+			const documentId = await this.resolveWriteTarget(job.documentId, job.branch, job.actions, signal);
+			return {
+				...job,
+				documentId,
+				actions: await signActions(job.actions, this.signer, {
+					documentId,
+					branch: job.branch
+				}, signal)
+			};
+		}));
 		const batchResult = await this.reactor.executeBatch({ jobs: signedJobs }, signal);
 		const completedJobs = await Promise.all(Object.values(batchResult.jobs).map((job) => this.waitForJob(job, signal)));
-		for (const job of completedJobs) if (job.status === JobStatus.FAILED) throw new Error(job.error?.message);
+		for (const job of completedJobs) if (job.status === "FAILED") throw new Error(job.error?.message);
 		return batchResult;
 	}
 	/**
@@ -1592,7 +1660,7 @@ var ReactorClient = class {
 		this.logger.verbose("addRelationship(@sourceIdentifier, @targetIdentifier, @relationshipType, @metadata, @branch)", sourceIdentifier, targetIdentifier, relationshipType, metadata, branch);
 		const jobInfo = await this.reactor.addRelationship(sourceIdentifier, targetIdentifier, relationshipType, metadata, branch, this.signer, signal);
 		const completedJob = await this.waitForJob(jobInfo, signal);
-		if (completedJob.status === JobStatus.FAILED) throw new Error(completedJob.error?.message);
+		if (completedJob.status === "FAILED") throw new Error(completedJob.error?.message);
 		const result = await this.reactor.getByIdOrSlug(sourceIdentifier, { branch }, completedJob.consistencyToken, signal);
 		return this.gateDocument(result, { branch }, signal);
 	}
@@ -1604,7 +1672,7 @@ var ReactorClient = class {
 		if (!await this.readRelationshipEdge(sourceIdentifier, targetIdentifier, relationshipType, { branch }, signal)) throw new RelationshipNotFoundError(sourceIdentifier, targetIdentifier, relationshipType);
 		const jobInfo = await this.reactor.updateRelationship(sourceIdentifier, targetIdentifier, relationshipType, metadata, branch, this.signer, signal);
 		const completedJob = await this.waitForJob(jobInfo, signal);
-		if (completedJob.status === JobStatus.FAILED) throw new Error(completedJob.error?.message);
+		if (completedJob.status === "FAILED") throw new Error(completedJob.error?.message);
 		const result = await this.reactor.getByIdOrSlug(sourceIdentifier, { branch }, completedJob.consistencyToken, signal);
 		return this.gateDocument(result, { branch }, signal);
 	}
@@ -1615,7 +1683,7 @@ var ReactorClient = class {
 		this.logger.verbose("removeRelationship(@sourceIdentifier, @targetIdentifier, @relationshipType, @branch)", sourceIdentifier, targetIdentifier, relationshipType, branch);
 		const jobInfo = await this.reactor.removeRelationship(sourceIdentifier, targetIdentifier, relationshipType, branch, this.signer, signal);
 		const completedJob = await this.waitForJob(jobInfo, signal);
-		if (completedJob.status === JobStatus.FAILED) throw new Error(completedJob.error?.message);
+		if (completedJob.status === "FAILED") throw new Error(completedJob.error?.message);
 		const result = await this.reactor.getByIdOrSlug(sourceIdentifier, { branch }, completedJob.consistencyToken, signal);
 		return this.gateDocument(result, { branch }, signal);
 	}
@@ -1627,10 +1695,10 @@ var ReactorClient = class {
 		const metadata = (await this.readRelationshipEdge(sourceParentIdentifier, targetIdentifier, relationshipType, { branch }, signal))?.metadata;
 		const removeJobInfo = await this.reactor.removeRelationship(sourceParentIdentifier, targetIdentifier, relationshipType, branch, this.signer, signal);
 		const removeCompletedJob = await this.waitForJob(removeJobInfo, signal);
-		if (removeCompletedJob.status === JobStatus.FAILED) throw new Error(removeCompletedJob.error?.message);
+		if (removeCompletedJob.status === "FAILED") throw new Error(removeCompletedJob.error?.message);
 		const addJobInfo = await this.reactor.addRelationship(targetParentIdentifier, targetIdentifier, relationshipType, metadata, branch, this.signer, signal);
 		const addCompletedJob = await this.waitForJob(addJobInfo, signal);
-		if (addCompletedJob.status === JobStatus.FAILED) throw new Error(addCompletedJob.error?.message);
+		if (addCompletedJob.status === "FAILED") throw new Error(addCompletedJob.error?.message);
 		const sourceResult = await this.reactor.getByIdOrSlug(sourceParentIdentifier, { branch }, removeCompletedJob.consistencyToken, signal);
 		const targetResult = await this.reactor.getByIdOrSlug(targetParentIdentifier, { branch }, addCompletedJob.consistencyToken, signal);
 		return {
@@ -1644,7 +1712,7 @@ var ReactorClient = class {
 		const completedJobs = await Promise.all(Object.entries(result.jobs).map(async ([key, jobInfo]) => {
 			return [key, await this.waitForJob(jobInfo, signal)];
 		}));
-		for (const [, completedJob] of completedJobs) if (completedJob.status === JobStatus.FAILED) throw new Error(completedJob.error?.message);
+		for (const [, completedJob] of completedJobs) if (completedJob.status === "FAILED") throw new Error(completedJob.error?.message);
 		return { jobs: Object.fromEntries(completedJobs) };
 	}
 	/**
@@ -1653,8 +1721,8 @@ var ReactorClient = class {
 	async deleteDocument(identifier, propagate, signal) {
 		this.logger.verbose("deleteDocument(@identifier, @propagate)", identifier, propagate);
 		const jobs = [];
-		if (propagate === PropagationMode.Cascade) {
-			const toDelete = new Set([identifier]);
+		if (propagate === "cascade") {
+			const toDelete = /* @__PURE__ */ new Set([identifier]);
 			let changed = true;
 			while (changed) {
 				if (signal?.aborted) throw new Error("Operation aborted");
@@ -1678,7 +1746,7 @@ var ReactorClient = class {
 		const jobInfo = await this.reactor.deleteDocument(identifier, this.signer, signal);
 		jobs.push(jobInfo);
 		const completedJobs = await Promise.all(jobs.map((job) => this.waitForJob(job, signal)));
-		for (const completedJob of completedJobs) if (completedJob.status === JobStatus.FAILED) throw new Error(completedJob.error?.message);
+		for (const completedJob of completedJobs) if (completedJob.status === "FAILED") throw new Error(completedJob.error?.message);
 	}
 	/**
 	* Deletes documents and waits for completion
@@ -1738,27 +1806,27 @@ var ReactorClient = class {
 			deliver((async () => {
 				const documents = await Promise.all(result.results.map((id) => this.reactor.get(id, withAuthScope(view), void 0, void 0)));
 				return {
-					type: DocumentChangeType.Created,
+					type: "created",
 					documents: await Promise.all(documents.map(readable))
 				};
 			})());
 		}, search);
 		const unsubscribeDeleted = this.subscriptionManager.onDocumentDeleted((documentIds) => {
 			deliver({
-				type: DocumentChangeType.Deleted,
+				type: "deleted",
 				documents: [],
 				context: { childId: documentIds[0] }
 			});
 		}, search);
 		const unsubscribeUpdated = this.subscriptionManager.onDocumentStateUpdated((result) => {
 			deliver((async () => ({
-				type: DocumentChangeType.Updated,
+				type: "updated",
 				documents: await Promise.all(result.results.map(readable))
 			}))());
 		}, search, view);
 		const unsubscribeRelationship = this.subscriptionManager.onRelationshipChanged((parentId, childId, changeType) => {
 			deliver({
-				type: changeType === RelationshipChangeType.Added ? DocumentChangeType.ChildAdded : DocumentChangeType.ChildRemoved,
+				type: changeType === "added" ? "child_added" : "child_removed",
 				documents: [],
 				context: {
 					parentId,
@@ -1787,18 +1855,6 @@ var ReactorClient = class {
 //#endregion
 //#region src/queue/types.ts
 /**
-* State of a job in the queue
-*/
-let JobQueueState = /* @__PURE__ */ function(JobQueueState) {
-	JobQueueState[JobQueueState["UNKNOWN"] = -1] = "UNKNOWN";
-	JobQueueState[JobQueueState["PREPROCESSING"] = 0] = "PREPROCESSING";
-	JobQueueState[JobQueueState["PENDING"] = 1] = "PENDING";
-	JobQueueState[JobQueueState["READY"] = 2] = "READY";
-	JobQueueState[JobQueueState["RUNNING"] = 3] = "RUNNING";
-	JobQueueState[JobQueueState["RESOLVED"] = 4] = "RESOLVED";
-	return JobQueueState;
-}({});
-/**
 * How a retry is accounted against the job's retry limit.
 * - `CountAgainstLimit` (default): a fault; the job eventually exhausts its
 *   retries and fails terminally.
@@ -1831,6 +1887,11 @@ function toErrorInfo(error) {
 	};
 }
 var JobResultHandler = class {
+	queue;
+	jobTracker;
+	eventBus;
+	resolver;
+	logger;
 	constructor(queue, jobTracker, eventBus, resolver, logger) {
 		this.queue = queue;
 		this.jobTracker = jobTracker;
@@ -1861,7 +1922,7 @@ var JobResultHandler = class {
 		if (result.error && AppendConditionFailedError.isError(result.error) && this.countConflicts(handle.job) < MAX_EXEMPT_CONFLICT_RETRIES) {
 			const errorInfo = toErrorInfo(result.error);
 			try {
-				await this.queue.retryJob(handle.job.id, errorInfo, RetryAccounting.ExemptFromLimit);
+				await this.queue.retryJob(handle.job.id, errorInfo, "exempt-from-limit");
 				return;
 			} catch {}
 		}
@@ -1870,7 +1931,7 @@ var JobResultHandler = class {
 			callbacks.deferJob(result.error.documentId, handle.job);
 			return;
 		}
-		if (result.error && (DocumentDeletedError.isError(result.error) || DocumentAlreadyExistsError.isError(result.error) || DocumentNotFoundError.isError(result.error) || AuthorizationDeniedError.isError(result.error) || AuthTimestampNotMonotonicError.isError(result.error) || InvalidOperationTimestampError.isError(result.error) || ExcessiveReshuffleError.isError(result.error) || UpgradePreconditionFailedError.isError(result.error))) {
+		if (result.error && (DocumentDeletedError.isError(result.error) || DocumentAlreadyExistsError.isError(result.error) || DocumentNotFoundError.isError(result.error) || AuthorizationDeniedError.isError(result.error) || AuthTimestampNotMonotonicError.isError(result.error) || InvalidOperationTimestampError.isError(result.error) || ExcessiveReshuffleError.isError(result.error) || InvalidSignatureError.isError(result.error) || UpgradePreconditionFailedError.isError(result.error))) {
 			const errorInfo = toErrorInfo(result.error);
 			this.jobTracker.markFailed(handle.job.id, errorInfo, handle.job);
 			this.eventBus.emit(ReactorEventTypes.JOB_FAILED, {
@@ -1959,6 +2020,12 @@ var JobResultHandler = class {
 * is stranded at PENDING for as long as the deferral lasts.
 */
 var DeferredJobs = class {
+	queue;
+	jobTracker;
+	eventBus;
+	logger;
+	ttlMs;
+	onReleased;
 	#byDocumentId = /* @__PURE__ */ new Map();
 	#timers = /* @__PURE__ */ new Map();
 	constructor(queue, jobTracker, eventBus, logger, ttlMs = DEFAULT_DEFERRED_JOB_TTL_MS, onReleased = () => Promise.resolve()) {
@@ -2120,6 +2187,13 @@ function bucketFor(documentId, numWorkers) {
 *   (Powerhouse board wiki id: d400d711-f07e-4389-a226-4e9fdd4fa8ba)
 */
 var WorkerPoolJobExecutorManager = class {
+	workerFactory;
+	eventBus;
+	queue;
+	jobTracker;
+	logger;
+	resolver;
+	operationIndex;
 	workers = [];
 	isRunning = false;
 	activeJobs = 0;
@@ -2258,6 +2332,7 @@ var WorkerPoolJobExecutorManager = class {
 			await this.tryDispatchFor(worker);
 			return;
 		}
+		for (const refusal of outcome.signatureRefusals ?? []) this.eventBus.emit(ReactorEventTypes.SIGNATURE_REFUSED, refusal).catch(() => {});
 		if (outcome.result.success) {
 			this.totalJobsProcessed++;
 			const completedEvent = {
@@ -2383,6 +2458,12 @@ function fillMissingMemberships(documentIds, found) {
 * Listens for job available events and dispatches jobs to executors.
 */
 var SimpleJobExecutorManager = class {
+	executorFactory;
+	eventBus;
+	queue;
+	jobTracker;
+	logger;
+	resolver;
 	executors = [];
 	isRunning = false;
 	activeJobs = 0;
@@ -2557,6 +2638,7 @@ var SimpleJobExecutorManager = class {
 * Subscribes to operation events to update job states.
 */
 var InMemoryJobTracker = class {
+	eventBus;
 	jobs = /* @__PURE__ */ new Map();
 	unsubscribers = [];
 	constructor(eventBus) {
@@ -2577,11 +2659,11 @@ var InMemoryJobTracker = class {
 	handleWriteReady(event) {
 		const jobId = event.jobId;
 		const job = this.jobs.get(jobId);
-		if (job && job.status === JobStatus.RUNNING) {
+		if (job && job.status === "RUNNING") {
 			const consistencyToken = createConsistencyToken(event.operations);
 			this.jobs.set(jobId, {
 				...job,
-				status: JobStatus.WRITE_READY,
+				status: "WRITE_READY",
 				consistencyToken,
 				result: summarizeSubmittedActions(event.operations, event.submittedActionIds)
 			});
@@ -2590,9 +2672,9 @@ var InMemoryJobTracker = class {
 	handleReadReady(event) {
 		const jobId = event.jobId;
 		const job = this.jobs.get(jobId);
-		if (job && job.status === JobStatus.WRITE_READY) this.jobs.set(jobId, {
+		if (job && job.status === "WRITE_READY") this.jobs.set(jobId, {
 			...job,
-			status: JobStatus.READ_READY
+			status: "READ_READY"
 		});
 	}
 	handleJobFailed(event) {
@@ -2615,7 +2697,7 @@ var InMemoryJobTracker = class {
 			this.jobs.set(jobId, {
 				id: jobId,
 				documentId: "",
-				status: JobStatus.RUNNING,
+				status: "RUNNING",
 				createdAtUtcIso: (/* @__PURE__ */ new Date()).toISOString(),
 				consistencyToken: createEmptyConsistencyToken(),
 				meta: {
@@ -2627,7 +2709,7 @@ var InMemoryJobTracker = class {
 		}
 		this.jobs.set(jobId, {
 			...job,
-			status: JobStatus.RUNNING
+			status: "RUNNING"
 		});
 	}
 	markFailed(jobId, error, job) {
@@ -2636,7 +2718,7 @@ var InMemoryJobTracker = class {
 			this.jobs.set(jobId, {
 				id: jobId,
 				documentId: job?.documentId ?? "",
-				status: JobStatus.FAILED,
+				status: "FAILED",
 				createdAtUtcIso: (/* @__PURE__ */ new Date()).toISOString(),
 				completedAtUtcIso: (/* @__PURE__ */ new Date()).toISOString(),
 				error,
@@ -2651,7 +2733,7 @@ var InMemoryJobTracker = class {
 		}
 		this.jobs.set(jobId, {
 			...existing,
-			status: JobStatus.FAILED,
+			status: "FAILED",
 			completedAtUtcIso: (/* @__PURE__ */ new Date()).toISOString(),
 			error,
 			job,
@@ -2745,6 +2827,7 @@ function highestOf(ops) {
 	return highest;
 }
 var ProcessorQueue = class {
+	options;
 	tasks = [];
 	running = false;
 	closed = false;
@@ -3327,11 +3410,11 @@ var JobExecutionHandle = class {
 	onDefer;
 	getStateName(state) {
 		switch (state) {
-			case JobQueueState.PREPROCESSING: return "PREPROCESSING";
-			case JobQueueState.PENDING: return "PENDING";
-			case JobQueueState.READY: return "READY";
-			case JobQueueState.RUNNING: return "RUNNING";
-			case JobQueueState.RESOLVED: return "RESOLVED";
+			case 0: return "PREPROCESSING";
+			case 1: return "PENDING";
+			case 2: return "READY";
+			case 3: return "RUNNING";
+			case 4: return "RESOLVED";
 			default: return `UNKNOWN`;
 		}
 	}
@@ -3350,23 +3433,23 @@ var JobExecutionHandle = class {
 		return this._state;
 	}
 	start() {
-		if (this._state !== JobQueueState.READY) throw new Error(`Cannot start job in state ${this.getStateName(this._state)}`);
-		this._state = JobQueueState.RUNNING;
+		if (this._state !== 2) throw new Error(`Cannot start job in state ${this.getStateName(this._state)}`);
+		this._state = 3;
 		this.onStart?.();
 	}
 	complete() {
-		if (this._state !== JobQueueState.RUNNING) throw new Error(`Cannot complete job in state ${this.getStateName(this._state)}`);
-		this._state = JobQueueState.RESOLVED;
+		if (this._state !== 3) throw new Error(`Cannot complete job in state ${this.getStateName(this._state)}`);
+		this._state = 4;
 		this.onComplete?.();
 	}
 	fail(error) {
-		if (this._state !== JobQueueState.RUNNING) throw new Error(`Cannot fail job in state ${this.getStateName(this._state)}`);
-		this._state = JobQueueState.RESOLVED;
+		if (this._state !== 3) throw new Error(`Cannot fail job in state ${this.getStateName(this._state)}`);
+		this._state = 4;
 		this.onFail?.(error);
 	}
 	defer() {
-		if (this._state !== JobQueueState.RUNNING) throw new Error(`Cannot defer job in state ${this.getStateName(this._state)}`);
-		this._state = JobQueueState.RESOLVED;
+		if (this._state !== 3) throw new Error(`Cannot defer job in state ${this.getStateName(this._state)}`);
+		this._state = 4;
 		this.onDefer?.();
 	}
 };
@@ -3379,6 +3462,8 @@ var JobExecutionHandle = class {
 * Implements dependency management through queue hints.
 */
 var InMemoryQueue = class {
+	eventBus;
+	resolver;
 	queues = /* @__PURE__ */ new Map();
 	jobIdToQueueKey = /* @__PURE__ */ new Map();
 	docIdToJobId = /* @__PURE__ */ new Map();
@@ -3513,7 +3598,7 @@ var InMemoryQueue = class {
 		this.jobIdToQueueKey.delete(job.id);
 		this.markJobExecuting(job);
 		if (queue.length === 0) this.queues.delete(queueKey);
-		const handle = new JobExecutionHandle(job, JobQueueState.READY, {
+		const handle = new JobExecutionHandle(job, 2, {
 			onStart: () => {},
 			onComplete: () => {
 				this.completeJob(job.id);
@@ -3539,7 +3624,7 @@ var InMemoryQueue = class {
 				this.jobIdToQueueKey.delete(job.id);
 				this.markJobExecuting(job);
 				if (queue.length === 0) this.queues.delete(queueKey);
-				const handle = new JobExecutionHandle(job, JobQueueState.READY, {
+				const handle = new JobExecutionHandle(job, 2, {
 					onStart: () => {},
 					onComplete: () => {
 						this.completeJob(job.id);
@@ -3573,7 +3658,7 @@ var InMemoryQueue = class {
 			this.jobIdToQueueKey.delete(job.id);
 			this.markJobExecuting(job);
 			if (queue.length === 0) this.queues.delete(queueKey);
-			const handle = new JobExecutionHandle(job, JobQueueState.READY, {
+			const handle = new JobExecutionHandle(job, 2, {
 				onStart: () => {},
 				onComplete: () => {
 					this.completeJob(job.id);
@@ -3675,7 +3760,7 @@ var InMemoryQueue = class {
 		if (documentId) this.markJobComplete(jobId, documentId);
 		this.jobIndex.delete(jobId);
 	}
-	async retryJob(jobId, error, accounting = RetryAccounting.CountAgainstLimit) {
+	async retryJob(jobId, error, accounting = "count-against-limit") {
 		const job = this.jobIndex.get(jobId);
 		if (!job) return;
 		job.lastError = error;
@@ -3687,7 +3772,7 @@ var InMemoryQueue = class {
 		const retryCount = job.retryCount || 0;
 		const updatedJob = {
 			...job,
-			retryCount: accounting === RetryAccounting.CountAgainstLimit ? retryCount + 1 : retryCount,
+			retryCount: accounting === "count-against-limit" ? retryCount + 1 : retryCount,
 			lastError: error
 		};
 		await this.enqueue(updatedJob);
@@ -3888,6 +3973,8 @@ function describeSource(source) {
 * and failure-caching state.
 */
 var DocumentModelResolver = class {
+	registry;
+	loader;
 	loadingModels = /* @__PURE__ */ new Map();
 	failedModelTypes = /* @__PURE__ */ new Set();
 	broadcastHook = null;
@@ -3958,6 +4045,7 @@ var DocumentModelResolver = class {
 * Since there is no loader, missing models cannot be recovered.
 */
 var NullDocumentModelResolver = class {
+	registry;
 	constructor(registry) {
 		this.registry = registry;
 	}
@@ -4181,6 +4269,8 @@ var ReactorSubscriptionManager = class {
 * is emitted, so that reactor.get() returns fresh data when callbacks fire.
 */
 var SubscriptionNotificationReadModel = class {
+	subscriptionManager;
+	documentView;
 	name = "subscription-notification";
 	constructor(subscriptionManager, documentView) {
 		this.subscriptionManager = subscriptionManager;
@@ -4203,10 +4293,10 @@ var SubscriptionNotificationReadModel = class {
 				deleted.push(deletedId);
 			} else if (actionType === "ADD_RELATIONSHIP") {
 				const input = operation.action.input;
-				this.subscriptionManager.notifyRelationshipChanged(input.sourceId, input.targetId, RelationshipChangeType.Added, input.childType);
+				this.subscriptionManager.notifyRelationshipChanged(input.sourceId, input.targetId, "added", input.childType);
 			} else if (actionType === "REMOVE_RELATIONSHIP") {
 				const input = operation.action.input;
-				this.subscriptionManager.notifyRelationshipChanged(input.sourceId, input.targetId, RelationshipChangeType.Removed, input.childType);
+				this.subscriptionManager.notifyRelationshipChanged(input.sourceId, input.targetId, "removed", input.childType);
 			} else if (!created.includes(context.documentId)) updatedIds.add(context.documentId);
 		}
 		if (created.length > 0) this.subscriptionManager.notifyDocumentsCreated(created, documentTypes, parentIds);
@@ -4231,6 +4321,10 @@ var SubscriptionNotificationReadModel = class {
 * keeps the common case (a membership write later than all history) free.
 */
 var GroupReevaluationTrigger = class {
+	logger;
+	eventBus;
+	queue;
+	operationIndex;
 	unsubscribe;
 	constructor(logger, eventBus, queue, operationIndex) {
 		this.logger = logger;
@@ -4382,7 +4476,7 @@ var Mailbox = class {
 			this.itemsMap.set(item.id, item);
 			for (const op of item.operations) this._latestOrdinal = Math.max(this._latestOrdinal, op.context.ordinal);
 			item.on((syncOp, _, next) => {
-				if (next === SyncOperationStatus.Applied) for (const op of syncOp.operations) this._ack = Math.max(this._ack, op.context.ordinal);
+				if (next === 2) for (const op of syncOp.operations) this._ack = Math.max(this._ack, op.context.ordinal);
 			});
 		}
 		if (this.paused) {
@@ -4496,7 +4590,7 @@ var BufferedMailbox = class {
 			this.itemsMap.set(item.id, item);
 			for (const op of item.operations) this._latestOrdinal = Math.max(this._latestOrdinal, op.context.ordinal);
 			item.on((syncOp, _, next) => {
-				if (next === SyncOperationStatus.Applied) for (const op of syncOp.operations) this._ack = Math.max(this._ack, op.context.ordinal);
+				if (next === 2) for (const op of syncOp.operations) this._ack = Math.max(this._ack, op.context.ordinal);
 			});
 		}
 		this.addedBuffer.push(...items);
@@ -4610,7 +4704,14 @@ var GraphQLRequestError = class extends Error {
 * difference between a channel that recovers and one that is dead for the
 * process lifetime.
 */
-const RECOVERABLE_GRAPHQL_ERROR_CODES = { malformedStoredOperation: "MALFORMED_STORED_OPERATION" };
+const RECOVERABLE_GRAPHQL_ERROR_CODES = { 
+/**
+* A stored operation cannot be represented in the schema - an action with no
+* id, say. The document holding it needs repairing, but the channel serves
+* every other document, and a peer that stopped polling would stop receiving
+* those too.
+*/
+malformedStoredOperation: "MALFORMED_STORED_OPERATION" };
 const RECOVERABLE_CODES = new Set(Object.values(RECOVERABLE_GRAPHQL_ERROR_CODES));
 /**
 * True when every error the response carried named a recoverable code.
@@ -4719,23 +4820,23 @@ var SyncOperation = class {
 		this.scopes = scopes;
 		this.branch = branch;
 		this.operations = operations;
-		this.status = SyncOperationStatus.Unknown;
+		this.status = -1;
 	}
 	on(callback) {
 		this.callbacks.push(callback);
 	}
 	started() {
-		this.transition(SyncOperationStatus.TransportPending);
+		this.transition(0);
 	}
 	transported() {
-		this.transition(SyncOperationStatus.ExecutionPending);
+		this.transition(1);
 	}
 	executed() {
-		this.transition(SyncOperationStatus.Applied);
+		this.transition(2);
 	}
 	failed(error) {
 		this.error = error;
-		this.transition(SyncOperationStatus.Error);
+		this.transition(3);
 	}
 	transition(next) {
 		const prev = this.status;
@@ -4945,9 +5046,11 @@ function consolidateSyncOperations(syncOps) {
 		}
 		const first = group.ops[0];
 		const merged = new SyncOperation(first.id, first.jobId, remappedDeps, first.remoteName, first.documentId, first.scopes, first.branch, allOperations);
-		if (first.status > SyncOperationStatus.TransportPending) if (first.status >= SyncOperationStatus.Error) merged.executed();
-		else if (first.status >= SyncOperationStatus.Applied) merged.transported();
-		else merged.started();
+		if (first.status > 0) {
+			if (first.status >= 3) merged.executed();
+			else if (first.status >= 2) merged.transported();
+			else merged.started();
+		}
 		result.push(merged);
 	}
 	return result;
@@ -5078,7 +5181,7 @@ function syncOperationErrorType(error) {
 	return error?.errorType ?? classifyJobFailure(error?.error?.name ?? "Error");
 }
 /** Dead-letter types that must not stop the document syncing. */
-const NON_QUARANTINING_ERROR_TYPES = new Set(["AUTH_TIMESTAMP_NOT_MONOTONIC"]);
+const NON_QUARANTINING_ERROR_TYPES = /* @__PURE__ */ new Set(["AUTH_TIMESTAMP_NOT_MONOTONIC"]);
 /**
 * A held auth operation must not quarantine: reconciling the two policies needs
 * the traffic a quarantine would stop.
@@ -5304,7 +5407,7 @@ function envelopesToSyncOperations(envelope, remoteName) {
 }
 const getLatestAppliedOrdinal = (syncOps) => {
 	let maxOrdinal = 0;
-	for (const syncOp of syncOps) if (syncOp.status === SyncOperationStatus.Applied) for (const op of syncOp.operations) maxOrdinal = Math.max(maxOrdinal, op.context.ordinal);
+	for (const syncOp of syncOps) if (syncOp.status === 2) for (const op of syncOp.operations) maxOrdinal = Math.max(maxOrdinal, op.context.ordinal);
 	return maxOrdinal;
 };
 //#endregion
@@ -5319,6 +5422,7 @@ const DECISION_FIELDS = ["deniedReason", "errorType"];
 * GraphQL-based synchronization channel for network communication between reactors.
 */
 var GqlRequestChannel = class {
+	logger;
 	inbox;
 	outbox;
 	deadLetter;
@@ -5526,7 +5630,7 @@ var GqlRequestChannel = class {
 		const syncOps = [];
 		for (const dl of deadLetters) {
 			const syncOp = new SyncOperation(crypto.randomUUID(), dl.jobId, [], this.remoteName, dl.documentId, dl.scopes, dl.branch, []);
-			syncOp.failed(new ChannelError(ChannelErrorSource.Outbox, new Error(dl.error), dl.errorType ?? void 0));
+			syncOp.failed(new ChannelError("outbox", new Error(dl.error), dl.errorType ?? void 0));
 			syncOps.push(syncOp);
 		}
 		this.deadLetter.add(...syncOps);
@@ -5546,7 +5650,7 @@ var GqlRequestChannel = class {
 		const classification = this.classifyError(err);
 		this.failureCount++;
 		this.lastFailureUtcMs = Date.now();
-		const channelError = new ChannelError(ChannelErrorSource.Inbox, err);
+		const channelError = new ChannelError("inbox", err);
 		this.logger.error("GqlChannel poll error (@FailureCount, @Classification): @Error", this.failureCount, classification, channelError);
 		if (classification === "unrecoverable") {
 			this.pollTimer.stop();
@@ -5790,7 +5894,7 @@ var GqlRequestChannel = class {
 				this.transitionConnectionState("reconnecting");
 				this.schedulePushRetry();
 			} else {
-				const channelError = new ChannelError(ChannelErrorSource.Outbox, err);
+				const channelError = new ChannelError("outbox", err);
 				for (const syncOp of syncOps) syncOp.failed(channelError);
 				this.deadLetter.add(...syncOps);
 				this.outbox.remove(...syncOps);
@@ -6012,7 +6116,7 @@ var GqlRequestChannelFactory = class {
 			...retryMaxDelayMs !== void 0 && { retryMaxDelayMs },
 			...maxQueueDepth !== void 0 && { maxQueueDepth },
 			...backpressureCheckIntervalMs !== void 0 && { backpressureCheckIntervalMs },
-			startPaused: options?.pollBehavior === PollBehavior.Manual
+			startPaused: options?.pollBehavior === "manual"
 		});
 		return new GqlRequestChannel(this.logger, remoteId, remoteName, cursorStorage, gqlConfig, operationIndex, pollTimer);
 	}
@@ -6029,6 +6133,7 @@ function firstOrdinalOf$1(syncOp) {
 * In general, the resolvers are responsible for updating mailboxes.
 */
 var GqlResponseChannel = class {
+	logger;
 	inbox;
 	outbox;
 	deadLetter;
@@ -6139,7 +6244,7 @@ var GqlResponseChannel = class {
 	*/
 	rememberUnserved(syncOps) {
 		for (const syncOp of syncOps) {
-			if (syncOp.status === SyncOperationStatus.Applied) continue;
+			if (syncOp.status === 2) continue;
 			const first = firstOrdinalOf$1(syncOp);
 			if (first > 0 && first < this.evictedOutboxFloor) this.evictedOutboxFloor = first;
 		}
@@ -6184,7 +6289,7 @@ var GqlResponseChannel = class {
 	unservedFloor() {
 		let floor = this.evictedOutboxFloor;
 		for (const syncOp of this.outbox.items) {
-			if (syncOp.status === SyncOperationStatus.Applied) continue;
+			if (syncOp.status === 2) continue;
 			const first = firstOrdinalOf$1(syncOp);
 			if (first > 0 && first < floor) floor = first;
 		}
@@ -6224,6 +6329,7 @@ function remoteCursorToRow(cursor) {
 	};
 }
 var KyselySyncCursorStorage = class {
+	db;
 	constructor(db) {
 		this.db = db;
 	}
@@ -6299,6 +6405,7 @@ function deadLetterRecordToRow(record) {
 * PGlite/Kysely-backed implementation of {@link ISyncDeadLetterStorage}.
 */
 var KyselySyncDeadLetterStorage = class {
+	db;
 	constructor(db) {
 		this.db = db;
 	}
@@ -6420,6 +6527,7 @@ function remoteRecordToRow(remote) {
 	};
 }
 var KyselySyncRemoteStorage = class {
+	db;
 	constructor(db) {
 		this.db = db;
 	}
@@ -6570,6 +6678,7 @@ var BatchAggregator = class {
 * to provide a fast path for jobs that have already synced.
 */
 var SyncAwaiter = class {
+	eventBus;
 	completedResults = /* @__PURE__ */ new Map();
 	pendingWaiters = /* @__PURE__ */ new Map();
 	unsubscribers = [];
@@ -6769,24 +6878,19 @@ var SyncStatusTracker = class {
 	}
 };
 function deriveStatus(inboxCount, outboxCount, errorCount) {
-	if (errorCount > 0) return SyncStatus.Error;
-	if (inboxCount > 0 && outboxCount > 0) return SyncStatus.OutgoingAndIncoming;
-	if (inboxCount > 0) return SyncStatus.Incoming;
-	if (outboxCount > 0) return SyncStatus.Outgoing;
-	return SyncStatus.Synced;
+	if (errorCount > 0) return "ERROR";
+	if (inboxCount > 0 && outboxCount > 0) return "OUTGOING_AND_INCOMING";
+	if (inboxCount > 0) return "INCOMING";
+	if (outboxCount > 0) return "OUTGOING";
+	return "SYNCED";
 }
 //#endregion
 //#region src/sync/sync-manager.ts
-var OutboxMode = /* @__PURE__ */ function(OutboxMode) {
-	OutboxMode["Backfill"] = "backfill";
-	OutboxMode["BatchTriggered"] = "batch-triggered";
-	return OutboxMode;
-}(OutboxMode || {});
 const defaultSyncManagerConfig = {
 	maxDeadLettersPerRemote: 100,
 	maxInboxBatchSize: 32,
 	maxHeldOperationsPerRemote: 1e4,
-	staleRemotePollWindowMs: 5 * 6e4
+	staleRemotePollWindowMs: 3e5
 };
 const PLAN_KEY_TO_JOB_UUID_CAP = 1e4;
 /**
@@ -6889,7 +6993,7 @@ var SyncManager = class {
 			if (outboxAckOrdinal > 0) {
 				const backfillController = new AbortController();
 				this.backfillAbortControllers.set(record.name, backfillController);
-				this.updateOutbox(remote, outboxAckOrdinal, OutboxMode.Backfill, backfillController.signal).catch((error) => {
+				this.updateOutbox(remote, outboxAckOrdinal, "backfill", backfillController.signal).catch((error) => {
 					if (backfillController.signal.aborted) return;
 					this.logger.error("Backfill failed for remote @RemoteName: @Error", remote.meta.name, error instanceof Error ? error : new Error(String(error)));
 				}).finally(() => {
@@ -7008,7 +7112,7 @@ var SyncManager = class {
 		}
 		const backfillController = new AbortController();
 		this.backfillAbortControllers.set(name, backfillController);
-		this.updateOutbox(remote, 0, OutboxMode.Backfill, backfillController.signal).catch((error) => {
+		this.updateOutbox(remote, 0, "backfill", backfillController.signal).catch((error) => {
 			if (backfillController.signal.aborted) return;
 			this.logger.error("Backfill failed for remote @RemoteName: @Error", remote.meta.name, error instanceof Error ? error : new Error(String(error)));
 		}).finally(() => {
@@ -7128,7 +7232,7 @@ var SyncManager = class {
 					scopes: syncOp.scopes,
 					branch: syncOp.branch,
 					operations: syncOp.operations,
-					errorSource: syncOp.error?.source ?? ChannelErrorSource.None,
+					errorSource: syncOp.error?.source ?? "none",
 					errorMessage: syncOp.error?.error.message ?? "unknown",
 					errorType
 				};
@@ -7188,7 +7292,7 @@ var SyncManager = class {
 		for (const remote of affectedRemotes) trimMailboxFromBatch(remote.channel.inbox, batch);
 		for (const remote of affectedRemotes) {
 			if (!this.remotes.has(remote.meta.name) || this.removing.has(remote.meta.name)) continue;
-			await this.updateOutbox(remote, remote.channel.outbox.latestOrdinal, OutboxMode.BatchTriggered);
+			await this.updateOutbox(remote, remote.channel.outbox.latestOrdinal, "batch-triggered");
 		}
 		await this.drainPrunes();
 	}
@@ -7230,7 +7334,7 @@ var SyncManager = class {
 			if (this.isShutdown) return;
 			const err = error instanceof Error ? error : new Error(String(error));
 			this.logger.error("Failed to load operations from inbox (@remote, @documentId, @error)", remote.meta.name, syncOp.documentId, err.message);
-			const channelError = new ChannelError(ChannelErrorSource.Inbox, err);
+			const channelError = new ChannelError("inbox", err);
 			syncOp.failed(channelError);
 			remote.channel.deadLetter.add(syncOp);
 			remote.channel.inbox.remove(syncOp);
@@ -7243,14 +7347,14 @@ var SyncManager = class {
 			if (this.isShutdown) return;
 			const err = error instanceof Error ? error : new Error(String(error));
 			this.logger.error("Failed to wait for job completion (@remote, @documentId, @jobId, @error)", remote.meta.name, syncOp.documentId, jobInfo.id, err.message);
-			const channelError = new ChannelError(ChannelErrorSource.Inbox, err);
+			const channelError = new ChannelError("inbox", err);
 			syncOp.failed(channelError);
 			remote.channel.deadLetter.add(syncOp);
 			remote.channel.inbox.remove(syncOp);
 			return;
 		}
 		if (this.isShutdown) return;
-		if (completedJobInfo.status === JobStatus.FAILED) {
+		if (completedJobInfo.status === "FAILED") {
 			const errorMessage = completedJobInfo.error?.message || "Unknown error";
 			this.logger.error("Failed to apply operations from inbox (@remote, @documentId, @jobId, @error)", remote.meta.name, syncOp.documentId, completedJobInfo.id, errorMessage);
 			syncOp.failed(this.inboxFailure(completedJobInfo.error));
@@ -7293,7 +7397,7 @@ var SyncManager = class {
 			if (this.isShutdown) return;
 			for (const { remote, syncOp } of items) {
 				const err = error instanceof Error ? error : new Error(String(error));
-				syncOp.failed(new ChannelError(ChannelErrorSource.Inbox, err));
+				syncOp.failed(new ChannelError("inbox", err));
 				remote.channel.deadLetter.add(syncOp);
 				remote.channel.inbox.remove(syncOp);
 			}
@@ -7310,7 +7414,7 @@ var SyncManager = class {
 		for (const { remote, syncOp } of items) {
 			if (!(syncOp.jobId in result.jobs)) {
 				this.logger.error("Job key missing from batch load result (@remote, @documentId, @jobId)", remote.meta.name, syncOp.documentId, syncOp.jobId);
-				const error = new ChannelError(ChannelErrorSource.Inbox, /* @__PURE__ */ new Error(`Job key '${syncOp.jobId}' missing from batch load result`));
+				const error = new ChannelError("inbox", /* @__PURE__ */ new Error(`Job key '${syncOp.jobId}' missing from batch load result`));
 				syncOp.failed(error);
 				remote.channel.deadLetter.add(syncOp);
 				remote.channel.inbox.remove(syncOp);
@@ -7323,13 +7427,13 @@ var SyncManager = class {
 			} catch (error) {
 				if (this.isShutdown) continue;
 				const err = error instanceof Error ? error : new Error(String(error));
-				syncOp.failed(new ChannelError(ChannelErrorSource.Inbox, err));
+				syncOp.failed(new ChannelError("inbox", err));
 				remote.channel.deadLetter.add(syncOp);
 				remote.channel.inbox.remove(syncOp);
 				continue;
 			}
 			if (this.isShutdown) return;
-			if (completedJobInfo.status === JobStatus.FAILED) {
+			if (completedJobInfo.status === "FAILED") {
 				syncOp.failed(this.inboxFailure(completedJobInfo.error));
 				remote.channel.deadLetter.add(syncOp);
 			} else syncOp.executed();
@@ -7348,7 +7452,7 @@ var SyncManager = class {
 	*/
 	inboxFailure(error) {
 		const message = error?.message || "Unknown error";
-		return new ChannelError(ChannelErrorSource.Inbox, /* @__PURE__ */ new Error(`Failed to apply operations: ${message}`), classifyJobFailure(error?.name ?? "Error"));
+		return new ChannelError("inbox", /* @__PURE__ */ new Error(`Failed to apply operations: ${message}`), classifyJobFailure(error?.name ?? "Error"));
 	}
 	/**
 	* Where the next outbox derivation starts: at the evicted floor when there is
@@ -7375,7 +7479,7 @@ var SyncManager = class {
 	*/
 	evictPastOutboxBound(remote) {
 		const cap = this.config.maxHeldOperationsPerRemote;
-		const queued = remote.channel.outbox.items.filter((syncOp) => syncOp.status === SyncOperationStatus.Unknown).sort((a, b) => firstOrdinalOf(a) - firstOrdinalOf(b));
+		const queued = remote.channel.outbox.items.filter((syncOp) => syncOp.status === -1).sort((a, b) => firstOrdinalOf(a) - firstOrdinalOf(b));
 		let kept = 0;
 		let cut = queued.length;
 		for (let i = 0; i < queued.length; i++) {
@@ -7467,7 +7571,7 @@ var SyncManager = class {
 	* it marked; the count is what keeps that drain from removing the remote this
 	* call is still adding to.
 	*/
-	async updateOutbox(remote, ackOrdinal, mode = OutboxMode.Backfill, signal) {
+	async updateOutbox(remote, ackOrdinal, mode = "backfill", signal) {
 		this.derivingOutboxes++;
 		try {
 			await this.deriveOutbox(remote, ackOrdinal, mode, signal);
@@ -7495,11 +7599,11 @@ var SyncManager = class {
 				const prevJobId = lastJobByDoc.get(batch.documentId);
 				const deps = [];
 				if (prevJobId) deps.push(prevJobId);
-				if (mode === OutboxMode.BatchTriggered && prevChainJobId && prevChainJobId !== prevJobId) deps.push(prevChainJobId);
+				if (mode === "batch-triggered" && prevChainJobId && prevChainJobId !== prevJobId) deps.push(prevChainJobId);
 				const syncOp = new SyncOperation(crypto.randomUUID(), jobId, deps, remote.meta.name, batch.documentId, [batch.scope], batch.branch, batch.operations);
 				syncOps.push(syncOp);
 				lastJobByDoc.set(batch.documentId, jobId);
-				if (mode === OutboxMode.BatchTriggered) prevChainJobId = jobId;
+				if (mode === "batch-triggered") prevChainJobId = jobId;
 			}
 			remote.channel.outbox.add(...syncOps);
 			this.evictPastOutboxBound(remote);
@@ -7807,7 +7911,7 @@ var Reactor = class {
 		this.logger.verbose("create(@id, @type, @slug)", document.header.id, document.header.documentType, document.header.slug);
 		const createdAtUtcIso = (/* @__PURE__ */ new Date()).toISOString();
 		throwIfAborted(signal, () => new AbortError());
-		let actions = [createDocumentAction({
+		const createAction = createDocumentAction({
 			model: document.header.documentType,
 			version: 0,
 			documentId: document.header.id,
@@ -7823,14 +7927,20 @@ var Reactor = class {
 			branch: document.header.branch,
 			meta: document.header.meta,
 			protocolVersions: document.header.protocolVersions ?? { "base-reducer": 2 }
-		}), upgradeDocumentAction({
+		});
+		const upgradeAction = upgradeDocumentAction({
 			documentId: document.header.id,
 			model: document.header.documentType,
 			fromVersion: 0,
 			toVersion: normalizeDocumentModelVersion(document.state.document?.version),
 			initialState: document.state
-		})];
-		if (signer) actions = await signActions(actions, signer, signal);
+		});
+		const branch = document.header.branch || "main";
+		let actions = [createAction, upgradeAction];
+		if (signer) actions = await signActions(actions, signer, {
+			documentId: document.header.id,
+			branch
+		}, signal);
 		const jobId = v4();
 		const jobMeta = buildSingleJobMeta(jobId, meta);
 		const job = {
@@ -7838,7 +7948,7 @@ var Reactor = class {
 			kind: "mutation",
 			documentId: document.header.id,
 			scope: "document",
-			branch: "main",
+			branch,
 			actions,
 			operations: [],
 			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -7850,7 +7960,7 @@ var Reactor = class {
 		const jobInfo = {
 			id: jobId,
 			documentId: job.documentId,
-			status: JobStatus.PENDING,
+			status: "PENDING",
 			createdAtUtcIso,
 			consistencyToken: {
 				version: 1,
@@ -7869,7 +7979,10 @@ var Reactor = class {
 		const createdAtUtcIso = (/* @__PURE__ */ new Date()).toISOString();
 		throwIfAborted(signal, () => new AbortError());
 		let action = deleteDocumentAction(id);
-		if (signer) action = await signAction(action, signer, signal);
+		if (signer) action = await signAction(action, signer, {
+			documentId: id,
+			branch: "main"
+		}, signal);
 		const jobId = v4();
 		const jobMeta = buildSingleJobMeta(jobId, meta);
 		const job = {
@@ -7889,7 +8002,7 @@ var Reactor = class {
 		const jobInfo = {
 			id: jobId,
 			documentId: job.documentId,
-			status: JobStatus.PENDING,
+			status: "PENDING",
 			createdAtUtcIso,
 			consistencyToken: {
 				version: 1,
@@ -7927,7 +8040,7 @@ var Reactor = class {
 		const jobInfo = {
 			id: jobId,
 			documentId: job.documentId,
-			status: JobStatus.PENDING,
+			status: "PENDING",
 			createdAtUtcIso,
 			consistencyToken: {
 				version: 1,
@@ -7967,7 +8080,7 @@ var Reactor = class {
 		const jobInfo = {
 			id: jobId,
 			documentId: job.documentId,
-			status: JobStatus.PENDING,
+			status: "PENDING",
 			createdAtUtcIso,
 			consistencyToken: {
 				version: 1,
@@ -8002,7 +8115,7 @@ var Reactor = class {
 			const jobInfo = {
 				id: planKeyToJobId.get(jobPlan.key),
 				documentId: jobPlan.documentId,
-				status: JobStatus.PENDING,
+				status: "PENDING",
 				createdAtUtcIso,
 				consistencyToken: {
 					version: 1,
@@ -8072,7 +8185,7 @@ var Reactor = class {
 			const jobInfo = {
 				id: planKeyToJobId.get(jobPlan.key),
 				documentId: jobPlan.documentId,
-				status: JobStatus.PENDING,
+				status: "PENDING",
 				createdAtUtcIso,
 				consistencyToken: {
 					version: 1,
@@ -8126,21 +8239,30 @@ var Reactor = class {
 		this.logger.verbose("addRelationship(@sourceId, @targetId, @relationshipType, @metadata, @branch)", sourceId, targetId, relationshipType, metadata, branch);
 		throwIfAborted(signal, () => new AbortError());
 		let actions = [addRelationshipAction(sourceId, targetId, relationshipType, metadata)];
-		if (signer) actions = await signActions(actions, signer, signal);
+		if (signer) actions = await signActions(actions, signer, {
+			documentId: sourceId,
+			branch
+		}, signal);
 		return await this.execute(sourceId, branch, actions, signal);
 	}
 	async updateRelationship(sourceId, targetId, relationshipType, metadata, branch = "main", signer, signal) {
 		this.logger.verbose("updateRelationship(@sourceId, @targetId, @relationshipType, @metadata, @branch)", sourceId, targetId, relationshipType, metadata, branch);
 		throwIfAborted(signal, () => new AbortError());
 		let actions = [updateRelationshipAction(sourceId, targetId, relationshipType, metadata)];
-		if (signer) actions = await signActions(actions, signer, signal);
+		if (signer) actions = await signActions(actions, signer, {
+			documentId: sourceId,
+			branch
+		}, signal);
 		return await this.execute(sourceId, branch, actions, signal);
 	}
 	async removeRelationship(sourceId, targetId, relationshipType, branch = "main", signer, signal) {
 		this.logger.verbose("removeRelationship(@sourceId, @targetId, @relationshipType, @branch)", sourceId, targetId, relationshipType, branch);
 		throwIfAborted(signal, () => new AbortError());
 		let actions = [removeRelationshipAction(sourceId, targetId, relationshipType)];
-		if (signer) actions = await signActions(actions, signer, signal);
+		if (signer) actions = await signActions(actions, signer, {
+			documentId: sourceId,
+			branch
+		}, signal);
 		return await this.execute(sourceId, branch, actions, signal);
 	}
 	getJobStatus(jobId, signal) {
@@ -8152,7 +8274,7 @@ var Reactor = class {
 			return Promise.resolve({
 				id: jobId,
 				documentId: "",
-				status: JobStatus.FAILED,
+				status: "FAILED",
 				createdAtUtcIso: now,
 				completedAtUtcIso: now,
 				error: toErrorInfo$1("Job not found"),
@@ -8244,8 +8366,11 @@ var ReactorBuilder = class {
 	eventBus;
 	readModelCoordinator;
 	readModelCoordinatorFactory;
-	signatureVerifier;
 	kyselyInstance;
+	signer;
+	workerSigner;
+	trustPolicy;
+	workerTrustPolicy;
 	signalHandlersEnabled = false;
 	queueInstance;
 	channelScheme;
@@ -8344,10 +8469,34 @@ var ReactorBuilder = class {
 		this.eventBus = eventBus;
 		return this;
 	}
-	withSignatureVerifier(verifier) {
-		this.signatureVerifier = verifier;
+	/**
+	* Signs the operations the executor synthesizes: the NOOP an UNDO becomes and
+	* the action a REDO rebuilds. Without one they are stored unsigned. Pooled
+	* workers import `workerSigner` to build the same signer.
+	*/
+	withSigner(signer, workerSigner) {
+		this.signer = signer;
+		this.workerSigner = workerSigner;
 		return this;
 	}
+	/** Whether {@link withSigner} was called. */
+	hasSigner() {
+		return this.signer !== void 0;
+	}
+	/**
+	* Decides at admission whether a key may sign as the user it claims; see
+	* {@link SignatureTrustPolicy} for the contract and the default. Pooled
+	* workers import `workerTrustPolicy` to build the same policy.
+	*/
+	withTrustPolicy(trustPolicy, workerTrustPolicy) {
+		this.trustPolicy = trustPolicy;
+		this.workerTrustPolicy = workerTrustPolicy;
+		return this;
+	}
+	/** Whether {@link withTrustPolicy} was called. */
+	hasTrustPolicy() {
+		return this.trustPolicy !== void 0;
+	}
 	withKysely(kysely) {
 		this.kyselyInstance = kysely;
 		return this;
@@ -8401,8 +8550,7 @@ var ReactorBuilder = class {
 	* this enables the pool — there is no `enabled` flag. Provide `db`
 	* (each worker opens its own Postgres pool; the parent database is built
 	* from it too unless {@link withKysely} is set) or a custom `factory`
-	* transport. `verifier` is imported by the default transport's workers;
-	* omitted = no executor-side signature verification.
+	* transport.
 	*/
 	withWorkerPool(options) {
 		this.workerPool = options;
@@ -8477,11 +8625,12 @@ var ReactorBuilder = class {
 		if (resolver instanceof DocumentModelResolver) resolver.setModelLoadedHook((documentType) => eventBus.emit(ReactorEventTypes.MODEL_LOADED, { documentType }));
 		const queue = this.queueInstance ?? new InMemoryQueue(eventBus, resolver);
 		const jobTracker = new InMemoryJobTracker(eventBus);
-		const writeCache = new KyselyWriteCache(keyframeStore, operationStore, documentModelRegistry, {
+		const cacheConfig = {
 			maxDocuments: this.writeCacheConfig?.maxDocuments ?? 100,
 			ringBufferSize: this.writeCacheConfig?.ringBufferSize ?? 10,
 			keyframeInterval: this.writeCacheConfig?.keyframeInterval ?? 10
-		});
+		};
+		const writeCache = new KyselyWriteCache(keyframeStore, operationStore, documentModelRegistry, cacheConfig);
 		await writeCache.startup();
 		const operationIndex = new KyselyOperationIndex(database);
 		const documentMetaCache = new DocumentMetaCache(operationStore, { maxDocuments: 1e3 });
@@ -8490,20 +8639,24 @@ var ReactorBuilder = class {
 		const executionScope = new KyselyExecutionScope(database, operationStore, operationIndex, keyframeStore, writeCache, documentMetaCache, collectionMembershipCache);
 		let executorManager = this.executorManager;
 		let executorStartCount = this.executorConfig.maxConcurrency ?? 1;
-		if (!executorManager) if (this.workerPool) {
-			const pool = this.workerPool;
-			let factory = pool.factory;
-			if (!factory) {
-				if (pool.db === void 0) throw new Error("unreachable: worker pool configured without db or factory");
-				factory = await this.createDefaultWorkerFactory(pool.numWorkers, pool.db, pool.verifier);
-			}
-			const poolManager = new WorkerPoolJobExecutorManager(factory, eventBus, queue, jobTracker, this.logger, resolver, operationIndex, this.executorConfig.jobTimeoutMs, this.executorConfig.deferredJobTtlMs);
-			executorManager = poolManager;
-			executorStartCount = pool.numWorkers;
-			if (resolver instanceof DocumentModelResolver) resolver.setBroadcastHook((entry) => poolManager.loadModel(entry));
-		} else executorManager = new SimpleJobExecutorManager(() => new SimpleJobExecutor(this.logger, documentModelRegistry, operationStore, eventBus, writeCache, operationIndex, documentMetaCache, collectionMembershipCache, this.driveContainerTypes, this.executorConfig, this.signatureVerifier, executionScope), eventBus, queue, jobTracker, this.logger, resolver, this.executorConfig.jobTimeoutMs, this.executorConfig.deferredJobTtlMs);
+		if (!executorManager) {
+			if (this.workerPool) {
+				const pool = this.workerPool;
+				let factory = pool.factory;
+				if (!factory) {
+					if (pool.db === void 0) throw new Error("unreachable: worker pool configured without db or factory");
+					if (this.signer && !this.workerSigner) this.logger.warn("Worker pool has no signer spec; pooled workers store synthesized operations unsigned");
+					if (this.trustPolicy && !this.workerTrustPolicy) this.logger.warn("Worker pool has no trust policy spec; pooled workers apply the default trust policy");
+					factory = await this.createDefaultWorkerFactory(pool.numWorkers, pool.db);
+				}
+				const poolManager = new WorkerPoolJobExecutorManager(factory, eventBus, queue, jobTracker, this.logger, resolver, operationIndex, this.executorConfig.jobTimeoutMs, this.executorConfig.deferredJobTtlMs);
+				executorManager = poolManager;
+				executorStartCount = pool.numWorkers;
+				if (resolver instanceof DocumentModelResolver) resolver.setBroadcastHook((entry) => poolManager.loadModel(entry));
+			} else executorManager = new SimpleJobExecutorManager(() => new SimpleJobExecutor(this.logger, documentModelRegistry, operationStore, eventBus, writeCache, operationIndex, documentMetaCache, collectionMembershipCache, this.driveContainerTypes, this.executorConfig, executionScope, this.signer, this.trustPolicy), eventBus, queue, jobTracker, this.logger, resolver, this.executorConfig.jobTimeoutMs, this.executorConfig.deferredJobTtlMs);
+		}
 		await executorManager.start(executorStartCount);
-		const callerReadModels = Array.from(new Set([...this.readModels]));
+		const callerReadModels = Array.from(/* @__PURE__ */ new Set([...this.readModels]));
 		const degradedComponents = [];
 		const startDegraded = (component, error) => {
 			degradedComponents.push({
@@ -8517,7 +8670,7 @@ var ReactorBuilder = class {
 			yieldDeadlineMs: this.executorConfig.yieldDeadlineMs ?? 50
 		};
 		const documentViewConsistencyTracker = new ConsistencyTracker();
-		const documentView = new KyselyDocumentView(database, operationStore, operationIndex, writeCache, documentViewConsistencyTracker, featureFlags.documentDecisions ? DeletedDocumentRead.StateAtDeletion : DeletedDocumentRead.NotFound, readModelIndexing);
+		const documentView = new KyselyDocumentView(database, operationStore, operationIndex, writeCache, documentViewConsistencyTracker, featureFlags.documentDecisions ? "StateAtDeletion" : "NotFound", readModelIndexing);
 		try {
 			await documentView.init();
 		} catch (error) {
@@ -8573,7 +8726,7 @@ var ReactorBuilder = class {
 		const reactor = new Reactor(this.logger, documentModelRegistry, queue, jobTracker, readModelCoordinator, this.features, documentView, documentIndexer, operationStore, eventBus, executorManager);
 		let syncModule = void 0;
 		if (this.channelScheme) {
-			const factory = this.channelScheme === ChannelScheme.CONNECT ? new GqlRequestChannelFactory(this.logger, this.jwtHandler, queue) : new GqlResponseChannelFactory(this.logger);
+			const factory = this.channelScheme === "connect" ? new GqlRequestChannelFactory(this.logger, this.jwtHandler, queue) : new GqlResponseChannelFactory(this.logger);
 			syncModule = new SyncBuilder().withChannelFactory(factory).buildModule(reactor, this.logger, operationIndex, eventBus, database, this.driveContainerTypes);
 			await syncModule.syncManager.startup();
 		} else if (this.syncBuilder) {
@@ -8674,7 +8827,7 @@ var ReactorBuilder = class {
 			poolInstrumentations.push(forwarder);
 			this.instrumentedPools.push(forwarder);
 		}
-		const { ProjectionShardManager } = await import("./projection-shard-manager-CUo4bF4O.js");
+		const { ProjectionShardManager } = await import("./projection-shard-manager-B-j8VYzA.js");
 		const manager = new ProjectionShardManager({
 			shardCount: config.shardCount,
 			db,
@@ -8708,7 +8861,7 @@ var ReactorBuilder = class {
 		return manager;
 	}
 	async createDefaultProjectionWorkerFactory() {
-		const [{ createProjectionThreadTransport }, { projectionWorkerEntryPath }] = await Promise.all([import("./transport-CuogVKN_.js"), import("./projection-worker-wI4PwcV2.js")]);
+		const [{ createProjectionThreadTransport }, { projectionWorkerEntryPath }] = await Promise.all([import("./transport-B3G50KVd.js"), import("./projection-worker-D8uNFdwX.js")]);
 		return () => createProjectionThreadTransport(projectionWorkerEntryPath);
 	}
 	/**
@@ -8716,11 +8869,11 @@ var ReactorBuilder = class {
 	* custom `factory`. Each worker spawns a real `node:worker_threads`
 	* Worker pointing at the compiled `worker/entry.js`.
 	*/
-	async createDefaultWorkerFactory(numWorkers, db, signatureVerifier) {
+	async createDefaultWorkerFactory(numWorkers, db) {
 		const [{ WorkerHandle }, { createThreadTransport }, { workerEntryPath }] = await Promise.all([
-			import("./worker-handle-CrERzl8s.js"),
-			import("./transport-ByGviWdZ.js"),
-			import("./worker-g03lNM42.js").then((n) => n.n)
+			import("./worker-handle-CwWNTpUg.js"),
+			import("./transport-CZDHzfvy.js"),
+			Promise.resolve().then(() => worker_exports)
 		]);
 		const poolConfig = {
 			enabled: true,
@@ -8740,9 +8893,10 @@ var ReactorBuilder = class {
 				initPayload: {
 					poolConfig,
 					db,
-					signatureVerifier,
 					models,
-					executorConfig: this.executorConfig
+					executorConfig: this.executorConfig,
+					signer: this.workerSigner,
+					trustPolicy: this.workerTrustPolicy
 				},
 				logger,
 				poolInstrumentation
@@ -8985,30 +9139,6 @@ function createHybridProjectionCoordinatorFactory(options = {}) {
 	};
 }
 //#endregion
-//#region src/signer/passthrough-signer.ts
-/**
-* A no-op signer that returns empty values for all methods.
-* Used when signing is not required.
-*/
-var PassthroughSigner = class {
-	publicKey = {};
-	sign() {
-		return Promise.resolve(new Uint8Array(0));
-	}
-	verify() {
-		return Promise.resolve();
-	}
-	signAction() {
-		return Promise.resolve([
-			"",
-			"",
-			"",
-			"",
-			""
-		]);
-	}
-};
-//#endregion
 //#region src/core/reactor-client-builder.ts
 /**
 * Builder class for constructing ReactorClient instances with proper configuration
@@ -9021,7 +9151,10 @@ var ReactorClientBuilder = class {
 	documentIndexer;
 	documentView;
 	signer;
-	signatureVerifier;
+	workerSigner;
+	trustPolicy;
+	workerTrustPolicy;
+	createSignaturePolicy = DEFAULT_SIGNATURE_POLICY;
 	subscriptionManager;
 	jobAwaiter;
 	documentModelLoader;
@@ -9055,17 +9188,28 @@ var ReactorClientBuilder = class {
 		return this;
 	}
 	/**
-	* Sets the signer configuration for signing and verifying actions.
-	*
-	* @param config - Either an ISigner for signing only, or a SignerConfig for both signing and verification
+	* Signs submitted actions, and the operations a reactor built from
+	* `withReactorBuilder` synthesizes unless that builder has its own signer.
+	* A `trustPolicy` reaches that builder unless it has its own.
 	*/
 	withSigner(config) {
 		if ("signer" in config) {
 			this.signer = config.signer;
-			this.signatureVerifier = config.verifier;
+			this.workerSigner = config.workerSigner;
+			this.trustPolicy = config.trustPolicy;
+			this.workerTrustPolicy = config.workerTrustPolicy;
 		} else this.signer = config;
 		return this;
 	}
+	/**
+	* What the client creates new documents as when a call does not say:
+	* `v2-required` (the default) or `legacy`, for a fleet with peers that
+	* predate v2-required documents. Existing documents keep their policy.
+	*/
+	withCreateSignaturePolicy(policy) {
+		this.createSignaturePolicy = policy;
+		return this;
+	}
 	withSubscriptionManager(subscriptionManager) {
 		this.subscriptionManager = subscriptionManager;
 		return this;
@@ -9130,8 +9274,9 @@ var ReactorClientBuilder = class {
 		let documentView;
 		let reactorModule;
 		if (this.reactorBuilder) {
-			if (this.signatureVerifier) this.reactorBuilder.withSignatureVerifier(this.signatureVerifier);
 			if (this.documentModelLoader) this.reactorBuilder.withDocumentModelLoader(this.documentModelLoader);
+			if (this.signer && !this.reactorBuilder.hasSigner()) this.reactorBuilder.withSigner(this.signer, this.workerSigner);
+			if (this.trustPolicy && !this.reactorBuilder.hasTrustPolicy()) this.reactorBuilder.withTrustPolicy(this.trustPolicy, this.workerTrustPolicy);
 			reactorModule = await this.reactorBuilder.buildModule();
 			reactor = reactorModule.reactor;
 			eventBus = reactorModule.eventBus;
@@ -9149,7 +9294,7 @@ var ReactorClientBuilder = class {
 		const jobAwaiter = this.jobAwaiter ?? new JobAwaiter(eventBus, (jobId, signal) => reactor.getJobStatus(jobId, signal));
 		const decisionModel = reactorModule ? readDecisionModel(reactorModule.featureFlags, reactorModule.documentModelRegistry) : void 0;
 		return {
-			client: new ReactorClient(this.logger, reactor, signer, subscriptionManager, jobAwaiter, documentIndexer, documentView, this.readGate ?? this.resolveReadGate(reactorModule, documentView, decisionModel), this.resolveActionEvaluation(reactorModule, decisionModel)),
+			client: new ReactorClient(this.logger, reactor, signer, subscriptionManager, jobAwaiter, documentIndexer, documentView, this.readGate ?? this.resolveReadGate(reactorModule, documentView, decisionModel), this.resolveActionEvaluation(reactorModule, decisionModel), this.createSignaturePolicy),
 			reactor,
 			eventBus,
 			documentIndexer,
@@ -9187,6 +9332,38 @@ function driveIdFromUrl(url) {
 	return url.split("/").pop() ?? "";
 }
 //#endregion
+//#region src/signer/types.ts
+const SIGNATURE_REFUSAL_CODES = [
+	"UNSIGNED_REQUIRED",
+	"UNSIGNED_IDENTITY",
+	"KEY_MISMATCH",
+	"MALFORMED_TUPLE",
+	"TIMESTAMP_MISMATCH",
+	"HASH_MISMATCH",
+	"BAD_SIGNATURE",
+	"SCHEME_BELOW_POLICY",
+	"ID_MISMATCH",
+	"DUPLICATE_ACTION",
+	"SIGNER_UNAUTHORIZED"
+];
+//#endregion
+//#region src/executor/worker/index.ts
+var worker_exports = /* @__PURE__ */ __exportAll({
+	createForwardingLogger: () => createForwardingLogger,
+	errorToInfo: () => errorToInfo,
+	sanitizeArg: () => sanitizeArg,
+	workerEntryPath: () => workerEntryPath
+});
+function resolveWorkerEntryPath() {
+	const url = new URL("./entry.js", import.meta.url);
+	if (url.protocol !== "file:") return url.href;
+	let pathname = decodeURIComponent(url.pathname);
+	if (/^\/[A-Za-z]:[/\\]/.test(pathname)) pathname = pathname.slice(1);
+	return pathname;
+}
+/** Absolute path to the worker entry script for use with `new Worker(workerEntryPath)`. */
+const workerEntryPath = resolveWorkerEntryPath();
+//#endregion
 //#region src/decision/sync-scope-gate.ts
 /** What a subject may read of a document that is not there to be read. */
 const META_ONLY = (scope) => ALWAYS_READABLE_SCOPES.has(scope);
@@ -9198,6 +9375,9 @@ const META_ONLY = (scope) => ALWAYS_READABLE_SCOPES.has(scope);
 * path's own job, and it is the only thing this adds to the gate it wraps.
 */
 var SyncScopeGate = class {
+	gate;
+	documentView;
+	logger;
 	constructor(gate, documentView, logger) {
 		this.gate = gate;
 		this.documentView = documentView;
@@ -9414,6 +9594,6 @@ var DocumentIntegrityService = class {
 	}
 };
 //#endregion
-export { ALWAYS_READABLE_SCOPES, APPEND_CONDITION_FAILED_PREFIX, AppendConditionFailedError, AuthEnforcementDisabledError, BareReadGate, BaseReadModel, ChannelError, ChannelErrorSource, ChannelScheme, ConsistencyTracker, DEFAULT_COMMIT_CHUNK_SIZE, DEFAULT_DRIVE_CONTAINER_TYPES, DEFAULT_READ_MODEL_YIELD_DEADLINE_MS, DOCUMENT_INDEXER_READ_MODEL, DOCUMENT_VIEW_READ_MODEL, DRIVE_AUTH_ERROR_MESSAGES, DefaultSubscriptionErrorHandler, DeletedDocumentRead, DocumentAlreadyExistsError, DocumentChangeType, DocumentExistence, DocumentIntegrityService, DocumentModelRegistry, DocumentModelResolver, DriveClient, DriveCollectionId, DriveRequestError, DuplicateManifestError, DuplicateModuleError, DuplicateOperationError, EventBus, EventBusAggregateError, GqlRequestChannel, GqlRequestChannelFactory, GqlResponseChannel, GqlResponseChannelFactory, HybridProjectionCoordinator, SimpleJobExecutor as InMemoryJobExecutor, SimpleJobExecutor, InMemoryJobTracker, InMemoryQueue, IntervalPollTimer, InvalidModuleError, JobAwaiter, JobExecutorEventTypes, JobStatus, KyselyDocumentIndexer, KyselyDocumentView, KyselyKeyframeStore, KyselyOperationStore, KyselySyncCursorStorage, KyselySyncRemoteStorage, KyselyWriteCache, Mailbox, ModelReadGate, ModuleNotFoundError, NullDocumentModelResolver, OptimisticLockError, PollBehavior, PollingChannelError, ProcessorManager, PropagationMode, QueueEventTypes, REACTOR_SCHEMA, RECOVERABLE_GRAPHQL_ERROR_CODES, Reactor, ReactorBuilder, ReactorClient, ReactorClientBuilder, ReactorEventTypes, ReactorSubscriptionManager, ReadModelCoordinator, RelationalDbProcessor, RelationshipChangeType, RelationshipNotFoundError, RetryAccounting, RevisionMismatchError, SeededStateReader, SimpleJobExecutorManager, SyncBuilder, SyncEventTypes, SyncOperation, SyncOperationAggregateError, SyncOperationStatus, SyncScopeGate, SyncStatus, SyncStatusTracker, addRelationshipAction, authDecisionModel, batchOperationsByDocument, buildDecisionModel, classifyJobFailure, consolidateSyncOperations, createDocumentAction, createForwardingLogger, createHybridProjectionCoordinatorFactory, createMutableShutdownStatus, createReactorHostModuleBase, createRelationalDb, decideAtHead, defaultReadModelIndexingConfig, deleteDocumentAction, documentActions, documentDecisionModel, driveIdFromUrl, envelopesToSyncOperations, errorToInfo, firstOutOfOrderPair, getMigrationStatus, instrumentPgPool, isDriveAuthError, isRecoverableGraphQLError, makeConsistencyKey, parseDriveUrl, parsePagingOptions, quarantinesDocument, readDecisionModel, removeRelationshipAction, runMigrations, sanitizeArg, selectDecisionModel, supportsLiveReadModelRegistration, syncOperationErrorType, trimMailboxFromAckOrdinal, unchunkedReadModelIndexingConfig, updateRelationshipAction, upgradeDocumentAction, workerEntryPath };
+export { ALWAYS_READABLE_SCOPES, APPEND_CONDITION_FAILED_PREFIX, AppendConditionFailedError, AuthEnforcementDisabledError, BareReadGate, BaseReadModel, ChannelError, ChannelErrorSource, ChannelScheme, ConsistencyTracker, DEFAULT_COMMIT_CHUNK_SIZE, DEFAULT_DRIVE_CONTAINER_TYPES, DEFAULT_READ_MODEL_YIELD_DEADLINE_MS, DOCUMENT_INDEXER_READ_MODEL, DOCUMENT_VIEW_READ_MODEL, DRIVE_AUTH_ERROR_MESSAGES, DefaultSubscriptionErrorHandler, DeletedDocumentRead, DocumentAlreadyExistsError, DocumentChangeType, DocumentExistence, DocumentIntegrityService, DocumentModelRegistry, DocumentModelResolver, DriveClient, DriveCollectionId, DriveRequestError, DuplicateManifestError, DuplicateModuleError, DuplicateOperationError, EventBus, EventBusAggregateError, GqlRequestChannel, GqlRequestChannelFactory, GqlResponseChannel, GqlResponseChannelFactory, HybridProjectionCoordinator, SimpleJobExecutor as InMemoryJobExecutor, SimpleJobExecutor, InMemoryJobTracker, InMemoryQueue, IntervalPollTimer, InvalidModuleError, InvalidSignatureError, JobAwaiter, JobExecutorEventTypes, JobStatus, KyselyDocumentIndexer, KyselyDocumentView, KyselyKeyframeStore, KyselyOperationStore, KyselySyncCursorStorage, KyselySyncRemoteStorage, KyselyWriteCache, Mailbox, ModelReadGate, ModuleNotFoundError, NullDocumentModelResolver, OptimisticLockError, PollBehavior, PollingChannelError, ProcessorManager, PropagationMode, QueueEventTypes, REACTOR_SCHEMA, RECOVERABLE_GRAPHQL_ERROR_CODES, Reactor, ReactorBuilder, ReactorClient, ReactorClientBuilder, ReactorEventTypes, ReactorSubscriptionManager, ReadModelCoordinator, RelationalDbProcessor, RelationshipChangeType, RelationshipNotFoundError, RetryAccounting, RevisionMismatchError, SIGNATURE_REFUSAL_CODES, SeededStateReader, SimpleJobExecutorManager, SyncBuilder, SyncEventTypes, SyncOperation, SyncOperationAggregateError, SyncOperationStatus, SyncScopeGate, SyncStatus, SyncStatusTracker, addRelationshipAction, authDecisionModel, batchOperationsByDocument, buildDecisionModel, classifyJobFailure, consolidateSyncOperations, createDocumentAction, createForwardingLogger, createHybridProjectionCoordinatorFactory, createMutableShutdownStatus, createReactorHostModuleBase, createRelationalDb, decideAtHead, defaultReadModelIndexingConfig, deleteDocumentAction, documentActions, documentDecisionModel, driveIdFromUrl, envelopesToSyncOperations, errorToInfo, firstOutOfOrderPair, getMigrationStatus, instrumentPgPool, isDriveAuthError, isRecoverableGraphQLError, makeConsistencyKey, parseDriveUrl, parsePagingOptions, quarantinesDocument, readDecisionModel, removeRelationshipAction, runMigrations, sanitizeArg, selectDecisionModel, supportsLiveReadModelRegistration, syncOperationErrorType, trimMailboxFromAckOrdinal, unchunkedReadModelIndexingConfig, updateRelationshipAction, upgradeDocumentAction, verifyActionSignature, workerEntryPath };
 
 //# sourceMappingURL=index.js.map