@rocicorp/zero 0.26.1 → 0.26.2-canary.4

package/out/zero-cache/src/services/view-syncer/view-syncer.js

@@ -1,1627 +1,1091 @@
-import { Lock } from "@rocicorp/lock";
-import { resolver } from "@rocicorp/resolver";
-import { startSpan, startAsyncSpan, manualSpan } from "../../../../otel/src/span.js";
 import { assert, unreachable } from "../../../../shared/src/asserts.js";
-import { stringify } from "../../../../shared/src/bigint-json.js";
-import { CustomKeyMap } from "../../../../shared/src/custom-key-map.js";
 import { must } from "../../../../shared/src/must.js";
-import { randInt } from "../../../../shared/src/rand.js";
-import { Rehome, InvalidConnectionRequest, TransformFailed, InvalidConnectionRequestBaseCookie } from "../../../../zero-protocol/src/error-kind-enum.js";
+import { InvalidConnectionRequest, InvalidConnectionRequestBaseCookie, Rehome } from "../../../../zero-protocol/src/error-kind-enum.js";
 import { ZeroCache } from "../../../../zero-protocol/src/error-origin-enum.js";
-import { HTTP } from "../../../../zero-protocol/src/error-reason-enum.js";
+import "../../../../zero-protocol/src/error-reason-enum.js";
 import { ProtocolError, isProtocolError } from "../../../../zero-protocol/src/error.js";
-import { clampTTL, MAX_TTL_MS } from "../../../../zql/src/query/ttl.js";
-import { transformAndHashQuery } from "../../auth/read-authorizer.js";
-import { getOrCreateUpDownCounter, getOrCreateCounter, getOrCreateHistogram } from "../../observability/metrics.js";
-import { ProtocolErrorWithLevel, getLogLevel } from "../../types/error-with-level.js";
+import { MAX_TTL_MS, clampTTL } from "../../../../zql/src/query/ttl.js";
+import { stringify } from "../../../../shared/src/bigint-json.js";
+import { manualSpan, startAsyncSpan, startSpan } from "../../../../otel/src/span.js";
+import { randInt } from "../../../../shared/src/rand.js";
 import { rowIDString } from "../../types/row-key.js";
-import { Subscription } from "../../types/subscription.js";
+import { ZERO_VERSION_COLUMN_NAME } from "../replicator/schema/constants.js";
 import "../replicator/schema/replication-state.js";
+import { transformAndHashQuery } from "../../auth/read-authorizer.js";
+import { getOrCreateCounter, getOrCreateHistogram, getOrCreateUpDownCounter } from "../../observability/metrics.js";
+import { ResetPipelinesSignal } from "./snapshotter.js";
+import "./pipeline-driver.js";
+import { Subscription } from "../../types/subscription.js";
+import { CustomKeyMap } from "../../../../shared/src/custom-key-map.js";
+import { ttlClockAsNumber, ttlClockFromNumber } from "./ttl-clock.js";
+import { EMPTY_CVR_VERSION, cmpVersions, versionFromString, versionString, versionToCookie } from "./schema/types.js";
+import { ProtocolErrorWithLevel, getLogLevel } from "../../types/error-with-level.js";
 import { ClientHandler, startPoke } from "./client-handler.js";
 import { CVRStore, ClientNotFoundError } from "./cvr-store.js";
-import { CVRConfigDrivenUpdater, nextEvictionTime, CVRQueryDrivenUpdater } from "./cvr.js";
-import { handleInspect } from "./inspect-handler.js";
-import "../../../../shared/src/config.js";
-import "compare-utf8";
-import "../../../../zero-protocol/src/ast.js";
-import "../../../../zero-protocol/src/data.js";
-import "@rocicorp/zero-sqlite3";
-import "../../../../zqlite/src/internal/sql.js";
-import "@databases/escape-identifier";
-import "../../../../shared/src/btree-set.js";
-import "../../../../shared/src/iterables.js";
-import "../../../../shared/src/valita.js";
-import "../../../../zero-schema/src/compiled-permissions.js";
-import "../../../../zero-protocol/src/primary-key.js";
-import { ZERO_VERSION_COLUMN_NAME } from "../replicator/schema/constants.js";
-import "../../types/pg-data-type.js";
-import "../../db/specs.js";
-import { ResetPipelinesSignal } from "./snapshotter.js";
-import { versionString, cmpVersions, EMPTY_CVR_VERSION, versionToCookie, versionFromString } from "./schema/types.js";
 import { tracer } from "./tracer.js";
-import { ttlClockFromNumber, ttlClockAsNumber } from "./ttl-clock.js";
-const PROTOCOL_VERSION_ATTR = "protocol.version";
-const DEFAULT_KEEPALIVE_MS = 5e3;
+import { CVRConfigDrivenUpdater, CVRQueryDrivenUpdater, nextEvictionTime } from "./cvr.js";
+import { handleInspect } from "./inspect-handler.js";
+import { resolver } from "@rocicorp/resolver";
+import { Lock } from "@rocicorp/lock";
+//#region ../zero-cache/src/services/view-syncer/view-syncer.ts
+var PROTOCOL_VERSION_ATTR = "protocol.version";
+var DEFAULT_KEEPALIVE_MS = 5e3;
 function randomID() {
-  return randInt(1, Number.MAX_SAFE_INTEGER).toString(36);
+	return randInt(1, Number.MAX_SAFE_INTEGER).toString(36);
 }
-const TTL_CLOCK_INTERVAL = 6e4;
-const TTL_TIMER_HYSTERESIS = 50;
-class ViewSyncerService {
-  id;
-  #shard;
-  #lc;
-  #pipelines;
-  #stateChanges;
-  #drainCoordinator;
-  #keepaliveMs;
-  #slowHydrateThreshold;
-  #queryConfig;
-  #authSession;
-  userQueryURL;
-  userQueryHeaders;
-  // The ViewSyncerService is only started in response to a connection,
-  // so #lastConnectTime is always initialized to now(). This is necessary
-  // to handle race conditions in which, e.g. the replica is ready and the
-  // CVR is accessed before the first connection sends a request.
-  //
-  // Note: It is fine to update this variable outside of the lock.
-  #lastConnectTime = Date.now();
-  /**
-   * The TTL clock is used to determine the time at which queries are considered
-   * expired.
-   */
-  #ttlClock;
-  /**
-   * The base time for the TTL clock. This is used to compute the current TTL
-   * clock value. The first time a connection is made, this is set to the
-   * current time. On subsequent connections, the TTL clock is computed as the
-   * difference between the current time and this base time.
-   *
-   * Every time we write the ttlClock this is update to the current time. That
-   * way we can compute how much time has passed since the last time we set the
-   * ttlClock. When we set the ttlClock we just increment it by the amount of
-   * time that has passed since the last time we set it.
-   */
-  #ttlClockBase = Date.now();
-  /**
-   * We update the ttlClock every minute to ensure that it is not too much
-   * out of sync with the current time.
-   */
-  #ttlClockInterval = 0;
-  // Note: It is okay to add/remove clients without acquiring the lock.
-  #clients = /* @__PURE__ */ new Map();
-  // Serialize on this lock for:
-  // (1) storage or database-dependent operations
-  // (2) updating member variables.
-  #lock = new Lock();
-  #cvrStore;
-  #stopped = resolver();
-  #initialized = resolver();
-  #cvr;
-  #pipelinesSynced = false;
-  #httpCookie;
-  #origin;
-  #lastAuthRevision = 0;
-  #expiredQueriesTimer = 0;
-  #setTimeout;
-  #customQueryTransformer;
-  // Track query replacements for thrashing detection
-  #queryReplacements = /* @__PURE__ */ new Map();
-  #activeClients = getOrCreateUpDownCounter(
-    "sync",
-    "active-clients",
-    "Number of active sync clients"
-  );
-  #hydrations = getOrCreateCounter(
-    "sync",
-    "hydration",
-    "Number of query hydrations"
-  );
-  #hydrationTime = getOrCreateHistogram("sync", "hydration-time", {
-    description: "Time to hydrate a query.",
-    unit: "s"
-  });
-  #transactionAdvanceTime = getOrCreateHistogram(
-    "sync",
-    "advance-time",
-    {
-      description: "Time to advance all queries for a given client group after applying a new transaction to the replica.",
-      unit: "s"
-    }
-  );
-  #queryTransformations = getOrCreateCounter(
-    "sync",
-    "query.transformations",
-    "Number of query transformations performed"
-  );
-  #queryTransformationTime = getOrCreateHistogram(
-    "sync",
-    "query.transformation-time",
-    {
-      description: "Time to transform custom queries via API server",
-      unit: "s"
-    }
-  );
-  #queryTransformationHashChanges = getOrCreateCounter(
-    "sync",
-    "query.transformation-hash-changes",
-    "Number of times query transformation hash changed"
-  );
-  #queryTransformationNoOps = getOrCreateCounter(
-    "sync",
-    "query.transformation-no-ops",
-    "Number of times query transformation resulted in no-op (hash unchanged)"
-  );
-  #inspectorDelegate;
-  #config;
-  #runPriorityOp;
-  constructor(config, lc, shard, taskID, clientGroupID, cvrDb, pipelineDriver, versionChanges, drainCoordinator, slowHydrateThreshold, inspectorDelegate, customQueryTransformer, runPriorityOp, authSession, keepaliveMs = DEFAULT_KEEPALIVE_MS, setTimeoutFn = setTimeout.bind(globalThis)) {
-    const queryConfig = config.query?.url ? config.query : config.getQueries;
-    this.#config = config;
-    this.id = clientGroupID;
-    this.#shard = shard;
-    this.#queryConfig = queryConfig;
-    this.#lc = lc;
-    this.#pipelines = pipelineDriver;
-    this.#stateChanges = versionChanges;
-    this.#drainCoordinator = drainCoordinator;
-    this.#keepaliveMs = keepaliveMs;
-    this.#slowHydrateThreshold = slowHydrateThreshold;
-    this.#inspectorDelegate = inspectorDelegate;
-    this.#customQueryTransformer = customQueryTransformer;
-    this.#authSession = authSession;
-    this.#cvrStore = new CVRStore(
-      lc,
-      cvrDb,
-      shard,
-      taskID,
-      clientGroupID,
-      // On failure, cancel the #stateChanges subscription. The run()
-      // loop will then await #cvrStore.flushed() which rejects if necessary.
-      () => this.#stateChanges.cancel()
-    );
-    this.#setTimeout = setTimeoutFn;
-    this.#runPriorityOp = runPriorityOp;
-    this.keepalive();
-  }
-  get auth() {
-    return this.#authSession.auth;
-  }
-  clearAuth() {
-    this.#authSession.clear();
-    this.#lastAuthRevision = 0;
-  }
-  initAuthSession(userID, wireAuth) {
-    return this.#authSession.update(userID, wireAuth);
-  }
-  #getHeaderOptions(forwardCookie) {
-    return {
-      apiKey: this.#queryConfig.apiKey,
-      customHeaders: this.userQueryHeaders,
-      allowedClientHeaders: this.#queryConfig.allowedClientHeaders,
-      token: this.#authSession.auth?.raw,
-      cookie: forwardCookie ? this.#httpCookie : void 0,
-      origin: this.#origin
-    };
-  }
-  #runInLockWithCVR(fn) {
-    const rid = randomID();
-    this.#lc.debug?.("about to acquire lock for cvr ", rid);
-    return this.#lock.withLock(async () => {
-      this.#lc.debug?.("acquired lock in #runInLockWithCVR ", rid);
-      const lc = this.#lc.withContext("lock", rid);
-      if (!this.#stateChanges.active) {
-        this.#lc.debug?.("state changes are inactive");
-        clearTimeout(this.#expiredQueriesTimer);
-        throw new ProtocolErrorWithLevel(
-          {
-            kind: Rehome,
-            message: "Reconnect required",
-            origin: ZeroCache
-          },
-          "info"
-        );
-      }
-      if (await this.#checkForShutdownConditionsInLock()) {
-        this.#lc.info?.(`closing clientGroupID=${this.id}`);
-        this.#stateChanges.cancel();
-        return;
-      }
-      if (!this.#cvr) {
-        this.#lc.debug?.("loading cvr");
-        this.#cvr = await this.#runPriorityOp(
-          lc,
-          "loading cvr",
-          () => this.#cvrStore.load(lc, this.#lastConnectTime)
-        );
-        this.#ttlClock = this.#cvr.ttlClock;
-        this.#ttlClockBase = Date.now();
-      } else {
-        const now = Date.now();
-        this.#cvr = {
-          ...this.#cvr,
-          ttlClock: this.#getTTLClock(now)
-        };
-      }
-      try {
-        await fn(lc, this.#cvr);
-      } catch (e) {
-        this.#cvr = void 0;
-        throw e;
-      }
-    });
-  }
-  readyState() {
-    return Promise.race([
-      this.#initialized.promise,
-      this.#drainCoordinator.draining
-    ]);
-  }
-  async run() {
-    try {
-      if (await this.readyState() === "draining") {
-        this.#lc.debug?.(`draining view-syncer ${this.id} before running`);
-        void this.stop();
-      }
-      for await (const { state } of this.#stateChanges) {
-        if (this.#drainCoordinator.shouldDrain()) {
-          this.#lc.debug?.(`draining view-syncer ${this.id} (elective)`);
-          break;
-        }
-        assert(state === "version-ready", "state should be version-ready");
-        await this.#runInLockWithCVR(async (lc, cvr) => {
-          const clientSchema = must(
-            cvr.clientSchema,
-            "cvr.clientSchema missing after initialization"
-          );
-          if (!this.#pipelines.initialized()) {
-            this.#pipelines.init(clientSchema);
-          }
-          if (cvr.replicaVersion !== null && cvr.version.stateVersion !== "00" && this.#pipelines.replicaVersion < cvr.replicaVersion) {
-            const message = `Cannot sync from older replica: CVR=${cvr.replicaVersion}, DB=${this.#pipelines.replicaVersion}`;
-            lc.info?.(`resetting CVR: ${message}`);
-            throw new ClientNotFoundError(message);
-          }
-          if (this.#pipelinesSynced) {
-            const result = await this.#advancePipelines(lc, cvr);
-            if (result === "success") {
-              return;
-            }
-            lc.info?.(`resetting pipelines: ${result.message}`);
-            this.#pipelines.reset(clientSchema);
-            this.#pipelinesSynced = false;
-          }
-          const version = this.#pipelines.advanceWithoutDiff();
-          const cvrVer = versionString(cvr.version);
-          if (version < cvr.version.stateVersion) {
-            lc.debug?.(`replica@${version} is behind cvr@${cvrVer}`);
-            return;
-          }
-          lc.info?.(`init pipelines@${version} (cvr@${cvrVer})`);
-          await this.#hydrateUnchangedQueries(lc, cvr);
-          await this.#syncQueryPipelineSet(lc, cvr, "missing");
-          this.#pipelinesSynced = true;
-        });
-      }
-      if (this.#drainCoordinator.shouldDrain()) {
-        this.#drainCoordinator.drainNextIn(this.#totalHydrationTimeMs());
-      }
-      await this.#cleanup();
-    } catch (e) {
-      this.#lc[getLogLevel(e)]?.(
-        `stopping view-syncer ${this.id}: ${String(e)}`,
-        e
-      );
-      await this.#cleanup(e);
-    } finally {
-      await this.#cvrStore.flushed(this.#lc).catch((e) => this.#lc[getLogLevel(e)]?.(e));
-      this.#lc.info?.(`view-syncer ${this.id} finished`);
-      this.#stopped.resolve();
-    }
-  }
-  // must be called from within #lock
-  #removeExpiredQueries = async (lc, cvr) => {
-    if (hasExpiredQueries(cvr)) {
-      lc = lc.withContext("method", "#removeExpiredQueries");
-      lc.debug?.("Queries have expired");
-      if (this.#pipelinesSynced) {
-        await this.#syncQueryPipelineSet(lc, cvr, "missing");
-      }
-    }
-    this.#scheduleExpireEviction(lc, cvr);
-  };
-  #totalHydrationTimeMs() {
-    return this.#pipelines.totalHydrationTimeMs();
-  }
-  #keepAliveUntil = 0;
-  /**
-   * Guarantees that the ViewSyncer will remain running for at least
-   * its configured `keepaliveMs`. This is called when establishing a
-   * new connection to ensure that its associated ViewSyncer isn't
-   * shutdown before it receives the connection.
-   *
-   * @return `true` if the ViewSyncer will stay alive, `false` if the
-   *         ViewSyncer is shutting down.
-   */
-  keepalive() {
-    if (!this.#stateChanges.active) {
-      return false;
-    }
-    this.#keepAliveUntil = Date.now() + this.#keepaliveMs;
-    return true;
-  }
-  // oxlint-disable-next-line no-unused-private-class-members -- False positive, used in #scheduleShutdown
-  #shutdownTimer = null;
-  #scheduleShutdown(delayMs = 0) {
-    this.#shutdownTimer ??= this.#setTimeout(() => {
-      this.#shutdownTimer = null;
-      void this.#runInLockWithCVR(() => {
-      }).catch(
-        (e) => (
-          // If an error occurs (e.g. ownership change), propagate the error
-          // to the main run() loop via the #stateChanges Subscription.
-          this.#stateChanges.fail(e)
-        )
-      );
-    }, delayMs);
-  }
-  async #checkForShutdownConditionsInLock() {
-    if (this.#clients.size > 0) {
-      return false;
-    }
-    await this.#cvrStore.flushed(this.#lc);
-    if (Date.now() <= this.#keepAliveUntil) {
-      this.#scheduleShutdown(this.#keepaliveMs);
-      return false;
-    }
-    return this.#clients.size === 0;
-  }
-  #deleteClientDueToDisconnect(clientID, client) {
-    const c = this.#clients.get(clientID);
-    if (c === client) {
-      this.#clients.delete(clientID);
-      if (this.#clients.size === 0) {
-        if (this.#ttlClock !== void 0) {
-          this.#updateTTLClockInCVRWithoutLock(this.#lc);
-        }
-        this.#stopExpireTimer();
-        this.#scheduleShutdown();
-      }
-    }
-  }
-  #stopExpireTimer() {
-    this.#lc.debug?.("Stopping expired queries timer");
-    clearTimeout(this.#expiredQueriesTimer);
-    this.#expiredQueriesTimer = 0;
-  }
-  initConnection(ctx, initConnectionMessage) {
-    this.#lc.debug?.("viewSyncer.initConnection");
-    return startSpan(tracer, "vs.initConnection", () => {
-      const {
-        clientID,
-        profileID,
-        wsID,
-        baseCookie,
-        httpCookie,
-        origin,
-        protocolVersion
-      } = ctx;
-      this.#httpCookie = httpCookie;
-      this.#origin = origin;
-      const [, { userQueryURL, userQueryHeaders }] = initConnectionMessage;
-      if (this.userQueryURL === void 0) {
-        this.userQueryURL = userQueryURL;
-        this.userQueryHeaders = userQueryHeaders;
-      } else {
-        if (this.userQueryURL !== userQueryURL) {
-          this.#lc.warn?.(
-            "Client provided different query parameters than client group",
-            {
-              clientID,
-              clientURL: userQueryURL,
-              clientGroupURL: this.userQueryURL
-            }
-          );
-        }
-      }
-      const lc = this.#lc.withContext("clientID", clientID).withContext("wsID", wsID);
-      const downstream = Subscription.create({
-        cleanup: (_, err) => {
-          err ? lc[getLogLevel(err)]?.(`client closed with error`, err) : lc.info?.("client closed");
-          this.#deleteClientDueToDisconnect(clientID, newClient);
-          this.#activeClients.add(-1, {
-            [PROTOCOL_VERSION_ATTR]: protocolVersion
-          });
-        }
-      });
-      this.#activeClients.add(1, {
-        [PROTOCOL_VERSION_ATTR]: protocolVersion
-      });
-      if (this.#clients.size === 0) {
-        const now = Date.now();
-        this.#ttlClockBase = now;
-      }
-      const newClient = new ClientHandler(
-        lc,
-        this.id,
-        clientID,
-        wsID,
-        this.#shard,
-        baseCookie,
-        downstream
-      );
-      this.#clients.get(clientID)?.close(`replaced by wsID: ${wsID}`);
-      this.#clients.set(clientID, newClient);
-      void this.#runInLockForClient(
-        ctx,
-        initConnectionMessage,
-        async (lc2, clientID2, msg, cvr) => {
-          if (cvr.clientSchema === null && !msg.clientSchema) {
-            throw new ProtocolErrorWithLevel(
-              {
-                kind: InvalidConnectionRequest,
-                message: "The initConnection message for a new client group must include client schema.",
-                origin: ZeroCache
-              },
-              "warn"
-            );
-          }
-          await this.#handleConfigUpdate(
-            lc2,
-            clientID2,
-            msg,
-            cvr,
-            "all",
-            // re transform all on new connections
-            // Until the profileID is required in the URL, default it to
-            // `cg${clientGroupID}`, as is done in the schema migration.
-            // As clients update to the zero version with the profileID logic,
-            // the value will be correspondingly in the CVR db.
-            profileID ?? `cg${this.id}`
-          );
-          this.#initialized.resolve("initialized");
-        },
-        newClient
-      ).catch((e) => newClient.fail(e));
-      return downstream;
-    });
-  }
-  async changeDesiredQueries(ctx, msg) {
-    await this.#runInLockForClient(
-      ctx,
-      msg,
-      async (lc, clientID, msg2, cvr) => {
-        let customQueryTransformMode = "missing";
-        const currentAuthRevision = this.#authSession.revision;
-        if (this.#lastAuthRevision < currentAuthRevision) {
-          customQueryTransformMode = "all";
-          lc.debug?.(
-            "Auth revision changed, setting customQueryTransformMode to all"
-          );
-        }
-        const result = await this.#handleConfigUpdate(
-          lc,
-          clientID,
-          msg2,
-          cvr,
-          customQueryTransformMode
-        );
-        if (customQueryTransformMode === "all") {
-          this.#lastAuthRevision = currentAuthRevision;
-        }
-        return result;
-      }
-    );
-  }
-  async updateAuth(ctx, msg) {
-    await this.#runInLockForClient(ctx, msg, async (lc, clientID, _, cvr) => {
-      const authResult = await this.#authSession.update(
-        ctx.userID,
-        msg[1].auth
-      );
-      if (!authResult.ok) {
-        throw new ProtocolErrorWithLevel(authResult.error, "warn");
-      }
-      const currentAuthRevision = this.#authSession.revision;
-      if (this.#lastAuthRevision >= currentAuthRevision) {
-        lc.debug?.("Auth revision unchanged, skipping query re-transformation");
-        return;
-      } else {
-        lc.debug?.("Auth revision changed, re-transforming queries");
-      }
-      const result = await this.#handleConfigUpdate(
-        lc,
-        clientID,
-        {},
-        // no config updates, but we want to trigger re-transformation of custom queries if auth changed
-        cvr,
-        "all"
-      );
-      this.#lastAuthRevision = currentAuthRevision;
-      return result;
-    });
-  }
-  async deleteClients(ctx, msg) {
-    const deletedClientIDs = await this.#runInLockForClient(
-      ctx,
-      [msg[0], { deleted: msg[1] }],
-      (lc, clientID, msg2, cvr) => this.#handleConfigUpdate(lc, clientID, msg2, cvr, "missing")
-    );
-    return deletedClientIDs ?? [];
-  }
-  #getTTLClock(now) {
-    const delta = now - this.#ttlClockBase;
-    assert(this.#ttlClock !== void 0, "ttlClock should be defined");
-    const ttlClock = ttlClockFromNumber(
-      ttlClockAsNumber(this.#ttlClock) + delta
-    );
-    assert(
-      ttlClockAsNumber(ttlClock) <= now,
-      "ttlClock should be less than or equal to now"
-    );
-    this.#ttlClock = ttlClock;
-    this.#ttlClockBase = now;
-    return ttlClock;
-  }
-  #flushUpdater(lc, updater) {
-    return startAsyncSpan(
-      tracer,
-      "vs.#flushUpdater",
-      () => this.#runPriorityOp(lc, "flushing cvr", async () => {
-        const now = Date.now();
-        const ttlClock = this.#getTTLClock(now);
-        const { cvr, flushed } = await updater.flush(
-          lc,
-          this.#lastConnectTime,
-          now,
-          ttlClock
-        );
-        if (flushed) {
-          this.#startTTLClockInterval(lc);
-        }
-        return cvr;
-      })
-    );
-  }
-  #startTTLClockInterval(lc) {
-    this.#stopTTLClockInterval();
-    this.#ttlClockInterval = this.#setTimeout(() => {
-      this.#updateTTLClockInCVRWithoutLock(lc);
-      this.#startTTLClockInterval(lc);
-    }, TTL_CLOCK_INTERVAL);
-  }
-  #stopTTLClockInterval() {
-    clearTimeout(this.#ttlClockInterval);
-    this.#ttlClockInterval = 0;
-  }
-  #updateTTLClockInCVRWithoutLock(lc) {
-    const rid = randomID();
-    lc.debug?.("Syncing ttlClock", rid);
-    const start = Date.now();
-    const ttlClock = this.#getTTLClock(start);
-    this.#cvrStore.updateTTLClock(ttlClock, start).then(() => {
-      lc.debug?.("Synced ttlClock", rid, `in ${Date.now() - start} ms`);
-    }).catch((e) => {
-      lc.error?.(
-        "failed to update TTL clock",
-        rid,
-        `after ${Date.now() - start} ms`,
-        e
-      );
-    });
-  }
-  async #updateCVRConfig(lc, cvr, clientID, customQueryTransformMode, fn) {
-    const updater = new CVRConfigDrivenUpdater(
-      this.#cvrStore,
-      cvr,
-      this.#shard
-    );
-    updater.ensureClient(clientID);
-    const patches = fn(updater);
-    this.#cvr = await this.#flushUpdater(lc, updater);
-    if (cmpVersions(cvr.version, this.#cvr.version) < 0) {
-      const newCVR = this.#cvr;
-      await startAsyncSpan(
-        tracer,
-        "vs.#updateCVRConfig.pokeClients",
-        async () => {
-          const pokers = startPoke(
-            this.#getClients(cvr.version),
-            newCVR.version
-          );
-          for (const patch of patches) {
-            await pokers.addPatch(patch);
-          }
-          await pokers.end(newCVR.version);
-        }
-      );
-    }
-    if (this.#pipelinesSynced) {
-      await this.#syncQueryPipelineSet(lc, this.#cvr, customQueryTransformMode);
-    }
-    return this.#cvr;
-  }
-  /**
-   * Runs the given `fn` to process the `msg` from within the `#lock`,
-   * optionally adding the `newClient` if supplied.
-   */
-  #runInLockForClient(ctx, msg, fn, newClient) {
-    this.#lc.debug?.("viewSyncer.#runInLockForClient");
-    const { clientID, wsID } = ctx;
-    const [cmd, body] = msg;
-    if (newClient || !this.#clients.has(clientID)) {
-      this.#lastConnectTime = Date.now();
-    }
-    return startAsyncSpan(
-      tracer,
-      `vs.#runInLockForClient(${cmd})`,
-      async () => {
-        let client;
-        let result;
-        try {
-          await this.#runInLockWithCVR(async (lc, cvr) => {
-            lc = lc.withContext("clientID", clientID).withContext("wsID", wsID).withContext("cmd", cmd);
-            lc.debug?.("acquired lock for cvr");
-            client = this.#clients.get(clientID);
-            if (client?.wsID !== wsID) {
-              lc.debug?.("mismatched wsID", client?.wsID, wsID);
-              return;
-            }
-            if (newClient) {
-              assert(
-                newClient === client,
-                "newClient must match existing client"
-              );
-              checkClientAndCVRVersions(client.version(), cvr.version);
-            } else if (!this.#clients.has(clientID)) {
-              lc.warn?.(`Processing ${cmd} before initConnection was received`);
-            }
-            lc.debug?.(cmd, body);
-            result = await fn(lc, clientID, body, cvr);
-          });
-        } catch (e) {
-          const lc = this.#lc.withContext("clientID", clientID).withContext("wsID", wsID).withContext("cmd", cmd);
-          lc[getLogLevel(e)]?.(`closing connection with error`, e);
-          if (isTransformAuthFailure(e)) {
-            lc.debug?.("Auth failure detected in transform response");
-            this.clearAuth();
-          }
-          if (client) {
-            client.fail(e);
-          } else {
-            throw e;
-          }
-        }
-        return result;
-      }
-    );
-  }
-  #getClients(atVersion) {
-    const clients = [...this.#clients.values()];
-    return atVersion ? clients.filter(
-      (c) => cmpVersions(c.version() ?? EMPTY_CVR_VERSION, atVersion) === 0
-    ) : clients;
-  }
-  // Must be called from within #lock.
-  #handleConfigUpdate = (lc, clientID, {
-    clientSchema,
-    deleted,
-    desiredQueriesPatch,
-    activeClients
-  }, cvr, customQueryTransformMode, profileID) => startAsyncSpan(tracer, "vs.#handleConfigUpdate", async () => {
-    const deletedClientIDs = [];
-    const deletedClientGroupIDs = [];
-    cvr = await this.#updateCVRConfig(
-      lc,
-      cvr,
-      clientID,
-      customQueryTransformMode,
-      (updater) => {
-        const { ttlClock } = cvr;
-        const patches = [];
-        if (clientSchema) {
-          updater.setClientSchema(lc, clientSchema);
-        }
-        if (profileID) {
-          updater.setProfileID(lc, profileID);
-        }
-        lc.debug?.(
-          `applying ${desiredQueriesPatch?.length ?? 0} query patches`
-        );
-        if (desiredQueriesPatch?.length) {
-          for (const patch of desiredQueriesPatch) {
-            switch (patch.op) {
-              case "put":
-                patches.push(...updater.putDesiredQueries(clientID, [patch]));
-                break;
-              case "del":
-                patches.push(
-                  ...updater.markDesiredQueriesAsInactive(
-                    clientID,
-                    [patch.hash],
-                    ttlClock
-                  )
-                );
-                break;
-              case "clear":
-                patches.push(...updater.clearDesiredQueries(clientID));
-                break;
-            }
-          }
-        }
-        const clientIDsToDelete = /* @__PURE__ */ new Set();
-        if (activeClients) {
-          const allClientIDs = Object.keys(cvr.clients);
-          const activeClientsSet = new Set(activeClients);
-          for (const id of allClientIDs) {
-            if (!activeClientsSet.has(id)) {
-              clientIDsToDelete.add(id);
-            }
-          }
-        }
-        if (deleted?.clientIDs?.length) {
-          for (const cid of deleted.clientIDs) {
-            assert(cid !== clientID, "cannot delete self");
-            clientIDsToDelete.add(cid);
-          }
-        }
-        for (const cid of clientIDsToDelete) {
-          const patchesDueToClient = updater.deleteClient(cid, ttlClock);
-          patches.push(...patchesDueToClient);
-          deletedClientIDs.push(cid);
-        }
-        if (deleted?.clientGroupIDs?.length) {
-          lc.debug?.(
-            `ignoring ${deleted.clientGroupIDs.length} deprecated client group deletes`
-          );
-        }
-        return patches;
-      }
-    );
-    if (deletedClientIDs.length && deleted?.clientIDs?.length || deletedClientGroupIDs.length) {
-      const clients = this.#getClients();
-      await startAsyncSpan(
-        tracer,
-        "vs.#handleConfigUpdate.sendDeleteClients",
-        () => Promise.allSettled(
-          clients.map(
-            (client) => client.sendDeleteClients(
-              lc,
-              deletedClientIDs,
-              deletedClientGroupIDs
-            )
-          )
-        )
-      );
-    }
-    this.#scheduleExpireEviction(lc, cvr);
-    return deletedClientIDs;
-  });
-  #scheduleExpireEviction(lc, cvr) {
-    const { ttlClock } = cvr;
-    this.#stopExpireTimer();
-    const next = nextEvictionTime(cvr);
-    if (next === void 0) {
-      lc.debug?.("no inactive queries with ttl");
-      return;
-    }
-    const delay = Math.max(
-      TTL_TIMER_HYSTERESIS,
-      Math.min(
-        ttlClockAsNumber(next) - ttlClockAsNumber(ttlClock) + TTL_TIMER_HYSTERESIS,
-        MAX_TTL_MS
-      )
-    );
-    lc.debug?.("Scheduling eviction timer to run in ", delay, "ms");
-    this.#expiredQueriesTimer = this.#setTimeout(() => {
-      this.#expiredQueriesTimer = 0;
-      this.#runInLockWithCVR(
-        (lc2, cvr2) => this.#removeExpiredQueries(lc2, cvr2)
-      ).catch(
-        (e) => (
-          // If an error occurs (e.g. ownership change), propagate the error
-          // to the main run() loop via the #stateChanges Subscription.
-          this.#stateChanges.fail(e)
-        )
-      );
-    }, delay);
-  }
-  /**
-   * Adds and hydrates pipelines for queries whose results are already
-   * recorded in the CVR. Namely:
-   *
-   * 1. The CVR state version and database version are the same.
-   * 2. The transformation hash of the queries equal those in the CVR.
-   *
-   * Note that by definition, only "got" queries can satisfy condition (2),
-   * as desired queries do not have a transformation hash.
-   *
-   * This is an initialization step that sets up pipeline state without
-   * the expensive of loading and diffing CVR row state.
-   *
-   * This must be called from within the #lock.
-   */
-  async #hydrateUnchangedQueries(lc, cvr) {
-    assert(this.#pipelines.initialized(), "pipelines must be initialized");
-    const dbVersion = this.#pipelines.currentVersion();
-    const cvrVersion = cvr.version;
-    if (cvrVersion.stateVersion !== dbVersion) {
-      lc.info?.(
-        `CVR (${versionToCookie(cvrVersion)}) is behind db ${dbVersion}`
-      );
-      return;
-    }
-    const gotQueries = Object.entries(cvr.queries).filter(
-      ([_, state]) => state.transformationHash !== void 0
-    );
-    const customQueries = /* @__PURE__ */ new Map();
-    const otherQueries = [];
-    for (const [, query] of gotQueries) {
-      if (query.type !== "internal" && Object.values(query.clientState).every(
-        ({ inactivatedAt }) => inactivatedAt !== void 0
-      )) {
-        continue;
-      }
-      if (query.type === "custom") {
-        customQueries.set(query.id, query);
-      } else {
-        otherQueries.push(query);
-      }
-    }
-    const transformedQueries = [];
-    if (customQueries.size > 0 && !this.#customQueryTransformer) {
-      lc.warn?.(
-        "Custom/named queries were requested but no `ZERO_QUERY_URL` is configured for Zero Cache."
-      );
-    }
-    const customQueryTransformer = this.#customQueryTransformer;
-    if (customQueryTransformer && customQueries.size > 0) {
-      const transformedCustomQueries = await this.#runPriorityOp(
-        lc,
-        "#hydrateUnchangedQueries transforming custom queries",
-        () => customQueryTransformer.transform(
-          this.#getHeaderOptions(this.#queryConfig.forwardCookies),
-          customQueries.values(),
-          this.userQueryURL
-        )
-      );
-      if (Array.isArray(transformedCustomQueries)) {
-        for (const q of transformedCustomQueries) {
-          if (!("error" in q) && q.transformationHash === customQueries.get(q.id)?.transformationHash) {
-            transformedQueries.push(q);
-          }
-        }
-      }
-    }
-    for (const q of otherQueries) {
-      const auth = this.#authSession.auth;
-      const transformed = transformAndHashQuery(
-        lc,
-        q.id,
-        q.ast,
-        must(this.#pipelines.currentPermissions()).permissions ?? {
-          tables: {}
-        },
-        auth?.type === "jwt" ? auth : void 0,
-        q.type === "internal"
-      );
-      if (transformed.transformationHash === q.transformationHash) {
-        transformedQueries.push(transformed);
-      }
-    }
-    for (const {
-      id: queryID,
-      transformationHash,
-      transformedAst
-    } of transformedQueries) {
-      const timer = new TimeSliceTimer(lc);
-      let count = 0;
-      await startAsyncSpan(
-        tracer,
-        "vs.#hydrateUnchangedQueries.addQuery",
-        async (span) => {
-          span.setAttribute("queryHash", queryID);
-          span.setAttribute("transformationHash", transformationHash);
-          span.setAttribute("table", transformedAst.table);
-          for (const change of this.#pipelines.addQuery(
-            transformationHash,
-            queryID,
-            transformedAst,
-            await timer.start()
-          )) {
-            if (change === "yield") {
-              await timer.yieldProcess("yield in hydrateUnchangedQueries");
-            } else {
-              count++;
-            }
-          }
-        }
-      );
-      const elapsed = timer.totalElapsed();
-      this.#hydrations.add(1);
-      this.#hydrationTime.record(elapsed / 1e3);
-      this.#addQueryMaterializationServerMetric(transformationHash, elapsed);
-      lc.debug?.(`hydrated ${count} rows for ${queryID} (${elapsed} ms)`);
-    }
-  }
-  #processTransformedCustomQueries(lc, transformedCustomQueries, cb, customQueryMap) {
-    if ("kind" in transformedCustomQueries) {
-      this.#sendQueryTransformErrorToClients(
-        customQueryMap,
-        transformedCustomQueries
-      );
-      return transformedCustomQueries.queryIDs;
-    }
-    const appQueryErrors = [];
-    for (const q of transformedCustomQueries) {
-      if ("error" in q) {
-        const errorMessage = `Error transforming custom query ${q.name}: ${q.error}${q.details ? ` ${JSON.stringify(q.details)}` : ""}`;
-        lc.warn?.(errorMessage, q);
-        appQueryErrors.push(q);
-        continue;
-      }
-      cb(q);
-    }
-    this.#sendQueryTransformErrorToClients(customQueryMap, appQueryErrors);
-    return appQueryErrors.map((q) => q.id);
-  }
-  #sendQueryTransformErrorToClients(customQueryMap, errorOrErrors) {
-    const getAffectedClientIDs = (queryIDs) => {
-      const clientIds = /* @__PURE__ */ new Set();
-      for (const queryID of queryIDs) {
-        const q = customQueryMap.get(queryID);
-        assert(
-          q,
-          `got an error for query ${queryID} that does not map back to a custom query`
-        );
-        Object.keys(q.clientState).forEach((id) => clientIds.add(id));
-      }
-      return clientIds;
-    };
-    if ("queryIDs" in errorOrErrors) {
-      for (const clientId of getAffectedClientIDs(errorOrErrors.queryIDs)) {
-        this.#clients.get(clientId)?.sendQueryTransformFailedError(errorOrErrors);
-      }
-      return;
-    }
-    const appErrorGroups = /* @__PURE__ */ new Map();
-    for (const err of errorOrErrors) {
-      for (const clientId of getAffectedClientIDs([err.id])) {
-        const group = appErrorGroups.get(clientId) ?? [];
-        group.push(err);
-        appErrorGroups.set(clientId, group);
-      }
-    }
-    for (const [clientId, errors] of appErrorGroups) {
-      this.#clients.get(clientId)?.sendQueryTransformApplicationErrors(errors);
-    }
-  }
-  #addQueryMaterializationServerMetric(queryID, elapsed) {
-    this.#inspectorDelegate.addMetric(
-      "query-materialization-server",
-      elapsed,
-      queryID
-    );
-  }
-  /**
-   * Adds and/or removes queries to/from the PipelineDriver to bring it
-   * in sync with the set of queries in the CVR (both got and desired).
-   * If queries are added, removed, or queried due to a new state version,
-   * a new CVR version is created and pokes sent to connected clients.
-   *
-   * This must be called from within the #lock.
-   */
-  #syncQueryPipelineSet(lc, cvr, customQueryTransformMode) {
-    return startAsyncSpan(tracer, "vs.#syncQueryPipelineSet", async () => {
-      assert(
-        this.#pipelines.initialized(),
-        "pipelines must be initialized (syncQueryPipelineSet)"
-      );
-      if (this.#ttlClock === void 0) {
-        this.#ttlClock = cvr.ttlClock;
-      }
-      const now = Date.now();
-      const ttlClock = this.#getTTLClock(now);
-      const cvrQueryEntires = Object.entries(cvr.queries);
-      const customQueries = /* @__PURE__ */ new Map();
-      const otherQueries = [];
-      const transformedQueries = [];
-      for (const [id, query] of cvrQueryEntires) {
-        if (query.type === "custom") {
-          assert(id === query.id, "custom query id mismatch");
-          customQueries.set(id, query);
-        } else {
-          otherQueries.push({ id, query });
-        }
-      }
-      for (const { id, query: origQuery } of otherQueries) {
-        assert(id === origQuery.id, "query id mismatch");
-        const auth = this.#authSession.auth;
-        const transformed = transformAndHashQuery(
-          lc,
-          origQuery.id,
-          origQuery.ast,
-          must(this.#pipelines.currentPermissions()).permissions ?? {
-            tables: {}
-          },
-          auth?.type === "jwt" ? auth : void 0,
-          origQuery.type === "internal"
-        );
-        transformedQueries.push({
-          id,
-          origQuery,
-          transformed
-        });
-      }
-      if (customQueries.size > 0 && !this.#customQueryTransformer) {
-        lc.warn?.(
-          "Custom/named queries were requested but no `ZERO_QUERY_URL` is configured for Zero Cache."
-        );
-      }
-      let erroredQueryIDs;
-      const customQueriesToTransform = customQueryTransformMode === "all" ? [...customQueries.values()] : customQueryTransformMode && [...customQueries.values()].filter(
-        (q) => !this.#pipelines.queries().has(q.id)
-      );
-      const customQueryTransformer = this.#customQueryTransformer;
-      if (customQueryTransformer && customQueriesToTransform.length > 0) {
-        const transformStart = performance.now();
-        let transformedCustomQueries;
-        try {
-          transformedCustomQueries = await this.#runPriorityOp(
-            lc,
-            "#syncQueryPipelineSet transforming custom queries",
-            () => customQueryTransformer.transform(
-              this.#getHeaderOptions(true),
-              customQueriesToTransform,
-              this.userQueryURL
-            )
-          );
-          if (!Array.isArray(transformedCustomQueries) && transformedCustomQueries.kind === TransformFailed) {
-            throw new ProtocolErrorWithLevel(transformedCustomQueries, "warn");
-          } else {
-            this.#queryTransformations.add(1, { result: "success" });
-          }
-        } catch (e) {
-          this.#queryTransformations.add(1, { result: "error" });
-          throw e;
-        } finally {
-          const transformDuration = (performance.now() - transformStart) / 1e3;
-          this.#queryTransformationTime.record(transformDuration);
-        }
-        const successfullyTransformedCustomQueries = /* @__PURE__ */ new Map();
-        erroredQueryIDs = this.#processTransformedCustomQueries(
-          lc,
-          transformedCustomQueries,
-          (q) => {
-            const origQuery = customQueries.get(q.id);
-            if (origQuery) {
-              successfullyTransformedCustomQueries.set(q.id, q);
-              transformedQueries.push({
-                id: q.id,
-                origQuery,
-                transformed: q
-              });
-            }
-          },
-          customQueries
-        );
-        for (const [
-          queryID,
-          newTransform
-        ] of successfullyTransformedCustomQueries) {
-          const existingTransformHash = cvr.queries[queryID]?.transformationHash;
-          if (existingTransformHash) {
-            const oldHash = existingTransformHash;
-            const newHash = newTransform.transformationHash;
-            if (oldHash !== newHash) {
-              lc.info?.(
-                `Query ${queryID} transformation changed: ${oldHash} -> ${newHash}`
-              );
-              this.#checkForThrashing(queryID);
-              this.#queryTransformationHashChanges.add(1);
-            } else {
-              this.#queryTransformationNoOps.add(1);
-            }
-          }
-        }
-      }
-      const removeQueriesQueryIds = new Set(
-        Object.values(cvr.queries).filter((q) => expired(ttlClock, q)).map((q) => q.id).concat(erroredQueryIDs || [])
-      );
-      const addQueries = transformedQueries.map(({ id, transformed }) => ({
-        id,
-        ast: transformed.transformedAst,
-        transformationHash: transformed.transformationHash
-      })).filter(
-        (q) => !removeQueriesQueryIds.has(q.id) && this.#pipelines.queries().get(q.id)?.transformationHash !== q.transformationHash
-      );
-      for (const q of addQueries) {
-        const orig = cvr.queries[q.id];
-        lc.debug?.(
-          "ViewSyncer adding query",
-          q.ast,
-          "transformed from",
-          orig.type === "custom" ? orig.name : orig.ast
-        );
-      }
-      if (addQueries.length > 0 || removeQueriesQueryIds.size > 0) {
-        await this.#addAndRemoveQueries(
-          lc,
-          cvr,
-          addQueries,
-          [...removeQueriesQueryIds].map((id) => ({ id }))
-        );
-      } else {
-        await this.#catchupClients(lc, cvr);
-      }
-    });
-  }
-  /**
-   * Check if a query is being replaced too frequently (thrashing).
-   * Logs a warning if the query has been replaced more than 3 times in 60 seconds.
-   */
-  #checkForThrashing(queryID) {
-    const THRASH_WINDOW_MS = 6e4;
-    const THRASH_THRESHOLD = 3;
-    const now = Date.now();
-    let record = this.#queryReplacements.get(queryID);
-    if (!record) {
-      record = { count: 1, windowStart: now };
-      this.#queryReplacements.set(queryID, record);
-      return;
-    }
-    if (now - record.windowStart > THRASH_WINDOW_MS) {
-      this.#queryReplacements.delete(queryID);
-      this.#queryReplacements.set(queryID, { count: 1, windowStart: now });
-      return;
-    }
-    record.count++;
-    if (record.count >= THRASH_THRESHOLD) {
-      this.#lc.warn?.(
-        `Query thrashing detected for query ${queryID}. ${record.count} replacements in 60s. This may indicate clients with different auth contexts connecting to the same client group.`
-      );
-    }
-  }
-  // This must be called from within the #lock.
-  #addAndRemoveQueries(lc, cvr, addQueries, removeQueries) {
-    return startAsyncSpan(tracer, "vs.#addAndRemoveQueries", async () => {
-      assert(
-        addQueries.length > 0 || removeQueries.length > 0,
-        "Must have queries to add or remove"
-      );
-      const start = performance.now();
-      const stateVersion = this.#pipelines.currentVersion();
-      lc = lc.withContext("stateVersion", stateVersion);
-      lc.info?.(`hydrating ${addQueries.length} queries`);
-      const updater = new CVRQueryDrivenUpdater(
-        this.#cvrStore,
-        cvr,
-        stateVersion,
-        this.#pipelines.replicaVersion
-      );
-      const { newVersion, queryPatches } = updater.trackQueries(
-        lc,
-        addQueries,
-        removeQueries
-      );
-      const clients = this.#getClients();
-      const pokers = startPoke(clients, newVersion);
-      for (const patch of queryPatches) {
-        await pokers.addPatch(patch);
-      }
-      for (const q of removeQueries) {
-        this.#pipelines.removeQuery(q.id);
-        this.#inspectorDelegate.removeQuery(q.id);
-        this.#queryReplacements.delete(q.id);
-      }
-      let totalProcessTime = 0;
-      const timer = new TimeSliceTimer(lc);
-      const pipelines = this.#pipelines;
-      const hydrations = this.#hydrations;
-      const hydrationTime = this.#hydrationTime;
-      const self = this;
-      await yieldProcess(lc);
-      function* generateRowChanges(slowHydrateThreshold) {
-        for (const q of addQueries) {
-          lc = lc.withContext("hash", q.id).withContext("transformationHash", q.transformationHash);
-          lc.debug?.(`adding pipeline for query`, q.ast);
-          yield* pipelines.addQuery(
-            q.transformationHash,
-            q.id,
-            q.ast,
-            timer.startWithoutYielding()
-          );
-          const elapsed = timer.stop();
-          totalProcessTime += elapsed;
-          self.#addQueryMaterializationServerMetric(q.id, elapsed);
-          if (elapsed > slowHydrateThreshold) {
-            lc.warn?.("Slow query materialization", elapsed, q.ast);
-          }
-          manualSpan(tracer, "vs.addAndConsumeQuery", elapsed, {
-            hash: q.id,
-            transformationHash: q.transformationHash
-          });
-        }
-        hydrations.add(1);
-        hydrationTime.record(totalProcessTime / 1e3);
-      }
-      await this.#processChanges(
-        lc,
-        timer,
-        generateRowChanges(this.#slowHydrateThreshold),
-        updater,
-        pokers
-      );
-      for (const patch of await updater.deleteUnreferencedRows(lc)) {
-        await pokers.addPatch(patch);
-      }
-      this.#cvr = await this.#flushUpdater(lc, updater);
-      const finalVersion = this.#cvr.version;
-      await this.#catchupClients(
-        lc,
-        cvr,
-        finalVersion,
-        addQueries.map((q) => q.id),
-        pokers
-      );
-      await pokers.end(finalVersion);
-      const wallTime = performance.now() - start;
-      lc.info?.(
-        `finished processing queries (process: ${totalProcessTime} ms, wall: ${wallTime} ms)`
-      );
-    });
-  }
-  /**
-   * @param cvr The CVR to which clients should be caught up to. This does
-   *     not necessarily need to be the current CVR.
-   * @param current The expected current CVR version. Before performing
-   *     catchup, the snapshot read will verify that the CVR has not been
-   *     concurrently modified. Note that this only needs to be done for
-   *     catchup because it is the only time data from the CVR DB is
-   *     "exported" without being gated by a CVR flush (which provides
-   *     concurrency protection in all other cases).
-   *
-   *     If unspecified, the version of the `cvr` is used.
-   * @param excludeQueryHashes Exclude patches from rows associated with
-   *     the specified queries.
-   * @param usePokers If specified, sends pokes on existing PokeHandlers,
-   *     in which case the caller is responsible for sending the `pokeEnd`
-   *     messages. If unspecified, the pokes will be started and ended
-   *     using the version from the supplied `cvr`.
-   */
-  // Must be called within #lock
-  #catchupClients(lc, cvr, current, excludeQueryHashes = [], usePokers) {
-    return startAsyncSpan(tracer, "vs.#catchupClients", async (span) => {
-      current ??= cvr.version;
-      const clients = this.#getClients();
-      const pokers = usePokers ?? startPoke(clients, cvr.version);
-      span.setAttribute("numClients", clients.length);
-      const catchupFrom = clients.map((c) => c.version()).reduce((a, b) => cmpVersions(a, b) < 0 ? a : b, cvr.version);
-      const rowPatches = this.#cvrStore.catchupRowPatches(
-        lc,
-        catchupFrom,
-        cvr,
-        current,
-        excludeQueryHashes
-      );
-      const configPatches = this.#cvrStore.catchupConfigPatches(
-        lc,
-        catchupFrom,
-        cvr,
-        current
-      );
-      configPatches.catch(() => {
-      });
-      let rowPatchCount = 0;
-      for await (const rows of rowPatches) {
-        for (const row of rows) {
-          const { schema, table } = row;
-          const rowKey = row.rowKey;
-          const toVersion = versionFromString(row.patchVersion);
-          const id = { schema, table, rowKey };
-          let patch;
-          if (!row.refCounts) {
-            patch = { type: "row", op: "del", id };
-          } else {
-            const row2 = must(
-              this.#pipelines.getRow(table, rowKey),
-              `Missing row ${table}:${stringify(rowKey)}`
-            );
-            const { contents } = contentsAndVersion(row2);
-            patch = { type: "row", op: "put", id, contents };
-          }
-          const patchToVersion = { patch, toVersion };
-          await pokers.addPatch(patchToVersion);
-          rowPatchCount++;
-        }
-      }
-      span.setAttribute("rowPatchCount", rowPatchCount);
-      if (rowPatchCount) {
-        lc.debug?.(`sent ${rowPatchCount} row patches`);
-      }
-      for (const patch of await configPatches) {
-        await pokers.addPatch(patch);
-      }
-      if (!usePokers) {
-        await pokers.end(cvr.version);
-      }
-    });
-  }
-  #processChanges(lc, timer, changes, updater, pokers) {
-    return startAsyncSpan(tracer, "vs.#processChanges", async () => {
-      const start = performance.now();
-      const rows = new CustomKeyMap(rowIDString);
-      let total = 0;
-      const processBatch = () => startAsyncSpan(tracer, "processBatch", async () => {
-        const wallElapsed = performance.now() - start;
-        total += rows.size;
-        lc.debug?.(
-          `processing ${rows.size} (of ${total}) rows (${wallElapsed} ms)`
-        );
-        const patches = await updater.received(lc, rows);
-        for (const patch of patches) {
-          await pokers.addPatch(patch);
-        }
-        rows.clear();
-      });
-      await startAsyncSpan(tracer, "loopingChanges", async (span) => {
-        for (const change of changes) {
-          if (change === "yield") {
-            await timer.yieldProcess("yield in processChanges");
-            continue;
-          }
-          const { type, queryID, table, rowKey, row } = change;
-          const rowID = { schema: "", table, rowKey };
-          let parsedRow = rows.get(rowID);
-          if (!parsedRow) {
-            parsedRow = { refCounts: {} };
-            rows.set(rowID, parsedRow);
-          }
-          parsedRow.refCounts[queryID] ??= 0;
-          const updateVersion = (row2) => {
-            const { version, contents } = contentsAndVersion(row2);
-            parsedRow.version = version;
-            parsedRow.contents = contents;
-          };
-          switch (type) {
-            case "add":
-              updateVersion(row);
-              parsedRow.refCounts[queryID]++;
-              break;
-            case "edit":
-              updateVersion(row);
-              break;
-            case "remove":
-              parsedRow.refCounts[queryID]--;
-              break;
-            default:
-              unreachable(type);
-          }
-          if (rows.size % CURSOR_PAGE_SIZE === 0) {
-            await processBatch();
-          }
-        }
-        if (rows.size) {
-          await processBatch();
-        }
-        span.setAttribute("totalRows", total);
-      });
-    });
-  }
-  /**
-   * Advance to the current snapshot of the replica and apply / send
-   * changes.
-   *
-   * Must be called from within the #lock.
-   *
-   * Returns false if the advancement failed due to a schema change.
-   */
-  #advancePipelines(lc, cvr) {
-    return startAsyncSpan(tracer, "vs.#advancePipelines", async () => {
-      assert(
-        this.#pipelines.initialized(),
-        "pipelines must be initialized (advancePipelines"
-      );
-      const start = performance.now();
-      const timer = new TimeSliceTimer(lc);
-      const { version, numChanges, changes } = this.#pipelines.advance(timer);
-      lc = lc.withContext("newVersion", version);
-      const updater = new CVRQueryDrivenUpdater(
-        this.#cvrStore,
-        cvr,
-        version,
-        this.#pipelines.replicaVersion
-      );
-      const pokers = startPoke(
-        this.#getClients(cvr.version),
-        updater.updatedVersion()
-      );
-      lc.debug?.(`applying ${numChanges} to advance to ${version}`);
-      try {
-        await this.#processChanges(
-          lc,
-          await timer.start(),
-          changes,
-          updater,
-          pokers
-        );
-      } catch (e) {
-        if (e instanceof ResetPipelinesSignal) {
-          await pokers.cancel();
-          return e;
-        }
-        throw e;
-      }
-      this.#cvr = await this.#flushUpdater(lc, updater);
-      const finalVersion = this.#cvr.version;
-      await pokers.end(finalVersion);
-      const wallTime = performance.now() - start;
-      const totalProcessTime = timer.totalElapsed();
-      lc.info?.(
-        `finished processing advancement of ${numChanges} changes ((process: ${totalProcessTime} ms, wall: ${wallTime} ms))`
-      );
-      this.#transactionAdvanceTime.record(totalProcessTime / 1e3);
-      return "success";
-    });
-  }
-  async inspect(context, msg) {
-    await this.#runInLockForClient(context, msg, this.#handleInspect);
-  }
-  // oxlint-disable-next-line require-await
-  #handleInspect = async (lc, clientID, body, cvr) => {
-    const client = must(this.#clients.get(clientID));
-    const auth = this.#authSession.auth;
-    return handleInspect(
-      lc,
-      body,
-      cvr,
-      client,
-      this.#inspectorDelegate,
-      this.id,
-      this.#cvrStore,
-      this.#config,
-      this.#getHeaderOptions(this.#queryConfig.forwardCookies ?? false),
-      this.userQueryURL,
-      auth?.type === "jwt" ? auth : void 0
-    );
-  };
-  stop() {
-    this.#lc.info?.("stopping view syncer");
-    this.#initialized.reject("shut down before initialization completed");
-    this.#stateChanges.cancel();
-    return this.#stopped.promise;
-  }
-  async #cleanup(err) {
-    this.clearAuth();
-    this.#stopTTLClockInterval();
-    this.#stopExpireTimer();
-    for (const client of this.#clients.values()) {
-      if (err) {
-        client.fail(err);
-      } else {
-        client.close(`closed clientGroupID=${this.id}`);
-      }
-    }
-    await this.#lock.withLock(() => {
-    });
-    this.#pipelines.destroy();
-  }
-  /**
-   * Test helper: Manually mark initialization as complete.
-   * This should only be used in tests that don't call initConnection().
-   */
-  markInitialized() {
-    this.#initialized.resolve("initialized");
-  }
-}
-const CURSOR_PAGE_SIZE = 1e4;
-const timeSliceQueue = new Lock();
+/**
+* We update the ttlClock in flush that writes to the CVR but
+* some flushes do not write to the CVR and in those cases we
+* use a timer to update the ttlClock every minute.
+*/
+var TTL_CLOCK_INTERVAL = 6e4;
+var ViewSyncerService = class {
+	id;
+	#shard;
+	#lc;
+	#pipelines;
+	#stateChanges;
+	#drainCoordinator;
+	#keepaliveMs;
+	#slowHydrateThreshold;
+	#queryConfig;
+	#authSession;
+	userQueryURL;
+	userQueryHeaders;
+	#lastConnectTime = Date.now();
+	/**
+	* The TTL clock is used to determine the time at which queries are considered
+	* expired.
+	*/
+	#ttlClock;
+	/**
+	* The base time for the TTL clock. This is used to compute the current TTL
+	* clock value. The first time a connection is made, this is set to the
+	* current time. On subsequent connections, the TTL clock is computed as the
+	* difference between the current time and this base time.
+	*
+	* Every time we write the ttlClock this is update to the current time. That
+	* way we can compute how much time has passed since the last time we set the
+	* ttlClock. When we set the ttlClock we just increment it by the amount of
+	* time that has passed since the last time we set it.
+	*/
+	#ttlClockBase = Date.now();
+	/**
+	* We update the ttlClock every minute to ensure that it is not too much
+	* out of sync with the current time.
+	*/
+	#ttlClockInterval = 0;
+	#clients = /* @__PURE__ */ new Map();
+	#lock = new Lock();
+	#cvrStore;
+	#stopped = resolver();
+	#initialized = resolver();
+	#cvr;
+	#pipelinesSynced = false;
+	#httpCookie;
+	#origin;
+	#lastAuthRevision = 0;
+	#expiredQueriesTimer = 0;
+	#setTimeout;
+	#customQueryTransformer;
+	#queryReplacements = /* @__PURE__ */ new Map();
+	#activeClients = getOrCreateUpDownCounter("sync", "active-clients", "Number of active sync clients");
+	#hydrations = getOrCreateCounter("sync", "hydration", "Number of query hydrations");
+	#hydrationTime = getOrCreateHistogram("sync", "hydration-time", {
+		description: "Time to hydrate a query.",
+		unit: "s"
+	});
+	#transactionAdvanceTime = getOrCreateHistogram("sync", "advance-time", {
+		description: "Time to advance all queries for a given client group after applying a new transaction to the replica.",
+		unit: "s"
+	});
+	#queryTransformations = getOrCreateCounter("sync", "query.transformations", "Number of query transformations performed");
+	#queryTransformationTime = getOrCreateHistogram("sync", "query.transformation-time", {
+		description: "Time to transform custom queries via API server",
+		unit: "s"
+	});
+	#queryTransformationHashChanges = getOrCreateCounter("sync", "query.transformation-hash-changes", "Number of times query transformation hash changed");
+	#queryTransformationNoOps = getOrCreateCounter("sync", "query.transformation-no-ops", "Number of times query transformation resulted in no-op (hash unchanged)");
+	#inspectorDelegate;
+	#config;
+	#runPriorityOp;
+	constructor(config, lc, shard, taskID, clientGroupID, cvrDb, pipelineDriver, versionChanges, drainCoordinator, slowHydrateThreshold, inspectorDelegate, customQueryTransformer, runPriorityOp, authSession, keepaliveMs = DEFAULT_KEEPALIVE_MS, setTimeoutFn = setTimeout.bind(globalThis)) {
+		const queryConfig = config.query?.url ? config.query : config.getQueries;
+		this.#config = config;
+		this.id = clientGroupID;
+		this.#shard = shard;
+		this.#queryConfig = queryConfig;
+		this.#lc = lc;
+		this.#pipelines = pipelineDriver;
+		this.#stateChanges = versionChanges;
+		this.#drainCoordinator = drainCoordinator;
+		this.#keepaliveMs = keepaliveMs;
+		this.#slowHydrateThreshold = slowHydrateThreshold;
+		this.#inspectorDelegate = inspectorDelegate;
+		this.#customQueryTransformer = customQueryTransformer;
+		this.#authSession = authSession;
+		this.#cvrStore = new CVRStore(lc, cvrDb, shard, taskID, clientGroupID, () => this.#stateChanges.cancel());
+		this.#setTimeout = setTimeoutFn;
+		this.#runPriorityOp = runPriorityOp;
+		this.keepalive();
+	}
+	get auth() {
+		return this.#authSession.auth;
+	}
+	clearAuth() {
+		this.#authSession.clear();
+		this.#lastAuthRevision = 0;
+	}
+	initAuthSession(userID, wireAuth) {
+		return this.#authSession.update(userID, wireAuth);
+	}
+	#getHeaderOptions(forwardCookie) {
+		return {
+			apiKey: this.#queryConfig.apiKey,
+			customHeaders: this.userQueryHeaders,
+			allowedClientHeaders: this.#queryConfig.allowedClientHeaders,
+			token: this.#authSession.auth?.raw,
+			cookie: forwardCookie ? this.#httpCookie : void 0,
+			origin: this.#origin
+		};
+	}
+	#runInLockWithCVR(fn) {
+		const rid = randomID();
+		this.#lc.debug?.("about to acquire lock for cvr ", rid);
+		return this.#lock.withLock(async () => {
+			this.#lc.debug?.("acquired lock in #runInLockWithCVR ", rid);
+			const lc = this.#lc.withContext("lock", rid);
+			if (!this.#stateChanges.active) {
+				this.#lc.debug?.("state changes are inactive");
+				clearTimeout(this.#expiredQueriesTimer);
+				throw new ProtocolErrorWithLevel({
+					kind: Rehome,
+					message: "Reconnect required",
+					origin: ZeroCache
+				}, "info");
+			}
+			if (await this.#checkForShutdownConditionsInLock()) {
+				this.#lc.info?.(`closing clientGroupID=${this.id}`);
+				this.#stateChanges.cancel();
+				return;
+			}
+			if (!this.#cvr) {
+				this.#lc.debug?.("loading cvr");
+				this.#cvr = await this.#runPriorityOp(lc, "loading cvr", () => this.#cvrStore.load(lc, this.#lastConnectTime));
+				this.#ttlClock = this.#cvr.ttlClock;
+				this.#ttlClockBase = Date.now();
+			} else {
+				const now = Date.now();
+				this.#cvr = {
+					...this.#cvr,
+					ttlClock: this.#getTTLClock(now)
+				};
+			}
+			try {
+				await fn(lc, this.#cvr);
+			} catch (e) {
+				this.#cvr = void 0;
+				throw e;
+			}
+		});
+	}
+	readyState() {
+		return Promise.race([this.#initialized.promise, this.#drainCoordinator.draining]);
+	}
+	async run() {
+		try {
+			if (await this.readyState() === "draining") {
+				this.#lc.debug?.(`draining view-syncer ${this.id} before running`);
+				this.stop();
+			}
+			for await (const { state } of this.#stateChanges) {
+				if (this.#drainCoordinator.shouldDrain()) {
+					this.#lc.debug?.(`draining view-syncer ${this.id} (elective)`);
+					break;
+				}
+				assert(state === "version-ready", "state should be version-ready");
+				await this.#runInLockWithCVR(async (lc, cvr) => {
+					const clientSchema = must(cvr.clientSchema, "cvr.clientSchema missing after initialization");
+					if (!this.#pipelines.initialized()) this.#pipelines.init(clientSchema);
+					if (cvr.replicaVersion !== null && cvr.version.stateVersion !== "00" && this.#pipelines.replicaVersion < cvr.replicaVersion) {
+						const message = `Cannot sync from older replica: CVR=${cvr.replicaVersion}, DB=${this.#pipelines.replicaVersion}`;
+						lc.info?.(`resetting CVR: ${message}`);
+						throw new ClientNotFoundError(message);
+					}
+					if (this.#pipelinesSynced) {
+						const result = await this.#advancePipelines(lc, cvr);
+						if (result === "success") return;
+						lc.info?.(`resetting pipelines: ${result.message}`);
+						this.#pipelines.reset(clientSchema);
+						this.#pipelinesSynced = false;
+					}
+					const version = this.#pipelines.advanceWithoutDiff();
+					const cvrVer = versionString(cvr.version);
+					if (version < cvr.version.stateVersion) {
+						lc.debug?.(`replica@${version} is behind cvr@${cvrVer}`);
+						return;
+					}
+					lc.info?.(`init pipelines@${version} (cvr@${cvrVer})`);
+					await this.#hydrateUnchangedQueries(lc, cvr);
+					await this.#syncQueryPipelineSet(lc, cvr, "missing");
+					this.#pipelinesSynced = true;
+				});
+			}
+			if (this.#drainCoordinator.shouldDrain()) this.#drainCoordinator.drainNextIn(this.#totalHydrationTimeMs());
+			await this.#cleanup();
+		} catch (e) {
+			this.#lc[getLogLevel(e)]?.(`stopping view-syncer ${this.id}: ${String(e)}`, e);
+			await this.#cleanup(e);
+		} finally {
+			await this.#cvrStore.flushed(this.#lc).catch((e) => this.#lc[getLogLevel(e)]?.(e));
+			this.#lc.info?.(`view-syncer ${this.id} finished`);
+			this.#stopped.resolve();
+		}
+	}
+	#removeExpiredQueries = async (lc, cvr) => {
+		if (hasExpiredQueries(cvr)) {
+			lc = lc.withContext("method", "#removeExpiredQueries");
+			lc.debug?.("Queries have expired");
+			if (this.#pipelinesSynced) await this.#syncQueryPipelineSet(lc, cvr, "missing");
+		}
+		this.#scheduleExpireEviction(lc, cvr);
+	};
+	#totalHydrationTimeMs() {
+		return this.#pipelines.totalHydrationTimeMs();
+	}
+	#keepAliveUntil = 0;
+	/**
+	* Guarantees that the ViewSyncer will remain running for at least
+	* its configured `keepaliveMs`. This is called when establishing a
+	* new connection to ensure that its associated ViewSyncer isn't
+	* shutdown before it receives the connection.
+	*
+	* @return `true` if the ViewSyncer will stay alive, `false` if the
+	*         ViewSyncer is shutting down.
+	*/
+	keepalive() {
+		if (!this.#stateChanges.active) return false;
+		this.#keepAliveUntil = Date.now() + this.#keepaliveMs;
+		return true;
+	}
+	#shutdownTimer = null;
+	#scheduleShutdown(delayMs = 0) {
+		this.#shutdownTimer ??= this.#setTimeout(() => {
+			this.#shutdownTimer = null;
+			this.#runInLockWithCVR(() => {}).catch((e) => this.#stateChanges.fail(e));
+		}, delayMs);
+	}
+	async #checkForShutdownConditionsInLock() {
+		if (this.#clients.size > 0) return false;
+		await this.#cvrStore.flushed(this.#lc);
+		if (Date.now() <= this.#keepAliveUntil) {
+			this.#scheduleShutdown(this.#keepaliveMs);
+			return false;
+		}
+		return this.#clients.size === 0;
+	}
+	#deleteClientDueToDisconnect(clientID, client) {
+		if (this.#clients.get(clientID) === client) {
+			this.#clients.delete(clientID);
+			if (this.#clients.size === 0) {
+				if (this.#ttlClock !== void 0) this.#updateTTLClockInCVRWithoutLock(this.#lc);
+				this.#stopExpireTimer();
+				this.#scheduleShutdown();
+			}
+		}
+	}
+	#stopExpireTimer() {
+		this.#lc.debug?.("Stopping expired queries timer");
+		clearTimeout(this.#expiredQueriesTimer);
+		this.#expiredQueriesTimer = 0;
+	}
+	initConnection(ctx, initConnectionMessage) {
+		this.#lc.debug?.("viewSyncer.initConnection");
+		return startSpan(tracer, "vs.initConnection", () => {
+			const { clientID, profileID, wsID, baseCookie, httpCookie, origin, protocolVersion } = ctx;
+			this.#httpCookie = httpCookie;
+			this.#origin = origin;
+			const [, { userQueryURL, userQueryHeaders }] = initConnectionMessage;
+			if (this.userQueryURL === void 0) {
+				this.userQueryURL = userQueryURL;
+				this.userQueryHeaders = userQueryHeaders;
+			} else if (this.userQueryURL !== userQueryURL) this.#lc.warn?.("Client provided different query parameters than client group", {
+				clientID,
+				clientURL: userQueryURL,
+				clientGroupURL: this.userQueryURL
+			});
+			const lc = this.#lc.withContext("clientID", clientID).withContext("wsID", wsID);
+			const downstream = Subscription.create({ cleanup: (_, err) => {
+				err ? lc[getLogLevel(err)]?.(`client closed with error`, err) : lc.info?.("client closed");
+				this.#deleteClientDueToDisconnect(clientID, newClient);
+				this.#activeClients.add(-1, { [PROTOCOL_VERSION_ATTR]: protocolVersion });
+			} });
+			this.#activeClients.add(1, { [PROTOCOL_VERSION_ATTR]: protocolVersion });
+			if (this.#clients.size === 0) this.#ttlClockBase = Date.now();
+			const newClient = new ClientHandler(lc, this.id, clientID, wsID, this.#shard, baseCookie, downstream);
+			this.#clients.get(clientID)?.close(`replaced by wsID: ${wsID}`);
+			this.#clients.set(clientID, newClient);
+			this.#runInLockForClient(ctx, initConnectionMessage, async (lc, clientID, msg, cvr) => {
+				if (cvr.clientSchema === null && !msg.clientSchema) throw new ProtocolErrorWithLevel({
+					kind: InvalidConnectionRequest,
+					message: "The initConnection message for a new client group must include client schema.",
+					origin: ZeroCache
+				}, "warn");
+				await this.#handleConfigUpdate(lc, clientID, msg, cvr, "all", profileID ?? `cg${this.id}`);
+				this.#initialized.resolve("initialized");
+			}, newClient).catch((e) => newClient.fail(e));
+			return downstream;
+		});
+	}
+	async changeDesiredQueries(ctx, msg) {
+		await this.#runInLockForClient(ctx, msg, async (lc, clientID, msg, cvr) => {
+			let customQueryTransformMode = "missing";
+			const currentAuthRevision = this.#authSession.revision;
+			if (this.#lastAuthRevision < currentAuthRevision) {
+				customQueryTransformMode = "all";
+				lc.debug?.("Auth revision changed, setting customQueryTransformMode to all");
+			}
+			const result = await this.#handleConfigUpdate(lc, clientID, msg, cvr, customQueryTransformMode);
+			if (customQueryTransformMode === "all") this.#lastAuthRevision = currentAuthRevision;
+			return result;
+		});
+	}
+	async updateAuth(ctx, msg) {
+		await this.#runInLockForClient(ctx, msg, async (lc, clientID, _, cvr) => {
+			const authResult = await this.#authSession.update(ctx.userID, msg[1].auth);
+			if (!authResult.ok) throw new ProtocolErrorWithLevel(authResult.error, "warn");
+			const currentAuthRevision = this.#authSession.revision;
+			if (this.#lastAuthRevision >= currentAuthRevision) {
+				lc.debug?.("Auth revision unchanged, skipping query re-transformation");
+				return;
+			} else lc.debug?.("Auth revision changed, re-transforming queries");
+			const result = await this.#handleConfigUpdate(lc, clientID, {}, cvr, "all");
+			this.#lastAuthRevision = currentAuthRevision;
+			return result;
+		});
+	}
+	async deleteClients(ctx, msg) {
+		return await this.#runInLockForClient(ctx, [msg[0], { deleted: msg[1] }], (lc, clientID, msg, cvr) => this.#handleConfigUpdate(lc, clientID, msg, cvr, "missing")) ?? [];
+	}
+	#getTTLClock(now) {
+		const delta = now - this.#ttlClockBase;
+		assert(this.#ttlClock !== void 0, "ttlClock should be defined");
+		const ttlClock = ttlClockFromNumber(ttlClockAsNumber(this.#ttlClock) + delta);
+		assert(ttlClockAsNumber(ttlClock) <= now, "ttlClock should be less than or equal to now");
+		this.#ttlClock = ttlClock;
+		this.#ttlClockBase = now;
+		return ttlClock;
+	}
+	#flushUpdater(lc, updater) {
+		return startAsyncSpan(tracer, "vs.#flushUpdater", () => this.#runPriorityOp(lc, "flushing cvr", async () => {
+			const now = Date.now();
+			const ttlClock = this.#getTTLClock(now);
+			const { cvr, flushed } = await updater.flush(lc, this.#lastConnectTime, now, ttlClock);
+			if (flushed) this.#startTTLClockInterval(lc);
+			return cvr;
+		}));
+	}
+	#startTTLClockInterval(lc) {
+		this.#stopTTLClockInterval();
+		this.#ttlClockInterval = this.#setTimeout(() => {
+			this.#updateTTLClockInCVRWithoutLock(lc);
+			this.#startTTLClockInterval(lc);
+		}, TTL_CLOCK_INTERVAL);
+	}
+	#stopTTLClockInterval() {
+		clearTimeout(this.#ttlClockInterval);
+		this.#ttlClockInterval = 0;
+	}
+	#updateTTLClockInCVRWithoutLock(lc) {
+		const rid = randomID();
+		lc.debug?.("Syncing ttlClock", rid);
+		const start = Date.now();
+		const ttlClock = this.#getTTLClock(start);
+		this.#cvrStore.updateTTLClock(ttlClock, start).then(() => {
+			lc.debug?.("Synced ttlClock", rid, `in ${Date.now() - start} ms`);
+		}).catch((e) => {
+			lc.error?.("failed to update TTL clock", rid, `after ${Date.now() - start} ms`, e);
+		});
+	}
+	async #updateCVRConfig(lc, cvr, clientID, customQueryTransformMode, fn) {
+		const updater = new CVRConfigDrivenUpdater(this.#cvrStore, cvr, this.#shard);
+		updater.ensureClient(clientID);
+		const patches = fn(updater);
+		this.#cvr = await this.#flushUpdater(lc, updater);
+		if (cmpVersions(cvr.version, this.#cvr.version) < 0) {
+			const newCVR = this.#cvr;
+			await startAsyncSpan(tracer, "vs.#updateCVRConfig.pokeClients", async () => {
+				const pokers = startPoke(this.#getClients(cvr.version), newCVR.version);
+				for (const patch of patches) await pokers.addPatch(patch);
+				await pokers.end(newCVR.version);
+			});
+		}
+		if (this.#pipelinesSynced) await this.#syncQueryPipelineSet(lc, this.#cvr, customQueryTransformMode);
+		return this.#cvr;
+	}
+	/**
+	* Runs the given `fn` to process the `msg` from within the `#lock`,
+	* optionally adding the `newClient` if supplied.
+	*/
+	#runInLockForClient(ctx, msg, fn, newClient) {
+		this.#lc.debug?.("viewSyncer.#runInLockForClient");
+		const { clientID, wsID } = ctx;
+		const [cmd, body] = msg;
+		if (newClient || !this.#clients.has(clientID)) this.#lastConnectTime = Date.now();
+		return startAsyncSpan(tracer, `vs.#runInLockForClient(${cmd})`, async () => {
+			let client;
+			let result;
+			try {
+				await this.#runInLockWithCVR(async (lc, cvr) => {
+					lc = lc.withContext("clientID", clientID).withContext("wsID", wsID).withContext("cmd", cmd);
+					lc.debug?.("acquired lock for cvr");
+					client = this.#clients.get(clientID);
+					if (client?.wsID !== wsID) {
+						lc.debug?.("mismatched wsID", client?.wsID, wsID);
+						return;
+					}
+					if (newClient) {
+						assert(newClient === client, "newClient must match existing client");
+						checkClientAndCVRVersions(client.version(), cvr.version);
+					} else if (!this.#clients.has(clientID)) lc.warn?.(`Processing ${cmd} before initConnection was received`);
+					lc.debug?.(cmd, body);
+					result = await fn(lc, clientID, body, cvr);
+				});
+			} catch (e) {
+				const lc = this.#lc.withContext("clientID", clientID).withContext("wsID", wsID).withContext("cmd", cmd);
+				lc[getLogLevel(e)]?.(`closing connection with error`, e);
+				if (isTransformAuthFailure(e)) {
+					lc.debug?.("Auth failure detected in transform response");
+					this.clearAuth();
+				}
+				if (client) client.fail(e);
+				else throw e;
+			}
+			return result;
+		});
+	}
+	#getClients(atVersion) {
+		const clients = [...this.#clients.values()];
+		return atVersion ? clients.filter((c) => cmpVersions(c.version() ?? EMPTY_CVR_VERSION, atVersion) === 0) : clients;
+	}
+	#handleConfigUpdate = (lc, clientID, { clientSchema, deleted, desiredQueriesPatch, activeClients }, cvr, customQueryTransformMode, profileID) => startAsyncSpan(tracer, "vs.#handleConfigUpdate", async () => {
+		const deletedClientIDs = [];
+		const deletedClientGroupIDs = [];
+		cvr = await this.#updateCVRConfig(lc, cvr, clientID, customQueryTransformMode, (updater) => {
+			const { ttlClock } = cvr;
+			const patches = [];
+			if (clientSchema) updater.setClientSchema(lc, clientSchema);
+			if (profileID) updater.setProfileID(lc, profileID);
+			lc.debug?.(`applying ${desiredQueriesPatch?.length ?? 0} query patches`);
+			if (desiredQueriesPatch?.length) for (const patch of desiredQueriesPatch) switch (patch.op) {
+				case "put":
+					patches.push(...updater.putDesiredQueries(clientID, [patch]));
+					break;
+				case "del":
+					patches.push(...updater.markDesiredQueriesAsInactive(clientID, [patch.hash], ttlClock));
+					break;
+				case "clear":
+					patches.push(...updater.clearDesiredQueries(clientID));
+					break;
+			}
+			const clientIDsToDelete = /* @__PURE__ */ new Set();
+			if (activeClients) {
+				const allClientIDs = Object.keys(cvr.clients);
+				const activeClientsSet = new Set(activeClients);
+				for (const id of allClientIDs) if (!activeClientsSet.has(id)) clientIDsToDelete.add(id);
+			}
+			if (deleted?.clientIDs?.length) for (const cid of deleted.clientIDs) {
+				assert(cid !== clientID, "cannot delete self");
+				clientIDsToDelete.add(cid);
+			}
+			for (const cid of clientIDsToDelete) {
+				const patchesDueToClient = updater.deleteClient(cid, ttlClock);
+				patches.push(...patchesDueToClient);
+				deletedClientIDs.push(cid);
+			}
+			if (deleted?.clientGroupIDs?.length) lc.debug?.(`ignoring ${deleted.clientGroupIDs.length} deprecated client group deletes`);
+			return patches;
+		});
+		if (deletedClientIDs.length && deleted?.clientIDs?.length || deletedClientGroupIDs.length) {
+			const clients = this.#getClients();
+			await startAsyncSpan(tracer, "vs.#handleConfigUpdate.sendDeleteClients", () => Promise.allSettled(clients.map((client) => client.sendDeleteClients(lc, deletedClientIDs, deletedClientGroupIDs))));
+		}
+		this.#scheduleExpireEviction(lc, cvr);
+		return deletedClientIDs;
+	});
+	#scheduleExpireEviction(lc, cvr) {
+		const { ttlClock } = cvr;
+		this.#stopExpireTimer();
+		const next = nextEvictionTime(cvr);
+		if (next === void 0) {
+			lc.debug?.("no inactive queries with ttl");
+			return;
+		}
+		const delay = Math.max(50, Math.min(ttlClockAsNumber(next) - ttlClockAsNumber(ttlClock) + 50, MAX_TTL_MS));
+		lc.debug?.("Scheduling eviction timer to run in ", delay, "ms");
+		this.#expiredQueriesTimer = this.#setTimeout(() => {
+			this.#expiredQueriesTimer = 0;
+			this.#runInLockWithCVR((lc, cvr) => this.#removeExpiredQueries(lc, cvr)).catch((e) => this.#stateChanges.fail(e));
+		}, delay);
+	}
+	/**
+	* Adds and hydrates pipelines for queries whose results are already
+	* recorded in the CVR. Namely:
+	*
+	* 1. The CVR state version and database version are the same.
+	* 2. The transformation hash of the queries equal those in the CVR.
+	*
+	* Note that by definition, only "got" queries can satisfy condition (2),
+	* as desired queries do not have a transformation hash.
+	*
+	* This is an initialization step that sets up pipeline state without
+	* the expensive of loading and diffing CVR row state.
+	*
+	* This must be called from within the #lock.
+	*/
+	async #hydrateUnchangedQueries(lc, cvr) {
+		assert(this.#pipelines.initialized(), "pipelines must be initialized");
+		const dbVersion = this.#pipelines.currentVersion();
+		const cvrVersion = cvr.version;
+		if (cvrVersion.stateVersion !== dbVersion) {
+			lc.info?.(`CVR (${versionToCookie(cvrVersion)}) is behind db ${dbVersion}`);
+			return;
+		}
+		const gotQueries = Object.entries(cvr.queries).filter(([_, state]) => state.transformationHash !== void 0);
+		const customQueries = /* @__PURE__ */ new Map();
+		const otherQueries = [];
+		for (const [, query] of gotQueries) {
+			if (query.type !== "internal" && Object.values(query.clientState).every(({ inactivatedAt }) => inactivatedAt !== void 0)) continue;
+			if (query.type === "custom") customQueries.set(query.id, query);
+			else otherQueries.push(query);
+		}
+		const transformedQueries = [];
+		if (customQueries.size > 0 && !this.#customQueryTransformer) lc.warn?.("Custom/named queries were requested but no `ZERO_QUERY_URL` is configured for Zero Cache.");
+		const customQueryTransformer = this.#customQueryTransformer;
+		if (customQueryTransformer && customQueries.size > 0) {
+			const transformedCustomQueries = await this.#runPriorityOp(lc, "#hydrateUnchangedQueries transforming custom queries", () => customQueryTransformer.transform(this.#getHeaderOptions(this.#queryConfig.forwardCookies), customQueries.values(), this.userQueryURL));
+			if (Array.isArray(transformedCustomQueries)) {
+				for (const q of transformedCustomQueries) if (!("error" in q) && q.transformationHash === customQueries.get(q.id)?.transformationHash) transformedQueries.push(q);
+			}
+		}
+		for (const q of otherQueries) {
+			const auth = this.#authSession.auth;
+			const transformed = transformAndHashQuery(lc, q.id, q.ast, must(this.#pipelines.currentPermissions()).permissions ?? { tables: {} }, auth?.type === "jwt" ? auth : void 0, q.type === "internal");
+			if (transformed.transformationHash === q.transformationHash) transformedQueries.push(transformed);
+		}
+		for (const { id: queryID, transformationHash, transformedAst } of transformedQueries) {
+			const timer = new TimeSliceTimer(lc);
+			let count = 0;
+			await startAsyncSpan(tracer, "vs.#hydrateUnchangedQueries.addQuery", async (span) => {
+				span.setAttribute("queryHash", queryID);
+				span.setAttribute("transformationHash", transformationHash);
+				span.setAttribute("table", transformedAst.table);
+				for (const change of this.#pipelines.addQuery(transformationHash, queryID, transformedAst, await timer.start())) if (change === "yield") await timer.yieldProcess("yield in hydrateUnchangedQueries");
+				else count++;
+			});
+			const elapsed = timer.totalElapsed();
+			this.#hydrations.add(1);
+			this.#hydrationTime.record(elapsed / 1e3);
+			this.#addQueryMaterializationServerMetric(transformationHash, elapsed);
+			lc.debug?.(`hydrated ${count} rows for ${queryID} (${elapsed} ms)`);
+		}
+	}
+	#processTransformedCustomQueries(lc, transformedCustomQueries, cb, customQueryMap) {
+		if ("kind" in transformedCustomQueries) {
+			this.#sendQueryTransformErrorToClients(customQueryMap, transformedCustomQueries);
+			return transformedCustomQueries.queryIDs;
+		}
+		const appQueryErrors = [];
+		for (const q of transformedCustomQueries) {
+			if ("error" in q) {
+				const errorMessage = `Error transforming custom query ${q.name}: ${q.error}${q.details ? ` ${JSON.stringify(q.details)}` : ""}`;
+				lc.warn?.(errorMessage, q);
+				appQueryErrors.push(q);
+				continue;
+			}
+			cb(q);
+		}
+		this.#sendQueryTransformErrorToClients(customQueryMap, appQueryErrors);
+		return appQueryErrors.map((q) => q.id);
+	}
+	#sendQueryTransformErrorToClients(customQueryMap, errorOrErrors) {
+		const getAffectedClientIDs = (queryIDs) => {
+			const clientIds = /* @__PURE__ */ new Set();
+			for (const queryID of queryIDs) {
+				const q = customQueryMap.get(queryID);
+				assert(q, `got an error for query ${queryID} that does not map back to a custom query`);
+				Object.keys(q.clientState).forEach((id) => clientIds.add(id));
+			}
+			return clientIds;
+		};
+		if ("queryIDs" in errorOrErrors) {
+			for (const clientId of getAffectedClientIDs(errorOrErrors.queryIDs)) this.#clients.get(clientId)?.sendQueryTransformFailedError(errorOrErrors);
+			return;
+		}
+		const appErrorGroups = /* @__PURE__ */ new Map();
+		for (const err of errorOrErrors) for (const clientId of getAffectedClientIDs([err.id])) {
+			const group = appErrorGroups.get(clientId) ?? [];
+			group.push(err);
+			appErrorGroups.set(clientId, group);
+		}
+		for (const [clientId, errors] of appErrorGroups) this.#clients.get(clientId)?.sendQueryTransformApplicationErrors(errors);
+	}
+	#addQueryMaterializationServerMetric(queryID, elapsed) {
+		this.#inspectorDelegate.addMetric("query-materialization-server", elapsed, queryID);
+	}
+	/**
+	* Adds and/or removes queries to/from the PipelineDriver to bring it
+	* in sync with the set of queries in the CVR (both got and desired).
+	* If queries are added, removed, or queried due to a new state version,
+	* a new CVR version is created and pokes sent to connected clients.
+	*
+	* This must be called from within the #lock.
+	*/
+	#syncQueryPipelineSet(lc, cvr, customQueryTransformMode) {
+		return startAsyncSpan(tracer, "vs.#syncQueryPipelineSet", async () => {
+			assert(this.#pipelines.initialized(), "pipelines must be initialized (syncQueryPipelineSet)");
+			if (this.#ttlClock === void 0) this.#ttlClock = cvr.ttlClock;
+			const now = Date.now();
+			const ttlClock = this.#getTTLClock(now);
+			const cvrQueryEntires = Object.entries(cvr.queries);
+			const customQueries = /* @__PURE__ */ new Map();
+			const otherQueries = [];
+			const transformedQueries = [];
+			for (const [id, query] of cvrQueryEntires) if (query.type === "custom") {
+				assert(id === query.id, "custom query id mismatch");
+				customQueries.set(id, query);
+			} else otherQueries.push({
+				id,
+				query
+			});
+			for (const { id, query: origQuery } of otherQueries) {
+				assert(id === origQuery.id, "query id mismatch");
+				const auth = this.#authSession.auth;
+				const transformed = transformAndHashQuery(lc, origQuery.id, origQuery.ast, must(this.#pipelines.currentPermissions()).permissions ?? { tables: {} }, auth?.type === "jwt" ? auth : void 0, origQuery.type === "internal");
+				transformedQueries.push({
+					id,
+					origQuery,
+					transformed
+				});
+			}
+			if (customQueries.size > 0 && !this.#customQueryTransformer) lc.warn?.("Custom/named queries were requested but no `ZERO_QUERY_URL` is configured for Zero Cache.");
+			let erroredQueryIDs;
+			const customQueriesToTransform = customQueryTransformMode === "all" ? [...customQueries.values()] : customQueryTransformMode && [...customQueries.values()].filter((q) => !this.#pipelines.queries().has(q.id));
+			const customQueryTransformer = this.#customQueryTransformer;
+			if (customQueryTransformer && customQueriesToTransform.length > 0) {
+				const transformStart = performance.now();
+				let transformedCustomQueries;
+				try {
+					transformedCustomQueries = await this.#runPriorityOp(lc, "#syncQueryPipelineSet transforming custom queries", () => customQueryTransformer.transform(this.#getHeaderOptions(true), customQueriesToTransform, this.userQueryURL));
+					if (!Array.isArray(transformedCustomQueries) && transformedCustomQueries.kind === "TransformFailed") throw new ProtocolErrorWithLevel(transformedCustomQueries, "warn");
+					else this.#queryTransformations.add(1, { result: "success" });
+				} catch (e) {
+					this.#queryTransformations.add(1, { result: "error" });
+					throw e;
+				} finally {
+					const transformDuration = (performance.now() - transformStart) / 1e3;
+					this.#queryTransformationTime.record(transformDuration);
+				}
+				const successfullyTransformedCustomQueries = /* @__PURE__ */ new Map();
+				erroredQueryIDs = this.#processTransformedCustomQueries(lc, transformedCustomQueries, (q) => {
+					const origQuery = customQueries.get(q.id);
+					if (origQuery) {
+						successfullyTransformedCustomQueries.set(q.id, q);
+						transformedQueries.push({
+							id: q.id,
+							origQuery,
+							transformed: q
+						});
+					}
+				}, customQueries);
+				for (const [queryID, newTransform] of successfullyTransformedCustomQueries) {
+					const existingTransformHash = cvr.queries[queryID]?.transformationHash;
+					if (existingTransformHash) {
+						const oldHash = existingTransformHash;
+						const newHash = newTransform.transformationHash;
+						if (oldHash !== newHash) {
+							lc.info?.(`Query ${queryID} transformation changed: ${oldHash} -> ${newHash}`);
+							this.#checkForThrashing(queryID);
+							this.#queryTransformationHashChanges.add(1);
+						} else this.#queryTransformationNoOps.add(1);
+					}
+				}
+			}
+			const removeQueriesQueryIds = new Set(Object.values(cvr.queries).filter((q) => expired(ttlClock, q)).map((q) => q.id).concat(erroredQueryIDs || []));
+			const addQueries = transformedQueries.map(({ id, transformed }) => ({
+				id,
+				ast: transformed.transformedAst,
+				transformationHash: transformed.transformationHash
+			})).filter((q) => !removeQueriesQueryIds.has(q.id) && this.#pipelines.queries().get(q.id)?.transformationHash !== q.transformationHash);
+			for (const q of addQueries) {
+				const orig = cvr.queries[q.id];
+				lc.debug?.("ViewSyncer adding query", q.ast, "transformed from", orig.type === "custom" ? orig.name : orig.ast);
+			}
+			if (addQueries.length > 0 || removeQueriesQueryIds.size > 0) await this.#addAndRemoveQueries(lc, cvr, addQueries, [...removeQueriesQueryIds].map((id) => ({ id })));
+			else await this.#catchupClients(lc, cvr);
+		});
+	}
+	/**
+	* Check if a query is being replaced too frequently (thrashing).
+	* Logs a warning if the query has been replaced more than 3 times in 60 seconds.
+	*/
+	#checkForThrashing(queryID) {
+		const THRASH_WINDOW_MS = 6e4;
+		const THRASH_THRESHOLD = 3;
+		const now = Date.now();
+		let record = this.#queryReplacements.get(queryID);
+		if (!record) {
+			record = {
+				count: 1,
+				windowStart: now
+			};
+			this.#queryReplacements.set(queryID, record);
+			return;
+		}
+		if (now - record.windowStart > THRASH_WINDOW_MS) {
+			this.#queryReplacements.delete(queryID);
+			this.#queryReplacements.set(queryID, {
+				count: 1,
+				windowStart: now
+			});
+			return;
+		}
+		record.count++;
+		if (record.count >= THRASH_THRESHOLD) this.#lc.warn?.(`Query thrashing detected for query ${queryID}. ${record.count} replacements in 60s. This may indicate clients with different auth contexts connecting to the same client group.`);
+	}
+	#addAndRemoveQueries(lc, cvr, addQueries, removeQueries) {
+		return startAsyncSpan(tracer, "vs.#addAndRemoveQueries", async () => {
+			assert(addQueries.length > 0 || removeQueries.length > 0, "Must have queries to add or remove");
+			const start = performance.now();
+			const stateVersion = this.#pipelines.currentVersion();
+			lc = lc.withContext("stateVersion", stateVersion);
+			lc.info?.(`hydrating ${addQueries.length} queries`);
+			const updater = new CVRQueryDrivenUpdater(this.#cvrStore, cvr, stateVersion, this.#pipelines.replicaVersion);
+			const { newVersion, queryPatches } = updater.trackQueries(lc, addQueries, removeQueries);
+			const pokers = startPoke(this.#getClients(), newVersion);
+			for (const patch of queryPatches) await pokers.addPatch(patch);
+			for (const q of removeQueries) {
+				this.#pipelines.removeQuery(q.id);
+				this.#inspectorDelegate.removeQuery(q.id);
+				this.#queryReplacements.delete(q.id);
+			}
+			let totalProcessTime = 0;
+			const timer = new TimeSliceTimer(lc);
+			const pipelines = this.#pipelines;
+			const hydrations = this.#hydrations;
+			const hydrationTime = this.#hydrationTime;
+			const self = this;
+			await yieldProcess(lc);
+			function* generateRowChanges(slowHydrateThreshold) {
+				for (const q of addQueries) {
+					lc = lc.withContext("hash", q.id).withContext("transformationHash", q.transformationHash);
+					lc.debug?.(`adding pipeline for query`, q.ast);
+					yield* pipelines.addQuery(q.transformationHash, q.id, q.ast, timer.startWithoutYielding());
+					const elapsed = timer.stop();
+					totalProcessTime += elapsed;
+					self.#addQueryMaterializationServerMetric(q.id, elapsed);
+					if (elapsed > slowHydrateThreshold) lc.warn?.("Slow query materialization", elapsed, q.ast);
+					manualSpan(tracer, "vs.addAndConsumeQuery", elapsed, {
+						hash: q.id,
+						transformationHash: q.transformationHash
+					});
+				}
+				hydrations.add(1);
+				hydrationTime.record(totalProcessTime / 1e3);
+			}
+			await this.#processChanges(lc, timer, generateRowChanges(this.#slowHydrateThreshold), updater, pokers);
+			for (const patch of await updater.deleteUnreferencedRows(lc)) await pokers.addPatch(patch);
+			this.#cvr = await this.#flushUpdater(lc, updater);
+			const finalVersion = this.#cvr.version;
+			await this.#catchupClients(lc, cvr, finalVersion, addQueries.map((q) => q.id), pokers);
+			await pokers.end(finalVersion);
+			const wallTime = performance.now() - start;
+			lc.info?.(`finished processing queries (process: ${totalProcessTime} ms, wall: ${wallTime} ms)`);
+		});
+	}
+	/**
+	* @param cvr The CVR to which clients should be caught up to. This does
+	*     not necessarily need to be the current CVR.
+	* @param current The expected current CVR version. Before performing
+	*     catchup, the snapshot read will verify that the CVR has not been
+	*     concurrently modified. Note that this only needs to be done for
+	*     catchup because it is the only time data from the CVR DB is
+	*     "exported" without being gated by a CVR flush (which provides
+	*     concurrency protection in all other cases).
+	*
+	*     If unspecified, the version of the `cvr` is used.
+	* @param excludeQueryHashes Exclude patches from rows associated with
+	*     the specified queries.
+	* @param usePokers If specified, sends pokes on existing PokeHandlers,
+	*     in which case the caller is responsible for sending the `pokeEnd`
+	*     messages. If unspecified, the pokes will be started and ended
+	*     using the version from the supplied `cvr`.
+	*/
+	#catchupClients(lc, cvr, current, excludeQueryHashes = [], usePokers) {
+		return startAsyncSpan(tracer, "vs.#catchupClients", async (span) => {
+			current ??= cvr.version;
+			const clients = this.#getClients();
+			const pokers = usePokers ?? startPoke(clients, cvr.version);
+			span.setAttribute("numClients", clients.length);
+			const catchupFrom = clients.map((c) => c.version()).reduce((a, b) => cmpVersions(a, b) < 0 ? a : b, cvr.version);
+			const rowPatches = this.#cvrStore.catchupRowPatches(lc, catchupFrom, cvr, current, excludeQueryHashes);
+			const configPatches = this.#cvrStore.catchupConfigPatches(lc, catchupFrom, cvr, current);
+			configPatches.catch(() => {});
+			let rowPatchCount = 0;
+			for await (const rows of rowPatches) for (const row of rows) {
+				const { schema, table } = row;
+				const rowKey = row.rowKey;
+				const toVersion = versionFromString(row.patchVersion);
+				const id = {
+					schema,
+					table,
+					rowKey
+				};
+				let patch;
+				if (!row.refCounts) patch = {
+					type: "row",
+					op: "del",
+					id
+				};
+				else {
+					const { contents } = contentsAndVersion(must(this.#pipelines.getRow(table, rowKey), `Missing row ${table}:${stringify(rowKey)}`));
+					patch = {
+						type: "row",
+						op: "put",
+						id,
+						contents
+					};
+				}
+				const patchToVersion = {
+					patch,
+					toVersion
+				};
+				await pokers.addPatch(patchToVersion);
+				rowPatchCount++;
+			}
+			span.setAttribute("rowPatchCount", rowPatchCount);
+			if (rowPatchCount) lc.debug?.(`sent ${rowPatchCount} row patches`);
+			for (const patch of await configPatches) await pokers.addPatch(patch);
+			if (!usePokers) await pokers.end(cvr.version);
+		});
+	}
+	#processChanges(lc, timer, changes, updater, pokers) {
+		return startAsyncSpan(tracer, "vs.#processChanges", async () => {
+			const start = performance.now();
+			const rows = new CustomKeyMap(rowIDString);
+			let total = 0;
+			const processBatch = () => startAsyncSpan(tracer, "processBatch", async () => {
+				const wallElapsed = performance.now() - start;
+				total += rows.size;
+				lc.debug?.(`processing ${rows.size} (of ${total}) rows (${wallElapsed} ms)`);
+				const patches = await updater.received(lc, rows);
+				for (const patch of patches) await pokers.addPatch(patch);
+				rows.clear();
+			});
+			await startAsyncSpan(tracer, "loopingChanges", async (span) => {
+				for (const change of changes) {
+					if (change === "yield") {
+						await timer.yieldProcess("yield in processChanges");
+						continue;
+					}
+					const { type, queryID, table, rowKey, row } = change;
+					const rowID = {
+						schema: "",
+						table,
+						rowKey
+					};
+					let parsedRow = rows.get(rowID);
+					if (!parsedRow) {
+						parsedRow = { refCounts: {} };
+						rows.set(rowID, parsedRow);
+					}
+					parsedRow.refCounts[queryID] ??= 0;
+					const updateVersion = (row) => {
+						const { version, contents } = contentsAndVersion(row);
+						parsedRow.version = version;
+						parsedRow.contents = contents;
+					};
+					switch (type) {
+						case "add":
+							updateVersion(row);
+							parsedRow.refCounts[queryID]++;
+							break;
+						case "edit":
+							updateVersion(row);
+							break;
+						case "remove":
+							parsedRow.refCounts[queryID]--;
+							break;
+						default: unreachable(type);
+					}
+					if (rows.size % CURSOR_PAGE_SIZE === 0) await processBatch();
+				}
+				if (rows.size) await processBatch();
+				span.setAttribute("totalRows", total);
+			});
+		});
+	}
+	/**
+	* Advance to the current snapshot of the replica and apply / send
+	* changes.
+	*
+	* Must be called from within the #lock.
+	*
+	* Returns false if the advancement failed due to a schema change.
+	*/
+	#advancePipelines(lc, cvr) {
+		return startAsyncSpan(tracer, "vs.#advancePipelines", async () => {
+			assert(this.#pipelines.initialized(), "pipelines must be initialized (advancePipelines");
+			const start = performance.now();
+			const timer = new TimeSliceTimer(lc);
+			const { version, numChanges, changes } = this.#pipelines.advance(timer);
+			lc = lc.withContext("newVersion", version);
+			const updater = new CVRQueryDrivenUpdater(this.#cvrStore, cvr, version, this.#pipelines.replicaVersion);
+			const pokers = startPoke(this.#getClients(cvr.version), updater.updatedVersion());
+			lc.debug?.(`applying ${numChanges} to advance to ${version}`);
+			try {
+				await this.#processChanges(lc, await timer.start(), changes, updater, pokers);
+			} catch (e) {
+				if (e instanceof ResetPipelinesSignal) {
+					await pokers.cancel();
+					return e;
+				}
+				throw e;
+			}
+			this.#cvr = await this.#flushUpdater(lc, updater);
+			const finalVersion = this.#cvr.version;
+			await pokers.end(finalVersion);
+			const wallTime = performance.now() - start;
+			const totalProcessTime = timer.totalElapsed();
+			lc.info?.(`finished processing advancement of ${numChanges} changes ((process: ${totalProcessTime} ms, wall: ${wallTime} ms))`);
+			this.#transactionAdvanceTime.record(totalProcessTime / 1e3);
+			return "success";
+		});
+	}
+	async inspect(context, msg) {
+		await this.#runInLockForClient(context, msg, this.#handleInspect);
+	}
+	#handleInspect = async (lc, clientID, body, cvr) => {
+		const client = must(this.#clients.get(clientID));
+		const auth = this.#authSession.auth;
+		return handleInspect(lc, body, cvr, client, this.#inspectorDelegate, this.id, this.#cvrStore, this.#config, this.#getHeaderOptions(this.#queryConfig.forwardCookies ?? false), this.userQueryURL, auth?.type === "jwt" ? auth : void 0);
+	};
+	stop() {
+		this.#lc.info?.("stopping view syncer");
+		this.#initialized.reject("shut down before initialization completed");
+		this.#stateChanges.cancel();
+		return this.#stopped.promise;
+	}
+	async #cleanup(err) {
+		this.clearAuth();
+		this.#stopTTLClockInterval();
+		this.#stopExpireTimer();
+		for (const client of this.#clients.values()) if (err) client.fail(err);
+		else client.close(`closed clientGroupID=${this.id}`);
+		await this.#lock.withLock(() => {});
+		this.#pipelines.destroy();
+	}
+	/**
+	* Test helper: Manually mark initialization as complete.
+	* This should only be used in tests that don't call initConnection().
+	*/
+	markInitialized() {
+		this.#initialized.resolve("initialized");
+	}
+};
+var CURSOR_PAGE_SIZE = 1e4;
+var timeSliceQueue = new Lock();
 function yieldProcess(_lc) {
-  return timeSliceQueue.withLock(() => new Promise(setImmediate));
+	return timeSliceQueue.withLock(() => new Promise(setImmediate));
 }
 function contentsAndVersion(row) {
-  const { [ZERO_VERSION_COLUMN_NAME]: version, ...contents } = row;
-  if (typeof version !== "string" || version.length === 0) {
-    throw new Error(`Invalid _0_version in ${stringify(row)}`);
-  }
-  return { contents, version };
+	const { [ZERO_VERSION_COLUMN_NAME]: version, ...contents } = row;
+	if (typeof version !== "string" || version.length === 0) throw new Error(`Invalid _0_version in ${stringify(row)}`);
+	return {
+		contents,
+		version
+	};
 }
-const NEW_CVR_VERSION = { stateVersion: "00" };
+var NEW_CVR_VERSION = { stateVersion: "00" };
 function checkClientAndCVRVersions(client, cvr) {
-  if (cmpVersions(cvr, NEW_CVR_VERSION) === 0 && cmpVersions(client, NEW_CVR_VERSION) > 0) {
-    throw new ClientNotFoundError("Client not found");
-  }
-  if (cmpVersions(client, cvr) > 0) {
-    throw new ProtocolError({
-      kind: InvalidConnectionRequestBaseCookie,
-      message: `CVR is at version ${versionString(cvr)}`,
-      origin: ZeroCache
-    });
-  }
+	if (cmpVersions(cvr, NEW_CVR_VERSION) === 0 && cmpVersions(client, NEW_CVR_VERSION) > 0) throw new ClientNotFoundError("Client not found");
+	if (cmpVersions(client, cvr) > 0) throw new ProtocolError({
+		kind: InvalidConnectionRequestBaseCookie,
+		message: `CVR is at version ${versionString(cvr)}`,
+		origin: ZeroCache
+	});
 }
 function isTransformAuthFailure(error) {
-  if (!isProtocolError(error)) {
-    return false;
-  }
-  return error.errorBody.kind === TransformFailed && error.errorBody.reason === HTTP && (error.errorBody.status === 401 || error.errorBody.status === 403);
+	if (!isProtocolError(error)) return false;
+	return error.errorBody.kind === "TransformFailed" && error.errorBody.reason === "http" && (error.errorBody.status === 401 || error.errorBody.status === 403);
 }
+/**
+* A query must be expired for all clients in order to be considered
+* expired.
+*/
 function expired(ttlClock, q) {
-  if (q.type === "internal") {
-    return false;
-  }
-  for (const clientState of Object.values(q.clientState)) {
-    const { ttl, inactivatedAt } = clientState;
-    if (inactivatedAt === void 0) {
-      return false;
-    }
-    const clampedTTL = clampTTL(ttl);
-    if (ttlClockAsNumber(inactivatedAt) + clampedTTL > ttlClockAsNumber(ttlClock)) {
-      return false;
-    }
-  }
-  return true;
+	if (q.type === "internal") return false;
+	for (const clientState of Object.values(q.clientState)) {
+		const { ttl, inactivatedAt } = clientState;
+		if (inactivatedAt === void 0) return false;
+		const clampedTTL = clampTTL(ttl);
+		if (ttlClockAsNumber(inactivatedAt) + clampedTTL > ttlClockAsNumber(ttlClock)) return false;
+	}
+	return true;
 }
 function hasExpiredQueries(cvr) {
-  const { ttlClock } = cvr;
-  for (const q of Object.values(cvr.queries)) {
-    if (expired(ttlClock, q)) {
-      return true;
-    }
-  }
-  return false;
-}
-class TimeSliceTimer {
-  #total = 0;
-  #start = 0;
-  #lc;
-  constructor(lc) {
-    this.#lc = lc;
-  }
-  async start() {
-    await yieldProcess(this.#lc);
-    return this.startWithoutYielding();
-  }
-  startWithoutYielding() {
-    this.#total = 0;
-    this.#startLap();
-    return this;
-  }
-  async yieldProcess(_msgForTesting) {
-    this.#stopLap();
-    await yieldProcess(this.#lc);
-    this.#startLap();
-  }
-  #startLap() {
-    assert(this.#start === 0, "already running");
-    this.#start = performance.now();
-  }
-  elapsedLap() {
-    assert(this.#start !== 0, "not running");
-    return performance.now() - this.#start;
-  }
-  #stopLap() {
-    assert(this.#start !== 0, "not running");
-    this.#total += performance.now() - this.#start;
-    this.#start = 0;
-  }
-  /** @returns the total elapsed time */
-  stop() {
-    this.#stopLap();
-    return this.#total;
-  }
-  /**
-   * @returns the elapsed time. This can be called while the Timer is running
-   *          or after it has been stopped.
-   */
-  totalElapsed() {
-    return this.#start === 0 ? this.#total : this.#total + performance.now() - this.#start;
-  }
+	const { ttlClock } = cvr;
+	for (const q of Object.values(cvr.queries)) if (expired(ttlClock, q)) return true;
+	return false;
 }
-export {
-  TTL_CLOCK_INTERVAL,
-  TTL_TIMER_HYSTERESIS,
-  TimeSliceTimer,
-  ViewSyncerService
+var TimeSliceTimer = class {
+	#total = 0;
+	#start = 0;
+	#lc;
+	constructor(lc) {
+		this.#lc = lc;
+	}
+	async start() {
+		await yieldProcess(this.#lc);
+		return this.startWithoutYielding();
+	}
+	startWithoutYielding() {
+		this.#total = 0;
+		this.#startLap();
+		return this;
+	}
+	async yieldProcess(_msgForTesting) {
+		this.#stopLap();
+		await yieldProcess(this.#lc);
+		this.#startLap();
+	}
+	#startLap() {
+		assert(this.#start === 0, "already running");
+		this.#start = performance.now();
+	}
+	elapsedLap() {
+		assert(this.#start !== 0, "not running");
+		return performance.now() - this.#start;
+	}
+	#stopLap() {
+		assert(this.#start !== 0, "not running");
+		this.#total += performance.now() - this.#start;
+		this.#start = 0;
+	}
+	/** @returns the total elapsed time */
+	stop() {
+		this.#stopLap();
+		return this.#total;
+	}
+	/**
+	* @returns the elapsed time. This can be called while the Timer is running
+	*          or after it has been stopped.
+	*/
+	totalElapsed() {
+		return this.#start === 0 ? this.#total : this.#total + performance.now() - this.#start;
+	}
 };
-//# sourceMappingURL=view-syncer.js.map
+//#endregion
+export { TimeSliceTimer, ViewSyncerService };
+
+//# sourceMappingURL=view-syncer.js.map