@voltro/plugin-flags 0.74.0 → 0.76.0

package/dist/index.js

@@ -3,23 +3,23 @@ import { i, n as a, r as o, t as s } from "./define-D9Eet7wA.js";
 import { FlagDisabled as c } from "./errors.js";
 import { Effect as l } from "effect";
 import { definePlugin as u, pluginInstanceName as d } from "@voltro/protocol";
-import { boolean as f, derivedRowId as p, id as m, integer as h, json as g, queryFor as _, registerRetention as v, retentionTtlMsFromEnv as y, table as b, text as x, timestamp as S } from "@voltro/database";
+import { boolean as f, derivedRowId as p, eq as m, id as h, integer as g, json as _, queryFor as v, registerRetention as y, retentionTtlMsFromEnv as b, table as x, text as S, timestamp as C } from "@voltro/database";
 //#region src/evaluate.ts
-var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
+var w = (e) => typeof e == "boolean" ? { enabled: e } : e, T = (e, t) => {
 	let n = 2166136261, r = `${e}:${t}`;
 	for (let e = 0; e < r.length; e++) n ^= r.charCodeAt(e), n = Math.imul(n, 16777619);
 	return n >>> 0;
-}, T = (e, t) => w(e, t) % 100, ee = (e, t) => w(`${e}:variant`, t) % 1e4, E = (e, t) => {
+}, E = (e, t) => T(e, t) % 100, D = (e, t) => T(`${e}:variant`, t) % 1e4, ee = (e, t) => {
 	if (e.subjectIds && !(t.id != null && e.subjectIds.includes(t.id)) || e.tenantIds && !(t.tenantId != null && e.tenantIds.includes(t.tenantId)) || e.subjectTypes && !(t.type != null && e.subjectTypes.includes(t.type))) return !1;
 	if (e.metadata) {
 		let n = t.metadata ?? {};
 		for (let [t, r] of Object.entries(e.metadata)) if (String(n[t]) !== r) return !1;
 	}
 	return !0;
-}, D = (e) => typeof e == "number" ? e : Date.parse(e), O = (e, t) => (e.rolloutBy === "tenant" ? t.tenantId : t.id) ?? "anon", k = (e, t) => {
-	if (e.activateAt != null && t < D(e.activateAt) || e.deactivateAt != null && t >= D(e.deactivateAt)) return { active: !1 };
+}, O = (e) => typeof e == "number" ? e : Date.parse(e), k = (e, t) => (e.rolloutBy === "tenant" ? t.tenantId : t.id) ?? "anon", A = (e, t) => {
+	if (e.activateAt != null && t < O(e.activateAt) || e.deactivateAt != null && t >= O(e.deactivateAt)) return { active: !1 };
 	if (e.ramp) {
-		let { from: n, to: r, startAt: i, endAt: a } = e.ramp, o = D(i), s = D(a);
+		let { from: n, to: r, startAt: i, endAt: a } = e.ramp, o = O(i), s = O(a);
 		if (t <= o) return {
 			active: !0,
 			rollout: n
@@ -35,32 +35,32 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		};
 	}
 	return { active: !0 };
-}, A = (e, t, n, r = Date.now()) => {
-	let i = C(t);
+}, j = (e, t, n, r = Date.now()) => {
+	let i = w(t);
 	if (i.enabled === !1) return !1;
 	let a;
 	if (i.schedule) {
-		let e = k(i.schedule, r);
+		let e = A(i.schedule, r);
 		if (!e.active) return !1;
 		a = e.rollout;
 	}
-	if (i.targeting && i.targeting.length > 0 && !i.targeting.some((e) => E(e, n))) return !1;
+	if (i.targeting && i.targeting.length > 0 && !i.targeting.some((e) => ee(e, n))) return !1;
 	let o = a ?? i.rollout ?? 100;
 	if (o < 100 && o > 0) {
-		if (!(T(e, O(i, n)) < o)) return !1;
+		if (!(E(e, k(i, n)) < o)) return !1;
 	} else if (o <= 0) return !1;
 	return i.variants && i.variants.length > 0 && i.offVariant != null ? M(e, i, n).name !== i.offVariant : !0;
-}, j = (e) => {
+}, te = (e) => {
 	let t = e.reduce((e, t) => e + (t.weight ?? 1), 0) || e.length, n = 0;
 	return e.map((r, i) => (n += r.weight ?? 1, i === e.length - 1 ? 1e4 : Math.round(n / t * 1e4)));
 }, M = (e, t, n) => {
 	let r = t.variants ?? [];
 	if (r.length === 0) throw Error(`flag "${e}" has no variants`);
-	let i = ee(e, O(t, n)), a = j(r);
+	let i = D(e, k(t, n)), a = te(r);
 	for (let e = 0; e < r.length; e++) if (i < a[e]) return r[e];
 	return r[r.length - 1];
 }, N = (e, t, n, r = Date.now()) => {
-	let i = C(t), a = A(e, t, n, r);
+	let i = w(t), a = j(e, t, n, r);
 	if (!i.variants || i.variants.length === 0) return {
 		name: a ? "on" : "off",
 		value: a,
@@ -72,34 +72,34 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		value: o.value,
 		enabled: a
 	};
-}, te = (e, t, n = Date.now()) => {
+}, ne = (e, t, n = Date.now()) => {
 	let r = {};
-	for (let [i, a] of Object.entries(e)) r[i] = A(i, a, t, n);
+	for (let [i, a] of Object.entries(e)) r[i] = j(i, a, t, n);
 	return r;
-}, ne = (e, t, n = Date.now()) => {
+}, re = (e, t, n = Date.now()) => {
 	let r = {};
 	for (let [i, a] of Object.entries(e)) r[i] = N(i, a, t, n);
 	return r;
-}, P = "_voltro_feature_flag_audit", F = "_voltro_feature_flags", I = b(F, {
-	id: m({ prefix: "flag" }),
-	key: x().unique(),
+}, P = "_voltro_feature_flag_audit", F = "_voltro_feature_flags", I = x(F, {
+	id: h({ prefix: "flag" }),
+	key: S().unique(),
 	enabled: f().default(!0),
-	rollout: h().nullable(),
-	rolloutBy: x().nullable(),
-	targeting: g().nullable(),
-	variants: g().nullable(),
-	offVariant: x().nullable(),
-	schedule: g().nullable(),
-	description: x().nullable(),
-	updatedAt: S().default("now").onUpdate("now")
-}), L = b(P, {
-	id: m({ prefix: "flagaud" }),
-	flag: x(),
+	rollout: g().nullable(),
+	rolloutBy: S().nullable(),
+	targeting: _().nullable(),
+	variants: _().nullable(),
+	offVariant: S().nullable(),
+	schedule: _().nullable(),
+	description: S().nullable(),
+	updatedAt: C().default("now").onUpdate("now")
+}), L = x(P, {
+	id: h({ prefix: "flagaud" }),
+	flag: S(),
 	enabled: f(),
 	previousEnabled: f().nullable(),
-	actorId: x().nullable(),
-	at: S().default("now")
-}).index("byFlagAuditFlag", ["flag"]).index("byFlagAuditAt", ["at"]), re = (e, t) => {
+	actorId: S().nullable(),
+	at: C().default("now")
+}).index("byFlagAuditFlag", ["flag"]).index("byFlagAuditAt", ["at"]), ie = (e, t) => {
 	let n = { ...e };
 	for (let e of t) {
 		let t = {
@@ -126,10 +126,10 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 	get(e) {
 		return this.flags[e];
 	}
-}(), z = (e, t) => B(e, t) !== null, B = (e, t) => {
+}(), ae = (e, t) => z(e, t) !== null, z = (e, t) => {
 	let n = R.get(e);
 	if (n === void 0) return null;
-	let r = C(n), i = r.enabled !== !1;
+	let r = w(n), i = r.enabled !== !1;
 	return R.set({
 		...R.all(),
 		[e]: {
@@ -137,8 +137,8 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			enabled: t
 		}
 	}), i;
-}, V = (e) => Object.entries(e).map(([e, t]) => {
-	let n = C(t);
+}, B = (e) => Object.entries(e).map(([e, t]) => {
+	let n = w(t);
 	return {
 		key: e,
 		enabled: n.enabled !== !1,
@@ -147,8 +147,8 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		scheduled: n.schedule != null,
 		description: n.description
 	};
-}), ie = (e, t) => {
-	let n = C(t);
+}), V = (e, t) => {
+	let n = w(t);
 	return {
 		key: e,
 		enabled: n.enabled !== !1,
@@ -160,8 +160,8 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		schedule: n.schedule ?? null,
 		description: n.description ?? null
 	};
-}, ae = (e) => ({
-	loadOverrides: async () => (await e.query(_(I).descriptor)).map((e) => ({
+}, oe = (e) => ({
+	loadOverrides: async () => (await e.query(v(I).descriptor)).map((e) => ({
 		key: String(e.key),
 		enabled: e.enabled === !0 || e.enabled === 1,
 		rollout: e.rollout == null ? null : Number(e.rollout),
@@ -173,28 +173,28 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		description: e.description ?? null
 	})),
 	upsertOverride: async (t) => {
-		let n = {
-			id: p("flag", t.key),
-			key: t.key,
-			enabled: t.enabled,
-			rollout: t.rollout,
-			rolloutBy: t.rolloutBy,
-			targeting: t.targeting,
-			variants: t.variants,
-			offVariant: t.offVariant,
-			schedule: t.schedule,
-			description: t.description,
-			updatedAt: /* @__PURE__ */ new Date()
-		};
+		let n = se(t);
 		await e.upsert(F, n, { conflictColumns: ["key"] });
 	}
-}), oe = (e) => ({
+}), se = (e) => ({
+	id: p("flag", e.key),
+	key: e.key,
+	enabled: e.enabled,
+	rollout: e.rollout,
+	rolloutBy: e.rolloutBy,
+	targeting: e.targeting,
+	variants: e.variants,
+	offVariant: e.offVariant,
+	schedule: e.schedule,
+	description: e.description,
+	updatedAt: /* @__PURE__ */ new Date()
+}), ce = (e) => ({
 	flag: String(e.flag),
 	enabled: e.enabled === !0 || e.enabled === 1,
 	previousEnabled: e.previousEnabled == null ? null : e.previousEnabled === !0 || e.previousEnabled === 1,
 	actorId: e.actorId ?? null,
 	at: e.at instanceof Date ? e.at : new Date(String(e.at))
-}), se = (e) => ({
+}), H = (e) => ({
 	record: async (t) => {
 		await e.insert(P, {
 			id: `flagaud_${t.at.getTime()}_${Math.random().toString(36).slice(2, 10)}`,
@@ -206,12 +206,29 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		});
 	},
 	list: async (t) => {
-		let n = _(L).orderBy("at", "desc");
-		t?.limit != null && (n = n.limit(t.limit));
-		let r = (await e.query(n.descriptor)).map(oe);
-		return t?.flag == null ? r : r.filter((e) => e.flag === t.flag);
+		let n = v(L).orderBy("at", "desc");
+		return t?.flag != null && (n = n.where(m("flag", t.flag))), t?.limit != null && (n = n.limit(t.limit)), (await e.query(n.descriptor)).map(ce);
 	}
-}), H = (e, t) => {
+}), le = async (e, t, n, r, i) => {
+	await e.transactional(async (e) => {
+		await e.insertIgnore(F, {
+			...se(V(t, n)),
+			id: p("flag", crypto.randomUUID())
+		}, { conflictColumns: ["key"] });
+		let a = (await e.query(v(I).where(m("key", t)).forUpdate().descriptor))[0];
+		if (!a) throw Error("flag override disappeared during toggle");
+		await e.update(F, String(a.id), {
+			enabled: r,
+			updatedAt: /* @__PURE__ */ new Date()
+		}), await H(e).record({
+			flag: t,
+			enabled: r,
+			previousEnabled: a.enabled === !0 || a.enabled === 1,
+			actorId: i,
+			at: /* @__PURE__ */ new Date()
+		});
+	});
+}, U = (e, t) => {
 	let n = new Map(t.map((e) => [e.name, e])), r = [];
 	for (let t of e) {
 		let e = t.experiment;
@@ -250,24 +267,24 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		}
 	}
 	return r;
-}, U = (e, t) => {
-	let n = H(e, t);
+}, W = (e, t) => {
+	let n = U(e, t);
 	if (n.length === 0) return;
 	let r = n.map((e) => `  · flag "${e.flag}" → experiment "${e.experiment}": ${e.problem}`);
 	throw Error(`@voltro/plugin-flags: ${n.length} flag→experiment link problem(s):\n${r.join("\n")}`);
-}, W = 864e5, G = (e) => typeof e == "number" ? e : Date.parse(e), K = (e, t) => {
-	let n = C(e);
+}, G = 864e5, K = (e) => typeof e == "number" ? e : Date.parse(e), ue = (e, t) => {
+	let n = w(e);
 	if (n.enabled === !1) return {
 		shape: "constantOff",
 		reason: "enabled: false — resolves false for every caller"
 	};
 	if (n.schedule) {
 		let { activateAt: e, deactivateAt: r } = n.schedule;
-		if (r != null && t >= G(r)) return {
+		if (r != null && t >= K(r)) return {
 			shape: "expired",
 			reason: `schedule.deactivateAt (${String(r)}) has passed — the flag can never be on again`
 		};
-		if (e != null && t < G(e)) return {
+		if (e != null && t < K(e)) return {
 			shape: "notYetActive",
 			reason: `schedule.activateAt (${String(e)}) is in the future — pending, not dead`
 		};
@@ -277,7 +294,7 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		shape: "constantOff",
 		reason: `rollout: ${r} — nobody is in the rollout`
 	};
-	let i = (n.targeting?.length ?? 0) > 0, a = (n.variants?.length ?? 0) > 1, o = n.schedule !== void 0 && (n.schedule.ramp !== void 0 || n.schedule.deactivateAt != null && t < G(n.schedule.deactivateAt));
+	let i = (n.targeting?.length ?? 0) > 0, a = (n.variants?.length ?? 0) > 1, o = n.schedule !== void 0 && (n.schedule.ramp !== void 0 || n.schedule.deactivateAt != null && t < K(n.schedule.deactivateAt));
 	return r >= 100 && !i && !a && !o ? {
 		shape: "constantOn",
 		reason: "rollout 100 with no targeting, no variants and no live schedule — resolves true for every caller"
@@ -290,14 +307,14 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			o ? "a live schedule" : void 0
 		].filter((e) => e !== void 0).join(", ")})`
 	};
-}, ce = [
+}, de = [
 	"Reachability is not decided. \"Not evaluated since <date>\" is a measurement; \"this code path is dead\" is not decidable in general. A seasonal flag, a flag behind a route nobody visited this month, and a flag whose last call site was deleted are indistinguishable from here.",
 	"Only SERVER-side reads are counted as use: isFlagEnabled / requireFlag / flagValue and a gatedBy interception. A flag consulted only in the browser via useFlag() / useFlagValue() reads from the bulk set the server already sent, so it never reaches this report as a named read.",
 	"A \"bulk\" observation means the flag was INCLUDED in a flags.evaluate / flags.variants response. It does not mean any client read that key — one useFlags() poll evaluates the whole registry.",
 	"The window is bounded by retention (see coverage.retentionDays). Nothing older is evidence: a flag last read BEFORE the window has no observation at all and reads \"neverObserved\", which is exactly what a flag declared this morning reads.",
 	"\"neverObserved\" is not a removal candidate. A flag declared yesterday and a flag abandoned last year produce the identical row; only a flag that WAS observed and then stopped (\"stale\") is proven unused."
-], le = (e) => {
-	let t = e.now ?? Date.now(), n = e.staleAfterDays, r = t - n * W, i = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Map(), o;
+], fe = (e) => {
+	let t = e.now ?? Date.now(), n = e.staleAfterDays, r = t - n * G, i = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Map(), o;
 	for (let t of e.usage) {
 		let e = t.lastAt.getTime();
 		if (!Number.isFinite(e)) continue;
@@ -305,7 +322,7 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		let n = t.source === "bulk" ? a : i, r = n.get(t.flag);
 		(r === void 0 || e > r) && n.set(t.flag, e);
 	}
-	let s = o === void 0 ? 0 : Math.floor((t - o) / W);
+	let s = o === void 0 ? 0 : Math.floor((t - o) / G);
 	return {
 		coverage: {
 			tracking: e.tracking,
@@ -315,7 +332,7 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			staleAfterDays: n
 		},
 		findings: Object.entries(e.flags).map(([o, c]) => {
-			let { shape: l, reason: u } = K(c, t), d = i.get(o), f = a.get(o), p = [u], m;
+			let { shape: l, reason: u } = ue(c, t), d = i.get(o), f = a.get(o), p = [u], m;
 			e.tracking ? d !== void 0 && d >= r ? (m = "evaluated", p.push(`last server-side read ${new Date(d).toISOString()}`)) : d === void 0 ? (m = "neverObserved", p.push(s > 0 ? `no server-side read in the ${s}-day observation window` : "no server-side read observed yet (the observation window is empty)"), f !== void 0 && p.push("the flag WAS delivered to a client in a bulk flags.evaluate response — which does not prove it was read")) : (m = "stale", p.push(`last server-side read ${new Date(d).toISOString()}, more than ${n} day(s) ago, over an observation window of ${s} day(s)`)) : (m = "untracked", p.push("evaluation tracking is off — no usage evidence exists for this deployment"));
 			let h = l === "constantOn" || l === "constantOff" || l === "expired";
 			return h && p.push("the definition alone makes this flag a constant — it selects nothing"), {
@@ -330,23 +347,23 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 				why: p
 			};
 		}),
-		limits: ce
+		limits: de
 	};
-}, q = "_voltro_feature_flag_usage", J = b(q, {
-	id: m({ prefix: "flagusg" }),
-	flag: x(),
-	day: x(),
-	source: x(),
-	lastAt: S()
+}, q = "_voltro_feature_flag_usage", J = x(q, {
+	id: h({ prefix: "flagusg" }),
+	flag: S(),
+	day: S(),
+	source: S(),
+	lastAt: C()
 }).unique([
 	"flag",
 	"day",
 	"source"
-]).index("byFlagUsageLastAt", ["lastAt"]).index("byFlagUsageFlag", ["flag"]), ue = (e) => e.toISOString().slice(0, 10), de = (e) => {
+]).index("byFlagUsageLastAt", ["lastAt"]).index("byFlagUsageFlag", ["flag"]), pe = (e) => e.toISOString().slice(0, 10), me = (e) => {
 	let t = 2166136261;
 	for (let n = 0; n < e.length; n++) t ^= e.charCodeAt(n), t = Math.imul(t, 16777619);
 	return (t >>> 0).toString(16).padStart(8, "0");
-}, fe = (e, t, n) => `flagusg_${t.replace(/-/g, "")}_${n === "targeted" ? "t" : "b"}_${de(e)}`, Y = new class {
+}, he = (e, t, n) => `flagusg_${t.replace(/-/g, "")}_${n === "targeted" ? "t" : "b"}_${me(e)}`, Y = new class {
 	on = !1;
 	pending = /* @__PURE__ */ new Map();
 	liveCounts = /* @__PURE__ */ new Map();
@@ -384,12 +401,12 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 	reset() {
 		this.on = !1, this.pending.clear(), this.liveCounts.clear();
 	}
-}(), X = (e, t, n) => Y.record(e, t, n), pe = (e) => e === "bulk" ? "bulk" : "targeted", me = (e) => ({
+}(), X = (e, t, n) => Y.record(e, t, n), ge = (e) => e === "bulk" ? "bulk" : "targeted", _e = (e) => ({
 	upsertMany: async (t) => {
 		for (let n of t) {
-			let t = ue(n.lastAt);
+			let t = pe(n.lastAt);
 			await e.upsert(q, {
-				id: fe(n.flag, t, n.source),
+				id: he(n.flag, t, n.source),
 				flag: n.flag,
 				day: t,
 				source: n.source,
@@ -401,13 +418,13 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			] });
 		}
 	},
-	load: async () => (await e.query(_(J).descriptor)).map((e) => ({
+	load: async () => (await e.query(v(J).descriptor)).map((e) => ({
 		flag: String(e.flag),
 		day: String(e.day),
-		source: pe(e.source),
+		source: ge(e.source),
 		lastAt: e.lastAt instanceof Date ? e.lastAt : new Date(String(e.lastAt))
 	}))
-}), he = 3e5, ge = (e) => {
+}), ve = 3e5, ye = (e) => {
 	let t = e.intervalMs ?? 3e5, n = !1, r = async () => {
 		let t = Y.drain();
 		if (t.length !== 0) try {
@@ -431,9 +448,9 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			n || (n = !0, clearInterval(i), await r());
 		}
 	};
-}, _e = (e = process.env, t = 90) => {
-	let n = y(e.VOLTRO_FLAG_USAGE_TTL_HOURS, 24 * t);
-	return v({
+}, be = (e = process.env, t = 90) => {
+	let n = b(e.VOLTRO_FLAG_USAGE_TTL_HOURS, 24 * t);
+	return y({
 		table: q,
 		timeColumn: "lastAt",
 		source: "plugin",
@@ -442,14 +459,14 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 	}), n;
 }, Z = (e) => "request" in e && e.request?.subject || "subject" in e && e.subject || {}, Q = (e, t) => {
 	let n = R.get(t);
-	return X(t, "targeted"), n !== void 0 && A(t, n, Z(e));
-}, ve = (e, t) => Q(e, t) ? l.void : l.fail(new c({ flag: t })), ye = (e, t) => {
+	return X(t, "targeted"), n !== void 0 && j(t, n, Z(e));
+}, xe = (e, t) => Q(e, t) ? l.void : l.fail(new c({ flag: t })), Se = (e, t) => {
 	let n = R.get(t.key);
 	return X(t.key, "targeted"), n === void 0 ? t.defaultValue : i(t, N(t.key, n, Z(e)));
-}, be = (e, t) => {
+}, Ce = (e, t) => {
 	let n = R.get(t.key);
 	return X(t.key, "targeted"), n === void 0 ? null : N(t.key, n, Z(e)).name;
-}, xe = (e, t) => e === t || e.startsWith("/") && e.endsWith("/") && new RegExp(e.slice(1, -1)).test(t), $ = e, Se = (e = {}) => {
+}, we = (e, t) => e === t || e.startsWith("/") && e.endsWith("/") && new RegExp(e.slice(1, -1)).test(t), $ = e, Te = (e = {}) => {
 	let i = e.gatedBy ?? {}, o = d({
 		base: $,
 		alias: e.alias,
@@ -460,69 +477,71 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		if (e.flags?.[t.key] !== void 0) throw Error(`${$}: ${JSON.stringify(t.key)} is declared BOTH in \`flags\` and in \`typedFlags\`. One key, one declaration — the typed one would otherwise be silently overwritten by the untyped baseline.`);
 		f.set(t.key, t);
 	}
-	s.some((e) => e.experiment !== void 0) && U(s, e.experiments ?? []);
+	s.some((e) => e.experiment !== void 0) && W(s, e.experiments ?? []);
 	let p = { ...e.flags ?? {} };
 	for (let e of s) p[e.key] = e.definition;
-	let m = e.store === "postgres", h, g, _, v, y = [], b = e.usage ?? {}, x = b.track ?? m;
-	if (x && !m) throw Error(`${$}: usage.track requires store: 'postgres' — there is nowhere to record an evaluation on the memory tier, and a dead-flag report that silently observed nothing is exactly the defect it exists to find.`);
-	let S = b.staleAfterDays ?? 30, C = b.retentionDays ?? 90;
-	if (S > C) throw Error(`${$}: usage.staleAfterDays (${S}) exceeds usage.retentionDays (${C}), so the observation window can never be long enough to prove a flag stale and every verdict would be withheld.`);
-	let w = (e) => {
-		let t = re(p, e), n = [];
+	let m = e.store === "postgres", h, g, _, v, y, b = [], x = e.usage ?? {}, S = x.track ?? m;
+	if (S && !m) throw Error(`${$}: usage.track requires store: 'postgres' — there is nowhere to record an evaluation on the memory tier, and a dead-flag report that silently observed nothing is exactly the defect it exists to find.`);
+	let C = x.staleAfterDays ?? 30, w = x.retentionDays ?? 90;
+	if (C > w) throw Error(`${$}: usage.staleAfterDays (${C}) exceeds usage.retentionDays (${w}), so the observation window can never be long enough to prove a flag stale and every verdict would be withheld.`);
+	let T = (e) => {
+		let t = ie(p, e), n = [];
 		for (let [e, r] of f) {
 			let i = t[e];
 			if (i === void 0) continue;
 			let o = a(r, typeof i == "boolean" ? { enabled: i } : i);
 			o.ok || (n.push(o.refusal), t[e] = r.definition);
 		}
-		y = n, R.set(t);
-	}, T = async () => {
-		h && w(await h.loadOverrides());
+		b = n, R.set(t);
+	}, E = 0, D = async () => {
+		if (!g) return;
+		let e = ++E, t = await g.loadOverrides();
+		e === E && T(t);
 	}, ee = (e) => {
 		if (i[e] !== void 0) return i[e];
-		for (let [t, n] of Object.entries(i)) if (t !== e && xe(t, e)) return n;
-	}, E = (e, t) => {
+		for (let [t, n] of Object.entries(i)) if (t !== e && we(t, e)) return n;
+	}, O = (e, t) => {
 		let n = ee(t.tag);
 		return n === void 0 || Q({ subject: t.subject }, n) ? e : l.fail(new c({ flag: n }));
-	}, D = Object.keys(i).length > 0, O = (e) => {
+	}, k = Object.keys(i).length > 0, A = (e) => {
 		for (let t of e) X(t, "bulk");
-	}, k = {
+	}, j = {
 		...t,
 		description: "Resolve every feature flag for the calling subject.",
 		execute: (e, t) => l.sync(() => {
 			let e = R.all();
-			return O(Object.keys(e)), te(e, t.request.subject ?? {});
+			return A(Object.keys(e)), ne(e, t.request.subject ?? {});
 		})
-	}, A = {
+	}, te = {
 		...n,
 		description: "Resolve every feature flag to its served variant for the calling subject.",
 		execute: (e, t) => l.sync(() => {
 			let e = R.all();
-			return O(Object.keys(e)), ne(e, t.request.subject ?? {});
+			return A(Object.keys(e)), re(e, t.request.subject ?? {});
 		})
-	}, j = (e) => ({
+	}, M = (e) => ({
 		kind: "json",
 		data: e
-	}), M = (e, t) => ({
+	}), N = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), N = async () => {
+	}), P = async () => {
 		let e = [];
-		if (x && _) try {
-			e = await _.load();
+		if (S && v) try {
+			e = await v.load();
 		} catch {
 			e = [];
 		}
-		return le({
+		return fe({
 			flags: R.all(),
 			usage: e,
-			tracking: x,
+			tracking: S,
 			liveCounts: Y.liveTargetedCounts(),
-			staleAfterDays: S,
-			retentionDays: C
+			staleAfterDays: C,
+			retentionDays: w
 		});
-	}, P = () => {
+	}, F = () => {
 		let e = {};
 		for (let [t, n] of f) e[t] = {
 			valueType: n.valueType,
@@ -530,19 +549,19 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			experiment: n.experiment ?? null
 		};
 		return e;
-	}, F = [
+	}, ae = [
 		{
 			method: "GET",
 			path: "/list",
 			scope: "process",
 			description: "Every resolved flag (key, enabled, rollout, description) plus the dead-flag lifecycle report: per-flag shape + usage verdict, the observation coverage window, and the limits of what the report can prove.",
 			handler: () => l.promise(async () => {
-				let e = await N();
-				return j({
-					flags: V(R.all()),
+				let e = await P();
+				return M({
+					flags: B(R.all()),
 					lifecycle: e,
-					typed: P(),
-					overrideRefusals: y
+					typed: F(),
+					overrideRefusals: b
 				});
 			})
 		},
@@ -555,21 +574,21 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 				try {
 					t = JSON.parse(e.body || "{}");
 				} catch {
-					return M(400, "invalid JSON body");
+					return N(400, "invalid JSON body");
 				}
-				if (!t.key || typeof t.enabled != "boolean") return M(400, "key (string) + enabled (boolean) required");
-				let n = B(t.key, t.enabled);
-				if (n === null) return M(404, `unknown flag "${t.key}"`);
-				let r = h ? R.get(t.key) : void 0;
-				return h && r !== void 0 && (yield* l.promise(() => h.upsertOverride(ie(t.key, r)))), g && (yield* l.promise(() => g.record({
-					flag: t.key,
-					enabled: t.enabled,
-					previousEnabled: n,
-					actorId: typeof t.actor == "string" ? t.actor : null,
-					at: /* @__PURE__ */ new Date()
-				}))), j({
+				if (!t || typeof t.key != "string" || !t.key || typeof t.enabled != "boolean") return N(400, "key (string) + enabled (boolean) required");
+				let n = t.key, r = t.enabled, i = R.get(n);
+				if (i === void 0) return N(404, `unknown flag "${n}"`);
+				if (m) {
+					let e = h;
+					if (!e) return N(503, "flag store is not ready");
+					if ((yield* l.tryPromise(async () => {
+						await le(e, n, i, r, typeof t.actor == "string" ? t.actor : null), await D();
+					}).pipe(l.either))._tag === "Left") return yield* l.tryPromise(D).pipe(l.ignore), N(503, "flag update could not be confirmed; reload the flag state before retrying");
+				} else z(n, r);
+				return M({
 					ok: !0,
-					flags: V(R.all())
+					flags: B(R.all())
 				});
 			})
 		},
@@ -579,15 +598,15 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 			scope: m ? "shared-store" : "declaration",
 			description: "The kill-switch flip audit trail, newest-first. `?flag=<key>` filters; `?limit=<n>` caps (postgres tier only).",
 			handler: (e) => l.gen(function* () {
-				if (!g) return j({
+				if (!_) return M({
 					audit: [],
 					note: "audit trail requires store: \"postgres\""
 				});
-				let t = new URL(e.url, "http://local"), n = t.searchParams.get("flag"), r = t.searchParams.get("limit"), i = r != null && Number.isFinite(Number(r)) ? Number(r) : 100, a = yield* l.promise(() => g.list({
+				let t = new URL(e.url, "http://local"), n = t.searchParams.get("flag"), r = t.searchParams.get("limit"), i = r != null && Number.isFinite(Number(r)) ? Number(r) : 100, a = yield* l.promise(() => _.list({
 					...n == null ? {} : { flag: n },
 					limit: i
 				}));
-				return j({ audit: a.map((e) => ({
+				return M({ audit: a.map((e) => ({
 					flag: e.flag,
 					enabled: e.enabled,
 					previousEnabled: e.previousEnabled,
@@ -596,8 +615,8 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 				})) });
 			})
 		}
-	], z = [
-		...D ? [
+	], V = [
+		...k ? [
 			"rpc:intercept:mutation",
 			"rpc:intercept:query",
 			"rpc:intercept:action",
@@ -611,10 +630,10 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 		name: o,
 		baseName: $,
 		description: "Feature flags — targeting, % rollout, kill-switch, declarative gating + client evaluation.",
-		permissions: z,
-		routes: [k, A],
+		permissions: V,
+		routes: [j, te],
 		rpcClientDescriptors: r,
-		inspectEndpoints: F,
+		inspectEndpoints: ae,
 		errorSchemas: [{
 			schema: c,
 			import: {
@@ -622,30 +641,30 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 				name: "FlagDisabled"
 			}
 		}],
-		...D ? {
-			interceptMutation: E,
-			interceptQuery: E,
-			interceptAction: E,
-			interceptWorkflow: E
+		...k ? {
+			interceptMutation: O,
+			interceptQuery: O,
+			interceptAction: O,
+			interceptWorkflow: O
 		} : {},
-		...m ? { extendSchema: { tables: x ? [
+		...m ? { extendSchema: { tables: S ? [
 			I,
 			L,
 			J
 		] : [I, L] } } : {},
 		...m ? { bindDataStore: (e) => {
-			h = ae(e), g = se(e), x && (_ = me(e));
+			h = e, g = oe(h), _ = H(e), S && (v = _e(e));
 		} } : {},
-		...m ? { onChangeEvent: (e) => e.table === "_voltro_feature_flags" ? l.tryPromise(() => T()) : l.void } : {},
+		...m ? { onChangeEvent: (e) => e.table === "_voltro_feature_flags" ? l.tryPromise(() => D()) : l.void } : {},
 		onActivate: (t) => l.gen(function* () {
-			R.set(p), m && h && (yield* l.promise(T));
+			R.set(p), m && g && (yield* l.promise(D));
 			let n;
-			x && _ && (n = _e(process.env, C), Y.enable(), v = ge({
-				store: _,
-				intervalMs: b.flushIntervalMs ?? 3e5,
+			S && v && (n = be(process.env, w), Y.enable(), y = ye({
+				store: v,
+				intervalMs: x.flushIntervalMs ?? 3e5,
 				log: { warn: (e, n) => t.logger.warn(e, n) }
 			}));
-			for (let e of y) t.logger.warn("feature flag override REFUSED — the code-declared definition stands", {
+			for (let e of b) t.logger.warn("feature flag override REFUSED — the code-declared definition stands", {
 				flag: e.key,
 				reason: e.reason
 			});
@@ -654,13 +673,13 @@ var C = (e) => typeof e == "boolean" ? { enabled: e } : e, w = (e, t) => {
 				typed: f.size,
 				gated: Object.keys(i).length,
 				store: e.store ?? "memory",
-				usage: x ? `tracking (stale after ${S}d, observations kept ${Math.round((n ?? 0) / 864e5)}d)` : "off — no dead-flag evidence is collected"
+				usage: S ? `tracking (stale after ${C}d, observations kept ${Math.round((n ?? 0) / 864e5)}d)` : "off — no dead-flag evidence is collected"
 			});
 		}),
 		onDeactivate: () => l.promise(async () => {
-			await v?.stop(), v = void 0, Y.disable(), R.set({});
+			await y?.stop(), y = void 0, Y.disable(), R.set({});
 		})
 	});
 };
 //#endregion
-export { he as DEFAULT_FLAG_USAGE_FLUSH_MS, ce as FLAG_LIFECYCLE_LIMITS, q as FLAG_USAGE_TABLE, c as FlagDisabled, U as assertFlagExperimentLinks, H as checkFlagExperimentLinks, K as classifyShape, me as dataStoreFlagUsageStore, s as defineFlag, V as describeFlags, te as evaluateAll, ne as evaluateAllVariants, A as evaluateFlag, k as evaluateSchedule, N as evaluateVariant, I as featureFlagsTable, L as flagAuditTable, le as flagLifecycleReport, R as flagRegistry, Y as flagUsageBuffer, fe as flagUsageRowId, J as flagUsageTable, ye as flagValue, be as flagVariant, Se as flagsPlugin, B as flipFlagEnabled, a as gateOverride, Q as isFlagEnabled, o as isTypedFlag, re as mergeOverrides, X as recordFlagEvaluation, _e as registerFlagUsageRetention, ve as requireFlag, M as resolveVariant, z as setFlagEnabled, ge as startFlagUsageFlush, C as toDefinition, i as typedValueOf, ue as utcDay };
+export { ve as DEFAULT_FLAG_USAGE_FLUSH_MS, de as FLAG_LIFECYCLE_LIMITS, q as FLAG_USAGE_TABLE, c as FlagDisabled, W as assertFlagExperimentLinks, U as checkFlagExperimentLinks, ue as classifyShape, _e as dataStoreFlagUsageStore, s as defineFlag, B as describeFlags, ne as evaluateAll, re as evaluateAllVariants, j as evaluateFlag, A as evaluateSchedule, N as evaluateVariant, I as featureFlagsTable, L as flagAuditTable, fe as flagLifecycleReport, R as flagRegistry, Y as flagUsageBuffer, he as flagUsageRowId, J as flagUsageTable, Se as flagValue, Ce as flagVariant, Te as flagsPlugin, z as flipFlagEnabled, a as gateOverride, Q as isFlagEnabled, o as isTypedFlag, ie as mergeOverrides, X as recordFlagEvaluation, be as registerFlagUsageRetention, xe as requireFlag, M as resolveVariant, ae as setFlagEnabled, ye as startFlagUsageFlush, w as toDefinition, i as typedValueOf, pe as utcDay };