@tinycloud/sdk-services 3.2.0-beta.2 → 3.2.0-beta.5

package/dist/index.d.cts

@@ -1,14 +1,16 @@
-import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-CVwwxqXF.cjs';
-export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-CVwwxqXF.cjs';
+import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-7A5rHWRY.cjs';
+export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-7A5rHWRY.cjs';
 import { z } from 'zod';
-import { B as BaseService } from './BaseService-DWbPbov7.cjs';
-export { a as BaseServiceOptions, R as RequestSignal, S as ServiceConstructor, b as ServiceRegistration } from './BaseService-DWbPbov7.cjs';
+import { B as BaseService } from './BaseService-BDQXjWMx.cjs';
+export { a as BaseServiceOptions, R as RequestSignal, S as ServiceConstructor, b as ServiceRegistration } from './BaseService-BDQXjWMx.cjs';
 import { IKVService } from './kv/index.cjs';
-export { DEFAULT_SIGNED_READ_URL_EXPIRY_MS, IPrefixedKVService, KVAction, KVActionType, KVBatchPutItem, KVBatchPutOptions, KVBatchPutResponse, KVBatchReadResponse, KVChange, KVChangesAuthority, KVChangesOptions, KVChangesResponse, KVCreateSignedReadUrlOptions, KVDeleteOptions, KVGetOptions, KVHeadOptions, KVListOptions, KVListResponse, KVPutOptions, KVResponse, KVResponseHeaders, KVService, KVServiceConfig, KVSignedReadUrlResponse, PrefixedKVService } from './kv/index.cjs';
+export { IPrefixedKVService, KVService, PrefixedKVService } from './kv/index.cjs';
+export { A as AuthorityRefusal, C as CLEAR_PENDING_WARNING, H as DEFAULT_SIGNED_READ_URL_EXPIRY_MS, I as KVAction, J as KVActionType, M as KVBatchPutItem, N as KVBatchPutOptions, O as KVBatchPutResponse, Q as KVBatchReadResponse, S as KVChange, T as KVChangesAuthority, U as KVChangesOptions, V as KVChangesResponse, W as KVCreateSignedReadUrlOptions, X as KVDeleteOptions, Y as KVGetOptions, Z as KVHeadOptions, _ as KVListOptions, b as KVListPage, $ as KVListResponse, a0 as KVPutOptions, c as KVReadThrough, d as KVReplicaHandle, e as KVReplicaSpec, f as KVReplicaStorage, a as KVReplicationController, K as KVReplicationDeps, a1 as KVResponse, a2 as KVResponseHeaders, a3 as KVServiceConfig, a4 as KVSignedReadUrlResponse, L as LocalGetResult, g as LocalListResult, h as LocalReadMeta, i as LocalReplicaStatus, j as LocalSyncResult, k as PendingWriteRecord, l as PendingWriteState, P as PendingWriteStore, m as PinnedKey, n as PurgeTarget, o as ReplicaAuthorityState, p as ReplicaCoverage, q as ReplicaDevice, r as ReplicaGrantInfo, s as ReplicaState, t as ReplicaStatusEntry, u as ReplicationAuthority, v as ReplicationControl, w as ReplicationEvent, R as ReplicationIdentity, x as ReplicationOptions, y as ReplicationPurgeReport, z as ReplicationReason, B as ReplicationScheduler, D as ResolvedReplicationOptions, E as canonicalReplicationIdentity, F as replicationIdentityKey, G as requiresSecretsOptIn } from './scope-C05VVAXH.cjs';
 export { BatchOptions, BatchResponse, DatabaseHandle, ExecuteOptions, ExecuteResponse, IDatabaseHandle, ISQLMigrations, ISQLService, QueryOptions, QueryResponse, SQLAction, SQLActionType, SQLMigrations, SQLService, SQLServiceConfig, SqlMigration, SqlMigrationApplyOptions, SqlMigrationApplyResponse, SqlStatement, SqlValue } from './sql/index.cjs';
 import { IEncryptionService, DecryptCapabilityProof } from './encryption/index.cjs';
 export { BuildCanonicalDecryptRequestInput, BuildDecryptFactsInput, BuildDecryptInvocationInput, BuiltDecryptInvocation, CanonicalDecryptRequest, CanonicalJson, DECRYPT_ACTION, DECRYPT_FACT_TYPE, DECRYPT_RESULT_TYPE, DEFAULT_ENCRYPTION_ALG, DEFAULT_KEY_VERSION, DecryptEnvelopeOptions, DecryptInvocationFact, DecryptInvocationSigner, DecryptRequestBody, DecryptResponseBody, DecryptTransport, DiscoverNetworkInput, DiscoveredNetwork, DiscoverySource, ENCRYPTION_NETWORK_URN_PREFIX, ENCRYPTION_SERVICE, ENCRYPTION_SERVICE_SHORT, ENVELOPE_VERSION, EncryptToNetworkInput, EncryptToNetworkOptions, EncryptToNetworkResult, EncryptionCrypto, EncryptionError, EncryptionErrorInput, EncryptionService, EncryptionServiceConfig, InlineEncryptedEnvelope, Json, NETWORK_NAME_PATTERN, NetworkDescriptor, NetworkIdError, NodeDescriptorFetcher, ParsedNetworkId, RandomReceiverKeyInput, ReceiverKeyPair, ReceiverKeySigner, SignedReceiverKeyInput, VerifyDecryptResponseInput, WellKnownDescriptorFetcher, base64Decode, base64Encode, buildCanonicalDecryptRequest, buildDecryptAttenuation, buildDecryptFacts, buildDecryptInvocation, buildNetworkId, canonicalHashHex, canonicalSignedResponse, canonicalize as canonicalizeEncryptionJson, checkDecryptInvocationInput, decryptEnvelopeWithKey, deriveSignedReceiverKey, discoverNetwork, encryptToNetwork, encryptionError, ensureNetworkUsableForDecrypt, generateRandomReceiverKey, hexDecode, hexEncode, isNetworkId, networkDiscoveryKey, openWrappedKey, parseNetworkId, utf8Decode, utf8Encode, validateEnvelope, verifyDecryptResponse } from './encryption/index.cjs';
 export { DecryptTransportResponseError } from '@tinycloud/sdk-services/internal/decrypt-transport-response-error';
+export { kvPrefixCovers } from './kv/replication/prefix.cjs';
 
 type TinyCloudDebugLevel = "debug";
 interface TinyCloudDebugEvent {
@@ -92,14 +94,14 @@ declare const ServiceErrorSchema: z.ZodObject<{
     /** Additional metadata about the error - passthrough allows any object properties */
     meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
-    message: string;
     code: string;
+    message: string;
     service: string;
     cause?: unknown;
     meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
-    message: string;
     code: string;
+    message: string;
     service: string;
     cause?: unknown;
     meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -177,22 +179,22 @@ declare const GenericResultSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -200,8 +202,8 @@ declare const GenericResultSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
     ok: false;
 }, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -488,14 +490,14 @@ declare const ServiceRequestEventSchema: z.ZodObject<{
     timestamp: number;
     service: string;
     action: string;
-    span?: string | undefined;
     key?: string | undefined;
+    span?: string | undefined;
 }, {
     timestamp: number;
     service: string;
     action: string;
-    span?: string | undefined;
     key?: string | undefined;
+    span?: string | undefined;
 }>;
 type ServiceRequestEventType = z.infer<typeof ServiceRequestEventSchema>;
 /**
@@ -545,22 +547,22 @@ declare const ServiceErrorEventSchema: z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -569,8 +571,8 @@ declare const ServiceErrorEventSchema: z.ZodObject<{
     span?: string | undefined;
 }, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -598,22 +600,22 @@ declare const ServiceRetryEventSchema: z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -623,8 +625,8 @@ declare const ServiceRetryEventSchema: z.ZodObject<{
     maxAttempts: number;
 }, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -656,14 +658,14 @@ declare const TelemetrySpanEventSchema: z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -673,8 +675,8 @@ declare const TelemetrySpanEventSchema: z.ZodObject<{
     ok: boolean;
     span: string;
     error?: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -687,8 +689,8 @@ declare const TelemetrySpanEventSchema: z.ZodObject<{
     ok: boolean;
     span: string;
     error?: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -923,6 +925,7 @@ declare class ServiceContext implements IServiceContext {
     private _services;
     private _eventHandlers;
     private _abortController;
+    private _operationAbortSignal?;
     private _retired;
     private readonly _invoke;
     private readonly _invokeAny?;
@@ -1007,6 +1010,8 @@ declare class ServiceContext implements IServiceContext {
      * Get the abort signal for cancelling operations.
      */
     get abortSignal(): AbortSignal;
+    get operationAbortSignal(): AbortSignal | undefined;
+    setOperationAbortSignal(signal: AbortSignal | undefined): void;
     /**
      * Permanently retire this graph after its owner installs a replacement.
      * Unlike `abort()`, retirement never creates a fresh controller, so captured
@@ -1722,10 +1727,13 @@ interface VaultGetOptions<T = unknown> {
     deserialize?: (data: Uint8Array) => T;
     /** Return raw decrypted bytes without deserialization */
     raw?: boolean;
+    /** Force the underlying KV read to bypass replica read-through. */
+    source?: "network";
     /** Delegated KV service for reading from the grantor's space (used by getShared) */
     kv?: {
         get<V>(key: string, options?: {
             raw?: boolean;
+            source?: "network";
         }): Promise<{
             ok: boolean;
             data?: {
@@ -1743,8 +1751,9 @@ interface VaultGetOptions<T = unknown> {
 interface VaultListOptions {
     /** Prefix filter for key names */
     prefix?: string;
-    /** Remove prefix from returned keys */
     removePrefix?: boolean;
+    /** Force the underlying KV list to bypass replica read-through. */
+    source?: "network";
     /** Maximum number of keys to return. */
     limit?: number;
     /** Opaque cursor returned by a prior bounded page. */
@@ -2343,6 +2352,8 @@ declare const SECRET_NAME_RE: RegExp;
 interface SecretScopeOptions {
     /** Optional logical scope. Omit for the global secret namespace. */
     scope?: string;
+    /** Bypass replication for existence-sensitive reads. */
+    source?: "network";
 }
 /** Canonical secret scope grammar shared with the TC-832 `/request` link. */
 declare const SECRET_SCOPE_RE: RegExp;

package/dist/index.d.ts

@@ -1,14 +1,16 @@
-import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-CVwwxqXF.js';
-export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-CVwwxqXF.js';
+import { a as IServiceContext, c as InvokeFunction, d as InvokeAnyFunction, F as FetchFunction, S as ServiceSession, e as RetryPolicy, T as TelemetryConfig, I as IService, E as EventHandler, b as ServiceError, R as Result, P as PermissionHint, f as StorageQuotaInfo } from './types-7A5rHWRY.js';
+export { g as ErrorCode, h as ErrorCodes, i as FetchRequestInit, j as FetchResponse, k as InvocationFact, l as InvocationFacts, m as InvokeAnyEntry, n as ServiceErrorEvent, o as ServiceHeaders, p as ServiceRequestEvent, q as ServiceResponseEvent, r as ServiceRetryEvent, s as TelemetryEventHandler, t as TelemetryEvents, u as TelemetrySpanEvent, v as defaultRetryPolicy, w as err, x as ok, y as serviceError } from './types-7A5rHWRY.js';
 import { z } from 'zod';
-import { B as BaseService } from './BaseService-B_UKhVht.js';
-export { a as BaseServiceOptions, R as RequestSignal, S as ServiceConstructor, b as ServiceRegistration } from './BaseService-B_UKhVht.js';
+import { B as BaseService } from './BaseService-Di_hVfUV.js';
+export { a as BaseServiceOptions, R as RequestSignal, S as ServiceConstructor, b as ServiceRegistration } from './BaseService-Di_hVfUV.js';
 import { IKVService } from './kv/index.js';
-export { DEFAULT_SIGNED_READ_URL_EXPIRY_MS, IPrefixedKVService, KVAction, KVActionType, KVBatchPutItem, KVBatchPutOptions, KVBatchPutResponse, KVBatchReadResponse, KVChange, KVChangesAuthority, KVChangesOptions, KVChangesResponse, KVCreateSignedReadUrlOptions, KVDeleteOptions, KVGetOptions, KVHeadOptions, KVListOptions, KVListResponse, KVPutOptions, KVResponse, KVResponseHeaders, KVService, KVServiceConfig, KVSignedReadUrlResponse, PrefixedKVService } from './kv/index.js';
+export { IPrefixedKVService, KVService, PrefixedKVService } from './kv/index.js';
+export { A as AuthorityRefusal, C as CLEAR_PENDING_WARNING, H as DEFAULT_SIGNED_READ_URL_EXPIRY_MS, I as KVAction, J as KVActionType, M as KVBatchPutItem, N as KVBatchPutOptions, O as KVBatchPutResponse, Q as KVBatchReadResponse, S as KVChange, T as KVChangesAuthority, U as KVChangesOptions, V as KVChangesResponse, W as KVCreateSignedReadUrlOptions, X as KVDeleteOptions, Y as KVGetOptions, Z as KVHeadOptions, _ as KVListOptions, b as KVListPage, $ as KVListResponse, a0 as KVPutOptions, c as KVReadThrough, d as KVReplicaHandle, e as KVReplicaSpec, f as KVReplicaStorage, a as KVReplicationController, K as KVReplicationDeps, a1 as KVResponse, a2 as KVResponseHeaders, a3 as KVServiceConfig, a4 as KVSignedReadUrlResponse, L as LocalGetResult, g as LocalListResult, h as LocalReadMeta, i as LocalReplicaStatus, j as LocalSyncResult, k as PendingWriteRecord, l as PendingWriteState, P as PendingWriteStore, m as PinnedKey, n as PurgeTarget, o as ReplicaAuthorityState, p as ReplicaCoverage, q as ReplicaDevice, r as ReplicaGrantInfo, s as ReplicaState, t as ReplicaStatusEntry, u as ReplicationAuthority, v as ReplicationControl, w as ReplicationEvent, R as ReplicationIdentity, x as ReplicationOptions, y as ReplicationPurgeReport, z as ReplicationReason, B as ReplicationScheduler, D as ResolvedReplicationOptions, E as canonicalReplicationIdentity, F as replicationIdentityKey, G as requiresSecretsOptIn } from './scope-BKge7zDT.js';
 export { BatchOptions, BatchResponse, DatabaseHandle, ExecuteOptions, ExecuteResponse, IDatabaseHandle, ISQLMigrations, ISQLService, QueryOptions, QueryResponse, SQLAction, SQLActionType, SQLMigrations, SQLService, SQLServiceConfig, SqlMigration, SqlMigrationApplyOptions, SqlMigrationApplyResponse, SqlStatement, SqlValue } from './sql/index.js';
 import { IEncryptionService, DecryptCapabilityProof } from './encryption/index.js';
 export { BuildCanonicalDecryptRequestInput, BuildDecryptFactsInput, BuildDecryptInvocationInput, BuiltDecryptInvocation, CanonicalDecryptRequest, CanonicalJson, DECRYPT_ACTION, DECRYPT_FACT_TYPE, DECRYPT_RESULT_TYPE, DEFAULT_ENCRYPTION_ALG, DEFAULT_KEY_VERSION, DecryptEnvelopeOptions, DecryptInvocationFact, DecryptInvocationSigner, DecryptRequestBody, DecryptResponseBody, DecryptTransport, DiscoverNetworkInput, DiscoveredNetwork, DiscoverySource, ENCRYPTION_NETWORK_URN_PREFIX, ENCRYPTION_SERVICE, ENCRYPTION_SERVICE_SHORT, ENVELOPE_VERSION, EncryptToNetworkInput, EncryptToNetworkOptions, EncryptToNetworkResult, EncryptionCrypto, EncryptionError, EncryptionErrorInput, EncryptionService, EncryptionServiceConfig, InlineEncryptedEnvelope, Json, NETWORK_NAME_PATTERN, NetworkDescriptor, NetworkIdError, NodeDescriptorFetcher, ParsedNetworkId, RandomReceiverKeyInput, ReceiverKeyPair, ReceiverKeySigner, SignedReceiverKeyInput, VerifyDecryptResponseInput, WellKnownDescriptorFetcher, base64Decode, base64Encode, buildCanonicalDecryptRequest, buildDecryptAttenuation, buildDecryptFacts, buildDecryptInvocation, buildNetworkId, canonicalHashHex, canonicalSignedResponse, canonicalize as canonicalizeEncryptionJson, checkDecryptInvocationInput, decryptEnvelopeWithKey, deriveSignedReceiverKey, discoverNetwork, encryptToNetwork, encryptionError, ensureNetworkUsableForDecrypt, generateRandomReceiverKey, hexDecode, hexEncode, isNetworkId, networkDiscoveryKey, openWrappedKey, parseNetworkId, utf8Decode, utf8Encode, validateEnvelope, verifyDecryptResponse } from './encryption/index.js';
 export { DecryptTransportResponseError } from '@tinycloud/sdk-services/internal/decrypt-transport-response-error';
+export { kvPrefixCovers } from './kv/replication/prefix.js';
 
 type TinyCloudDebugLevel = "debug";
 interface TinyCloudDebugEvent {
@@ -92,14 +94,14 @@ declare const ServiceErrorSchema: z.ZodObject<{
     /** Additional metadata about the error - passthrough allows any object properties */
     meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
 }, "strip", z.ZodTypeAny, {
-    message: string;
     code: string;
+    message: string;
     service: string;
     cause?: unknown;
     meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
-    message: string;
     code: string;
+    message: string;
     service: string;
     cause?: unknown;
     meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -177,22 +179,22 @@ declare const GenericResultSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -200,8 +202,8 @@ declare const GenericResultSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
     ok: false;
 }, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -488,14 +490,14 @@ declare const ServiceRequestEventSchema: z.ZodObject<{
     timestamp: number;
     service: string;
     action: string;
-    span?: string | undefined;
     key?: string | undefined;
+    span?: string | undefined;
 }, {
     timestamp: number;
     service: string;
     action: string;
-    span?: string | undefined;
     key?: string | undefined;
+    span?: string | undefined;
 }>;
 type ServiceRequestEventType = z.infer<typeof ServiceRequestEventSchema>;
 /**
@@ -545,22 +547,22 @@ declare const ServiceErrorEventSchema: z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -569,8 +571,8 @@ declare const ServiceErrorEventSchema: z.ZodObject<{
     span?: string | undefined;
 }, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -598,22 +600,22 @@ declare const ServiceRetryEventSchema: z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }>;
 }, "strip", z.ZodTypeAny, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -623,8 +625,8 @@ declare const ServiceRetryEventSchema: z.ZodObject<{
     maxAttempts: number;
 }, {
     error: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -656,14 +658,14 @@ declare const TelemetrySpanEventSchema: z.ZodObject<{
         /** Additional metadata about the error - passthrough allows any object properties */
         meta: z.ZodOptional<z.ZodObject<{}, "passthrough", z.ZodTypeAny, z.objectOutputType<{}, z.ZodTypeAny, "passthrough">, z.objectInputType<{}, z.ZodTypeAny, "passthrough">>>;
     }, "strip", z.ZodTypeAny, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -673,8 +675,8 @@ declare const TelemetrySpanEventSchema: z.ZodObject<{
     ok: boolean;
     span: string;
     error?: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectOutputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -687,8 +689,8 @@ declare const TelemetrySpanEventSchema: z.ZodObject<{
     ok: boolean;
     span: string;
     error?: {
-        message: string;
         code: string;
+        message: string;
         service: string;
         cause?: unknown;
         meta?: z.objectInputType<{}, z.ZodTypeAny, "passthrough"> | undefined;
@@ -923,6 +925,7 @@ declare class ServiceContext implements IServiceContext {
     private _services;
     private _eventHandlers;
     private _abortController;
+    private _operationAbortSignal?;
     private _retired;
     private readonly _invoke;
     private readonly _invokeAny?;
@@ -1007,6 +1010,8 @@ declare class ServiceContext implements IServiceContext {
      * Get the abort signal for cancelling operations.
      */
     get abortSignal(): AbortSignal;
+    get operationAbortSignal(): AbortSignal | undefined;
+    setOperationAbortSignal(signal: AbortSignal | undefined): void;
     /**
      * Permanently retire this graph after its owner installs a replacement.
      * Unlike `abort()`, retirement never creates a fresh controller, so captured
@@ -1722,10 +1727,13 @@ interface VaultGetOptions<T = unknown> {
     deserialize?: (data: Uint8Array) => T;
     /** Return raw decrypted bytes without deserialization */
     raw?: boolean;
+    /** Force the underlying KV read to bypass replica read-through. */
+    source?: "network";
     /** Delegated KV service for reading from the grantor's space (used by getShared) */
     kv?: {
         get<V>(key: string, options?: {
             raw?: boolean;
+            source?: "network";
         }): Promise<{
             ok: boolean;
             data?: {
@@ -1743,8 +1751,9 @@ interface VaultGetOptions<T = unknown> {
 interface VaultListOptions {
     /** Prefix filter for key names */
     prefix?: string;
-    /** Remove prefix from returned keys */
     removePrefix?: boolean;
+    /** Force the underlying KV list to bypass replica read-through. */
+    source?: "network";
     /** Maximum number of keys to return. */
     limit?: number;
     /** Opaque cursor returned by a prior bounded page. */
@@ -2343,6 +2352,8 @@ declare const SECRET_NAME_RE: RegExp;
 interface SecretScopeOptions {
     /** Optional logical scope. Omit for the global secret namespace. */
     scope?: string;
+    /** Bypass replication for existence-sensitive reads. */
+    source?: "network";
 }
 /** Canonical secret scope grammar shared with the TC-832 `/request` link. */
 declare const SECRET_SCOPE_RE: RegExp;