@voltro/runtime 0.86.0 → 0.88.0

package/dist/servePipeline.js

@@ -1,26 +1,28 @@
-import { enterReadRecording as e } from "./readRecorder.js";
-import { getRowFilter as t, makeDefaultRefilter as n, resolveRowFilterScope as r } from "./rowFilter.js";
-import { isComputedQuery as i } from "./computedQuery.js";
-import { TX_READ_VERSIONS_KEY as a, isTransactionReadConflict as o } from "./storeMiddleware.js";
-import { evaluateTouchedRules as s, makeRuleCapture as c } from "./businessRules.js";
-import { enforceApproval as l } from "./approvals.js";
-import { Cause as u, Effect as d, Exit as f, Option as p } from "effect";
-import { isTransientContention as m } from "@voltro/database";
-import { SubjectService as h, checkGuardsEffect as g, currentSubjectAuthority as _, recheckGuardsEffect as v } from "@voltro/protocol";
-import { createLogger as y } from "@voltro/logger";
-//#region src/servePipeline.ts
-var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
-	if (f.isSuccess(e)) return e.value;
-	let t = u.findErrorOption(e.cause);
-	throw p.isSome(t) ? t.value : u.squash(e.cause);
-}), x = (e) => b(e), S = (e, t) => e.pipe(d.provideService(h, t)), C = async (e, t, n, r) => {
-	let i = await d.runPromise(g(t, e.guards, n, {
+import { cachedComputedCall as e, computedAuthorityRefusal as t, computedCacheKey as n, computedSubjectIdentity as r, currentQueryDependencies as i, enterQueryDependencies as a } from "./computedQueryCache.js";
+import { enterReadRecording as o } from "./readRecorder.js";
+import { getRowFilter as s, makeDefaultRefilter as c, resolveRowFilterScope as l } from "./rowFilter.js";
+import { isComputedQuery as u } from "./computedQuery.js";
+import { TX_READ_VERSIONS_KEY as d, isTransactionReadConflict as f } from "./storeMiddleware.js";
+import { evaluateTouchedRules as p, makeRuleCapture as m } from "./businessRules.js";
+import { enforceApproval as h } from "./approvals.js";
+import { observeApiRoleEffect as g } from "./apiRoleWorkloadMetrics.js";
+import { Cause as _, Effect as v, Exit as y, Option as b } from "effect";
+import { isTransientContention as x } from "@voltro/database";
+import { SubjectService as S, checkGuardsEffect as C, currentSubjectAuthority as w, recheckGuardsEffect as T } from "@voltro/protocol";
+import { createLogger as E } from "@voltro/logger";
+// src/servePipeline.ts
+var D = (e, t) => v.runPromiseExit(e, t).then((e) => {
+	if (y.isSuccess(e)) return e.value;
+	let t = _.findErrorOption(e.cause);
+	throw b.isSome(t) ? t.value : _.squash(e.cause);
+}), O = (e) => D(e), k = (e, t) => e.pipe(v.provideService(S, t)), A = async (e, t, n, r) => {
+	let i = await v.runPromise(C(t, e.guards, n, {
 		defaultDeny: r === !0,
 		procedure: e.name
 	}));
 	if (i) throw i;
-}, w = async (e, t, n, r) => {
-	e.requiresApproval !== void 0 && await l({
+}, j = async (e, t, n, r) => {
+	e.requiresApproval !== void 0 && await h({
 		procedure: e.name,
 		kind: t,
 		policy: e.requiresApproval,
@@ -28,20 +30,20 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 		input: r,
 		traceId: n.traceId
 	});
-}, T = y({ scope: "voltro:rpc" }), E = async (e) => {
-	if (t() === void 0) return e;
-	let n = await x(r(e.subject, (e) => {
-		T.error("row filter failed to load", {}, e instanceof Error ? e : Error(String(e)));
+}, M = E({ scope: "voltro:rpc" }), N = async (e) => {
+	if (s() === void 0) return e;
+	let t = await O(l(e.subject, (e) => {
+		M.error("row filter failed to load", {}, e instanceof Error ? e : Error(String(e)));
 	}));
 	return {
 		...e,
-		rowFilter: n
+		rowFilter: t
 	};
-}, D = (e) => ({
+}, P = (e) => ({
 	...e.surface === void 0 ? {} : { surface: e.surface },
 	...e.publicApi === void 0 ? {} : { publicApi: e.publicApi },
 	...e.remoteAddr === void 0 ? {} : { remoteAddr: e.remoteAddr }
-}), O = (e) => {
+}), F = (e) => {
 	let t = e.descriptor.target;
 	if (t == null) return [];
 	let n = Array.isArray(t) ? t : [t], r = /* @__PURE__ */ new Set();
@@ -50,7 +52,7 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 		typeof t == "string" && t.length > 0 && r.add(t);
 	}
 	return [...r];
-}, k = async (e) => {
+}, I = async (e) => {
 	let { store: t, target: n, procedure: r, input: i, output: a } = e;
 	if (n == null) return;
 	let o = Array.isArray(n) ? n : [n];
@@ -67,15 +69,15 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 			await u.set(c.map((e) => String(e)));
 		}
 	}
-}, A = (e, t) => e === void 0 ? {} : { enqueueOutcome: async (n, r, i) => {
+}, L = (e, t) => e === void 0 ? {} : { enqueueOutcome: async (n, r, i) => {
 	let a = e(t);
 	if (a === void 0) throw TypeError("Invocation outcome outbox is unavailable");
 	return a.enqueue(n, r, i);
-} }, j = async (e) => {
+} }, R = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
-			let t = d.tryPromise({
+			let t = v.tryPromise({
 				try: () => e.runExecutor(),
 				catch: (e) => e
 			}), n = e.interceptor(t, {
@@ -87,10 +89,10 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 				...e.enqueueOutcome === void 0 ? {} : { enqueueOutcome: e.enqueueOutcome },
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId },
 				...e.target !== void 0 && e.target.length > 0 ? { target: e.target } : {},
-				...D(e.requestContext)
-			}), r = await d.runPromiseExit(n, e.requestContext.signal === void 0 ? void 0 : { signal: e.requestContext.signal });
-			if (f.isSuccess(r)) return r.value;
-			throw u.squash(r.cause);
+				...P(e.requestContext)
+			}), r = await v.runPromiseExit(n, e.requestContext.signal === void 0 ? void 0 : { signal: e.requestContext.signal });
+			if (y.isSuccess(r)) return r.value;
+			throw _.squash(r.cause);
 		}
 		return await e.runExecutor();
 	} catch (e) {
@@ -103,177 +105,255 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 			status: r
 		});
 	}
-}, M = (e) => m(e) || o(e), N = 3, P = (e) => new Promise((t) => setTimeout(t, e)), F = async (e, t) => {
-	let n = t?.delay ?? ((e) => P(e * 20 + Math.floor(Math.random() * 30))), r = t?.attempts ?? 3;
+}, z = (e) => x(e) || f(e), B = 3, V = (e) => new Promise((t) => setTimeout(t, e)), H = async (e, t) => {
+	let n = t?.delay ?? ((e) => V(e * 20 + Math.floor(Math.random() * 30))), r = t?.attempts ?? 3;
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= r || !M(e)) throw o(e) ? e.conflict : e;
+		if (t >= r || !z(e)) throw f(e) ? e.conflict : e;
 		await n(t);
 	}
-}, I = (e) => (t, n, r) => j({
+}, U = (e) => (t, n, r) => R({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
 	requestContext: r,
-	...A(e.outcomeOutbox, r),
-	target: O(t),
+	...L(e.outcomeOutbox, r),
+	target: F(t),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
 		let i = Date.now();
-		await C(t.descriptor, r.subject, n, e.defaultDeny), await w(t.descriptor, "mutation", r, n);
-		let o = await E(r), l = e.resolveStore === void 0 ? e.store : await e.resolveStore(o), u = [], f = [], p = await F(async () => l.transactional(async (p) => {
-			u.length = 0, f.length = 0, p[Symbol.for("@voltro/runtime:tx-fold-releases")] = f, p[a] = /* @__PURE__ */ new Map();
-			let m = e.undoCapture?.(p), h = m ? m.tx : p, g = c(h), _ = e.buildContext(o, g.tx, {
-				committedStore: l,
+		await Y(t, "mutation", { defaultDeny: e.defaultDeny === !0 })(n, r);
+		let a = {
+			...r,
+			subject: w(r.subject)
+		};
+		await j(t.descriptor, "mutation", a, n);
+		let o = await N(a), s = e.resolveStore === void 0 ? e.store : await e.resolveStore(o), c = [], l = [], u = await H(async () => s.transactional(async (a) => {
+			c.length = 0, l.length = 0, a[Symbol.for("@voltro/runtime:tx-fold-releases")] = l, a[d] = /* @__PURE__ */ new Map();
+			let u = t.descriptor.undo?.capture === !1 ? void 0 : e.undoCapture?.(a), f = u ? u.tx : a, h = m(f), g = e.buildContext(o, h.tx, {
+				committedStore: s,
 				afterCommit: (e) => {
-					u.push(e);
+					c.push(e);
 				}
-			}), v = t.executor(n, _), y = d.isEffect(v) ? await e.runEffect(S(v, r.subject), _.store) : await v;
-			if (await k({
-				store: _.store,
+			}), _ = e.measureSync ? e.measureSync(() => t.executor(n, g)) : t.executor(n, g), y = v.isEffect(_) ? await e.runEffect(k(_, o.subject), g.store) : await _;
+			if (await I({
+				store: g.store,
 				target: t.descriptor.target,
 				procedure: t.descriptor.name,
 				input: n,
 				output: y
-			}), m && await m.persist(_.store, {
+			}), u && await u.persist(g.store, {
 				tag: t.descriptor.name,
-				subject: r.subject,
+				subject: o.subject,
 				traceId: r.traceId
-			}), await s({
-				touched: g.drain(),
-				store: _.store,
-				subject: r.subject
+			}), await p({
+				touched: h.drain(),
+				store: g.store,
+				subject: o.subject
 			}), e.beforeMutationCommit !== void 0) {
-				let a = O(t), s = e.beforeMutationCommit({
+				let r = F(t), a = e.beforeMutationCommit({
 					tag: t.descriptor.name,
 					kind: "mutation",
 					input: n,
 					output: y,
 					subject: o.subject,
 					traceId: o.traceId,
-					store: _.store,
-					..._.outbox === void 0 ? {} : { outbox: _.outbox },
+					store: g.store,
+					...g.outbox === void 0 ? {} : { outbox: g.outbox },
 					startedAt: i,
 					durationMs: Math.max(0, Date.now() - i),
 					...o.spanId === void 0 ? {} : { spanId: o.spanId },
-					...a.length > 0 ? { target: a } : {},
-					...D(o)
+					...r.length > 0 ? { target: r } : {},
+					...P(o)
 				});
-				await e.runEffect(S(s, r.subject), _.store);
+				await e.runEffect(k(a, o.subject), g.store);
 			}
 			return y;
 		}), { ...e.replayAttempts === void 0 ? {} : { attempts: e.replayAttempts } });
-		if (f.length > 0) {
-			let t = e.buildContext(o, l, {
-				committedStore: l,
+		if (l.length > 0) {
+			let t = e.buildContext(o, s, {
+				committedStore: s,
 				afterCommit: () => {}
 			}).store;
-			for (let e of f.splice(0)) await t.update(e.table, e.pk, e.patch);
+			for (let e of l.splice(0)) await t.update(e.table, e.pk, e.patch);
 		}
-		for (let e of u) await e();
-		return p;
+		for (let e of c) await e();
+		return e.settleCacheInvalidations !== void 0 && await e.settleCacheInvalidations(), u;
 	}
-}), L = (e) => (t, n, r, i) => j({
+}), W = (e) => (t, n, r, i) => R({
 	name: t.name,
 	kind: "workflow",
 	input: n,
 	requestContext: r,
-	...A(e.outcomeOutbox, r),
+	...L(e.outcomeOutbox, r),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
-	runExecutor: async () => (await C(t, r.subject, n, e.defaultDeny), i())
-}), R = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, z = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, B = (e) => {
+	runExecutor: async () => (await A(t, r.subject, n, e.defaultDeny), i())
+}), G = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, K = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, q = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, V = (e, t, n) => (r) => () => d.runPromise(v(r, e.descriptor.guards, t, {
+}, J = (e, t, n) => (r) => () => v.runPromise(T(r, e.descriptor.guards, t, {
 	defaultDeny: n === !0,
 	procedure: e.descriptor.name
-})), H = (e, n) => e.rowFilter !== void 0 || t() === void 0 ? n(e) : d.promise(() => E(e)).pipe(d.flatMap((e) => {
-	let t = n(e);
-	return d.isEffect(t) ? t : d.succeed(t);
-})), U = (n) => (r, a) => (o) => {
-	if (o.rowFilter === void 0 && t() !== void 0) return H(o, (e) => U(n)(r, a)(e));
-	let s = n.buildContext(o), c = V(r, a, n.defaultDeny)(o.subject), l = async () => {
-		let e = await c();
+})), Y = (e, t, n = {}) => async (r, i) => {
+	let a = i.subject;
+	n.bindReplayAuthority?.({
+		tag: e.descriptor.name,
+		kind: t,
+		input: r,
+		subject: a,
+		traceId: i.traceId,
+		...i.surface === void 0 ? {} : { surface: i.surface },
+		...i.publicApi === void 0 ? {} : { publicApi: i.publicApi },
+		...i.remoteAddr === void 0 ? {} : { remoteAddr: i.remoteAddr }
+	});
+	let o = await J(e, r, n.defaultDeny)(a)();
+	if (o) throw o;
+}, X = (e, t) => e.rowFilter !== void 0 || s() === void 0 ? t(e) : v.promise(() => N(e)).pipe(v.flatMap((e) => {
+	let n = t(e);
+	return v.isEffect(n) ? n : v.succeed(n);
+})), Z = (e, t) => Q(e, t, /* @__PURE__ */ new Set()), Q = (c, l, d) => (f, p) => (m) => {
+	if (m.rowFilter === void 0 && s() !== void 0) return X(m, (e) => Q(c, l, d)(f, p)(e));
+	let h = l ?? (m.connection?.transport === "http" ? "rpc" : "subscriptions"), _ = (e) => c.workloadMetrics ? c.workloadMetrics.measureSync(h, e) : e(), y = (e, t) => {
+		let n = c.provideEffect(e, t);
+		return c.workloadMetrics ? g(n, c.workloadMetrics, h) : n;
+	}, b = c.buildContext(m), x = J(f, p, c.defaultDeny)(m.subject), S = async () => {
+		let e = await x();
 		if (e) throw e;
 		let t = {
-			...o,
-			subject: _(o.subject)
-		}, i = n.buildContext(await E(t)), s = r.executor(a, i), l = d.isEffect(s) ? await b(n.provideEffect(S(s, t.subject), i.store), o.signal === void 0 ? void 0 : { signal: o.signal }) : R(await Promise.resolve(s)), u = await c();
-		if (u) throw u;
-		return l;
-	}, u = (e) => {
-		let t = R(e);
-		if (z(t)) {
-			let e = n.finalize(t, o), i = B(r);
-			if (i.length === 0) return e;
-			let a = e.dependentTables ?? [];
+			...m,
+			subject: w(m.subject)
+		}, n = c.buildContext(await N(t)), r = _(() => f.executor(p, n)), i = v.isEffect(r) ? await D(y(k(r, t.subject), n.store), m.signal === void 0 ? void 0 : { signal: m.signal }) : G(await Promise.resolve(r)), a = await x();
+		if (a) throw a;
+		return i;
+	}, T = (e, t = i()) => {
+		let n = G(e);
+		if (K(n)) {
+			let e = c.finalize(n, m), t = q(f);
+			if (t.length === 0) return e;
+			let r = e.dependentTables ?? [];
 			return {
 				...e,
-				dependentTables: [.../* @__PURE__ */ new Set([...a, ...i])]
+				dependentTables: [.../* @__PURE__ */ new Set([...r, ...t])]
 			};
 		}
 		return {
 			__voltroComputed: !0,
-			value: t,
-			dependentTables: B(r),
-			tenantId: o.subject?.tenantId ?? null,
-			recompute: l
+			value: n,
+			dependentTables: [.../* @__PURE__ */ new Set([...q(f), ...t])],
+			tenantId: m.subject?.tenantId ?? null,
+			recompute: S
 		};
-	}, f = (e) => {
-		let t = u(e);
-		return i(t) ? d.tryPromise({
-			try: c,
+	}, E = (e, t) => {
+		let n = T(e, t);
+		return u(n) ? v.tryPromise({
+			try: x,
 			catch: (e) => e
-		}).pipe(d.flatMap((e) => e ? d.fail(e) : d.succeed(t))) : t;
-	}, p = (e) => {
-		let t = f(e);
-		return d.isEffect(t) ? t : d.succeed(t);
-	}, m = () => {
-		e(r.descriptor.name, B(r));
-		let t = r.executor(a, s);
-		return d.isEffect(t) ? n.provideEffect(S(t, o.subject), s.store).pipe(d.flatMap(p)) : t instanceof Promise ? d.promise(() => t).pipe(d.flatMap(p)) : f(t);
-	}, h = () => {
-		let e = r.descriptor.guards;
-		return (!e || e.length === 0) && n.defaultDeny !== !0 && o.subject.type !== "service" ? m() : g(o.subject, e, a, {
-			defaultDeny: n.defaultDeny === !0,
-			procedure: r.descriptor.name
-		}).pipe(d.flatMap((e) => {
-			if (e) return d.fail(e);
-			let t = m();
-			return d.isEffect(t) ? t : d.succeed(t);
+		}).pipe(v.flatMap((e) => e ? v.fail(e) : v.succeed(n))) : n;
+	}, O = (e, t) => {
+		let n = E(e, t);
+		return v.isEffect(n) ? n : v.succeed(n);
+	}, A = () => {
+		let i = c.computedCache, a = f.descriptor.cache;
+		if (i === void 0 || a === void 0 || d.has(f.descriptor.name)) return;
+		let o = i.policyFor(a);
+		if (o !== void 0) return v.tryPromise({
+			try: async () => {
+				let e = await x();
+				if (e) throw e;
+				return N({
+					...m,
+					subject: w(m.subject)
+				});
+			},
+			catch: (e) => e
+		}).pipe(v.flatMap((a) => {
+			let s = a.subject, l = c.buildContext(a), u = r(s), h = q(f), g = n({
+				name: f.descriptor.name,
+				codeIdentity: i.codeIdentity,
+				output: f.descriptor.output,
+				input: f.descriptor.input,
+				decodedInput: p,
+				scope: o.scope,
+				subject: s,
+				rowFilter: a.rowFilter,
+				declaredSources: h
+			});
+			return "bypass" in g ? (g.bypass === "input-not-encodable" && i.notice(f.descriptor.name, g.bypass, `${f.descriptor.name}: \`cache:\` NOT applied — the input does not encode through its \`input\` schema, so it has no key.`), g.bypass === "subject-not-encodable" && i.notice(f.descriptor.name, g.bypass, `${f.descriptor.name}: \`cache:\` NOT applied — the subject contains claims that cannot be keyed as data. Keep subject claims as plain data, or drop \`cache:\`.`), v.tryPromise({
+				try: S,
+				catch: (e) => e
+			}).pipe(v.flatMap((e) => O(e)))) : e({
+				cache: i,
+				policy: o,
+				key: g.key,
+				name: f.descriptor.name,
+				sources: h,
+				output: f.descriptor.output,
+				subject: s,
+				rowFilter: a.rowFilter,
+				ctx: l,
+				...m.signal === void 0 ? {} : { signal: m.signal },
+				execute: (e, t) => {
+					let n = _(() => f.executor(p, e));
+					return v.isEffect(n) ? D(y(k(n, t), l.store), m.signal === void 0 ? void 0 : { signal: m.signal }) : Promise.resolve(n);
+				},
+				onDescriptor: () => {
+					d.add(f.descriptor.name);
+				},
+				isDescriptor: (e) => K(G(e)),
+				unwrap: (e) => G(e)
+			}).pipe(v.flatMap(({ value: e, dependencies: t }) => O(e, t)), v.flatMap((e) => {
+				let n = r(w(m.subject));
+				return u === n ? v.succeed(e) : v.fail(t());
+			}));
+		}));
+	}, j = () => {
+		o(f.descriptor.name, q(f)), a();
+		let e = A();
+		if (e !== void 0) return e;
+		let t = _(() => f.executor(p, b));
+		return v.isEffect(t) ? y(k(t, m.subject), b.store).pipe(v.flatMap(O)) : t instanceof Promise ? v.promise(() => t).pipe(v.flatMap(O)) : E(t);
+	}, M = () => {
+		let e = f.descriptor.guards;
+		return (!e || e.length === 0) && c.defaultDeny !== !0 && m.subject.type !== "service" ? j() : C(m.subject, e, p, {
+			defaultDeny: c.defaultDeny === !0,
+			procedure: f.descriptor.name
+		}).pipe(v.flatMap((e) => {
+			if (e) return v.fail(e);
+			let t = j();
+			return v.isEffect(t) ? t : v.succeed(t);
 		}));
 	};
-	if (!n.interceptor) return h();
-	let v = d.suspend(() => {
-		let e = h();
-		return d.isEffect(e) ? e : d.succeed(e);
+	if (!c.interceptor) return M();
+	let F = v.suspend(() => {
+		let e = M();
+		return v.isEffect(e) ? e : v.succeed(e);
 	});
-	return n.interceptor(v, {
-		tag: r.descriptor.name,
+	return c.interceptor(F, {
+		tag: f.descriptor.name,
 		kind: "query",
-		input: a,
-		subject: o.subject,
-		traceId: o.traceId,
-		...o.spanId === void 0 ? {} : { spanId: o.spanId },
-		...D(o)
+		input: p,
+		subject: m.subject,
+		traceId: m.traceId,
+		...m.spanId === void 0 ? {} : { spanId: m.spanId },
+		...P(m)
 	});
-}, W = (e) => async (t, n, r) => {
-	let a = await E(r), o = U(e)(t, n)(a), s = d.isEffect(o) ? await x(o) : o;
-	if (i(s)) return s.value;
-	let c = e.buildContext(a), l = await e.queryRows(s, a, c.store), u = await V(t, n, e.defaultDeny)(a.subject)();
-	if (u) throw u;
-	return l;
-}, G = (e) => (t, r, a, o) => {
-	let s = !1, c;
+}, $ = (e) => async (t, n, r) => {
+	let i = await N(r), a = Z(e, "rpc")(t, n)(i), o = v.isEffect(a) ? await O(a) : a;
+	if (u(o)) return o.value;
+	let s = e.buildContext(i), c = await e.queryRows(o, i, s.store), l = await J(t, n, e.defaultDeny)(i.subject)();
+	if (l) throw l;
+	return c;
+}, ee = (e) => (t, n, r, i) => {
+	let a = !1, o;
 	return (async () => {
 		try {
-			let l = await E(a), u = U(e)(t, r)(l), f = d.isEffect(u) ? await x(u) : u, p = (e) => o(e), m = i(f) ? await e.subscribeComputed(f, p, l) : await e.subscribeDescriptor(f, p, l, V(t, r, e.defaultDeny)(l.subject), n(l.subject));
-			s ? m() : c = m;
+			let s = await N(r), l = Z(e, "subscriptions")(t, n)(s), d = v.isEffect(l) ? await O(l) : l, f = (e) => i(e), p = u(d) ? await e.subscribeComputed(d, f, s) : await e.subscribeDescriptor(d, f, s, J(t, n, e.defaultDeny)(s.subject), c(s.subject));
+			a ? p() : o = p;
 		} catch (e) {
-			o({
+			i({
 				_tag: "error",
 				error: e instanceof Error ? {
 					message: e.message,
@@ -282,24 +362,28 @@ var b = (e, t) => d.runPromiseExit(e, t).then((e) => {
 			});
 		}
 	})(), () => {
-		s = !0, c?.();
+		a = !0, o?.();
 	};
-}, K = (t) => (n, r, i) => j({
-	name: n.descriptor.name,
+}, te = (e) => (t, n, r) => R({
+	name: t.descriptor.name,
 	kind: "action",
-	input: r,
-	requestContext: i,
-	...A(t.outcomeOutbox, i),
-	target: O(n),
-	...t.interceptor ? { interceptor: t.interceptor } : {},
-	...t.recordMetric ? { recordMetric: t.recordMetric } : {},
+	input: n,
+	requestContext: r,
+	...L(e.outcomeOutbox, r),
+	target: F(t),
+	...e.interceptor ? { interceptor: e.interceptor } : {},
+	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await C(n.descriptor, i.subject, r, t.defaultDeny), await w(n.descriptor, "action", i, r);
-		let a = t.buildContext(await E(i));
-		e(n.descriptor.name, B(n));
-		let o = n.executor(r, a);
-		return d.isEffect(o) ? t.runEffect(S(o, i.subject), a.store) : o;
+		await Y(t, "action", { defaultDeny: e.defaultDeny === !0 })(n, r);
+		let i = {
+			...r,
+			subject: w(r.subject)
+		};
+		await j(t.descriptor, "action", i, n);
+		let a = e.buildContext(await N(i));
+		o(t.descriptor.name, q(t));
+		let s = e.measureSync ? e.measureSync(() => t.executor(n, a)) : t.executor(n, a), c = v.isEffect(s) ? await e.runEffect(k(s, i.subject), a.store) : await s;
+		return e.settleCacheInvalidations !== void 0 && await e.settleCacheInvalidations(), c;
 	}
 });
-//#endregion
-export { N as DEFAULT_MUTATION_REPLAY_ATTEMPTS, k as applyDeclaredRelations, K as makeActionRunner, I as makeMutationRunner, W as makeOneShotQueryRunner, U as makeQueryDescriptorProducer, V as makeQueryReauthorizer, G as makeQuerySubscriber, L as makeWorkflowStartRunner, x as runProvidedEffect, F as runWithDeadlockRetry, E as withRowFilter, H as withScopedRequest };
+export { B as DEFAULT_MUTATION_REPLAY_ATTEMPTS, I as applyDeclaredRelations, te as makeActionRunner, Y as makeMutationReplayAdmission, U as makeMutationRunner, $ as makeOneShotQueryRunner, Z as makeQueryDescriptorProducer, J as makeQueryReauthorizer, ee as makeQuerySubscriber, W as makeWorkflowStartRunner, O as runProvidedEffect, H as runWithDeadlockRetry, N as withRowFilter, X as withScopedRequest };

package/dist/serverOnlyAudit.js

@@ -1,5 +1,5 @@
 import { SchemaAST as e } from "effect";
-//#region src/serverOnlyAudit.ts
+// src/serverOnlyAudit.ts
 var t = (t) => {
 	let n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), i = (t) => {
 		if (!r.has(t)) switch (r.add(t), t.encoding !== void 0 && i(e.toEncoded(t)), t._tag) {
@@ -62,5 +62,4 @@ var t = (t) => {
 })) : [], o = (e) => {
 	if (e.length !== 0) return `A cached query shares one entry across tenants:\n${e.map((e) => `  • query '${e.query}' caches scope:'global' while reading '${e.table}', a tenant()-scoped table`).join("\n")}\n\nscope:'global' stores ONE entry for every caller. On a tenant-scoped table the\nrows depend on who asked, so the first caller's rows are served to the next one.\n\nUse scope:'tenant' — one entry per org, none shared across orgs. Use 'subject'\nif the result also depends on WHICH person is asking, and 'global' only for data\nthat depends on neither.`;
 };
-//#endregion
 export { a as cacheScopeLeaks, o as formatCacheScopeLeaks, i as formatServerOnlyLeaks, t as schemaPropertyNames, r as serverOnlyLeaks };

package/dist/serverTracer.js

@@ -1,5 +1,5 @@
 import { Effect as e, Layer as t } from "effect";
-//#region src/serverTracer.ts
+// src/serverTracer.ts
 var n = Symbol.for("@voltro/runtime:serverTracer"), r = (() => {
 	let e = globalThis;
 	return e[n] ??= {};
@@ -11,5 +11,4 @@ var n = Symbol.for("@voltro/runtime:serverTracer"), r = (() => {
 	let n = r.tracer;
 	return n === void 0 ? t : e.withTracer(t, n);
 };
-//#endregion
 export { o as publishServerTracerLayer, a as serverTracer, i as setServerTracer, s as withServerTracer };

package/dist/serviceCredentials.js

@@ -1,6 +1,6 @@
 import { createHash as e, randomBytes as t, timingSafeEqual as n } from "node:crypto";
 import { SERVICE_NAME_PATTERN as r, serviceSubject as i } from "@voltro/protocol";
-//#region src/serviceCredentials.ts
+// src/serviceCredentials.ts
 var a = "vsvc_", o = /^vsvc_[A-Za-z0-9_-]{43}$/, s = () => `${a}${t(32).toString("base64url")}`, c = (e) => o.test(e), l = (e) => e.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/-/g, "_").toUpperCase(), u = (e) => `VOLTRO_SERVICE_CALLER_${l(e)}_TOKEN`, d = (e) => `${u(e)}_NEXT`, f = (e) => `VOLTRO_API_${l(e)}_TOKEN`, p = (e) => `VOLTRO_API_${l(e)}_URL`, m = (e) => {
 	for (let t of Object.keys(e)) if (!r.test(t)) throw Error(`serviceCallers: ${JSON.stringify(t)} is not an app name — letters, digits and dashes, starting with a letter, at most 56 characters. It is the name the calling app binds this api under and the name its procedures list in \`service: { callers }\`.`);
 }, h = (t) => e("sha256").update(t).digest(), g = (e, t) => n(e, h(t)), _ = (e, t) => [e[u(t)], e[d(t)]].filter((e) => typeof e == "string" && e !== ""), v = (e) => {
@@ -36,5 +36,4 @@ var a = "vsvc_", o = /^vsvc_[A-Za-z0-9_-]{43}$/, s = () => `${a}${t(32).toString
 		}
 	};
 };
-//#endregion
 export { a as SERVICE_TOKEN_PREFIX, f as apiBindingTokenEnv, p as apiBindingUrlEnv, m as assertServiceCallersConfig, c as isWellFormedServiceToken, s as mintServiceToken, d as serviceCallerNextTokenEnv, v as serviceCallerStrategy, u as serviceCallerTokenEnv, l as serviceEnvSegment };

package/dist/setReadScopes.js

@@ -0,0 +1,27 @@
+// src/setReadScopes.ts
+var e = [
+	"crossTenant",
+	"includeDeleted",
+	"includeExpired"
+], t = (t, n) => {
+	let r = (t, i) => {
+		let a = t;
+		for (let t of e) i?.[t] === !0 && a[t] !== !0 && (a = {
+			...a,
+			[t]: !0
+		});
+		let o = a.setOp;
+		if (o === void 0) return n(a);
+		if (o.queries.length < 2) throw Error("A set operation requires at least two inputs");
+		let s = o.queries.map((e) => r(e, a));
+		return s.every((e, t) => e === o.queries[t]) ? a : {
+			...a,
+			setOp: {
+				...o,
+				queries: s
+			}
+		};
+	};
+	return r(t);
+};
+export { t as mapSetReadScopes };

package/dist/singleNodeOrchestrator.js

@@ -3,7 +3,7 @@ import { wakeDueOnce as t } from "./wakeOrchestrator.js";
 import { makeProcessAdapter as n } from "./wakeSupervisor.js";
 import { isIdleNow as r, makeIdleGate as i } from "./idleDetector.js";
 import { makeRouterActivity as a, makeWakeProxyServer as o } from "./wakeRouter.js";
-//#region src/singleNodeOrchestrator.ts
+// src/singleNodeOrchestrator.ts
 var s = async (e) => {
 	try {
 		return (await e.query({
@@ -87,5 +87,4 @@ var s = async (e) => {
 		}
 	};
 };
-//#endregion
 export { s as countRunningWorkflows, c as runOrchestratorTick, l as runSingleNodeOrchestrator };