@voltro/runtime 0.84.0 → 0.86.0

package/dist/tenantSelection.js

@@ -0,0 +1,27 @@
+import { TENANT_SELECTIONS_TABLE as e, deleteTenantSelection as t, readTenantSelection as n, tenantSelectionId as r, writeTenantSelection as i } from "@voltro/database";
+import { isTenantSelectable as a, selectSubjectTenant as o } from "@voltro/protocol";
+//#region src/tenantSelection.ts
+var s = (e) => {
+	let r = () => {
+		let t = e();
+		if (t === void 0) throw Error("the data store is not built yet");
+		return t;
+	};
+	return {
+		read: (e) => n(r(), e),
+		clear: (e) => t(r(), e)
+	};
+}, c = async (e, t, n, r) => {
+	let s = o(t, n, r);
+	return a(s) && await i(e, {
+		type: s.type,
+		id: s.id
+	}, n), s;
+}, l = async (e, n) => {
+	a(n) && await t(e, {
+		type: n.type,
+		id: n.id
+	});
+};
+//#endregion
+export { e as TENANT_SELECTIONS_TABLE, l as clearTenantSelection, c as selectTenant, r as tenantSelectionId, s as tenantSelectionStore };

package/dist/timeline.js

@@ -0,0 +1,105 @@
+import { randomUUID as e } from "node:crypto";
+import { BoundedRing as t } from "@voltro/protocol";
+//#region src/timeline.ts
+var n = (e = process.env) => {
+	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
+	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
+}, r = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, i = "«redacted»", a = (e) => {
+	if (e == null) return null;
+	let t = {};
+	for (let [n, a] of Object.entries(e)) t[n] = r.test(n) ? i : a;
+	return t;
+}, o = (e) => {
+	let t = e?.id;
+	return typeof t == "string" || typeof t == "number" && Number.isFinite(t) ? t : void 0;
+}, s = (e) => {
+	if (e.oversized !== void 0 || e.netChange === !0) throw Error("timeline event has an incomplete or reconstructed row image");
+	let t = o(e.op === "delete" ? e.old : e.new);
+	if (t === void 0 || e.op === "update" && (e.old == null || o(e.old) === void 0)) throw Error("timeline event lacks a required row image or identity");
+	return t;
+}, c = (e, t) => {
+	let n = s(t);
+	return t.op === "insert" ? e.filter((e) => e.id !== n) : t.op === "update" ? e.map((e) => e.id === n ? t.old : e) : [...e, t.old];
+}, l = (e, t) => {
+	if (t.length === 0) return e;
+	let n = [...e], r = /* @__PURE__ */ new Map(), i = (e, t) => {
+		let n = e.id, i = r.get(n);
+		i ? i.add(t) : r.set(n, /* @__PURE__ */ new Set([t]));
+	};
+	n.forEach((e, t) => {
+		e && i(e, t);
+	});
+	for (let e of t) {
+		let t = s(e);
+		if (e.op === "delete") {
+			i(e.old, n.length), n.push(e.old);
+			continue;
+		}
+		let a = r.get(t);
+		if (a) {
+			r.delete(t);
+			for (let t of a) e.op === "insert" ? n[t] = void 0 : (n[t] = e.old, i(e.old, t));
+		}
+	}
+	let a = 0;
+	for (let e of n) e !== void 0 && (n[a++] = e);
+	return n.length = a, n;
+}, u = class {
+	mode;
+	capacity;
+	now;
+	historyId = e();
+	get recorderId() {
+		return this.historyId;
+	}
+	invalidate() {
+		this.historyId = e(), this.ring.clear(), this.seqCounter = 0;
+	}
+	ring;
+	seqCounter = 0;
+	constructor(e = "interesting", n = 5e3, r = () => Date.now()) {
+		this.mode = e, this.capacity = n, this.now = r, this.ring = new t(n);
+	}
+	get enabled() {
+		return this.mode !== "off";
+	}
+	record(e) {
+		if (this.mode === "off" || e.table === "_voltro_timeline" || this.mode === "interesting" && e.table.startsWith("_voltro")) return -1;
+		let t = ++this.seqCounter, n = e.tenantId ?? e.new?.tenantId ?? e.old?.tenantId ?? null;
+		return this.ring.push({
+			seq: t,
+			ts: this.now(),
+			table: e.table,
+			op: e.op,
+			old: a(e.old),
+			new: a(e.new),
+			tenantId: n,
+			...e.netChange === !0 ? { netChange: !0 } : {},
+			...e.oversized === void 0 ? {} : { oversized: e.oversized }
+		}), t;
+	}
+	currentSeq() {
+		return this.seqCounter;
+	}
+	snapshot(e = {}) {
+		let t = [...this.ring], n = 0;
+		for (let r of t) (e.table === void 0 || r.table === e.table) && (e.tenantId === void 0 || r.tenantId === e.tenantId) && (e.from === void 0 || r.seq >= e.from) && (e.to === void 0 || r.seq <= e.to) && (t[n++] = r);
+		return t.length = n, e.limit !== void 0 && t.length > e.limit && (t = t.slice(t.length - e.limit)), t;
+	}
+	replay(e, t, n) {
+		let r = [...this.ring], i = 0;
+		for (let n of r) n.table === e && n.seq > t && (r[i++] = n);
+		return r.length = i, r.sort((e, t) => t.seq - e.seq), l(n, r);
+	}
+}, d, f = () => (d === void 0 && (d = new u(n())), d), p = (e) => {
+	d = e;
+}, m = (e) => {
+	let t = f();
+	if (t.enabled) try {
+		t.record(e);
+	} catch {
+		t.invalidate();
+	}
+};
+//#endregion
+export { u as TimelineRecorder, f as getTimelineRecorder, m as recordTimelineEvent, a as redactRow, n as resolveTimelineMode, c as reverseEventOverRows, p as setTimelineRecorderForTest };

package/dist/traceContext.js

@@ -0,0 +1,5 @@
+import { AsyncLocalStorage as e } from "node:async_hooks";
+//#region src/traceContext.ts
+var t = new e(), n = (e, n) => t.run(e, n), r = () => t.getStore();
+//#endregion
+export { r as currentTraceContext, n as runWithTraceContext };

package/dist/traceSink.js

@@ -0,0 +1,63 @@
+import { SpanKind as e, SpanStatusCode as t } from "@opentelemetry/api";
+//#region src/traceSink.ts
+var n = {
+	[e.INTERNAL]: "internal",
+	[e.SERVER]: "server",
+	[e.CLIENT]: "client",
+	[e.PRODUCER]: "producer",
+	[e.CONSUMER]: "consumer"
+}, r = (e) => e[0] * 1e3 + e[1] / 1e6, i = 512, a = 48, o = (e) => {
+	let t = {}, n = 0;
+	for (let r in e) {
+		if (n >= a) break;
+		let o = e[r];
+		if (typeof o == "string") t[r] = o.length > i ? `${o.slice(0, i)}…` : o;
+		else if (typeof o == "number" || typeof o == "boolean" || o == null) t[r] = o;
+		else {
+			let e;
+			try {
+				e = JSON.stringify(o);
+			} catch {
+				e = String(o);
+			}
+			t[r] = e.length > i ? `${e.slice(0, i)}…` : e;
+		}
+		n++;
+	}
+	return t;
+}, s = {
+	[t.UNSET]: "unset",
+	[t.OK]: "ok",
+	[t.ERROR]: "error"
+}, c = (e) => {
+	let t = e.spanContext(), i = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
+		name: e.name,
+		tsMs: r(e.time),
+		...e.attributes ? { attributes: o(e.attributes) } : {}
+	})) : void 0;
+	return {
+		traceId: t.traceId,
+		spanId: t.spanId,
+		parentSpanId: e.parentSpanContext?.spanId ?? null,
+		name: e.name,
+		kind: n[e.kind] ?? "internal",
+		attributes: o(e.attributes),
+		startMs: r(e.startTime),
+		endMs: r(e.endTime),
+		durationMs: r(e.duration),
+		status: s[e.status.code] ?? "unset",
+		...e.status.message ? { statusMessage: e.status.message } : {},
+		...i ? { events: i } : {}
+	};
+}, l = (e) => ({
+	onStart: () => {},
+	onEnd: (t) => {
+		try {
+			e(c(t));
+		} catch {}
+	},
+	forceFlush: () => Promise.resolve(),
+	shutdown: () => Promise.resolve()
+});
+//#endregion
+export { l as makeBufferingSpanProcessor };

package/dist/traceSpansTable.js

@@ -0,0 +1,29 @@
+import { id as e, integer as t, json as n, table as r, text as i, timestamp as a } from "@voltro/database";
+//#region src/traceSpansTable.ts
+var o = r("_voltro_traces", {
+	id: e({ prefix: "span" }),
+	traceId: i(),
+	spanId: i(),
+	parentSpanId: i().nullable(),
+	name: i(),
+	kind: i().oneOf([
+		"internal",
+		"server",
+		"client",
+		"producer",
+		"consumer"
+	]).default("internal"),
+	status: i().oneOf([
+		"ok",
+		"error",
+		"unset"
+	]).default("unset"),
+	statusMessage: i().nullable(),
+	startedAt: a(),
+	endedAt: a(),
+	durationMs: t(),
+	attributes: n().nullable(),
+	events: n().nullable()
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]);
+//#endregion
+export { o as _voltroTracesTable };

package/dist/traceparent.js

@@ -0,0 +1,34 @@
+import { Tracer as e } from "effect";
+//#region src/traceparent.ts
+var t = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, n = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, r = (e) => {
+	if (typeof e != "string") return null;
+	let n = t.exec(e.trim().toLowerCase());
+	if (n === null) return null;
+	let [, r, i, a] = n;
+	return r === "0".repeat(32) || i === "0".repeat(16) ? null : {
+		traceId: r,
+		spanId: i,
+		sampled: (parseInt(a, 16) & 1) == 1
+	};
+}, i = (t) => {
+	let n = r(t);
+	if (n !== null) return e.externalSpan({
+		traceId: n.traceId,
+		spanId: n.spanId,
+		sampled: n.sampled
+	});
+}, a = () => {
+	let e = globalThis.crypto, t = /* @__PURE__ */ new Uint8Array(16);
+	if (e?.getRandomValues !== void 0) e.getRandomValues(t);
+	else {
+		let e = `${Date.now().toString(16)}${Math.random().toString(16).slice(2)}`;
+		for (let n = 0; n < t.length; n += 1) {
+			let r = e.slice(n * 2 % e.length, n * 2 % e.length + 2);
+			t[n] = (parseInt(r, 16) || n + 1) ^ (Math.random() * 256 | 0);
+		}
+	}
+	let n = Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
+	return n === "0".repeat(32) ? `${"0".repeat(31)}1` : n;
+};
+//#endregion
+export { i as externalSpanFromTraceparent, n as formatTraceparent, a as newTraceId, r as parseTraceparent };

package/dist/transactionSubject.js

@@ -0,0 +1,12 @@
+import { isMachineSubject as e, tenantScopedSubject as t } from "@voltro/protocol";
+//#region src/transactionSubject.ts
+var n = (n, r, i) => {
+	if (r === void 0) return n;
+	if (r.trim() === "") throw Error("transaction tenantId must be non-empty");
+	if (r === n.tenantId) return n;
+	if (i) throw Error("transaction cannot change tenant inside an active transaction");
+	if (!e(n)) throw Error("only a system context — the framework itself, or another app calling a `service:` procedure — can select another transaction tenant");
+	return t(n, r);
+};
+//#endregion
+export { n as resolveTransactionSubject };

package/dist/trustedProxy.js

@@ -0,0 +1,155 @@
+import { bootRefusal as e } from "./bootRefusal.js";
+//#region src/trustedProxy.ts
+var t = {
+	entries: [],
+	trustAll: !1
+}, n = (e) => {
+	let t = e.trim();
+	if (t.length === 0) return;
+	if (t.startsWith("[")) {
+		let e = t.indexOf("]");
+		if (e < 0) return;
+		t = t.slice(1, e);
+	} else (t.match(/:/g) ?? []).length === 1 && t.includes(".") && (t = t.slice(0, t.indexOf(":")));
+	let n = t.indexOf("%");
+	return n >= 0 && (t = t.slice(0, n)), t = t.toLowerCase(), t.startsWith("::ffff:") && t.includes(".") && (t = t.slice(7)), t.length > 0 ? t : void 0;
+}, r = (e) => {
+	let t = e.split(".");
+	if (t.length !== 4) return;
+	let n = /* @__PURE__ */ new Uint8Array(4);
+	for (let e = 0; e < 4; e++) {
+		let r = t[e];
+		if (!/^\d{1,3}$/.test(r)) return;
+		let i = Number(r);
+		if (i > 255) return;
+		n[e] = i;
+	}
+	return n;
+}, i = (e) => {
+	if (!e.includes(":")) return;
+	let t = e.indexOf("::"), n, i;
+	if (t >= 0) {
+		if (e.indexOf("::", t + 1) >= 0) return;
+		n = e.slice(0, t).match(/[^:]+/g) ?? [], i = e.slice(t + 2).match(/[^:]+/g) ?? [];
+	} else n = e.split(":"), i = [];
+	let a = (e) => {
+		if (e.length === 0) return e;
+		let t = e[e.length - 1];
+		if (!t.includes(".")) return e;
+		let n = r(t);
+		if (!n) return;
+		let i = (n[0] << 8 | n[1]).toString(16), a = (n[2] << 8 | n[3]).toString(16);
+		return e[e.length - 1] = i, e.push(a), e;
+	}, o = a(n), s = a(i);
+	if (!o || !s) return;
+	let c = 8 - (o.length + s.length);
+	if (t < 0 ? c !== 0 : c < 0) return;
+	let l = [
+		...o,
+		...Array.from({ length: Math.max(0, c) }, () => "0"),
+		...s
+	];
+	if (l.length !== 8) return;
+	let u = /* @__PURE__ */ new Uint8Array(16);
+	for (let e = 0; e < 8; e++) {
+		let t = l[e];
+		if (!/^[0-9a-f]{1,4}$/.test(t)) return;
+		let n = Number.parseInt(t, 16);
+		u[e * 2] = n >> 8 & 255, u[e * 2 + 1] = n & 255;
+	}
+	return u;
+}, a = (e) => e.includes(":") ? i(e) : r(e), o = (e, t, n) => {
+	if (e.length !== t.length || n < 0 || n > e.length * 8) return !1;
+	let r = n >> 3;
+	for (let n = 0; n < r; n++) if (e[n] !== t[n]) return !1;
+	let i = n & 7;
+	if (i === 0) return !0;
+	let a = 255 << 8 - i & 255;
+	return (e[r] & a) === (t[r] & a);
+}, s = {
+	loopback: ["127.0.0.0/8", "::1/128"],
+	private: [
+		"10.0.0.0/8",
+		"172.16.0.0/12",
+		"192.168.0.0/16",
+		"100.64.0.0/10",
+		"169.254.0.0/16",
+		"fc00::/7",
+		"fe80::/10"
+	]
+}, c = (e) => {
+	let t = e.trim().toLowerCase();
+	return t === "private" || t === "uniquelocal" ? s.private : t === "loopback" ? s.loopback : [e.trim()];
+}, l = (e, t) => {
+	if (t.trustAll) return !0;
+	if (e === void 0) return !1;
+	let r = n(e);
+	if (r === void 0) return !1;
+	let i = a(r);
+	if (i === void 0) return !1;
+	for (let e of t.entries) for (let t of c(e)) {
+		let e = t.indexOf("/"), r = n(e >= 0 ? t.slice(0, e) : t);
+		if (r === void 0) continue;
+		let s = a(r);
+		if (s === void 0) continue;
+		let c = e >= 0 ? Number(t.slice(e + 1)) : s.length * 8;
+		if (Number.isInteger(c) && o(i, s, c)) return !0;
+	}
+	return !1;
+}, u = (n, r = process.env, i) => {
+	let a = n !== void 0 && n.length > 0 ? n : (r.VOLTRO_TRUSTED_PROXIES ?? "").split(",").map((e) => e.trim()).filter((e) => e.length > 0), o = a.length === 0 ? t : a.length === 1 && a[0] === "*" ? {
+		entries: [],
+		trustAll: !0
+	} : a.length === 1 && /^\d+$/.test(a[0]) ? Number(a[0]) > 0 ? {
+		entries: [],
+		trustAll: !1,
+		hops: Number(a[0])
+	} : t : {
+		entries: a,
+		trustAll: !1
+	}, s = d(i, r);
+	if (s === void 0) return o;
+	if (o === t) throw e(`security.clientAddressHeader is '${s}', but no trusted proxy is declared, so the header would never be believed. Declare the proxy that sets it in security.trustedProxies (or VOLTRO_TRUSTED_PROXIES).`);
+	return {
+		...o,
+		clientAddressHeader: s
+	};
+}, d = (t, n) => {
+	let r = (t ?? n.VOLTRO_CLIENT_ADDRESS_HEADER ?? "").trim().toLowerCase();
+	if (r !== "") {
+		if (!/^[a-z0-9][a-z0-9-]*$/.test(r)) throw e(`security.clientAddressHeader '${r}' is not a valid HTTP header name.`);
+		if (r === "x-forwarded-for") throw e("security.clientAddressHeader is 'x-forwarded-for', which is always read as a chain. Remove the option; security.trustedProxies alone governs it.");
+		return r;
+	}
+}, f = (e) => {
+	let { socketAddress: t, xForwardedFor: r, config: i } = e, a = t === void 0 ? void 0 : n(t) ?? t, o = p(e, a);
+	if (o !== void 0) return o;
+	if (r === void 0 || r.trim() === "") return a;
+	let s = r.split(",").map((e) => n(e) ?? e.trim()), c = 0;
+	for (let e of s) e.length > 0 && (s[c++] = e);
+	if (s.length = c, s.length === 0) return a;
+	if (i.trustAll) return s[0];
+	if (i.hops !== void 0) {
+		let e = s.length + (a === void 0 ? 0 : 1), t = Math.max(0, e - 1 - i.hops);
+		return t === s.length ? a : s[t];
+	}
+	if (!l(a, i)) return a;
+	for (let e = s.length - 1; e >= 0; e--) if (!l(s[e], i)) return s[e];
+	return s[0];
+}, p = (e, t) => {
+	let { config: r, clientAddressHeader: i } = e;
+	if (r.clientAddressHeader === void 0 || i === void 0 || !(r.trustAll || r.hops !== void 0 || l(t, r)) || i.includes(",")) return;
+	let o = n(i);
+	return o !== void 0 && a(o) !== void 0 ? o : void 0;
+}, m = (e) => f({
+	socketAddress: e.socketAddress,
+	xForwardedFor: e.headers["x-forwarded-for"],
+	clientAddressHeader: e.config.clientAddressHeader === void 0 ? void 0 : e.headers[e.config.clientAddressHeader],
+	config: e.config
+}), h = (e) => {
+	if (e.socketEncrypted) return !0;
+	let t = e.xForwardedProto;
+	return t === void 0 || t.trim() === "" || !(e.config.trustAll || e.config.hops !== void 0 || l(e.socketAddress, e.config)) ? !1 : t.split(",")[0].trim().toLowerCase() === "https";
+};
+//#endregion
+export { t as NO_TRUSTED_PROXIES, a as ipToBytes, l as isTrustedProxy, n as normalizeIp, f as resolveClientAddress, m as resolveRequestClientAddress, h as resolveRequestIsHttps, u as resolveTrustedProxies };

package/dist/undo.js

@@ -0,0 +1,129 @@
+//#region src/undo.ts
+var e = (e) => {
+	if (e.id !== void 0) return e.id;
+	let t = e.next?.id;
+	if (typeof t == "string") return t;
+	let n = e.prev?.id;
+	return typeof n == "string" ? n : void 0;
+}, t = (t) => {
+	let n = e(t);
+	switch (t.op) {
+		case "insert": return n === void 0 ? null : {
+			table: t.table,
+			op: "delete",
+			id: n
+		};
+		case "update": return n !== void 0 && t.prev != null ? {
+			table: t.table,
+			op: "update",
+			id: n,
+			values: t.prev
+		} : null;
+		case "softDelete": return n === void 0 ? null : {
+			table: t.table,
+			op: "undelete",
+			id: n
+		};
+		case "delete": return t.prev == null ? null : {
+			table: t.table,
+			op: "insert",
+			row: t.prev
+		};
+	}
+}, n = (e) => {
+	if (e.crossesAction) throw new r(e.invocationId, "action");
+	let n = [];
+	for (let r = e.changes.length - 1; r >= 0; --r) {
+		let i = t(e.changes[r]);
+		i !== null && n.push(i);
+	}
+	return n;
+}, r = class extends Error {
+	invocationId;
+	boundary;
+	_tag = "UndoBoundaryError";
+	constructor(e, t) {
+		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
+	}
+}, i = (e, t, n = ["updatedAt", "updatedBy"]) => {
+	if (t == null) return e == null;
+	if (e == null) return !1;
+	let r = new Set(n);
+	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
+	return !0;
+}, a = class {
+	capacity;
+	done = [];
+	undone = [];
+	constructor(e = 100) {
+		this.capacity = e;
+	}
+	push(e) {
+		this.done.push(e), this.done.length > this.capacity && this.done.shift(), this.undone = [];
+	}
+	get canUndo() {
+		return this.done.length > 0;
+	}
+	get canRedo() {
+		return this.undone.length > 0;
+	}
+	peekUndo() {
+		return this.done[this.done.length - 1];
+	}
+	peekRedo() {
+		return this.undone[this.undone.length - 1];
+	}
+	undo() {
+		let e = this.done.pop();
+		return e !== void 0 && this.undone.push(e), e;
+	}
+	redo() {
+		let e = this.undone.pop();
+		return e !== void 0 && this.done.push(e), e;
+	}
+	snapshot() {
+		return {
+			undo: [...this.done],
+			redo: [...this.undone]
+		};
+	}
+}, o = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+	table: e.table,
+	op: "insert",
+	next: e.new ?? null
+} : e.op === "update" ? {
+	table: e.table,
+	op: "update",
+	prev: e.old ?? null,
+	next: e.new ?? null
+} : t.has(e.table) ? {
+	table: e.table,
+	op: "softDelete",
+	prev: e.old ?? null
+} : {
+	table: e.table,
+	op: "delete",
+	prev: e.old ?? null
+}, s = async (e, t) => {
+	switch (t.op) {
+		case "delete":
+			await e.delete(t.table, t.id);
+			return;
+		case "update":
+			await e.update(t.table, t.id, t.values);
+			return;
+		case "undelete":
+			await e.update(t.table, t.id, {
+				deletedAt: null,
+				deletedBy: null
+			});
+			return;
+		case "insert":
+			await e.insert(t.table, t.row);
+			return;
+	}
+}, c = async (e, t) => {
+	for (let n of t) await s(e, n);
+};
+//#endregion
+export { r as UndoBoundaryError, a as UndoStack, s as applyInverse, c as applyInverses, o as forwardChangeFromCdc, t as invertChange, i as isSafeToApply, n as synthesizeInverse };

package/dist/undoBuiltins.js

@@ -0,0 +1,69 @@
+import { applyInverses as e, isSafeToApply as t, synthesizeInverse as n } from "./undo.js";
+import { eq as r } from "@voltro/database";
+import { UndoConflict as i, UndoForbidden as a, UndoNotFound as o } from "@voltro/protocol";
+//#region src/undoBuiltins.ts
+var s = (e) => e.request?.subject?.id ?? null, c = (e) => e === !0 || e === 1, l = async (e, t, n) => (await e.query({
+	table: t,
+	predicate: r("id", n),
+	order: []
+}))[0] ?? null, u = (e) => {
+	try {
+		let t = JSON.parse(String(e ?? "[]"));
+		return Array.isArray(t) ? t : [];
+	} catch {
+		return [];
+	}
+}, d = (e) => e.id ?? e.next?.id ?? e.prev?.id, f = async (e, t) => {
+	let n = s(t);
+	return [...await t.store.query({
+		table: "_voltro_undo_log",
+		predicate: r("subjectId", n),
+		order: []
+	})].sort((e, t) => String(t.id).localeCompare(String(e.id))).slice(0, e.limit ?? 50).map((e) => ({
+		id: String(e.id),
+		tag: String(e.tag ?? ""),
+		label: e.label ?? null,
+		undone: c(e.undone),
+		crossesAction: c(e.crossesAction),
+		createdAt: String(e.createdAt ?? "")
+	}));
+}, p = async (e, t) => {
+	let n = await l(t.store, "_voltro_undo_log", e.invocationId);
+	if (!n) throw new o({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== s(t)) throw new a({ invocationId: e.invocationId });
+	return n;
+}, m = async (r, a) => {
+	let o = await p(r, a);
+	if (c(o.undone)) return { ok: !0 };
+	if (c(o.crossesAction)) throw new i({
+		invocationId: r.invocationId,
+		reason: "action"
+	});
+	let f = u(o.changes);
+	for (let e of f) {
+		let n = d(e);
+		if (n === void 0) continue;
+		let o = await l(a.store, e.table, n);
+		if (!t(o, e.next ?? null)) throw new i({
+			invocationId: r.invocationId,
+			reason: "conflict"
+		});
+	}
+	let m = {
+		invocationId: r.invocationId,
+		subject: s(a),
+		changes: f,
+		crossesAction: !1
+	};
+	return await e(a.store, n(m)), await a.store.update("_voltro_undo_log", r.invocationId, { undone: !0 }), { ok: !0 };
+}, h = async (e, t) => {
+	let n = await p(e, t);
+	if (!c(n.undone)) return { ok: !0 };
+	for (let e of u(n.changes)) {
+		let n = d(e);
+		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
+	}
+	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
+};
+//#endregion
+export { m as applyUndoInvocation, h as redoUndoInvocation, f as undoLogExecutor };