@voltro/runtime 0.86.0 → 0.87.0

package/dist/servePipeline.js

@@ -1,26 +1,28 @@
-import { enterReadRecording as e } from "./readRecorder.js";
-import { getRowFilter as t, makeDefaultRefilter as n, resolveRowFilterScope as r } from "./rowFilter.js";
-import { isComputedQuery as i } from "./computedQuery.js";
-import { TX_READ_VERSIONS_KEY as a, isTransactionReadConflict as o } from "./storeMiddleware.js";
-import { evaluateTouchedRules as s, makeRuleCapture as c } from "./businessRules.js";
-import { enforceApproval as l } from "./approvals.js";
-import { Cause as u, Effect as d, Exit as f, Option as p } from "effect";
-import { isTransientContention as m } from "@voltro/database";
-import { SubjectService as h, checkGuardsEffect as g, currentSubjectAuthority as _, recheckGuardsEffect as v } from "@voltro/protocol";
-import { createLogger as y } from "@voltro/logger";
+import { cachedComputedCall as e, computedCacheKey as t, currentQueryDependencies as n, enterQueryDependencies as r } from "./computedQueryCache.js";
+import { enterReadRecording as i } from "./readRecorder.js";
+import { getRowFilter as a, makeDefaultRefilter as o, resolveRowFilterScope as s } from "./rowFilter.js";
+import { isComputedQuery as c } from "./computedQuery.js";
+import { TX_READ_VERSIONS_KEY as l, isTransactionReadConflict as u } from "./storeMiddleware.js";
+import { evaluateTouchedRules as d, makeRuleCapture as f } from "./businessRules.js";
+import { enforceApproval as p } from "./approvals.js";
+import { observeApiRoleEffect as m } from "./apiRoleWorkloadMetrics.js";
+import { Cause as h, Effect as g, Exit as _, Option as v } from "effect";
+import { isTransientContention as y } from "@voltro/database";
+import { SubjectService as b, checkGuardsEffect as x, currentSubjectAuthority as S, recheckGuardsEffect as C } from "@voltro/protocol";
+import { createLogger as w } from "@voltro/logger";
 //#region src/servePipeline.ts
-var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
-	if (f.isSuccess(e)) return e.value;
-	let t = u.findErrorOption(e.cause);
-	throw p.isSome(t) ? t.value : u.squash(e.cause);
-}), x = (e) => b(e), S = (e, t) => e.pipe(d.provideService(h, t)), C = async (e, t, n, r) => {
-	let i = await d.runPromise(g(t, e.guards, n, {
+var T = (e, t) => g.runPromiseExit(e, t).then((e) => {
+	if (_.isSuccess(e)) return e.value;
+	let t = h.findErrorOption(e.cause);
+	throw v.isSome(t) ? t.value : h.squash(e.cause);
+}), E = (e) => T(e), D = (e, t) => e.pipe(g.provideService(b, t)), O = async (e, t, n, r) => {
+	let i = await g.runPromise(x(t, e.guards, n, {
 		defaultDeny: r === !0,
 		procedure: e.name
 	}));
 	if (i) throw i;
-}, w = async (e, t, n, r) => {
-	e.requiresApproval !== void 0 && await l({
+}, k = async (e, t, n, r) => {
+	e.requiresApproval !== void 0 && await p({
 		procedure: e.name,
 		kind: t,
 		policy: e.requiresApproval,
@@ -28,20 +30,20 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 		input: r,
 		traceId: n.traceId
 	});
-}, T = y({ scope: "voltro:rpc" }), E = async (e) => {
-	if (t() === void 0) return e;
-	let n = await x(r(e.subject, (e) => {
-		T.error("row filter failed to load", {}, e instanceof Error ? e : Error(String(e)));
+}, A = w({ scope: "voltro:rpc" }), j = async (e) => {
+	if (a() === void 0) return e;
+	let t = await E(s(e.subject, (e) => {
+		A.error("row filter failed to load", {}, e instanceof Error ? e : Error(String(e)));
 	}));
 	return {
 		...e,
-		rowFilter: n
+		rowFilter: t
 	};
-}, D = (e) => ({
+}, M = (e) => ({
 	...e.surface === void 0 ? {} : { surface: e.surface },
 	...e.publicApi === void 0 ? {} : { publicApi: e.publicApi },
 	...e.remoteAddr === void 0 ? {} : { remoteAddr: e.remoteAddr }
-}), O = (e) => {
+}), N = (e) => {
 	let t = e.descriptor.target;
 	if (t == null) return [];
 	let n = Array.isArray(t) ? t : [t], r = /* @__PURE__ */ new Set();
@@ -50,7 +52,7 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 		typeof t == "string" && t.length > 0 && r.add(t);
 	}
 	return [...r];
-}, k = async (e) => {
+}, P = async (e) => {
 	let { store: t, target: n, procedure: r, input: i, output: a } = e;
 	if (n == null) return;
 	let o = Array.isArray(n) ? n : [n];
@@ -67,15 +69,15 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 			await u.set(c.map((e) => String(e)));
 		}
 	}
-}, A = (e, t) => e === void 0 ? {} : { enqueueOutcome: async (n, r, i) => {
+}, F = (e, t) => e === void 0 ? {} : { enqueueOutcome: async (n, r, i) => {
 	let a = e(t);
 	if (a === void 0) throw TypeError("Invocation outcome outbox is unavailable");
 	return a.enqueue(n, r, i);
-} }, j = async (e) => {
+} }, I = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
-			let t = d.tryPromise({
+			let t = g.tryPromise({
 				try: () => e.runExecutor(),
 				catch: (e) => e
 			}), n = e.interceptor(t, {
@@ -87,10 +89,10 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 				...e.enqueueOutcome === void 0 ? {} : { enqueueOutcome: e.enqueueOutcome },
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId },
 				...e.target !== void 0 && e.target.length > 0 ? { target: e.target } : {},
-				...D(e.requestContext)
-			}), r = await d.runPromiseExit(n, e.requestContext.signal === void 0 ? void 0 : { signal: e.requestContext.signal });
-			if (f.isSuccess(r)) return r.value;
-			throw u.squash(r.cause);
+				...M(e.requestContext)
+			}), r = await g.runPromiseExit(n, e.requestContext.signal === void 0 ? void 0 : { signal: e.requestContext.signal });
+			if (_.isSuccess(r)) return r.value;
+			throw h.squash(r.cause);
 		}
 		return await e.runExecutor();
 	} catch (e) {
@@ -103,50 +105,55 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 			status: r
 		});
 	}
-}, M = (e) => m(e) || o(e), N = 3, P = (e) => new Promise((t) => setTimeout(t, e)), F = async (e, t) => {
-	let n = t?.delay ?? ((e) => P(e * 20 + Math.floor(Math.random() * 30))), r = t?.attempts ?? 3;
+}, L = (e) => y(e) || u(e), R = 3, z = (e) => new Promise((t) => setTimeout(t, e)), B = async (e, t) => {
+	let n = t?.delay ?? ((e) => z(e * 20 + Math.floor(Math.random() * 30))), r = t?.attempts ?? 3;
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= r || !M(e)) throw o(e) ? e.conflict : e;
+		if (t >= r || !L(e)) throw u(e) ? e.conflict : e;
 		await n(t);
 	}
-}, I = (e) => (t, n, r) => j({
+}, V = (e) => (t, n, r) => I({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
 	requestContext: r,
-	...A(e.outcomeOutbox, r),
-	target: O(t),
+	...F(e.outcomeOutbox, r),
+	target: N(t),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
 		let i = Date.now();
-		await C(t.descriptor, r.subject, n, e.defaultDeny), await w(t.descriptor, "mutation", r, n);
-		let o = await E(r), l = e.resolveStore === void 0 ? e.store : await e.resolveStore(o), u = [], f = [], p = await F(async () => l.transactional(async (p) => {
-			u.length = 0, f.length = 0, p[Symbol.for("@voltro/runtime:tx-fold-releases")] = f, p[a] = /* @__PURE__ */ new Map();
-			let m = e.undoCapture?.(p), h = m ? m.tx : p, g = c(h), _ = e.buildContext(o, g.tx, {
-				committedStore: l,
+		await q(t, "mutation", { defaultDeny: e.defaultDeny === !0 })(n, r);
+		let a = {
+			...r,
+			subject: S(r.subject)
+		};
+		await k(t.descriptor, "mutation", a, n);
+		let o = await j(a), s = e.resolveStore === void 0 ? e.store : await e.resolveStore(o), c = [], u = [], p = await B(async () => s.transactional(async (a) => {
+			c.length = 0, u.length = 0, a[Symbol.for("@voltro/runtime:tx-fold-releases")] = u, a[l] = /* @__PURE__ */ new Map();
+			let p = t.descriptor.undo?.capture === !1 ? void 0 : e.undoCapture?.(a), m = p ? p.tx : a, h = f(m), _ = e.buildContext(o, h.tx, {
+				committedStore: s,
 				afterCommit: (e) => {
-					u.push(e);
+					c.push(e);
 				}
-			}), v = t.executor(n, _), y = d.isEffect(v) ? await e.runEffect(S(v, r.subject), _.store) : await v;
-			if (await k({
+			}), v = e.measureSync ? e.measureSync(() => t.executor(n, _)) : t.executor(n, _), y = g.isEffect(v) ? await e.runEffect(D(v, o.subject), _.store) : await v;
+			if (await P({
 				store: _.store,
 				target: t.descriptor.target,
 				procedure: t.descriptor.name,
 				input: n,
 				output: y
-			}), m && await m.persist(_.store, {
+			}), p && await p.persist(_.store, {
 				tag: t.descriptor.name,
-				subject: r.subject,
+				subject: o.subject,
 				traceId: r.traceId
-			}), await s({
-				touched: g.drain(),
+			}), await d({
+				touched: h.drain(),
 				store: _.store,
-				subject: r.subject
+				subject: o.subject
 			}), e.beforeMutationCommit !== void 0) {
-				let a = O(t), s = e.beforeMutationCommit({
+				let r = N(t), a = e.beforeMutationCommit({
 					tag: t.descriptor.name,
 					kind: "mutation",
 					input: n,
@@ -158,122 +165,179 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 					startedAt: i,
 					durationMs: Math.max(0, Date.now() - i),
 					...o.spanId === void 0 ? {} : { spanId: o.spanId },
-					...a.length > 0 ? { target: a } : {},
-					...D(o)
+					...r.length > 0 ? { target: r } : {},
+					...M(o)
 				});
-				await e.runEffect(S(s, r.subject), _.store);
+				await e.runEffect(D(a, o.subject), _.store);
 			}
 			return y;
 		}), { ...e.replayAttempts === void 0 ? {} : { attempts: e.replayAttempts } });
-		if (f.length > 0) {
-			let t = e.buildContext(o, l, {
-				committedStore: l,
+		if (u.length > 0) {
+			let t = e.buildContext(o, s, {
+				committedStore: s,
 				afterCommit: () => {}
 			}).store;
-			for (let e of f.splice(0)) await t.update(e.table, e.pk, e.patch);
+			for (let e of u.splice(0)) await t.update(e.table, e.pk, e.patch);
 		}
-		for (let e of u) await e();
-		return p;
+		for (let e of c) await e();
+		return e.settleCacheInvalidations !== void 0 && await e.settleCacheInvalidations(), p;
 	}
-}), L = (e) => (t, n, r, i) => j({
+}), H = (e) => (t, n, r, i) => I({
 	name: t.name,
 	kind: "workflow",
 	input: n,
 	requestContext: r,
-	...A(e.outcomeOutbox, r),
+	...F(e.outcomeOutbox, r),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
-	runExecutor: async () => (await C(t, r.subject, n, e.defaultDeny), i())
-}), R = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, z = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, B = (e) => {
+	runExecutor: async () => (await O(t, r.subject, n, e.defaultDeny), i())
+}), U = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, W = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, G = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, V = (e, t, n) => (r) => () => d.runPromise(v(r, e.descriptor.guards, t, {
+}, K = (e, t, n) => (r) => () => g.runPromise(C(r, e.descriptor.guards, t, {
 	defaultDeny: n === !0,
 	procedure: e.descriptor.name
-})), H = (e, n) => e.rowFilter !== void 0 || t() === void 0 ? n(e) : d.promise(() => E(e)).pipe(d.flatMap((e) => {
-	let t = n(e);
-	return d.isEffect(t) ? t : d.succeed(t);
-})), U = (n) => (r, a) => (o) => {
-	if (o.rowFilter === void 0 && t() !== void 0) return H(o, (e) => U(n)(r, a)(e));
-	let s = n.buildContext(o), c = V(r, a, n.defaultDeny)(o.subject), l = async () => {
-		let e = await c();
+})), q = (e, t, n = {}) => async (r, i) => {
+	let a = i.subject;
+	n.bindReplayAuthority?.({
+		tag: e.descriptor.name,
+		kind: t,
+		input: r,
+		subject: a,
+		traceId: i.traceId,
+		...i.surface === void 0 ? {} : { surface: i.surface },
+		...i.publicApi === void 0 ? {} : { publicApi: i.publicApi },
+		...i.remoteAddr === void 0 ? {} : { remoteAddr: i.remoteAddr }
+	});
+	let o = await K(e, r, n.defaultDeny)(a)();
+	if (o) throw o;
+}, J = (e, t) => e.rowFilter !== void 0 || a() === void 0 ? t(e) : g.promise(() => j(e)).pipe(g.flatMap((e) => {
+	let n = t(e);
+	return g.isEffect(n) ? n : g.succeed(n);
+})), Y = (e, t) => X(e, t, /* @__PURE__ */ new Set()), X = (o, s, l) => (u, d) => (f) => {
+	if (f.rowFilter === void 0 && a() !== void 0) return J(f, (e) => X(o, s, l)(u, d)(e));
+	let p = s ?? (f.connection?.transport === "http" ? "rpc" : "subscriptions"), h = (e) => o.workloadMetrics ? o.workloadMetrics.measureSync(p, e) : e(), _ = (e, t) => {
+		let n = o.provideEffect(e, t);
+		return o.workloadMetrics ? m(n, o.workloadMetrics, p) : n;
+	}, v = o.buildContext(f), y = K(u, d, o.defaultDeny)(f.subject), b = async () => {
+		let e = await y();
 		if (e) throw e;
 		let t = {
-			...o,
-			subject: _(o.subject)
-		}, i = n.buildContext(await E(t)), s = r.executor(a, i), l = d.isEffect(s) ? await b(n.provideEffect(S(s, t.subject), i.store), o.signal === void 0 ? void 0 : { signal: o.signal }) : R(await Promise.resolve(s)), u = await c();
-		if (u) throw u;
-		return l;
-	}, u = (e) => {
-		let t = R(e);
-		if (z(t)) {
-			let e = n.finalize(t, o), i = B(r);
-			if (i.length === 0) return e;
-			let a = e.dependentTables ?? [];
+			...f,
+			subject: S(f.subject)
+		}, n = o.buildContext(await j(t)), r = h(() => u.executor(d, n)), i = g.isEffect(r) ? await T(_(D(r, t.subject), n.store), f.signal === void 0 ? void 0 : { signal: f.signal }) : U(await Promise.resolve(r)), a = await y();
+		if (a) throw a;
+		return i;
+	}, C = (e, t = n()) => {
+		let r = U(e);
+		if (W(r)) {
+			let e = o.finalize(r, f), t = G(u);
+			if (t.length === 0) return e;
+			let n = e.dependentTables ?? [];
 			return {
 				...e,
-				dependentTables: [.../* @__PURE__ */ new Set([...a, ...i])]
+				dependentTables: [.../* @__PURE__ */ new Set([...n, ...t])]
 			};
 		}
 		return {
 			__voltroComputed: !0,
-			value: t,
-			dependentTables: B(r),
-			tenantId: o.subject?.tenantId ?? null,
-			recompute: l
+			value: r,
+			dependentTables: [.../* @__PURE__ */ new Set([...G(u), ...t])],
+			tenantId: f.subject?.tenantId ?? null,
+			recompute: b
 		};
-	}, f = (e) => {
-		let t = u(e);
-		return i(t) ? d.tryPromise({
-			try: c,
+	}, w = (e, t) => {
+		let n = C(e, t);
+		return c(n) ? g.tryPromise({
+			try: y,
 			catch: (e) => e
-		}).pipe(d.flatMap((e) => e ? d.fail(e) : d.succeed(t))) : t;
-	}, p = (e) => {
-		let t = f(e);
-		return d.isEffect(t) ? t : d.succeed(t);
-	}, m = () => {
-		e(r.descriptor.name, B(r));
-		let t = r.executor(a, s);
-		return d.isEffect(t) ? n.provideEffect(S(t, o.subject), s.store).pipe(d.flatMap(p)) : t instanceof Promise ? d.promise(() => t).pipe(d.flatMap(p)) : f(t);
-	}, h = () => {
-		let e = r.descriptor.guards;
-		return (!e || e.length === 0) && n.defaultDeny !== !0 && o.subject.type !== "service" ? m() : g(o.subject, e, a, {
-			defaultDeny: n.defaultDeny === !0,
-			procedure: r.descriptor.name
-		}).pipe(d.flatMap((e) => {
-			if (e) return d.fail(e);
-			let t = m();
-			return d.isEffect(t) ? t : d.succeed(t);
+		}).pipe(g.flatMap((e) => e ? g.fail(e) : g.succeed(n))) : n;
+	}, E = (e, t) => {
+		let n = w(e, t);
+		return g.isEffect(n) ? n : g.succeed(n);
+	}, O = () => {
+		let n = o.computedCache, r = u.descriptor.cache;
+		if (n === void 0 || r === void 0 || l.has(u.descriptor.name)) return;
+		let i = n.policyFor(r);
+		if (i === void 0) return;
+		let a = f.subject, s = G(u), c = t({
+			name: u.descriptor.name,
+			codeIdentity: n.codeIdentity,
+			output: u.descriptor.output,
+			input: u.descriptor.input,
+			decodedInput: d,
+			scope: i.scope,
+			subject: a,
+			rowFilter: f.rowFilter,
+			declaredSources: s
+		});
+		if ("bypass" in c) c.bypass === "input-not-encodable" && n.notice(u.descriptor.name, c.bypass, `${u.descriptor.name}: \`cache:\` NOT applied — the input does not encode through its \`input\` schema, so it has no key.`);
+		else return e({
+			cache: n,
+			policy: i,
+			key: c.key,
+			name: u.descriptor.name,
+			sources: s,
+			output: u.descriptor.output,
+			subject: f.subject,
+			rowFilter: f.rowFilter,
+			ctx: v,
+			...f.signal === void 0 ? {} : { signal: f.signal },
+			execute: (e, t) => {
+				let n = h(() => u.executor(d, e));
+				return g.isEffect(n) ? T(_(D(n, t), v.store), f.signal === void 0 ? void 0 : { signal: f.signal }) : Promise.resolve(n);
+			},
+			onDescriptor: () => {
+				l.add(u.descriptor.name);
+			},
+			isDescriptor: (e) => W(U(e)),
+			unwrap: (e) => U(e)
+		}).pipe(g.flatMap(({ value: e, dependencies: t }) => E(e, t)));
+	}, k = () => {
+		i(u.descriptor.name, G(u)), r();
+		let e = O();
+		if (e !== void 0) return e;
+		let t = h(() => u.executor(d, v));
+		return g.isEffect(t) ? _(D(t, f.subject), v.store).pipe(g.flatMap(E)) : t instanceof Promise ? g.promise(() => t).pipe(g.flatMap(E)) : w(t);
+	}, A = () => {
+		let e = u.descriptor.guards;
+		return (!e || e.length === 0) && o.defaultDeny !== !0 && f.subject.type !== "service" ? k() : x(f.subject, e, d, {
+			defaultDeny: o.defaultDeny === !0,
+			procedure: u.descriptor.name
+		}).pipe(g.flatMap((e) => {
+			if (e) return g.fail(e);
+			let t = k();
+			return g.isEffect(t) ? t : g.succeed(t);
 		}));
 	};
-	if (!n.interceptor) return h();
-	let v = d.suspend(() => {
-		let e = h();
-		return d.isEffect(e) ? e : d.succeed(e);
+	if (!o.interceptor) return A();
+	let N = g.suspend(() => {
+		let e = A();
+		return g.isEffect(e) ? e : g.succeed(e);
 	});
-	return n.interceptor(v, {
-		tag: r.descriptor.name,
+	return o.interceptor(N, {
+		tag: u.descriptor.name,
 		kind: "query",
-		input: a,
-		subject: o.subject,
-		traceId: o.traceId,
-		...o.spanId === void 0 ? {} : { spanId: o.spanId },
-		...D(o)
+		input: d,
+		subject: f.subject,
+		traceId: f.traceId,
+		...f.spanId === void 0 ? {} : { spanId: f.spanId },
+		...M(f)
 	});
-}, W = (e) => async (t, n, r) => {
-	let a = await E(r), o = U(e)(t, n)(a), s = d.isEffect(o) ? await x(o) : o;
-	if (i(s)) return s.value;
-	let c = e.buildContext(a), l = await e.queryRows(s, a, c.store), u = await V(t, n, e.defaultDeny)(a.subject)();
+}, Z = (e) => async (t, n, r) => {
+	let i = await j(r), a = Y(e, "rpc")(t, n)(i), o = g.isEffect(a) ? await E(a) : a;
+	if (c(o)) return o.value;
+	let s = e.buildContext(i), l = await e.queryRows(o, i, s.store), u = await K(t, n, e.defaultDeny)(i.subject)();
 	if (u) throw u;
 	return l;
-}, G = (e) => (t, r, a, o) => {
-	let s = !1, c;
+}, Q = (e) => (t, n, r, i) => {
+	let a = !1, s;
 	return (async () => {
 		try {
-			let l = await E(a), u = U(e)(t, r)(l), f = d.isEffect(u) ? await x(u) : u, p = (e) => o(e), m = i(f) ? await e.subscribeComputed(f, p, l) : await e.subscribeDescriptor(f, p, l, V(t, r, e.defaultDeny)(l.subject), n(l.subject));
-			s ? m() : c = m;
+			let l = await j(r), u = Y(e, "subscriptions")(t, n)(l), d = g.isEffect(u) ? await E(u) : u, f = (e) => i(e), p = c(d) ? await e.subscribeComputed(d, f, l) : await e.subscribeDescriptor(d, f, l, K(t, n, e.defaultDeny)(l.subject), o(l.subject));
+			a ? p() : s = p;
 		} catch (e) {
-			o({
+			i({
 				_tag: "error",
 				error: e instanceof Error ? {
 					message: e.message,
@@ -282,24 +346,29 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 			});
 		}
 	})(), () => {
-		s = !0, c?.();
+		a = !0, s?.();
 	};
-}, K = (t) => (n, r, i) => j({
-	name: n.descriptor.name,
+}, $ = (e) => (t, n, r) => I({
+	name: t.descriptor.name,
 	kind: "action",
-	input: r,
-	requestContext: i,
-	...A(t.outcomeOutbox, i),
-	target: O(n),
-	...t.interceptor ? { interceptor: t.interceptor } : {},
-	...t.recordMetric ? { recordMetric: t.recordMetric } : {},
+	input: n,
+	requestContext: r,
+	...F(e.outcomeOutbox, r),
+	target: N(t),
+	...e.interceptor ? { interceptor: e.interceptor } : {},
+	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await C(n.descriptor, i.subject, r, t.defaultDeny), await w(n.descriptor, "action", i, r);
-		let a = t.buildContext(await E(i));
-		e(n.descriptor.name, B(n));
-		let o = n.executor(r, a);
-		return d.isEffect(o) ? t.runEffect(S(o, i.subject), a.store) : o;
+		await q(t, "action", { defaultDeny: e.defaultDeny === !0 })(n, r);
+		let a = {
+			...r,
+			subject: S(r.subject)
+		};
+		await k(t.descriptor, "action", a, n);
+		let o = e.buildContext(await j(a));
+		i(t.descriptor.name, G(t));
+		let s = e.measureSync ? e.measureSync(() => t.executor(n, o)) : t.executor(n, o), c = g.isEffect(s) ? await e.runEffect(D(s, a.subject), o.store) : await s;
+		return e.settleCacheInvalidations !== void 0 && await e.settleCacheInvalidations(), c;
 	}
 });
 //#endregion
-export { N as DEFAULT_MUTATION_REPLAY_ATTEMPTS, k as applyDeclaredRelations, K as makeActionRunner, I as makeMutationRunner, W as makeOneShotQueryRunner, U as makeQueryDescriptorProducer, V as makeQueryReauthorizer, G as makeQuerySubscriber, L as makeWorkflowStartRunner, x as runProvidedEffect, F as runWithDeadlockRetry, E as withRowFilter, H as withScopedRequest };
+export { R as DEFAULT_MUTATION_REPLAY_ATTEMPTS, P as applyDeclaredRelations, $ as makeActionRunner, q as makeMutationReplayAdmission, V as makeMutationRunner, Z as makeOneShotQueryRunner, Y as makeQueryDescriptorProducer, K as makeQueryReauthorizer, Q as makeQuerySubscriber, H as makeWorkflowStartRunner, E as runProvidedEffect, B as runWithDeadlockRetry, j as withRowFilter, J as withScopedRequest };

package/dist/setReadScopes.js

@@ -0,0 +1,28 @@
+//#region src/setReadScopes.ts
+var e = [
+	"crossTenant",
+	"includeDeleted",
+	"includeExpired"
+], t = (t, n) => {
+	let r = (t, i) => {
+		let a = t;
+		for (let t of e) i?.[t] === !0 && a[t] !== !0 && (a = {
+			...a,
+			[t]: !0
+		});
+		let o = a.setOp;
+		if (o === void 0) return n(a);
+		if (o.queries.length < 2) throw Error("A set operation requires at least two inputs");
+		let s = o.queries.map((e) => r(e, a));
+		return s.every((e, t) => e === o.queries[t]) ? a : {
+			...a,
+			setOp: {
+				...o,
+				queries: s
+			}
+		};
+	};
+	return r(t);
+};
+//#endregion
+export { t as mapSetReadScopes };

package/dist/snapshotValueCodec.js

@@ -0,0 +1,46 @@
+//#region src/snapshotValueCodec.ts
+var e = "\0", t = `${e}d`, n = `${e}n`, r = `${e}b`, i = `${e}o`, a = 1, o = (e) => {
+	if (typeof e != "object" || !e) return !1;
+	let t = Object.getPrototypeOf(e);
+	return t === Object.prototype || t === null;
+}, s = (a) => {
+	if (typeof a != "object" || !a) return typeof a == "bigint" ? { [n]: a.toString() } : a;
+	if (a instanceof Date) return { [t]: Number.isNaN(a.getTime()) ? null : a.toISOString() };
+	if (a instanceof Uint8Array) return { [r]: Buffer.from(a.buffer, a.byteOffset, a.byteLength).toString("base64") };
+	if (Array.isArray(a)) return a.map(s);
+	if (o(a)) {
+		let t = {}, n = !1;
+		for (let [r, i] of Object.entries(a)) r.startsWith(e) && (n = !0), t[r] = s(i);
+		return n ? { [i]: t } : t;
+	}
+	throw TypeError("A snapshot value carries a non-plain object; it cannot be cached faithfully.");
+}, c = (e) => {
+	if (typeof e != "object" || !e) return e;
+	if (Array.isArray(e)) return e.map(c);
+	let a = e, o = Object.keys(a);
+	if (o.length === 1) {
+		let e = o[0], s = a[e];
+		if (e === t) return s === null ? /* @__PURE__ */ new Date(NaN) : new Date(s);
+		if (e === n) return BigInt(s);
+		if (e === r) return new Uint8Array(Buffer.from(s, "base64"));
+		if (e === i) {
+			let e = {};
+			for (let [t, n] of Object.entries(s)) e[t] = c(n);
+			return e;
+		}
+	}
+	let s = {};
+	for (let [e, t] of Object.entries(a)) s[e] = c(t);
+	return s;
+}, l = (e) => ({
+	v: a,
+	value: s(e)
+}), u = (e) => {
+	if (o(e) && e.v === a && "value" in e) try {
+		return { value: c(e.value) };
+	} catch {
+		return;
+	}
+};
+//#endregion
+export { u as decodeSnapshotValue, l as encodeSnapshotValue };

package/dist/sourceResolution.js

@@ -1,6 +1,6 @@
-import { declaredReactivityChannelKeys as e, isReactivityChannelKey as t, sourceKeys as n } from "@voltro/protocol";
+import { captureOptionalQuerySources as e, declaredReactivityChannelKeys as t, isReactivityChannelKey as n, sourceKeys as r } from "@voltro/protocol";
 //#region src/sourceResolution.ts
-var r = (e, t) => {
+var i = (e, t) => {
 	let n, r = 0;
 	for (let i of t) {
 		let t = 0;
@@ -11,32 +11,42 @@ var r = (e, t) => {
 		o > r && o >= .6 && (r = o, n = i);
 	}
 	return n;
-}, i = (i, a) => {
-	let o = e(), s = [], c = /* @__PURE__ */ new Map();
-	for (let e of i) for (let i of n(e.source)) if (t(i)) {
-		if (o.has(i)) continue;
-		s.push({
-			procedure: e.name,
-			source: i,
-			didYouMean: void 0,
-			channel: !0
-		});
-	} else a.size === 0 || a.has(i) || (c.has(i) || c.set(i, r(i, a)), s.push({
-		procedure: e.name,
-		source: i,
-		didYouMean: c.get(i),
-		channel: !1
-	}));
-	return s;
-}, a = (e) => {
+}, a = (a, o) => {
+	let s = t(), c = [], l = /* @__PURE__ */ new Map();
+	for (let t of a) {
+		let a = new Set(e(t.name, t.source, t.optionalSource));
+		for (let e of r(t.source)) if (n(e)) {
+			if (s.has(e)) continue;
+			c.push({
+				procedure: t.name,
+				source: e,
+				didYouMean: void 0,
+				channel: !0,
+				...a.has(e) ? { optional: !0 } : {}
+			});
+		} else o.size === 0 || o.has(e) || (l.has(e) || l.set(e, i(e, o)), c.push({
+			procedure: t.name,
+			source: e,
+			didYouMean: a.has(e) ? void 0 : l.get(e),
+			channel: !1,
+			...a.has(e) ? { optional: !0 } : {}
+		}));
+	}
+	return c;
+}, o = (e) => {
 	if (e.length === 0) return;
-	let t = e.map((e) => e.channel ? `  ${e.procedure}: source '${e.source}' names a reactivity channel nobody declared` : `  ${e.procedure}: source '${e.source}' matches no declared table` + (e.didYouMean === void 0 ? "" : ` — did you mean '${e.didYouMean}'?`)), n = e.some((e) => e.channel) ? "\nFor the `channel:` entries: declare it with `reactivityChannel(<name>)` and pass the\nCHANNEL as `source:`, not its key as a string. Authoring against the object is what\nmakes a channel source impossible to leave stale — you cannot import a declaration\nthat does not exist." : "";
-	return `${e.length} reactive source(s) name a table that does not exist:\n${t.join("\n")}\n
+	let t = e.filter((e) => e.optional === !0);
+	if (t.length > 0) {
+		let n = o(e.filter((e) => e.optional !== !0)), r = t.map((e) => `  ${e.procedure}: optional integration source '${e.source}' is unavailable`);
+		return [n, `${t.length} optional integration source(s) are unavailable:\n${r.join("\n")}\nTheir observers remain declared. Installed sources still trigger recomputation; executor authorization still applies.`].filter((e) => e !== void 0).join("\n\n");
+	}
+	let n = e.map((e) => e.channel ? `  ${e.procedure}: source '${e.source}' names a reactivity channel nobody declared` : `  ${e.procedure}: source '${e.source}' matches no declared table` + (e.didYouMean === void 0 ? "" : ` — did you mean '${e.didYouMean}'?`)), r = e.some((e) => e.channel) ? "\nFor the `channel:` entries: declare it with `reactivityChannel(<name>)` and pass the\nCHANNEL as `source:`, not its key as a string. Authoring against the object is what\nmakes a channel source impossible to leave stale — you cannot import a declaration\nthat does not exist." : "";
+	return `${e.length} reactive source(s) name a table that does not exist:\n${n.join("\n")}\n
 These queries are NOT broken. They serve their first snapshot and then never
 update again, which is indistinguishable from "nothing has changed" — so the
 symptom is silence, and silence is what this surface exists to eliminate.
 A \`source:\` is a STRING, so \`tsc\` cannot see a stale one and a rename leaves it
-behind quietly.` + n;
+behind quietly.` + r;
 };
 //#endregion
-export { a as formatUnresolvedSources, i as unresolvedSources };
+export { o as formatUnresolvedSources, a as unresolvedSources };