@powerhousedao/reactor 6.2.3-dev.24 → 6.2.3-dev.26

package/dist/index.d.ts

@@ -1,11 +1,10 @@
 import { Action, ActionSigner, AuthRequest, AuthSubject, CreateDocumentActionInput, DocumentModelModule, ISigner, Operation, OperationContext, OperationOutcome, OperationWithContext, OperationWithContext as OperationWithContext$1, PHAuthState, PHDocument, PHDocumentState, SignaturePolicy, SignatureVerificationHandler, UpgradeDocumentActionInput, UpgradeManifest, UpgradeReducer, UpgradeTransition, actions as documentActions } from "@powerhousedao/shared/document-model";
 import { DocumentDriveDocument, DriveInput, FolderNode, Node } from "@powerhousedao/shared/document-drive";
 import { ILogger } from "document-model";
-import * as kysely from "kysely";
 import { Generated, Insertable, Kysely, Transaction } from "kysely";
 import { IProcessor, IProcessorHostModuleBase, IProcessorHostModuleBase as IProcessorHostModuleBase$1, IProcessorManager, IProcessorManager as IProcessorManager$1, IRelationalDb, ProcessorApp, ProcessorFactory, ProcessorFactory as ProcessorFactory$1, ProcessorFactoryBuilder, ProcessorFilter, ProcessorRecord, ProcessorRecord as ProcessorRecord$1, ProcessorStatus, RelationalDbProcessor, TrackedProcessor, TrackedProcessor as TrackedProcessor$1, createRelationalDb } from "@powerhousedao/shared/processors";
+import "node:worker_threads";
 import { Pool } from "pg";
-
 //#region src/attachments/types.d.ts
 /**
  * Content hash of the attachment data. This is the primary identifier.
@@ -29,15 +28,15 @@ type AttachmentRef = `attachment://v${number}:${string}`;
 /**
  * Creates a CREATE_DOCUMENT action for document creation.
  */
-declare function createDocumentAction(input: CreateDocumentActionInput): Action;
+export declare function createDocumentAction(input: CreateDocumentActionInput): Action;
 /**
  * Creates an UPGRADE_DOCUMENT action to set initial document state.
  */
-declare function upgradeDocumentAction(input: UpgradeDocumentActionInput): Action;
+export declare function upgradeDocumentAction(input: UpgradeDocumentActionInput): Action;
 /**
  * Creates a DELETE_DOCUMENT action for document deletion.
  */
-declare function deleteDocumentAction(documentId: string): Action;
+export declare function deleteDocumentAction(documentId: string): Action;
 /**
  * Creates an ADD_RELATIONSHIP action that records a directed edge from
  * `sourceId` to `targetId` with an arbitrary `relationshipType` and optional
@@ -45,16 +44,16 @@ declare function deleteDocumentAction(documentId: string): Action;
  * define their own type strings such as `"drive/child"` and attach
  * domain-specific metadata.
  */
-declare function addRelationshipAction(sourceId: string, targetId: string, relationshipType: string, metadata?: Record<string, unknown>): Action;
+export declare function addRelationshipAction(sourceId: string, targetId: string, relationshipType: string, metadata?: Record<string, unknown>): Action;
 /**
  * Creates an UPDATE_RELATIONSHIP action to replace a relationship's metadata
  * without losing its createdAt ordering.
  */
-declare function updateRelationshipAction(sourceId: string, targetId: string, relationshipType: string, metadata: Record<string, unknown> | null): Action;
+export declare function updateRelationshipAction(sourceId: string, targetId: string, relationshipType: string, metadata: Record<string, unknown> | null): Action;
 /**
  * Creates a REMOVE_RELATIONSHIP action to remove a parent-child relationship.
  */
-declare function removeRelationshipAction(sourceId: string, targetId: string, relationshipType?: string): Action;
+export declare function removeRelationshipAction(sourceId: string, targetId: string, relationshipType?: string): Action;
 //#endregion
 //#region src/queue/types.d.ts
 /**
@@ -83,7 +82,7 @@ declare enum JobQueueState {
  * - `ExemptFromLimit`: not a fault, so the attempt is not charged to the job.
  *   Used for concurrency conflicts, where the retry does new work.
  */
-declare enum RetryAccounting {
+export declare enum RetryAccounting {
   CountAgainstLimit = "count-against-limit",
   ExemptFromLimit = "exempt-from-limit"
 }
@@ -102,25 +101,39 @@ interface IJobExecutionHandle {
  * Represents a job to be executed by the job executor
  */
 type Job = {
-  /** Unique identifier for the job */id: string; /** Classification of the job so executors can switch behavior */
-  kind: JobKind; /** The document ID this job operates on */
-  documentId: string; /** The scope of the operations */
-  scope: string; /** The branch of the operations */
-  branch: string; /** The actions to be executed (processed sequentially) */
-  actions: Action[]; /** Pre-existing operations to import (used for load jobs) */
-  operations: Operation[]; /** Timestamp when the job was created */
-  createdAt: string; /** The hint for the queue to use for ordering the job */
-  queueHint: string[]; /** Number of retry attempts */
-  retryCount?: number; /** Maximum number of retries allowed */
-  maxRetries?: number; /** Last error if job failed */
-  lastError?: ErrorInfo$1; /** History of all errors from each attempt (ordered) */
-  errorHistory: ErrorInfo$1[]; /** Metadata that flows through the job lifecycle */
+  /** Unique identifier for the job */
+  id: string;
+  /** Classification of the job so executors can switch behavior */
+  kind: JobKind;
+  /** The document ID this job operates on */
+  documentId: string;
+  /** The scope of the operations */
+  scope: string;
+  /** The branch of the operations */
+  branch: string;
+  /** The actions to be executed (processed sequentially) */
+  actions: Action[];
+  /** Pre-existing operations to import (used for load jobs) */
+  operations: Operation[];
+  /** Timestamp when the job was created */
+  createdAt: string;
+  /** The hint for the queue to use for ordering the job */
+  queueHint: string[];
+  /** Number of retry attempts */
+  retryCount?: number;
+  /** Maximum number of retries allowed */
+  maxRetries?: number;
+  /** Last error if job failed */
+  lastError?: ErrorInfo$1;
+  /** History of all errors from each attempt (ordered) */
+  errorHistory: ErrorInfo$1[];
+  /** Metadata that flows through the job lifecycle */
   meta: JobMeta;
 };
 /**
  * Event types for the queue system
  */
-declare const QueueEventTypes: {
+export declare const QueueEventTypes: {
   readonly JOB_AVAILABLE: 10000;
 };
 /**
@@ -181,14 +194,14 @@ type ShutdownStatus = {
 /**
  * Enum that determines deletion propagation.
  */
-declare enum PropagationMode {
+export declare enum PropagationMode {
   None = "none",
   Cascade = "cascade"
 }
 /**
  * Enum that describes the type of relationship change.
  */
-declare enum RelationshipChangeType {
+export declare enum RelationshipChangeType {
   Added = "added",
   Removed = "removed"
 }
@@ -211,7 +224,8 @@ type JobMeta = BatchMeta & Record<string, unknown>;
  */
 type SubmittedActionResult = {
   actionId: string;
-  scope: string; /** The index the operation occupies in its scope. */
+  scope: string;
+  /** The index the operation occupies in its scope. */
   index: number;
 } & OperationOutcome;
 /**
@@ -223,14 +237,17 @@ type SubmittedActionResult = {
  * actions was rejected.
  */
 type JobResultSummary = {
-  /** One entry per submitted action that produced an operation, in write order. */actions: SubmittedActionResult[]; /** False when any submitted action hit a reducer error or was denied. */
+  /** One entry per submitted action that produced an operation, in write order. */
+  actions: SubmittedActionResult[];
+  /** False when any submitted action hit a reducer error or was denied. */
   allApplied: boolean;
 };
 /**
  * Describes the current state of a job.
  */
 type JobInfo = {
-  id: string; /** The document this job operates on; empty string when the job is unknown. */
+  id: string;
+  /** The document this job operates on; empty string when the job is unknown. */
   documentId: string;
   status: JobStatus;
   createdAtUtcIso: string;
@@ -259,7 +276,7 @@ type JobInfo = {
 /**
  * Job execution statuses
  */
-declare enum JobStatus {
+export declare enum JobStatus {
   /** Job is queued but not yet started */
   PENDING = "PENDING",
   /** Job is currently being executed */
@@ -311,7 +328,6 @@ type PagedResults<T> = {
   options: PagingOptions;
   next?: () => Promise<PagedResults<T>>;
   nextCursor?: string;
-  totalCount?: number;
 };
 /**
  * A string key in the format `documentId:scope:branch` used to identify a consistency checkpoint.
@@ -391,10 +407,10 @@ type ReadModelRegistrationStage = "pre_ready" | "post_ready";
 interface ILiveReadModelCoordinator extends IReadModelCoordinator {
   addReadModel(readModel: IReadModel, stage: ReadModelRegistrationStage): void;
 }
-declare function supportsLiveReadModelRegistration(coordinator: IReadModelCoordinator): coordinator is ILiveReadModelCoordinator;
+export declare function supportsLiveReadModelRegistration(coordinator: IReadModelCoordinator): coordinator is ILiveReadModelCoordinator;
 //#endregion
 //#region src/sync/types.d.ts
-declare enum ChannelScheme {
+export declare enum ChannelScheme {
   CONNECT = "connect",
   SWITCHBOARD = "switchboard"
 }
@@ -410,7 +426,7 @@ type JwtHandler = (url: string) => Promise<string | undefined>;
  * - `Manual`: the channel registers and connects but never ticks on its own.
  *   Callers must invoke ISyncManager.triggerPull(name) to fetch.
  */
-declare enum PollBehavior {
+export declare enum PollBehavior {
   Auto = "auto",
   Manual = "manual"
 }
@@ -459,26 +475,30 @@ type SyncEnvelope = {
   key?: string;
   dependsOn?: string[];
 };
-declare enum SyncOperationStatus {
+export declare enum SyncOperationStatus {
   Unknown = -1,
   TransportPending = 0,
   ExecutionPending = 1,
   Applied = 2,
   Error = 3
 }
-declare enum ChannelErrorSource {
+export declare enum ChannelErrorSource {
   None = "none",
   Channel = "channel",
   Inbox = "inbox",
   Outbox = "outbox"
 }
-type SyncOperationErrorType = "SIGNATURE_INVALID" | "HASH_MISMATCH" | "LIBRARY_ERROR" | "MISSING_OPERATIONS" | "EXCESSIVE_SHUFFLE" | "GRACEFUL_ABORT"
+type SyncOperationErrorType = "SIGNATURE_INVALID" | "HASH_MISMATCH" | "LIBRARY_ERROR" | "MISSING_OPERATIONS" | "EXCESSIVE_SHUFFLE" | "GRACEFUL_ABORT" |
 /**
  * An arriving auth operation did not exceed the local auth head. Exempt from
  * quarantine, because reconciling the two policies needs the traffic a
  * quarantine would stop.
  */
-| "AUTH_TIMESTAMP_NOT_MONOTONIC" /** An arriving operation carried a timestamp that is not an ISO-8601 instant. */ | "INVALID_TIMESTAMP" /** No classification applies, including rows written before the field. */ | "UNCLASSIFIED";
+"AUTH_TIMESTAMP_NOT_MONOTONIC" |
+/** An arriving operation carried a timestamp that is not an ISO-8601 instant. */
+"INVALID_TIMESTAMP" |
+/** No classification applies, including rows written before the field. */
+"UNCLASSIFIED";
 type ChannelHealth = {
   state: "idle" | "running" | "error";
   lastSuccessUtcMs?: number;
@@ -527,7 +547,7 @@ type RemoteRecord = {
  * These events track the sync progress of a job's operations to remotes.
  * Uses a separate namespace (20000 range) from ReactorEventTypes (10000 range).
  */
-declare const SyncEventTypes: {
+export declare const SyncEventTypes: {
   readonly SYNC_PENDING: 20001;
   readonly SYNC_SUCCEEDED: 20002;
   readonly SYNC_FAILED: 20003;
@@ -602,27 +622,27 @@ type SyncResult = {
 /**
  * Thrown when an operation with the same identity already exists in the store.
  */
-declare class DuplicateOperationError extends Error {
+export declare class DuplicateOperationError extends Error {
   constructor(description: string);
 }
 /**
  * Thrown when a concurrent write conflict is detected during an atomic apply.
  */
-declare class OptimisticLockError extends Error {
+export declare class OptimisticLockError extends Error {
   constructor(message: string);
 }
 /**
  * Thrown when the caller-provided revision does not match the current
  * stored revision, indicating a stale read.
  */
-declare class RevisionMismatchError extends Error {
+export declare class RevisionMismatchError extends Error {
   constructor(expected: number, actual: number);
 }
 /**
  * A create based on an empty stream that already has operations: the id is
  * taken, and no retry can resolve it. Matched by `name`, all the RPC boundary keeps.
  */
-declare class DocumentAlreadyExistsError extends Error {
+export declare class DocumentAlreadyExistsError extends Error {
   readonly documentId: string;
   constructor(documentId: string, scope: string, headRevision: number);
   static isError(error: unknown): error is DocumentAlreadyExistsError;
@@ -645,12 +665,12 @@ type AppendCondition = {
   streams: AppendConditionStream[];
 };
 /** Error history keeps messages, not classes, so failures match by prefix. */
-declare const APPEND_CONDITION_FAILED_PREFIX = "Append condition failed: ";
+export declare const APPEND_CONDITION_FAILED_PREFIX = "Append condition failed: ";
 /**
  * A read-set stream grew before the append committed. A concurrency
  * conflict, not a fault: the caller retries against the new stream heads.
  */
-declare class AppendConditionFailedError extends Error {
+export declare class AppendConditionFailedError extends Error {
   readonly condition: AppendCondition;
   constructor(condition: AppendCondition);
   static isError(error: unknown): error is AppendConditionFailedError;
@@ -670,7 +690,9 @@ interface AtomicTxn {
  * revision field and lastModified timestamp.
  */
 type DocumentRevisions = {
-  /** Map of scope to operation index for that scope */revision: Record<string, number>; /** The largest operation timestamp in the document, across every scope. */
+  /** Map of scope to operation index for that scope */
+  revision: Record<string, number>;
+  /** The largest operation timestamp in the document, across every scope. */
   latestTimestamp: string;
 };
 /**
@@ -876,7 +898,7 @@ interface OperationFilter {
 /**
  * Which sense of "exists" a caller of {@link IDocumentView.exists} means.
  */
-declare enum DocumentExistence {
+export declare enum DocumentExistence {
   /**
    * A document that is present and not deleted. This is the question a read
    * asks: a deleted document is not readable, so it does not exist.
@@ -1232,7 +1254,8 @@ type DeadLetterRecord = {
   branch: string;
   operations: OperationWithContext$1[];
   errorSource: ChannelErrorSource;
-  errorMessage: string; /** Why it failed, in the closed set sync classifies failures into. */
+  errorMessage: string;
+  /** Why it failed, in the closed set sync classifies failures into. */
   errorType: SyncOperationErrorType;
 };
 /**
@@ -1353,7 +1376,7 @@ interface IOperationIndex {
  * `driveCollectionId(branch, driveId)` output, so existing `document_collections`
  * rows and persisted remotes remain valid without migration.
  */
-declare class DriveCollectionId {
+export declare class DriveCollectionId {
   readonly driveId: string;
   readonly branch: string;
   private constructor();
@@ -1374,16 +1397,22 @@ declare class DriveCollectionId {
  * Configuration options for the write cache
  */
 type WriteCacheConfig = {
-  /** Maximum number of document streams to cache (LRU eviction). Default: 1000 */maxDocuments: number; /** Number of snapshots to keep in each document's ring buffer. Default: 10 */
-  ringBufferSize: number; /** Persist a keyframe snapshot every N revisions. Default: 10 */
+  /** Maximum number of document streams to cache (LRU eviction). Default: 1000 */
+  maxDocuments: number;
+  /** Number of snapshots to keep in each document's ring buffer. Default: 10 */
+  ringBufferSize: number;
+  /** Persist a keyframe snapshot every N revisions. Default: 10 */
   keyframeInterval: number;
 };
 /**
  * Unique identifier for a document stream
  */
 type DocumentStreamKey = {
-  /** Document identifier */documentId: string; /** Operation scope */
-  scope: string; /** Branch name */
+  /** Document identifier */
+  documentId: string;
+  /** Operation scope */
+  scope: string;
+  /** Branch name */
   branch: string;
 };
 /**
@@ -1402,15 +1431,20 @@ declare enum SnapshotPosition {
  * A cached document snapshot at a specific revision
  */
 type CachedSnapshot = {
-  /** The revision number of this snapshot */revision: number; /** The document state at this revision */
-  document: PHDocument; /** Where this snapshot sat in the stream when it was stored */
+  /** The revision number of this snapshot */
+  revision: number;
+  /** The document state at this revision */
+  document: PHDocument;
+  /** Where this snapshot sat in the stream when it was stored */
   position: SnapshotPosition;
 };
 /**
  * Serialized keyframe snapshot for K/V store persistence
  */
 type KeyframeSnapshot = {
-  /** The revision number of this keyframe */revision: number; /** Serialized document state */
+  /** The revision number of this keyframe */
+  revision: number;
+  /** Serialized document state */
   document: string;
 };
 //#endregion
@@ -1556,7 +1590,8 @@ type CachedDocumentMeta = {
   /**
    * The document type (from header), cached for convenience.
    */
-  documentType: string; /** From the CREATE_DOCUMENT input, which fixes them for the document's life. */
+  documentType: string;
+  /** From the CREATE_DOCUMENT input, which fixes them for the document's life. */
   protocolVersions: {
     [protocol: string]: number;
   } | undefined;
@@ -2015,7 +2050,7 @@ type DocumentStream = {
  * await cache.shutdown();
  * ```
  */
-declare class KyselyWriteCache implements IWriteCache {
+export declare class KyselyWriteCache implements IWriteCache {
   private streams;
   private lruTracker;
   private keyframeStore;
@@ -2174,7 +2209,7 @@ declare class KyselyWriteCache implements IWriteCache {
 }
 //#endregion
 //#region src/storage/kysely/store.d.ts
-declare class KyselyOperationStore implements IOperationStore {
+export declare class KyselyOperationStore implements IOperationStore {
   private db;
   private trx?;
   constructor(db: Kysely<Database$1>);
@@ -2226,7 +2261,7 @@ declare class KyselyOperationStore implements IOperationStore {
 }
 //#endregion
 //#region src/storage/kysely/keyframe-store.d.ts
-declare class KyselyKeyframeStore implements IKeyframeStore {
+export declare class KyselyKeyframeStore implements IKeyframeStore {
   private db;
   private trx?;
   constructor(db: Kysely<Database$1>);
@@ -2263,17 +2298,24 @@ interface IExecutionScope {
  * Represents the result of a job execution
  */
 type JobResult = {
-  /** The job that was executed */job: Job; /** Whether the job executed successfully */
-  success: boolean; /** Error if the job failed */
-  error?: Error; /** The operations generated from the actions (if successful) */
+  /** The job that was executed */
+  job: Job;
+  /** Whether the job executed successfully */
+  success: boolean;
+  /** Error if the job failed */
+  error?: Error;
+  /** The operations generated from the actions (if successful) */
   operations?: Operation[];
   /**
    * Operations with context (includes ephemeral resultingState).
    * Used for emitting to IDocumentView via event bus.
    */
-  operationsWithContext?: OperationWithContext$1[]; /** Timestamp when the job execution completed */
-  completedAt?: string; /** Duration of job execution in milliseconds */
-  duration?: number; /** Any additional metadata from the execution */
+  operationsWithContext?: OperationWithContext$1[];
+  /** Timestamp when the job execution completed */
+  completedAt?: string;
+  /** Duration of job execution in milliseconds */
+  duration?: number;
+  /** Any additional metadata from the execution */
   metadata?: Record<string, any>;
 };
 /**
@@ -2311,14 +2353,20 @@ type ReactorFeatureFlags = {
  * Configuration options for the job executor
  */
 type JobExecutorConfig = {
-  /** Feature flags; anything unset is off. */featureFlags?: Partial<ReactorFeatureFlags>; /** Maximum number of conflicting operations to skip when reshuffling. */
-  maxSkipThreshold?: number; /** Maximum number of concurrent jobs to execute */
-  maxConcurrency?: number; /** Maximum time in milliseconds a job can run before being considered timed out */
+  /** Feature flags; anything unset is off. */
+  featureFlags?: Partial<ReactorFeatureFlags>;
+  /** Maximum number of conflicting operations to skip when reshuffling. */
+  maxSkipThreshold?: number;
+  /** Maximum number of concurrent jobs to execute */
+  maxConcurrency?: number;
+  /** Maximum time in milliseconds a job can run before being considered timed out */
   jobTimeoutMs?: number;
   /** How long a job whose document is missing waits for it before failing.
    *  Unbounded deferral never resolves the caller awaiting the job. */
-  deferredJobTtlMs?: number; /** Base delay in milliseconds for exponential backoff retries */
-  retryBaseDelayMs?: number; /** Maximum delay in milliseconds for exponential backoff retries */
+  deferredJobTtlMs?: number;
+  /** Base delay in milliseconds for exponential backoff retries */
+  retryBaseDelayMs?: number;
+  /** Maximum delay in milliseconds for exponential backoff retries */
   retryMaxDelayMs?: number;
   /** Maximum elapsed milliseconds before yielding to the main thread between actions.
    *  Keeps the UI responsive when processing large batches. */
@@ -2341,13 +2389,14 @@ type JobExecutorConfig = {
    * and PGlite; DefaultExecutionScope opens no transaction and is used only by
    * unit-test harnesses, which therefore see writes survive a failed job.
    */
-  batchApplies?: boolean; /** Defaults to `enforce`; `log` counts refusals and admits the write. */
+  batchApplies?: boolean;
+  /** Defaults to `enforce`; `log` counts refusals and admits the write. */
   signatureVerification?: SignatureVerificationMode;
 };
 /**
  * Event types for the job executor
  */
-declare const JobExecutorEventTypes: {
+export declare const JobExecutorEventTypes: {
   readonly JOB_STARTED: 20000;
   readonly JOB_COMPLETED: 20001;
   readonly JOB_FAILED: 20002;
@@ -2370,14 +2419,16 @@ type JobStartedEvent = {
 };
 type JobCompletedEvent = {
   job: Job;
-  result: JobResult; /** See {@link JobStartedEvent.workerId}. */
+  result: JobResult;
+  /** See {@link JobStartedEvent.workerId}. */
   workerId?: string;
 };
 type JobFailedEvent = {
   job: Job;
   error: string;
   willRetry: boolean;
-  retryCount: number; /** See {@link JobStartedEvent.workerId}. */
+  retryCount: number;
+  /** See {@link JobStartedEvent.workerId}. */
   workerId?: string;
 };
 type ExecutorStartedEvent = {
@@ -2392,9 +2443,13 @@ type ExecutorStoppedEvent = {
  * Status information for the job executor manager
  */
 type ExecutorManagerStatus = {
-  /** Whether the manager is currently running */isRunning: boolean; /** Number of executor instances managed */
-  numExecutors: number; /** Number of jobs currently being processed */
-  activeJobs: number; /** Total number of jobs processed since start */
+  /** Whether the manager is currently running */
+  isRunning: boolean;
+  /** Number of executor instances managed */
+  numExecutors: number;
+  /** Number of jobs currently being processed */
+  activeJobs: number;
+  /** Total number of jobs processed since start */
   totalJobsProcessed: number;
 };
 //#endregion
@@ -2438,10 +2493,14 @@ type ErrorInfo = {
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type ModuleRef = {
-  /** Bare-specifier package name (resolved by the worker's module loader). */packageName: string; /** Named export within the module to invoke as the factory. */
+  /** Bare-specifier package name (resolved by the worker's module loader). */
+  packageName: string;
+  /** Named export within the module to invoke as the factory. */
   exportName: string;
 } | {
-  /** Absolute or worker-resolvable file path to import. */filePath: string; /** Named export within the module to invoke as the factory. */
+  /** Absolute or worker-resolvable file path to import. */
+  filePath: string;
+  /** Named export within the module to invoke as the factory. */
   exportName: string;
 };
 /**
@@ -2476,8 +2535,11 @@ type DocumentModelSpec = FactorySpec;
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type ModelManifestEntry = {
-  /** Document type identifier (e.g. "ph/account"). */documentType: string; /** Document model version this entry registers. */
-  version: string; /** Factory spec the worker imports and invokes to obtain the model. */
+  /** Document type identifier (e.g. "ph/account"). */
+  documentType: string;
+  /** Document model version this entry registers. */
+  version: string;
+  /** Factory spec the worker imports and invokes to obtain the model. */
   spec: DocumentModelSpec;
 };
 /**
@@ -2519,10 +2581,15 @@ type DbConfig = {
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type WorkerPoolConfig = {
-  /** Whether the worker pool is active; when false the executor runs in-process. */enabled: boolean; /** Number of worker instances to spawn. */
-  numWorkers: number; /** Worker isolation mode. */
-  workerType: "thread" | "process"; /** Optional heartbeat interval in milliseconds. */
-  heartbeatMs?: number; /** Optional per-worker Postgres pool size override. */
+  /** Whether the worker pool is active; when false the executor runs in-process. */
+  enabled: boolean;
+  /** Number of worker instances to spawn. */
+  numWorkers: number;
+  /** Worker isolation mode. */
+  workerType: "thread" | "process";
+  /** Optional heartbeat interval in milliseconds. */
+  heartbeatMs?: number;
+  /** Optional per-worker Postgres pool size override. */
   workerPgPoolSize?: number;
 };
 /**
@@ -2551,9 +2618,12 @@ type InitMessage = {
   workerId: string;
   poolConfig: WorkerPoolConfig;
   db: DbConfig;
-  models: ModelManifestEntry[]; /** Omitted = the worker builds its executor with the built-in defaults. */
-  executorConfig?: JobExecutorConfig; /** Builds the `ISigner` for synthesized operations; omitted = unsigned. */
-  signer?: FactorySpec; /** Builds the `SignatureTrustPolicy`; omitted = the default. */
+  models: ModelManifestEntry[];
+  /** Omitted = the worker builds its executor with the built-in defaults. */
+  executorConfig?: JobExecutorConfig;
+  /** Builds the `ISigner` for synthesized operations; omitted = unsigned. */
+  signer?: FactorySpec;
+  /** Builds the `SignatureTrustPolicy`; omitted = the default. */
   trustPolicy?: FactorySpec;
 };
 /**
@@ -2575,7 +2645,8 @@ type ExecuteMessage = {
  */
 type AbortMessage = {
   type: "abort";
-  correlationId: string; /** correlationId of the `execute` message being aborted. */
+  correlationId: string;
+  /** correlationId of the `execute` message being aborted. */
   targetCorrelationId: string;
   reason?: string;
 };
@@ -2587,7 +2658,8 @@ type AbortMessage = {
  */
 type ShutdownMessage = {
   type: "shutdown";
-  correlationId: string; /** Optional grace period before the parent force-terminates the worker. */
+  correlationId: string;
+  /** Optional grace period before the parent force-terminates the worker. */
   graceMs?: number;
 };
 /**
@@ -2616,7 +2688,8 @@ type ParentMessage = InitMessage | ExecuteMessage | AbortMessage | ShutdownMessa
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type ReadyMessage = {
-  type: "ready"; /** correlationId of the originating `init` message. */
+  type: "ready";
+  /** correlationId of the originating `init` message. */
   correlationId: string;
   workerId: string;
 };
@@ -2631,10 +2704,12 @@ type ReadyMessage = {
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type ResultMessage = {
-  type: "result"; /** correlationId of the originating `execute` message. */
+  type: "result";
+  /** correlationId of the originating `execute` message. */
   correlationId: string;
   result: JobResult;
-  writeReady?: JobWriteReadyPayload; /** Re-emitted on the parent bus, which is where observers subscribe. */
+  writeReady?: JobWriteReadyPayload;
+  /** Re-emitted on the parent bus, which is where observers subscribe. */
   signatureRefusals?: SignatureRefusedEvent[];
   error?: ErrorInfo;
 };
@@ -2645,7 +2720,8 @@ type ResultMessage = {
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type ModelLoadedMessage = {
-  type: "model-loaded"; /** correlationId of the originating `load-model` message. */
+  type: "model-loaded";
+  /** correlationId of the originating `load-model` message. */
   correlationId: string;
   documentType: string;
   version: string;
@@ -2657,7 +2733,8 @@ type ModelLoadedMessage = {
  *   (Powerhouse board wiki id: 64c03e51-1aa4-4fa9-93d8-daa45642484d)
  */
 type ModelLoadFailedMessage = {
-  type: "model-load-failed"; /** correlationId of the originating `load-model` message. */
+  type: "model-load-failed";
+  /** correlationId of the originating `load-model` message. */
   correlationId: string;
   documentType: string;
   version: string;
@@ -2678,7 +2755,8 @@ type LogMessage = {
   type: "log";
   level: "debug" | "info" | "warn" | "error";
   message: string;
-  args: SanitizedArg[]; /** Epoch milliseconds at which the worker generated the log line. */
+  args: SanitizedArg[];
+  /** Epoch milliseconds at which the worker generated the log line. */
   timestamp: number;
 };
 /**
@@ -2690,8 +2768,10 @@ type LogMessage = {
  */
 type HeartbeatMessage = {
   type: "heartbeat";
-  workerId: string; /** Epoch milliseconds the worker generated the heartbeat. */
-  timestamp: number; /** Optional snapshot of in-flight job correlation ids. */
+  workerId: string;
+  /** Epoch milliseconds the worker generated the heartbeat. */
+  timestamp: number;
+  /** Optional snapshot of in-flight job correlation ids. */
   inFlightCorrelationIds?: string[];
 };
 /**
@@ -2702,7 +2782,8 @@ type HeartbeatMessage = {
  */
 type MetricsMessage = {
   type: "metrics";
-  workerId: string; /** Epoch milliseconds the worker generated the metrics snapshot. */
+  workerId: string;
+  /** Epoch milliseconds the worker generated the metrics snapshot. */
   timestamp: number;
   counters: {
     [name: string]: number;
@@ -2720,10 +2801,14 @@ type MetricsMessage = {
  */
 type PoolAcquireSamplesMessage = {
   type: "pool-acquire-samples";
-  workerId: string; /** Stable identifier matching the host-side instrumentation name (e.g. "worker-0"). */
-  poolName: string; /** Epoch milliseconds the worker generated the batch. */
-  timestamp: number; /** Acquire-wait durations (ms) accumulated since the previous batch. */
-  durations: number[]; /** Most recent pg.Pool counter snapshot at batch send time. */
+  workerId: string;
+  /** Stable identifier matching the host-side instrumentation name (e.g. "worker-0"). */
+  poolName: string;
+  /** Epoch milliseconds the worker generated the batch. */
+  timestamp: number;
+  /** Acquire-wait durations (ms) accumulated since the previous batch. */
+  durations: number[];
+  /** Most recent pg.Pool counter snapshot at batch send time. */
   size: number;
   idle: number;
   waiting: number;
@@ -2748,7 +2833,8 @@ type SignerConfig = {
    * cannot cross the thread boundary itself. Omitted = pooled workers store
    * synthesized operations unsigned.
    */
-  workerSigner?: FactorySpec; /** Decides which keys may sign as which users; see {@link SignatureTrustPolicy}. */
+  workerSigner?: FactorySpec;
+  /** Decides which keys may sign as which users; see {@link SignatureTrustPolicy}. */
   trustPolicy?: SignatureTrustPolicy;
   /**
    * What a pooled executor worker imports to build the same trust policy.
@@ -2781,7 +2867,7 @@ type SignatureTrustPolicy = {
 };
 /** `log` counts refusals and admits anyway; `enforce` refuses. */
 type SignatureVerificationMode = "log" | "enforce";
-declare const SIGNATURE_REFUSAL_CODES: readonly ["UNSIGNED_REQUIRED", "UNSIGNED_IDENTITY", "KEY_MISMATCH", "MALFORMED_TUPLE", "TIMESTAMP_MISMATCH", "HASH_MISMATCH", "BAD_SIGNATURE", "SCHEME_BELOW_POLICY", "ID_MISMATCH", "DUPLICATE_ACTION", "SIGNER_UNAUTHORIZED"];
+export declare const SIGNATURE_REFUSAL_CODES: readonly ["UNSIGNED_REQUIRED", "UNSIGNED_IDENTITY", "KEY_MISMATCH", "MALFORMED_TUPLE", "TIMESTAMP_MISMATCH", "HASH_MISMATCH", "BAD_SIGNATURE", "SCHEME_BELOW_POLICY", "ID_MISMATCH", "DUPLICATE_ACTION", "SIGNER_UNAUTHORIZED"];
 type SignatureRefusalCode = (typeof SIGNATURE_REFUSAL_CODES)[number];
 /** Read from the prefix or length of tuple[2]. */
 type SignatureScheme = "unsigned" | "v2" | "legacy-renown" | "legacy-shared" | "legacy-unknown";
@@ -2817,14 +2903,14 @@ type Subscriber = (type: number, data: any) => void | Promise<void>;
 /**
  * Custom error class that aggregates multiple errors from event subscribers.
  */
-declare class EventBusAggregateError extends Error {
+export declare class EventBusAggregateError extends Error {
   readonly errors: any[];
   constructor(errors: unknown[]);
 }
 /**
  * Event types for reactor lifecycle events.
  */
-declare const ReactorEventTypes: {
+export declare const ReactorEventTypes: {
   readonly JOB_PENDING: 10001;
   readonly JOB_RUNNING: 10002;
   readonly JOB_WRITE_READY: 10003;
@@ -3000,7 +3086,7 @@ interface IJobAwaiter {
  * Event-driven implementation of IJobAwaiter.
  * Subscribes to operation events to detect job completion without polling.
  */
-declare class JobAwaiter implements IJobAwaiter {
+export declare class JobAwaiter implements IJobAwaiter {
   private eventBus;
   private getJobStatus;
   private pendingJobs;
@@ -3139,7 +3225,8 @@ type Projection<M> = {
    * Action types in this stream that can change an evaluation. Reads of the stream
    * are filtered to these, so anything left out is invisible to a decision.
    */
-  decidingActions: string[]; /** Applies one of this stream's operations while deciding. */
+  decidingActions: string[];
+  /** Applies one of this stream's operations while deciding. */
   apply: (document: PHDocument, operation: Operation) => PHDocument;
 };
 /**
@@ -3154,7 +3241,7 @@ type Evaluation = {
 };
 /** Projections plus a decision function over the built model. */
 type DecisionModel<M> = {
-  projections: { [K in keyof M]: Projection<M> };
+  projections: { [K in keyof M]: Projection<M>; };
   /**
    * Present when decide reads the executing scope's state through the
    * decision context. A positional walk then folds the evaluated stream with
@@ -3180,7 +3267,7 @@ type BuiltDecisionModel<M> = {
 /**
  * Describes the types of document changes that can occur.
  */
-declare enum DocumentChangeType {
+export declare enum DocumentChangeType {
   Created = "created",
   Deleted = "deleted",
   Updated = "updated",
@@ -3204,11 +3291,15 @@ type DocumentChangeEvent = {
  * Options for creating an empty document.
  */
 type CreateDocumentOptions = {
-  /** Optional "id" or "slug" of parent document */parentIdentifier?: string; /** Optional version of the document model to use (defaults to latest) */
-  documentModelVersion?: number; /** Merged over the model's defaults; `signature: 2` makes it v2-required. */
+  /** Optional "id" or "slug" of parent document */
+  parentIdentifier?: string;
+  /** Optional version of the document model to use (defaults to latest) */
+  documentModelVersion?: number;
+  /** Merged over the model's defaults; `signature: 2` makes it v2-required. */
   protocolVersions?: {
     [protocol: string]: number;
-  }; /** Overrides the client's creation default for this document. */
+  };
+  /** Overrides the client's creation default for this document. */
   signaturePolicy?: SignaturePolicy;
 };
 /**
@@ -3431,7 +3522,9 @@ interface IReactorClient {
    */
   getIncomingRelationshipEdges(targetIdentifier: string, relationshipType?: string, view?: ViewFilter, paging?: PagingOptions, signal?: AbortSignal): Promise<PagedResults<DocumentRelationship>>;
   /**
-   * Filters documents by criteria and returns a list of them
+   * Filters documents by criteria and returns a list of them. A document the
+   * view's subject may read no domain scope of is withheld, not served as its
+   * header and always-readable scopes.
    *
    * @param search - Search filter options (type, parentId, identifiers)
    * @param view - Optional filter containing branch and scopes information
@@ -3440,6 +3533,8 @@ interface IReactorClient {
    * @returns List of documents matching criteria and pagination cursor
    */
   find(search: SearchFilter, view?: ViewFilter, paging?: PagingOptions, signal?: AbortSignal): Promise<PagedResults<PHDocument>>;
+  /** Whether {@link find} would serve the document; false when it is absent. */
+  isServed(identifier: string, view?: ViewFilter, signal?: AbortSignal): Promise<boolean>;
   /**
    * Predicts whether the subject would be admitted to execute each of a set of
    * candidate operations, without submitting any of them. A UI asks this to
@@ -3706,7 +3801,9 @@ interface IReactorClient {
    */
   waitForJob(jobId: string | JobInfo, signal?: AbortSignal): Promise<JobInfo>;
   /**
-   * Subscribes to changes for documents matching specified filters
+   * Subscribes to changes for documents matching specified filters, gated as
+   * `find` is: an event naming a document the view's subject may read no domain
+   * scope of is withheld.
    *
    * @param search - Search filter options (type, parentId, identifiers)
    * @param callback - Function called when documents change with the change event details
@@ -3725,7 +3822,7 @@ type DocumentDecisionModel = {
  * The simplest decision model: one projection over the document scope, which
  * rejects on a deleted document.
  */
-declare function documentDecisionModel(target: DecisionTarget): DecisionModel<DocumentDecisionModel>;
+export declare function documentDecisionModel(target: DecisionTarget): DecisionModel<DocumentDecisionModel>;
 //#endregion
 //#region src/decision/registered-model.d.ts
 /**
@@ -3765,14 +3862,14 @@ type AdmissionConditions = {
  * check already refuses a write whose scope grew between the read and the
  * append.
  */
-declare function decideAtHead(model: RegisteredDecisionModel, cache: IWriteCache, target: DecisionTarget, subject: AuthSubject, request: AuthRequest, signal?: AbortSignal, conditions?: AdmissionConditions): Promise<AdmissionDecision>;
+export declare function decideAtHead(model: RegisteredDecisionModel, cache: IWriteCache, target: DecisionTarget, subject: AuthSubject, request: AuthRequest, signal?: AbortSignal, conditions?: AdmissionConditions): Promise<AdmissionDecision>;
 /**
  * The model this reactor enforces. With `authEnforcement` off the auth scope is
  * absent from every append condition and no load walks it; with `authGroups`
  * on, the group documents the grant list names join the read-set and the
  * registry supplies the reducer that folds them.
  */
-declare function selectDecisionModel(flags: ReactorFeatureFlags, registry: IDocumentModelRegistry): RegisteredDecisionModel;
+export declare function selectDecisionModel(flags: ReactorFeatureFlags, registry: IDocumentModelRegistry): RegisteredDecisionModel;
 //#endregion
 //#region src/decision/read-gate.d.ts
 /**
@@ -3782,7 +3879,7 @@ declare function selectDecisionModel(flags: ReactorFeatureFlags, registry: IDocu
  * would diverge permanently. The document scope carries the metadata the same
  * argument covers. Grants gate domain-scope reads only.
  */
-declare const ALWAYS_READABLE_SCOPES: ReadonlySet<string>;
+export declare const ALWAYS_READABLE_SCOPES: ReadonlySet<string>;
 /**
  * How a gate treats a document nobody has written a policy onto.
  *
@@ -3806,7 +3903,11 @@ interface IReadGate {
    * is built once per document instead of once per scope.
    */
   scopePredicate(document: PHDocument, subject: AuthSubject, branch: string, signal?: AbortSignal): Promise<(scope: string) => boolean>;
+  /** Reads what one document's decision needs once, then decides per subject. */
+  prepare?(document: PHDocument, branch: string, signal?: AbortSignal): Promise<SubjectScopePredicate>;
 }
+/** Which scopes of an already-prepared document one subject may read. */
+type SubjectScopePredicate = (subject: AuthSubject) => Promise<(scope: string) => boolean>;
 /**
  * The model reads enforce. Below `authEnforcement` there is no model to
  * enforce: the document-only model ignores the auth scope entirely, so reading
@@ -3814,15 +3915,16 @@ interface IReadGate {
  * Undefined therefore means "evaluate the policy alone", which is what the read
  * surface did before the model existed.
  */
-declare function readDecisionModel(flags: ReactorFeatureFlags, registry: IDocumentModelRegistry): RegisteredDecisionModel | undefined;
+export declare function readDecisionModel(flags: ReactorFeatureFlags, registry: IDocumentModelRegistry): RegisteredDecisionModel | undefined;
 /**
  * Evaluates the policy on its own, with no groups map and no condition context.
  * A `{ group }` or conditional grant therefore never applies: an allow that
  * does not apply withholds access, so this cannot widen a policy, but a policy
  * relying on a conditional deny is weaker here than it is written.
  */
-declare class BareReadGate implements IReadGate {
+export declare class BareReadGate implements IReadGate {
   scopePredicate(document: PHDocument, subject: AuthSubject): Promise<(scope: string) => boolean>;
+  prepare(document: PHDocument): Promise<SubjectScopePredicate>;
 }
 /**
  * Answers a stream read from the document already fetched, and anything else
@@ -3833,7 +3935,7 @@ declare class BareReadGate implements IReadGate {
  * projections, and the caller has both in hand. Only a group stream the grant
  * list names is fetched.
  */
-declare class SeededStateReader implements IStreamStateReader {
+export declare class SeededStateReader implements IStreamStateReader {
   private readonly documentView;
   private readonly seed;
   private readonly branch;
@@ -3847,7 +3949,6 @@ declare class SeededStateReader implements IStreamStateReader {
    * surface, not silently deny.
    */
   getState(documentId: string, scope: string, branch: string, targetRevision?: number, signal?: AbortSignal): Promise<PHDocument>;
-  private assertAbsent;
 }
 /**
  * Evaluates a read against the registered decision model, built at the stream
@@ -3862,7 +3963,7 @@ declare class SeededStateReader implements IStreamStateReader {
  * running its executors in worker processes would answer reads in the parent
  * from state no commit ever invalidates.
  */
-declare class ModelReadGate implements IReadGate {
+export declare class ModelReadGate implements IReadGate {
   private readonly model;
   private readonly documentView;
   /**
@@ -3882,7 +3983,6 @@ declare class ModelReadGate implements IReadGate {
    * match at all; below it the grant fails closed, so serving the roster
    * would publish a member list no read grant can use.
    */
-
   servesGroups: boolean, operationIndex?: IOperationIndex | undefined, logger?: ILogger | undefined, options?: ReadGateOptions);
   /**
    * A served group yields its member list and nothing else. What the audience
@@ -3890,6 +3990,7 @@ declare class ModelReadGate implements IReadGate {
    * group's other scopes are its own business and stay behind its own grants.
    */
   scopePredicate(document: PHDocument, subject: AuthSubject, branch: string, signal?: AbortSignal): Promise<(scope: string) => boolean>;
+  prepare(document: PHDocument, branch: string, signal?: AbortSignal): Promise<SubjectScopePredicate>;
   /**
    * Whether the subject is served this group because a policy names it.
    *
@@ -3923,8 +4024,11 @@ declare class ModelReadGate implements IReadGate {
    * from.
    */
   private servesGroupTo;
+  /** Each read made once, however many subjects the walk runs for. */
+  private referencerReads;
+  private examinedReferencers;
   /**
-   * Whether one referencing document serves the subject any domain scope. A
+   * Whether one referencing document serves a subject any domain scope. A
    * referencer this replica does not hold serves nothing, which fails closed
    * the same way a group it does not hold does.
    */
@@ -3943,7 +4047,7 @@ declare class ModelReadGate implements IReadGate {
    * publish an unpoliced group it names: the referencer walk asks this question
    * of the referencing document, whose real policy answers it.
    */
-  private ownPolicyPredicate;
+  private ownPolicy;
 }
 //#endregion
 //#region src/client/reactor-client.d.ts
@@ -3972,7 +4076,7 @@ type ActionEvaluationConfig = {
  * - Provides quality-of-life functions for common tasks
  * - Wraps subscription interface with ViewFilters
  */
-declare class ReactorClient implements IReactorClient {
+export declare class ReactorClient implements IReactorClient {
   private logger;
   private reactor;
   private signer;
@@ -3981,26 +4085,11 @@ declare class ReactorClient implements IReactorClient {
   private documentIndexer;
   private documentView;
   private readGate;
+  private eventReads;
   private actionEvaluation;
   private readonly createSignaturePolicy;
   readonly drives: IDriveClient;
   constructor(logger: ILogger, reactor: IReactor, signer: ISigner, subscriptionManager: IReactorSubscriptionManager, jobAwaiter: IJobAwaiter, documentIndexer: IDocumentIndexer, documentView: IDocumentView, readGate?: IReadGate, actionEvaluation?: ActionEvaluationConfig, createSignaturePolicy?: SignaturePolicy);
-  private readSubject;
-  /**
-   * Which scopes of one document the subject may read. Resolved once per
-   * document, so the gate builds its model once however many scopes are then
-   * tested, and the filtering itself stays synchronous.
-   */
-  private readableScopes;
-  /**
-   * One document, filtered to the scopes the subject may read. Every method
-   * that hands a document back goes through here, including the ones that
-   * follow a write: a document returned from a mutation is a read like any
-   * other, and returning it whole served scopes the same subject would be
-   * refused by `get`. Its author still sees what it wrote, because an allow on
-   * execute confers read of that scope.
-   */
-  private gateDocument;
   /**
    * Retrieves a list of document model modules.
    */
@@ -4034,7 +4123,6 @@ declare class ReactorClient implements IReactorClient {
    * Retrieves operations for a document
    */
   getOperations(documentIdentifier: string, view?: ViewFilter, filter?: OperationFilter, paging?: PagingOptions, signal?: AbortSignal): Promise<PagedResults<Operation>>;
-  private getOperationsWithCompositeCursor;
   /**
    * Retrieves outgoing relationships of a given type from a source document.
    */
@@ -4053,32 +4141,12 @@ declare class ReactorClient implements IReactorClient {
    * metadata and timestamps the far-end documents do not.
    */
   getIncomingRelationshipEdges(targetIdentifier: string, relationshipType?: string, view?: ViewFilter, paging?: PagingOptions, signal?: AbortSignal): Promise<PagedResults<DocumentRelationship>>;
-  /**
-   * Drops the edges whose far-end document the subject may read no domain scope
-   * of. An edge is withheld whole rather than stripped of its metadata: the
-   * document-shaped relationship reads already answer with the far end stripped
-   * to the scopes the gate allows, so the far end's existence is disclosed
-   * either way, but an edge's metadata is content about the pair that the far
-   * end's own reads would refuse. An edge to a far end stripped to nothing
-   * therefore carries content past a refusal, and there is no useful shell to
-   * hand back in its place.
-   *
-   * `nextCursor` and `options` are left as the underlying stream reported them,
-   * because a caller must feed them back to resume from the right position. A
-   * gated page can therefore be shorter than the limit it asked for.
-   */
-  private gateEdges;
-  /**
-   * One relationship edge, or undefined when it does not exist. A point lookup:
-   * the pair is filtered in SQL rather than scanned out of the source's edge
-   * list, which on a drive with thousands of children is the difference between
-   * one query and dozens.
-   */
-  private readRelationshipEdge;
   /**
    * Filters documents by criteria and returns a list of them
    */
   find(search: SearchFilter, view?: ViewFilter, paging?: PagingOptions, signal?: AbortSignal): Promise<PagedResults<PHDocument>>;
+  /** Whether `find` would serve the document; false when it is absent. */
+  isServed(identifier: string, view?: ViewFilter, signal?: AbortSignal): Promise<boolean>;
   /**
    * Predicts the admission verdict for each candidate. See
    * {@link IReactorClient.evaluateActions} for the contract and its caveats.
@@ -4089,27 +4157,6 @@ declare class ReactorClient implements IReactorClient {
    * ever invalidates.
    */
   evaluateActions(documentIdentifier: string, branch: string, candidates: ActionCandidate[], subject?: AuthSubject, signal?: AbortSignal): Promise<ActionEvaluations>;
-  /**
-   * The decision model for one target document, built at its stream heads.
-   *
-   * The document is fetched unfiltered, because the policy is what decides:
-   * reading it through the read gate would withhold the very scopes the
-   * decision is about. A deleted document is served at its deletion boundary,
-   * which is what lets the model refuse an execute against it -- authEnforcement
-   * requires documentDecisions, so that read is available whenever this runs.
-   *
-   * Reading past the gate discloses nothing a submit does not. The `auth` and
-   * `document` scopes are readable by every holder, so a verdict resting on the
-   * policy alone is one the caller could compute unaided; and a verdict resting
-   * on a conditional grant reads the executing scope's state exactly as
-   * admission reads it, so the answer here is what submitting and being refused
-   * would have revealed anyway.
-   *
-   * The append condition the build records is dropped. It guards a write, and
-   * this makes none; reproducing it is also what the preflight cannot do, which
-   * is why the answer is a prediction.
-   */
-  private buildEvaluationTarget;
   getCreateSignaturePolicy(): Promise<SignaturePolicy>;
   /**
    * Creates a document and waits for completion
@@ -4150,12 +4197,6 @@ declare class ReactorClient implements IReactorClient {
    * Submits a list of actions to a document
    */
   executeAsync(documentIdentifier: string, branch: string, actions: Action[], signal?: AbortSignal): Promise<JobInfo>;
-  /**
-   * The id a write on `identifier` is stored under, which its signatures bind.
-   * A create names its own id, and an id no slug maps to is taken as given, so
-   * a document still in flight resolves to itself.
-   */
-  private resolveWriteTarget;
   executeBatch(request: BatchExecutionRequest, signal?: AbortSignal): Promise<BatchExecutionResult>;
   /**
    * Renames a document and waits for completion
@@ -4206,6 +4247,99 @@ declare class ReactorClient implements IReactorClient {
    * Subscribes to changes for documents matching specified filters
    */
   subscribe(search: SearchFilter, callback: (event: DocumentChangeEvent) => void, view?: ViewFilter): () => void;
+  private readSubject;
+  /**
+   * Which scopes of one document the subject may read. Resolved once per
+   * document, so the gate builds its model once however many scopes are then
+   * tested, and the filtering itself stays synchronous.
+   */
+  private readableScopes;
+  /**
+   * One document, filtered to the scopes the subject may read. Every method
+   * that hands a document back goes through here, including the ones that
+   * follow a write: a document returned from a mutation is a read like any
+   * other, and returning it whole served scopes the same subject would be
+   * refused by `get`. Its author still sees what it wrote, because an allow on
+   * execute confers read of that scope.
+   */
+  private gateDocument;
+  /**
+   * One document as a listing or a feed serves it, or undefined when withheld.
+   * The document must hold every scope, or withholding is decided on a subset;
+   * a narrowing view is applied here instead.
+   */
+  private gateServed;
+  private gateServedAll;
+  /**
+   * Gates a page and every page after it. `nextCursor` is left as the stream
+   * reported it.
+   */
+  private gateListing;
+  /**
+   * One document as a listing serves it, or undefined when withheld. It holds
+   * only the view's scopes; a domain scope it lacks is decided on its name, or
+   * on its state read now when a condition needs that.
+   */
+  private gateListed;
+  private servesUnheld;
+  /**
+   * Whether an event naming only these ids may reach the subject. An id with no
+   * live document behind it has no content left to protect, so it does not
+   * withhold; a deleted document is read at its deletion boundary when
+   * deletion is positional, and gated like any other.
+   */
+  private servesEvery;
+  private servesId;
+  private getOperationsWithCompositeCursor;
+  /**
+   * Drops the edges whose far-end document the subject may read no domain scope
+   * of. An edge is withheld whole rather than stripped of its metadata: the
+   * document-shaped relationship reads already answer with the far end stripped
+   * to the scopes the gate allows, so the far end's existence is disclosed
+   * either way, but an edge's metadata is content about the pair that the far
+   * end's own reads would refuse. An edge to a far end stripped to nothing
+   * therefore carries content past a refusal, and there is no useful shell to
+   * hand back in its place.
+   *
+   * `nextCursor` and `options` are left as the underlying stream reported them,
+   * because a caller must feed them back to resume from the right position. A
+   * gated page can therefore be shorter than the limit it asked for.
+   */
+  private gateEdges;
+  /**
+   * One relationship edge, or undefined when it does not exist. A point lookup:
+   * the pair is filtered in SQL rather than scanned out of the source's edge
+   * list, which on a drive with thousands of children is the difference between
+   * one query and dozens.
+   */
+  private readRelationshipEdge;
+  /**
+   * The id a write on `identifier` is stored under, which its signatures bind.
+   * A create names its own id, and an id no slug maps to is taken as given, so
+   * a document still in flight resolves to itself.
+   */
+  private resolveWriteTarget;
+  /**
+   * The decision model for one target document, built at its stream heads.
+   *
+   * The document is fetched unfiltered, because the policy is what decides:
+   * reading it through the read gate would withhold the very scopes the
+   * decision is about. A deleted document is served at its deletion boundary,
+   * which is what lets the model refuse an execute against it -- authEnforcement
+   * requires documentDecisions, so that read is available whenever this runs.
+   *
+   * Reading past the gate discloses nothing a submit does not. The `auth` and
+   * `document` scopes are readable by every holder, so a verdict resting on the
+   * policy alone is one the caller could compute unaided; and a verdict resting
+   * on a conditional grant reads the executing scope's state exactly as
+   * admission reads it, so the answer here is what submitting and being refused
+   * would have revealed anyway.
+   *
+   * The append condition the build records is dropped. It guards a write, and
+   * this makes none; reproducing it is also what the preflight cannot do, which
+   * is why the answer is a prediction.
+   */
+  private buildEvaluationTarget;
   private removeAllIncomingRelationships;
 }
 //#endregion
@@ -4590,12 +4724,12 @@ interface IConsistencyTracker {
 /**
  * Creates a consistency key from documentId, scope, and branch.
  */
-declare function makeConsistencyKey(documentId: string, scope: string, branch: string): ConsistencyKey;
+export declare function makeConsistencyKey(documentId: string, scope: string, branch: string): ConsistencyKey;
 /**
  * Tracks operation indexes for documents and provides read-after-write consistency guarantees.
  * Maintains an in-memory map of the latest operation index for each (documentId, scope, branch) tuple.
  */
-declare class ConsistencyTracker implements IConsistencyTracker {
+export declare class ConsistencyTracker implements IConsistencyTracker {
   private state;
   private waiters;
   update(coordinates: ConsistencyCoordinate[]): void;
@@ -4614,8 +4748,11 @@ declare class ConsistencyTracker implements IConsistencyTracker {
  * Snapshot of a pg.Pool's internal counters at a point in time.
  */
 type PoolStats = {
-  /** Connections currently open (idle + in-use). pg.Pool.totalCount. */size: number; /** Open connections not currently checked out. pg.Pool.idleCount. */
-  idle: number; /** Callers queued waiting for a connection. pg.Pool.waitingCount. */
+  /** Connections currently open (idle + in-use). pg.Pool.totalCount. */
+  size: number;
+  /** Open connections not currently checked out. pg.Pool.idleCount. */
+  idle: number;
+  /** Callers queued waiting for a connection. pg.Pool.waitingCount. */
   waiting: number;
 };
 /**
@@ -4624,7 +4761,9 @@ type PoolStats = {
  * underlying pg.Pool type.
  */
 type PoolInstrumentation = {
-  /** Stable identifier for the pool (e.g. "host", "worker"). Used as a metric label. */readonly name: string; /** Current pool counters. Cheap, synchronous read off pg.Pool. */
+  /** Stable identifier for the pool (e.g. "host", "worker"). Used as a metric label. */
+  readonly name: string;
+  /** Current pool counters. Cheap, synchronous read off pg.Pool. */
   getStats(): PoolStats;
   /**
    * Subscribe to per-acquire wait durations. Listener fires once per
@@ -4639,7 +4778,7 @@ type PoolInstrumentation = {
  * is replaced with a timing wrapper so all callers (Kysely included)
  * pick up the instrumentation transparently.
  */
-declare function instrumentPgPool(pool: Pool, name: string): PoolInstrumentation;
+export declare function instrumentPgPool(pool: Pool, name: string): PoolInstrumentation;
 /**
  * Host-side {@link PoolInstrumentation} that re-emits acquire-wait samples
  * and pool-stat snapshots forwarded from a worker thread. The worker owns
@@ -4679,7 +4818,7 @@ declare class GraphQLRequestError extends Error {
  * difference between a channel that recovers and one that is dead for the
  * process lifetime.
  */
-declare const RECOVERABLE_GRAPHQL_ERROR_CODES: {
+export declare const RECOVERABLE_GRAPHQL_ERROR_CODES: {
   /**
    * A stored operation cannot be represented in the schema - an action with no
    * id, say. The document holding it needs repairing, but the channel serves
@@ -4695,10 +4834,10 @@ declare const RECOVERABLE_GRAPHQL_ERROR_CODES: {
  * one means something else also went wrong, and polling through that would be
  * guessing.
  */
-declare function isRecoverableGraphQLError(error: GraphQLRequestError): boolean;
+export declare function isRecoverableGraphQLError(error: GraphQLRequestError): boolean;
 /** Auth-rejection message fragments the switchboard emits. Shared with
  * reactor-api so server throws and this client check can't drift. */
-declare const DRIVE_AUTH_ERROR_MESSAGES: {
+export declare const DRIVE_AUTH_ERROR_MESSAGES: {
   readonly forbidden: "Forbidden: insufficient permissions";
   readonly authenticationRequired: "Forbidden: authentication required";
 };
@@ -4711,7 +4850,7 @@ declare const DRIVE_AUTH_ERROR_MESSAGES: {
  * `isDriveAuthError` is what decides whether a failure prompts a login, and a
  * bare `Error` tells it nothing.
  */
-declare class DriveRequestError extends Error {
+export declare class DriveRequestError extends Error {
   readonly statusCode: number | undefined;
   constructor(message: string, statusCode?: number);
 }
@@ -4725,11 +4864,11 @@ declare class DriveRequestError extends Error {
  * indistinguishable from a typo, and prompting for a login on every 404 would
  * fire on every mistyped URL. See the `WWW-Authenticate` note on the endpoint
  * for the signal that would let a client tell the two apart. */
-declare function isDriveAuthError(error: unknown): boolean;
-declare class PollingChannelError extends Error {
+export declare function isDriveAuthError(error: unknown): boolean;
+export declare class PollingChannelError extends Error {
   constructor(message: string);
 }
-declare class ChannelError extends Error {
+export declare class ChannelError extends Error {
   source: ChannelErrorSource;
   error: Error;
   /**
@@ -4743,11 +4882,11 @@ declare class ChannelError extends Error {
 //#endregion
 //#region src/sync/sync-operation.d.ts
 type SyncOperationStatusCallback = (syncOp: SyncOperation, prev: SyncOperationStatus, next: SyncOperationStatus) => void;
-declare class SyncOperationAggregateError extends Error {
+export declare class SyncOperationAggregateError extends Error {
   errors: Error[];
   constructor(errors: Error[]);
 }
-declare class SyncOperation {
+export declare class SyncOperation {
   readonly id: string;
   readonly jobId: string;
   jobDependencies: string[];
@@ -4803,7 +4942,7 @@ interface IMailbox {
   flush(): void;
   isPaused(): boolean;
 }
-declare class Mailbox implements IMailbox {
+export declare class Mailbox implements IMailbox {
   private itemsMap;
   private addedCallbacks;
   private removedCallbacks;
@@ -4829,7 +4968,7 @@ declare class Mailbox implements IMailbox {
 }
 //#endregion
 //#region src/sync/sync-status-tracker.d.ts
-declare enum SyncStatus {
+export declare enum SyncStatus {
   Synced = "SYNCED",
   Outgoing = "OUTGOING",
   Incoming = "INCOMING",
@@ -4844,7 +4983,7 @@ interface ISyncStatusTracker {
   untrackRemote(remoteName: string): void;
   clear(): void;
 }
-declare class SyncStatusTracker implements ISyncStatusTracker {
+export declare class SyncStatusTracker implements ISyncStatusTracker {
   private readonly remotes;
   private readonly seen;
   private readonly callbacks;
@@ -5513,7 +5652,7 @@ interface InProcessReactorClientModule extends ReactorClientModule {
  * for batch execution. The back-reference is captured but never invoked
  * during construction, so the partial-`this` hazard does not apply.
  */
-declare class DriveClient implements IDriveClient {
+export declare class DriveClient implements IDriveClient {
   private readonly client;
   private readonly logger;
   private readonly reactor;
@@ -5556,7 +5695,7 @@ type ModelLoadedBroadcastHook = (entry: ModelManifestEntry) => Promise<void>;
  * (post-failure recovery) so that both paths use the same deduplication
  * and failure-caching state.
  */
-declare class DocumentModelResolver implements IDocumentModelResolver {
+export declare class DocumentModelResolver implements IDocumentModelResolver {
   private registry;
   private loader;
   private loadingModels;
@@ -5585,7 +5724,7 @@ declare class DocumentModelResolver implements IDocumentModelResolver {
  * Checks the registry for the model and returns if found; throws if not.
  * Since there is no loader, missing models cannot be recovered.
  */
-declare class NullDocumentModelResolver implements IDocumentModelResolver {
+export declare class NullDocumentModelResolver implements IDocumentModelResolver {
   private registry?;
   constructor(registry?: IDocumentModelRegistry | undefined);
   ensureModelLoaded(documentType: string): Promise<void>;
@@ -5602,19 +5741,22 @@ type WorkerFactory = (index: number) => IExecutorWorker;
 //#region src/read-models/base-read-model.d.ts
 /** Bounds on an indexing pass: one transaction, and the stall between yields. */
 type ReadModelIndexingConfig = {
-  /** Maximum operations committed in a single transaction. */commitChunkSize: number; /** Maximum elapsed milliseconds before yielding between chunks. */
+  /** Maximum operations committed in a single transaction. */
+  commitChunkSize: number;
+  /** Maximum elapsed milliseconds before yielding between chunks. */
   yieldDeadlineMs: number;
 };
 /** Small enough that a chunk's transaction rarely outlasts the yield deadline. */
-declare const DEFAULT_COMMIT_CHUNK_SIZE = 50;
+export declare const DEFAULT_COMMIT_CHUNK_SIZE = 50;
 /** Matches the executor's own default, so both paths yield on the same cadence. */
-declare const DEFAULT_READ_MODEL_YIELD_DEADLINE_MS = 50;
-declare const defaultReadModelIndexingConfig: ReadModelIndexingConfig;
+export declare const DEFAULT_READ_MODEL_YIELD_DEADLINE_MS = 50;
+export declare const defaultReadModelIndexingConfig: ReadModelIndexingConfig;
 /** For read models whose callers can observe where a batch was split. */
-declare const unchunkedReadModelIndexingConfig: ReadModelIndexingConfig;
+export declare const unchunkedReadModelIndexingConfig: ReadModelIndexingConfig;
 type BaseReadModelConfig = {
   readModelId: string;
-  rebuildStateOnInit: boolean; /** Defaults to {@link defaultReadModelIndexingConfig}. */
+  rebuildStateOnInit: boolean;
+  /** Defaults to {@link defaultReadModelIndexingConfig}. */
   indexing?: ReadModelIndexingConfig;
 };
 /**
@@ -5622,7 +5764,7 @@ type BaseReadModelConfig = {
  * Handles initialization, state tracking via ViewState table, and consistency tracking.
  * Subclasses override commitOperations() with their specific domain logic.
  */
-declare class BaseReadModel implements IReadModel {
+export declare class BaseReadModel implements IReadModel {
   protected db: Kysely<DocumentViewDatabase>;
   protected operationIndex: IOperationIndex;
   protected writeCache: IWriteCache;
@@ -5847,10 +5989,14 @@ type ProjectionChainDepthMessage = {
  */
 type ProjectionPoolAcquireSamplesMessage = {
   type: "pool-acquire-samples";
-  shardId: string; /** Stable identifier matching the host-side instrumentation name. */
-  poolName: string; /** Epoch milliseconds the worker generated the batch. */
-  timestamp: number; /** Acquire-wait durations (ms) accumulated since the previous batch. */
-  durations: number[]; /** Most recent pg.Pool counter snapshot at batch send time. */
+  shardId: string;
+  /** Stable identifier matching the host-side instrumentation name. */
+  poolName: string;
+  /** Epoch milliseconds the worker generated the batch. */
+  timestamp: number;
+  /** Acquire-wait durations (ms) accumulated since the previous batch. */
+  durations: number[];
+  /** Most recent pg.Pool counter snapshot at batch send time. */
   size: number;
   idle: number;
   waiting: number;
@@ -5880,7 +6026,8 @@ type ProjectionWorkerMessage = ProjectionReadyMessage | ProjectionInitFailedMess
 //#endregion
 //#region src/projection/create-hybrid-projection-coordinator.d.ts
 type HybridProjectionOptions = {
-  /** Defaults to 1: one worker captures the whole win (Run 11). */shardCount?: number;
+  /** Defaults to 1: one worker captures the whole win (Run 11). */
+  shardCount?: number;
   poolSize?: number;
   db?: DbConfig;
   onFatal?: (shardId: string, reason: Error) => void;
@@ -5890,7 +6037,7 @@ type HybridProjectionOptions = {
   chainDepthReportIntervalMs?: number;
 };
 /** Built-ins in one projection worker; all other read models stay on the host. */
-declare function createHybridProjectionCoordinatorFactory(options?: HybridProjectionOptions): ReadModelCoordinatorFactory;
+export declare function createHybridProjectionCoordinatorFactory(options?: HybridProjectionOptions): ReadModelCoordinatorFactory;
 //#endregion
 //#region src/projection/transport.d.ts
 type ProjectionTransportEventMap = {
@@ -5920,7 +6067,8 @@ interface IProjectionTransport {
  */
 type ProjectionWorkerFactory = (shardIndex: number, shardId: string) => IProjectionTransport;
 type ProjectionShardHooks = {
-  /** Takes over the host-bus JOB_READ_READY emit; call `emitReadReady` to emit. */onReadReady?: (event: JobReadReadyEvent) => void;
+  /** Takes over the host-bus JOB_READ_READY emit; call `emitReadReady` to emit. */
+  onReadReady?: (event: JobReadReadyEvent) => void;
   /**
    * Fired when a shard errors, when it exits after having been ready, and
    * for every JOB_WRITE_READY dropped because its shard is not ready.
@@ -6064,13 +6212,16 @@ declare class ProjectionShardManager implements IReadModelCoordinator {
 type HybridProjectionCoordinatorOptions = {
   eventBus: IEventBus;
   logger: ILogger;
-  manager: ProjectionShardManager; /** Caller and factory registered models. Never documentView/documentIndexer. */
-  preReady: IReadModel[]; /** subscriptionNotificationReadModel, processorManager. */
-  postReady: IReadModel[]; /** Included in `readModels` for getReadModel() lookup; never indexed here. */
+  manager: ProjectionShardManager;
+  /** Caller and factory registered models. Never documentView/documentIndexer. */
+  preReady: IReadModel[];
+  /** subscriptionNotificationReadModel, processorManager. */
+  postReady: IReadModel[];
+  /** Included in `readModels` for getReadModel() lookup; never indexed here. */
   lookupOnly: IReadModel[];
 };
 /** Host-side stages on a per-queueKey chain driven by the worker's read-ready. */
-declare class HybridProjectionCoordinator implements ILiveReadModelCoordinator {
+export declare class HybridProjectionCoordinator implements ILiveReadModelCoordinator {
   /** One array, mutated in place: reactor-api captures it by reference once. */
   readonly readModels: IReadModel[];
   private readonly eventBus;
@@ -6106,7 +6257,7 @@ interface MigrationResult {
 }
 //#endregion
 //#region src/sync/sync-builder.d.ts
-declare class SyncBuilder {
+export declare class SyncBuilder {
   private channelFactory?;
   private remoteStorage?;
   private cursorStorage?;
@@ -6179,7 +6330,8 @@ interface ReadModelCoordinatorFactoryDeps {
  */
 type ReadModelCoordinatorFactory = (deps: ReadModelCoordinatorFactoryDeps) => IReadModelCoordinator | Promise<IReadModelCoordinator>;
 type WorkerPoolBase = {
-  /** Number of worker threads to spawn; also the sticky-routing modulus. */numWorkers: number;
+  /** Number of worker threads to spawn; also the sticky-routing modulus. */
+  numWorkers: number;
 };
 /**
  * Executor worker-pool configuration. Either `db` (default thread
@@ -6215,7 +6367,8 @@ type ProjectionShardBuilderConfig = {
    * list is indexed by nobody, and one named in both is indexed twice.
    * `buildModule` rejects any other combination.
    */
-  preReadyKinds: BuiltInReadModelKind[]; /** Kinds each shard indexes after READ_READY. See {@link preReadyKinds}. */
+  preReadyKinds: BuiltInReadModelKind[];
+  /** Kinds each shard indexes after READ_READY. See {@link preReadyKinds}. */
   postReadyKinds: BuiltInReadModelKind[];
   /**
    * Connection info for the projection workers' own pools. Falls back to
@@ -6229,7 +6382,7 @@ type ProjectionShardBuilderConfig = {
   drainTimeoutMs?: number;
   chainDepthReportIntervalMs?: number;
 };
-declare class ReactorBuilder {
+export declare class ReactorBuilder {
   private logger?;
   private documentModelSources;
   private upgradeManifests;
@@ -6419,7 +6572,7 @@ declare class ReactorBuilder {
 /**
  * Builder class for constructing ReactorClient instances with proper configuration
  */
-declare class ReactorClientBuilder {
+export declare class ReactorClientBuilder {
   private logger?;
   private reactorBuilder?;
   private reactor?;
@@ -6499,14 +6652,14 @@ declare class ReactorClientBuilder {
 }
 //#endregion
 //#region src/core/drive-container-types.d.ts
-declare const DEFAULT_DRIVE_CONTAINER_TYPES: ReadonlySet<string>;
+export declare const DEFAULT_DRIVE_CONTAINER_TYPES: ReadonlySet<string>;
 //#endregion
 //#region src/core/reactor.d.ts
 /**
  * This class implements the IReactor interface and serves as the main entry point
  * for the new Reactor architecture.
  */
-declare class Reactor implements IReactor {
+export declare class Reactor implements IReactor {
   private logger;
   private documentModelRegistry;
   private shutdownStatus;
@@ -6563,15 +6716,15 @@ interface ParsedDriveUrl {
  * e.g., "http://localhost:4001/d/abc123" -> { driveId: "abc123", graphqlEndpoint: "http://localhost:4001/graphql/r" }
  * e.g., "https://example.com/api/reactor/d/abc123" -> { ..., graphqlEndpoint: "https://example.com/api/reactor/graphql/r" }
  */
-declare function parseDriveUrl(url: string): ParsedDriveUrl;
+export declare function parseDriveUrl(url: string): ParsedDriveUrl;
 /**
  * Extract drive ID from a drive URL.
  */
-declare function driveIdFromUrl(url: string): string;
+export declare function driveIdFromUrl(url: string): string;
 //#endregion
 //#region src/shared/errors.d.ts
 /** The message carries the code: only name and message cross the queue. */
-declare class InvalidSignatureError extends Error {
+export declare class InvalidSignatureError extends Error {
   readonly documentId: string;
   readonly code: SignatureRefusalCode;
   readonly reason: string;
@@ -6594,7 +6747,7 @@ declare class InvalidSignatureError extends Error {
  * (`reactor-browser/src/rpc/error-info.ts`), so the class identity and any
  * custom field are lost in transit. This error therefore carries no fields.
  */
-declare class AuthEnforcementDisabledError extends Error {
+export declare class AuthEnforcementDisabledError extends Error {
   constructor();
   static isError(error: unknown): error is AuthEnforcementDisabledError;
 }
@@ -6606,7 +6759,7 @@ declare class AuthEnforcementDisabledError extends Error {
  * (`reactor-browser/src/rpc/error-info.ts`), so the class identity is lost in
  * transit.
  */
-declare class RelationshipNotFoundError extends Error {
+export declare class RelationshipNotFoundError extends Error {
   readonly sourceId: string;
   readonly targetId: string;
   readonly relationshipType: string;
@@ -6621,7 +6774,7 @@ declare class RelationshipNotFoundError extends Error {
  * @param initialState - Initial shutdown state (default: false)
  * @returns A tuple of [ShutdownStatus, setShutdown function, setCompleted function]
  */
-declare function createMutableShutdownStatus(initialState?: boolean): [ShutdownStatus, (value: boolean) => void, (completed: Promise<void>) => void];
+export declare function createMutableShutdownStatus(initialState?: boolean): [ShutdownStatus, (value: boolean) => void, (completed: Promise<void>) => void];
 //#endregion
 //#region src/shared/utils.d.ts
 type ParsedPaging = {
@@ -6634,19 +6787,21 @@ type ParsedPaging = {
  * limit is less than 1. When `paging` is undefined, returns offset 0 and
  * the caller-supplied `defaultLimit`.
  */
-declare function parsePagingOptions(paging: PagingOptions | undefined, defaultLimit: number): ParsedPaging;
+export declare function parsePagingOptions(paging: PagingOptions | undefined, defaultLimit: number): ParsedPaging;
 //#endregion
 //#region src/signer/verify-action-signature.d.ts
 type VerificationTarget = {
-  /** The stream the operation is stored in. */documentId: string;
-  branch: string; /** Of the document `documentId` names; legacy when omitted. */
+  /** The stream the operation is stored in. */
+  documentId: string;
+  branch: string;
+  /** Of the document `documentId` names; legacy when omitted. */
   policy?: SignaturePolicy;
 };
 /**
  * Integrity only: identity binding and the live-id check sit with the caller.
  * `operation` is the incoming operation at load admission.
  */
-declare function verifyActionSignature(action: Action, target: VerificationTarget, path: AdmissionPath, operation?: {
+export declare function verifyActionSignature(action: Action, target: VerificationTarget, path: AdmissionPath, operation?: {
   timestampUtcMs: string;
 }): Promise<SignatureVerdict>;
 //#endregion
@@ -6655,7 +6810,7 @@ declare function verifyActionSignature(action: Action, target: VerificationTarge
  * Default error handler that re-throws subscription errors.
  * This ensures that errors are not silently swallowed.
  */
-declare class DefaultSubscriptionErrorHandler implements ISubscriptionErrorHandler {
+export declare class DefaultSubscriptionErrorHandler implements ISubscriptionErrorHandler {
   handleError(error: unknown, context: SubscriptionErrorContext): void;
 }
 //#endregion
@@ -6664,7 +6819,7 @@ type DocumentCreatedCallback = (result: PagedResults<string>) => void;
 type DocumentDeletedCallback = (documentIds: string[]) => void;
 type DocumentStateUpdatedCallback = (result: PagedResults<PHDocument>) => void;
 type RelationshipChangedCallback = (parentId: string, childId: string, changeType: RelationshipChangeType) => void;
-declare class ReactorSubscriptionManager implements IReactorSubscriptionManager {
+export declare class ReactorSubscriptionManager implements IReactorSubscriptionManager {
   private createdSubscriptions;
   private deletedSubscriptions;
   private updatedSubscriptions;
@@ -6702,7 +6857,7 @@ declare class ReactorSubscriptionManager implements IReactorSubscriptionManager
 }
 //#endregion
 //#region src/events/event-bus.d.ts
-declare class EventBus implements IEventBus {
+export declare class EventBus implements IEventBus {
   readonly eventTypeToSubscribers: Map<number, Subscriber[]>;
   subscribe<K>(type: number, subscriber: (type: number, event: K) => void | Promise<void>): Unsubscribe;
   emit(type: number, data: any): Promise<void>;
@@ -6715,7 +6870,7 @@ declare class EventBus implements IEventBus {
  * Ensures serial execution per document by tracking executing jobs.
  * Implements dependency management through queue hints.
  */
-declare class InMemoryQueue implements IQueue {
+export declare class InMemoryQueue implements IQueue {
   private eventBus;
   private resolver;
   private queues;
@@ -6827,7 +6982,7 @@ declare class InMemoryQueue implements IQueue {
  * Maintains job status in a Map for synchronous access.
  * Subscribes to operation events to update job states.
  */
-declare class InMemoryJobTracker implements IJobTracker {
+export declare class InMemoryJobTracker implements IJobTracker {
   private eventBus;
   private jobs;
   private unsubscribers;
@@ -6849,7 +7004,7 @@ type JobExecutorFactory = () => IJobExecutor;
  * Manages multiple job executors and coordinates job distribution.
  * Listens for job available events and dispatches jobs to executors.
  */
-declare class SimpleJobExecutorManager implements IJobExecutorManager {
+export declare class SimpleJobExecutorManager implements IJobExecutorManager {
   private executorFactory;
   private eventBus;
   private queue;
@@ -6875,7 +7030,7 @@ declare class SimpleJobExecutorManager implements IJobExecutorManager {
 }
 //#endregion
 //#region src/executor/simple-job-executor.d.ts
-declare class SimpleJobExecutor implements IJobExecutor {
+export declare class SimpleJobExecutor implements IJobExecutor {
   private logger;
   private registry;
   private operationStore;
@@ -7093,21 +7248,21 @@ declare class SimpleJobExecutor implements IJobExecutor {
 }
 //#endregion
 //#region src/executor/worker/forwarding-logger.d.ts
-declare function createForwardingLogger(post: (msg: LogMessage) => void, level?: ILogger["level"], tags?: string[]): ILogger;
+export declare function createForwardingLogger(post: (msg: LogMessage) => void, level?: ILogger["level"], tags?: string[]): ILogger;
 //#endregion
 //#region src/executor/worker/sanitize.d.ts
-declare function errorToInfo(err: unknown): ErrorInfo;
-declare function sanitizeArg(value: unknown, depth?: number, seen?: WeakSet<object>): SanitizedArg;
+export declare function errorToInfo(err: unknown): ErrorInfo;
+export declare function sanitizeArg(value: unknown, depth?: number, seen?: WeakSet<object>): SanitizedArg;
 //#endregion
 //#region src/executor/worker/index.d.ts
 /** Absolute path to the worker entry script for use with `new Worker(workerEntryPath)`. */
-declare const workerEntryPath: string;
+export declare const workerEntryPath: string;
 //#endregion
 //#region src/registry/errors.d.ts
 /**
  * Error thrown when a document model module is not found in the registry.
  */
-declare class ModuleNotFoundError extends Error {
+export declare class ModuleNotFoundError extends Error {
   readonly documentType: string;
   readonly requestedVersion: number | undefined;
   constructor(documentType: string, version?: number);
@@ -7116,20 +7271,20 @@ declare class ModuleNotFoundError extends Error {
 /**
  * Error thrown when attempting to register a module that already exists.
  */
-declare class DuplicateModuleError extends Error {
+export declare class DuplicateModuleError extends Error {
   constructor(documentType: string, version?: number);
   static isError(error: unknown): error is DuplicateModuleError;
 }
 /**
  * Error thrown when a module is invalid or malformed.
  */
-declare class InvalidModuleError extends Error {
+export declare class InvalidModuleError extends Error {
   constructor(message: string);
 }
 /**
  * Error thrown when attempting to register an upgrade manifest that already exists.
  */
-declare class DuplicateManifestError extends Error {
+export declare class DuplicateManifestError extends Error {
   constructor(documentType: string);
   static isError(error: unknown): error is DuplicateManifestError;
 }
@@ -7139,7 +7294,7 @@ declare class DuplicateManifestError extends Error {
  * In-memory implementation of the IDocumentModelRegistry interface.
  * Manages document model modules with version-aware storage and upgrade manifest support.
  */
-declare class DocumentModelRegistry implements IDocumentModelRegistry {
+export declare class DocumentModelRegistry implements IDocumentModelRegistry {
   private modules;
   private manifests;
   registerModules(...modules: DocumentModelModule<any>[]): RegistrationResult<DocumentModelModule<any>>[];
@@ -7163,7 +7318,7 @@ declare class DocumentModelRegistry implements IDocumentModelRegistry {
  * see only those and contribute a map from document id to state. Each
  * distinct stream is read once and yields one append condition entry.
  */
-declare function buildDecisionModel<M>(reader: IStreamStateReader, definition: (target: DecisionTarget) => DecisionModel<M>, target: DecisionTarget, signal?: AbortSignal): Promise<BuiltDecisionModel<M>>;
+export declare function buildDecisionModel<M>(reader: IStreamStateReader, definition: (target: DecisionTarget) => DecisionModel<M>, target: DecisionTarget, signal?: AbortSignal): Promise<BuiltDecisionModel<M>>;
 //#endregion
 //#region src/decision/auth-decision-model.d.ts
 type AuthDecisionModel = {
@@ -7171,7 +7326,7 @@ type AuthDecisionModel = {
   auth: PHAuthState;
 };
 /** This decision model uses both the document and the auth streams. */
-declare function authDecisionModel(target: DecisionTarget): DecisionModel<AuthDecisionModel>;
+export declare function authDecisionModel(target: DecisionTarget): DecisionModel<AuthDecisionModel>;
 //#endregion
 //#region src/decision/sync-scope-gate.d.ts
 /**
@@ -7181,7 +7336,7 @@ declare function authDecisionModel(target: DecisionTarget): DecisionModel<AuthDe
  * scope, and carries no state. Fetching the document is therefore the serving
  * path's own job, and it is the only thing this adds to the gate it wraps.
  */
-declare class SyncScopeGate {
+export declare class SyncScopeGate {
   private readonly gate;
   private readonly documentView;
   private readonly logger?;
@@ -7224,13 +7379,13 @@ type OutOfOrderPair = {
  * `requireStrict` additionally rejects a tie, which is what the auth stream's
  * monotonic rule requires and what the walk alone does not care about.
  */
-declare function firstOutOfOrderPair(operations: Operation[], options?: {
+export declare function firstOutOfOrderPair(operations: Operation[], options?: {
   requireStrict?: boolean;
 }): OutOfOrderPair | undefined;
 //#endregion
 //#region src/storage/kysely/document-indexer.d.ts
 type IndexerDatabase = Database$1 & DocumentIndexerDatabase & DocumentViewDatabase;
-declare class KyselyDocumentIndexer extends BaseReadModel implements IDocumentIndexer {
+export declare class KyselyDocumentIndexer extends BaseReadModel implements IDocumentIndexer {
   private _db;
   constructor(db: Kysely<IndexerDatabase>, operationIndex: IOperationIndex, writeCache: IWriteCache, consistencyTracker: IConsistencyTracker, indexing?: ReadModelIndexingConfig);
   /** Opens no transaction for a batch carrying no relationship operation. */
@@ -7257,7 +7412,7 @@ declare class KyselyDocumentIndexer extends BaseReadModel implements IDocumentIn
  * serialized so the executor can return to dispatch without holding ordering
  * implicitly.
  */
-declare class ReadModelCoordinator implements ILiveReadModelCoordinator {
+export declare class ReadModelCoordinator implements ILiveReadModelCoordinator {
   private eventBus;
   readonly preReady: IReadModel[];
   readonly postReady: IReadModel[];
@@ -7292,7 +7447,7 @@ type Database$2 = Database$1 & DocumentViewDatabase;
  * What a single-document read of a deleted document returns. A listing omits a
  * deleted document under either value.
  */
-declare enum DeletedDocumentRead {
+export declare enum DeletedDocumentRead {
   /**
    * The document reads as missing: `get` throws and `resolveIdOrSlug` does not
    * match its id.
@@ -7305,7 +7460,7 @@ declare enum DeletedDocumentRead {
    */
   StateAtDeletion = "StateAtDeletion"
 }
-declare class KyselyDocumentView extends BaseReadModel implements IDocumentView {
+export declare class KyselyDocumentView extends BaseReadModel implements IDocumentView {
   private operationStore;
   private readonly deletedDocumentRead;
   private _db;
@@ -7349,9 +7504,9 @@ declare class KyselyDocumentView extends BaseReadModel implements IDocumentView
 //#endregion
 //#region src/read-models/names.d.ts
 /** `getReadModel` name of the document view; see {@link ReactorReadModels}. */
-declare const DOCUMENT_VIEW_READ_MODEL = "document-view";
+export declare const DOCUMENT_VIEW_READ_MODEL = "document-view";
 /** `getReadModel` name of the document indexer; see {@link ReactorReadModels}. */
-declare const DOCUMENT_INDEXER_READ_MODEL = "document-indexer";
+export declare const DOCUMENT_INDEXER_READ_MODEL = "document-indexer";
 /**
  * Read models the reactor registers on every host, keyed by the name passed to
  * `IProcessorHostModule.getReadModel`. Each entry says what the model holds
@@ -7384,18 +7539,18 @@ interface ReactorReadModels {
 }
 //#endregion
 //#region src/storage/migrations/migrator.d.ts
-declare const REACTOR_SCHEMA = "reactor";
+export declare const REACTOR_SCHEMA = "reactor";
 /**
  * Applies every pending migration, or every one up to and including `upTo`.
  *
  * The bound exists so a test can reach the schema a data migration is written
  * against, populate it, and then migrate across the migration under test.
  */
-declare function runMigrations(db: Kysely<any>, schema?: string, upTo?: string): Promise<MigrationResult>;
-declare function getMigrationStatus(db: Kysely<any>, schema?: string): Promise<readonly kysely.MigrationInfo[]>;
+export declare function runMigrations(db: Kysely<any>, schema?: string, upTo?: string): Promise<MigrationResult>;
+export declare function getMigrationStatus(db: Kysely<any>, schema?: string): Promise<readonly import("kysely").MigrationInfo[]>;
 //#endregion
 //#region src/storage/kysely/sync-cursor-storage.d.ts
-declare class KyselySyncCursorStorage implements ISyncCursorStorage {
+export declare class KyselySyncCursorStorage implements ISyncCursorStorage {
   private readonly db;
   constructor(db: Kysely<Database$1>);
   list(remoteName: string, signal?: AbortSignal): Promise<RemoteCursor[]>;
@@ -7405,7 +7560,7 @@ declare class KyselySyncCursorStorage implements ISyncCursorStorage {
 }
 //#endregion
 //#region src/storage/kysely/sync-remote-storage.d.ts
-declare class KyselySyncRemoteStorage implements ISyncRemoteStorage {
+export declare class KyselySyncRemoteStorage implements ISyncRemoteStorage {
   private readonly db;
   constructor(db: Kysely<Database$1>);
   list(signal?: AbortSignal): Promise<RemoteRecord[]>;
@@ -7424,7 +7579,7 @@ declare class KyselySyncRemoteStorage implements ISyncRemoteStorage {
  * The optional jwtHandler enables dynamic JWT token generation per-request,
  * which is useful for short-lived tokens with audience-specific claims.
  */
-declare class GqlRequestChannelFactory implements IChannelFactory {
+export declare class GqlRequestChannelFactory implements IChannelFactory {
   private readonly logger;
   private readonly jwtHandler?;
   private readonly queue;
@@ -7445,7 +7600,7 @@ declare class GqlRequestChannelFactory implements IChannelFactory {
 /**
  * Factory for creating GqlResponseChannel instances.
  */
-declare class GqlResponseChannelFactory implements IChannelFactory {
+export declare class GqlResponseChannelFactory implements IChannelFactory {
   private readonly logger;
   constructor(logger: ILogger);
   instance(remoteId: string, remoteName: string, config: ChannelConfig, cursorStorage: ISyncCursorStorage): IChannel;
@@ -7458,8 +7613,11 @@ declare class GqlResponseChannelFactory implements IChannelFactory {
  * The delegate returns a Promise; timer waits for completion before scheduling next tick.
  */
 type IPollTimer = {
-  /** Register the delegate to be called on each tick. Returns Promise that timer awaits. */setDelegate: (delegate: () => Promise<void>) => void; /** Start the timer (begins calling delegate periodically) */
-  start: () => void; /** Stop the timer */
+  /** Register the delegate to be called on each tick. Returns Promise that timer awaits. */
+  setDelegate: (delegate: () => Promise<void>) => void;
+  /** Start the timer (begins calling delegate periodically) */
+  start: () => void;
+  /** Stop the timer */
   stop: () => void;
   /**
    * Fires the delegate exactly once without changing the running/paused state.
@@ -7473,18 +7631,25 @@ type IPollTimer = {
  * Configuration parameters for GqlChannel
  */
 type GqlChannelConfig = {
-  /** The GraphQL endpoint URL */url: string; /** Dynamic JWT token handler for generating fresh tokens per-request */
-  jwtHandler?: JwtHandler; /** Custom fetch function for testing (default: global fetch) */
-  fetchFn?: typeof fetch; /** Collection to synchronize (drive-level abstraction) */
-  collectionId: DriveCollectionId; /** Filter to apply to operations */
-  filter: RemoteFilter; /** Base delay in ms for exponential backoff on push retries */
-  retryBaseDelayMs: number; /** Maximum delay in ms for exponential backoff on push retries */
+  /** The GraphQL endpoint URL */
+  url: string;
+  /** Dynamic JWT token handler for generating fresh tokens per-request */
+  jwtHandler?: JwtHandler;
+  /** Custom fetch function for testing (default: global fetch) */
+  fetchFn?: typeof fetch;
+  /** Collection to synchronize (drive-level abstraction) */
+  collectionId: DriveCollectionId;
+  /** Filter to apply to operations */
+  filter: RemoteFilter;
+  /** Base delay in ms for exponential backoff on push retries */
+  retryBaseDelayMs: number;
+  /** Maximum delay in ms for exponential backoff on push retries */
   retryMaxDelayMs: number;
 };
 /**
  * GraphQL-based synchronization channel for network communication between reactors.
  */
-declare class GqlRequestChannel implements IChannel {
+export declare class GqlRequestChannel implements IChannel {
   private readonly logger;
   readonly inbox: IMailbox;
   readonly outbox: IMailbox;
@@ -7622,7 +7787,7 @@ declare class GqlRequestChannel implements IChannel {
  *
  * In general, the resolvers are responsible for updating mailboxes.
  */
-declare class GqlResponseChannel implements IChannel {
+export declare class GqlResponseChannel implements IChannel {
   private readonly logger;
   readonly inbox: Mailbox;
   readonly outbox: Mailbox;
@@ -7697,7 +7862,7 @@ type PollTimerConfig = {
  * Waits for delegate completion before scheduling next tick.
  * Checks queue depth and defers polling when backpressure is detected.
  */
-declare class IntervalPollTimer implements IPollTimer {
+export declare class IntervalPollTimer implements IPollTimer {
   private delegate;
   private timer;
   private running;
@@ -7735,7 +7900,7 @@ declare class IntervalPollTimer implements IPollTimer {
  * This ensures operations are grouped for efficient processing while maintaining
  * causality across documents.
  */
-declare function envelopesToSyncOperations(envelope: SyncEnvelope, remoteName: string): SyncOperation[];
+export declare function envelopesToSyncOperations(envelope: SyncEnvelope, remoteName: string): SyncOperation[];
 //#endregion
 //#region src/sync/utils.d.ts
 type OperationBatch = {
@@ -7747,7 +7912,7 @@ type OperationBatch = {
 /**
  * Trims a mailbox using the ack ordinal.
  */
-declare function trimMailboxFromAckOrdinal(mailbox: IMailbox, ackOrdinal: number): void;
+export declare function trimMailboxFromAckOrdinal(mailbox: IMailbox, ackOrdinal: number): void;
 /**
  * Batches consecutive operations by documentId and scope, preserving ordering.
  *
@@ -7760,7 +7925,7 @@ declare function trimMailboxFromAckOrdinal(mailbox: IMailbox, ackOrdinal: number
  * This ensures operations are grouped for efficient processing while maintaining
  * causality across documents and scopes.
  */
-declare function batchOperationsByDocument(operations: OperationWithContext$1[]): OperationBatch[];
+export declare function batchOperationsByDocument(operations: OperationWithContext$1[]): OperationBatch[];
 /**
  * Merges SyncOperations that share the same (documentId, scope, branch) into
  * a single SyncOperation per group. Within each group, operations are sorted
@@ -7774,19 +7939,19 @@ declare function batchOperationsByDocument(operations: OperationWithContext$1[])
  * depend on the other, which validateBatchStructure rejects as a dependency
  * cycle. Merging only adjacent entries keeps the chain linear.
  */
-declare function consolidateSyncOperations(syncOps: SyncOperation[]): SyncOperation[];
+export declare function consolidateSyncOperations(syncOps: SyncOperation[]): SyncOperation[];
 /**
  * Classifies a failure by error name rather than `instanceof`, because a failure
  * that crossed the pooled-worker boundary arrives as plain data.
  */
-declare function classifyJobFailure(errorName: string): SyncOperationErrorType;
+export declare function classifyJobFailure(errorName: string): SyncOperationErrorType;
 /** The explicit type when something else carried it, else derived by name. */
-declare function syncOperationErrorType(error: ChannelError | undefined): SyncOperationErrorType;
+export declare function syncOperationErrorType(error: ChannelError | undefined): SyncOperationErrorType;
 /**
  * A held auth operation must not quarantine: reconciling the two policies needs
  * the traffic a quarantine would stop.
  */
-declare function quarantinesDocument(errorType: SyncOperationErrorType): boolean;
+export declare function quarantinesDocument(errorType: SyncOperationErrorType): boolean;
 //#endregion
 //#region src/processors/host-module.d.ts
 /**
@@ -7811,11 +7976,12 @@ interface IReactorProcessorHostModuleBase extends IProcessorHostModuleBase$1 {
   getReadModel<T>(name: string): T;
 }
 type ReactorHostModuleBaseOptions = Pick<IProcessorHostModuleBase$1, "analyticsStore" | "relationalDb" | "processorApp" | "config"> & {
-  client: IReactorClient; /** Registered read models, typically `readModelCoordinator.readModels`. */
+  client: IReactorClient;
+  /** Registered read models, typically `readModelCoordinator.readModels`. */
   readModels: ReadonlyArray<Pick<IReadModel, "name">>;
 };
 /** Builds the reactor-level host module; hosts spread it and add their own fields. */
-declare function createReactorHostModuleBase(options: ReactorHostModuleBaseOptions): IReactorProcessorHostModuleBase;
+export declare function createReactorHostModuleBase(options: ReactorHostModuleBaseOptions): IReactorProcessorHostModuleBase;
 //#endregion
 //#region src/admin/types.d.ts
 type KeyframeValidationIssue = {
@@ -7858,7 +8024,7 @@ interface IDocumentIntegrityService {
 }
 //#endregion
 //#region src/admin/document-integrity-service.d.ts
-declare class DocumentIntegrityService implements IDocumentIntegrityService {
+export declare class DocumentIntegrityService implements IDocumentIntegrityService {
   private readonly keyframeStore;
   private readonly operationStore;
   private readonly writeCache;
@@ -7884,7 +8050,7 @@ type FactoryRun = () => Promise<void>;
 type ProcessorManagerOptions = {
   legacyProcessorIds?: boolean;
 };
-declare class ProcessorManager extends BaseReadModel implements IProcessorManager$1 {
+export declare class ProcessorManager extends BaseReadModel implements IProcessorManager$1 {
   private factoryRegistry;
   private processorsByDrive;
   private pendingSlots;
@@ -7934,5 +8100,6 @@ declare class ProcessorManager extends BaseReadModel implements IProcessorManage
   private deleteCursors;
 }
 //#endregion
-export { ALWAYS_READABLE_SCOPES, APPEND_CONDITION_FAILED_PREFIX, type AbortMessage, type ActionCandidate, type ActionEvaluationConfig, type ActionEvaluations, type AdmissionDecision, type AdmissionPath, type AppendCondition, AppendConditionFailedError, type AppendConditionStream, type AtomicTxn, type AttachmentHash, type AttachmentRef, type AuthDecisionModel, AuthEnforcementDisabledError, BareReadGate, BaseReadModel, type BaseReadModelConfig, type BatchExecutionRequest, type BatchExecutionResult, type BatchLoadRequest, type BatchLoadResult, type BuiltDecisionModel, type BuiltInReadModelKind, type CachedSnapshot, type ChannelConfig, ChannelError, ChannelErrorSource, type ChannelHealth, type ChannelMeta, ChannelScheme, type ConnectionState, type ConnectionStateChangeCallback, type ConnectionStateChangedEvent, type ConnectionStateSnapshot, type ConsistencyCoordinate, type ConsistencyKey, type ConsistencyToken, ConsistencyTracker, DEFAULT_COMMIT_CHUNK_SIZE, DEFAULT_DRIVE_CONTAINER_TYPES, DEFAULT_READ_MODEL_YIELD_DEADLINE_MS, DOCUMENT_INDEXER_READ_MODEL, DOCUMENT_VIEW_READ_MODEL, DRIVE_AUTH_ERROR_MESSAGES, type Database, type DbConfig, type DeadLetterAddedEvent, type DecisionContext, type DecisionModel, type DecisionTarget, DefaultSubscriptionErrorHandler, type DegradedComponent, DeletedDocumentRead, DocumentAlreadyExistsError, type DocumentChangeEvent, DocumentChangeType, type DocumentDecisionModel, DocumentExistence, type DocumentGraphEdge, type DocumentIndexerDatabase, DocumentIntegrityService, DocumentModelRegistry, DocumentModelResolver, type DocumentModelSource, type DocumentModelSpec, type DocumentRelationship, type DocumentRevisions, type DocumentStreamKey, type DocumentViewDatabase, DriveClient, DriveCollectionId, DriveRequestError, DuplicateManifestError, DuplicateModuleError, DuplicateOperationError, type Evaluation, EventBus, EventBusAggregateError, type ExecuteMessage, type ExecutionJobPlan, type ExecutorStartedEvent, type ExecutorStoppedEvent, type FactorySpec, type FileModelSource, type GqlChannelConfig, GqlRequestChannel, GqlRequestChannelFactory, GqlResponseChannel, GqlResponseChannelFactory, type HeartbeatMessage, HybridProjectionCoordinator, type HybridProjectionCoordinatorOptions, type HybridProjectionOptions, type IChannel, type IChannelFactory, type IConsistencyTracker, type IDocumentGraph, type IDocumentIndexer, type IDocumentIntegrityService, type IDocumentModelLoader, type IDocumentModelRegistry, type IDocumentModelResolver, type IDocumentView, type IDriveClient, type IEventBus, type IJobAwaiter, type IJobExecutor, type IJobExecutorManager, type IJobTracker, type IKeyframeStore, type ILiveReadModelCoordinator, type IMailbox, type IOperationIndex, type IOperationStore, type IPollTimer, type IProcessor, type IProcessorHostModuleBase, type IProcessorManager, type IProjectionTransport, type IQueue, type IReactor, type IReactorClient, type IReactorProcessorHostModuleBase, type IReactorSubscriptionManager, type IReadGate, type IReadModel, type IReadModelCoordinator, type IRelationalDb, type IStreamStateReader, type ISubscriptionErrorHandler, type ISyncCursorStorage, type ISyncManager, type ISyncRemoteStorage, type ISyncStatusTracker, type IWriteCache, SimpleJobExecutor as InMemoryJobExecutor, SimpleJobExecutor, InMemoryJobTracker, InMemoryQueue, type InProcessReactorClientModule, type InProcessReactorModule, type InProcessSyncModule, type InitMessage, type InsertableDocumentSnapshot, IntervalPollTimer, InvalidModuleError, InvalidSignatureError, type Job, type JobAvailableEvent, JobAwaiter, type JobCompletedEvent, type JobExecutorConfig, JobExecutorEventTypes, type JobExecutorFactory, type JobFailedEvent, type JobInfo, type JobPendingEvent, type JobReadReadyEvent, type JobResult, type JobResultSummary, type JobRunningEvent, type JobStartedEvent, JobStatus, type JobWriteReadyEvent, type JobWriteReadyPayload, type JwtHandler, type KeyframeSnapshot, type KeyframeValidationIssue, KyselyDocumentIndexer, KyselyDocumentView, KyselyKeyframeStore, KyselyOperationStore, KyselySyncCursorStorage, KyselySyncRemoteStorage, KyselyWriteCache, type LoadJobPlan, type LoadModelMessage, type LogMessage, Mailbox, type MetricsMessage, type ModelLoadFailedMessage, type ModelLoadedEvent, type ModelLoadedMessage, type ModelManifestEntry, ModelReadGate, ModuleNotFoundError, type ModuleRef, NullDocumentModelResolver, type OperationBatch, type OperationContext, type OperationFilter, type OperationIndexEntry, type OperationTable, type OperationWithContext, OptimisticLockError, type OutOfOrderPair, type PackageModelSource, type PagedResults, type PagingOptions, type ParentMessage, type ParsedDriveUrl, type ParsedPaging, PollBehavior, PollingChannelError, type PoolInstrumentation, type PoolStats, type ProcessorApp, type ProcessorFactory, type ProcessorFactoryBuilder, type ProcessorFilter, ProcessorManager, type ProcessorRecord, type ProcessorStatus, type Projection, type ProjectionShardBuilderConfig, type ProjectionShardHooks, type ProjectionShardManagerConfig, type ProjectionWorkerFactory, PropagationMode, QueueEventTypes, REACTOR_SCHEMA, RECOVERABLE_GRAPHQL_ERROR_CODES, Reactor, ReactorBuilder, ReactorClient, ReactorClientBuilder, type ReactorClientModule, ReactorEventTypes, type ReactorFeatureFlags, type ReactorFeatures, type ReactorHostModuleBaseOptions, type JobFailedEvent$1 as ReactorJobFailedEvent, type ReactorModule, type ReactorReadModels, ReactorSubscriptionManager, type ReadGateOptions, type ReadModelBatchCompletedEvent, ReadModelCoordinator, type ReadModelCoordinatorFactory, type ReadModelCoordinatorFactoryDeps, type ReadModelFactory, type ReadModelFactoryDeps, type ReadModelIndexedEvent, type ReadModelIndexingConfig, type ReadModelIndexingStage, type ReadModelRegistrationStage, type ReadModelStage, type ReadyMessage, type RebuildResult, type RegisteredDecisionModel, RelationalDbProcessor, RelationshipChangeType, RelationshipNotFoundError, type Remote, type RemoteCursor, type RemoteFilter, type RemoteMeta, type RemoteOptions, type RemoteRecord, type RemoteStatus, type ResultMessage, RetryAccounting, RevisionMismatchError, SIGNATURE_REFUSAL_CODES, type SanitizedArg, type SearchFilter, SeededStateReader, type ShutdownMessage, type ShutdownStatus, type SignatureRefusalCode, type SignatureRefusedEvent, type SignatureScheme, type SignatureTrustPolicy, type SignatureVerificationHandler, type SignatureVerificationMode, type SignerConfig, SimpleJobExecutorManager, type SnapshotValidationIssue, type Database$1 as StorageDatabase, type StreamOrderIssue, type StreamQuery, type SubmittedActionResult, type SubscriptionErrorContext, SyncBuilder, type SyncEnvelope, type SyncEnvelopeType, SyncEventTypes, type SyncFailedEvent, type SyncModule, SyncOperation, SyncOperationAggregateError, type SyncOperationErrorType, SyncOperationStatus, type SyncPendingEvent, SyncScopeGate, SyncStatus, type SyncStatusChangeCallback, SyncStatusTracker, type SyncSucceededEvent, type TrackedProcessor, type Unsubscribe, type ValidationResult, type VerificationTarget, type ViewFilter, type ErrorInfo as WorkerErrorInfo, type WorkerMessage, type WorkerPoolConfig, type WorkerPoolOptions, type WriteCacheConfig, addRelationshipAction, authDecisionModel, batchOperationsByDocument, buildDecisionModel, classifyJobFailure, consolidateSyncOperations, createDocumentAction, createForwardingLogger, createHybridProjectionCoordinatorFactory, createMutableShutdownStatus, createReactorHostModuleBase, createRelationalDb, decideAtHead, defaultReadModelIndexingConfig, deleteDocumentAction, documentActions, documentDecisionModel, driveIdFromUrl, envelopesToSyncOperations, errorToInfo, firstOutOfOrderPair, getMigrationStatus, instrumentPgPool, isDriveAuthError, isRecoverableGraphQLError, makeConsistencyKey, parseDriveUrl, parsePagingOptions, quarantinesDocument, readDecisionModel, removeRelationshipAction, runMigrations, sanitizeArg, selectDecisionModel, supportsLiveReadModelRegistration, syncOperationErrorType, trimMailboxFromAckOrdinal, unchunkedReadModelIndexingConfig, updateRelationshipAction, upgradeDocumentAction, verifyActionSignature, workerEntryPath };
+export { type AbortMessage, type ActionCandidate, type ActionEvaluationConfig, type ActionEvaluations, type AdmissionDecision, type AdmissionPath, type AppendCondition, type AppendConditionStream, type AtomicTxn, type AttachmentHash, type AttachmentRef, type AuthDecisionModel, type BaseReadModelConfig, type BatchExecutionRequest, type BatchExecutionResult, type BatchLoadRequest, type BatchLoadResult, type BuiltDecisionModel, type BuiltInReadModelKind, type CachedSnapshot, type ChannelConfig, type ChannelHealth, type ChannelMeta, type ConnectionState, type ConnectionStateChangeCallback, type ConnectionStateChangedEvent, type ConnectionStateSnapshot, type ConsistencyCoordinate, type ConsistencyKey, type ConsistencyToken, type Database, type DbConfig, type DeadLetterAddedEvent, type DecisionContext, type DecisionModel, type DecisionTarget, type DegradedComponent, type DocumentChangeEvent, type DocumentDecisionModel, type DocumentGraphEdge, type DocumentIndexerDatabase, type DocumentModelSource, type DocumentModelSpec, type DocumentRelationship, type DocumentRevisions, type DocumentStreamKey, type DocumentViewDatabase, type Evaluation, type ExecuteMessage, type ExecutionJobPlan, type ExecutorStartedEvent, type ExecutorStoppedEvent, type FactorySpec, type FileModelSource, type GqlChannelConfig, type HeartbeatMessage, type HybridProjectionCoordinatorOptions, type HybridProjectionOptions, type IChannel, type IChannelFactory, type IConsistencyTracker, type IDocumentGraph, type IDocumentIndexer, type IDocumentIntegrityService, type IDocumentModelLoader, type IDocumentModelRegistry, type IDocumentModelResolver, type IDocumentView, type IDriveClient, type IEventBus, type IJobAwaiter, type IJobExecutor, type IJobExecutorManager, type IJobTracker, type IKeyframeStore, type ILiveReadModelCoordinator, type IMailbox, type IOperationIndex, type IOperationStore, type IPollTimer, type IProcessor, type IProcessorHostModuleBase, type IProcessorManager, type IProjectionTransport, type IQueue, type IReactor, type IReactorClient, type IReactorProcessorHostModuleBase, type IReactorSubscriptionManager, type IReadGate, type IReadModel, type IReadModelCoordinator, type IRelationalDb, type IStreamStateReader, type ISubscriptionErrorHandler, type ISyncCursorStorage, type ISyncManager, type ISyncRemoteStorage, type ISyncStatusTracker, type IWriteCache, SimpleJobExecutor as InMemoryJobExecutor, type InProcessReactorClientModule, type InProcessReactorModule, type InProcessSyncModule, type InitMessage, type InsertableDocumentSnapshot, type Job, type JobAvailableEvent, type JobCompletedEvent, type JobExecutorConfig, type JobExecutorFactory, type JobFailedEvent, type JobInfo, type JobPendingEvent, type JobReadReadyEvent, type JobResult, type JobResultSummary, type JobRunningEvent, type JobStartedEvent, type JobWriteReadyEvent, type JobWriteReadyPayload, type JwtHandler, type KeyframeSnapshot, type KeyframeValidationIssue, type LoadJobPlan, type LoadModelMessage, type LogMessage, type MetricsMessage, type ModelLoadFailedMessage, type ModelLoadedEvent, type ModelLoadedMessage, type ModelManifestEntry, type ModuleRef, type OperationBatch, type OperationContext, type OperationFilter, type OperationIndexEntry, type OperationTable, type OperationWithContext, type OutOfOrderPair, type PackageModelSource, type PagedResults, type PagingOptions, type ParentMessage, type ParsedDriveUrl, type ParsedPaging, type PoolInstrumentation, type PoolStats, type ProcessorApp, type ProcessorFactory, type ProcessorFactoryBuilder, type ProcessorFilter, type ProcessorRecord, type ProcessorStatus, type Projection, type ProjectionShardBuilderConfig, type ProjectionShardHooks, type ProjectionShardManagerConfig, type ProjectionWorkerFactory, type ReactorClientModule, type ReactorFeatureFlags, type ReactorFeatures, type ReactorHostModuleBaseOptions, type JobFailedEvent$1 as ReactorJobFailedEvent, type ReactorModule, type ReactorReadModels, type ReadGateOptions, type ReadModelBatchCompletedEvent, type ReadModelCoordinatorFactory, type ReadModelCoordinatorFactoryDeps, type ReadModelFactory, type ReadModelFactoryDeps, type ReadModelIndexedEvent, type ReadModelIndexingConfig, type ReadModelIndexingStage, type ReadModelRegistrationStage, type ReadModelStage, type ReadyMessage, type RebuildResult, type RegisteredDecisionModel, RelationalDbProcessor, type Remote, type RemoteCursor, type RemoteFilter, type RemoteMeta, type RemoteOptions, type RemoteRecord, type RemoteStatus, type ResultMessage, type SanitizedArg, type SearchFilter, type ShutdownMessage, type ShutdownStatus, type SignatureRefusalCode, type SignatureRefusedEvent, type SignatureScheme, type SignatureTrustPolicy, type SignatureVerificationHandler, type SignatureVerificationMode, type SignerConfig, type SnapshotValidationIssue, type Database$1 as StorageDatabase, type StreamOrderIssue, type StreamQuery, type SubjectScopePredicate, type SubmittedActionResult, type SubscriptionErrorContext, type SyncEnvelope, type SyncEnvelopeType, type SyncFailedEvent, type SyncModule, type SyncOperationErrorType, type SyncPendingEvent, type SyncStatusChangeCallback, type SyncSucceededEvent, type TrackedProcessor, type Unsubscribe, type ValidationResult, type VerificationTarget, type ViewFilter, type ErrorInfo as WorkerErrorInfo, type WorkerMessage, type WorkerPoolConfig, type WorkerPoolOptions, type WriteCacheConfig, createRelationalDb, documentActions };
+export {};
 //# sourceMappingURL=index.d.ts.map