@voltro/runtime 0.86.0 → 0.88.0

package/dist/index.js

@@ -9,137 +9,147 @@ import { currentRawReads as f, isolateRawReadScope as p, rawSqlPreview as m, rec
 import { DEFAULT_CRDT_COMPACT_MAX_BYTES as _, DEFAULT_CRDT_MAX_DOCUMENT_BYTES as v, DEFAULT_CRDT_MAX_UPDATE_BYTES as y, DEFAULT_CRDT_REBASE_MAX_BYTES as b, crdtCompactMaxBytes as x, crdtMaxDocumentBytes as S, crdtMaxUpdateBytes as C, crdtMigrationsFor as w, crdtRebaseMaxBytes as T, describeCrdtState as E, setCrdtAdmission as D, setCrdtBackend as O, setCrdtCompactMaxBytes as k } from "./crdtMerge.js";
 import { resolveDependentTables as A } from "./dependencyGraph.js";
 import { recordCoalesced as j, recordOverrun as M, recordOversized as N, recordStalled as P, resetSubscriptionSocketMetrics as F, setBufferedBytes as I, subscriptionSocketMetricSamples as L, subscriptionSocketMetricsSnapshot as R } from "./subscriptionSocketMetrics.js";
-import { counter as z, eventMetricTagCacheSizeForTests as B, exponentialBoundaries as V, gauge as H, histogramMetric as U, linearBoundaries as W, recordEventDelivered as G, recordEventDropped as K, recordEventPublished as q, recordEventSubscribers as J, recordExternalMissed as Y, recordExternalTrigger as X, recordSample as Z, recordScheduleQueueRecovery as Q, recordScheduleQueueWait as $, recordScheduleQueued as ee, recordScheduleRun as te, recordSubscriptionActive as ne, recordSubscriptionDelivery as re, recordWorkflowRun as ie, resetEventMetricTagCacheForTests as ae, snapshotMetrics as oe, snapshotMetricsSync as se } from "./metrics.js";
-import { classifyRead as ce } from "./readClassification.js";
-import { enterReadRecording as le, noteRead as ue, readRecordingActive as de, recordReads as fe, recordingStore as pe, restrictingReads as me, restrictingReadsEffect as he, setSourceGapSink as ge, sourceGapReport as _e } from "./readRecorder.js";
-import { DEFAULT_ROW_FILTER_RETRY as ve, NO_ROW_FILTER as ye, RowFilterDeclarationViolated as be, RowFilterUnavailable as xe, applyRowFilter as Se, applyRowFilterToDescriptor as Ce, getRowFilter as we, makeDefaultRefilter as Te, noteRowFilterResolved as Ee, resetRowFilterResolvedArms as De, resolveRowFilterScope as Oe, resolveRowFilterScopeFor as ke, rowFilterMayNarrow as Ae, rowFilterRegistered as je, rowFilterResolvedArms as Me, setRowFilter as Ne } from "./rowFilter.js";
-import { forbiddenColumnsForSubject as Pe, serverOnlyColumnNames as Fe, stripColumnsFromRows as Ie, stripForbiddenForWire as Le, stripServerOnlyForWire as Re } from "./wireColumnStrip.js";
-import { powerOfTwoSelector as ze } from "./replicaSelection.js";
-import { replicaHealth as Be } from "./replicaHealth.js";
-import { buildSubjectKey as Ve, memoryRywPositionStore as He, redisRywPositionStore as Ue } from "./rywPositionStore.js";
-import { ReplicatedDataStore as We, currentRoutingContext as Ge, runWithRoutingContext as Ke, runWithRoutingContextEffect as qe } from "./replicatedDataStore.js";
-import { Dispatcher as Je, deliveredRowCount as Ye } from "./dispatcher.js";
-import { revalidatePath as Xe, revalidateTable as Ze, revalidateTag as Qe, setRevalidationPublisher as $e } from "./revalidation.js";
-import { DEFAULT_KEEP_ALIVE_MS as et, HEADERS_TIMEOUT_MARGIN_MS as tt, applyKeepAlive as nt, resolveKeepAlive as rt } from "./httpKeepAlive.js";
-import { _connectionStreamCount as it, _resetConnectionCredentialsForTest as at, applyConnectionCredential as ot, bindConnectionCredential as st, getConnectionCredential as ct, getCredentialExpiry as lt, interruptConnectionStreams as ut, mergeCookieHeader as dt, recordCredentialExpiry as ft, registerConnectionStream as pt, unbindConnection as mt } from "./connectionCredentials.js";
-import { RPC_CLIENT_ADDRESS_HEADER as ht, getRpcConnection as gt } from "./rpcConnections.js";
-import { DEFAULT_SOCKET_MAX_BUFFERED_BYTES as _t, DEFAULT_SOCKET_OVERRUN_AFTER_MS as vt, DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES as yt, DEFAULT_SOCKET_STALL_WARN_AFTER_MS as bt, makeSubscriptionOutbox as xt, pumpOutbox as St, reactiveSocketTunables as Ct, setReactiveSocketTunables as wt } from "./subscriptionOutbox.js";
-import { DEFAULT_RESUME_MAX_DELTAS as Tt, DEFAULT_RESUME_WINDOW_MS as Et, adoptDetached as Dt, answerResume as Ot, canonicalInputKey as kt, detachForResume as At, recordForResume as jt, resetDetachedForTest as Mt, resetResumeRingsForTest as Nt, resumeKeyOf as Pt, resumeTunables as Ft, setResumeTunables as It } from "./subscriptionResume.js";
-import { externalSpanFromTraceparent as Lt, formatTraceparent as Rt, newTraceId as zt, parseTraceparent as Bt } from "./traceparent.js";
-import { currentTraceContext as Vt, runWithTraceContext as Ht } from "./traceContext.js";
-import { readMaybeOne as Ut } from "./storeRead.js";
-import { CRDT_VERSIONS_TABLE as Wt, _voltroCrdtVersionsTable as Gt } from "./crdtVersionsTable.js";
-import { decryptField as Kt, deriveKey as qt, encryptField as Jt, getFieldCipher as Yt, makeAesCipher as Xt, makeFieldCipher as Zt, setFieldCipher as Qt } from "./fieldCipher.js";
-import { enableGraphObservation as $t, isObservingGraph as en, observeStore as tn, observedGraph as nn, recordTableAccess as rn, resetObservedGraph as an, runWithObservedProcedure as on } from "./observedGraph.js";
-import { DeleteBuilder as sn, NoRowFound as cn, OptimisticLockError as ln, SelectBuilder as un, UpdateBuilder as dn, makeFluentStore as fn, missingRowError as pn } from "./storeQuery.js";
-import { TRANSACTION_READ_CONFLICT_NAME as mn, TX_READ_VERSIONS_KEY as hn, TransactionReadConflict as gn, actingUserId as _n, applyDefined as vn, isTransactionReadConflict as yn, wrapStoreWithMixinBehaviour as bn } from "./storeMiddleware.js";
-import { DEFAULT_COMPRESSION_MIN_BYTES as xn, isCompressibleContentType as Sn, maybeCompress as Cn, mergeCompressionHeaders as wn, negotiateEncoding as Tn } from "./httpCompression.js";
-import { noteResumeVerdict as En, resetResumeCensus as Dn, resumeCensus as On } from "./resumeCensus.js";
-import { publishServerTracerLayer as kn, serverTracer as An, setServerTracer as jn, withServerTracer as Mn } from "./serverTracer.js";
-import { classifyRequestOrigin as Nn, isStateChangingMethod as Pn, makeOriginGuardExemption as Fn, normalizeOrigin as In, resolveOriginGuardConfig as Ln } from "./originGuard.js";
-import { BOOT_REFUSAL_NAME as Rn, bootRefusal as zn, isBootRefusal as Bn } from "./bootRefusal.js";
-import { NO_TRUSTED_PROXIES as Vn, ipToBytes as Hn, isTrustedProxy as Un, normalizeIp as Wn, resolveClientAddress as Gn, resolveRequestClientAddress as Kn, resolveRequestIsHttps as qn, resolveTrustedProxies as Jn } from "./trustedProxy.js";
-import { API_CSP as Yn, DEFAULT_HSTS as Xn, HTML_CSP as Zn, ORIGIN_NULLING_REFERRER_POLICIES as Qn, preservesSameOriginHeader as $n, resolveSecurityHeaders as er, securityHeadersFor as tr } from "./securityHeaders.js";
-import { UnverifiedWebhookRoute as nr, WEBHOOK_VERIFICATION_PROPERTY as rr, assertWebhookRoutesDeclareVerification as ir, webhookVerificationOf as ar } from "./webhookVerification.js";
-import { DEFAULT_MAX_RPC_BODY_BYTES as or, awaitServerListening as sr, bindComputedUntyped as cr, bindMutation as lr, bindStream as ur, bindSubscription as dr, bindSubscriptionUntyped as fr, defectMessage as pr, drainForShutdown as mr, isInfraError as hr, makeMutationOutputCodec as gr, onProcessShutdown as _r, resetComputedQueryCacheWarnings as vr, shutdownGraceMsFromEnv as yr, startRpcServer as br } from "./rpcServer.js";
-import { answerProbe as xr, probeFor as Sr, resolveHealth as Cr } from "./healthProbes.js";
-import { bindBootListener as wr } from "./bootListener.js";
-import { buildTracingLayer as Tr, describeOtelReasons as Er, otelImportFailure as Dr } from "./observability.js";
-import { makeBufferingSpanProcessor as Or } from "./traceSink.js";
-import { cachedBackend as kr, envSecretsBackend as Ar, httpSecretsBackend as jr, resetSecretsBackend as Mr, resolveSecret as Nr, resolveSecretSync as Pr, resolveSecretsBackend as Fr, setSecretsBackend as Ir } from "./secretsResolver.js";
-import { dataStoreIdempotencyStore as Lr } from "./idempotencyStore.js";
-import { dataStoreKvStore as Rr } from "./kvDataStore.js";
-import { makeAsyncKv as zr, noopKv as Br } from "./kvFacade.js";
-import { ACTORS_TABLE as Vr, API_KEYS_TABLE as Hr, dataStoreApiKeyStore as Ur, generateApiKeyToken as Wr, makeApiKeyService as Gr, makeApiKeyUsageFlusher as Kr, memoryApiKeyStore as qr, plantMissingApiKeyActors as Jr, sha256Hex as Yr } from "./apiKeys.js";
-import { TENANT_SELECTIONS_TABLE as Xr, clearTenantSelection as Zr, selectTenant as Qr, tenantSelectionId as $r, tenantSelectionStore as ei } from "./tenantSelection.js";
-import { DEVICES_TABLE as ti, dataStoreDeviceStore as ni, deviceTokenPrefixes as ri, makeDeviceService as ii, memoryDeviceStore as ai, sha256HexOf as oi } from "./devices.js";
-import { deviceManagementRoutes as si, frameworkDeviceStrategy as ci } from "./devicesWiring.js";
-import { apiKeyManagementRoutes as li, frameworkApiKeyStrategy as ui } from "./apiKeysWiring.js";
-import { SYSTEM_SUBJECT as di } from "./systemSubject.js";
-import { EffectStore as fi, insertIgnoreRowOutcomeEffect as pi, insertManyRowsEffect as mi, insertRowEffect as hi, makeEffectStoreLayer as gi, upsertRowEffect as _i, upsertRowOutcomeEffect as vi } from "./effectStore.js";
-import { WorkflowPayloadError as yi, WorkflowRateLimitedError as bi, WorkflowSingletonHeldError as xi, WorkflowStartNotExecuted as Si, makeLazyWorkflowFacade as Ci, makeTransactionalWorkflowFacade as wi, makeWorkflowFacade as Ti, makeWorkflowFacadeWithCallerContext as Ei, makeWorkflowHandlers as Di, makeWorkflowLayers as Oi, makeWorkflowRunHandle as ki, payloadPropertyNames as Ai } from "./workflowRuntime.js";
-import { _voltroWorkflowEventDeliveriesTable as ji, _voltroWorkflowEventsTable as Mi, defineEventTrigger as Ni, isWorkflowEventTriggerDefinition as Pi, makeEventsFacade as Fi, triggerWorkflow as Ii } from "./events.js";
-import { EventBus as Li } from "./eventBus.js";
-import { OutboxEventPublisher as Ri, makeEventPublisher as zi, publishEvent as Bi } from "./eventPublish.js";
-import { EVENT_CLIENT_QUEUE_SIZE as Vi, EVENT_LATEST_QUEUE_SIZE as Hi, bindEvent as Ui, makeBufferGapDetector as Wi } from "./bindEvent.js";
-import { InstanceMembership as Gi } from "./instanceMembership.js";
-import { DEFAULT_OUTBOX_CLAIM_LEASE_MS as Ki, OUTBOX_ATTEMPTS_TABLE as qi, OUTBOX_ATTEMPT_LOG_CAP as Ji, OUTBOX_TABLE as Yi, backoffMs as Xi, defineOutboxHandler as Zi, drainOutbox as Qi, makeOutboxFacade as $i, outboxAttemptsTable as ea, outboxTable as ta } from "./outbox.js";
-import { CONNECTIONS_TABLE as na, CONNECTION_GRANTS_TABLE as ra, ConnectionNotConnected as ia, DEFAULT_REFRESH_SKEW_MS as aa, GRANT_TTL_MS as oa, REFRESH_LEASE_MS as sa, _voltroConnectionGrantsTable as ca, _voltroConnectionsTable as la, assertConnectionCipherConfigured as ua, beginOAuthConnect as da, clearConnectionRefreshFlights as fa, completeOAuthConnect as pa, connectionCallbackPath as ma, connectionLabel as ha, defineConnection as ga, exchangeAuthorizationCode as _a, forgetCredential as va, listConnectionStates as ya, makeConnectionRegistry as ba, oauthCredentialValue as xa, projectConnectionState as Sa, refreshAccessToken as Ca, resolveConnection as wa, resolveRedirectUri as Ta, sanitizeRedirectTo as Ea, storeCredential as Da, sweepExpiredGrants as Oa } from "./connectionVault.js";
-import { getConnectionResolver as ka, makeConnectionResolver as Aa, makeConnectionsFacade as ja, resolveConnectionForSubject as Ma, setConnectionResolver as Na } from "./connectionsFacade.js";
-import { makeDisconnectConnectionExecutor as Pa, makeListConnectionsExecutor as Fa, makeStartConnectionExecutor as Ia, makeSubmitTokenExecutor as La } from "./connectionBuiltins.js";
-import { AccessDenied as Ra, REBAC_ADMIN_SCOPE as za, assertCan as Ba, can as Va, clearResourcePolicies as Ha, defineResourcePolicy as Ua, effectiveRelations as Wa, getResourcePolicy as Ga, listResourcePolicies as Ka, rebacPolicyGraph as qa, revokedIds as Ja, visibleRows as Ya } from "./rebac.js";
-import { currentRequestLoader as Xa, enterRequestLoader as Za, runWithRequestLoader as Qa } from "./requestLoader.js";
-import { getTupleSource as $a, installPolicyGuardResolver as eo, registerDefaultTupleSource as to, setTupleSource as no } from "./policyGuardResolver.js";
-import { makeDataLoader as ro } from "./dataloader.js";
-import { tracingHttpClientLayer as io } from "./httpClientTracing.js";
-import { SsrfBlockedError as ao, ssrfGuardHttpClientLayer as oo, ssrfReason as so } from "./httpClientSsrf.js";
-import { makeApiKeyUsageBuffer as co } from "./apiKeyUsage.js";
-import { VOLTRO_AUDIT_MIXIN_ID as lo, VOLTRO_EXPIRES_MIXIN_ID as uo, VOLTRO_LOCAL_FIRST_MIXIN_ID as fo, VOLTRO_SOFT_DELETE_MIXIN_ID as po, VOLTRO_TENANT_MIXIN_ID as mo, emptySchemaRegistry as ho, makeSchemaRegistry as go } from "./schemaRegistry.js";
-import { wrapStoreWithBootCodec as _o } from "./bootStoreCodec.js";
-import { crud as vo, redactColumns as yo } from "./crud.js";
-import { cacheScopeLeaks as bo, formatCacheScopeLeaks as xo, formatServerOnlyLeaks as So, schemaPropertyNames as Co, serverOnlyLeaks as wo } from "./serverOnlyAudit.js";
-import { formatUnresolvedSources as To, unresolvedSources as Eo } from "./sourceResolution.js";
-import { applyPluginRefRules as Do, collectPluginRefRules as Oo, collectReferenceSoftDeleteRules as ko, isSoftDelete as Ao, rulesFor as jo } from "./pluginRefRules.js";
-import { DEFAULT_STALE_AFTER_MS as Mo, REPLICA_OBSERVATIONS_TABLE as No, forgetReplicaObservations as Po, mergeFleetObservations as Fo, readReplicaObservations as Io, resetReplicaObservationWarnings as Lo, writeReplicaObservation as Ro } from "./replicaObservations.js";
-import { CircuitBreaker as zo, CircuitOpen as Bo } from "./circuitBreaker.js";
-import { clearSystemStoreHandle as Vo, getSystemStoreHandle as Ho, runAsSystem as Uo, setSystemStoreHandle as Wo } from "./runAsSystem.js";
-import { inspectWorkflow as Go } from "./inspectWorkflow.js";
-import { makeConnectionState as Ko } from "./connectionState.js";
-import { makeAuthMiddlewareLayers as qo, withRpcAuthMiddleware as Jo } from "./authMiddlewareLayer.js";
-import { SERVICE_TOKEN_PREFIX as Yo, apiBindingTokenEnv as Xo, apiBindingUrlEnv as Zo, assertServiceCallersConfig as Qo, isWellFormedServiceToken as $o, mintServiceToken as es, serviceCallerNextTokenEnv as ts, serviceCallerStrategy as ns, serviceCallerTokenEnv as rs, serviceEnvSegment as is } from "./serviceCredentials.js";
-import { UndeclaredTableAccess as as, guardUndeclaredTables as os } from "./declaredTablesGuard.js";
-import { localityAwareSelector as ss, resolveCurrentRegion as cs } from "./replicaLocality.js";
-import { memoryReplicationAdapter as ls } from "./dialectReplicationAdapter.js";
-import { DEFAULT_MAX_RUNTIME_MS as us, compileCron as ds, cronOccurrences as fs, defineSchedule as ps, isScheduleDefinition as ms, nextFiring as hs } from "./schedule.js";
-import { resolveTransactionSubject as gs } from "./transactionSubject.js";
-import { scheduleBackfillRequestsTable as _s } from "./scheduleBackfillRequests.js";
-import { cancelWakeup as vs, dueWakeups as ys, markWakeupFired as bs, nextWakeup as xs, pruneWakeups as Ss, registerWakeup as Cs, releaseWakeup as ws, tryClaimWakeup as Ts } from "./wakeRegistry.js";
-import { CLAIM_RETENTION_BUCKETS as Es, DEFAULT_CLAIM_BUCKET_MS as Ds, DEFAULT_EXTERNAL_RECONCILE_MS as Os, DEFAULT_EXTERNAL_TRIGGER_SKEW_MS as ks, DEFAULT_SCHEDULE_HEARTBEAT_MS as As, DORMANCY_WAKEUP_TENANT as js, EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS as Ms, SCHEDULE_SUBJECT as Ns, TERMINAL_RUN_STATUSES as Ps, claimGraceMs as Fs, makeAdvisoryLockCoordinator as Is, peerRunIsAlive as Ls, singleCoordinator as Rs, startScheduler as zs } from "./scheduler.js";
-import { MIN_EXTERNALIZABLE_INTERVAL_MS as Bs, cronForInterval as Vs, externalizationRefusal as Hs, externalizedTask as Us, externalizedTaskNames as Ws, registerExternalizedTask as Gs, unregisterExternalizedTask as Ks } from "./externalizedTasks.js";
-import { DEFAULT_MAX_IDLE_INTERVAL_MS as qs, inspectCoordinatedSchedule as Js, makeCoordinatedScheduler as Ys, nextDelay as Xs, readPollCeilingMs as Zs, scheduleCoordinated as Qs } from "./coordinatedSchedule.js";
-import { _voltroScheduleRunsTable as $s } from "./scheduleRunsTable.js";
-import { _voltroScheduleClaimsTable as ec } from "./scheduleClaimsTable.js";
-import { _voltroChangeClaimsTable as tc } from "./changeClaimsTable.js";
-import { _voltroTracesTable as nc } from "./traceSpansTable.js";
-import { _voltroUndoLogTable as rc } from "./undoLogTable.js";
-import { crdtCellStats as ic, listCrdtVersions as ac, migrateCrdtColumn as oc, prepareSealedCrdtRestore as sc, restoreCrdtVersion as cc, snapshotCrdt as lc } from "./crdtHistory.js";
-import { makeUndoCapture as uc, undoCaptureEnabled as dc, undoSurfaceEnabled as fc, wrapCaptureStore as pc } from "./undoCapture.js";
-import { evaluateTouchedRules as mc, makeRuleCapture as hc } from "./businessRules.js";
-import { UndoBoundaryError as gc, UndoStack as _c, applyInverse as vc, applyInverses as yc, forwardChangeFromCdc as bc, invertChange as xc, isSafeToApply as Sc, synthesizeInverse as Cc } from "./undo.js";
-import { applyUndoInvocation as wc, redoUndoInvocation as Tc, undoLogExecutor as Ec } from "./undoBuiltins.js";
-import { APPROVALS_TABLE as Dc, DEFAULT_APPROVAL_EXPIRY_MS as Oc, _voltroApprovalsTable as kc, approvalIntentKey as Ac, approvalNonce as jc, canonicalJson as Mc, clearApprovalGate as Nc, decideApproval as Pc, enforceApproval as Fc, getApprovalGate as Ic, installApprovalGate as Lc, makeApprovalGate as Rc, parseApprovalInterval as zc, pendingApprovalsFor as Bc, rehydrateGuards as Vc, scopeStringsOf as Hc, serializeGuards as Uc } from "./approvals.js";
-import { approvalsPendingExecutor as Wc, decideApprovalInvocation as Gc } from "./approvalBuiltins.js";
-import { workflowDomainEventsExecutor as Kc, workflowEventDeliveriesExecutor as qc, workflowRowVisibleTo as Jc, workflowRunEventsExecutor as Yc, workflowRunExecutor as Xc, workflowRunStepsExecutor as Zc, workflowRunsExecutor as Qc } from "./workflowReadBuiltins.js";
-import { TimelineRecorder as $c, getTimelineRecorder as el, recordTimelineEvent as tl, redactRow as nl, resolveTimelineMode as rl, reverseEventOverRows as il, setTimelineRecorderForTest as al } from "./timeline.js";
-import { applyDelta as ol, buildIvmState as sl, classifyShape as cl, groupKeyOf as ll, ivmValue as ul, materializeIvm as dl, resolveRescan as fl } from "./ivm.js";
-import { AggregateMaintainer as pl } from "./aggregateIvm.js";
-import { _voltroRebacTuplesTable as ml, buildRebacInterceptor as hl, buildRebacReadFilter as gl, loadResourceTuples as _l, loadSubjectTuples as vl } from "./rebacInterceptor.js";
-import { DEFAULT_LEVEL_RESYNC_MS as yl, DEFAULT_LEVEL_STUCK_MS as bl, MIN_LEVEL_RESYNC_MS as xl, ReactionRateLimiter as Sl, defineReaction as Cl, isLevelReaction as wl, isLevelWatch as Tl, reactionDurationMs as El, reactionRateBucketKey as Dl, runReaction as Ol } from "./reaction.js";
-import { ExpectationRegistry as kl, defineExpectation as Al, isExpectationDefinition as jl, useExpectation as Ml } from "./expectation.js";
-import { ExpectationEvaluator as Nl, attachExpectations as Pl } from "./expectationEvaluator.js";
-import { CostRegistry as Fl, defineCostBudget as Il, isCostBudgetDefinition as Ll, useCostBudget as Rl } from "./finops.js";
-import { CostAccountant as zl, attachFinops as Bl } from "./finopsAccountant.js";
-import { ExperimentRegistry as Vl, HOLDOUT_VARIANT as Hl, assignVariant as Ul, defineExperiment as Wl, hashUnitInterval as Gl, isExperimentDefinition as Kl, resultVariantNames as ql, useExperiment as Jl } from "./experiment.js";
-import { ExperimentEvaluator as Yl, attachExperiments as Xl } from "./experimentEvaluator.js";
-import { _voltroWakeupsTable as Zl } from "./wakeupsTable.js";
-import { runWakeLoop as Ql, wakeDueOnce as $l } from "./wakeOrchestrator.js";
-import { makeProcessAdapter as eu, nodeProcessSupervisor as tu } from "./wakeSupervisor.js";
-import { isIdleNow as nu, makeIdleGate as ru } from "./idleDetector.js";
-import { makeRouterActivity as iu, makeWakeGate as au, makeWakeProxyServer as ou } from "./wakeRouter.js";
-import { countRunningWorkflows as su, runOrchestratorTick as cu, runSingleNodeOrchestrator as lu } from "./singleNodeOrchestrator.js";
-import { defineSubscriber as uu } from "./subscriber.js";
-import { AnalyticsCapabilityNotSupported as du, AnalyticsError as fu, AnalyticsSink as pu, useAnalytics as mu } from "./analyticsSink.js";
-import { NOOP_ANALYTICS_PROVIDER as hu, composeAnalytics as gu, composeAnalyticsSinks as _u, noopAnalytics as vu, noopAnalyticsSpec as yu } from "./composeAnalytics.js";
-import { DEFAULT_ANALYTICS_MIRROR_TUNABLES as bu, attachAnalyticsMirror as xu } from "./analyticsMirror.js";
-import { AggregateError as Su, AggregateNotFound as Cu, AggregateRegistry as wu, AggregateStale as Tu, defineAggregate as Eu, isAggregateDefinition as Du, useAggregate as Ou } from "./aggregate.js";
-import { applySoftDeleteScope as ku, applyTenantScope as Au, isEmptyTenantScopedRead as ju, isOrglessUserSubject as Mu, makeQueryFinalizer as Nu } from "./tenantScope.js";
-import { defineExecutor as Pu } from "./defineExecutor.js";
-import { DEFAULT_MUTATION_REPLAY_ATTEMPTS as Fu, applyDeclaredRelations as Iu, makeActionRunner as Lu, makeMutationRunner as Ru, makeOneShotQueryRunner as zu, makeQueryDescriptorProducer as Bu, makeQueryReauthorizer as Vu, makeQuerySubscriber as Hu, makeWorkflowStartRunner as Uu, runProvidedEffect as Wu, runWithDeadlockRetry as Gu, withRowFilter as Ku, withScopedRequest as qu } from "./servePipeline.js";
-import { historyProvenance as Ju, lastWriteProvenance as Yu } from "./provenance.js";
-import { buildPreview as Xu, diffChange as Zu, previewInRollback as Qu } from "./preview.js";
-import { classifyConstraintViolation as $u, clearRetentions as ed, extractDbCause as td, isForeignKeyViolation as nd, isQueryTimeout as rd, listRetentionConflicts as id, listRetentions as ad, registerRetention as od, retentionTtlMsFromEnv as sd, sweepRetention as cd } from "@voltro/database";
-import { ConstraintViolation as ld, ServerOnlyColumnWrite as ud, StoreOperationFailed as dd, TableValidationFailed as fd, TenantRowNotFound as pd, TenantScopeViolation as md } from "@voltro/protocol";
-//#region src/index.ts
-var hd = "framework-runtime";
-//#endregion
-export { Vr as ACTORS_TABLE, Yn as API_CSP, Hr as API_KEYS_TABLE, Dc as APPROVALS_TABLE, Ra as AccessDenied, Su as AggregateError, pl as AggregateMaintainer, Cu as AggregateNotFound, wu as AggregateRegistry, Tu as AggregateStale, du as AnalyticsCapabilityNotSupported, fu as AnalyticsError, pu as AnalyticsSink, Rn as BOOT_REFUSAL_NAME, Es as CLAIM_RETENTION_BUCKETS, na as CONNECTIONS_TABLE, ra as CONNECTION_GRANTS_TABLE, Wt as CRDT_VERSIONS_TABLE, zo as CircuitBreaker, Bo as CircuitOpen, ia as ConnectionNotConnected, ld as ConstraintViolation, zl as CostAccountant, Fl as CostRegistry, bu as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Oc as DEFAULT_APPROVAL_EXPIRY_MS, Ds as DEFAULT_CLAIM_BUCKET_MS, xn as DEFAULT_COMPRESSION_MIN_BYTES, _ as DEFAULT_CRDT_COMPACT_MAX_BYTES, v as DEFAULT_CRDT_MAX_DOCUMENT_BYTES, y as DEFAULT_CRDT_MAX_UPDATE_BYTES, b as DEFAULT_CRDT_REBASE_MAX_BYTES, l as DEFAULT_DELIVERY_CONCURRENCY, Os as DEFAULT_EXTERNAL_RECONCILE_MS, ks as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, Xn as DEFAULT_HSTS, et as DEFAULT_KEEP_ALIVE_MS, yl as DEFAULT_LEVEL_RESYNC_MS, bl as DEFAULT_LEVEL_STUCK_MS, qs as DEFAULT_MAX_IDLE_INTERVAL_MS, or as DEFAULT_MAX_RPC_BODY_BYTES, us as DEFAULT_MAX_RUNTIME_MS, Fu as DEFAULT_MUTATION_REPLAY_ATTEMPTS, Ki as DEFAULT_OUTBOX_CLAIM_LEASE_MS, u as DEFAULT_RAW_READ_TRACKING_LIMIT, aa as DEFAULT_REFRESH_SKEW_MS, Tt as DEFAULT_RESUME_MAX_DELTAS, Et as DEFAULT_RESUME_WINDOW_MS, ve as DEFAULT_ROW_FILTER_RETRY, As as DEFAULT_SCHEDULE_HEARTBEAT_MS, _t as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, vt as DEFAULT_SOCKET_OVERRUN_AFTER_MS, yt as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, bt as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, Mo as DEFAULT_STALE_AFTER_MS, ti as DEVICES_TABLE, js as DORMANCY_WAKEUP_TENANT, sn as DeleteBuilder, Je as Dispatcher, Vi as EVENT_CLIENT_QUEUE_SIZE, Hi as EVENT_LATEST_QUEUE_SIZE, Ms as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, fi as EffectStore, Li as EventBus, Nl as ExpectationEvaluator, kl as ExpectationRegistry, Yl as ExperimentEvaluator, Vl as ExperimentRegistry, oa as GRANT_TTL_MS, tt as HEADERS_TIMEOUT_MARGIN_MS, Hl as HOLDOUT_VARIANT, Zn as HTML_CSP, o as InMemoryDataStore, t as IndexedMatcher, Gi as InstanceMembership, n as LinearScanMatcher, Bs as MIN_EXTERNALIZABLE_INTERVAL_MS, xl as MIN_LEVEL_RESYNC_MS, hu as NOOP_ANALYTICS_PROVIDER, ye as NO_ROW_FILTER, Vn as NO_TRUSTED_PROXIES, cn as NoRowFound, Qn as ORIGIN_NULLING_REFERRER_POLICIES, qi as OUTBOX_ATTEMPTS_TABLE, Ji as OUTBOX_ATTEMPT_LOG_CAP, Yi as OUTBOX_TABLE, ln as OptimisticLockError, Ri as OutboxEventPublisher, za as REBAC_ADMIN_SCOPE, sa as REFRESH_LEASE_MS, No as REPLICA_OBSERVATIONS_TABLE, ht as RPC_CLIENT_ADDRESS_HEADER, hd as RUNTIME_NAME, Sl as ReactionRateLimiter, We as ReplicatedDataStore, be as RowFilterDeclarationViolated, xe as RowFilterUnavailable, Ns as SCHEDULE_SUBJECT, Yo as SERVICE_TOKEN_PREFIX, di as SYSTEM_SUBJECT, un as SelectBuilder, ud as ServerOnlyColumnWrite, ao as SsrfBlockedError, dd as StoreOperationFailed, a as SubscriptionRegistry, Xr as TENANT_SELECTIONS_TABLE, Ps as TERMINAL_RUN_STATUSES, mn as TRANSACTION_READ_CONFLICT_NAME, hn as TX_READ_VERSIONS_KEY, fd as TableValidationFailed, pd as TenantRowNotFound, md as TenantScopeViolation, $c as TimelineRecorder, gn as TransactionReadConflict, as as UndeclaredTableAccess, gc as UndoBoundaryError, _c as UndoStack, nr as UnverifiedWebhookRoute, dn as UpdateBuilder, lo as VOLTRO_AUDIT_MIXIN_ID, uo as VOLTRO_EXPIRES_MIXIN_ID, fo as VOLTRO_LOCAL_FIRST_MIXIN_ID, po as VOLTRO_SOFT_DELETE_MIXIN_ID, mo as VOLTRO_TENANT_MIXIN_ID, rr as WEBHOOK_VERIFICATION_PROPERTY, yi as WorkflowPayloadError, bi as WorkflowRateLimitedError, xi as WorkflowSingletonHeldError, Si as WorkflowStartNotExecuted, it as _connectionStreamCount, at as _resetConnectionCredentialsForTest, kc as _voltroApprovalsTable, tc as _voltroChangeClaimsTable, ca as _voltroConnectionGrantsTable, la as _voltroConnectionsTable, Gt as _voltroCrdtVersionsTable, ml as _voltroRebacTuplesTable, ec as _voltroScheduleClaimsTable, $s as _voltroScheduleRunsTable, nc as _voltroTracesTable, rc as _voltroUndoLogTable, Zl as _voltroWakeupsTable, ji as _voltroWorkflowEventDeliveriesTable, Mi as _voltroWorkflowEventsTable, _n as actingUserId, Dt as adoptDetached, xr as answerProbe, Ot as answerResume, Xo as apiBindingTokenEnv, Zo as apiBindingUrlEnv, li as apiKeyManagementRoutes, s as appValidation, ot as applyConnectionCredential, Iu as applyDeclaredRelations, vn as applyDefined, ol as applyDelta, vc as applyInverse, yc as applyInverses, nt as applyKeepAlive, Do as applyPluginRefRules, Se as applyRowFilter, Ce as applyRowFilterToDescriptor, ku as applySoftDeleteScope, Au as applyTenantScope, wc as applyUndoInvocation, Ac as approvalIntentKey, jc as approvalNonce, Wc as approvalsPendingExecutor, Ba as assertCan, ua as assertConnectionCipherConfigured, Qo as assertServiceCallersConfig, ir as assertWebhookRoutesDeclareVerification, Ul as assignVariant, xu as attachAnalyticsMirror, Pl as attachExpectations, Xl as attachExperiments, Bl as attachFinops, sr as awaitServerListening, Xi as backoffMs, da as beginOAuthConnect, wr as bindBootListener, cr as bindComputedUntyped, st as bindConnectionCredential, Ui as bindEvent, lr as bindMutation, ur as bindStream, dr as bindSubscription, fr as bindSubscriptionUntyped, zn as bootRefusal, sl as buildIvmState, Xu as buildPreview, hl as buildRebacInterceptor, gl as buildRebacReadFilter, Ve as buildSubjectKey, Tr as buildTracingLayer, bo as cacheScopeLeaks, kr as cachedBackend, Va as can, vs as cancelWakeup, kt as canonicalInputKey, Mc as canonicalJson, r as canonicalize, Fs as claimGraceMs, $u as classifyConstraintViolation, ce as classifyRead, Nn as classifyRequestOrigin, cl as classifyShape, Nc as clearApprovalGate, fa as clearConnectionRefreshFlights, Ha as clearResourcePolicies, ed as clearRetentions, Vo as clearSystemStoreHandle, Zr as clearTenantSelection, Oo as collectPluginRefRules, ko as collectReferenceSoftDeleteRules, ds as compileCron, pa as completeOAuthConnect, gu as composeAnalytics, _u as composeAnalyticsSinks, ma as connectionCallbackPath, ha as connectionLabel, su as countRunningWorkflows, z as counter, ic as crdtCellStats, x as crdtCompactMaxBytes, S as crdtMaxDocumentBytes, C as crdtMaxUpdateBytes, w as crdtMigrationsFor, T as crdtRebaseMaxBytes, Vs as cronForInterval, fs as cronOccurrences, vo as crud, f as currentRawReads, Xa as currentRequestLoader, Ge as currentRoutingContext, Vt as currentTraceContext, Ur as dataStoreApiKeyStore, ni as dataStoreDeviceStore, Lr as dataStoreIdempotencyStore, Rr as dataStoreKvStore, Pc as decideApproval, Gc as decideApprovalInvocation, Kt as decryptField, pr as defectMessage, Eu as defineAggregate, ga as defineConnection, Il as defineCostBudget, Ni as defineEventTrigger, Pu as defineExecutor, Al as defineExpectation, Wl as defineExperiment, Zi as defineOutboxHandler, Cl as defineReaction, Ua as defineResourcePolicy, ps as defineSchedule, uu as defineSubscriber, Ye as deliveredRowCount, qt as deriveKey, E as describeCrdtState, Er as describeOtelReasons, At as detachForResume, si as deviceManagementRoutes, ri as deviceTokenPrefixes, Zu as diffChange, mr as drainForShutdown, Qi as drainOutbox, ys as dueWakeups, Wa as effectiveRelations, ho as emptySchemaRegistry, $t as enableGraphObservation, Jt as encryptField, Fc as enforceApproval, le as enterReadRecording, Za as enterRequestLoader, Ar as envSecretsBackend, mc as evaluateTouchedRules, B as eventMetricTagCacheSizeForTests, _a as exchangeAuthorizationCode, V as exponentialBoundaries, Lt as externalSpanFromTraceparent, Hs as externalizationRefusal, Us as externalizedTask, Ws as externalizedTaskNames, td as extractDbCause, i as fingerprintFor, Pe as forbiddenColumnsForSubject, va as forgetCredential, Po as forgetReplicaObservations, xo as formatCacheScopeLeaks, So as formatServerOnlyLeaks, Rt as formatTraceparent, To as formatUnresolvedSources, bc as forwardChangeFromCdc, ui as frameworkApiKeyStrategy, ci as frameworkDeviceStrategy, H as gauge, Wr as generateApiKeyToken, Ic as getApprovalGate, ct as getConnectionCredential, ka as getConnectionResolver, lt as getCredentialExpiry, Yt as getFieldCipher, Ga as getResourcePolicy, we as getRowFilter, gt as getRpcConnection, Ho as getSystemStoreHandle, el as getTimelineRecorder, $a as getTupleSource, ll as groupKeyOf, os as guardUndeclaredTables, Gl as hashUnitInterval, U as histogramMetric, Ju as historyProvenance, jr as httpSecretsBackend, pi as insertIgnoreRowOutcomeEffect, mi as insertManyRowsEffect, hi as insertRowEffect, Js as inspectCoordinatedSchedule, Go as inspectWorkflow, Lc as installApprovalGate, eo as installPolicyGuardResolver, ut as interruptConnectionStreams, xc as invertChange, Hn as ipToBytes, Du as isAggregateDefinition, Bn as isBootRefusal, Sn as isCompressibleContentType, Ll as isCostBudgetDefinition, ju as isEmptyTenantScopedRead, jl as isExpectationDefinition, Kl as isExperimentDefinition, nd as isForeignKeyViolation, nu as isIdleNow, hr as isInfraError, wl as isLevelReaction, Tl as isLevelWatch, en as isObservingGraph, Mu as isOrglessUserSubject, rd as isQueryTimeout, Sc as isSafeToApply, ms as isScheduleDefinition, Ao as isSoftDelete, Pn as isStateChangingMethod, yn as isTransactionReadConflict, Un as isTrustedProxy, $o as isWellFormedServiceToken, Pi as isWorkflowEventTriggerDefinition, p as isolateRawReadScope, ul as ivmValue, Yu as lastWriteProvenance, W as linearBoundaries, ya as listConnectionStates, ac as listCrdtVersions, Ka as listResourcePolicies, id as listRetentionConflicts, ad as listRetentions, _l as loadResourceTuples, vl as loadSubjectTuples, ss as localityAwareSelector, Lu as makeActionRunner, Is as makeAdvisoryLockCoordinator, Xt as makeAesCipher, Gr as makeApiKeyService, co as makeApiKeyUsageBuffer, Kr as makeApiKeyUsageFlusher, c as makeAppAccess, Rc as makeApprovalGate, zr as makeAsyncKv, qo as makeAuthMiddlewareLayers, Wi as makeBufferGapDetector, Or as makeBufferingSpanProcessor, ba as makeConnectionRegistry, Aa as makeConnectionResolver, Ko as makeConnectionState, ja as makeConnectionsFacade, Ys as makeCoordinatedScheduler, ro as makeDataLoader, Te as makeDefaultRefilter, ii as makeDeviceService, Pa as makeDisconnectConnectionExecutor, gi as makeEffectStoreLayer, zi as makeEventPublisher, Fi as makeEventsFacade, Zt as makeFieldCipher, fn as makeFluentStore, ru as makeIdleGate, Ci as makeLazyWorkflowFacade, Fa as makeListConnectionsExecutor, gr as makeMutationOutputCodec, Ru as makeMutationRunner, zu as makeOneShotQueryRunner, Fn as makeOriginGuardExemption, $i as makeOutboxFacade, eu as makeProcessAdapter, Bu as makeQueryDescriptorProducer, Nu as makeQueryFinalizer, Vu as makeQueryReauthorizer, Hu as makeQuerySubscriber, iu as makeRouterActivity, hc as makeRuleCapture, go as makeSchemaRegistry, Ia as makeStartConnectionExecutor, La as makeSubmitTokenExecutor, xt as makeSubscriptionOutbox, wi as makeTransactionalWorkflowFacade, uc as makeUndoCapture, au as makeWakeGate, ou as makeWakeProxyServer, Ti as makeWorkflowFacade, Ei as makeWorkflowFacadeWithCallerContext, Di as makeWorkflowHandlers, Oi as makeWorkflowLayers, ki as makeWorkflowRunHandle, Uu as makeWorkflowStartRunner, bs as markWakeupFired, dl as materializeIvm, Cn as maybeCompress, qr as memoryApiKeyStore, ai as memoryDeviceStore, ls as memoryReplicationAdapter, He as memoryRywPositionStore, wn as mergeCompressionHeaders, dt as mergeCookieHeader, Fo as mergeFleetObservations, oc as migrateCrdtColumn, es as mintServiceToken, pn as missingRowError, Tn as negotiateEncoding, zt as newTraceId, Xs as nextDelay, hs as nextFiring, xs as nextWakeup, tu as nodeProcessSupervisor, vu as noopAnalytics, yu as noopAnalyticsSpec, Br as noopKv, Wn as normalizeIp, In as normalizeOrigin, ue as noteRead, En as noteResumeVerdict, Ee as noteRowFilterResolved, xa as oauthCredentialValue, tn as observeStore, nn as observedGraph, _r as onProcessShutdown, Dr as otelImportFailure, ea as outboxAttemptsTable, ta as outboxTable, zc as parseApprovalInterval, Bt as parseTraceparent, Ai as payloadPropertyNames, Ls as peerRunIsAlive, Bc as pendingApprovalsFor, Jr as plantMissingApiKeyActors, ze as powerOfTwoSelector, sc as prepareSealedCrdtRestore, $n as preservesSameOriginHeader, Qu as previewInRollback, Sr as probeFor, Sa as projectConnectionState, Ss as pruneWakeups, Bi as publishEvent, kn as publishServerTracerLayer, St as pumpOutbox, m as rawSqlPreview, El as reactionDurationMs, Dl as reactionRateBucketKey, Ct as reactiveSocketTunables, Ut as readMaybeOne, Zs as readPollCeilingMs, de as readRecordingActive, Io as readReplicaObservations, qa as rebacPolicyGraph, j as recordCoalesced, ft as recordCredentialExpiry, G as recordEventDelivered, K as recordEventDropped, q as recordEventPublished, J as recordEventSubscribers, Y as recordExternalMissed, X as recordExternalTrigger, jt as recordForResume, M as recordOverrun, N as recordOversized, h as recordRawRead, fe as recordReads, Z as recordSample, Q as recordScheduleQueueRecovery, $ as recordScheduleQueueWait, ee as recordScheduleQueued, te as recordScheduleRun, P as recordStalled, ne as recordSubscriptionActive, re as recordSubscriptionDelivery, rn as recordTableAccess, tl as recordTimelineEvent, ie as recordWorkflowRun, pe as recordingStore, yo as redactColumns, nl as redactRow, Ue as redisRywPositionStore, Tc as redoUndoInvocation, Ca as refreshAccessToken, pt as registerConnectionStream, to as registerDefaultTupleSource, Gs as registerExternalizedTask, od as registerRetention, Cs as registerWakeup, Vc as rehydrateGuards, ws as releaseWakeup, Be as replicaHealth, vr as resetComputedQueryCacheWarnings, Mt as resetDetachedForTest, ae as resetEventMetricTagCacheForTests, an as resetObservedGraph, Lo as resetReplicaObservationWarnings, Dn as resetResumeCensus, Nt as resetResumeRingsForTest, De as resetRowFilterResolvedArms, Mr as resetSecretsBackend, F as resetSubscriptionSocketMetrics, Gn as resolveClientAddress, wa as resolveConnection, Ma as resolveConnectionForSubject, cs as resolveCurrentRegion, A as resolveDependentTables, Cr as resolveHealth, rt as resolveKeepAlive, Ln as resolveOriginGuardConfig, d as resolveReactiveConfig, Ta as resolveRedirectUri, Kn as resolveRequestClientAddress, qn as resolveRequestIsHttps, fl as resolveRescan, Oe as resolveRowFilterScope, ke as resolveRowFilterScopeFor, Nr as resolveSecret, Pr as resolveSecretSync, Fr as resolveSecretsBackend, er as resolveSecurityHeaders, rl as resolveTimelineMode, gs as resolveTransactionSubject, Jn as resolveTrustedProxies, cc as restoreCrdtVersion, me as restrictingReads, he as restrictingReadsEffect, ql as resultVariantNames, On as resumeCensus, Pt as resumeKeyOf, Ft as resumeTunables, sd as retentionTtlMsFromEnv, Xe as revalidatePath, Ze as revalidateTable, Qe as revalidateTag, il as reverseEventOverRows, Ja as revokedIds, Ae as rowFilterMayNarrow, je as rowFilterRegistered, Me as rowFilterResolvedArms, jo as rulesFor, Uo as runAsSystem, cu as runOrchestratorTick, Wu as runProvidedEffect, Ol as runReaction, lu as runSingleNodeOrchestrator, Ql as runWakeLoop, Gu as runWithDeadlockRetry, on as runWithObservedProcedure, g as runWithRawReadScope, Qa as runWithRequestLoader, Ke as runWithRoutingContext, qe as runWithRoutingContextEffect, Ht as runWithTraceContext, Ea as sanitizeRedirectTo, _s as scheduleBackfillRequestsTable, Qs as scheduleCoordinated, Co as schemaPropertyNames, Hc as scopeStringsOf, tr as securityHeadersFor, Qr as selectTenant, Uc as serializeGuards, Fe as serverOnlyColumnNames, wo as serverOnlyLeaks, An as serverTracer, ts as serviceCallerNextTokenEnv, ns as serviceCallerStrategy, rs as serviceCallerTokenEnv, is as serviceEnvSegment, I as setBufferedBytes, Na as setConnectionResolver, D as setCrdtAdmission, O as setCrdtBackend, k as setCrdtCompactMaxBytes, Qt as setFieldCipher, wt as setReactiveSocketTunables, It as setResumeTunables, $e as setRevalidationPublisher, Ne as setRowFilter, Ir as setSecretsBackend, jn as setServerTracer, ge as setSourceGapSink, Wo as setSystemStoreHandle, al as setTimelineRecorderForTest, no as setTupleSource, e as settleHandlerBody, Yr as sha256Hex, oi as sha256HexOf, yr as shutdownGraceMsFromEnv, Rs as singleCoordinator, lc as snapshotCrdt, oe as snapshotMetrics, se as snapshotMetricsSync, _e as sourceGapReport, oo as ssrfGuardHttpClientLayer, so as ssrfReason, br as startRpcServer, zs as startScheduler, Da as storeCredential, Ie as stripColumnsFromRows, Le as stripForbiddenForWire, Re as stripServerOnlyForWire, L as subscriptionSocketMetricSamples, R as subscriptionSocketMetricsSnapshot, Oa as sweepExpiredGrants, cd as sweepRetention, Cc as synthesizeInverse, $r as tenantSelectionId, ei as tenantSelectionStore, io as tracingHttpClientLayer, Ii as triggerWorkflow, Ts as tryClaimWakeup, mt as unbindConnection, dc as undoCaptureEnabled, Ec as undoLogExecutor, fc as undoSurfaceEnabled, Ks as unregisterExternalizedTask, Eo as unresolvedSources, _i as upsertRowEffect, vi as upsertRowOutcomeEffect, Ou as useAggregate, mu as useAnalytics, Rl as useCostBudget, Ml as useExpectation, Jl as useExperiment, Ya as visibleRows, $l as wakeDueOnce, ar as webhookVerificationOf, Ku as withRowFilter, Jo as withRpcAuthMiddleware, qu as withScopedRequest, Mn as withServerTracer, Kc as workflowDomainEventsExecutor, qc as workflowEventDeliveriesExecutor, Jc as workflowRowVisibleTo, Yc as workflowRunEventsExecutor, Xc as workflowRunExecutor, Zc as workflowRunStepsExecutor, Qc as workflowRunsExecutor, pc as wrapCaptureStore, _o as wrapStoreWithBootCodec, bn as wrapStoreWithMixinBehaviour, Ro as writeReplicaObservation };
+import { counter as z, eventMetricTagCacheSizeForTests as B, exponentialBoundaries as V, fieldDecryptSnapshot as H, gauge as U, histogramMetric as W, linearBoundaries as G, recordEventDelivered as K, recordEventDropped as q, recordEventPublished as J, recordEventSubscribers as Y, recordExternalMissed as X, recordExternalTrigger as Z, recordFieldDecrypt as Q, recordSample as $, recordScheduleQueueRecovery as ee, recordScheduleQueueWait as te, recordScheduleQueued as ne, recordScheduleRun as re, recordSubscriptionActive as ie, recordSubscriptionDelivery as ae, recordWorkflowRun as oe, resetEventMetricTagCacheForTests as se, resetFieldDecryptCountsForTests as ce, snapshotMetrics as le, snapshotMetricsSync as ue } from "./metrics.js";
+import { classifyRead as de } from "./readClassification.js";
+import { powerOfTwoSelector as fe } from "./replicaSelection.js";
+import { replicaHealth as pe } from "./replicaHealth.js";
+import { buildSubjectKey as me, memoryRywPositionStore as he, redisRywPositionStore as ge } from "./rywPositionStore.js";
+import { ReplicatedDataStore as _e, currentRoutingContext as ve, runWithRoutingContext as ye, runWithRoutingContextEffect as be } from "./replicatedDataStore.js";
+import { cachedComputedCall as xe, computedCacheKey as Se, computedQueryCacheCaptureInstalled as Ce, installComputedQueryCacheCapture as we, noteCacheVolatile as Te, noteDependency as Ee, queryCachePolicy as De, resetComputedQueryCacheCaptureForTests as Oe } from "./computedQueryCache.js";
+import { enterReadRecording as ke, noteRead as Ae, readRecordingActive as je, recordReads as Me, recordingStore as Ne, restrictingReads as Pe, restrictingReadsEffect as Fe, setSourceGapSink as Ie, sourceGapReport as Le } from "./readRecorder.js";
+import { DEFAULT_ROW_FILTER_RETRY as Re, NO_ROW_FILTER as ze, RowFilterDeclarationViolated as Be, RowFilterUnavailable as Ve, applyRowFilter as He, applyRowFilterToDescriptor as Ue, getRowFilter as We, makeDefaultRefilter as Ge, noteRowFilterResolved as Ke, resetRowFilterResolvedArms as qe, resolveRowFilterScope as Je, resolveRowFilterScopeFor as Ye, rowFilterMayNarrow as Xe, rowFilterRegistered as Ze, rowFilterResolvedArms as Qe, setRowFilter as $e } from "./rowFilter.js";
+import { forbiddenColumnsForSubject as et, serverOnlyColumnNames as tt, stripColumnsFromRows as nt, stripForbiddenForWire as rt, stripServerOnlyForWire as it } from "./wireColumnStrip.js";
+import { Dispatcher as at, deliveredRowCount as ot, snapshotEntryFor as st } from "./dispatcher.js";
+import { revalidatePath as ct, revalidateTable as lt, revalidateTag as ut, setRevalidationPublisher as dt } from "./revalidation.js";
+import { DEFAULT_KEEP_ALIVE_MS as ft, HEADERS_TIMEOUT_MARGIN_MS as pt, applyKeepAlive as mt, resolveKeepAlive as ht } from "./httpKeepAlive.js";
+import { _connectionStreamCount as gt, _resetConnectionCredentialsForTest as _t, applyConnectionCredential as vt, bindConnectionCredential as yt, getConnectionCredential as bt, getCredentialExpiry as xt, interruptConnectionStreams as St, mergeCookieHeader as Ct, recordCredentialExpiry as wt, registerConnectionStream as Tt, unbindConnection as Et } from "./connectionCredentials.js";
+import { RPC_CLIENT_ADDRESS_HEADER as Dt, getRpcConnection as Ot } from "./rpcConnections.js";
+import { DEFAULT_SOCKET_MAX_BUFFERED_BYTES as kt, DEFAULT_SOCKET_OVERRUN_AFTER_MS as At, DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES as jt, DEFAULT_SOCKET_STALL_WARN_AFTER_MS as Mt, makeSubscriptionOutbox as Nt, pumpOutbox as Pt, reactiveSocketTunables as Ft, setReactiveSocketTunables as It } from "./subscriptionOutbox.js";
+import { DEFAULT_RESUME_MAX_DELTAS as Lt, DEFAULT_RESUME_WINDOW_MS as Rt, adoptDetached as zt, answerResume as Bt, canonicalInputKey as Vt, detachForResume as Ht, recordForResume as Ut, resetDetachedForTest as Wt, resetResumeRingsForTest as Gt, resumeKeyOf as Kt, resumeTunables as qt, setResumeTunables as Jt } from "./subscriptionResume.js";
+import { externalSpanFromTraceparent as Yt, formatTraceparent as Xt, newTraceId as Zt, parseTraceparent as Qt } from "./traceparent.js";
+import { currentTraceContext as $t, runWithTraceContext as en } from "./traceContext.js";
+import { readMaybeOne as tn } from "./storeRead.js";
+import { CRDT_VERSIONS_TABLE as nn, _voltroCrdtVersionsTable as rn } from "./crdtVersionsTable.js";
+import { FieldKeyringConfigError as an, decryptField as on, deriveKey as sn, encryptField as cn, fieldKeyIdOf as ln, getFieldCipher as un, isFieldKeyring as dn, makeAesCipher as fn, makeFieldCipher as pn, makeFieldKeyring as mn, setFieldCipher as hn } from "./fieldCipher.js";
+import { enableGraphObservation as gn, isObservingGraph as _n, observeStore as vn, observedGraph as yn, recordTableAccess as bn, resetObservedGraph as xn, runWithObservedProcedure as Sn } from "./observedGraph.js";
+import { DeleteBuilder as Cn, NoRowFound as wn, OptimisticLockError as Tn, SelectBuilder as En, UpdateBuilder as Dn, makeFluentStore as On, missingRowError as kn } from "./storeQuery.js";
+import { TRANSACTION_READ_CONFLICT_NAME as An, TX_READ_VERSIONS_KEY as jn, TransactionReadConflict as Mn, actingUserId as Nn, applyDefined as Pn, isTransactionReadConflict as Fn, wrapStoreWithMixinBehaviour as In } from "./storeMiddleware.js";
+import { DEFAULT_COMPRESSION_MIN_BYTES as Ln, isCompressibleContentType as Rn, maybeCompress as zn, mergeCompressionHeaders as Bn, negotiateEncoding as Vn, negotiatedCompression as Hn } from "./httpCompression.js";
+import { noteResumeVerdict as Un, resetResumeCensus as Wn, resumeCensus as Gn } from "./resumeCensus.js";
+import { publishServerTracerLayer as Kn, serverTracer as qn, setServerTracer as Jn, withServerTracer as Yn } from "./serverTracer.js";
+import { classifyRequestOrigin as Xn, isStateChangingMethod as Zn, makeOriginGuardExemption as Qn, normalizeOrigin as $n, resolveOriginGuardConfig as er } from "./originGuard.js";
+import { BOOT_REFUSAL_NAME as tr, bootRefusal as nr, isBootRefusal as rr } from "./boot-refusal.js";
+import { NO_TRUSTED_PROXIES as ir, ipToBytes as ar, isTrustedProxy as or, normalizeIp as sr, resolveClientAddress as cr, resolveRequestClientAddress as lr, resolveRequestIsHttps as ur, resolveTrustedProxies as dr } from "./trustedProxy.js";
+import { API_CSP as fr, DEFAULT_HSTS as pr, HTML_CSP as mr, ORIGIN_NULLING_REFERRER_POLICIES as hr, preservesSameOriginHeader as gr, resolveSecurityHeaders as _r, securityHeadersFor as vr } from "./securityHeaders.js";
+import { UnverifiedWebhookRoute as yr, WEBHOOK_VERIFICATION_PROPERTY as br, assertWebhookRoutesDeclareVerification as xr, webhookVerificationOf as Sr } from "./webhookVerification.js";
+import { DEFAULT_MAX_RPC_BODY_BYTES as Cr, awaitServerListening as wr, bindComputedUntyped as Tr, bindMutation as Er, bindStream as Dr, bindSubscription as Or, bindSubscriptionUntyped as kr, defectMessage as Ar, drainForShutdown as jr, isInfraError as Mr, makeMutationCodec as Nr, onProcessShutdown as Pr, shutdownGraceMsFromEnv as Fr, startRpcServer as Ir } from "./rpcServer.js";
+import { answerProbe as Lr, probeFor as Rr, resolveHealth as zr } from "./healthProbes.js";
+import { engineClientsSnapshot as Br, parseEngineSdkHeader as Vr } from "./engineClients.js";
+import { bindBootListener as Hr, bootHoldMsFromEnv as Ur } from "./bootListener.js";
+import { buildTracingLayer as Wr, describeOtelReasons as Gr, otelImportFailure as Kr } from "./observability.js";
+import { makeBufferingSpanProcessor as qr } from "./traceSink.js";
+import { cachedBackend as Jr, envSecretsBackend as Yr, httpSecretsBackend as Xr, resetSecretsBackend as Zr, resolveSecret as Qr, resolveSecretSync as $r, resolveSecretsBackend as ei, setSecretsBackend as ti } from "./secretsResolver.js";
+import { FIELD_ENCRYPTION_ACTIVE_ENV as ni, FIELD_ENCRYPTION_KEYS_ENV as ri, FIELD_ENCRYPTION_KEY_ENV as ii, FIELD_ENCRYPTION_PREVIOUS_KEY_ENV as ai, FIELD_KEYRING_ENV_NAMES as oi, resolveFieldKeyring as si } from "./fieldKeyring.js";
+import { FIELD_KEYS_TABLE as ci, FIELD_KEY_HEARTBEAT_MS as li, FIELD_KEY_HOLDERS_TABLE as ui, FIELD_KEY_LEASE_MS as di, FIELD_KEY_REPORTS_TABLE as fi, FieldKeyringRefusal as pi, _voltroFieldKeyHoldersTable as mi, _voltroFieldKeyReportsTable as hi, _voltroFieldKeysTable as gi, activateFieldKeyNow as _i, checkFieldKeyring as vi, fieldKeyHolderId as yi, heartbeatFieldKeys as bi, readFieldKeyHolders as xi, readFieldKeyReports as Si, readFieldKeys as Ci, recordFieldKeyReport as wi, registerFieldKey as Ti, releaseFieldKeyHolder as Ei, retireFieldKey as Di, startFieldKeyHolder as Oi, verifyFieldKeyring as ki } from "./fieldKeyRegistry.js";
+import { declaredEncryptedColumns as Ai, declaredRenames as ji, fieldKeyStatus as Mi } from "./fieldKeyScan.js";
+import { nullUnreadableSealedValues as Ni, openCell as Pi, rekeyCell as Fi, rekeySealedValues as Ii, verifySealedValues as Li } from "./fieldKeyRekey.js";
+import { dataStoreIdempotencyStore as Ri } from "./idempotencyStore.js";
+import { dataStoreKvStore as zi } from "./kvDataStore.js";
+import { makeAsyncKv as Bi, noopKv as Vi } from "./kvFacade.js";
+import { ACTORS_TABLE as Hi, API_KEYS_TABLE as Ui, dataStoreApiKeyStore as Wi, generateApiKeyToken as Gi, lockApiKeyById as Ki, makeApiKeyService as qi, makeApiKeyUsageFlusher as Ji, memoryApiKeyStore as Yi, plantMissingApiKeyActors as Xi, sha256Hex as Zi } from "./apiKeys.js";
+import { TENANT_SELECTIONS_TABLE as Qi, clearTenantSelection as $i, selectTenant as ea, tenantSelectionId as ta, tenantSelectionStore as na } from "./tenantSelection.js";
+import { DEVICES_TABLE as ra, dataStoreDeviceStore as ia, deviceTokenPrefixes as aa, makeDeviceService as oa, memoryDeviceStore as sa, sha256HexOf as ca } from "./devices.js";
+import { deviceManagementRoutes as la, frameworkDeviceStrategy as ua } from "./devicesWiring.js";
+import { apiKeyManagementRoutes as da, frameworkApiKeyStrategy as fa } from "./apiKeysWiring.js";
+import { SYSTEM_SUBJECT as pa } from "./systemSubject.js";
+import { EffectStore as ma, insertIgnoreRowOutcomeEffect as ha, insertManyRowsEffect as ga, insertRowEffect as _a, makeEffectStoreLayer as va, upsertRowEffect as ya, upsertRowOutcomeEffect as ba } from "./effectStore.js";
+import { WorkflowPayloadError as xa, WorkflowRateLimitedError as Sa, WorkflowSingletonHeldError as Ca, WorkflowStartNotExecuted as wa, makeLazyWorkflowFacade as Ta, makeTransactionalWorkflowFacade as Ea, makeWorkflowFacade as Da, makeWorkflowFacadeWithCallerContext as Oa, makeWorkflowHandlers as ka, makeWorkflowLayers as Aa, makeWorkflowRunHandle as ja, payloadPropertyNames as Ma } from "./workflowRuntime.js";
+import { _voltroWorkflowEventDeliveriesTable as Na, _voltroWorkflowEventsTable as Pa, defineEventTrigger as Fa, isWorkflowEventTriggerDefinition as Ia, makeEventsFacade as La, triggerWorkflow as Ra } from "./events.js";
+import { EventBus as za } from "./eventBus.js";
+import { OutboxEventPublisher as Ba, makeEventPublisher as Va, publishEvent as Ha } from "./eventPublish.js";
+import { EVENT_CLIENT_QUEUE_SIZE as Ua, EVENT_LATEST_QUEUE_SIZE as Wa, bindEvent as Ga, makeBufferGapDetector as Ka } from "./bindEvent.js";
+import { InstanceMembership as qa } from "./instanceMembership.js";
+import { DEFAULT_OUTBOX_CLAIM_LEASE_MS as Ja, OUTBOX_ATTEMPTS_TABLE as Ya, OUTBOX_ATTEMPT_LOG_CAP as Xa, OUTBOX_TABLE as Za, backoffMs as Qa, defineOutboxHandler as $a, drainOutbox as eo, makeOutboxFacade as to, outboxAttemptsTable as no, outboxTable as ro } from "./outbox.js";
+import { CONNECTIONS_TABLE as io, CONNECTION_GRANTS_TABLE as ao, ConnectionNotConnected as oo, DEFAULT_REFRESH_SKEW_MS as so, GRANT_TTL_MS as co, REFRESH_LEASE_MS as lo, _voltroConnectionGrantsTable as uo, _voltroConnectionsTable as fo, assertConnectionCipherConfigured as po, beginOAuthConnect as mo, clearConnectionRefreshFlights as ho, completeOAuthConnect as go, connectionCallbackPath as _o, connectionLabel as vo, defineConnection as yo, exchangeAuthorizationCode as bo, forgetCredential as xo, listConnectionStates as So, makeConnectionRegistry as Co, oauthCredentialValue as wo, projectConnectionState as To, refreshAccessToken as Eo, resolveConnection as Do, resolveRedirectUri as Oo, sanitizeRedirectTo as ko, storeCredential as Ao, sweepExpiredGrants as jo } from "./connectionVault.js";
+import { getConnectionResolver as Mo, makeConnectionResolver as No, makeConnectionsFacade as Po, resolveConnectionForSubject as Fo, setConnectionResolver as Io } from "./connectionsFacade.js";
+import { makeDisconnectConnectionExecutor as Lo, makeListConnectionsExecutor as Ro, makeStartConnectionExecutor as zo, makeSubmitTokenExecutor as Bo } from "./connectionBuiltins.js";
+import { AccessDenied as Vo, REBAC_ADMIN_SCOPE as Ho, assertCan as Uo, can as Wo, clearResourcePolicies as Go, defineResourcePolicy as Ko, effectiveRelations as qo, getResourcePolicy as Jo, listResourcePolicies as Yo, rebacPolicyGraph as Xo, revokedIds as Zo, visibleRows as Qo } from "./rebac.js";
+import { currentRequestLoader as $o, enterRequestLoader as es, runWithRequestLoader as ts } from "./requestLoader.js";
+import { getTupleSource as ns, installPolicyGuardResolver as rs, registerDefaultTupleSource as is, setTupleSource as as } from "./policyGuardResolver.js";
+import { makeDataLoader as os } from "./dataloader.js";
+import { tracingHttpClientLayer as ss } from "./httpClientTracing.js";
+import { SsrfBlockedError as cs, ssrfGuardHttpClientLayer as ls, ssrfReason as us } from "./httpClientSsrf.js";
+import { makeApiKeyUsageBuffer as ds } from "./apiKeyUsage.js";
+import { VOLTRO_AUDIT_MIXIN_ID as fs, VOLTRO_EXPIRES_MIXIN_ID as ps, VOLTRO_LOCAL_FIRST_MIXIN_ID as ms, VOLTRO_SOFT_DELETE_MIXIN_ID as hs, VOLTRO_TENANT_MIXIN_ID as gs, emptySchemaRegistry as _s, makeSchemaRegistry as vs } from "./schemaRegistry.js";
+import { wrapStoreWithBootCodec as ys } from "./bootStoreCodec.js";
+import { crud as bs, redactColumns as xs } from "./crud.js";
+import { cacheScopeLeaks as Ss, formatCacheScopeLeaks as Cs, formatServerOnlyLeaks as ws, schemaPropertyNames as Ts, serverOnlyLeaks as Es } from "./serverOnlyAudit.js";
+import { formatUnresolvedSources as Ds, unresolvedSources as Os } from "./sourceResolution.js";
+import { applyPluginRefRules as ks, collectPluginRefRules as As, collectReferenceSoftDeleteRules as js, isSoftDelete as Ms, rulesFor as Ns } from "./pluginRefRules.js";
+import { DEFAULT_STALE_AFTER_MS as Ps, REPLICA_OBSERVATIONS_TABLE as Fs, forgetReplicaObservations as Is, mergeFleetObservations as Ls, readReplicaObservations as Rs, resetReplicaObservationWarnings as zs, writeReplicaObservation as Bs } from "./replicaObservations.js";
+import { CircuitBreaker as Vs, CircuitOpen as Hs } from "./circuitBreaker.js";
+import { clearSystemStoreHandle as Us, getSystemStoreHandle as Ws, runAsSystem as Gs, setSystemStoreHandle as Ks } from "./runAsSystem.js";
+import { inspectWorkflow as qs } from "./inspectWorkflow.js";
+import { makeConnectionState as Js } from "./connectionState.js";
+import { makeAuthMiddlewareLayers as Ys, observeConnectionHeaders as Xs, withRpcAuthMiddleware as Zs } from "./authMiddlewareLayer.js";
+import { SERVICE_TOKEN_PREFIX as Qs, apiBindingTokenEnv as $s, apiBindingUrlEnv as ec, assertServiceCallersConfig as tc, isWellFormedServiceToken as nc, mintServiceToken as rc, serviceCallerNextTokenEnv as ic, serviceCallerStrategy as ac, serviceCallerTokenEnv as oc, serviceEnvSegment as sc } from "./serviceCredentials.js";
+import { UndeclaredTableAccess as cc, guardUndeclaredTables as lc } from "./declaredTablesGuard.js";
+import { localityAwareSelector as uc, resolveCurrentRegion as dc } from "./replicaLocality.js";
+import { memoryReplicationAdapter as fc } from "./dialectReplicationAdapter.js";
+import { DEFAULT_MAX_RUNTIME_MS as pc, compileCron as mc, cronOccurrences as hc, defineSchedule as gc, isScheduleDefinition as _c, nextFiring as vc } from "./schedule.js";
+import { resolveTransactionSubject as yc } from "./transactionSubject.js";
+import { scheduleBackfillRequestsTable as bc } from "./scheduleBackfillRequests.js";
+import { cancelWakeup as xc, dueWakeups as Sc, markWakeupFired as Cc, nextWakeup as wc, pruneWakeups as Tc, registerWakeup as Ec, releaseWakeup as Dc, tryClaimWakeup as Oc } from "./wakeRegistry.js";
+import { CLAIM_RETENTION_BUCKETS as kc, DEFAULT_CLAIM_BUCKET_MS as Ac, DEFAULT_EXTERNAL_RECONCILE_MS as jc, DEFAULT_EXTERNAL_TRIGGER_SKEW_MS as Mc, DEFAULT_SCHEDULE_HEARTBEAT_MS as Nc, DORMANCY_WAKEUP_TENANT as Pc, EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS as Fc, SCHEDULE_SUBJECT as Ic, TERMINAL_RUN_STATUSES as Lc, claimGraceMs as Rc, makeAdvisoryLockCoordinator as zc, peerRunIsAlive as Bc, singleCoordinator as Vc, startScheduler as Hc } from "./scheduler.js";
+import { MIN_EXTERNALIZABLE_INTERVAL_MS as Uc, cronForInterval as Wc, externalizationRefusal as Gc, externalizedTask as Kc, externalizedTaskNames as qc, makeExternalizedTaskRegistry as Jc, registerExternalizedTask as Yc } from "./externalizedTasks.js";
+import { DEFAULT_MAX_IDLE_INTERVAL_MS as Xc, inspectCoordinatedSchedule as Zc, makeCoordinatedScheduler as Qc, nextDelay as $c, readPollCeilingMs as el, scheduleCoordinated as tl } from "./coordinatedSchedule.js";
+import { _voltroScheduleRunsTable as nl } from "./scheduleRunsTable.js";
+import { _voltroScheduleClaimsTable as rl } from "./scheduleClaimsTable.js";
+import { _voltroChangeClaimsTable as il } from "./changeClaimsTable.js";
+import { _voltroTracesTable as al } from "./traceSpansTable.js";
+import { _voltroUndoLogTable as ol } from "./undoLogTable.js";
+import { crdtCellStats as sl, listCrdtVersions as cl, migrateCrdtColumn as ll, prepareSealedCrdtRestore as ul, restoreCrdtVersion as dl, snapshotCrdt as fl } from "./crdtHistory.js";
+import { makeUndoCapture as pl, undoCaptureEnabled as ml, undoSurfaceEnabled as hl, wrapCaptureStore as gl } from "./undoCapture.js";
+import { evaluateTouchedRules as _l, makeRuleCapture as vl } from "./businessRules.js";
+import { UndoBoundaryError as yl, UndoStack as bl, applyInverse as xl, applyInverses as Sl, forwardChangeFromCdc as Cl, invertChange as wl, isSafeToApply as Tl, synthesizeInverse as El } from "./undo.js";
+import { applyUndoInvocation as Dl, redoUndoInvocation as Ol, undoLogExecutor as kl } from "./undoBuiltins.js";
+import { APPROVALS_TABLE as Al, DEFAULT_APPROVAL_EXPIRY_MS as jl, _voltroApprovalsTable as Ml, approvalIntentKey as Nl, approvalNonce as Pl, canonicalJson as Fl, clearApprovalGate as Il, decideApproval as Ll, enforceApproval as Rl, getApprovalGate as zl, installApprovalGate as Bl, makeApprovalGate as Vl, parseApprovalInterval as Hl, pendingApprovalsFor as Ul, rehydrateGuards as Wl, scopeStringsOf as Gl, serializeGuards as Kl } from "./approvals.js";
+import { approvalsPendingExecutor as ql, decideApprovalInvocation as Jl } from "./approvalBuiltins.js";
+import { workflowDomainEventsExecutor as Yl, workflowEventDeliveriesExecutor as Xl, workflowRowVisibleTo as Zl, workflowRunEventsExecutor as Ql, workflowRunExecutor as $l, workflowRunStepsExecutor as eu, workflowRunsExecutor as tu } from "./workflowReadBuiltins.js";
+import { TimelineRecorder as nu, getTimelineRecorder as ru, recordTimelineEvent as iu, redactRow as au, resolveTimelineMode as ou, reverseEventOverRows as su, setTimelineRecorderForTest as cu } from "./timeline.js";
+import { applyDelta as lu, buildIvmState as uu, classifyShape as du, groupKeyOf as fu, ivmValue as pu, materializeIvm as mu, resolveRescan as hu } from "./ivm.js";
+import { AggregateMaintainer as gu } from "./aggregateIvm.js";
+import { _voltroRebacTuplesTable as _u, buildRebacInterceptor as vu, buildRebacReadFilter as yu, loadResourceTuples as bu, loadSubjectTuples as xu } from "./rebacInterceptor.js";
+import { DEFAULT_LEVEL_RESYNC_MS as Su, DEFAULT_LEVEL_STUCK_MS as Cu, MIN_LEVEL_RESYNC_MS as wu, ReactionRateLimiter as Tu, defineReaction as Eu, isLevelReaction as Du, isLevelWatch as Ou, reactionDurationMs as ku, reactionRateBucketKey as Au, runReaction as ju } from "./reaction.js";
+import { ExpectationRegistry as Mu, defineExpectation as Nu, isExpectationDefinition as Pu, useExpectation as Fu } from "./expectation.js";
+import { ExpectationEvaluator as Iu, attachExpectations as Lu } from "./expectationEvaluator.js";
+import { CostRegistry as Ru, defineCostBudget as zu, isCostBudgetDefinition as Bu, useCostBudget as Vu } from "./finops.js";
+import { CostAccountant as Hu, attachFinops as Uu } from "./finopsAccountant.js";
+import { ExperimentRegistry as Wu, HOLDOUT_VARIANT as Gu, assignVariant as Ku, defineExperiment as qu, hashUnitInterval as Ju, isExperimentDefinition as Yu, resultVariantNames as Xu, useExperiment as Zu } from "./experiment.js";
+import { ExperimentEvaluator as Qu, attachExperiments as $u } from "./experimentEvaluator.js";
+import { _voltroWakeupsTable as ed } from "./wakeupsTable.js";
+import { runWakeLoop as td, wakeDueOnce as nd } from "./wakeOrchestrator.js";
+import { makeProcessAdapter as rd, nodeProcessSupervisor as id } from "./wakeSupervisor.js";
+import { isIdleNow as ad, makeIdleGate as od } from "./idleDetector.js";
+import { makeRouterActivity as sd, makeWakeGate as cd, makeWakeProxyServer as ld } from "./wakeRouter.js";
+import { countRunningWorkflows as ud, runOrchestratorTick as dd, runSingleNodeOrchestrator as fd } from "./singleNodeOrchestrator.js";
+import { defineSubscriber as pd } from "./subscriber.js";
+import { AnalyticsCapabilityNotSupported as md, AnalyticsError as hd, AnalyticsSink as gd, useAnalytics as _d } from "./analyticsSink.js";
+import { NOOP_ANALYTICS_PROVIDER as vd, composeAnalytics as yd, composeAnalyticsSinks as bd, noopAnalytics as xd, noopAnalyticsSpec as Sd } from "./composeAnalytics.js";
+import { DEFAULT_ANALYTICS_MIRROR_TUNABLES as Cd, attachAnalyticsMirror as wd } from "./analyticsMirror.js";
+import { AggregateError as Td, AggregateNotFound as Ed, AggregateRegistry as Dd, AggregateStale as Od, defineAggregate as kd, isAggregateDefinition as Ad, useAggregate as jd } from "./aggregate.js";
+import { applySoftDeleteScope as Md, applyTenantScope as Nd, isEmptyTenantScopedRead as Pd, isOrglessUserSubject as Fd, makeQueryFinalizer as Id } from "./tenantScope.js";
+import { defineExecutor as Ld } from "./defineExecutor.js";
+import { apiRoleMetricLabel as Rd, makeApiRoleWorkloadMetrics as zd, observeApiRoleEffect as Bd } from "./apiRoleWorkloadMetrics.js";
+import { DEFAULT_MUTATION_REPLAY_ATTEMPTS as Vd, applyDeclaredRelations as Hd, makeActionRunner as Ud, makeMutationReplayAdmission as Wd, makeMutationRunner as Gd, makeOneShotQueryRunner as Kd, makeQueryDescriptorProducer as qd, makeQueryReauthorizer as Jd, makeQuerySubscriber as Yd, makeWorkflowStartRunner as Xd, runProvidedEffect as Zd, runWithDeadlockRetry as Qd, withRowFilter as $d, withScopedRequest as ef } from "./servePipeline.js";
+import { decodeSnapshotValue as tf, encodeSnapshotValue as nf } from "./snapshotValueCodec.js";
+import { historyProvenance as rf, lastWriteProvenance as af } from "./provenance.js";
+import { buildPreview as of, diffChange as sf, previewInRollback as cf } from "./preview.js";
+import { API_ROLE_BUCKET_MS as lf, API_ROLE_WINDOW_MS as uf, assessApiRoleWorkloadWindow as df } from "./apiRoleWorkloadHistory.js";
+import { API_ROLE_WORKLOAD_BUCKETS_TABLE as ff, readApiRoleWorkloadWindow as pf, writeApiRoleWorkloadBucket as mf } from "./apiRoleWorkloadStorage.js";
+import { makeApiRoleBucketSampler as hf } from "./apiRoleBucketSampler.js";
+import { classifyConstraintViolation as gf, clearRetentions as _f, extractDbCause as vf, isForeignKeyViolation as yf, isQueryTimeout as bf, listRetentionConflicts as xf, listRetentions as Sf, registerRetention as Cf, retentionTtlMsFromEnv as wf, sweepRetention as Tf } from "@voltro/database";
+import { ConstraintViolation as Ef, ServerOnlyColumnWrite as Df, StoreOperationFailed as Of, TableValidationFailed as kf, TenantRowNotFound as Af, TenantScopeViolation as jf } from "@voltro/protocol";
+// src/index.ts
+var Mf = "framework-runtime";
+export { Hi as ACTORS_TABLE, fr as API_CSP, Ui as API_KEYS_TABLE, lf as API_ROLE_BUCKET_MS, uf as API_ROLE_WINDOW_MS, ff as API_ROLE_WORKLOAD_BUCKETS_TABLE, Al as APPROVALS_TABLE, Vo as AccessDenied, Td as AggregateError, gu as AggregateMaintainer, Ed as AggregateNotFound, Dd as AggregateRegistry, Od as AggregateStale, md as AnalyticsCapabilityNotSupported, hd as AnalyticsError, gd as AnalyticsSink, tr as BOOT_REFUSAL_NAME, kc as CLAIM_RETENTION_BUCKETS, io as CONNECTIONS_TABLE, ao as CONNECTION_GRANTS_TABLE, nn as CRDT_VERSIONS_TABLE, Vs as CircuitBreaker, Hs as CircuitOpen, oo as ConnectionNotConnected, Ef as ConstraintViolation, Hu as CostAccountant, Ru as CostRegistry, Cd as DEFAULT_ANALYTICS_MIRROR_TUNABLES, jl as DEFAULT_APPROVAL_EXPIRY_MS, Ac as DEFAULT_CLAIM_BUCKET_MS, Ln as DEFAULT_COMPRESSION_MIN_BYTES, _ as DEFAULT_CRDT_COMPACT_MAX_BYTES, v as DEFAULT_CRDT_MAX_DOCUMENT_BYTES, y as DEFAULT_CRDT_MAX_UPDATE_BYTES, b as DEFAULT_CRDT_REBASE_MAX_BYTES, l as DEFAULT_DELIVERY_CONCURRENCY, jc as DEFAULT_EXTERNAL_RECONCILE_MS, Mc as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, pr as DEFAULT_HSTS, ft as DEFAULT_KEEP_ALIVE_MS, Su as DEFAULT_LEVEL_RESYNC_MS, Cu as DEFAULT_LEVEL_STUCK_MS, Xc as DEFAULT_MAX_IDLE_INTERVAL_MS, Cr as DEFAULT_MAX_RPC_BODY_BYTES, pc as DEFAULT_MAX_RUNTIME_MS, Vd as DEFAULT_MUTATION_REPLAY_ATTEMPTS, Ja as DEFAULT_OUTBOX_CLAIM_LEASE_MS, u as DEFAULT_RAW_READ_TRACKING_LIMIT, so as DEFAULT_REFRESH_SKEW_MS, Lt as DEFAULT_RESUME_MAX_DELTAS, Rt as DEFAULT_RESUME_WINDOW_MS, Re as DEFAULT_ROW_FILTER_RETRY, Nc as DEFAULT_SCHEDULE_HEARTBEAT_MS, kt as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, At as DEFAULT_SOCKET_OVERRUN_AFTER_MS, jt as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, Mt as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, Ps as DEFAULT_STALE_AFTER_MS, ra as DEVICES_TABLE, Pc as DORMANCY_WAKEUP_TENANT, Cn as DeleteBuilder, at as Dispatcher, Ua as EVENT_CLIENT_QUEUE_SIZE, Wa as EVENT_LATEST_QUEUE_SIZE, Fc as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, ma as EffectStore, za as EventBus, Iu as ExpectationEvaluator, Mu as ExpectationRegistry, Qu as ExperimentEvaluator, Wu as ExperimentRegistry, ni as FIELD_ENCRYPTION_ACTIVE_ENV, ri as FIELD_ENCRYPTION_KEYS_ENV, ii as FIELD_ENCRYPTION_KEY_ENV, ai as FIELD_ENCRYPTION_PREVIOUS_KEY_ENV, oi as FIELD_KEYRING_ENV_NAMES, ci as FIELD_KEYS_TABLE, li as FIELD_KEY_HEARTBEAT_MS, ui as FIELD_KEY_HOLDERS_TABLE, di as FIELD_KEY_LEASE_MS, fi as FIELD_KEY_REPORTS_TABLE, an as FieldKeyringConfigError, pi as FieldKeyringRefusal, co as GRANT_TTL_MS, pt as HEADERS_TIMEOUT_MARGIN_MS, Gu as HOLDOUT_VARIANT, mr as HTML_CSP, o as InMemoryDataStore, t as IndexedMatcher, qa as InstanceMembership, n as LinearScanMatcher, Uc as MIN_EXTERNALIZABLE_INTERVAL_MS, wu as MIN_LEVEL_RESYNC_MS, vd as NOOP_ANALYTICS_PROVIDER, ze as NO_ROW_FILTER, ir as NO_TRUSTED_PROXIES, wn as NoRowFound, hr as ORIGIN_NULLING_REFERRER_POLICIES, Ya as OUTBOX_ATTEMPTS_TABLE, Xa as OUTBOX_ATTEMPT_LOG_CAP, Za as OUTBOX_TABLE, Tn as OptimisticLockError, Ba as OutboxEventPublisher, Ho as REBAC_ADMIN_SCOPE, lo as REFRESH_LEASE_MS, Fs as REPLICA_OBSERVATIONS_TABLE, Dt as RPC_CLIENT_ADDRESS_HEADER, Mf as RUNTIME_NAME, Tu as ReactionRateLimiter, _e as ReplicatedDataStore, Be as RowFilterDeclarationViolated, Ve as RowFilterUnavailable, Ic as SCHEDULE_SUBJECT, Qs as SERVICE_TOKEN_PREFIX, pa as SYSTEM_SUBJECT, En as SelectBuilder, Df as ServerOnlyColumnWrite, cs as SsrfBlockedError, Of as StoreOperationFailed, a as SubscriptionRegistry, Qi as TENANT_SELECTIONS_TABLE, Lc as TERMINAL_RUN_STATUSES, An as TRANSACTION_READ_CONFLICT_NAME, jn as TX_READ_VERSIONS_KEY, kf as TableValidationFailed, Af as TenantRowNotFound, jf as TenantScopeViolation, nu as TimelineRecorder, Mn as TransactionReadConflict, cc as UndeclaredTableAccess, yl as UndoBoundaryError, bl as UndoStack, yr as UnverifiedWebhookRoute, Dn as UpdateBuilder, fs as VOLTRO_AUDIT_MIXIN_ID, ps as VOLTRO_EXPIRES_MIXIN_ID, ms as VOLTRO_LOCAL_FIRST_MIXIN_ID, hs as VOLTRO_SOFT_DELETE_MIXIN_ID, gs as VOLTRO_TENANT_MIXIN_ID, br as WEBHOOK_VERIFICATION_PROPERTY, xa as WorkflowPayloadError, Sa as WorkflowRateLimitedError, Ca as WorkflowSingletonHeldError, wa as WorkflowStartNotExecuted, gt as _connectionStreamCount, _t as _resetConnectionCredentialsForTest, Ml as _voltroApprovalsTable, il as _voltroChangeClaimsTable, uo as _voltroConnectionGrantsTable, fo as _voltroConnectionsTable, rn as _voltroCrdtVersionsTable, mi as _voltroFieldKeyHoldersTable, hi as _voltroFieldKeyReportsTable, gi as _voltroFieldKeysTable, _u as _voltroRebacTuplesTable, rl as _voltroScheduleClaimsTable, nl as _voltroScheduleRunsTable, al as _voltroTracesTable, ol as _voltroUndoLogTable, ed as _voltroWakeupsTable, Na as _voltroWorkflowEventDeliveriesTable, Pa as _voltroWorkflowEventsTable, Nn as actingUserId, _i as activateFieldKeyNow, zt as adoptDetached, Lr as answerProbe, Bt as answerResume, $s as apiBindingTokenEnv, ec as apiBindingUrlEnv, da as apiKeyManagementRoutes, Rd as apiRoleMetricLabel, s as appValidation, vt as applyConnectionCredential, Hd as applyDeclaredRelations, Pn as applyDefined, lu as applyDelta, xl as applyInverse, Sl as applyInverses, mt as applyKeepAlive, ks as applyPluginRefRules, He as applyRowFilter, Ue as applyRowFilterToDescriptor, Md as applySoftDeleteScope, Nd as applyTenantScope, Dl as applyUndoInvocation, Nl as approvalIntentKey, Pl as approvalNonce, ql as approvalsPendingExecutor, Uo as assertCan, po as assertConnectionCipherConfigured, tc as assertServiceCallersConfig, xr as assertWebhookRoutesDeclareVerification, df as assessApiRoleWorkloadWindow, Ku as assignVariant, wd as attachAnalyticsMirror, Lu as attachExpectations, $u as attachExperiments, Uu as attachFinops, wr as awaitServerListening, Qa as backoffMs, mo as beginOAuthConnect, Hr as bindBootListener, Tr as bindComputedUntyped, yt as bindConnectionCredential, Ga as bindEvent, Er as bindMutation, Dr as bindStream, Or as bindSubscription, kr as bindSubscriptionUntyped, Ur as bootHoldMsFromEnv, nr as bootRefusal, uu as buildIvmState, of as buildPreview, vu as buildRebacInterceptor, yu as buildRebacReadFilter, me as buildSubjectKey, Wr as buildTracingLayer, Ss as cacheScopeLeaks, Jr as cachedBackend, xe as cachedComputedCall, Wo as can, xc as cancelWakeup, Vt as canonicalInputKey, Fl as canonicalJson, r as canonicalize, vi as checkFieldKeyring, Rc as claimGraceMs, gf as classifyConstraintViolation, de as classifyRead, Xn as classifyRequestOrigin, du as classifyShape, Il as clearApprovalGate, ho as clearConnectionRefreshFlights, Go as clearResourcePolicies, _f as clearRetentions, Us as clearSystemStoreHandle, $i as clearTenantSelection, As as collectPluginRefRules, js as collectReferenceSoftDeleteRules, mc as compileCron, go as completeOAuthConnect, yd as composeAnalytics, bd as composeAnalyticsSinks, Se as computedCacheKey, Ce as computedQueryCacheCaptureInstalled, _o as connectionCallbackPath, vo as connectionLabel, ud as countRunningWorkflows, z as counter, sl as crdtCellStats, x as crdtCompactMaxBytes, S as crdtMaxDocumentBytes, C as crdtMaxUpdateBytes, w as crdtMigrationsFor, T as crdtRebaseMaxBytes, Wc as cronForInterval, hc as cronOccurrences, bs as crud, f as currentRawReads, $o as currentRequestLoader, ve as currentRoutingContext, $t as currentTraceContext, Wi as dataStoreApiKeyStore, ia as dataStoreDeviceStore, Ri as dataStoreIdempotencyStore, zi as dataStoreKvStore, Ll as decideApproval, Jl as decideApprovalInvocation, Ai as declaredEncryptedColumns, ji as declaredRenames, tf as decodeSnapshotValue, on as decryptField, Ar as defectMessage, kd as defineAggregate, yo as defineConnection, zu as defineCostBudget, Fa as defineEventTrigger, Ld as defineExecutor, Nu as defineExpectation, qu as defineExperiment, $a as defineOutboxHandler, Eu as defineReaction, Ko as defineResourcePolicy, gc as defineSchedule, pd as defineSubscriber, ot as deliveredRowCount, sn as deriveKey, E as describeCrdtState, Gr as describeOtelReasons, Ht as detachForResume, la as deviceManagementRoutes, aa as deviceTokenPrefixes, sf as diffChange, jr as drainForShutdown, eo as drainOutbox, Sc as dueWakeups, qo as effectiveRelations, _s as emptySchemaRegistry, gn as enableGraphObservation, nf as encodeSnapshotValue, cn as encryptField, Rl as enforceApproval, Br as engineClientsSnapshot, ke as enterReadRecording, es as enterRequestLoader, Yr as envSecretsBackend, _l as evaluateTouchedRules, B as eventMetricTagCacheSizeForTests, bo as exchangeAuthorizationCode, V as exponentialBoundaries, Yt as externalSpanFromTraceparent, Gc as externalizationRefusal, Kc as externalizedTask, qc as externalizedTaskNames, vf as extractDbCause, H as fieldDecryptSnapshot, yi as fieldKeyHolderId, ln as fieldKeyIdOf, Mi as fieldKeyStatus, i as fingerprintFor, et as forbiddenColumnsForSubject, xo as forgetCredential, Is as forgetReplicaObservations, Cs as formatCacheScopeLeaks, ws as formatServerOnlyLeaks, Xt as formatTraceparent, Ds as formatUnresolvedSources, Cl as forwardChangeFromCdc, fa as frameworkApiKeyStrategy, ua as frameworkDeviceStrategy, U as gauge, Gi as generateApiKeyToken, zl as getApprovalGate, bt as getConnectionCredential, Mo as getConnectionResolver, xt as getCredentialExpiry, un as getFieldCipher, Jo as getResourcePolicy, We as getRowFilter, Ot as getRpcConnection, Ws as getSystemStoreHandle, ru as getTimelineRecorder, ns as getTupleSource, fu as groupKeyOf, lc as guardUndeclaredTables, Ju as hashUnitInterval, bi as heartbeatFieldKeys, W as histogramMetric, rf as historyProvenance, Xr as httpSecretsBackend, ha as insertIgnoreRowOutcomeEffect, ga as insertManyRowsEffect, _a as insertRowEffect, Zc as inspectCoordinatedSchedule, qs as inspectWorkflow, Bl as installApprovalGate, we as installComputedQueryCacheCapture, rs as installPolicyGuardResolver, St as interruptConnectionStreams, wl as invertChange, ar as ipToBytes, Ad as isAggregateDefinition, rr as isBootRefusal, Rn as isCompressibleContentType, Bu as isCostBudgetDefinition, Pd as isEmptyTenantScopedRead, Pu as isExpectationDefinition, Yu as isExperimentDefinition, dn as isFieldKeyring, yf as isForeignKeyViolation, ad as isIdleNow, Mr as isInfraError, Du as isLevelReaction, Ou as isLevelWatch, _n as isObservingGraph, Fd as isOrglessUserSubject, bf as isQueryTimeout, Tl as isSafeToApply, _c as isScheduleDefinition, Ms as isSoftDelete, Zn as isStateChangingMethod, Fn as isTransactionReadConflict, or as isTrustedProxy, nc as isWellFormedServiceToken, Ia as isWorkflowEventTriggerDefinition, p as isolateRawReadScope, pu as ivmValue, af as lastWriteProvenance, G as linearBoundaries, So as listConnectionStates, cl as listCrdtVersions, Yo as listResourcePolicies, xf as listRetentionConflicts, Sf as listRetentions, bu as loadResourceTuples, xu as loadSubjectTuples, uc as localityAwareSelector, Ki as lockApiKeyById, Ud as makeActionRunner, zc as makeAdvisoryLockCoordinator, fn as makeAesCipher, qi as makeApiKeyService, ds as makeApiKeyUsageBuffer, Ji as makeApiKeyUsageFlusher, hf as makeApiRoleBucketSampler, zd as makeApiRoleWorkloadMetrics, c as makeAppAccess, Vl as makeApprovalGate, Bi as makeAsyncKv, Ys as makeAuthMiddlewareLayers, Ka as makeBufferGapDetector, qr as makeBufferingSpanProcessor, Co as makeConnectionRegistry, No as makeConnectionResolver, Js as makeConnectionState, Po as makeConnectionsFacade, Qc as makeCoordinatedScheduler, os as makeDataLoader, Ge as makeDefaultRefilter, oa as makeDeviceService, Lo as makeDisconnectConnectionExecutor, va as makeEffectStoreLayer, Va as makeEventPublisher, La as makeEventsFacade, Jc as makeExternalizedTaskRegistry, pn as makeFieldCipher, mn as makeFieldKeyring, On as makeFluentStore, od as makeIdleGate, Ta as makeLazyWorkflowFacade, Ro as makeListConnectionsExecutor, Nr as makeMutationCodec, Wd as makeMutationReplayAdmission, Gd as makeMutationRunner, Kd as makeOneShotQueryRunner, Qn as makeOriginGuardExemption, to as makeOutboxFacade, rd as makeProcessAdapter, qd as makeQueryDescriptorProducer, Id as makeQueryFinalizer, Jd as makeQueryReauthorizer, Yd as makeQuerySubscriber, sd as makeRouterActivity, vl as makeRuleCapture, vs as makeSchemaRegistry, zo as makeStartConnectionExecutor, Bo as makeSubmitTokenExecutor, Nt as makeSubscriptionOutbox, Ea as makeTransactionalWorkflowFacade, pl as makeUndoCapture, cd as makeWakeGate, ld as makeWakeProxyServer, Da as makeWorkflowFacade, Oa as makeWorkflowFacadeWithCallerContext, ka as makeWorkflowHandlers, Aa as makeWorkflowLayers, ja as makeWorkflowRunHandle, Xd as makeWorkflowStartRunner, Cc as markWakeupFired, mu as materializeIvm, zn as maybeCompress, Yi as memoryApiKeyStore, sa as memoryDeviceStore, fc as memoryReplicationAdapter, he as memoryRywPositionStore, Bn as mergeCompressionHeaders, Ct as mergeCookieHeader, Ls as mergeFleetObservations, ll as migrateCrdtColumn, rc as mintServiceToken, kn as missingRowError, Vn as negotiateEncoding, Hn as negotiatedCompression, Zt as newTraceId, $c as nextDelay, vc as nextFiring, wc as nextWakeup, id as nodeProcessSupervisor, xd as noopAnalytics, Sd as noopAnalyticsSpec, Vi as noopKv, sr as normalizeIp, $n as normalizeOrigin, Te as noteCacheVolatile, Ee as noteDependency, Ae as noteRead, Un as noteResumeVerdict, Ke as noteRowFilterResolved, Ni as nullUnreadableSealedValues, wo as oauthCredentialValue, Bd as observeApiRoleEffect, Xs as observeConnectionHeaders, vn as observeStore, yn as observedGraph, Pr as onProcessShutdown, Pi as openCell, Kr as otelImportFailure, no as outboxAttemptsTable, ro as outboxTable, Hl as parseApprovalInterval, Vr as parseEngineSdkHeader, Qt as parseTraceparent, Ma as payloadPropertyNames, Bc as peerRunIsAlive, Ul as pendingApprovalsFor, Xi as plantMissingApiKeyActors, fe as powerOfTwoSelector, ul as prepareSealedCrdtRestore, gr as preservesSameOriginHeader, cf as previewInRollback, Rr as probeFor, To as projectConnectionState, Tc as pruneWakeups, Ha as publishEvent, Kn as publishServerTracerLayer, Pt as pumpOutbox, De as queryCachePolicy, m as rawSqlPreview, ku as reactionDurationMs, Au as reactionRateBucketKey, Ft as reactiveSocketTunables, pf as readApiRoleWorkloadWindow, xi as readFieldKeyHolders, Si as readFieldKeyReports, Ci as readFieldKeys, tn as readMaybeOne, el as readPollCeilingMs, je as readRecordingActive, Rs as readReplicaObservations, Xo as rebacPolicyGraph, j as recordCoalesced, wt as recordCredentialExpiry, K as recordEventDelivered, q as recordEventDropped, J as recordEventPublished, Y as recordEventSubscribers, X as recordExternalMissed, Z as recordExternalTrigger, Q as recordFieldDecrypt, wi as recordFieldKeyReport, Ut as recordForResume, M as recordOverrun, N as recordOversized, h as recordRawRead, Me as recordReads, $ as recordSample, ee as recordScheduleQueueRecovery, te as recordScheduleQueueWait, ne as recordScheduleQueued, re as recordScheduleRun, P as recordStalled, ie as recordSubscriptionActive, ae as recordSubscriptionDelivery, bn as recordTableAccess, iu as recordTimelineEvent, oe as recordWorkflowRun, Ne as recordingStore, xs as redactColumns, au as redactRow, ge as redisRywPositionStore, Ol as redoUndoInvocation, Eo as refreshAccessToken, Tt as registerConnectionStream, is as registerDefaultTupleSource, Yc as registerExternalizedTask, Ti as registerFieldKey, Cf as registerRetention, Ec as registerWakeup, Wl as rehydrateGuards, Fi as rekeyCell, Ii as rekeySealedValues, Ei as releaseFieldKeyHolder, Dc as releaseWakeup, pe as replicaHealth, Oe as resetComputedQueryCacheCaptureForTests, Wt as resetDetachedForTest, se as resetEventMetricTagCacheForTests, ce as resetFieldDecryptCountsForTests, xn as resetObservedGraph, zs as resetReplicaObservationWarnings, Wn as resetResumeCensus, Gt as resetResumeRingsForTest, qe as resetRowFilterResolvedArms, Zr as resetSecretsBackend, F as resetSubscriptionSocketMetrics, cr as resolveClientAddress, Do as resolveConnection, Fo as resolveConnectionForSubject, dc as resolveCurrentRegion, A as resolveDependentTables, si as resolveFieldKeyring, zr as resolveHealth, ht as resolveKeepAlive, er as resolveOriginGuardConfig, d as resolveReactiveConfig, Oo as resolveRedirectUri, lr as resolveRequestClientAddress, ur as resolveRequestIsHttps, hu as resolveRescan, Je as resolveRowFilterScope, Ye as resolveRowFilterScopeFor, Qr as resolveSecret, $r as resolveSecretSync, ei as resolveSecretsBackend, _r as resolveSecurityHeaders, ou as resolveTimelineMode, yc as resolveTransactionSubject, dr as resolveTrustedProxies, dl as restoreCrdtVersion, Pe as restrictingReads, Fe as restrictingReadsEffect, Xu as resultVariantNames, Gn as resumeCensus, Kt as resumeKeyOf, qt as resumeTunables, wf as retentionTtlMsFromEnv, Di as retireFieldKey, ct as revalidatePath, lt as revalidateTable, ut as revalidateTag, su as reverseEventOverRows, Zo as revokedIds, Xe as rowFilterMayNarrow, Ze as rowFilterRegistered, Qe as rowFilterResolvedArms, Ns as rulesFor, Gs as runAsSystem, dd as runOrchestratorTick, Zd as runProvidedEffect, ju as runReaction, fd as runSingleNodeOrchestrator, td as runWakeLoop, Qd as runWithDeadlockRetry, Sn as runWithObservedProcedure, g as runWithRawReadScope, ts as runWithRequestLoader, ye as runWithRoutingContext, be as runWithRoutingContextEffect, en as runWithTraceContext, ko as sanitizeRedirectTo, bc as scheduleBackfillRequestsTable, tl as scheduleCoordinated, Ts as schemaPropertyNames, Gl as scopeStringsOf, vr as securityHeadersFor, ea as selectTenant, Kl as serializeGuards, tt as serverOnlyColumnNames, Es as serverOnlyLeaks, qn as serverTracer, ic as serviceCallerNextTokenEnv, ac as serviceCallerStrategy, oc as serviceCallerTokenEnv, sc as serviceEnvSegment, I as setBufferedBytes, Io as setConnectionResolver, D as setCrdtAdmission, O as setCrdtBackend, k as setCrdtCompactMaxBytes, hn as setFieldCipher, It as setReactiveSocketTunables, Jt as setResumeTunables, dt as setRevalidationPublisher, $e as setRowFilter, ti as setSecretsBackend, Jn as setServerTracer, Ie as setSourceGapSink, Ks as setSystemStoreHandle, cu as setTimelineRecorderForTest, as as setTupleSource, e as settleHandlerBody, Zi as sha256Hex, ca as sha256HexOf, Fr as shutdownGraceMsFromEnv, Vc as singleCoordinator, fl as snapshotCrdt, st as snapshotEntryFor, le as snapshotMetrics, ue as snapshotMetricsSync, Le as sourceGapReport, ls as ssrfGuardHttpClientLayer, us as ssrfReason, Oi as startFieldKeyHolder, Ir as startRpcServer, Hc as startScheduler, Ao as storeCredential, nt as stripColumnsFromRows, rt as stripForbiddenForWire, it as stripServerOnlyForWire, L as subscriptionSocketMetricSamples, R as subscriptionSocketMetricsSnapshot, jo as sweepExpiredGrants, Tf as sweepRetention, El as synthesizeInverse, ta as tenantSelectionId, na as tenantSelectionStore, ss as tracingHttpClientLayer, Ra as triggerWorkflow, Oc as tryClaimWakeup, Et as unbindConnection, ml as undoCaptureEnabled, kl as undoLogExecutor, hl as undoSurfaceEnabled, Os as unresolvedSources, ya as upsertRowEffect, ba as upsertRowOutcomeEffect, jd as useAggregate, _d as useAnalytics, Vu as useCostBudget, Fu as useExpectation, Zu as useExperiment, ki as verifyFieldKeyring, Li as verifySealedValues, Qo as visibleRows, nd as wakeDueOnce, Sr as webhookVerificationOf, $d as withRowFilter, Zs as withRpcAuthMiddleware, ef as withScopedRequest, Yn as withServerTracer, Yl as workflowDomainEventsExecutor, Xl as workflowEventDeliveriesExecutor, Zl as workflowRowVisibleTo, Ql as workflowRunEventsExecutor, $l as workflowRunExecutor, eu as workflowRunStepsExecutor, tu as workflowRunsExecutor, gl as wrapCaptureStore, ys as wrapStoreWithBootCodec, In as wrapStoreWithMixinBehaviour, mf as writeApiRoleWorkloadBucket, Bs as writeReplicaObservation };

package/dist/insertRequiredColumns.js

@@ -1,5 +1,5 @@
 import { types as e } from "node:util";
-//#region src/insertRequiredColumns.ts
+// src/insertRequiredColumns.ts
 var t = (t) => {
 	if (e.isProxy(t)) return !1;
 	let n = Object.getPrototypeOf(t);
@@ -15,5 +15,4 @@ var t = (t) => {
 	}
 	return r;
 };
-//#endregion
 export { n as prepareInsertRequiredColumns };

package/dist/instanceMembership.js

@@ -1,5 +1,5 @@
 import { createLogger as e } from "@voltro/logger";
-//#region src/instanceMembership.ts
+// src/instanceMembership.ts
 var t = e({ scope: "voltro:members" }), n = 5e3, r = class {
 	members = /* @__PURE__ */ new Map();
 	listeners = /* @__PURE__ */ new Set();
@@ -94,5 +94,4 @@ var t = e({ scope: "voltro:members" }), n = 5e3, r = class {
 		}
 	}
 };
-//#endregion
 export { r as InstanceMembership };

package/dist/ivm.js

@@ -1,4 +1,4 @@
-//#region src/ivm.ts
+// src/ivm.ts
 var e = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
@@ -121,5 +121,4 @@ var e = /* @__PURE__ */ new Set([
 		n === void 0 ? t.delete(e) : t.set(e, n);
 	}
 };
-//#endregion
 export { c as applyDelta, l as applyDeltaInto, o as buildIvmState, t as classifyShape, r as groupKeyOf, a as ivmValue, s as materializeIvm, u as resolveRescan, d as resolveRescanInto };

package/dist/kvDataStore.js

@@ -1,7 +1,7 @@
 import { Effect as e, Option as t } from "effect";
 import { and as n, contains as r, eq as i, generateId as a, gt as o, isNull as s, or as c } from "@voltro/database";
 import { KvError as l } from "@voltro/kv";
-//#region src/kvDataStore.ts
+// src/kvDataStore.ts
 var u = "_voltro_kv", d = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
@@ -82,5 +82,4 @@ var u = "_voltro_kv", d = (e) => {
 		})
 	};
 };
-//#endregion
 export { h as dataStoreKvStore };

package/dist/kvFacade.js

@@ -1,25 +1,31 @@
 import { dataStoreKvStore as e } from "./kvDataStore.js";
-import { Layer as t, ManagedRuntime as n, Option as r } from "effect";
-import { LoggerLayer as i } from "@voltro/logger";
-import { Kv as a, KvStore as o, layerConnections as s, layerMemory as c, layerRedis as l } from "@voltro/kv";
-//#region src/kvFacade.ts
-var u = async ({ store: u, env: d = process.env }) => {
-	let f = (d.KV_BACKEND ?? "database").toLowerCase(), p = f === "redis" ? "redis" : f === "memory" ? "memory" : "database", m = p === "redis" ? l(d.KV_KEY_PREFIX ? { keyPrefix: d.KV_KEY_PREFIX } : {}).pipe(t.provide(s)) : p === "memory" ? c() : t.succeed(o, o.of(e(u))), h = n.make(a.layer.pipe(t.provide(m), t.provideMerge(i({})))), g = await h.runPromise(a);
+import { ConfigProvider as t, Layer as n, ManagedRuntime as r, Option as i } from "effect";
+import { LoggerLayer as a } from "@voltro/logger";
+import { Kv as o, KvStore as s, layerConnections as c, layerMemory as l, layerRedis as u } from "@voltro/kv";
+import { RedisConnections as d } from "@voltro/kv/connection";
+// src/kvFacade.ts
+var f = async ({ store: f, env: p = process.env, backend: m, connectionName: h, keyPrefix: g, connections: _ }) => {
+	let v = (p.KV_BACKEND ?? m ?? "database").toLowerCase(), y = v === "redis" ? "redis" : v === "memory" ? "memory" : "database", b = y === "redis" ? u({
+		...h === void 0 ? {} : { connectionName: h },
+		...(p.KV_KEY_PREFIX ?? g) === void 0 ? {} : { keyPrefix: p.KV_KEY_PREFIX ?? g }
+	}).pipe(n.provide(_ === void 0 ? c : n.succeed(d, _))) : y === "memory" ? l() : n.succeed(s, s.of(e(f))), x = p === process.env ? n.empty : t.layer(t.fromEnvRecord({ ...p }, { preserveEmptyStrings: !0 })), S = r.make(o.layer.pipe(n.provide(b), n.provideMerge(a({})), n.provide(x))), C = await S.runPromise(o).catch(async (e) => {
+		throw await S.dispose(), e;
+	});
 	return {
 		kv: {
-			get: (e) => h.runPromise(g.get(e)).then((e) => r.getOrUndefined(e)),
-			getOrElse: (e, t) => h.runPromise(g.getOrElse(e, t)),
-			set: (e, t, n) => h.runPromise(g.set(e, t, n)),
-			delete: (e) => h.runPromise(g.delete(e)),
-			has: (e) => h.runPromise(g.has(e)),
-			list: (e) => h.runPromise(g.list(e)),
-			clear: () => h.runPromise(g.clear())
+			get: (e) => S.runPromise(C.get(e)).then((e) => i.getOrUndefined(e)),
+			getOrElse: (e, t) => S.runPromise(C.getOrElse(e, t)),
+			set: (e, t, n) => S.runPromise(C.set(e, t, n)),
+			delete: (e) => S.runPromise(C.delete(e)),
+			has: (e) => S.runPromise(C.has(e)),
+			list: (e) => S.runPromise(C.list(e)),
+			clear: () => S.runPromise(C.clear())
 		},
-		service: g,
-		backend: p,
-		dispose: () => h.dispose()
+		service: C,
+		backend: y,
+		dispose: () => S.dispose()
 	};
-}, d = {
+}, p = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -28,5 +34,4 @@ var u = async ({ store: u, env: d = process.env }) => {
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
 };
-//#endregion
-export { u as makeAsyncKv, d as noopKv };
+export { f as makeAsyncKv, p as noopKv };

package/dist/matcher.js

@@ -1,6 +1,6 @@
 import { RangeIndex as e } from "./rangeIndex.js";
 import { evaluatePredicate as t, getTable as n, walkLeaves as r } from "@voltro/database";
-//#region src/matcher.ts
+// src/matcher.ts
 var i = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
@@ -300,5 +300,4 @@ var i = class {
 		return o;
 	}
 };
-//#endregion
 export { d as IndexedMatcher, i as LinearScanMatcher };