@voltro/runtime 0.86.0 → 0.87.0

package/dist/index.js

@@ -9,137 +9,148 @@ import { currentRawReads as f, isolateRawReadScope as p, rawSqlPreview as m, rec
 import { DEFAULT_CRDT_COMPACT_MAX_BYTES as _, DEFAULT_CRDT_MAX_DOCUMENT_BYTES as v, DEFAULT_CRDT_MAX_UPDATE_BYTES as y, DEFAULT_CRDT_REBASE_MAX_BYTES as b, crdtCompactMaxBytes as x, crdtMaxDocumentBytes as S, crdtMaxUpdateBytes as C, crdtMigrationsFor as w, crdtRebaseMaxBytes as T, describeCrdtState as E, setCrdtAdmission as D, setCrdtBackend as O, setCrdtCompactMaxBytes as k } from "./crdtMerge.js";
 import { resolveDependentTables as A } from "./dependencyGraph.js";
 import { recordCoalesced as j, recordOverrun as M, recordOversized as N, recordStalled as P, resetSubscriptionSocketMetrics as F, setBufferedBytes as I, subscriptionSocketMetricSamples as L, subscriptionSocketMetricsSnapshot as R } from "./subscriptionSocketMetrics.js";
-import { counter as z, eventMetricTagCacheSizeForTests as B, exponentialBoundaries as V, gauge as H, histogramMetric as U, linearBoundaries as W, recordEventDelivered as G, recordEventDropped as K, recordEventPublished as q, recordEventSubscribers as J, recordExternalMissed as Y, recordExternalTrigger as X, recordSample as Z, recordScheduleQueueRecovery as Q, recordScheduleQueueWait as $, recordScheduleQueued as ee, recordScheduleRun as te, recordSubscriptionActive as ne, recordSubscriptionDelivery as re, recordWorkflowRun as ie, resetEventMetricTagCacheForTests as ae, snapshotMetrics as oe, snapshotMetricsSync as se } from "./metrics.js";
-import { classifyRead as ce } from "./readClassification.js";
-import { enterReadRecording as le, noteRead as ue, readRecordingActive as de, recordReads as fe, recordingStore as pe, restrictingReads as me, restrictingReadsEffect as he, setSourceGapSink as ge, sourceGapReport as _e } from "./readRecorder.js";
-import { DEFAULT_ROW_FILTER_RETRY as ve, NO_ROW_FILTER as ye, RowFilterDeclarationViolated as be, RowFilterUnavailable as xe, applyRowFilter as Se, applyRowFilterToDescriptor as Ce, getRowFilter as we, makeDefaultRefilter as Te, noteRowFilterResolved as Ee, resetRowFilterResolvedArms as De, resolveRowFilterScope as Oe, resolveRowFilterScopeFor as ke, rowFilterMayNarrow as Ae, rowFilterRegistered as je, rowFilterResolvedArms as Me, setRowFilter as Ne } from "./rowFilter.js";
-import { forbiddenColumnsForSubject as Pe, serverOnlyColumnNames as Fe, stripColumnsFromRows as Ie, stripForbiddenForWire as Le, stripServerOnlyForWire as Re } from "./wireColumnStrip.js";
-import { powerOfTwoSelector as ze } from "./replicaSelection.js";
-import { replicaHealth as Be } from "./replicaHealth.js";
-import { buildSubjectKey as Ve, memoryRywPositionStore as He, redisRywPositionStore as Ue } from "./rywPositionStore.js";
-import { ReplicatedDataStore as We, currentRoutingContext as Ge, runWithRoutingContext as Ke, runWithRoutingContextEffect as qe } from "./replicatedDataStore.js";
-import { Dispatcher as Je, deliveredRowCount as Ye } from "./dispatcher.js";
-import { revalidatePath as Xe, revalidateTable as Ze, revalidateTag as Qe, setRevalidationPublisher as $e } from "./revalidation.js";
-import { DEFAULT_KEEP_ALIVE_MS as et, HEADERS_TIMEOUT_MARGIN_MS as tt, applyKeepAlive as nt, resolveKeepAlive as rt } from "./httpKeepAlive.js";
-import { _connectionStreamCount as it, _resetConnectionCredentialsForTest as at, applyConnectionCredential as ot, bindConnectionCredential as st, getConnectionCredential as ct, getCredentialExpiry as lt, interruptConnectionStreams as ut, mergeCookieHeader as dt, recordCredentialExpiry as ft, registerConnectionStream as pt, unbindConnection as mt } from "./connectionCredentials.js";
-import { RPC_CLIENT_ADDRESS_HEADER as ht, getRpcConnection as gt } from "./rpcConnections.js";
-import { DEFAULT_SOCKET_MAX_BUFFERED_BYTES as _t, DEFAULT_SOCKET_OVERRUN_AFTER_MS as vt, DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES as yt, DEFAULT_SOCKET_STALL_WARN_AFTER_MS as bt, makeSubscriptionOutbox as xt, pumpOutbox as St, reactiveSocketTunables as Ct, setReactiveSocketTunables as wt } from "./subscriptionOutbox.js";
-import { DEFAULT_RESUME_MAX_DELTAS as Tt, DEFAULT_RESUME_WINDOW_MS as Et, adoptDetached as Dt, answerResume as Ot, canonicalInputKey as kt, detachForResume as At, recordForResume as jt, resetDetachedForTest as Mt, resetResumeRingsForTest as Nt, resumeKeyOf as Pt, resumeTunables as Ft, setResumeTunables as It } from "./subscriptionResume.js";
-import { externalSpanFromTraceparent as Lt, formatTraceparent as Rt, newTraceId as zt, parseTraceparent as Bt } from "./traceparent.js";
-import { currentTraceContext as Vt, runWithTraceContext as Ht } from "./traceContext.js";
-import { readMaybeOne as Ut } from "./storeRead.js";
-import { CRDT_VERSIONS_TABLE as Wt, _voltroCrdtVersionsTable as Gt } from "./crdtVersionsTable.js";
-import { decryptField as Kt, deriveKey as qt, encryptField as Jt, getFieldCipher as Yt, makeAesCipher as Xt, makeFieldCipher as Zt, setFieldCipher as Qt } from "./fieldCipher.js";
-import { enableGraphObservation as $t, isObservingGraph as en, observeStore as tn, observedGraph as nn, recordTableAccess as rn, resetObservedGraph as an, runWithObservedProcedure as on } from "./observedGraph.js";
-import { DeleteBuilder as sn, NoRowFound as cn, OptimisticLockError as ln, SelectBuilder as un, UpdateBuilder as dn, makeFluentStore as fn, missingRowError as pn } from "./storeQuery.js";
-import { TRANSACTION_READ_CONFLICT_NAME as mn, TX_READ_VERSIONS_KEY as hn, TransactionReadConflict as gn, actingUserId as _n, applyDefined as vn, isTransactionReadConflict as yn, wrapStoreWithMixinBehaviour as bn } from "./storeMiddleware.js";
-import { DEFAULT_COMPRESSION_MIN_BYTES as xn, isCompressibleContentType as Sn, maybeCompress as Cn, mergeCompressionHeaders as wn, negotiateEncoding as Tn } from "./httpCompression.js";
-import { noteResumeVerdict as En, resetResumeCensus as Dn, resumeCensus as On } from "./resumeCensus.js";
-import { publishServerTracerLayer as kn, serverTracer as An, setServerTracer as jn, withServerTracer as Mn } from "./serverTracer.js";
-import { classifyRequestOrigin as Nn, isStateChangingMethod as Pn, makeOriginGuardExemption as Fn, normalizeOrigin as In, resolveOriginGuardConfig as Ln } from "./originGuard.js";
-import { BOOT_REFUSAL_NAME as Rn, bootRefusal as zn, isBootRefusal as Bn } from "./bootRefusal.js";
-import { NO_TRUSTED_PROXIES as Vn, ipToBytes as Hn, isTrustedProxy as Un, normalizeIp as Wn, resolveClientAddress as Gn, resolveRequestClientAddress as Kn, resolveRequestIsHttps as qn, resolveTrustedProxies as Jn } from "./trustedProxy.js";
-import { API_CSP as Yn, DEFAULT_HSTS as Xn, HTML_CSP as Zn, ORIGIN_NULLING_REFERRER_POLICIES as Qn, preservesSameOriginHeader as $n, resolveSecurityHeaders as er, securityHeadersFor as tr } from "./securityHeaders.js";
-import { UnverifiedWebhookRoute as nr, WEBHOOK_VERIFICATION_PROPERTY as rr, assertWebhookRoutesDeclareVerification as ir, webhookVerificationOf as ar } from "./webhookVerification.js";
-import { DEFAULT_MAX_RPC_BODY_BYTES as or, awaitServerListening as sr, bindComputedUntyped as cr, bindMutation as lr, bindStream as ur, bindSubscription as dr, bindSubscriptionUntyped as fr, defectMessage as pr, drainForShutdown as mr, isInfraError as hr, makeMutationOutputCodec as gr, onProcessShutdown as _r, resetComputedQueryCacheWarnings as vr, shutdownGraceMsFromEnv as yr, startRpcServer as br } from "./rpcServer.js";
-import { answerProbe as xr, probeFor as Sr, resolveHealth as Cr } from "./healthProbes.js";
-import { bindBootListener as wr } from "./bootListener.js";
-import { buildTracingLayer as Tr, describeOtelReasons as Er, otelImportFailure as Dr } from "./observability.js";
-import { makeBufferingSpanProcessor as Or } from "./traceSink.js";
-import { cachedBackend as kr, envSecretsBackend as Ar, httpSecretsBackend as jr, resetSecretsBackend as Mr, resolveSecret as Nr, resolveSecretSync as Pr, resolveSecretsBackend as Fr, setSecretsBackend as Ir } from "./secretsResolver.js";
-import { dataStoreIdempotencyStore as Lr } from "./idempotencyStore.js";
-import { dataStoreKvStore as Rr } from "./kvDataStore.js";
-import { makeAsyncKv as zr, noopKv as Br } from "./kvFacade.js";
-import { ACTORS_TABLE as Vr, API_KEYS_TABLE as Hr, dataStoreApiKeyStore as Ur, generateApiKeyToken as Wr, makeApiKeyService as Gr, makeApiKeyUsageFlusher as Kr, memoryApiKeyStore as qr, plantMissingApiKeyActors as Jr, sha256Hex as Yr } from "./apiKeys.js";
-import { TENANT_SELECTIONS_TABLE as Xr, clearTenantSelection as Zr, selectTenant as Qr, tenantSelectionId as $r, tenantSelectionStore as ei } from "./tenantSelection.js";
-import { DEVICES_TABLE as ti, dataStoreDeviceStore as ni, deviceTokenPrefixes as ri, makeDeviceService as ii, memoryDeviceStore as ai, sha256HexOf as oi } from "./devices.js";
-import { deviceManagementRoutes as si, frameworkDeviceStrategy as ci } from "./devicesWiring.js";
-import { apiKeyManagementRoutes as li, frameworkApiKeyStrategy as ui } from "./apiKeysWiring.js";
-import { SYSTEM_SUBJECT as di } from "./systemSubject.js";
-import { EffectStore as fi, insertIgnoreRowOutcomeEffect as pi, insertManyRowsEffect as mi, insertRowEffect as hi, makeEffectStoreLayer as gi, upsertRowEffect as _i, upsertRowOutcomeEffect as vi } from "./effectStore.js";
-import { WorkflowPayloadError as yi, WorkflowRateLimitedError as bi, WorkflowSingletonHeldError as xi, WorkflowStartNotExecuted as Si, makeLazyWorkflowFacade as Ci, makeTransactionalWorkflowFacade as wi, makeWorkflowFacade as Ti, makeWorkflowFacadeWithCallerContext as Ei, makeWorkflowHandlers as Di, makeWorkflowLayers as Oi, makeWorkflowRunHandle as ki, payloadPropertyNames as Ai } from "./workflowRuntime.js";
-import { _voltroWorkflowEventDeliveriesTable as ji, _voltroWorkflowEventsTable as Mi, defineEventTrigger as Ni, isWorkflowEventTriggerDefinition as Pi, makeEventsFacade as Fi, triggerWorkflow as Ii } from "./events.js";
-import { EventBus as Li } from "./eventBus.js";
-import { OutboxEventPublisher as Ri, makeEventPublisher as zi, publishEvent as Bi } from "./eventPublish.js";
-import { EVENT_CLIENT_QUEUE_SIZE as Vi, EVENT_LATEST_QUEUE_SIZE as Hi, bindEvent as Ui, makeBufferGapDetector as Wi } from "./bindEvent.js";
-import { InstanceMembership as Gi } from "./instanceMembership.js";
-import { DEFAULT_OUTBOX_CLAIM_LEASE_MS as Ki, OUTBOX_ATTEMPTS_TABLE as qi, OUTBOX_ATTEMPT_LOG_CAP as Ji, OUTBOX_TABLE as Yi, backoffMs as Xi, defineOutboxHandler as Zi, drainOutbox as Qi, makeOutboxFacade as $i, outboxAttemptsTable as ea, outboxTable as ta } from "./outbox.js";
-import { CONNECTIONS_TABLE as na, CONNECTION_GRANTS_TABLE as ra, ConnectionNotConnected as ia, DEFAULT_REFRESH_SKEW_MS as aa, GRANT_TTL_MS as oa, REFRESH_LEASE_MS as sa, _voltroConnectionGrantsTable as ca, _voltroConnectionsTable as la, assertConnectionCipherConfigured as ua, beginOAuthConnect as da, clearConnectionRefreshFlights as fa, completeOAuthConnect as pa, connectionCallbackPath as ma, connectionLabel as ha, defineConnection as ga, exchangeAuthorizationCode as _a, forgetCredential as va, listConnectionStates as ya, makeConnectionRegistry as ba, oauthCredentialValue as xa, projectConnectionState as Sa, refreshAccessToken as Ca, resolveConnection as wa, resolveRedirectUri as Ta, sanitizeRedirectTo as Ea, storeCredential as Da, sweepExpiredGrants as Oa } from "./connectionVault.js";
-import { getConnectionResolver as ka, makeConnectionResolver as Aa, makeConnectionsFacade as ja, resolveConnectionForSubject as Ma, setConnectionResolver as Na } from "./connectionsFacade.js";
-import { makeDisconnectConnectionExecutor as Pa, makeListConnectionsExecutor as Fa, makeStartConnectionExecutor as Ia, makeSubmitTokenExecutor as La } from "./connectionBuiltins.js";
-import { AccessDenied as Ra, REBAC_ADMIN_SCOPE as za, assertCan as Ba, can as Va, clearResourcePolicies as Ha, defineResourcePolicy as Ua, effectiveRelations as Wa, getResourcePolicy as Ga, listResourcePolicies as Ka, rebacPolicyGraph as qa, revokedIds as Ja, visibleRows as Ya } from "./rebac.js";
-import { currentRequestLoader as Xa, enterRequestLoader as Za, runWithRequestLoader as Qa } from "./requestLoader.js";
-import { getTupleSource as $a, installPolicyGuardResolver as eo, registerDefaultTupleSource as to, setTupleSource as no } from "./policyGuardResolver.js";
-import { makeDataLoader as ro } from "./dataloader.js";
-import { tracingHttpClientLayer as io } from "./httpClientTracing.js";
-import { SsrfBlockedError as ao, ssrfGuardHttpClientLayer as oo, ssrfReason as so } from "./httpClientSsrf.js";
-import { makeApiKeyUsageBuffer as co } from "./apiKeyUsage.js";
-import { VOLTRO_AUDIT_MIXIN_ID as lo, VOLTRO_EXPIRES_MIXIN_ID as uo, VOLTRO_LOCAL_FIRST_MIXIN_ID as fo, VOLTRO_SOFT_DELETE_MIXIN_ID as po, VOLTRO_TENANT_MIXIN_ID as mo, emptySchemaRegistry as ho, makeSchemaRegistry as go } from "./schemaRegistry.js";
-import { wrapStoreWithBootCodec as _o } from "./bootStoreCodec.js";
-import { crud as vo, redactColumns as yo } from "./crud.js";
-import { cacheScopeLeaks as bo, formatCacheScopeLeaks as xo, formatServerOnlyLeaks as So, schemaPropertyNames as Co, serverOnlyLeaks as wo } from "./serverOnlyAudit.js";
-import { formatUnresolvedSources as To, unresolvedSources as Eo } from "./sourceResolution.js";
-import { applyPluginRefRules as Do, collectPluginRefRules as Oo, collectReferenceSoftDeleteRules as ko, isSoftDelete as Ao, rulesFor as jo } from "./pluginRefRules.js";
-import { DEFAULT_STALE_AFTER_MS as Mo, REPLICA_OBSERVATIONS_TABLE as No, forgetReplicaObservations as Po, mergeFleetObservations as Fo, readReplicaObservations as Io, resetReplicaObservationWarnings as Lo, writeReplicaObservation as Ro } from "./replicaObservations.js";
-import { CircuitBreaker as zo, CircuitOpen as Bo } from "./circuitBreaker.js";
-import { clearSystemStoreHandle as Vo, getSystemStoreHandle as Ho, runAsSystem as Uo, setSystemStoreHandle as Wo } from "./runAsSystem.js";
-import { inspectWorkflow as Go } from "./inspectWorkflow.js";
-import { makeConnectionState as Ko } from "./connectionState.js";
-import { makeAuthMiddlewareLayers as qo, withRpcAuthMiddleware as Jo } from "./authMiddlewareLayer.js";
-import { SERVICE_TOKEN_PREFIX as Yo, apiBindingTokenEnv as Xo, apiBindingUrlEnv as Zo, assertServiceCallersConfig as Qo, isWellFormedServiceToken as $o, mintServiceToken as es, serviceCallerNextTokenEnv as ts, serviceCallerStrategy as ns, serviceCallerTokenEnv as rs, serviceEnvSegment as is } from "./serviceCredentials.js";
-import { UndeclaredTableAccess as as, guardUndeclaredTables as os } from "./declaredTablesGuard.js";
-import { localityAwareSelector as ss, resolveCurrentRegion as cs } from "./replicaLocality.js";
-import { memoryReplicationAdapter as ls } from "./dialectReplicationAdapter.js";
-import { DEFAULT_MAX_RUNTIME_MS as us, compileCron as ds, cronOccurrences as fs, defineSchedule as ps, isScheduleDefinition as ms, nextFiring as hs } from "./schedule.js";
-import { resolveTransactionSubject as gs } from "./transactionSubject.js";
-import { scheduleBackfillRequestsTable as _s } from "./scheduleBackfillRequests.js";
-import { cancelWakeup as vs, dueWakeups as ys, markWakeupFired as bs, nextWakeup as xs, pruneWakeups as Ss, registerWakeup as Cs, releaseWakeup as ws, tryClaimWakeup as Ts } from "./wakeRegistry.js";
-import { CLAIM_RETENTION_BUCKETS as Es, DEFAULT_CLAIM_BUCKET_MS as Ds, DEFAULT_EXTERNAL_RECONCILE_MS as Os, DEFAULT_EXTERNAL_TRIGGER_SKEW_MS as ks, DEFAULT_SCHEDULE_HEARTBEAT_MS as As, DORMANCY_WAKEUP_TENANT as js, EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS as Ms, SCHEDULE_SUBJECT as Ns, TERMINAL_RUN_STATUSES as Ps, claimGraceMs as Fs, makeAdvisoryLockCoordinator as Is, peerRunIsAlive as Ls, singleCoordinator as Rs, startScheduler as zs } from "./scheduler.js";
-import { MIN_EXTERNALIZABLE_INTERVAL_MS as Bs, cronForInterval as Vs, externalizationRefusal as Hs, externalizedTask as Us, externalizedTaskNames as Ws, registerExternalizedTask as Gs, unregisterExternalizedTask as Ks } from "./externalizedTasks.js";
-import { DEFAULT_MAX_IDLE_INTERVAL_MS as qs, inspectCoordinatedSchedule as Js, makeCoordinatedScheduler as Ys, nextDelay as Xs, readPollCeilingMs as Zs, scheduleCoordinated as Qs } from "./coordinatedSchedule.js";
-import { _voltroScheduleRunsTable as $s } from "./scheduleRunsTable.js";
-import { _voltroScheduleClaimsTable as ec } from "./scheduleClaimsTable.js";
-import { _voltroChangeClaimsTable as tc } from "./changeClaimsTable.js";
-import { _voltroTracesTable as nc } from "./traceSpansTable.js";
-import { _voltroUndoLogTable as rc } from "./undoLogTable.js";
-import { crdtCellStats as ic, listCrdtVersions as ac, migrateCrdtColumn as oc, prepareSealedCrdtRestore as sc, restoreCrdtVersion as cc, snapshotCrdt as lc } from "./crdtHistory.js";
-import { makeUndoCapture as uc, undoCaptureEnabled as dc, undoSurfaceEnabled as fc, wrapCaptureStore as pc } from "./undoCapture.js";
-import { evaluateTouchedRules as mc, makeRuleCapture as hc } from "./businessRules.js";
-import { UndoBoundaryError as gc, UndoStack as _c, applyInverse as vc, applyInverses as yc, forwardChangeFromCdc as bc, invertChange as xc, isSafeToApply as Sc, synthesizeInverse as Cc } from "./undo.js";
-import { applyUndoInvocation as wc, redoUndoInvocation as Tc, undoLogExecutor as Ec } from "./undoBuiltins.js";
-import { APPROVALS_TABLE as Dc, DEFAULT_APPROVAL_EXPIRY_MS as Oc, _voltroApprovalsTable as kc, approvalIntentKey as Ac, approvalNonce as jc, canonicalJson as Mc, clearApprovalGate as Nc, decideApproval as Pc, enforceApproval as Fc, getApprovalGate as Ic, installApprovalGate as Lc, makeApprovalGate as Rc, parseApprovalInterval as zc, pendingApprovalsFor as Bc, rehydrateGuards as Vc, scopeStringsOf as Hc, serializeGuards as Uc } from "./approvals.js";
-import { approvalsPendingExecutor as Wc, decideApprovalInvocation as Gc } from "./approvalBuiltins.js";
-import { workflowDomainEventsExecutor as Kc, workflowEventDeliveriesExecutor as qc, workflowRowVisibleTo as Jc, workflowRunEventsExecutor as Yc, workflowRunExecutor as Xc, workflowRunStepsExecutor as Zc, workflowRunsExecutor as Qc } from "./workflowReadBuiltins.js";
-import { TimelineRecorder as $c, getTimelineRecorder as el, recordTimelineEvent as tl, redactRow as nl, resolveTimelineMode as rl, reverseEventOverRows as il, setTimelineRecorderForTest as al } from "./timeline.js";
-import { applyDelta as ol, buildIvmState as sl, classifyShape as cl, groupKeyOf as ll, ivmValue as ul, materializeIvm as dl, resolveRescan as fl } from "./ivm.js";
-import { AggregateMaintainer as pl } from "./aggregateIvm.js";
-import { _voltroRebacTuplesTable as ml, buildRebacInterceptor as hl, buildRebacReadFilter as gl, loadResourceTuples as _l, loadSubjectTuples as vl } from "./rebacInterceptor.js";
-import { DEFAULT_LEVEL_RESYNC_MS as yl, DEFAULT_LEVEL_STUCK_MS as bl, MIN_LEVEL_RESYNC_MS as xl, ReactionRateLimiter as Sl, defineReaction as Cl, isLevelReaction as wl, isLevelWatch as Tl, reactionDurationMs as El, reactionRateBucketKey as Dl, runReaction as Ol } from "./reaction.js";
-import { ExpectationRegistry as kl, defineExpectation as Al, isExpectationDefinition as jl, useExpectation as Ml } from "./expectation.js";
-import { ExpectationEvaluator as Nl, attachExpectations as Pl } from "./expectationEvaluator.js";
-import { CostRegistry as Fl, defineCostBudget as Il, isCostBudgetDefinition as Ll, useCostBudget as Rl } from "./finops.js";
-import { CostAccountant as zl, attachFinops as Bl } from "./finopsAccountant.js";
-import { ExperimentRegistry as Vl, HOLDOUT_VARIANT as Hl, assignVariant as Ul, defineExperiment as Wl, hashUnitInterval as Gl, isExperimentDefinition as Kl, resultVariantNames as ql, useExperiment as Jl } from "./experiment.js";
-import { ExperimentEvaluator as Yl, attachExperiments as Xl } from "./experimentEvaluator.js";
-import { _voltroWakeupsTable as Zl } from "./wakeupsTable.js";
-import { runWakeLoop as Ql, wakeDueOnce as $l } from "./wakeOrchestrator.js";
-import { makeProcessAdapter as eu, nodeProcessSupervisor as tu } from "./wakeSupervisor.js";
-import { isIdleNow as nu, makeIdleGate as ru } from "./idleDetector.js";
-import { makeRouterActivity as iu, makeWakeGate as au, makeWakeProxyServer as ou } from "./wakeRouter.js";
-import { countRunningWorkflows as su, runOrchestratorTick as cu, runSingleNodeOrchestrator as lu } from "./singleNodeOrchestrator.js";
-import { defineSubscriber as uu } from "./subscriber.js";
-import { AnalyticsCapabilityNotSupported as du, AnalyticsError as fu, AnalyticsSink as pu, useAnalytics as mu } from "./analyticsSink.js";
-import { NOOP_ANALYTICS_PROVIDER as hu, composeAnalytics as gu, composeAnalyticsSinks as _u, noopAnalytics as vu, noopAnalyticsSpec as yu } from "./composeAnalytics.js";
-import { DEFAULT_ANALYTICS_MIRROR_TUNABLES as bu, attachAnalyticsMirror as xu } from "./analyticsMirror.js";
-import { AggregateError as Su, AggregateNotFound as Cu, AggregateRegistry as wu, AggregateStale as Tu, defineAggregate as Eu, isAggregateDefinition as Du, useAggregate as Ou } from "./aggregate.js";
-import { applySoftDeleteScope as ku, applyTenantScope as Au, isEmptyTenantScopedRead as ju, isOrglessUserSubject as Mu, makeQueryFinalizer as Nu } from "./tenantScope.js";
-import { defineExecutor as Pu } from "./defineExecutor.js";
-import { DEFAULT_MUTATION_REPLAY_ATTEMPTS as Fu, applyDeclaredRelations as Iu, makeActionRunner as Lu, makeMutationRunner as Ru, makeOneShotQueryRunner as zu, makeQueryDescriptorProducer as Bu, makeQueryReauthorizer as Vu, makeQuerySubscriber as Hu, makeWorkflowStartRunner as Uu, runProvidedEffect as Wu, runWithDeadlockRetry as Gu, withRowFilter as Ku, withScopedRequest as qu } from "./servePipeline.js";
-import { historyProvenance as Ju, lastWriteProvenance as Yu } from "./provenance.js";
-import { buildPreview as Xu, diffChange as Zu, previewInRollback as Qu } from "./preview.js";
-import { classifyConstraintViolation as $u, clearRetentions as ed, extractDbCause as td, isForeignKeyViolation as nd, isQueryTimeout as rd, listRetentionConflicts as id, listRetentions as ad, registerRetention as od, retentionTtlMsFromEnv as sd, sweepRetention as cd } from "@voltro/database";
-import { ConstraintViolation as ld, ServerOnlyColumnWrite as ud, StoreOperationFailed as dd, TableValidationFailed as fd, TenantRowNotFound as pd, TenantScopeViolation as md } from "@voltro/protocol";
+import { counter as z, eventMetricTagCacheSizeForTests as B, exponentialBoundaries as V, fieldDecryptSnapshot as H, gauge as U, histogramMetric as W, linearBoundaries as G, recordEventDelivered as K, recordEventDropped as q, recordEventPublished as J, recordEventSubscribers as Y, recordExternalMissed as X, recordExternalTrigger as Z, recordFieldDecrypt as Q, recordSample as $, recordScheduleQueueRecovery as ee, recordScheduleQueueWait as te, recordScheduleQueued as ne, recordScheduleRun as re, recordSubscriptionActive as ie, recordSubscriptionDelivery as ae, recordWorkflowRun as oe, resetEventMetricTagCacheForTests as se, resetFieldDecryptCountsForTests as ce, snapshotMetrics as le, snapshotMetricsSync as ue } from "./metrics.js";
+import { classifyRead as de } from "./readClassification.js";
+import { powerOfTwoSelector as fe } from "./replicaSelection.js";
+import { replicaHealth as pe } from "./replicaHealth.js";
+import { buildSubjectKey as me, memoryRywPositionStore as he, redisRywPositionStore as ge } from "./rywPositionStore.js";
+import { ReplicatedDataStore as _e, currentRoutingContext as ve, runWithRoutingContext as ye, runWithRoutingContextEffect as be } from "./replicatedDataStore.js";
+import { cachedComputedCall as xe, computedCacheKey as Se, computedQueryCacheCaptureInstalled as Ce, installComputedQueryCacheCapture as we, noteCacheVolatile as Te, noteDependency as Ee, queryCachePolicy as De, resetComputedQueryCacheCaptureForTests as Oe } from "./computedQueryCache.js";
+import { enterReadRecording as ke, noteRead as Ae, readRecordingActive as je, recordReads as Me, recordingStore as Ne, restrictingReads as Pe, restrictingReadsEffect as Fe, setSourceGapSink as Ie, sourceGapReport as Le } from "./readRecorder.js";
+import { DEFAULT_ROW_FILTER_RETRY as Re, NO_ROW_FILTER as ze, RowFilterDeclarationViolated as Be, RowFilterUnavailable as Ve, applyRowFilter as He, applyRowFilterToDescriptor as Ue, getRowFilter as We, makeDefaultRefilter as Ge, noteRowFilterResolved as Ke, resetRowFilterResolvedArms as qe, resolveRowFilterScope as Je, resolveRowFilterScopeFor as Ye, rowFilterMayNarrow as Xe, rowFilterRegistered as Ze, rowFilterResolvedArms as Qe, setRowFilter as $e } from "./rowFilter.js";
+import { forbiddenColumnsForSubject as et, serverOnlyColumnNames as tt, stripColumnsFromRows as nt, stripForbiddenForWire as rt, stripServerOnlyForWire as it } from "./wireColumnStrip.js";
+import { Dispatcher as at, deliveredRowCount as ot, snapshotEntryFor as st } from "./dispatcher.js";
+import { revalidatePath as ct, revalidateTable as lt, revalidateTag as ut, setRevalidationPublisher as dt } from "./revalidation.js";
+import { DEFAULT_KEEP_ALIVE_MS as ft, HEADERS_TIMEOUT_MARGIN_MS as pt, applyKeepAlive as mt, resolveKeepAlive as ht } from "./httpKeepAlive.js";
+import { _connectionStreamCount as gt, _resetConnectionCredentialsForTest as _t, applyConnectionCredential as vt, bindConnectionCredential as yt, getConnectionCredential as bt, getCredentialExpiry as xt, interruptConnectionStreams as St, mergeCookieHeader as Ct, recordCredentialExpiry as wt, registerConnectionStream as Tt, unbindConnection as Et } from "./connectionCredentials.js";
+import { RPC_CLIENT_ADDRESS_HEADER as Dt, getRpcConnection as Ot } from "./rpcConnections.js";
+import { DEFAULT_SOCKET_MAX_BUFFERED_BYTES as kt, DEFAULT_SOCKET_OVERRUN_AFTER_MS as At, DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES as jt, DEFAULT_SOCKET_STALL_WARN_AFTER_MS as Mt, makeSubscriptionOutbox as Nt, pumpOutbox as Pt, reactiveSocketTunables as Ft, setReactiveSocketTunables as It } from "./subscriptionOutbox.js";
+import { DEFAULT_RESUME_MAX_DELTAS as Lt, DEFAULT_RESUME_WINDOW_MS as Rt, adoptDetached as zt, answerResume as Bt, canonicalInputKey as Vt, detachForResume as Ht, recordForResume as Ut, resetDetachedForTest as Wt, resetResumeRingsForTest as Gt, resumeKeyOf as Kt, resumeTunables as qt, setResumeTunables as Jt } from "./subscriptionResume.js";
+import { externalSpanFromTraceparent as Yt, formatTraceparent as Xt, newTraceId as Zt, parseTraceparent as Qt } from "./traceparent.js";
+import { currentTraceContext as $t, runWithTraceContext as en } from "./traceContext.js";
+import { readMaybeOne as tn } from "./storeRead.js";
+import { CRDT_VERSIONS_TABLE as nn, _voltroCrdtVersionsTable as rn } from "./crdtVersionsTable.js";
+import { FieldKeyringConfigError as an, decryptField as on, deriveKey as sn, encryptField as cn, fieldKeyIdOf as ln, getFieldCipher as un, isFieldKeyring as dn, makeAesCipher as fn, makeFieldCipher as pn, makeFieldKeyring as mn, setFieldCipher as hn } from "./fieldCipher.js";
+import { enableGraphObservation as gn, isObservingGraph as _n, observeStore as vn, observedGraph as yn, recordTableAccess as bn, resetObservedGraph as xn, runWithObservedProcedure as Sn } from "./observedGraph.js";
+import { DeleteBuilder as Cn, NoRowFound as wn, OptimisticLockError as Tn, SelectBuilder as En, UpdateBuilder as Dn, makeFluentStore as On, missingRowError as kn } from "./storeQuery.js";
+import { TRANSACTION_READ_CONFLICT_NAME as An, TX_READ_VERSIONS_KEY as jn, TransactionReadConflict as Mn, actingUserId as Nn, applyDefined as Pn, isTransactionReadConflict as Fn, wrapStoreWithMixinBehaviour as In } from "./storeMiddleware.js";
+import { DEFAULT_COMPRESSION_MIN_BYTES as Ln, isCompressibleContentType as Rn, maybeCompress as zn, mergeCompressionHeaders as Bn, negotiateEncoding as Vn, negotiatedCompression as Hn } from "./httpCompression.js";
+import { noteResumeVerdict as Un, resetResumeCensus as Wn, resumeCensus as Gn } from "./resumeCensus.js";
+import { publishServerTracerLayer as Kn, serverTracer as qn, setServerTracer as Jn, withServerTracer as Yn } from "./serverTracer.js";
+import { classifyRequestOrigin as Xn, isStateChangingMethod as Zn, makeOriginGuardExemption as Qn, normalizeOrigin as $n, resolveOriginGuardConfig as er } from "./originGuard.js";
+import { BOOT_REFUSAL_NAME as tr, bootRefusal as nr, isBootRefusal as rr } from "./bootRefusal.js";
+import { NO_TRUSTED_PROXIES as ir, ipToBytes as ar, isTrustedProxy as or, normalizeIp as sr, resolveClientAddress as cr, resolveRequestClientAddress as lr, resolveRequestIsHttps as ur, resolveTrustedProxies as dr } from "./trustedProxy.js";
+import { API_CSP as fr, DEFAULT_HSTS as pr, HTML_CSP as mr, ORIGIN_NULLING_REFERRER_POLICIES as hr, preservesSameOriginHeader as gr, resolveSecurityHeaders as _r, securityHeadersFor as vr } from "./securityHeaders.js";
+import { UnverifiedWebhookRoute as yr, WEBHOOK_VERIFICATION_PROPERTY as br, assertWebhookRoutesDeclareVerification as xr, webhookVerificationOf as Sr } from "./webhookVerification.js";
+import { DEFAULT_MAX_RPC_BODY_BYTES as Cr, awaitServerListening as wr, bindComputedUntyped as Tr, bindMutation as Er, bindStream as Dr, bindSubscription as Or, bindSubscriptionUntyped as kr, defectMessage as Ar, drainForShutdown as jr, isInfraError as Mr, makeMutationCodec as Nr, onProcessShutdown as Pr, shutdownGraceMsFromEnv as Fr, startRpcServer as Ir } from "./rpcServer.js";
+import { answerProbe as Lr, probeFor as Rr, resolveHealth as zr } from "./healthProbes.js";
+import { engineClientsSnapshot as Br, parseEngineSdkHeader as Vr } from "./engineClients.js";
+import { bindBootListener as Hr } from "./bootListener.js";
+import { buildTracingLayer as Ur, describeOtelReasons as Wr, otelImportFailure as Gr } from "./observability.js";
+import { makeBufferingSpanProcessor as Kr } from "./traceSink.js";
+import { cachedBackend as qr, envSecretsBackend as Jr, httpSecretsBackend as Yr, resetSecretsBackend as Xr, resolveSecret as Zr, resolveSecretSync as Qr, resolveSecretsBackend as $r, setSecretsBackend as ei } from "./secretsResolver.js";
+import { FIELD_ENCRYPTION_ACTIVE_ENV as ti, FIELD_ENCRYPTION_KEYS_ENV as ni, FIELD_ENCRYPTION_KEY_ENV as ri, FIELD_ENCRYPTION_PREVIOUS_KEY_ENV as ii, FIELD_KEYRING_ENV_NAMES as ai, resolveFieldKeyring as oi } from "./fieldKeyring.js";
+import { FIELD_KEYS_TABLE as si, FIELD_KEY_HEARTBEAT_MS as ci, FIELD_KEY_HOLDERS_TABLE as li, FIELD_KEY_LEASE_MS as ui, FIELD_KEY_REPORTS_TABLE as di, FieldKeyringRefusal as fi, _voltroFieldKeyHoldersTable as pi, _voltroFieldKeyReportsTable as mi, _voltroFieldKeysTable as hi, activateFieldKeyNow as gi, checkFieldKeyring as _i, fieldKeyHolderId as vi, heartbeatFieldKeys as yi, readFieldKeyHolders as bi, readFieldKeyReports as xi, readFieldKeys as Si, recordFieldKeyReport as Ci, registerFieldKey as wi, releaseFieldKeyHolder as Ti, retireFieldKey as Ei, startFieldKeyHolder as Di, verifyFieldKeyring as Oi } from "./fieldKeyRegistry.js";
+import { declaredEncryptedColumns as ki, declaredRenames as Ai, fieldKeyStatus as ji } from "./fieldKeyScan.js";
+import { nullUnreadableSealedValues as Mi, openCell as Ni, rekeyCell as Pi, rekeySealedValues as Fi, verifySealedValues as Ii } from "./fieldKeyRekey.js";
+import { dataStoreIdempotencyStore as Li } from "./idempotencyStore.js";
+import { dataStoreKvStore as Ri } from "./kvDataStore.js";
+import { makeAsyncKv as zi, noopKv as Bi } from "./kvFacade.js";
+import { ACTORS_TABLE as Vi, API_KEYS_TABLE as Hi, dataStoreApiKeyStore as Ui, generateApiKeyToken as Wi, lockApiKeyById as Gi, makeApiKeyService as Ki, makeApiKeyUsageFlusher as qi, memoryApiKeyStore as Ji, plantMissingApiKeyActors as Yi, sha256Hex as Xi } from "./apiKeys.js";
+import { TENANT_SELECTIONS_TABLE as Zi, clearTenantSelection as Qi, selectTenant as $i, tenantSelectionId as ea, tenantSelectionStore as ta } from "./tenantSelection.js";
+import { DEVICES_TABLE as na, dataStoreDeviceStore as ra, deviceTokenPrefixes as ia, makeDeviceService as aa, memoryDeviceStore as oa, sha256HexOf as sa } from "./devices.js";
+import { deviceManagementRoutes as ca, frameworkDeviceStrategy as la } from "./devicesWiring.js";
+import { apiKeyManagementRoutes as ua, frameworkApiKeyStrategy as da } from "./apiKeysWiring.js";
+import { SYSTEM_SUBJECT as fa } from "./systemSubject.js";
+import { EffectStore as pa, insertIgnoreRowOutcomeEffect as ma, insertManyRowsEffect as ha, insertRowEffect as ga, makeEffectStoreLayer as _a, upsertRowEffect as va, upsertRowOutcomeEffect as ya } from "./effectStore.js";
+import { WorkflowPayloadError as ba, WorkflowRateLimitedError as xa, WorkflowSingletonHeldError as Sa, WorkflowStartNotExecuted as Ca, makeLazyWorkflowFacade as wa, makeTransactionalWorkflowFacade as Ta, makeWorkflowFacade as Ea, makeWorkflowFacadeWithCallerContext as Da, makeWorkflowHandlers as Oa, makeWorkflowLayers as ka, makeWorkflowRunHandle as Aa, payloadPropertyNames as ja } from "./workflowRuntime.js";
+import { _voltroWorkflowEventDeliveriesTable as Ma, _voltroWorkflowEventsTable as Na, defineEventTrigger as Pa, isWorkflowEventTriggerDefinition as Fa, makeEventsFacade as Ia, triggerWorkflow as La } from "./events.js";
+import { EventBus as Ra } from "./eventBus.js";
+import { OutboxEventPublisher as za, makeEventPublisher as Ba, publishEvent as Va } from "./eventPublish.js";
+import { EVENT_CLIENT_QUEUE_SIZE as Ha, EVENT_LATEST_QUEUE_SIZE as Ua, bindEvent as Wa, makeBufferGapDetector as Ga } from "./bindEvent.js";
+import { InstanceMembership as Ka } from "./instanceMembership.js";
+import { DEFAULT_OUTBOX_CLAIM_LEASE_MS as qa, OUTBOX_ATTEMPTS_TABLE as Ja, OUTBOX_ATTEMPT_LOG_CAP as Ya, OUTBOX_TABLE as Xa, backoffMs as Za, defineOutboxHandler as Qa, drainOutbox as $a, makeOutboxFacade as eo, outboxAttemptsTable as to, outboxTable as no } from "./outbox.js";
+import { CONNECTIONS_TABLE as ro, CONNECTION_GRANTS_TABLE as io, ConnectionNotConnected as ao, DEFAULT_REFRESH_SKEW_MS as oo, GRANT_TTL_MS as so, REFRESH_LEASE_MS as co, _voltroConnectionGrantsTable as lo, _voltroConnectionsTable as uo, assertConnectionCipherConfigured as fo, beginOAuthConnect as po, clearConnectionRefreshFlights as mo, completeOAuthConnect as ho, connectionCallbackPath as go, connectionLabel as _o, defineConnection as vo, exchangeAuthorizationCode as yo, forgetCredential as bo, listConnectionStates as xo, makeConnectionRegistry as So, oauthCredentialValue as Co, projectConnectionState as wo, refreshAccessToken as To, resolveConnection as Eo, resolveRedirectUri as Do, sanitizeRedirectTo as Oo, storeCredential as ko, sweepExpiredGrants as Ao } from "./connectionVault.js";
+import { getConnectionResolver as jo, makeConnectionResolver as Mo, makeConnectionsFacade as No, resolveConnectionForSubject as Po, setConnectionResolver as Fo } from "./connectionsFacade.js";
+import { makeDisconnectConnectionExecutor as Io, makeListConnectionsExecutor as Lo, makeStartConnectionExecutor as Ro, makeSubmitTokenExecutor as zo } from "./connectionBuiltins.js";
+import { AccessDenied as Bo, REBAC_ADMIN_SCOPE as Vo, assertCan as Ho, can as Uo, clearResourcePolicies as Wo, defineResourcePolicy as Go, effectiveRelations as Ko, getResourcePolicy as qo, listResourcePolicies as Jo, rebacPolicyGraph as Yo, revokedIds as Xo, visibleRows as Zo } from "./rebac.js";
+import { currentRequestLoader as Qo, enterRequestLoader as $o, runWithRequestLoader as es } from "./requestLoader.js";
+import { getTupleSource as ts, installPolicyGuardResolver as ns, registerDefaultTupleSource as rs, setTupleSource as is } from "./policyGuardResolver.js";
+import { makeDataLoader as as } from "./dataloader.js";
+import { tracingHttpClientLayer as os } from "./httpClientTracing.js";
+import { SsrfBlockedError as ss, ssrfGuardHttpClientLayer as cs, ssrfReason as ls } from "./httpClientSsrf.js";
+import { makeApiKeyUsageBuffer as us } from "./apiKeyUsage.js";
+import { VOLTRO_AUDIT_MIXIN_ID as ds, VOLTRO_EXPIRES_MIXIN_ID as fs, VOLTRO_LOCAL_FIRST_MIXIN_ID as ps, VOLTRO_SOFT_DELETE_MIXIN_ID as ms, VOLTRO_TENANT_MIXIN_ID as hs, emptySchemaRegistry as gs, makeSchemaRegistry as _s } from "./schemaRegistry.js";
+import { wrapStoreWithBootCodec as vs } from "./bootStoreCodec.js";
+import { crud as ys, redactColumns as bs } from "./crud.js";
+import { cacheScopeLeaks as xs, formatCacheScopeLeaks as Ss, formatServerOnlyLeaks as Cs, schemaPropertyNames as ws, serverOnlyLeaks as Ts } from "./serverOnlyAudit.js";
+import { formatUnresolvedSources as Es, unresolvedSources as Ds } from "./sourceResolution.js";
+import { applyPluginRefRules as Os, collectPluginRefRules as ks, collectReferenceSoftDeleteRules as As, isSoftDelete as js, rulesFor as Ms } from "./pluginRefRules.js";
+import { DEFAULT_STALE_AFTER_MS as Ns, REPLICA_OBSERVATIONS_TABLE as Ps, forgetReplicaObservations as Fs, mergeFleetObservations as Is, readReplicaObservations as Ls, resetReplicaObservationWarnings as Rs, writeReplicaObservation as zs } from "./replicaObservations.js";
+import { CircuitBreaker as Bs, CircuitOpen as Vs } from "./circuitBreaker.js";
+import { clearSystemStoreHandle as Hs, getSystemStoreHandle as Us, runAsSystem as Ws, setSystemStoreHandle as Gs } from "./runAsSystem.js";
+import { inspectWorkflow as Ks } from "./inspectWorkflow.js";
+import { makeConnectionState as qs } from "./connectionState.js";
+import { makeAuthMiddlewareLayers as Js, observeConnectionHeaders as Ys, withRpcAuthMiddleware as Xs } from "./authMiddlewareLayer.js";
+import { SERVICE_TOKEN_PREFIX as Zs, apiBindingTokenEnv as Qs, apiBindingUrlEnv as $s, assertServiceCallersConfig as ec, isWellFormedServiceToken as tc, mintServiceToken as nc, serviceCallerNextTokenEnv as rc, serviceCallerStrategy as ic, serviceCallerTokenEnv as ac, serviceEnvSegment as oc } from "./serviceCredentials.js";
+import { UndeclaredTableAccess as sc, guardUndeclaredTables as cc } from "./declaredTablesGuard.js";
+import { localityAwareSelector as lc, resolveCurrentRegion as uc } from "./replicaLocality.js";
+import { memoryReplicationAdapter as dc } from "./dialectReplicationAdapter.js";
+import { DEFAULT_MAX_RUNTIME_MS as fc, compileCron as pc, cronOccurrences as mc, defineSchedule as hc, isScheduleDefinition as gc, nextFiring as _c } from "./schedule.js";
+import { resolveTransactionSubject as vc } from "./transactionSubject.js";
+import { scheduleBackfillRequestsTable as yc } from "./scheduleBackfillRequests.js";
+import { cancelWakeup as bc, dueWakeups as xc, markWakeupFired as Sc, nextWakeup as Cc, pruneWakeups as wc, registerWakeup as Tc, releaseWakeup as Ec, tryClaimWakeup as Dc } from "./wakeRegistry.js";
+import { CLAIM_RETENTION_BUCKETS as Oc, DEFAULT_CLAIM_BUCKET_MS as kc, DEFAULT_EXTERNAL_RECONCILE_MS as Ac, DEFAULT_EXTERNAL_TRIGGER_SKEW_MS as jc, DEFAULT_SCHEDULE_HEARTBEAT_MS as Mc, DORMANCY_WAKEUP_TENANT as Nc, EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS as Pc, SCHEDULE_SUBJECT as Fc, TERMINAL_RUN_STATUSES as Ic, claimGraceMs as Lc, makeAdvisoryLockCoordinator as Rc, peerRunIsAlive as zc, singleCoordinator as Bc, startScheduler as Vc } from "./scheduler.js";
+import { MIN_EXTERNALIZABLE_INTERVAL_MS as Hc, cronForInterval as Uc, externalizationRefusal as Wc, externalizedTask as Gc, externalizedTaskNames as Kc, makeExternalizedTaskRegistry as qc, registerExternalizedTask as Jc } from "./externalizedTasks.js";
+import { DEFAULT_MAX_IDLE_INTERVAL_MS as Yc, inspectCoordinatedSchedule as Xc, makeCoordinatedScheduler as Zc, nextDelay as Qc, readPollCeilingMs as $c, scheduleCoordinated as el } from "./coordinatedSchedule.js";
+import { _voltroScheduleRunsTable as tl } from "./scheduleRunsTable.js";
+import { _voltroScheduleClaimsTable as nl } from "./scheduleClaimsTable.js";
+import { _voltroChangeClaimsTable as rl } from "./changeClaimsTable.js";
+import { _voltroTracesTable as il } from "./traceSpansTable.js";
+import { _voltroUndoLogTable as al } from "./undoLogTable.js";
+import { crdtCellStats as ol, listCrdtVersions as sl, migrateCrdtColumn as cl, prepareSealedCrdtRestore as ll, restoreCrdtVersion as ul, snapshotCrdt as dl } from "./crdtHistory.js";
+import { makeUndoCapture as fl, undoCaptureEnabled as pl, undoSurfaceEnabled as ml, wrapCaptureStore as hl } from "./undoCapture.js";
+import { evaluateTouchedRules as gl, makeRuleCapture as _l } from "./businessRules.js";
+import { UndoBoundaryError as vl, UndoStack as yl, applyInverse as bl, applyInverses as xl, forwardChangeFromCdc as Sl, invertChange as Cl, isSafeToApply as wl, synthesizeInverse as Tl } from "./undo.js";
+import { applyUndoInvocation as El, redoUndoInvocation as Dl, undoLogExecutor as Ol } from "./undoBuiltins.js";
+import { APPROVALS_TABLE as kl, DEFAULT_APPROVAL_EXPIRY_MS as Al, _voltroApprovalsTable as jl, approvalIntentKey as Ml, approvalNonce as Nl, canonicalJson as Pl, clearApprovalGate as Fl, decideApproval as Il, enforceApproval as Ll, getApprovalGate as Rl, installApprovalGate as zl, makeApprovalGate as Bl, parseApprovalInterval as Vl, pendingApprovalsFor as Hl, rehydrateGuards as Ul, scopeStringsOf as Wl, serializeGuards as Gl } from "./approvals.js";
+import { approvalsPendingExecutor as Kl, decideApprovalInvocation as ql } from "./approvalBuiltins.js";
+import { workflowDomainEventsExecutor as Jl, workflowEventDeliveriesExecutor as Yl, workflowRowVisibleTo as Xl, workflowRunEventsExecutor as Zl, workflowRunExecutor as Ql, workflowRunStepsExecutor as $l, workflowRunsExecutor as eu } from "./workflowReadBuiltins.js";
+import { TimelineRecorder as tu, getTimelineRecorder as nu, recordTimelineEvent as ru, redactRow as iu, resolveTimelineMode as au, reverseEventOverRows as ou, setTimelineRecorderForTest as su } from "./timeline.js";
+import { applyDelta as cu, buildIvmState as lu, classifyShape as uu, groupKeyOf as du, ivmValue as fu, materializeIvm as pu, resolveRescan as mu } from "./ivm.js";
+import { AggregateMaintainer as hu } from "./aggregateIvm.js";
+import { _voltroRebacTuplesTable as gu, buildRebacInterceptor as _u, buildRebacReadFilter as vu, loadResourceTuples as yu, loadSubjectTuples as bu } from "./rebacInterceptor.js";
+import { DEFAULT_LEVEL_RESYNC_MS as xu, DEFAULT_LEVEL_STUCK_MS as Su, MIN_LEVEL_RESYNC_MS as Cu, ReactionRateLimiter as wu, defineReaction as Tu, isLevelReaction as Eu, isLevelWatch as Du, reactionDurationMs as Ou, reactionRateBucketKey as ku, runReaction as Au } from "./reaction.js";
+import { ExpectationRegistry as ju, defineExpectation as Mu, isExpectationDefinition as Nu, useExpectation as Pu } from "./expectation.js";
+import { ExpectationEvaluator as Fu, attachExpectations as Iu } from "./expectationEvaluator.js";
+import { CostRegistry as Lu, defineCostBudget as Ru, isCostBudgetDefinition as zu, useCostBudget as Bu } from "./finops.js";
+import { CostAccountant as Vu, attachFinops as Hu } from "./finopsAccountant.js";
+import { ExperimentRegistry as Uu, HOLDOUT_VARIANT as Wu, assignVariant as Gu, defineExperiment as Ku, hashUnitInterval as qu, isExperimentDefinition as Ju, resultVariantNames as Yu, useExperiment as Xu } from "./experiment.js";
+import { ExperimentEvaluator as Zu, attachExperiments as Qu } from "./experimentEvaluator.js";
+import { _voltroWakeupsTable as $u } from "./wakeupsTable.js";
+import { runWakeLoop as ed, wakeDueOnce as td } from "./wakeOrchestrator.js";
+import { makeProcessAdapter as nd, nodeProcessSupervisor as rd } from "./wakeSupervisor.js";
+import { isIdleNow as id, makeIdleGate as ad } from "./idleDetector.js";
+import { makeRouterActivity as od, makeWakeGate as sd, makeWakeProxyServer as cd } from "./wakeRouter.js";
+import { countRunningWorkflows as ld, runOrchestratorTick as ud, runSingleNodeOrchestrator as dd } from "./singleNodeOrchestrator.js";
+import { defineSubscriber as fd } from "./subscriber.js";
+import { AnalyticsCapabilityNotSupported as pd, AnalyticsError as md, AnalyticsSink as hd, useAnalytics as gd } from "./analyticsSink.js";
+import { NOOP_ANALYTICS_PROVIDER as _d, composeAnalytics as vd, composeAnalyticsSinks as yd, noopAnalytics as bd, noopAnalyticsSpec as xd } from "./composeAnalytics.js";
+import { DEFAULT_ANALYTICS_MIRROR_TUNABLES as Sd, attachAnalyticsMirror as Cd } from "./analyticsMirror.js";
+import { AggregateError as wd, AggregateNotFound as Td, AggregateRegistry as Ed, AggregateStale as Dd, defineAggregate as Od, isAggregateDefinition as kd, useAggregate as Ad } from "./aggregate.js";
+import { applySoftDeleteScope as jd, applyTenantScope as Md, isEmptyTenantScopedRead as Nd, isOrglessUserSubject as Pd, makeQueryFinalizer as Fd } from "./tenantScope.js";
+import { defineExecutor as Id } from "./defineExecutor.js";
+import { apiRoleMetricLabel as Ld, makeApiRoleWorkloadMetrics as Rd, observeApiRoleEffect as zd } from "./apiRoleWorkloadMetrics.js";
+import { DEFAULT_MUTATION_REPLAY_ATTEMPTS as Bd, applyDeclaredRelations as Vd, makeActionRunner as Hd, makeMutationReplayAdmission as Ud, makeMutationRunner as Wd, makeOneShotQueryRunner as Gd, makeQueryDescriptorProducer as Kd, makeQueryReauthorizer as qd, makeQuerySubscriber as Jd, makeWorkflowStartRunner as Yd, runProvidedEffect as Xd, runWithDeadlockRetry as Zd, withRowFilter as Qd, withScopedRequest as $d } from "./servePipeline.js";
+import { decodeSnapshotValue as ef, encodeSnapshotValue as tf } from "./snapshotValueCodec.js";
+import { historyProvenance as nf, lastWriteProvenance as rf } from "./provenance.js";
+import { buildPreview as af, diffChange as of, previewInRollback as sf } from "./preview.js";
+import { API_ROLE_BUCKET_MS as cf, API_ROLE_WINDOW_MS as lf, assessApiRoleWorkloadWindow as uf } from "./apiRoleWorkloadHistory.js";
+import { API_ROLE_WORKLOAD_BUCKETS_TABLE as df, readApiRoleWorkloadWindow as ff, writeApiRoleWorkloadBucket as pf } from "./apiRoleWorkloadStorage.js";
+import { makeApiRoleBucketSampler as mf } from "./apiRoleBucketSampler.js";
+import { classifyConstraintViolation as hf, clearRetentions as gf, extractDbCause as _f, isForeignKeyViolation as vf, isQueryTimeout as yf, listRetentionConflicts as bf, listRetentions as xf, registerRetention as Sf, retentionTtlMsFromEnv as Cf, sweepRetention as wf } from "@voltro/database";
+import { ConstraintViolation as Tf, ServerOnlyColumnWrite as Ef, StoreOperationFailed as Df, TableValidationFailed as Of, TenantRowNotFound as kf, TenantScopeViolation as Af } from "@voltro/protocol";
 //#region src/index.ts
-var hd = "framework-runtime";
+var jf = "framework-runtime";
 //#endregion
-export { Vr as ACTORS_TABLE, Yn as API_CSP, Hr as API_KEYS_TABLE, Dc as APPROVALS_TABLE, Ra as AccessDenied, Su as AggregateError, pl as AggregateMaintainer, Cu as AggregateNotFound, wu as AggregateRegistry, Tu as AggregateStale, du as AnalyticsCapabilityNotSupported, fu as AnalyticsError, pu as AnalyticsSink, Rn as BOOT_REFUSAL_NAME, Es as CLAIM_RETENTION_BUCKETS, na as CONNECTIONS_TABLE, ra as CONNECTION_GRANTS_TABLE, Wt as CRDT_VERSIONS_TABLE, zo as CircuitBreaker, Bo as CircuitOpen, ia as ConnectionNotConnected, ld as ConstraintViolation, zl as CostAccountant, Fl as CostRegistry, bu as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Oc as DEFAULT_APPROVAL_EXPIRY_MS, Ds as DEFAULT_CLAIM_BUCKET_MS, xn as DEFAULT_COMPRESSION_MIN_BYTES, _ as DEFAULT_CRDT_COMPACT_MAX_BYTES, v as DEFAULT_CRDT_MAX_DOCUMENT_BYTES, y as DEFAULT_CRDT_MAX_UPDATE_BYTES, b as DEFAULT_CRDT_REBASE_MAX_BYTES, l as DEFAULT_DELIVERY_CONCURRENCY, Os as DEFAULT_EXTERNAL_RECONCILE_MS, ks as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, Xn as DEFAULT_HSTS, et as DEFAULT_KEEP_ALIVE_MS, yl as DEFAULT_LEVEL_RESYNC_MS, bl as DEFAULT_LEVEL_STUCK_MS, qs as DEFAULT_MAX_IDLE_INTERVAL_MS, or as DEFAULT_MAX_RPC_BODY_BYTES, us as DEFAULT_MAX_RUNTIME_MS, Fu as DEFAULT_MUTATION_REPLAY_ATTEMPTS, Ki as DEFAULT_OUTBOX_CLAIM_LEASE_MS, u as DEFAULT_RAW_READ_TRACKING_LIMIT, aa as DEFAULT_REFRESH_SKEW_MS, Tt as DEFAULT_RESUME_MAX_DELTAS, Et as DEFAULT_RESUME_WINDOW_MS, ve as DEFAULT_ROW_FILTER_RETRY, As as DEFAULT_SCHEDULE_HEARTBEAT_MS, _t as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, vt as DEFAULT_SOCKET_OVERRUN_AFTER_MS, yt as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, bt as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, Mo as DEFAULT_STALE_AFTER_MS, ti as DEVICES_TABLE, js as DORMANCY_WAKEUP_TENANT, sn as DeleteBuilder, Je as Dispatcher, Vi as EVENT_CLIENT_QUEUE_SIZE, Hi as EVENT_LATEST_QUEUE_SIZE, Ms as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, fi as EffectStore, Li as EventBus, Nl as ExpectationEvaluator, kl as ExpectationRegistry, Yl as ExperimentEvaluator, Vl as ExperimentRegistry, oa as GRANT_TTL_MS, tt as HEADERS_TIMEOUT_MARGIN_MS, Hl as HOLDOUT_VARIANT, Zn as HTML_CSP, o as InMemoryDataStore, t as IndexedMatcher, Gi as InstanceMembership, n as LinearScanMatcher, Bs as MIN_EXTERNALIZABLE_INTERVAL_MS, xl as MIN_LEVEL_RESYNC_MS, hu as NOOP_ANALYTICS_PROVIDER, ye as NO_ROW_FILTER, Vn as NO_TRUSTED_PROXIES, cn as NoRowFound, Qn as ORIGIN_NULLING_REFERRER_POLICIES, qi as OUTBOX_ATTEMPTS_TABLE, Ji as OUTBOX_ATTEMPT_LOG_CAP, Yi as OUTBOX_TABLE, ln as OptimisticLockError, Ri as OutboxEventPublisher, za as REBAC_ADMIN_SCOPE, sa as REFRESH_LEASE_MS, No as REPLICA_OBSERVATIONS_TABLE, ht as RPC_CLIENT_ADDRESS_HEADER, hd as RUNTIME_NAME, Sl as ReactionRateLimiter, We as ReplicatedDataStore, be as RowFilterDeclarationViolated, xe as RowFilterUnavailable, Ns as SCHEDULE_SUBJECT, Yo as SERVICE_TOKEN_PREFIX, di as SYSTEM_SUBJECT, un as SelectBuilder, ud as ServerOnlyColumnWrite, ao as SsrfBlockedError, dd as StoreOperationFailed, a as SubscriptionRegistry, Xr as TENANT_SELECTIONS_TABLE, Ps as TERMINAL_RUN_STATUSES, mn as TRANSACTION_READ_CONFLICT_NAME, hn as TX_READ_VERSIONS_KEY, fd as TableValidationFailed, pd as TenantRowNotFound, md as TenantScopeViolation, $c as TimelineRecorder, gn as TransactionReadConflict, as as UndeclaredTableAccess, gc as UndoBoundaryError, _c as UndoStack, nr as UnverifiedWebhookRoute, dn as UpdateBuilder, lo as VOLTRO_AUDIT_MIXIN_ID, uo as VOLTRO_EXPIRES_MIXIN_ID, fo as VOLTRO_LOCAL_FIRST_MIXIN_ID, po as VOLTRO_SOFT_DELETE_MIXIN_ID, mo as VOLTRO_TENANT_MIXIN_ID, rr as WEBHOOK_VERIFICATION_PROPERTY, yi as WorkflowPayloadError, bi as WorkflowRateLimitedError, xi as WorkflowSingletonHeldError, Si as WorkflowStartNotExecuted, it as _connectionStreamCount, at as _resetConnectionCredentialsForTest, kc as _voltroApprovalsTable, tc as _voltroChangeClaimsTable, ca as _voltroConnectionGrantsTable, la as _voltroConnectionsTable, Gt as _voltroCrdtVersionsTable, ml as _voltroRebacTuplesTable, ec as _voltroScheduleClaimsTable, $s as _voltroScheduleRunsTable, nc as _voltroTracesTable, rc as _voltroUndoLogTable, Zl as _voltroWakeupsTable, ji as _voltroWorkflowEventDeliveriesTable, Mi as _voltroWorkflowEventsTable, _n as actingUserId, Dt as adoptDetached, xr as answerProbe, Ot as answerResume, Xo as apiBindingTokenEnv, Zo as apiBindingUrlEnv, li as apiKeyManagementRoutes, s as appValidation, ot as applyConnectionCredential, Iu as applyDeclaredRelations, vn as applyDefined, ol as applyDelta, vc as applyInverse, yc as applyInverses, nt as applyKeepAlive, Do as applyPluginRefRules, Se as applyRowFilter, Ce as applyRowFilterToDescriptor, ku as applySoftDeleteScope, Au as applyTenantScope, wc as applyUndoInvocation, Ac as approvalIntentKey, jc as approvalNonce, Wc as approvalsPendingExecutor, Ba as assertCan, ua as assertConnectionCipherConfigured, Qo as assertServiceCallersConfig, ir as assertWebhookRoutesDeclareVerification, Ul as assignVariant, xu as attachAnalyticsMirror, Pl as attachExpectations, Xl as attachExperiments, Bl as attachFinops, sr as awaitServerListening, Xi as backoffMs, da as beginOAuthConnect, wr as bindBootListener, cr as bindComputedUntyped, st as bindConnectionCredential, Ui as bindEvent, lr as bindMutation, ur as bindStream, dr as bindSubscription, fr as bindSubscriptionUntyped, zn as bootRefusal, sl as buildIvmState, Xu as buildPreview, hl as buildRebacInterceptor, gl as buildRebacReadFilter, Ve as buildSubjectKey, Tr as buildTracingLayer, bo as cacheScopeLeaks, kr as cachedBackend, Va as can, vs as cancelWakeup, kt as canonicalInputKey, Mc as canonicalJson, r as canonicalize, Fs as claimGraceMs, $u as classifyConstraintViolation, ce as classifyRead, Nn as classifyRequestOrigin, cl as classifyShape, Nc as clearApprovalGate, fa as clearConnectionRefreshFlights, Ha as clearResourcePolicies, ed as clearRetentions, Vo as clearSystemStoreHandle, Zr as clearTenantSelection, Oo as collectPluginRefRules, ko as collectReferenceSoftDeleteRules, ds as compileCron, pa as completeOAuthConnect, gu as composeAnalytics, _u as composeAnalyticsSinks, ma as connectionCallbackPath, ha as connectionLabel, su as countRunningWorkflows, z as counter, ic as crdtCellStats, x as crdtCompactMaxBytes, S as crdtMaxDocumentBytes, C as crdtMaxUpdateBytes, w as crdtMigrationsFor, T as crdtRebaseMaxBytes, Vs as cronForInterval, fs as cronOccurrences, vo as crud, f as currentRawReads, Xa as currentRequestLoader, Ge as currentRoutingContext, Vt as currentTraceContext, Ur as dataStoreApiKeyStore, ni as dataStoreDeviceStore, Lr as dataStoreIdempotencyStore, Rr as dataStoreKvStore, Pc as decideApproval, Gc as decideApprovalInvocation, Kt as decryptField, pr as defectMessage, Eu as defineAggregate, ga as defineConnection, Il as defineCostBudget, Ni as defineEventTrigger, Pu as defineExecutor, Al as defineExpectation, Wl as defineExperiment, Zi as defineOutboxHandler, Cl as defineReaction, Ua as defineResourcePolicy, ps as defineSchedule, uu as defineSubscriber, Ye as deliveredRowCount, qt as deriveKey, E as describeCrdtState, Er as describeOtelReasons, At as detachForResume, si as deviceManagementRoutes, ri as deviceTokenPrefixes, Zu as diffChange, mr as drainForShutdown, Qi as drainOutbox, ys as dueWakeups, Wa as effectiveRelations, ho as emptySchemaRegistry, $t as enableGraphObservation, Jt as encryptField, Fc as enforceApproval, le as enterReadRecording, Za as enterRequestLoader, Ar as envSecretsBackend, mc as evaluateTouchedRules, B as eventMetricTagCacheSizeForTests, _a as exchangeAuthorizationCode, V as exponentialBoundaries, Lt as externalSpanFromTraceparent, Hs as externalizationRefusal, Us as externalizedTask, Ws as externalizedTaskNames, td as extractDbCause, i as fingerprintFor, Pe as forbiddenColumnsForSubject, va as forgetCredential, Po as forgetReplicaObservations, xo as formatCacheScopeLeaks, So as formatServerOnlyLeaks, Rt as formatTraceparent, To as formatUnresolvedSources, bc as forwardChangeFromCdc, ui as frameworkApiKeyStrategy, ci as frameworkDeviceStrategy, H as gauge, Wr as generateApiKeyToken, Ic as getApprovalGate, ct as getConnectionCredential, ka as getConnectionResolver, lt as getCredentialExpiry, Yt as getFieldCipher, Ga as getResourcePolicy, we as getRowFilter, gt as getRpcConnection, Ho as getSystemStoreHandle, el as getTimelineRecorder, $a as getTupleSource, ll as groupKeyOf, os as guardUndeclaredTables, Gl as hashUnitInterval, U as histogramMetric, Ju as historyProvenance, jr as httpSecretsBackend, pi as insertIgnoreRowOutcomeEffect, mi as insertManyRowsEffect, hi as insertRowEffect, Js as inspectCoordinatedSchedule, Go as inspectWorkflow, Lc as installApprovalGate, eo as installPolicyGuardResolver, ut as interruptConnectionStreams, xc as invertChange, Hn as ipToBytes, Du as isAggregateDefinition, Bn as isBootRefusal, Sn as isCompressibleContentType, Ll as isCostBudgetDefinition, ju as isEmptyTenantScopedRead, jl as isExpectationDefinition, Kl as isExperimentDefinition, nd as isForeignKeyViolation, nu as isIdleNow, hr as isInfraError, wl as isLevelReaction, Tl as isLevelWatch, en as isObservingGraph, Mu as isOrglessUserSubject, rd as isQueryTimeout, Sc as isSafeToApply, ms as isScheduleDefinition, Ao as isSoftDelete, Pn as isStateChangingMethod, yn as isTransactionReadConflict, Un as isTrustedProxy, $o as isWellFormedServiceToken, Pi as isWorkflowEventTriggerDefinition, p as isolateRawReadScope, ul as ivmValue, Yu as lastWriteProvenance, W as linearBoundaries, ya as listConnectionStates, ac as listCrdtVersions, Ka as listResourcePolicies, id as listRetentionConflicts, ad as listRetentions, _l as loadResourceTuples, vl as loadSubjectTuples, ss as localityAwareSelector, Lu as makeActionRunner, Is as makeAdvisoryLockCoordinator, Xt as makeAesCipher, Gr as makeApiKeyService, co as makeApiKeyUsageBuffer, Kr as makeApiKeyUsageFlusher, c as makeAppAccess, Rc as makeApprovalGate, zr as makeAsyncKv, qo as makeAuthMiddlewareLayers, Wi as makeBufferGapDetector, Or as makeBufferingSpanProcessor, ba as makeConnectionRegistry, Aa as makeConnectionResolver, Ko as makeConnectionState, ja as makeConnectionsFacade, Ys as makeCoordinatedScheduler, ro as makeDataLoader, Te as makeDefaultRefilter, ii as makeDeviceService, Pa as makeDisconnectConnectionExecutor, gi as makeEffectStoreLayer, zi as makeEventPublisher, Fi as makeEventsFacade, Zt as makeFieldCipher, fn as makeFluentStore, ru as makeIdleGate, Ci as makeLazyWorkflowFacade, Fa as makeListConnectionsExecutor, gr as makeMutationOutputCodec, Ru as makeMutationRunner, zu as makeOneShotQueryRunner, Fn as makeOriginGuardExemption, $i as makeOutboxFacade, eu as makeProcessAdapter, Bu as makeQueryDescriptorProducer, Nu as makeQueryFinalizer, Vu as makeQueryReauthorizer, Hu as makeQuerySubscriber, iu as makeRouterActivity, hc as makeRuleCapture, go as makeSchemaRegistry, Ia as makeStartConnectionExecutor, La as makeSubmitTokenExecutor, xt as makeSubscriptionOutbox, wi as makeTransactionalWorkflowFacade, uc as makeUndoCapture, au as makeWakeGate, ou as makeWakeProxyServer, Ti as makeWorkflowFacade, Ei as makeWorkflowFacadeWithCallerContext, Di as makeWorkflowHandlers, Oi as makeWorkflowLayers, ki as makeWorkflowRunHandle, Uu as makeWorkflowStartRunner, bs as markWakeupFired, dl as materializeIvm, Cn as maybeCompress, qr as memoryApiKeyStore, ai as memoryDeviceStore, ls as memoryReplicationAdapter, He as memoryRywPositionStore, wn as mergeCompressionHeaders, dt as mergeCookieHeader, Fo as mergeFleetObservations, oc as migrateCrdtColumn, es as mintServiceToken, pn as missingRowError, Tn as negotiateEncoding, zt as newTraceId, Xs as nextDelay, hs as nextFiring, xs as nextWakeup, tu as nodeProcessSupervisor, vu as noopAnalytics, yu as noopAnalyticsSpec, Br as noopKv, Wn as normalizeIp, In as normalizeOrigin, ue as noteRead, En as noteResumeVerdict, Ee as noteRowFilterResolved, xa as oauthCredentialValue, tn as observeStore, nn as observedGraph, _r as onProcessShutdown, Dr as otelImportFailure, ea as outboxAttemptsTable, ta as outboxTable, zc as parseApprovalInterval, Bt as parseTraceparent, Ai as payloadPropertyNames, Ls as peerRunIsAlive, Bc as pendingApprovalsFor, Jr as plantMissingApiKeyActors, ze as powerOfTwoSelector, sc as prepareSealedCrdtRestore, $n as preservesSameOriginHeader, Qu as previewInRollback, Sr as probeFor, Sa as projectConnectionState, Ss as pruneWakeups, Bi as publishEvent, kn as publishServerTracerLayer, St as pumpOutbox, m as rawSqlPreview, El as reactionDurationMs, Dl as reactionRateBucketKey, Ct as reactiveSocketTunables, Ut as readMaybeOne, Zs as readPollCeilingMs, de as readRecordingActive, Io as readReplicaObservations, qa as rebacPolicyGraph, j as recordCoalesced, ft as recordCredentialExpiry, G as recordEventDelivered, K as recordEventDropped, q as recordEventPublished, J as recordEventSubscribers, Y as recordExternalMissed, X as recordExternalTrigger, jt as recordForResume, M as recordOverrun, N as recordOversized, h as recordRawRead, fe as recordReads, Z as recordSample, Q as recordScheduleQueueRecovery, $ as recordScheduleQueueWait, ee as recordScheduleQueued, te as recordScheduleRun, P as recordStalled, ne as recordSubscriptionActive, re as recordSubscriptionDelivery, rn as recordTableAccess, tl as recordTimelineEvent, ie as recordWorkflowRun, pe as recordingStore, yo as redactColumns, nl as redactRow, Ue as redisRywPositionStore, Tc as redoUndoInvocation, Ca as refreshAccessToken, pt as registerConnectionStream, to as registerDefaultTupleSource, Gs as registerExternalizedTask, od as registerRetention, Cs as registerWakeup, Vc as rehydrateGuards, ws as releaseWakeup, Be as replicaHealth, vr as resetComputedQueryCacheWarnings, Mt as resetDetachedForTest, ae as resetEventMetricTagCacheForTests, an as resetObservedGraph, Lo as resetReplicaObservationWarnings, Dn as resetResumeCensus, Nt as resetResumeRingsForTest, De as resetRowFilterResolvedArms, Mr as resetSecretsBackend, F as resetSubscriptionSocketMetrics, Gn as resolveClientAddress, wa as resolveConnection, Ma as resolveConnectionForSubject, cs as resolveCurrentRegion, A as resolveDependentTables, Cr as resolveHealth, rt as resolveKeepAlive, Ln as resolveOriginGuardConfig, d as resolveReactiveConfig, Ta as resolveRedirectUri, Kn as resolveRequestClientAddress, qn as resolveRequestIsHttps, fl as resolveRescan, Oe as resolveRowFilterScope, ke as resolveRowFilterScopeFor, Nr as resolveSecret, Pr as resolveSecretSync, Fr as resolveSecretsBackend, er as resolveSecurityHeaders, rl as resolveTimelineMode, gs as resolveTransactionSubject, Jn as resolveTrustedProxies, cc as restoreCrdtVersion, me as restrictingReads, he as restrictingReadsEffect, ql as resultVariantNames, On as resumeCensus, Pt as resumeKeyOf, Ft as resumeTunables, sd as retentionTtlMsFromEnv, Xe as revalidatePath, Ze as revalidateTable, Qe as revalidateTag, il as reverseEventOverRows, Ja as revokedIds, Ae as rowFilterMayNarrow, je as rowFilterRegistered, Me as rowFilterResolvedArms, jo as rulesFor, Uo as runAsSystem, cu as runOrchestratorTick, Wu as runProvidedEffect, Ol as runReaction, lu as runSingleNodeOrchestrator, Ql as runWakeLoop, Gu as runWithDeadlockRetry, on as runWithObservedProcedure, g as runWithRawReadScope, Qa as runWithRequestLoader, Ke as runWithRoutingContext, qe as runWithRoutingContextEffect, Ht as runWithTraceContext, Ea as sanitizeRedirectTo, _s as scheduleBackfillRequestsTable, Qs as scheduleCoordinated, Co as schemaPropertyNames, Hc as scopeStringsOf, tr as securityHeadersFor, Qr as selectTenant, Uc as serializeGuards, Fe as serverOnlyColumnNames, wo as serverOnlyLeaks, An as serverTracer, ts as serviceCallerNextTokenEnv, ns as serviceCallerStrategy, rs as serviceCallerTokenEnv, is as serviceEnvSegment, I as setBufferedBytes, Na as setConnectionResolver, D as setCrdtAdmission, O as setCrdtBackend, k as setCrdtCompactMaxBytes, Qt as setFieldCipher, wt as setReactiveSocketTunables, It as setResumeTunables, $e as setRevalidationPublisher, Ne as setRowFilter, Ir as setSecretsBackend, jn as setServerTracer, ge as setSourceGapSink, Wo as setSystemStoreHandle, al as setTimelineRecorderForTest, no as setTupleSource, e as settleHandlerBody, Yr as sha256Hex, oi as sha256HexOf, yr as shutdownGraceMsFromEnv, Rs as singleCoordinator, lc as snapshotCrdt, oe as snapshotMetrics, se as snapshotMetricsSync, _e as sourceGapReport, oo as ssrfGuardHttpClientLayer, so as ssrfReason, br as startRpcServer, zs as startScheduler, Da as storeCredential, Ie as stripColumnsFromRows, Le as stripForbiddenForWire, Re as stripServerOnlyForWire, L as subscriptionSocketMetricSamples, R as subscriptionSocketMetricsSnapshot, Oa as sweepExpiredGrants, cd as sweepRetention, Cc as synthesizeInverse, $r as tenantSelectionId, ei as tenantSelectionStore, io as tracingHttpClientLayer, Ii as triggerWorkflow, Ts as tryClaimWakeup, mt as unbindConnection, dc as undoCaptureEnabled, Ec as undoLogExecutor, fc as undoSurfaceEnabled, Ks as unregisterExternalizedTask, Eo as unresolvedSources, _i as upsertRowEffect, vi as upsertRowOutcomeEffect, Ou as useAggregate, mu as useAnalytics, Rl as useCostBudget, Ml as useExpectation, Jl as useExperiment, Ya as visibleRows, $l as wakeDueOnce, ar as webhookVerificationOf, Ku as withRowFilter, Jo as withRpcAuthMiddleware, qu as withScopedRequest, Mn as withServerTracer, Kc as workflowDomainEventsExecutor, qc as workflowEventDeliveriesExecutor, Jc as workflowRowVisibleTo, Yc as workflowRunEventsExecutor, Xc as workflowRunExecutor, Zc as workflowRunStepsExecutor, Qc as workflowRunsExecutor, pc as wrapCaptureStore, _o as wrapStoreWithBootCodec, bn as wrapStoreWithMixinBehaviour, Ro as writeReplicaObservation };
+export { Vi as ACTORS_TABLE, fr as API_CSP, Hi as API_KEYS_TABLE, cf as API_ROLE_BUCKET_MS, lf as API_ROLE_WINDOW_MS, df as API_ROLE_WORKLOAD_BUCKETS_TABLE, kl as APPROVALS_TABLE, Bo as AccessDenied, wd as AggregateError, hu as AggregateMaintainer, Td as AggregateNotFound, Ed as AggregateRegistry, Dd as AggregateStale, pd as AnalyticsCapabilityNotSupported, md as AnalyticsError, hd as AnalyticsSink, tr as BOOT_REFUSAL_NAME, Oc as CLAIM_RETENTION_BUCKETS, ro as CONNECTIONS_TABLE, io as CONNECTION_GRANTS_TABLE, nn as CRDT_VERSIONS_TABLE, Bs as CircuitBreaker, Vs as CircuitOpen, ao as ConnectionNotConnected, Tf as ConstraintViolation, Vu as CostAccountant, Lu as CostRegistry, Sd as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Al as DEFAULT_APPROVAL_EXPIRY_MS, kc as DEFAULT_CLAIM_BUCKET_MS, Ln as DEFAULT_COMPRESSION_MIN_BYTES, _ as DEFAULT_CRDT_COMPACT_MAX_BYTES, v as DEFAULT_CRDT_MAX_DOCUMENT_BYTES, y as DEFAULT_CRDT_MAX_UPDATE_BYTES, b as DEFAULT_CRDT_REBASE_MAX_BYTES, l as DEFAULT_DELIVERY_CONCURRENCY, Ac as DEFAULT_EXTERNAL_RECONCILE_MS, jc as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, pr as DEFAULT_HSTS, ft as DEFAULT_KEEP_ALIVE_MS, xu as DEFAULT_LEVEL_RESYNC_MS, Su as DEFAULT_LEVEL_STUCK_MS, Yc as DEFAULT_MAX_IDLE_INTERVAL_MS, Cr as DEFAULT_MAX_RPC_BODY_BYTES, fc as DEFAULT_MAX_RUNTIME_MS, Bd as DEFAULT_MUTATION_REPLAY_ATTEMPTS, qa as DEFAULT_OUTBOX_CLAIM_LEASE_MS, u as DEFAULT_RAW_READ_TRACKING_LIMIT, oo as DEFAULT_REFRESH_SKEW_MS, Lt as DEFAULT_RESUME_MAX_DELTAS, Rt as DEFAULT_RESUME_WINDOW_MS, Re as DEFAULT_ROW_FILTER_RETRY, Mc as DEFAULT_SCHEDULE_HEARTBEAT_MS, kt as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, At as DEFAULT_SOCKET_OVERRUN_AFTER_MS, jt as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, Mt as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, Ns as DEFAULT_STALE_AFTER_MS, na as DEVICES_TABLE, Nc as DORMANCY_WAKEUP_TENANT, Cn as DeleteBuilder, at as Dispatcher, Ha as EVENT_CLIENT_QUEUE_SIZE, Ua as EVENT_LATEST_QUEUE_SIZE, Pc as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, pa as EffectStore, Ra as EventBus, Fu as ExpectationEvaluator, ju as ExpectationRegistry, Zu as ExperimentEvaluator, Uu as ExperimentRegistry, ti as FIELD_ENCRYPTION_ACTIVE_ENV, ni as FIELD_ENCRYPTION_KEYS_ENV, ri as FIELD_ENCRYPTION_KEY_ENV, ii as FIELD_ENCRYPTION_PREVIOUS_KEY_ENV, ai as FIELD_KEYRING_ENV_NAMES, si as FIELD_KEYS_TABLE, ci as FIELD_KEY_HEARTBEAT_MS, li as FIELD_KEY_HOLDERS_TABLE, ui as FIELD_KEY_LEASE_MS, di as FIELD_KEY_REPORTS_TABLE, an as FieldKeyringConfigError, fi as FieldKeyringRefusal, so as GRANT_TTL_MS, pt as HEADERS_TIMEOUT_MARGIN_MS, Wu as HOLDOUT_VARIANT, mr as HTML_CSP, o as InMemoryDataStore, t as IndexedMatcher, Ka as InstanceMembership, n as LinearScanMatcher, Hc as MIN_EXTERNALIZABLE_INTERVAL_MS, Cu as MIN_LEVEL_RESYNC_MS, _d as NOOP_ANALYTICS_PROVIDER, ze as NO_ROW_FILTER, ir as NO_TRUSTED_PROXIES, wn as NoRowFound, hr as ORIGIN_NULLING_REFERRER_POLICIES, Ja as OUTBOX_ATTEMPTS_TABLE, Ya as OUTBOX_ATTEMPT_LOG_CAP, Xa as OUTBOX_TABLE, Tn as OptimisticLockError, za as OutboxEventPublisher, Vo as REBAC_ADMIN_SCOPE, co as REFRESH_LEASE_MS, Ps as REPLICA_OBSERVATIONS_TABLE, Dt as RPC_CLIENT_ADDRESS_HEADER, jf as RUNTIME_NAME, wu as ReactionRateLimiter, _e as ReplicatedDataStore, Be as RowFilterDeclarationViolated, Ve as RowFilterUnavailable, Fc as SCHEDULE_SUBJECT, Zs as SERVICE_TOKEN_PREFIX, fa as SYSTEM_SUBJECT, En as SelectBuilder, Ef as ServerOnlyColumnWrite, ss as SsrfBlockedError, Df as StoreOperationFailed, a as SubscriptionRegistry, Zi as TENANT_SELECTIONS_TABLE, Ic as TERMINAL_RUN_STATUSES, An as TRANSACTION_READ_CONFLICT_NAME, jn as TX_READ_VERSIONS_KEY, Of as TableValidationFailed, kf as TenantRowNotFound, Af as TenantScopeViolation, tu as TimelineRecorder, Mn as TransactionReadConflict, sc as UndeclaredTableAccess, vl as UndoBoundaryError, yl as UndoStack, yr as UnverifiedWebhookRoute, Dn as UpdateBuilder, ds as VOLTRO_AUDIT_MIXIN_ID, fs as VOLTRO_EXPIRES_MIXIN_ID, ps as VOLTRO_LOCAL_FIRST_MIXIN_ID, ms as VOLTRO_SOFT_DELETE_MIXIN_ID, hs as VOLTRO_TENANT_MIXIN_ID, br as WEBHOOK_VERIFICATION_PROPERTY, ba as WorkflowPayloadError, xa as WorkflowRateLimitedError, Sa as WorkflowSingletonHeldError, Ca as WorkflowStartNotExecuted, gt as _connectionStreamCount, _t as _resetConnectionCredentialsForTest, jl as _voltroApprovalsTable, rl as _voltroChangeClaimsTable, lo as _voltroConnectionGrantsTable, uo as _voltroConnectionsTable, rn as _voltroCrdtVersionsTable, pi as _voltroFieldKeyHoldersTable, mi as _voltroFieldKeyReportsTable, hi as _voltroFieldKeysTable, gu as _voltroRebacTuplesTable, nl as _voltroScheduleClaimsTable, tl as _voltroScheduleRunsTable, il as _voltroTracesTable, al as _voltroUndoLogTable, $u as _voltroWakeupsTable, Ma as _voltroWorkflowEventDeliveriesTable, Na as _voltroWorkflowEventsTable, Nn as actingUserId, gi as activateFieldKeyNow, zt as adoptDetached, Lr as answerProbe, Bt as answerResume, Qs as apiBindingTokenEnv, $s as apiBindingUrlEnv, ua as apiKeyManagementRoutes, Ld as apiRoleMetricLabel, s as appValidation, vt as applyConnectionCredential, Vd as applyDeclaredRelations, Pn as applyDefined, cu as applyDelta, bl as applyInverse, xl as applyInverses, mt as applyKeepAlive, Os as applyPluginRefRules, He as applyRowFilter, Ue as applyRowFilterToDescriptor, jd as applySoftDeleteScope, Md as applyTenantScope, El as applyUndoInvocation, Ml as approvalIntentKey, Nl as approvalNonce, Kl as approvalsPendingExecutor, Ho as assertCan, fo as assertConnectionCipherConfigured, ec as assertServiceCallersConfig, xr as assertWebhookRoutesDeclareVerification, uf as assessApiRoleWorkloadWindow, Gu as assignVariant, Cd as attachAnalyticsMirror, Iu as attachExpectations, Qu as attachExperiments, Hu as attachFinops, wr as awaitServerListening, Za as backoffMs, po as beginOAuthConnect, Hr as bindBootListener, Tr as bindComputedUntyped, yt as bindConnectionCredential, Wa as bindEvent, Er as bindMutation, Dr as bindStream, Or as bindSubscription, kr as bindSubscriptionUntyped, nr as bootRefusal, lu as buildIvmState, af as buildPreview, _u as buildRebacInterceptor, vu as buildRebacReadFilter, me as buildSubjectKey, Ur as buildTracingLayer, xs as cacheScopeLeaks, qr as cachedBackend, xe as cachedComputedCall, Uo as can, bc as cancelWakeup, Vt as canonicalInputKey, Pl as canonicalJson, r as canonicalize, _i as checkFieldKeyring, Lc as claimGraceMs, hf as classifyConstraintViolation, de as classifyRead, Xn as classifyRequestOrigin, uu as classifyShape, Fl as clearApprovalGate, mo as clearConnectionRefreshFlights, Wo as clearResourcePolicies, gf as clearRetentions, Hs as clearSystemStoreHandle, Qi as clearTenantSelection, ks as collectPluginRefRules, As as collectReferenceSoftDeleteRules, pc as compileCron, ho as completeOAuthConnect, vd as composeAnalytics, yd as composeAnalyticsSinks, Se as computedCacheKey, Ce as computedQueryCacheCaptureInstalled, go as connectionCallbackPath, _o as connectionLabel, ld as countRunningWorkflows, z as counter, ol as crdtCellStats, x as crdtCompactMaxBytes, S as crdtMaxDocumentBytes, C as crdtMaxUpdateBytes, w as crdtMigrationsFor, T as crdtRebaseMaxBytes, Uc as cronForInterval, mc as cronOccurrences, ys as crud, f as currentRawReads, Qo as currentRequestLoader, ve as currentRoutingContext, $t as currentTraceContext, Ui as dataStoreApiKeyStore, ra as dataStoreDeviceStore, Li as dataStoreIdempotencyStore, Ri as dataStoreKvStore, Il as decideApproval, ql as decideApprovalInvocation, ki as declaredEncryptedColumns, Ai as declaredRenames, ef as decodeSnapshotValue, on as decryptField, Ar as defectMessage, Od as defineAggregate, vo as defineConnection, Ru as defineCostBudget, Pa as defineEventTrigger, Id as defineExecutor, Mu as defineExpectation, Ku as defineExperiment, Qa as defineOutboxHandler, Tu as defineReaction, Go as defineResourcePolicy, hc as defineSchedule, fd as defineSubscriber, ot as deliveredRowCount, sn as deriveKey, E as describeCrdtState, Wr as describeOtelReasons, Ht as detachForResume, ca as deviceManagementRoutes, ia as deviceTokenPrefixes, of as diffChange, jr as drainForShutdown, $a as drainOutbox, xc as dueWakeups, Ko as effectiveRelations, gs as emptySchemaRegistry, gn as enableGraphObservation, tf as encodeSnapshotValue, cn as encryptField, Ll as enforceApproval, Br as engineClientsSnapshot, ke as enterReadRecording, $o as enterRequestLoader, Jr as envSecretsBackend, gl as evaluateTouchedRules, B as eventMetricTagCacheSizeForTests, yo as exchangeAuthorizationCode, V as exponentialBoundaries, Yt as externalSpanFromTraceparent, Wc as externalizationRefusal, Gc as externalizedTask, Kc as externalizedTaskNames, _f as extractDbCause, H as fieldDecryptSnapshot, vi as fieldKeyHolderId, ln as fieldKeyIdOf, ji as fieldKeyStatus, i as fingerprintFor, et as forbiddenColumnsForSubject, bo as forgetCredential, Fs as forgetReplicaObservations, Ss as formatCacheScopeLeaks, Cs as formatServerOnlyLeaks, Xt as formatTraceparent, Es as formatUnresolvedSources, Sl as forwardChangeFromCdc, da as frameworkApiKeyStrategy, la as frameworkDeviceStrategy, U as gauge, Wi as generateApiKeyToken, Rl as getApprovalGate, bt as getConnectionCredential, jo as getConnectionResolver, xt as getCredentialExpiry, un as getFieldCipher, qo as getResourcePolicy, We as getRowFilter, Ot as getRpcConnection, Us as getSystemStoreHandle, nu as getTimelineRecorder, ts as getTupleSource, du as groupKeyOf, cc as guardUndeclaredTables, qu as hashUnitInterval, yi as heartbeatFieldKeys, W as histogramMetric, nf as historyProvenance, Yr as httpSecretsBackend, ma as insertIgnoreRowOutcomeEffect, ha as insertManyRowsEffect, ga as insertRowEffect, Xc as inspectCoordinatedSchedule, Ks as inspectWorkflow, zl as installApprovalGate, we as installComputedQueryCacheCapture, ns as installPolicyGuardResolver, St as interruptConnectionStreams, Cl as invertChange, ar as ipToBytes, kd as isAggregateDefinition, rr as isBootRefusal, Rn as isCompressibleContentType, zu as isCostBudgetDefinition, Nd as isEmptyTenantScopedRead, Nu as isExpectationDefinition, Ju as isExperimentDefinition, dn as isFieldKeyring, vf as isForeignKeyViolation, id as isIdleNow, Mr as isInfraError, Eu as isLevelReaction, Du as isLevelWatch, _n as isObservingGraph, Pd as isOrglessUserSubject, yf as isQueryTimeout, wl as isSafeToApply, gc as isScheduleDefinition, js as isSoftDelete, Zn as isStateChangingMethod, Fn as isTransactionReadConflict, or as isTrustedProxy, tc as isWellFormedServiceToken, Fa as isWorkflowEventTriggerDefinition, p as isolateRawReadScope, fu as ivmValue, rf as lastWriteProvenance, G as linearBoundaries, xo as listConnectionStates, sl as listCrdtVersions, Jo as listResourcePolicies, bf as listRetentionConflicts, xf as listRetentions, yu as loadResourceTuples, bu as loadSubjectTuples, lc as localityAwareSelector, Gi as lockApiKeyById, Hd as makeActionRunner, Rc as makeAdvisoryLockCoordinator, fn as makeAesCipher, Ki as makeApiKeyService, us as makeApiKeyUsageBuffer, qi as makeApiKeyUsageFlusher, mf as makeApiRoleBucketSampler, Rd as makeApiRoleWorkloadMetrics, c as makeAppAccess, Bl as makeApprovalGate, zi as makeAsyncKv, Js as makeAuthMiddlewareLayers, Ga as makeBufferGapDetector, Kr as makeBufferingSpanProcessor, So as makeConnectionRegistry, Mo as makeConnectionResolver, qs as makeConnectionState, No as makeConnectionsFacade, Zc as makeCoordinatedScheduler, as as makeDataLoader, Ge as makeDefaultRefilter, aa as makeDeviceService, Io as makeDisconnectConnectionExecutor, _a as makeEffectStoreLayer, Ba as makeEventPublisher, Ia as makeEventsFacade, qc as makeExternalizedTaskRegistry, pn as makeFieldCipher, mn as makeFieldKeyring, On as makeFluentStore, ad as makeIdleGate, wa as makeLazyWorkflowFacade, Lo as makeListConnectionsExecutor, Nr as makeMutationCodec, Ud as makeMutationReplayAdmission, Wd as makeMutationRunner, Gd as makeOneShotQueryRunner, Qn as makeOriginGuardExemption, eo as makeOutboxFacade, nd as makeProcessAdapter, Kd as makeQueryDescriptorProducer, Fd as makeQueryFinalizer, qd as makeQueryReauthorizer, Jd as makeQuerySubscriber, od as makeRouterActivity, _l as makeRuleCapture, _s as makeSchemaRegistry, Ro as makeStartConnectionExecutor, zo as makeSubmitTokenExecutor, Nt as makeSubscriptionOutbox, Ta as makeTransactionalWorkflowFacade, fl as makeUndoCapture, sd as makeWakeGate, cd as makeWakeProxyServer, Ea as makeWorkflowFacade, Da as makeWorkflowFacadeWithCallerContext, Oa as makeWorkflowHandlers, ka as makeWorkflowLayers, Aa as makeWorkflowRunHandle, Yd as makeWorkflowStartRunner, Sc as markWakeupFired, pu as materializeIvm, zn as maybeCompress, Ji as memoryApiKeyStore, oa as memoryDeviceStore, dc as memoryReplicationAdapter, he as memoryRywPositionStore, Bn as mergeCompressionHeaders, Ct as mergeCookieHeader, Is as mergeFleetObservations, cl as migrateCrdtColumn, nc as mintServiceToken, kn as missingRowError, Vn as negotiateEncoding, Hn as negotiatedCompression, Zt as newTraceId, Qc as nextDelay, _c as nextFiring, Cc as nextWakeup, rd as nodeProcessSupervisor, bd as noopAnalytics, xd as noopAnalyticsSpec, Bi as noopKv, sr as normalizeIp, $n as normalizeOrigin, Te as noteCacheVolatile, Ee as noteDependency, Ae as noteRead, Un as noteResumeVerdict, Ke as noteRowFilterResolved, Mi as nullUnreadableSealedValues, Co as oauthCredentialValue, zd as observeApiRoleEffect, Ys as observeConnectionHeaders, vn as observeStore, yn as observedGraph, Pr as onProcessShutdown, Ni as openCell, Gr as otelImportFailure, to as outboxAttemptsTable, no as outboxTable, Vl as parseApprovalInterval, Vr as parseEngineSdkHeader, Qt as parseTraceparent, ja as payloadPropertyNames, zc as peerRunIsAlive, Hl as pendingApprovalsFor, Yi as plantMissingApiKeyActors, fe as powerOfTwoSelector, ll as prepareSealedCrdtRestore, gr as preservesSameOriginHeader, sf as previewInRollback, Rr as probeFor, wo as projectConnectionState, wc as pruneWakeups, Va as publishEvent, Kn as publishServerTracerLayer, Pt as pumpOutbox, De as queryCachePolicy, m as rawSqlPreview, Ou as reactionDurationMs, ku as reactionRateBucketKey, Ft as reactiveSocketTunables, ff as readApiRoleWorkloadWindow, bi as readFieldKeyHolders, xi as readFieldKeyReports, Si as readFieldKeys, tn as readMaybeOne, $c as readPollCeilingMs, je as readRecordingActive, Ls as readReplicaObservations, Yo as rebacPolicyGraph, j as recordCoalesced, wt as recordCredentialExpiry, K as recordEventDelivered, q as recordEventDropped, J as recordEventPublished, Y as recordEventSubscribers, X as recordExternalMissed, Z as recordExternalTrigger, Q as recordFieldDecrypt, Ci as recordFieldKeyReport, Ut as recordForResume, M as recordOverrun, N as recordOversized, h as recordRawRead, Me as recordReads, $ as recordSample, ee as recordScheduleQueueRecovery, te as recordScheduleQueueWait, ne as recordScheduleQueued, re as recordScheduleRun, P as recordStalled, ie as recordSubscriptionActive, ae as recordSubscriptionDelivery, bn as recordTableAccess, ru as recordTimelineEvent, oe as recordWorkflowRun, Ne as recordingStore, bs as redactColumns, iu as redactRow, ge as redisRywPositionStore, Dl as redoUndoInvocation, To as refreshAccessToken, Tt as registerConnectionStream, rs as registerDefaultTupleSource, Jc as registerExternalizedTask, wi as registerFieldKey, Sf as registerRetention, Tc as registerWakeup, Ul as rehydrateGuards, Pi as rekeyCell, Fi as rekeySealedValues, Ti as releaseFieldKeyHolder, Ec as releaseWakeup, pe as replicaHealth, Oe as resetComputedQueryCacheCaptureForTests, Wt as resetDetachedForTest, se as resetEventMetricTagCacheForTests, ce as resetFieldDecryptCountsForTests, xn as resetObservedGraph, Rs as resetReplicaObservationWarnings, Wn as resetResumeCensus, Gt as resetResumeRingsForTest, qe as resetRowFilterResolvedArms, Xr as resetSecretsBackend, F as resetSubscriptionSocketMetrics, cr as resolveClientAddress, Eo as resolveConnection, Po as resolveConnectionForSubject, uc as resolveCurrentRegion, A as resolveDependentTables, oi as resolveFieldKeyring, zr as resolveHealth, ht as resolveKeepAlive, er as resolveOriginGuardConfig, d as resolveReactiveConfig, Do as resolveRedirectUri, lr as resolveRequestClientAddress, ur as resolveRequestIsHttps, mu as resolveRescan, Je as resolveRowFilterScope, Ye as resolveRowFilterScopeFor, Zr as resolveSecret, Qr as resolveSecretSync, $r as resolveSecretsBackend, _r as resolveSecurityHeaders, au as resolveTimelineMode, vc as resolveTransactionSubject, dr as resolveTrustedProxies, ul as restoreCrdtVersion, Pe as restrictingReads, Fe as restrictingReadsEffect, Yu as resultVariantNames, Gn as resumeCensus, Kt as resumeKeyOf, qt as resumeTunables, Cf as retentionTtlMsFromEnv, Ei as retireFieldKey, ct as revalidatePath, lt as revalidateTable, ut as revalidateTag, ou as reverseEventOverRows, Xo as revokedIds, Xe as rowFilterMayNarrow, Ze as rowFilterRegistered, Qe as rowFilterResolvedArms, Ms as rulesFor, Ws as runAsSystem, ud as runOrchestratorTick, Xd as runProvidedEffect, Au as runReaction, dd as runSingleNodeOrchestrator, ed as runWakeLoop, Zd as runWithDeadlockRetry, Sn as runWithObservedProcedure, g as runWithRawReadScope, es as runWithRequestLoader, ye as runWithRoutingContext, be as runWithRoutingContextEffect, en as runWithTraceContext, Oo as sanitizeRedirectTo, yc as scheduleBackfillRequestsTable, el as scheduleCoordinated, ws as schemaPropertyNames, Wl as scopeStringsOf, vr as securityHeadersFor, $i as selectTenant, Gl as serializeGuards, tt as serverOnlyColumnNames, Ts as serverOnlyLeaks, qn as serverTracer, rc as serviceCallerNextTokenEnv, ic as serviceCallerStrategy, ac as serviceCallerTokenEnv, oc as serviceEnvSegment, I as setBufferedBytes, Fo as setConnectionResolver, D as setCrdtAdmission, O as setCrdtBackend, k as setCrdtCompactMaxBytes, hn as setFieldCipher, It as setReactiveSocketTunables, Jt as setResumeTunables, dt as setRevalidationPublisher, $e as setRowFilter, ei as setSecretsBackend, Jn as setServerTracer, Ie as setSourceGapSink, Gs as setSystemStoreHandle, su as setTimelineRecorderForTest, is as setTupleSource, e as settleHandlerBody, Xi as sha256Hex, sa as sha256HexOf, Fr as shutdownGraceMsFromEnv, Bc as singleCoordinator, dl as snapshotCrdt, st as snapshotEntryFor, le as snapshotMetrics, ue as snapshotMetricsSync, Le as sourceGapReport, cs as ssrfGuardHttpClientLayer, ls as ssrfReason, Di as startFieldKeyHolder, Ir as startRpcServer, Vc as startScheduler, ko as storeCredential, nt as stripColumnsFromRows, rt as stripForbiddenForWire, it as stripServerOnlyForWire, L as subscriptionSocketMetricSamples, R as subscriptionSocketMetricsSnapshot, Ao as sweepExpiredGrants, wf as sweepRetention, Tl as synthesizeInverse, ea as tenantSelectionId, ta as tenantSelectionStore, os as tracingHttpClientLayer, La as triggerWorkflow, Dc as tryClaimWakeup, Et as unbindConnection, pl as undoCaptureEnabled, Ol as undoLogExecutor, ml as undoSurfaceEnabled, Ds as unresolvedSources, va as upsertRowEffect, ya as upsertRowOutcomeEffect, Ad as useAggregate, gd as useAnalytics, Bu as useCostBudget, Pu as useExpectation, Xu as useExperiment, Oi as verifyFieldKeyring, Ii as verifySealedValues, Zo as visibleRows, td as wakeDueOnce, Sr as webhookVerificationOf, Qd as withRowFilter, Xs as withRpcAuthMiddleware, $d as withScopedRequest, Yn as withServerTracer, Jl as workflowDomainEventsExecutor, Yl as workflowEventDeliveriesExecutor, Xl as workflowRowVisibleTo, Zl as workflowRunEventsExecutor, Ql as workflowRunExecutor, $l as workflowRunStepsExecutor, eu as workflowRunsExecutor, hl as wrapCaptureStore, vs as wrapStoreWithBootCodec, In as wrapStoreWithMixinBehaviour, pf as writeApiRoleWorkloadBucket, zs as writeReplicaObservation };

package/dist/kvFacade.js

@@ -1,25 +1,31 @@
 import { dataStoreKvStore as e } from "./kvDataStore.js";
-import { Layer as t, ManagedRuntime as n, Option as r } from "effect";
-import { LoggerLayer as i } from "@voltro/logger";
-import { Kv as a, KvStore as o, layerConnections as s, layerMemory as c, layerRedis as l } from "@voltro/kv";
+import { ConfigProvider as t, Layer as n, ManagedRuntime as r, Option as i } from "effect";
+import { LoggerLayer as a } from "@voltro/logger";
+import { Kv as o, KvStore as s, layerConnections as c, layerMemory as l, layerRedis as u } from "@voltro/kv";
+import { RedisConnections as d } from "@voltro/kv/connection";
 //#region src/kvFacade.ts
-var u = async ({ store: u, env: d = process.env }) => {
-	let f = (d.KV_BACKEND ?? "database").toLowerCase(), p = f === "redis" ? "redis" : f === "memory" ? "memory" : "database", m = p === "redis" ? l(d.KV_KEY_PREFIX ? { keyPrefix: d.KV_KEY_PREFIX } : {}).pipe(t.provide(s)) : p === "memory" ? c() : t.succeed(o, o.of(e(u))), h = n.make(a.layer.pipe(t.provide(m), t.provideMerge(i({})))), g = await h.runPromise(a);
+var f = async ({ store: f, env: p = process.env, backend: m, connectionName: h, keyPrefix: g, connections: _ }) => {
+	let v = (p.KV_BACKEND ?? m ?? "database").toLowerCase(), y = v === "redis" ? "redis" : v === "memory" ? "memory" : "database", b = y === "redis" ? u({
+		...h === void 0 ? {} : { connectionName: h },
+		...(p.KV_KEY_PREFIX ?? g) === void 0 ? {} : { keyPrefix: p.KV_KEY_PREFIX ?? g }
+	}).pipe(n.provide(_ === void 0 ? c : n.succeed(d, _))) : y === "memory" ? l() : n.succeed(s, s.of(e(f))), x = p === process.env ? n.empty : t.layer(t.fromEnvRecord({ ...p }, { preserveEmptyStrings: !0 })), S = r.make(o.layer.pipe(n.provide(b), n.provideMerge(a({})), n.provide(x))), C = await S.runPromise(o).catch(async (e) => {
+		throw await S.dispose(), e;
+	});
 	return {
 		kv: {
-			get: (e) => h.runPromise(g.get(e)).then((e) => r.getOrUndefined(e)),
-			getOrElse: (e, t) => h.runPromise(g.getOrElse(e, t)),
-			set: (e, t, n) => h.runPromise(g.set(e, t, n)),
-			delete: (e) => h.runPromise(g.delete(e)),
-			has: (e) => h.runPromise(g.has(e)),
-			list: (e) => h.runPromise(g.list(e)),
-			clear: () => h.runPromise(g.clear())
+			get: (e) => S.runPromise(C.get(e)).then((e) => i.getOrUndefined(e)),
+			getOrElse: (e, t) => S.runPromise(C.getOrElse(e, t)),
+			set: (e, t, n) => S.runPromise(C.set(e, t, n)),
+			delete: (e) => S.runPromise(C.delete(e)),
+			has: (e) => S.runPromise(C.has(e)),
+			list: (e) => S.runPromise(C.list(e)),
+			clear: () => S.runPromise(C.clear())
 		},
-		service: g,
-		backend: p,
-		dispose: () => h.dispose()
+		service: C,
+		backend: y,
+		dispose: () => S.dispose()
 	};
-}, d = {
+}, p = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -29,4 +35,4 @@ var u = async ({ store: u, env: d = process.env }) => {
 	clear: () => Promise.resolve()
 };
 //#endregion
-export { u as makeAsyncKv, d as noopKv };
+export { f as makeAsyncKv, p as noopKv };

package/dist/memoryQueryJoins.js

@@ -18,15 +18,13 @@ var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typ
 	return !0;
 }, o = (e, t) => {
 	if ("and" in e) {
-		for (let n of e.and) {
-			let e = o(n, t);
-			if (e) return e;
-		}
-		return;
+		let n = [];
+		for (let r = 0; r < e.and.length; r += 1) n.push(...o(e.and[r], t));
+		return n;
 	}
-	if (!("op" in e) || e.op !== "eq" || e.path !== void 0 || !n(e.value)) return;
+	if (!("op" in e) || e.op !== "eq" || e.path !== void 0 || !n(e.value)) return [];
 	let r = e.column, i = e.value.column, a = `${t}.`;
-	if (r.startsWith(a) !== i.startsWith(a)) return r.startsWith(a) ? [i, r] : [r, i];
+	return r.startsWith(a) === i.startsWith(a) ? [] : [r.startsWith(a) ? [i, r] : [r, i]];
 }, s = (n, s, c, l) => {
 	let u = n.alias ?? n.table, d = (n.sourceTable?.tableName === n.table ? n.sourceTable : t(n.table))?.fields ?? {}, f = new Set(Object.keys(d));
 	for (let e of s) for (let t of Object.keys(e)) f.add(t);
@@ -71,18 +69,20 @@ var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typ
 				}) : t[r] = i;
 			}
 			return t;
-		}, _ = u.map(m), y = l(s.on), b, x = _.length * v.length < 16, S = !1, C, w = o(s.on, s.alias), T;
-		if (w && h[w[0]]?.type !== "decimal" && h[w[1]]?.type !== "decimal" && _.every((e) => i(e[w[1]]))) {
-			T = /* @__PURE__ */ new Map();
-			for (let e of _) {
-				let t = e[w[1]];
-				if (t == null) continue;
-				let n = T.get(t);
-				n ? n.push(e) : T.set(t, [e]);
+		}, _ = u.map(m), y = l(s.on), b, x = _.length * v.length < 16, S = !1, C, w = o(s.on, s.alias), T, E;
+		for (let e of w) {
+			if (h[e[0]]?.type === "decimal" || h[e[1]]?.type === "decimal" || !_.every((t) => i(t[e[1]]))) continue;
+			let t = /* @__PURE__ */ new Map();
+			for (let n of _) {
+				let r = n[e[1]];
+				if (r == null) continue;
+				let i = t.get(r);
+				i ? i.push(n) : t.set(r, [n]);
 			}
+			(E === void 0 || t.size > E.size) && (T = e, E = t);
 		}
 		v = v.flatMap((t) => {
-			let n = w === void 0 ? void 0 : t[w[0]], o = T && i(n) ? n == null ? [] : T.get(n) ?? [] : _, c = x ? o.map((e) => ({
+			let n = T === void 0 ? void 0 : t[T[0]], o = E && i(n) ? n == null ? [] : E.get(n) ?? [] : _, c = x ? o.map((e) => ({
 				...t,
 				...e
 			})).filter((t) => e(s.on, t, y, h)) : [];