@rotorsoft/act 1.32.29 → 1.33.0

package/dist/@types/internal/settle.d.ts

@@ -1,7 +1,4 @@
 /**
- * @module settle
- * @category Internal
- *
  * Debounced correlate→drain loop. Sits one level above both correlation
  * and drain: schedule() coalesces rapid callers into a single cycle, then
  * runs correlate+drain in a loop until a pass produces no progress.
@@ -9,8 +6,6 @@
  * Owns the debounce timer and the reentrancy flag. Everything else is
  * supplied via the `SettleDeps` callbacks so this module stays free of
  * orchestrator state.
- *
- * @internal
  */
 import type { Drain, DrainOptions, Query, Schemas, SettleOptions } from "../types/index.js";
 import type { CircuitBreaker } from "./circuit-breaker.js";
@@ -18,8 +13,6 @@ import type { CircuitBreaker } from "./circuit-breaker.js";
  * Callbacks the settle loop needs from the orchestrator. Modeled as an
  * input bag so this file doesn't import `Act` (avoids a cycle) and stays
  * independently testable.
- *
- * @internal
  */
 export type SettleDeps<TEvents extends Schemas> = {
     readonly init: () => Promise<void>;
@@ -43,8 +36,6 @@ export type SettleDeps<TEvents extends Schemas> = {
 /**
  * Drives the debounced correlate→drain catch-up cycle. One instance per
  * Act orchestrator.
- *
- * @internal
  */
 export declare class SettleLoop<TEvents extends Schemas> {
     private _timer;
@@ -54,22 +45,28 @@ export declare class SettleLoop<TEvents extends Schemas> {
      * it (`stop()` cancels scheduling only). Never rejects.
      */
     private _inflight;
-    /**
-     * A wake-up that fired while a cycle was running. The running cycle's
-     * `finally` schedules one more pass with these options, so it isn't lost.
-     */
+    /** A wake-up arrived while a cycle ran: run one more pass after it. */
     private _pending;
+    /** The last caller's options, used by the next pass. */
+    private _next;
+    /** When the scheduled pass fires (epoch ms). */
+    private _due;
+    /** Set at shutdown: nothing schedules again. */
+    private _stopped;
     private readonly _deps;
     /** Debounce window applied when the caller doesn't override via `SettleOptions.debounceMs`. */
     private readonly _default_debounce_ms;
     constructor(deps: SettleDeps<TEvents>, default_debounce_ms: number);
     /**
-     * Schedule a settle pass. Multiple calls inside the debounce window
-     * coalesce into one cycle. The cycle runs correlate→drain in a loop
-     * until no progress is made (no new subscriptions, no events read, no
-     * streams leased)
-     * or `maxPasses` is reached, then emits the `"settled"` lifecycle event
-     * via {@link SettleDeps.on_settled}.
+     * Schedule a settle pass. A pass already scheduled is never put off or
+     * replaced: calls that arrive before it runs join it (a shorter
+     * `debounceMs` brings it forward), and a call during a running cycle
+     * queues one more pass after it. Callers pass options, which the next
+     * pass uses; internal wake-ups pass none, so they never discard a
+     * caller's. The cycle runs correlate→drain in a
+     * loop until no progress is made (no new subscriptions, no events read,
+     * no streams leased) or `maxPasses` is reached, then emits the
+     * `"settled"` lifecycle event via {@link SettleDeps.on_settled}.
      */
     schedule(options?: SettleOptions): void;
     /**
@@ -78,7 +75,10 @@ export declare class SettleLoop<TEvents extends Schemas> {
      * settle parked in `correlate` does not resume after teardown.
      */
     get inflight(): Promise<void> | undefined;
-    /** Cancel any pending or active settle cycle. Idempotent. */
-    stop(): void;
+    /**
+     * Cancel any pending settle pass. Idempotent. `final` (shutdown) also
+     * stops all later scheduling.
+     */
+    stop(final?: boolean): void;
 }
 //# sourceMappingURL=settle.d.ts.map

package/dist/@types/internal/settle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settle.d.ts","sourceRoot":"","sources":["../../../src/internal/settle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,KAAK,EACL,YAAY,EACZ,KAAK,EACL,OAAO,EACP,aAAa,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,CAAC,OAAO,SAAS,OAAO,IAAI;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,KAAK,KACT,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACzE,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACrD;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,UAAU,CAAC,OAAO,SAAS,OAAO;IAC7C,OAAO,CAAC,MAAM,CAAwD;IACtE,OAAO,CAAC,QAAQ,CAAS;IACzB;;;OAGG;IACH,OAAO,CAAC,SAAS,CAA4B;IAC7C;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAwC;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAE9C,YAAY,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAGjE;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,GAAE,aAAkB,GAAG,IAAI,CAyF1C;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAExC;IAED,6DAA6D;IAC7D,IAAI,IAAI,IAAI,CAQX;CACF"}
+{"version":3,"file":"settle.d.ts","sourceRoot":"","sources":["../../../src/internal/settle.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,KAAK,EACL,YAAY,EACZ,KAAK,EACL,OAAO,EACP,aAAa,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,MAAM,UAAU,CAAC,OAAO,SAAS,OAAO,IAAI;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,KAAK,KACT,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACzE,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IACrD;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC,CAAC;AAEF;;;GAGG;AACH,qBAAa,UAAU,CAAC,OAAO,SAAS,OAAO;IAC7C,OAAO,CAAC,MAAM,CAAwD;IACtE,OAAO,CAAC,QAAQ,CAAS;IACzB;;;OAGG;IACH,OAAO,CAAC,SAAS,CAA4B;IAC7C,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAS;IACzB,wDAAwD;IACxD,OAAO,CAAC,KAAK,CAAwC;IACrD,gDAAgD;IAChD,OAAO,CAAC,IAAI,CAAK;IACjB,gDAAgD;IAChD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,+FAA+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAE9C,YAAY,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAGjE;IAED;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,CA0FtC;IAED;;;;OAIG;IACH,IAAI,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAExC;IAED;;;OAGG;IACH,IAAI,CAAC,KAAK,UAAQ,GAAG,IAAI,CAUxB;CACF"}

package/dist/@types/internal/tracing.d.ts

@@ -1,7 +1,4 @@
 /**
- * @module tracing
- * @category Internal
- *
  * Centralized observability for the framework's internal pipelines.
  *
  * Trace decorators wrap a bare implementation with `logger.trace(...)` calls
@@ -22,24 +19,18 @@
  * orchestrator choose bare or traced variants once at `.build()` time based
  * on the configured log level. Outside this module, no other source file
  * imports tracing primitives.
- *
- * @internal
  */
-import type { Correlator, Logger, Schemas } from "../types/index.js";
-import type { DrainOps } from "./drain.js";
-import type { EsOps, PatchFn } from "./event-sourcing.js";
+import type { Correlator, Logger, PatchFn, Schemas } from "../types/index.js";
+import type { DrainOps } from "./drain-ops.js";
+import type { EsOps } from "./event-sourcing.js";
 /**
  * Selects bare or traced event-sourcing handlers. Called once by the
  * orchestrator constructor.
- *
- * @internal
  */
 export declare function build_es(logger: Logger, correlator?: Correlator, patch_fn?: PatchFn): EsOps;
 /**
  * Selects bare or traced drain-pipeline ops. Called once by the orchestrator
  * constructor.
- *
- * @internal
  */
 export declare function build_drain<TEvents extends Schemas>(logger: Logger): DrainOps<TEvents>;
 /**
@@ -64,8 +55,6 @@ export declare function build_drain<TEvents extends Schemas>(logger: Logger): Dr
  * marker and its adjacent post-state share the marker's color so the
  * eye reads "outcome + where it landed" as one unit. Per-stream
  * `[events]` and `(error)` stay dim — secondary context.
- *
- * @internal
  */
 export declare function trace_cycle<TEvents extends Schemas>(logger: Logger, leased: ReadonlyArray<{
     readonly stream: string;

package/dist/@types/internal/tracing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../../../src/internal/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,KAAK,EAAQ,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE3E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAiI1D;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,UAA+B,EAC3C,QAAQ,GAAE,OAAuB,GAChC,KAAK,CA4FP;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,OAAO,EACjD,MAAM,EAAE,MAAM,GACb,QAAQ,CAAC,OAAO,CAAC,CAoCnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,OAAO,EACjD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,EACF,OAAO,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC;KAC9B,CAAC,CAAC;CACJ,CAAC,EACF,OAAO,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC,EACF,KAAK,EAAE,aAAa,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,EACtE,OAAO,EAAE,aAAa,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1E,IAAI,CAwDN"}
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../../../src/internal/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAEV,UAAU,EACV,MAAM,EACN,OAAO,EACP,OAAO,EACR,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AA+HjD;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,MAAM,EACd,UAAU,GAAE,UAA+B,EAC3C,QAAQ,GAAE,OAAuB,GAChC,KAAK,CA4FP;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,OAAO,EACjD,MAAM,EAAE,MAAM,GACb,QAAQ,CAAC,OAAO,CAAC,CAoCnB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,WAAW,CAAC,OAAO,SAAS,OAAO,EACjD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,EACF,OAAO,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC;KAC9B,CAAC,CAAC;CACJ,CAAC,EACF,OAAO,EAAE,aAAa,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC,EACF,KAAK,EAAE,aAAa,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,EACtE,OAAO,EAAE,aAAa,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1E,IAAI,CAwDN"}

package/dist/@types/internal/walk-streams.d.ts

@@ -15,8 +15,6 @@ import type { QueryStreams, Store, StreamPosition } from "../types/index.js";
  * @param query - Optional filter. A caller-supplied `limit` sets the page
  *   size (the walk still visits every match); `after` seeds the cursor.
  * @returns The total number of positions emitted.
- *
- * @internal
  */
 export declare function walk_streams(store: Store, callback: (position: StreamPosition) => void, query?: Omit<QueryStreams, "after" | "limit"> & {
     after?: string;

package/dist/@types/internal/walk-streams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"walk-streams.d.ts","sourceRoot":"","sources":["../../../src/internal/walk-streams.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAK7E;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,EAC5C,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,MAAM,CAAC,CAiBjB"}
+{"version":3,"file":"walk-streams.d.ts","sourceRoot":"","sources":["../../../src/internal/walk-streams.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAK7E;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,EAC5C,KAAK,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,MAAM,CAAC,CAiBjB"}

package/dist/@types/ports.d.ts

@@ -1,7 +1,6 @@
 import { ConsoleLogger } from "./adapters/console-logger.js";
-import { type Scoped } from "./scoped.js";
-import type { Cache, Disposable, Disposer, Logger, Store } from "./types/index.js";
-export type { Scoped } from "./scoped.js";
+import type { Cache, Disposable, Disposer, Logger, Scoped, Store } from "./types/index.js";
+import { type ExitCode } from "./types/index.js";
 /**
  * Port/adapter infrastructure for the Act framework.
  *
@@ -16,22 +15,6 @@ export type { Scoped } from "./scoped.js";
  *
  * @module ports
  */
-/**
- * List of exit codes for process termination. Consumed by signal handlers
- * and {@link disposeAndExit}; not part of the user-facing surface.
- *
- * @internal
- */
-export declare const ExitCodes: readonly ["ERROR", "EXIT"];
-/**
- * Type for allowed exit codes.
- *
- * - `"ERROR"` — abnormal termination (uncaught exception, unhandled rejection)
- * - `"EXIT"` — clean shutdown (SIGINT, SIGTERM, or manual trigger)
- *
- * @internal
- */
-export type ExitCode = (typeof ExitCodes)[number];
 /**
  * Factory function that creates or returns the injected adapter.
  * @internal
@@ -147,28 +130,5 @@ export declare function disposeAndExit(code?: ExitCode): Promise<void>;
  * @see {@link disposeAndExit} for the full shutdown sequence
  */
 export declare function dispose(disposer?: Disposer): (code?: ExitCode) => Promise<void>;
-/**
- * Event name used internally for snapshot events in the event store.
- * Snapshot events store a full state checkpoint, enabling efficient cold-start
- * recovery without replaying the entire event stream.
- */
-export declare const SNAP_EVENT = "__snapshot__";
-/**
- * Event name used internally for tombstone events in the event store.
- * A tombstone marks a stream as permanently closed — no further writes
- * are permitted until the stream is explicitly restarted via `close()`.
- *
- * @see {@link Act.close} for the close-the-books API
- */
-export declare const TOMBSTONE_EVENT = "__tombstone__";
-/**
- * Name of the implicit lane every reaction lands in unless its `.to({lane})`
- * declaration says otherwise. Acts that don't call
- * `.withLane(...)` see only this lane, and behavior is identical to
- * pre-1103 single-controller drain.
- *
- * Persisted on `streams.lane` and threaded as the strict-typed default in
- * builder generics — `lane?: TLanes` always includes `"default"`.
- */
-export declare const DEFAULT_LANE = "default";
+export {};
 //# sourceMappingURL=ports.d.ts.map

package/dist/@types/ports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/ports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAK7D,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EACR,MAAM,EACN,KAAK,EACN,MAAM,kBAAkB,CAAC;AAM1B,YAAY,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;;GAaG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,SAAS,YAAI,OAAO,EAAE,MAAM,CAAU,CAAC;AAEpD;;;;;;;GAOG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAMlD;;;GAGG;AACH,KAAK,QAAQ,CAAC,IAAI,SAAS,UAAU,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;AAKlE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,IAAI,CAAC,IAAI,SAAS,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,cAClD,IAAI,KAAG,IAAI,CAW9B;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,GAAG,0EASd,CAAC;AA8BH,eAAO,MAAM,KAAK,EAEZ,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;AAmBjC,eAAO,MAAM,KAAK,EAEZ,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;AAEjC;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa,QAAO,MAAuB,CAAC;AAezD;;;;GAIG;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE,QAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,OAAO,CACrB,QAAQ,CAAC,EAAE,QAAQ,GAClB,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAGpC;AAMD;;;;GAIG;AACH,eAAO,MAAM,UAAU,iBAAiB,CAAC;AAEzC;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,YAAY,CAAC"}
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/ports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAM7D,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EACR,MAAM,EACN,MAAM,EACN,KAAK,EACN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,QAAQ,EAAa,MAAM,kBAAkB,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AAMH;;;GAGG;AACH,KAAK,QAAQ,CAAC,IAAI,SAAS,UAAU,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;AAKlE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,IAAI,CAAC,IAAI,SAAS,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,cAClD,IAAI,KAAG,IAAI,CAW9B;AAMD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,GAAG,0EASd,CAAC;AA8BH,eAAO,MAAM,KAAK,EAEZ,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;AAmBjC,eAAO,MAAM,KAAK,EAEZ,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;AAEjC;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa,QAAO,MAAuB,CAAC;AAezD;;;;GAIG;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE,QAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,OAAO,CACrB,QAAQ,CAAC,EAAE,QAAQ,GAClB,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAGpC"}

package/dist/@types/scoped.d.ts

@@ -24,12 +24,7 @@
  * @internal
  */
 import { AsyncLocalStorage } from "node:async_hooks";
-import type { Actor, Cache, Committed, IAct, Schemas, Store } from "./types/index.js";
-/** Per-Act ports bag. Both required together — a shared cache across stores would collide on stream keys. */
-export type Scoped = {
-    readonly store: Store;
-    readonly cache: Cache;
-};
+import type { Actor, Committed, IAct, Schemas, Scoped } from "./types/index.js";
 /**
  * What an Act actually installs in its frame: the ports a caller passed,
  * plus per-Act settings that runtime code has to read from the *running*

package/dist/@types/scoped.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scoped.d.ts","sourceRoot":"","sources":["../../src/scoped.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EACV,KAAK,EACL,KAAK,EACL,SAAS,EACT,IAAI,EACJ,OAAO,EACP,KAAK,EACN,MAAM,kBAAkB,CAAC;AAE1B,6GAA6G;AAC7G,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,6BAAoC,CAAC;AAiBxD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,GACZ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAEzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,IAAI,QAAQ,CAAC,kBAAkB,CAAC,CAEvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AA0BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,SAAS,CAEzE;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,CACvB,OAAO,SAAS,OAAO,EACvB,QAAQ,SAAS,OAAO,EACxB,MAAM,SAAS,KAAK,GAAG,KAAK,IAC1B;IACF,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EACd,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,EACjC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KACjB,OAAO,CAAC,CAAC,CAAC,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,SAAS,OAAO,EACvB,QAAQ,SAAS,OAAO,EACxB,MAAM,SAAS,KAAK,GAAG,KAAK,EAE5B,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GACnC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAE1C"}
+{"version":3,"file":"scoped.d.ts","sourceRoot":"","sources":["../../src/scoped.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEhF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,6BAAoC,CAAC;AAiBxD;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,GACZ,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAEzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,IAAI,QAAQ,CAAC,kBAAkB,CAAC,CAEvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AA0BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,SAAS,CAEzE;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,CACvB,OAAO,SAAS,OAAO,EACvB,QAAQ,SAAS,OAAO,EACxB,MAAM,SAAS,KAAK,GAAG,KAAK,IAC1B;IACF,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EACd,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,EACjC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KACjB,OAAO,CAAC,CAAC,CAAC,CAAC;CACjB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,SAAS,OAAO,EACvB,QAAQ,SAAS,OAAO,EACxB,MAAM,SAAS,KAAK,GAAG,KAAK,EAE5B,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,GACnC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAE1C"}

package/dist/@types/sensitive.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The sensitive-data marker: the registry `sensitive(zodType)` writes to,
+ * and the lookups that read it. The public `sensitive()` and the two
+ * sentinels live in `types/schemas.ts`, which re-exports `pii_fields` from
+ * here. The transforms that apply the marker at commit, load and dispatch
+ * live in `internal/pii.ts`.
+ */
+import { z } from "zod";
+/**
+ * Process-global registry holding every Zod schema marked sensitive. Backed
+ * by a `WeakMap`, so wrapper-created instances (`.optional()`, `.nullable()`,
+ * `.default()`) that chain off a marked schema produce *new* schema instances
+ * the registry doesn't track; the field walker handles those via unwrap.
+ *
+ * Exported so the public `sensitive(zodType)` wrapper can call `_registry.add`.
+ * Underscore prefix marks "framework-private, don't touch from user code."
+ */
+export declare const _registry: z.core.$ZodRegistry<{
+    sensitive: true;
+}, z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+/**
+ * Stamp the def-level marker. Called by the public `sensitive()` alongside
+ * `_registry.add`.
+ */
+export declare function _mark_sensitive(schema: z.ZodType): void;
+/**
+ * Derive an event's sensitive fields, as the declared schema of each.
+ *
+ * Walks the top-level shape of a `z.object({...})` and keeps the keys whose
+ * schema (after unwrapping optional/nullable/default wrappers) was marked via
+ * `sensitive(...)`. Returns an empty object for non-object schemas or events
+ * with no sensitive fields — the common-case zero-cost path.
+ *
+ * Only the top-level shape is walked. Sensitive fields nested inside a
+ * `z.object` declared inside the event payload would require recursive
+ * descent; that's deferred until a real callsite needs it.
+ *
+ * A union event has no top-level shape, so the options are walked and merged:
+ * a key sensitive in any variant must be split, because the stored payload
+ * could be that variant.
+ * The first variant to declare a key wins, which only matters to a caller that
+ * wants the schema rather than the name.
+ *
+ * Returning the schemas rather than just the names is what lets a caller do
+ * something per field — the event builder asks each one whether it holds a
+ * date, so the `pii` sidecar's dates can be revived like any other.
+ */
+export declare function pii_schemas(schema: z.ZodType): Record<string, z.ZodType>;
+/**
+ * The top-level field names of a schema marked with `sensitive()`. Adapters
+ * and tooling use it to reflect sensitivity on their own wire surface (the
+ * act-http OpenAPI emitter marks these fields `writeOnly`). Returns `[]`
+ * for a schema with no sensitive fields.
+ */
+export declare function pii_fields(schema: z.ZodType): readonly string[];
+//# sourceMappingURL=sensitive.d.ts.map

package/dist/@types/sensitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../../src/sensitive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS;eAA2B,IAAI;iFAAK,CAAC;AAe3D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAOvD;AA6BD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAmBxE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,MAAM,EAAE,CAE/D"}

package/dist/@types/test/index.d.ts

@@ -1,2 +1,3 @@
+export type { Sandbox, SandboxOptions } from "../types/sandbox.js";
 export * from "./sandbox.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/@types/test/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/test/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/test/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACnE,cAAc,cAAc,CAAC"}

package/dist/@types/test/sandbox.d.ts

@@ -1,5 +1,5 @@
-import type { ActOptions } from "../act.js";
-import type { Cache, Store } from "../types/index.js";
+import type { ActOptions } from "../types/index.js";
+import type { Sandbox, SandboxOptions } from "../types/sandbox.js";
 /**
  * Minimal structural shape — anything with a `.build()` that returns an
  * Act. Avoids the variance pitfalls of constraining on the full
@@ -9,30 +9,6 @@ import type { Cache, Store } from "../types/index.js";
 type AnyActBuilder<TApp> = {
     build: (options?: ActOptions<any>) => TApp;
 };
-/**
- * Options for {@link sandbox} / {@link fixture}.
- *
- * Defaults to `new InMemoryStore() + new InMemoryCache()` per call.
- * Override `store` / `cache` to point at PG, SQLite, or any other
- * adapter — factories run once per call so each test gets a fresh
- * instance.
- */
-export type SandboxOptions = {
-    /** Factory for the per-test store. Defaults to `new InMemoryStore()`. */
-    readonly store?: () => Store | Promise<Store>;
-    /** Factory for the per-test cache. Defaults to `new InMemoryCache()`. */
-    readonly cache?: () => Cache | Promise<Cache>;
-    /** Pass-through ActOptions. `scoped` is filled in by the helper. */
-    readonly actOptions?: Omit<ActOptions, "scoped">;
-};
-/** Return shape of {@link sandbox}. */
-export type Sandbox<TApp> = {
-    readonly app: TApp;
-    readonly store: Store;
-    readonly cache: Cache;
-    /** Tears down the Act, store, and cache. Idempotent. */
-    readonly dispose: () => Promise<void>;
-};
 /**
  * Build a scoped Act bound to a fresh `{ store, cache }` bag.
  *

package/dist/@types/test/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/test/sandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAO,UAAU,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;;;;GAKG;AACH,KAAK,aAAa,CAAC,IAAI,IAAI;IAOzB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;CAC5C,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;CAClD,CAAC;AAEF,uCAAuC;AACvC,MAAM,MAAM,OAAO,CAAC,IAAI,IAAI;IAC1B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAChC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAC5B,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAuBxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAC1B,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAC5B,QAAQ,GAAE,cAAmB;;GAgB9B"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/test/sandbox.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEnE;;;;;GAKG;AACH,KAAK,aAAa,CAAC,IAAI,IAAI;IAOzB,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;CAC5C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAChC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAC5B,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAuBxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAC1B,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAC5B,QAAQ,GAAE,cAAmB;;GAgB9B"}

package/dist/@types/types/act.d.ts

@@ -0,0 +1,216 @@
+/**
+ * Public contracts of the orchestrator: the options `act().build()` takes,
+ * the lifecycle events an `Act` emits, and the public defaults behind them.
+ * The `Act` class implements them in `../act.ts`; their Zod schemas and
+ * resolvers live in `../internal/config.ts`.
+ */
+import type { CloseResult, Correlator, Schema, Schemas, Snapshot } from "./action.js";
+import type { Cache, Store, StoreNotification } from "./ports.js";
+import type { BlockedLease, Drain, Lease } from "./reaction.js";
+import type { SchemaRegister } from "./registry.js";
+/**
+ * Default debounce window (ms) for `settle()` when neither the per-call
+ * `SettleOptions.debounceMs` nor `ActOptions.settleDebounceMs` is set.
+ * Coalesces commits in the same tick and small bursts.
+ */
+export declare const DEFAULT_SETTLE_DEBOUNCE_MS = 10;
+/**
+ * Default LRU cap for the subscribed-streams cache. Apps that mint many
+ * dynamic targets (one per aggregate) should override it with
+ * `ActOptions.maxSubscribedStreams`.
+ */
+export declare const DEFAULT_MAX_SUBSCRIBED_STREAMS = 1000;
+/** Per-Act ports bag. Both required together — a shared cache across stores would collide on stream keys. */
+export type Scoped = {
+    readonly store: Store;
+    readonly cache: Cache;
+};
+/** Circuit breaker state, reported with every `error` lifecycle event. */
+export type CircuitState = "closed" | "open" | "half-open";
+/** Public, all-optional circuit-breaker options bag for `act().build()`. */
+export type CircuitBreakerOptions = {
+    failureThreshold?: number;
+    cooldownMs?: number;
+};
+/** Resolved autoclose configuration after validation + default expansion. */
+export type AutocloseConfig = {
+    autocloseWindow?: {
+        start: number;
+        end: number;
+        timeZone: string;
+    };
+};
+/**
+ * Lifecycle events emitted by {@link Act}, mapped to their payload type.
+ * Drives the typing of `emit` / `on` / `off` — the event-name argument
+ * narrows its payload at the call site.
+ *
+ * The first parameter is kept (unused) for arity compatibility: `committed`
+ * carries snapshots of whichever state each action targeted, so its honest
+ * element type is `Snapshot<Schema, TEvents>` — the register map itself was
+ * never the shape of any snapshot's state.
+ */
+export type ActLifecycleEvents<_TSchemaReg extends SchemaRegister<TActions>, TEvents extends Schemas, TActions extends Schemas> = {
+    committed: Snapshot<Schema, TEvents>[];
+    acked: Lease[];
+    blocked: BlockedLease[];
+    settled: Drain<TEvents>;
+    closed: CloseResult;
+    /**
+     * A **different process** committed an event to the same backing store.
+     *
+     * Fires only when the configured store implements
+     * {@link Store.notify} and there is at least one registered reaction.
+     * The orchestrator uses the same signal internally to wake `settle()`
+     * — listeners get the raw payload for SSE fan-out, dashboards, and
+     * audit logs.
+     *
+     * Local commits do *not* fire `notified` (use `committed` for those):
+     * stores self-filter their own writes so this channel has a clean
+     * cross-process semantic.
+     */
+    notified: StoreNotification;
+    /**
+     * A stream's sensitive-data payload was wiped via {@link Act.forget}.
+     * Fires exactly once per successful `forget(stream)` call — idempotent
+     * second calls (no PII left on the stream) return `eventCount: 0` and
+     * do NOT re-emit. Apps that never call `forget()` never see this event.
+     *
+     * Listeners use it for the compliance side of GDPR / CCPA: audit log,
+     * downstream cache busts, projection-side wipes that the framework
+     * doesn't reach (e.g., search indexes, ETL caches). The framework's own
+     * cache is invalidated by `forget()` itself before the event fires.
+     */
+    forgotten: {
+        stream: string;
+        at: Date;
+        eventCount: number;
+    };
+    /**
+     * A store operation failed during the drain loop. Fires on
+     * every failed drain cycle — typically a {@link StoreError} from a
+     * degraded backend — carrying the orchestrator circuit breaker's state
+     * after the failure (`open` means the drain loop has backed off and will
+     * retry after the cooldown). Listen to alert on a degraded store; the
+     * framework logs the same error regardless. Emitted only when a listener
+     * is registered (Node's `EventEmitter` throws on an unhandled `"error"`).
+     */
+    error: {
+        error: unknown;
+        circuit: CircuitState;
+    };
+};
+/**
+ * Options for {@link Act} construction (passed via {@link ActBuilder.build}).
+ *
+ * @property maxSubscribedStreams - Cap for the LRU tracking what each
+ *   dynamically resolved reaction target was last subscribed at. Statically
+ *   declared targets are held outside it and never evicted, so their lane
+ *   and priority stay owned by the build-time subscribe.
+ *   Default: {@link DEFAULT_MAX_SUBSCRIBED_STREAMS}.
+ * @property settleDebounceMs - Debounce window (ms) used by `settle()` when
+ *   the caller doesn't pass `SettleOptions.debounceMs`. Tune this once per
+ *   Act instance instead of threading the value through every call site.
+ *   Default: {@link DEFAULT_SETTLE_DEBOUNCE_MS}.
+ * @property autoSettle - Settle on its own after a change that frees
+ *   reaction work: a commit, `reset()`, `unblock()`, `restore()` or a
+ *   notification from another process. Set `false` when you walk the
+ *   pipeline yourself with `correlate()` / `drain()` (tests that check its
+ *   steps, tools). Timers still run: lanes with `cycleMs`,
+ *   `start_correlations()`, the circuit breaker's recovery pass after a
+ *   store failure, and each stream's backoff or defer wake-up.
+ *   Default: `true`.
+ */
+export type ActOptions<TLanes extends string = string> = {
+    readonly maxSubscribedStreams?: number;
+    readonly settleDebounceMs?: number;
+    readonly autoSettle?: boolean;
+    /**
+     * Per-Act ports. When set, this Act runs against the
+     * provided store + cache instead of the singletons — threaded via
+     * AsyncLocalStorage so internals are unchanged. Both are required
+     * together (a shared cache across distinct stores would collide on
+     * stream keys). Omit for the singleton path.
+     */
+    readonly scoped?: Scoped;
+    /**
+     * Correlation-id generator for originating actions. When
+     * omitted, Act uses {@link default_correlator}, which produces a
+     * readable, time-monotonic-within-window, lowercase id of the form
+     * `{state[:4]}-{action[:4]}-{ts}{rnd}` (18 chars).
+     *
+     * Reactions inherit `reactingTo.meta.correlation` so the chain stays
+     * intact — the delegate is only consulted on originating commits and
+     * for the close-the-books transaction.
+     */
+    readonly correlator?: Correlator;
+    /** Restrict this process to a subset of declared lanes. */
+    readonly onlyLanes?: ReadonlyArray<TLanes>;
+    /**
+     * Subscribe to {@link Store.notify} on this instance. Defaults
+     * to `true`. Set `false` on instances that only commit and never
+     * react — the subscriber-connection budget is the practical scaling
+     * ceiling for the notify/listen pattern, and writer-only fleets
+     * spend it for nothing when they subscribe to a channel they never
+     * read. Commits still emit notifications (that's part of the
+     * store's commit protocol); only the subscriber side is gated.
+     */
+    readonly listen?: boolean;
+    /**
+     * Run the local reaction pipeline on this instance. Defaults
+     * to `true`. Set `false` on writer-only or sidecar instances: drain
+     * controllers' auto-cycle workers don't start, `correlate()` /
+     * `drain()` / `settle()` become no-ops, and the notify handler
+     * skips its drain-wakeup arm (but still emits the `notified`
+     * lifecycle event so observability sidecars work).
+     */
+    readonly drain?: boolean;
+    /**
+     * Orchestrator circuit breaker for the drain loop. After
+     * `failureThreshold` consecutive store failures the breaker opens and
+     * the drain loop skips `claim()` for `cooldownMs` instead of hammering a
+     * down backend, then allows a half-open trial. Out-of-range values throw
+     * a `ZodError` at `act().build()`. Defaults: threshold 5, cooldown 30s.
+     */
+    readonly circuitBreaker?: CircuitBreakerOptions;
+    /**
+     * Optional off-hours window restricting when autoclose evaluates. A
+     * synthesized autoclose reaction that triggers outside the window
+     * defers to the next instant the window opens — derived from the
+     * window itself, no polling cadence. Hours are `[0, 23]` integers in
+     * `timeZone` (IANA, default `"UTC"`, DST-correct); `start > end` is
+     * an overnight window (e.g. `{ start: 22, end: 6 }`). Omit to
+     * evaluate regardless of clock time.
+     */
+    readonly autocloseWindow?: {
+        readonly start: number;
+        readonly end: number;
+        readonly timeZone?: string;
+    };
+    /**
+     * Validate folded state against its declared Zod schema after every
+     * reduction. Off by default.
+     *
+     * When `true`, each time an event is folded into state — on the
+     * command path (`do`), on `load`/replay, and inside projection-fold
+     * projections — the merged full state is parsed against the owning
+     * state's `state({ Name: schema })` schema. A reducer that produces
+     * schema-violating state (the calculator divide-by-zero NaN
+     * class) throws a {@link ValidationError} at the triggering event,
+     * whose `target` names the state and the event (`<state>.<event>#<id>`)
+     * — instead of the bad value propagating and surfacing hops later as a
+     * confusing downstream error.
+     *
+     * This is a **debugging / CI aid, not a production guard**. Turn it on
+     * in development and CI to catch total-reducer bugs at the source; the
+     * framework already validates action inputs and emitted events, so the
+     * reduced state is the one shape it otherwise trusts. The per-event
+     * patch step is selected **once at `build()`** (the same way the
+     * orchestrator picks bare vs trace-decorated store ops from the log
+     * level): when `false` (the default) the fold loop is byte-identical to
+     * a bare reduction — the validating patch step is never selected, so
+     * there is no per-event cost, not even a branch.
+     */
+    readonly validateFoldedState?: boolean;
+};
+//# sourceMappingURL=act.d.ts.map

package/dist/@types/types/act.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"act.d.ts","sourceRoot":"","sources":["../../../src/types/act.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,MAAM,EACN,OAAO,EACP,QAAQ,EACT,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD,6GAA6G;AAC7G,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE3D,4EAA4E;AAC5E,MAAM,MAAM,qBAAqB,GAAG;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG;IAC5B,eAAe,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,kBAAkB,CAC5B,WAAW,SAAS,cAAc,CAAC,QAAQ,CAAC,EAC5C,OAAO,SAAS,OAAO,EACvB,QAAQ,SAAS,OAAO,IACtB;IACF,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvC,KAAK,EAAE,KAAK,EAAE,CAAC;IACf,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;IACpB;;;;;;;;;;;;OAYG;IACH,QAAQ,EAAE,iBAAiB,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;;;;;;;;OAQG;IACH,KAAK,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,YAAY,CAAA;KAAE,CAAC;CAClD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,UAAU,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IAAI;IACvD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;OAOG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAChD;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC"}