@voltro/runtime 0.86.0 → 0.88.0

package/dist/memoryColumnDefaults.js

@@ -1,5 +1,5 @@
 import { getTable as e } from "@voltro/database";
-//#region src/memoryColumnDefaults.ts
+// src/memoryColumnDefaults.ts
 var t = (t, n) => {
 	let r = e(t);
 	if (r === void 0) return n;
@@ -7,5 +7,4 @@ var t = (t, n) => {
 	for (let [e, t] of Object.entries(r.fields)) i[e] === void 0 && t.generatedAs === void 0 && t.computed === void 0 && (t.hasDefault && t.defaultFactory === void 0 && t.defaultValue !== void 0 ? i[e] = t.defaultValue === "now" ? /* @__PURE__ */ new Date() : structuredClone(t.defaultValue) : t.nullable && t.defaultFactory === void 0 && (i[e] = null));
 	return i;
 };
-//#endregion
 export { t as applyMemoryColumnDefaults };

package/dist/memoryQueryJoins.js

@@ -1,5 +1,5 @@
 import { evaluatePredicate as e, getTable as t, isColumnReference as n, preparePredicate as r } from "@voltro/database";
-//#region src/memoryQueryJoins.ts
+// src/memoryQueryJoins.ts
 var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typeof e == "bigint" || typeof e == "number" && !Number.isNaN(e), a = (e, t = /* @__PURE__ */ new WeakSet()) => {
 	if (typeof e != "object" || !e || Object.getPrototypeOf(e) !== Object.prototype || t.has(e)) return !1;
 	t.add(e);
@@ -18,15 +18,13 @@ var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typ
 	return !0;
 }, o = (e, t) => {
 	if ("and" in e) {
-		for (let n of e.and) {
-			let e = o(n, t);
-			if (e) return e;
-		}
-		return;
+		let n = [];
+		for (let r = 0; r < e.and.length; r += 1) n.push(...o(e.and[r], t));
+		return n;
 	}
-	if (!("op" in e) || e.op !== "eq" || e.path !== void 0 || !n(e.value)) return;
+	if (!("op" in e) || e.op !== "eq" || e.path !== void 0 || !n(e.value)) return [];
 	let r = e.column, i = e.value.column, a = `${t}.`;
-	if (r.startsWith(a) !== i.startsWith(a)) return r.startsWith(a) ? [i, r] : [r, i];
+	return r.startsWith(a) === i.startsWith(a) ? [] : [r.startsWith(a) ? [i, r] : [r, i]];
 }, s = (n, s, c, l) => {
 	let u = n.alias ?? n.table, d = (n.sourceTable?.tableName === n.table ? n.sourceTable : t(n.table))?.fields ?? {}, f = new Set(Object.keys(d));
 	for (let e of s) for (let t of Object.keys(e)) f.add(t);
@@ -71,18 +69,20 @@ var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typ
 				}) : t[r] = i;
 			}
 			return t;
-		}, _ = u.map(m), y = l(s.on), b, x = _.length * v.length < 16, S = !1, C, w = o(s.on, s.alias), T;
-		if (w && h[w[0]]?.type !== "decimal" && h[w[1]]?.type !== "decimal" && _.every((e) => i(e[w[1]]))) {
-			T = /* @__PURE__ */ new Map();
-			for (let e of _) {
-				let t = e[w[1]];
-				if (t == null) continue;
-				let n = T.get(t);
-				n ? n.push(e) : T.set(t, [e]);
+		}, _ = u.map(m), y = l(s.on), b, x = _.length * v.length < 16, S = !1, C, w = o(s.on, s.alias), T, E;
+		for (let e of w) {
+			if (h[e[0]]?.type === "decimal" || h[e[1]]?.type === "decimal" || !_.every((t) => i(t[e[1]]))) continue;
+			let t = /* @__PURE__ */ new Map();
+			for (let n of _) {
+				let r = n[e[1]];
+				if (r == null) continue;
+				let i = t.get(r);
+				i ? i.push(n) : t.set(r, [n]);
 			}
+			(E === void 0 || t.size > E.size) && (T = e, E = t);
 		}
 		v = v.flatMap((t) => {
-			let n = w === void 0 ? void 0 : t[w[0]], o = T && i(n) ? n == null ? [] : T.get(n) ?? [] : _, c = x ? o.map((e) => ({
+			let n = T === void 0 ? void 0 : t[T[0]], o = E && i(n) ? n == null ? [] : E.get(n) ?? [] : _, c = x ? o.map((e) => ({
 				...t,
 				...e
 			})).filter((t) => e(s.on, t, y, h)) : [];
@@ -110,5 +110,4 @@ var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typ
 		project: (e) => n.joinedProjection?.length ? Object.fromEntries(n.joinedProjection.map((t) => [t.outputKey, e[t.source]])) : Object.fromEntries((n.projection ?? p).map((t) => [t, e[t]]))
 	};
 };
-//#endregion
 export { s as memoryQueryJoins };

package/dist/memorySetOperations.js

@@ -0,0 +1,42 @@
+import { decimalEqualityKey as e, getTable as t } from "@voltro/database";
+// src/memorySetOperations.ts
+var n = (e, t = !1) => e == null ? ["null"] : e instanceof Date ? t ? ["string", e.toISOString()] : ["date", e.getTime()] : typeof e == "bigint" ? ["bigint", e.toString()] : typeof e == "number" ? t && !Number.isFinite(e) ? ["null"] : ["number", Number.isFinite(e) ? e : String(e)] : typeof e == "object" ? e instanceof ArrayBuffer ? ["bytes", [...new Uint8Array(e)]] : ArrayBuffer.isView(e) ? ["bytes", [...new Uint8Array(e.buffer, e.byteOffset, e.byteLength)]] : Array.isArray(e) ? ["array", e.map((e) => n(e, t))] : ["object", Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t)).map(([e, r]) => [e, n(r, t)])] : [typeof e, e], r = (t, r, i) => JSON.stringify(r.map((r) => {
+	let a = t[r], o = a == null || i[r]?.type !== "decimal" ? null : e(a);
+	return o === null ? n(a, i[r]?.type === "json") : ["decimal", o];
+})), i = (e, n) => {
+	if (e.setOp) return i(e.setOp.queries[0], n);
+	let r = (e.sourceTable ?? t(e.table))?.fields ?? {}, a = { ...r }, o = e.alias ?? e.table;
+	for (let [e, t] of Object.entries(r)) a[`${o}.${e}`] = t;
+	for (let n of e.joins ?? []) {
+		let e = (n.sourceTable ?? t(n.table))?.fields ?? {};
+		for (let [t, r] of Object.entries(e)) a[`${n.alias}.${t}`] = r;
+	}
+	if (e.aggregations?.length) return Object.fromEntries(e.aggregations.map((e) => {
+		let t = e.column === void 0 ? { type: "unknown" } : a[e.column] ?? { type: "unknown" }, n = e.op === "count" || e.op === "count-distinct" || e.op === "window-row-number" || e.op === "window-rank" || e.op === "window-dense-rank", r = e.op === "avg" || e.op === "window-avg-over";
+		return [e.alias, n ? { type: "integer" } : r && t.type !== "decimal" ? { type: "real" } : t];
+	}));
+	if (e.joinedProjection) return Object.fromEntries(e.joinedProjection.map((e) => [e.outputKey, a[e.source] ?? { type: "unknown" }]));
+	let s = e.projection ?? (Object.keys(r).length > 0 ? Object.keys(r) : [...new Set(n.flatMap((e) => Object.keys(e)))]);
+	return Object.fromEntries(s.map((e) => [e, a[e] ?? { type: "unknown" }]));
+}, a = (e, t) => {
+	let n = e.setOp;
+	if (!n || n.queries.length < 2) throw Error("A set operation requires at least two inputs");
+	let a = n.queries.map((e) => ({
+		rows: t(e),
+		query: e
+	})), o = a.map((e) => i(e.query, e.rows)), s = o[0], c = Object.keys(s), l = a.map((e, t) => {
+		let n = Object.keys(o[t]);
+		if (n.length !== c.length) throw Error("Set operation inputs must have the same column count");
+		return e.rows.map((e) => Object.fromEntries(c.map((t, r) => [t, e[n[r]] ?? null])));
+	});
+	if (n.kind === "union-all") return l.flat();
+	let u = (e) => new Map(e.map((e) => [r(e, c, s), e]));
+	if (n.kind === "union") return [...u(l.flat()).values()];
+	let d = u(l[0]);
+	for (let e of l.slice(1)) {
+		let t = u(e);
+		for (let e of d.keys()) (n.kind === "intersect" ? !t.has(e) : t.has(e)) && d.delete(e);
+	}
+	return [...d.values()];
+};
+export { i as memoryOutputColumns, r as memoryRowKey, a as memorySetRows };

package/dist/metrics.js

@@ -1,6 +1,6 @@
 import { subscriptionSocketMetricSamples as e } from "./subscriptionSocketMetrics.js";
 import { Effect as t, Metric as n } from "effect";
-//#region src/metrics.ts
+// src/metrics.ts
 var r = n.exponentialBoundaries({
 	start: .001,
 	factor: 2,
@@ -17,7 +17,7 @@ var r = n.exponentialBoundaries({
 }), u = n.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), d = n.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), f = n.histogram("voltro_subscription_delivery_seconds", {
 	boundaries: r,
 	description: "Subscription delivery produce→push latency in seconds."
-}), ee = n.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), p = n.counter("voltro_schedule_runs_total", { description: "Schedule firings by name + outcome." }), m = n.histogram("voltro_schedule_duration_seconds", {
+}), p = n.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), m = n.counter("voltro_schedule_runs_total", { description: "Schedule firings by name + outcome." }), ee = n.histogram("voltro_schedule_duration_seconds", {
 	boundaries: r,
 	description: "Schedule handler duration in seconds."
 }), h = n.gauge("voltro_schedule_last_success_timestamp_seconds", { description: "UNIX time of the last successful firing, per schedule." }), g = n.gauge("voltro_schedule_queued", { description: "Firings waiting for their turn under onOverlap: 'queue', per schedule, on THIS replica." }), _ = n.histogram("voltro_schedule_queue_wait_seconds", {
@@ -36,11 +36,11 @@ var r = n.exponentialBoundaries({
 	O.clear();
 }, j = () => O.size, M = (e) => {
 	t.runSync(n.update(k(w, `p:${e}`, [["event", e]]), 1));
-}, te = (e, r = 1) => {
+}, N = (e, r = 1) => {
 	r <= 0 || t.runSync(n.update(k(T, `d:${e}`, [["event", e]]), r));
-}, N = (e, r, i = 1) => {
+}, P = (e, r, i = 1) => {
 	i <= 0 || t.runSync(n.update(k(E, `x:${r}:${e}`, [["event", e], ["reason", r]]), i));
-}, P = (e, r) => {
+}, te = (e, r) => {
 	r !== 0 && t.runSync(n.update(k(D, `s:${e}`, [["event", e]]), r));
 }, F = (e) => {
 	let r = e.durationMs / 1e3, d = e.kind === "rpc" ? t.andThen(n.update(i, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
@@ -51,8 +51,22 @@ var r = n.exponentialBoundaries({
 		status: e.status
 	})), n.update(c, r).pipe(t.provideService(n.CurrentMetricAttributes, { route: e.tag }))) : t.andThen(n.update(l, r).pipe(t.provideService(n.CurrentMetricAttributes, { hook: e.tag })), e.status === "error" ? n.update(u, 1).pipe(t.provideService(n.CurrentMetricAttributes, { hook: e.tag })) : t.void);
 	t.runSync(d);
-}, I = (e) => e.startsWith("subscription.") ? e.slice(13) : e, L = (e) => {
-	let r = I(e.label);
+}, I = n.counter("voltro_field_decrypts_total", { description: "Opens of sealed field values, by key id, location (table:column) and outcome." }), L = /* @__PURE__ */ new Map(), R = (e, r, i) => {
+	let a = `${e}|${r}`, o = L.get(a) ?? L.set(a, {
+		key: e,
+		location: r,
+		ok: 0,
+		failed: 0
+	}).get(a);
+	o[i] += 1, t.runSync(n.update(k(I, `field|${a}|${i}`, [
+		["key", e],
+		["location", r],
+		["outcome", i]
+	]), 1));
+}, z = () => [...L.values()].map((e) => ({ ...e })).sort((e, t) => e.location.localeCompare(t.location) || e.key.localeCompare(t.key)), B = () => {
+	L.clear();
+}, V = (e) => e.startsWith("subscription.") ? e.slice(13) : e, H = (e) => {
+	let r = V(e.label);
 	t.runSync(t.andThen(n.update(d, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
 		tag: r,
 		kind: e.kind
@@ -60,42 +74,42 @@ var r = n.exponentialBoundaries({
 		tag: r,
 		kind: e.kind
 	}))));
-}, R = /* @__PURE__ */ new Map(), z = (e, r) => {
-	let i = I(e), a = Math.max(0, (R.get(i) ?? 0) + r);
-	a === 0 ? R.delete(i) : R.set(i, a), t.runSync(n.update(ee, a).pipe(t.provideService(n.CurrentMetricAttributes, { tag: i })));
-}, B = (e) => {
-	let r = n.update(p, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
+}, U = /* @__PURE__ */ new Map(), W = (e, r) => {
+	let i = V(e), a = Math.max(0, (U.get(i) ?? 0) + r);
+	a === 0 ? U.delete(i) : U.set(i, a), t.runSync(n.update(p, a).pipe(t.provideService(n.CurrentMetricAttributes, { tag: i })));
+}, G = (e) => {
+	let r = n.update(m, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
 		schedule: e.name,
 		status: e.status
-	})), i = n.update(m, e.durationMs / 1e3).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e.name })), a = e.status === "succeeded" && e.completedAtSec !== void 0 ? n.update(h, e.completedAtSec).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e.name })) : t.void;
+	})), i = n.update(ee, e.durationMs / 1e3).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e.name })), a = e.status === "succeeded" && e.completedAtSec !== void 0 ? n.update(h, e.completedAtSec).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e.name })) : t.void;
 	t.runSync(t.andThen(r, t.andThen(i, a)));
-}, V = /* @__PURE__ */ new Map(), H = (e, r) => {
-	let i = Math.max(0, (V.get(e) ?? 0) + r);
-	i === 0 ? V.delete(e) : V.set(e, i), t.runSync(n.update(g, i).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e })));
-}, U = (e, r) => {
+}, K = /* @__PURE__ */ new Map(), q = (e, r) => {
+	let i = Math.max(0, (K.get(e) ?? 0) + r);
+	i === 0 ? K.delete(e) : K.set(e, i), t.runSync(n.update(g, i).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e })));
+}, J = (e, r) => {
 	t.runSync(n.update(_, r / 1e3).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e })));
-}, W = (e, r) => {
+}, Y = (e, r) => {
 	t.runSync(n.update(v, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
 		schedule: e,
 		outcome: r
 	})));
-}, G = (e, r) => {
+}, X = (e, r) => {
 	t.runSync(n.update(y, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
 		schedule: e,
 		outcome: r
 	})));
-}, K = (e, r = 1) => {
+}, Z = (e, r = 1) => {
 	r <= 0 || t.runSync(n.update(b, r).pipe(t.provideService(n.CurrentMetricAttributes, { schedule: e })));
-}, q = (e) => {
+}, Q = (e) => {
 	let r = n.update(x, 1).pipe(t.provideService(n.CurrentMetricAttributes, {
 		workflow: e.name,
 		status: e.status
 	})), i = n.update(S, e.durationMs / 1e3).pipe(t.provideService(n.CurrentMetricAttributes, { workflow: e.name })), a = e.status === "succeeded" && e.completedAtSec !== void 0 ? n.update(C, e.completedAtSec).pipe(t.provideService(n.CurrentMetricAttributes, { workflow: e.name })) : t.void;
 	t.runSync(t.andThen(r, t.andThen(i, a)));
-}, J = (e, t) => n.counter(e, t === void 0 ? {} : { description: t }), Y = (e, t) => n.gauge(e, t === void 0 ? {} : { description: t }), X = (e, t = r, i) => n.histogram(e, {
+}, ne = (e, t) => n.counter(e, t === void 0 ? {} : { description: t }), re = (e, t) => n.gauge(e, t === void 0 ? {} : { description: t }), ie = (e, t = r, i) => n.histogram(e, {
 	boundaries: t,
 	...i === void 0 ? {} : { description: i }
-}), { exponentialBoundaries: Z, linearBoundaries: Q } = n, $ = n.snapshot.pipe(t.map((e) => e.map((e) => {
+}), { exponentialBoundaries: ae, linearBoundaries: oe } = n, $ = n.snapshot.pipe(t.map((e) => e.map((e) => {
 	let t = e.id, n = { ...e.attributes ?? {} }, r = e.description === void 0 ? {} : { description: e.description };
 	switch (e.type) {
 		case "Histogram": return {
@@ -156,6 +170,5 @@ var r = n.exponentialBoundaries({
 	let n = e();
 	for (let e of n) t.push(e);
 	return t;
-})), ne = () => t.runSync($);
-//#endregion
-export { J as counter, j as eventMetricTagCacheSizeForTests, Z as exponentialBoundaries, Y as gauge, X as histogramMetric, Q as linearBoundaries, te as recordEventDelivered, N as recordEventDropped, M as recordEventPublished, P as recordEventSubscribers, K as recordExternalMissed, G as recordExternalTrigger, F as recordSample, W as recordScheduleQueueRecovery, U as recordScheduleQueueWait, H as recordScheduleQueued, B as recordScheduleRun, z as recordSubscriptionActive, L as recordSubscriptionDelivery, q as recordWorkflowRun, A as resetEventMetricTagCacheForTests, $ as snapshotMetrics, ne as snapshotMetricsSync };
+})), se = () => t.runSync($);
+export { ne as counter, j as eventMetricTagCacheSizeForTests, ae as exponentialBoundaries, z as fieldDecryptSnapshot, re as gauge, ie as histogramMetric, oe as linearBoundaries, N as recordEventDelivered, P as recordEventDropped, M as recordEventPublished, te as recordEventSubscribers, Z as recordExternalMissed, X as recordExternalTrigger, R as recordFieldDecrypt, F as recordSample, Y as recordScheduleQueueRecovery, J as recordScheduleQueueWait, q as recordScheduleQueued, G as recordScheduleRun, W as recordSubscriptionActive, H as recordSubscriptionDelivery, Q as recordWorkflowRun, A as resetEventMetricTagCacheForTests, B as resetFieldDecryptCountsForTests, $ as snapshotMetrics, se as snapshotMetricsSync };

package/dist/observability.js

@@ -1,7 +1,7 @@
-import { bootRefusal as e } from "./bootRefusal.js";
+import { bootRefusal as e } from "./boot-refusal.js";
 import { Context as t, Effect as n, Layer as r, Option as i, Tracer as a } from "effect";
 import { AsyncLocalStorage as o } from "node:async_hooks";
-//#region src/observability.ts
+// src/observability.ts
 var s = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
@@ -119,5 +119,4 @@ var s = () => {
 		inMemoryMetricExporter: O
 	};
 };
-//#endregion
 export { m as buildTracingLayer, l as describeOtelReasons, d as otelImportFailure };

package/dist/observedGraph.js

@@ -1,5 +1,5 @@
 import { AsyncLocalStorage as e } from "node:async_hooks";
-//#region src/observedGraph.ts
+// src/observedGraph.ts
 var t = new e(), n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), i = "\0", a = process.env.VOLTRO_OBSERVE_GRAPH === "1", o = () => {
 	a = !0;
 }, s = () => a, c = (e, n) => a ? (r.add(e.tag), t.run(e, n)) : n(), l = (e, r) => {
@@ -48,5 +48,4 @@ var t = new e(), n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), i
 	}
 	return t;
 };
-//#endregion
 export { o as enableGraphObservation, s as isObservingGraph, f as observeStore, u as observedGraph, l as recordTableAccess, d as resetObservedGraph, c as runWithObservedProcedure };

package/dist/originGuard.js

@@ -1,4 +1,4 @@
-//#region src/originGuard.ts
+// src/originGuard.ts
 var e = (e) => {
 	let t = e.toUpperCase();
 	return t !== "GET" && t !== "HEAD" && t !== "OPTIONS";
@@ -112,5 +112,4 @@ var e = (e) => {
 		allowedOrigins: (i !== void 0 && i.length > 0 ? i : (t.VOLTRO_ALLOWED_ORIGINS ?? "").split(",").map((e) => e.trim()).filter((e) => e.length > 0)).map(a)
 	};
 };
-//#endregion
 export { u as classifyRequestOrigin, e as isStateChangingMethod, r as makeOriginGuardExemption, a as normalizeOrigin, d as resolveOriginGuardConfig };

package/dist/outbox.js

@@ -2,7 +2,7 @@ import { Effect as e } from "effect";
 import { and as t, eq as n, generateId as r, id as i, inSet as a, integer as o, json as s, lt as c, table as l, text as u, timestamp as d } from "@voltro/database";
 import { validateOutboxHandlerDefinition as f } from "@voltro/protocol";
 import { createLogger as p } from "@voltro/logger";
-//#region src/outbox.ts
+// src/outbox.ts
 var m = p({ scope: "voltro:outbox" }), h = "_voltro_outbox", g = {
 	kind: "typeid",
 	prefix: "obx"
@@ -285,7 +285,7 @@ var m = p({ scope: "voltro:outbox" }), h = "_voltro_outbox", g = {
 				subjectId: t.subjectId ?? null,
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
-			}, a = o.handler(i), c = e.isEffect(a) ? a : await a, d = e.isEffect(c) ? await (r.runEffect ? r.runEffect(c, i) : e.runPromise(c)) : c;
+			}, a = r.measureSync ? r.measureSync(() => o.handler(i)) : o.handler(i), c = e.isEffect(a) ? a : await a, d = e.isEffect(c) ? await (r.runEffect ? r.runEffect(c, i) : e.runPromise(c)) : c;
 			await k(r.store, {
 				outboxRow: t,
 				attempt: s,
@@ -348,5 +348,4 @@ var m = p({ scope: "voltro:outbox" }), h = "_voltro_outbox", g = {
 		...p === void 0 ? {} : { nextAttemptAt: p }
 	};
 };
-//#endregion
 export { T as DEFAULT_OUTBOX_CLAIM_LEASE_MS, v as OUTBOX_ATTEMPTS_TABLE, E as OUTBOX_ATTEMPT_LOG_CAP, h as OUTBOX_TABLE, w as backoffMs, x as defineOutboxHandler, M as drainOutbox, C as makeOutboxFacade, b as outboxAttemptsTable, _ as outboxTable };

package/dist/pluginRefRules.js

@@ -1,5 +1,5 @@
 import { and as e, eq as t } from "@voltro/database";
-//#region src/pluginRefRules.ts
+// src/pluginRefRules.ts
 var n = (e) => e.old ?? e.new ?? {}, r = (e) => String(n(e).id ?? ""), i = (e) => {
 	let t = n(e).tenantId;
 	return typeof t == "string" ? t : null;
@@ -61,5 +61,4 @@ var n = (e) => e.old ?? e.new ?? {}, r = (e) => String(n(e).id ?? ""), i = (e) =
 	}
 	return n.filter((e) => e.policy !== "keep");
 };
-//#endregion
 export { c as applyPluginRefRules, l as collectPluginRefRules, s as collectReferenceSoftDeleteRules, a as isSoftDelete, o as rulesFor };

package/dist/policyGuardResolver.js

@@ -3,7 +3,7 @@ import { currentRequestLoader as n } from "./requestLoader.js";
 import { Effect as r } from "effect";
 import { setPolicyGuardResolver as i } from "@voltro/protocol";
 import { createLogger as a } from "@voltro/logger";
-//#region src/policyGuardResolver.ts
+// src/policyGuardResolver.ts
 var o = a({ scope: "voltro:policy" }), s, c = (e) => {
 	s = e;
 }, l = () => s, u = (e) => s === void 0 && (s = e, !0), d = () => {
@@ -51,5 +51,4 @@ var o = a({ scope: "voltro:policy" }), s, c = (e) => {
 		});
 	}));
 };
-//#endregion
 export { l as getTupleSource, d as installPolicyGuardResolver, u as registerDefaultTupleSource, c as setTupleSource };

package/dist/preview.js

@@ -1,4 +1,4 @@
-//#region src/preview.ts
+// src/preview.ts
 var e = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
@@ -58,5 +58,4 @@ var e = (e) => {
 	if (!i) throw Error("preview: handler did not complete");
 	return n;
 };
-//#endregion
 export { n as buildPreview, t as diffChange, i as previewInRollback };

package/dist/projectedRows.js

@@ -1,4 +1,4 @@
-//#region src/projectedRows.ts
+// src/projectedRows.ts
 var e = (e, t) => {
 	let n = [], r = e.length;
 	for (let i = 0; i < r; i += 1) {
@@ -8,5 +8,4 @@ var e = (e, t) => {
 	}
 	return n;
 };
-//#endregion
 export { e as collectProjectedRows };

package/dist/provenance.js

@@ -1,4 +1,4 @@
-//#region src/provenance.ts
+// src/provenance.ts
 var e = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, t = (e) => typeof e == "string" && e.length > 0 ? e : null, n = [
 	"updatedAt",
 	"createdAt",
@@ -59,5 +59,4 @@ var e = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.l
 		found: i.length > 0
 	};
 };
-//#endregion
 export { a as historyProvenance, i as lastWriteProvenance };

package/dist/rangeIndex.js

@@ -1,4 +1,4 @@
-//#region src/rangeIndex.ts
+// src/rangeIndex.ts
 var e = (e) => e?.height ?? 0, t = (t) => (t.height = 1 + Math.max(e(t.left), e(t.right)), t), n = (e) => {
 	let n = e.left;
 	return e.left = n.right, n.right = t(e), t(n);
@@ -85,5 +85,4 @@ var e = (e) => e?.height ?? 0, t = (t) => (t.height = 1 + Math.max(e(t.left), e(
 		return r;
 	}
 };
-//#endregion
 export { l as RangeIndex };

package/dist/rawReadScope.js

@@ -1,11 +1,11 @@
 import { resolveReactiveConfig as e } from "./reactiveConfig.js";
 import { AsyncLocalStorage as t } from "node:async_hooks";
-//#region src/rawReadScope.ts
+// src/rawReadScope.ts
 var n = new t(), r = () => {
 	n.getStore() !== void 0 && n.enterWith({ observations: [] });
 }, i = (t) => {
 	let r = n.getStore();
-	r === void 0 && (r = { observations: [] }, n.enterWith(r)), r.membership !== void 0 && !a(t) && (r.membership = void 0, r.exposed = !0), !r.exposed && r.membership === void 0 && r.observations.length >= 128 && a(t) && (r.observations.every(a) ? r.membership = new Set(r.observations.map((e) => e.sql)) : r.exposed = !0), !(r.membership?.has(t.sql) ?? r.observations.some((e) => e.sql === t.sql)) && (r.observations.length >= e().rawReadTrackingLimit || (r.observations.push(t), r.membership?.add(t.sql)));
+	r === void 0 && (r = { observations: [] }, n.enterWith(r)), r.membership !== void 0 && !a(t) && (r.membership = void 0, r.exposed = !0), !r.exposed && r.membership === void 0 && r.observations.length >= 128 && a(t) && (r.observations.every(a) ? r.membership = new Set(r.observations.map((e) => e.sql)) : r.exposed = !0), (r.membership?.has(t.sql) ?? r.observations.some((e) => e.sql === t.sql)) || r.observations.length >= e().rawReadTrackingLimit || (r.observations.push(t), r.membership?.add(t.sql));
 }, a = (e) => {
 	let t = Object.getOwnPropertyDescriptor(e, "sql");
 	return Object.isFrozen(e) && t !== void 0 && "value" in t && typeof t.value == "string";
@@ -13,5 +13,4 @@ var n = new t(), r = () => {
 	let e = n.getStore();
 	return e === void 0 ? [] : (e.exposed = !0, e.membership = void 0, e.observations);
 }, s = (e) => n.run({ observations: [] }, e), c = (e) => e.join("?").replace(/\s+/g, " ").trim();
-//#endregion
 export { o as currentRawReads, r as isolateRawReadScope, c as rawSqlPreview, i as recordRawRead, s as runWithRawReadScope };

package/dist/reaction.js

@@ -1,4 +1,4 @@
-//#region src/reaction.ts
+// src/reaction.ts
 var e = (e) => typeof e.query == "string", t = (t) => e(t.watch), n = /^(\d+(?:\.\d+)?)\s*(ms|milliseconds?|s|seconds?|m|minutes?|h|hours?|d|days?)$/i, r = (e, t, r) => {
 	if (typeof e == "number") {
 		if (!Number.isFinite(e) || e <= 0) throw Error(`reaction '${r}': ${t} must be a positive duration`);
@@ -81,5 +81,4 @@ var c = (e) => {
 		via: "agent"
 	}), "acted");
 };
-//#endregion
 export { i as DEFAULT_LEVEL_RESYNC_MS, o as DEFAULT_LEVEL_STUCK_MS, a as MIN_LEVEL_RESYNC_MS, d as ReactionRateLimiter, s as defineReaction, t as isLevelReaction, e as isLevelWatch, r as reactionDurationMs, f as reactionRateBucketKey, p as runReaction };

package/dist/reactiveConfig.js

@@ -1,4 +1,4 @@
-//#region src/reactiveConfig.ts
+// src/reactiveConfig.ts
 var e = 8, t = 32, n = (e) => {
 	if (e == null || e === "") return;
 	let t = Number(e);
@@ -7,5 +7,4 @@ var e = 8, t = 32, n = (e) => {
 	deliveryConcurrency: n(t.VOLTRO_REACTIVE_DELIVERY_CONCURRENCY) ?? n(e?.deliveryConcurrency) ?? 8,
 	rawReadTrackingLimit: n(t.VOLTRO_RAW_READ_TRACKING_LIMIT) ?? n(e?.rawReadTrackingLimit) ?? 32
 });
-//#endregion
 export { e as DEFAULT_DELIVERY_CONCURRENCY, t as DEFAULT_RAW_READ_TRACKING_LIMIT, r as resolveReactiveConfig };

package/dist/readClassification.js

@@ -1,5 +1,5 @@
 import { getRelations as e } from "@voltro/database";
-//#region src/readClassification.ts
+// src/readClassification.ts
 var t = (e) => {
 	if (typeof e != "object" || !e) return;
 	let t = e.subquery;
@@ -53,5 +53,4 @@ var t = (e) => {
 		restricting: i
 	};
 };
-//#endregion
 export { a as classifyRead };

package/dist/readRecorder.js

@@ -1,22 +1,23 @@
 import { classifyRead as e } from "./readClassification.js";
-import { Effect as t } from "effect";
-import { AsyncLocalStorage as n } from "node:async_hooks";
-//#region src/readRecorder.ts
-var r = new n(), i, a = /* @__PURE__ */ new Set(), o = (e) => {
-	i = e, a.clear();
-}, s = () => i !== void 0, c = (e, t) => {
-	if (i === void 0) return;
-	let n = new Set(t), o = a.has(e) || n.size === 0;
-	r.enterWith({
+import { noteCacheRead as t } from "./computedQueryCache.js";
+import { Effect as n } from "effect";
+import { AsyncLocalStorage as r } from "node:async_hooks";
+// src/readRecorder.ts
+var i = new r(), a, o = /* @__PURE__ */ new Set(), s = (e) => {
+	a = e, o.clear();
+}, c = () => a !== void 0, l = (e, t) => {
+	if (a === void 0) return;
+	let n = new Set(t), r = o.has(e) || n.size === 0;
+	i.enterWith({
 		procedure: e,
 		declared: n,
 		composed: /* @__PURE__ */ new Set(),
 		restricting: /* @__PURE__ */ new Set(),
 		depth: { n: 0 },
-		...o ? { muted: !0 } : {}
+		...r ? { muted: !0 } : {}
 	});
-}, l = async (e, t, n = []) => {
-	let i = {
+}, u = async (e, t, n = []) => {
+	let r = {
 		procedure: e,
 		declared: new Set(n),
 		composed: /* @__PURE__ */ new Set(),
@@ -24,12 +25,12 @@ var r = new n(), i, a = /* @__PURE__ */ new Set(), o = (e) => {
 		depth: { n: 0 }
 	};
 	return {
-		result: await r.run(i, t),
-		composed: i.composed,
-		restricting: i.restricting
+		result: await i.run(r, t),
+		composed: r.composed,
+		restricting: r.restricting
 	};
-}, u = async (e) => {
-	let t = r.getStore();
+}, d = async (e) => {
+	let t = i.getStore();
 	if (t === void 0) return e();
 	t.depth.n += 1;
 	try {
@@ -37,30 +38,29 @@ var r = new n(), i, a = /* @__PURE__ */ new Set(), o = (e) => {
 	} finally {
 		--t.depth.n;
 	}
-}, d = (e) => t.suspend(() => {
-	let n = r.getStore();
-	return n === void 0 ? e : t.acquireUseRelease(t.sync(() => {
-		n.depth.n += 1;
-	}), () => e, () => t.sync(() => {
-		--n.depth.n;
+}, f = (e) => n.suspend(() => {
+	let t = i.getStore();
+	return t === void 0 ? e : n.acquireUseRelease(n.sync(() => {
+		t.depth.n += 1;
+	}), () => e, () => n.sync(() => {
+		--t.depth.n;
 	}));
-}), f = (t) => {
-	let n = r.getStore();
+}), p = (t) => {
+	let n = i.getStore();
 	if (n === void 0 || n.muted === !0) return;
-	let { composed: o, restricting: s } = e(t, n.depth.n > 0);
-	for (let e of o) n.composed.add(e);
+	let { composed: r, restricting: s } = e(t, n.depth.n > 0);
+	for (let e of r) n.composed.add(e);
 	for (let e of s) n.composed.has(e) || n.restricting.add(e);
-	if (i === void 0 || a.has(n.procedure)) return;
-	let c = m(n.procedure, n.composed, n.declared, n.restricting);
-	c !== void 0 && (a.add(n.procedure), i(c));
-}, p = (e) => new Proxy(e, { get(e, t) {
-	let n = Reflect.get(e, t, e);
-	return typeof n == "function" && t !== "query" ? n.bind(e) : t !== "query" || typeof n != "function" ? n : (t) => (f(t), n.call(e, t));
-} }), m = (e, t, n, r) => {
+	if (a === void 0 || o.has(n.procedure)) return;
+	let c = h(n.procedure, n.composed, n.declared, n.restricting);
+	c !== void 0 && (o.add(n.procedure), a(c));
+}, m = (e) => new Proxy(e, { get(e, n) {
+	let r = Reflect.get(e, n, e);
+	return typeof r == "function" && n !== "query" ? r.bind(e) : n !== "query" || typeof r != "function" ? r : (n) => (p(n), t(n), r.call(e, n));
+} }), h = (e, t, n, r) => {
 	let i = [...t], a = 0;
 	for (let e of i) n.has(e) || (i[a++] = e);
 	if (i.length = a, i.sort(), i.length !== 0) return `${e}: read ${i.map((e) => `\`${e}\``).join(", ")} without declaring ${i.length === 1 ? "it" : "them"} in \`source:\`.\n  A write to ${i.length === 1 ? "that table" : "those tables"} will not re-run this query, so an open view keeps\n  showing what it showed before. The write itself is fine, which is why nothing else reports this.
   Observed on this boot — a branch that did not run contributes nothing, so this names what WAS\n  read and never claims the declaration is otherwise complete.` + (r.size > 0 ? `\n  Not counted (read only to narrow the result): ${[...r].sort().map((e) => `\`${e}\``).join(", ")}.` : "");
 };
-//#endregion
-export { c as enterReadRecording, f as noteRead, s as readRecordingActive, l as recordReads, p as recordingStore, u as restrictingReads, d as restrictingReadsEffect, o as setSourceGapSink, m as sourceGapReport };
+export { l as enterReadRecording, p as noteRead, c as readRecordingActive, u as recordReads, m as recordingStore, d as restrictingReads, f as restrictingReadsEffect, s as setSourceGapSink, h as sourceGapReport };

package/dist/readScopePredicate.js

@@ -0,0 +1,11 @@
+import { and as e } from "@voltro/database";
+// src/readScopePredicate.ts
+var t = (t, n) => {
+	let r = t.setOp === void 0 ? t.alias ?? ((t.joins?.length ?? 0) > 0 ? t.table : void 0) : void 0, i = n((e) => r === void 0 ? e : `${r}.${e}`);
+	return {
+		...t,
+		...r === void 0 ? {} : { alias: r },
+		predicate: t.predicate ? e(t.predicate, i) : i
+	};
+};
+export { t as addReadScopePredicate };

package/dist/rebac.js

@@ -1,5 +1,5 @@
 import { Schema as e } from "effect";
-//#region src/rebac.ts
+// src/rebac.ts
 var t = "admin:full", n = class extends e.TaggedError()("AccessDenied", {
 	action: e.String,
 	resourceType: e.String,
@@ -100,5 +100,4 @@ var t = "admin:full", n = class extends e.TaggedError()("AccessDenied", {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
 };
-//#endregion
 export { n as AccessDenied, t as REBAC_ADMIN_SCOPE, f as assertCan, d as can, s as clearResourcePolicies, i as defineResourcePolicy, u as effectiveRelations, a as getResourcePolicy, o as listResourcePolicies, c as rebacPolicyGraph, g as revokedIds, h as visibleRows };

package/dist/rebacInterceptor.js

@@ -1,7 +1,7 @@
 import { AccessDenied as e, can as t, getResourcePolicy as n, visibleRows as r } from "./rebac.js";
 import { Effect as i } from "effect";
 import { and as a, eq as o, id as s, table as c, text as l, timestamp as u } from "@voltro/database";
-//#region src/rebacInterceptor.ts
+// src/rebacInterceptor.ts
 var d = c("_voltro_rebac_tuples", {
 	id: s({ prefix: "rbct" }),
 	subjectId: l(),
@@ -77,5 +77,4 @@ var d = c("_voltro_rebac_tuples", {
 		});
 	};
 };
-//#endregion
 export { d as _voltroRebacTuplesTable, m as buildRebacInterceptor, g as buildRebacReadFilter, f as loadResourceTuples, h as loadSubjectTuples };

package/dist/registry.js

@@ -1,6 +1,6 @@
 import { Effect as e } from "effect";
 import { ValidationError as t, ValidationErrors as n, effectiveScopes as r, hasEffectiveScope as i, recheckGuardsEffect as a } from "@voltro/protocol";
-//#region src/registry.ts
+// src/registry.ts
 var o = (t) => ({
 	has: (e) => i(t, e),
 	hasAny: (e) => e.some((e) => i(t, e)),
@@ -25,5 +25,4 @@ var o = (t) => ({
 		...a === void 0 ? {} : { params: a }
 	}))
 };
-//#endregion
 export { s as appValidation, o as makeAppAccess };

package/dist/relevantFields.js

@@ -1,6 +1,6 @@
 import { resolveDependentTables as e } from "./dependencyGraph.js";
 import { getRelations as t, getTable as n, isColumnReference as r } from "@voltro/database";
-//#region src/relevantFields.ts
+// src/relevantFields.ts
 var i = (e) => e.alias !== void 0 || (e.joins?.length ?? 0) > 0 || e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), a = /* @__PURE__ */ new Set(["*"]), o = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) o(e.not, t);
@@ -61,5 +61,4 @@ var i = (e) => e.alias !== void 0 || (e.joins?.length ?? 0) > 0 || e.setOp !== v
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
 };
-//#endregion
 export { a as ALL_COLUMNS, f as isEventRelevant, d as mutatedColumns, u as resolveRelevantFields };