@voltro/runtime 0.86.0 → 0.88.0

package/dist/computedQueryCache.js

@@ -0,0 +1,289 @@
+import { canonicalize as e } from "./fingerprint.js";
+import { currentRawReads as t, runWithRawReadScope as n } from "./rawReadScope.js";
+import { classifyRead as r } from "./readClassification.js";
+import { buildSubjectKey as i } from "./rywPositionStore.js";
+import { runWithRoutingContext as a } from "./replicatedDataStore.js";
+import { Effect as o, Option as s, Schema as c } from "effect";
+import { createHash as l } from "node:crypto";
+import { Unauthenticated as u, currentSubjectAuthority as d, effectiveScopes as f, parseRevalidateMs as p, schemaShape as m, setEffectiveScopes as h, shapeDigest as g } from "@voltro/protocol";
+import { AsyncLocalStorage as _ } from "node:async_hooks";
+// src/computedQueryCache.ts
+var v = Symbol.for("@voltro/runtime:computed-query-cache-capture"), y = () => {
+	let e = globalThis, t = e[v];
+	return t === void 0 && (t = {
+		storage: new _(),
+		installed: !1
+	}, e[v] = t), t;
+}, b = () => {
+	y().installed = !0;
+}, x = () => y().installed, S = () => {
+	y().installed = !1;
+}, C = (e) => {
+	let t = y().storage.getStore();
+	if (t === void 0) return;
+	let { composed: n, restricting: i } = r(e, !1);
+	for (let e of n) t.tables.add(e);
+	for (let e of i) t.tables.add(e);
+}, w = Symbol.for("@voltro/runtime:query-dependencies"), T = () => {
+	let e = globalThis, t = e[w];
+	return t === void 0 && (t = { storage: new _() }, e[w] = t), t;
+}, E = () => {
+	T().storage.enterWith(/* @__PURE__ */ new Set());
+}, D = () => [...T().storage.getStore() ?? []], O = (e) => {
+	T().storage.getStore()?.add(e), y().storage.getStore()?.tables.add(e);
+}, k = (e) => {
+	y().storage.getStore()?.volatile.add(e);
+}, A = (e, t) => y().storage.run(e, t), j = () => ({
+	tables: /* @__PURE__ */ new Set(),
+	caller: /* @__PURE__ */ new Set(),
+	volatile: /* @__PURE__ */ new Set()
+}), M = /* @__PURE__ */ new Set([
+	"connections",
+	"apis",
+	"kv",
+	"cache",
+	"webhooks",
+	"workflows",
+	"events",
+	"outbox",
+	"transaction",
+	"storeForTenant"
+]), N = /* @__PURE__ */ new Set(["access", "connectionState"]), P = (e, t, n) => new Proxy(e, { get(e, r) {
+	return typeof r == "string" && !t.has(r) && n.caller.add(`subject.${r}`), Reflect.get(e, r, e);
+} }), F = (e, t, n, r = !1) => {
+	let i = e.request, a = i === void 0 ? void 0 : new Proxy(i, { get(e, r) {
+		return r === "subject" ? t : (typeof r == "string" && n.caller.add(`request.${r}`), Reflect.get(e, r, e));
+	} });
+	return new Proxy(e, { get(e, t) {
+		if (t === "request" && a !== void 0) return a;
+		typeof t == "string" && (M.has(t) && n.volatile.add(`ctx.${t}`), N.has(t) && !(r && t === "access") && n.caller.add(`ctx.${t}`));
+		let i = Reflect.get(e, t, e);
+		return typeof i == "function" ? i.bind(e) : i;
+	} });
+}, I = (e) => {
+	let t = /* @__PURE__ */ new Set(), n = (e, r) => {
+		if (r > 64) throw Error("subject claims too deep");
+		if (e === void 0) return ["undefined"];
+		if (e === null || typeof e == "string" || typeof e == "boolean") return e;
+		if (typeof e == "number" && Number.isFinite(e)) return ["number", Object.is(e, -0) ? "-0" : e];
+		if (typeof e != "object" || !e || t.has(e)) throw Error("non-data subject claim");
+		let i = Object.getPrototypeOf(e);
+		if (!Array.isArray(e) && i !== Object.prototype && i !== null) throw Error("non-data subject claim");
+		if (Object.getOwnPropertySymbols(e).length > 0) throw Error("symbol subject claim");
+		t.add(e);
+		try {
+			if (Array.isArray(e)) {
+				if (i !== Array.prototype || Object.keys(e).length !== e.length || Object.getOwnPropertyNames(e).length !== e.length + 1) throw Error("non-data subject array");
+				return ["array", Array.from({ length: e.length }, (t, i) => {
+					let a = Object.getOwnPropertyDescriptor(e, String(i));
+					if (a === void 0 || !("value" in a)) throw Error("non-data subject array");
+					return n(a.value, r + 1);
+				})];
+			}
+			if (Object.getOwnPropertyNames(e).length !== Object.keys(e).length) throw Error("hidden subject claim");
+			return ["object", Object.keys(e).sort().map((t) => {
+				let i = Object.getOwnPropertyDescriptor(e, t);
+				if (i === void 0 || !("value" in i)) throw Error("accessor subject claim");
+				return [t, n(i.value, r + 1)];
+			})];
+		} finally {
+			t.delete(e);
+		}
+	};
+	try {
+		n(e, 0);
+		let t = e, r = "scopes" in t && t.scopes !== void 0 ? { scopes: [...new Set(t.scopes)].sort() } : {}, i = n({
+			subject: {
+				...e,
+				...r
+			},
+			effective: [...new Set(f(t))].sort()
+		}, 0);
+		return l("sha256").update(JSON.stringify(i)).digest("base64url");
+	} catch {
+		return;
+	}
+}, L = /* @__PURE__ */ new WeakMap(), R = (e) => {
+	let t = L.get(e);
+	return t === void 0 && (t = c.toCodecJson(e), L.set(e, t)), t;
+}, z = /* @__PURE__ */ new WeakMap(), B = (e) => {
+	if (e === void 0) return "none";
+	let t = z.get(e);
+	return t === void 0 && (t = g(m(e.ast)), z.set(e, t)), t;
+}, V = (t) => {
+	let n = t.input === void 0 ? s.some(t.decodedInput) : c.encodeUnknownOption(R(t.input))(t.decodedInput);
+	if (s.isNone(n)) return { bypass: "input-not-encodable" };
+	let r;
+	if (t.scope === "global") r = "g";
+	else if (t.scope === "tenant") {
+		if (t.subject.tenantId == null) return { bypass: "no-tenant" };
+		r = `t:${t.subject.tenantId}`;
+	} else {
+		if (t.subject.type === "anonymous" || t.subject.id == null || t.subject.id === "") return { bypass: "anonymous-subject" };
+		let e = I(t.subject);
+		if (e === void 0) return { bypass: "subject-not-encodable" };
+		r = `s:${e}`;
+	}
+	let i = t.rowFilter === void 0 ? [] : [...t.declaredSources].sort().map((n) => [n, e(t.rowFilter(n) ?? null)]), a;
+	try {
+		a = JSON.stringify([
+			t.codeIdentity,
+			B(t.output),
+			e(n.value),
+			i
+		]);
+	} catch {
+		return { bypass: "input-not-encodable" };
+	}
+	let o = l("sha256").update(a).digest("base64url");
+	return { key: `cq:${t.name}:${o}:${r}` };
+}, H = (e) => {
+	if (e.aborted) return { refused: {
+		reason: "aborted",
+		detail: []
+	} };
+	if (!e.volatileAllowed && e.scope.volatile.size > 0) return { refused: {
+		reason: "volatile",
+		detail: [...e.scope.volatile].sort()
+	} };
+	let t = e.rawReads.filter((e) => e.dependsOn.length === 0).map((e) => e.sql);
+	if (t.length > 0) return { refused: {
+		reason: "undeclared-raw-read",
+		detail: t
+	} };
+	let n = new Set(e.declaredSources);
+	for (let t of e.scope.tables) n.add(t);
+	for (let t of e.rawReads) for (let e of t.dependsOn) n.add(e);
+	if (e.rowFilter !== void 0) {
+		let t = new Set(e.declaredSources), r = [...n].filter((n) => !t.has(n) && e.rowFilter(n) !== void 0).sort();
+		if (r.length > 0) return { refused: {
+			reason: "row-filter-outside-source",
+			detail: r
+		} };
+	}
+	let r = e.output === void 0 ? s.some(e.value) : c.encodeUnknownOption(R(e.output))(e.value);
+	if (s.isNone(r)) return { refused: {
+		reason: "output-not-encodable",
+		detail: []
+	} };
+	let i;
+	try {
+		i = Buffer.byteLength(JSON.stringify(r.value) ?? "", "utf8");
+	} catch {
+		return { refused: {
+			reason: "output-not-encodable",
+			detail: []
+		} };
+	}
+	return e.scope.caller.size > 0 ? { refused: {
+		reason: "caller",
+		detail: [...e.scope.caller].sort()
+	} } : i > e.maxEntryBytes ? { refused: {
+		reason: "oversized",
+		detail: [`${i} bytes`]
+	} } : { store: {
+		stored: r.value,
+		tags: [...n].sort()
+	} };
+}, U = (e, t) => e === void 0 ? s.some(t) : c.decodeUnknownOption(R(e))(t), W = (e, t) => {
+	let n = t.detail.join(", ");
+	switch (t.reason) {
+		case "caller": return `${e}: \`cache:\` result NOT kept — the handler read ${n}, which its cache scope does not key on. Use \`scope: 'subject'\` for subject claims and effective scopes, or declare access in \`guards:\`. Connection state, client ids and cookie headers are never keyed; keep those reads outside cached queries. Membership rows read through ctx.store become invalidation dependencies.`;
+		case "volatile": return `${e}: \`cache:\` result NOT kept — the handler used ${n}, which no table write invalidates. Declare \`cache: { …, volatile: true }\` to accept the ttl as the bound on that staleness, or drop \`cache:\`.`;
+		case "undeclared-raw-read": return `${e}: \`cache:\` result NOT kept — a raw read declares no tables, so no write could invalidate it: ${n}. Declare them: ctx.store.raw(fragment, { dependsOn: ['…'] }).`;
+		case "row-filter-outside-source": return `${e}: \`cache:\` result NOT kept — the registered row filter restricts ${n}, which the query reads but does not declare in \`source:\`. Add it to \`source:\` so the entry is keyed by what this caller may see there.`;
+		case "output-not-encodable": return `${e}: \`cache:\` result NOT kept — the value does not encode through the query's \`output\` schema.`;
+		case "oversized": return `${e}: \`cache:\` result NOT kept — ${n} exceeds the cache's maxEntryBytes.`;
+		case "aborted": return `${e}: \`cache:\` result NOT kept — the subscription closed while it was computed.`;
+	}
+}, G = () => new u({ reason: "request authority changed while reading a cached query; authenticate again" }), K = (e) => {
+	let r = I(e.subject), s = o.suspend(() => {
+		let s = j(), c = e.policy.scope === "subject", l = new Set(c ? [
+			...Object.keys(e.subject),
+			"id",
+			"type",
+			"tenantId",
+			"scopes",
+			"metadata",
+			"kind",
+			"service",
+			"auditActorId"
+		] : e.policy.scope === "tenant" ? ["tenantId"] : []), u = P(e.subject, l, s), p = f(e.subject);
+		h(u, c ? p : new Proxy(p, { get(e, t, n) {
+			return s.caller.add("subject.scopes"), Reflect.get(e, t, n);
+		} }));
+		let m = F(e.ctx, u, s, c), g = [], _ = e.subject.id ?? "anonymous", v = {
+			subjectKey: i(_, void 0),
+			forcePrimary: !0
+		};
+		return o.tryPromise({
+			try: () => A(s, () => a(v, () => n(async () => {
+				let n = await e.execute(m, u);
+				if (r !== I(d(e.subject))) throw G();
+				return g = t(), n;
+			}))),
+			catch: (e) => e
+		}).pipe(o.map((t) => {
+			let n = new Set(e.sources), r = (e) => [...new Set(e)].filter((e) => !n.has(e)).sort();
+			if (e.isDescriptor(t)) return e.onDescriptor(), {
+				value: {
+					value: t,
+					dependencies: []
+				},
+				notApplicable: !0
+			};
+			let i = H({
+				scope: s,
+				cacheScope: e.policy.scope,
+				volatileAllowed: e.policy.volatile,
+				rawReads: g,
+				declaredSources: e.sources,
+				rowFilter: e.rowFilter,
+				output: e.output,
+				value: e.unwrap(t),
+				maxEntryBytes: e.cache.maxEntryBytes,
+				aborted: e.signal?.aborted === !0
+			});
+			if ("refused" in i) return i.refused.reason !== "aborted" && e.cache.notice(e.name, i.refused.reason, W(e.name, i.refused)), { value: {
+				value: t,
+				dependencies: r(s.tables)
+			} };
+			let a = r(i.store.tags);
+			return {
+				value: {
+					value: t,
+					dependencies: a
+				},
+				store: {
+					stored: {
+						v: i.store.stored,
+						d: a
+					},
+					tags: i.store.tags
+				}
+			};
+		}), o.flatMap((t) => r === I(d(e.subject)) ? o.succeed(t) : o.fail(G())));
+	});
+	return e.cache.wrapDynamic(e.key, {
+		ttlMs: e.policy.ttlMs,
+		...e.policy.swrMs === void 0 ? {} : { swrMs: e.policy.swrMs },
+		...e.cache.leaseMs === void 0 ? {} : { leaseMs: e.cache.leaseMs },
+		label: e.name
+	}, s, (t) => o.succeed(q(e.output, t))).pipe(o.map(({ value: e }) => e));
+}, q = (e, t) => {
+	if (typeof t != "object" || !t || !("v" in t) || !("d" in t)) return s.none();
+	let n = t;
+	return !Array.isArray(n.d) || !n.d.every((e) => typeof e == "string") ? s.none() : s.map(U(e, n.v), (e) => ({
+		value: e,
+		dependencies: n.d
+	}));
+}, J = (e) => {
+	let t = p(e.ttl);
+	if (t !== null) return {
+		ttlMs: t,
+		swrMs: e.swr === void 0 ? void 0 : p(e.swr) ?? void 0,
+		scope: e.scope,
+		volatile: e.volatile === !0
+	};
+};
+export { K as cachedComputedCall, G as computedAuthorityRefusal, V as computedCacheKey, x as computedQueryCacheCaptureInstalled, I as computedSubjectIdentity, D as currentQueryDependencies, H as decideComputedStore, U as decodeComputedStored, W as describeComputedRefusal, E as enterQueryDependencies, b as installComputedQueryCacheCapture, j as newComputedCaptureScope, C as noteCacheRead, k as noteCacheVolatile, O as noteDependency, F as observedContext, P as observedSubject, J as queryCachePolicy, S as resetComputedQueryCacheCaptureForTests, A as runWithComputedCapture };

package/dist/connectionBuiltins.js

@@ -1,6 +1,6 @@
 import { beginOAuthConnect as e, forgetCredential as t, listConnectionStates as n, storeCredential as r } from "./connectionVault.js";
 import { ConnectionHandshakeFailed as i, ConnectionKindMismatch as a, ConnectionNotDeclared as o, ConnectionSubjectRequired as s } from "@voltro/protocol";
-//#region src/connectionBuiltins.ts
+// src/connectionBuiltins.ts
 var c = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
 	if (n === null || n === "") throw new s({ connectionId: t });
@@ -77,5 +77,4 @@ var c = (e, t) => {
 	let i = c(r, n.connectionId);
 	return { ok: await t(r.store, n.connectionId, i) };
 };
-//#endregion
 export { p as makeDisconnectConnectionExecutor, u as makeListConnectionsExecutor, d as makeStartConnectionExecutor, f as makeSubmitTokenExecutor };

package/dist/connectionCredentials.js

@@ -1,4 +1,4 @@
-//#region src/connectionCredentials.ts
+// src/connectionCredentials.ts
 var e = 36e5, t = Symbol.for("@voltro/runtime/connectionCredentials"), n = globalThis, r = n[t] ??= {
 	overrides: /* @__PURE__ */ new Map(),
 	credentialExpiry: /* @__PURE__ */ new Map(),
@@ -62,5 +62,4 @@ var m = (e, t) => {
 }, g = (e) => o.get(e)?.size ?? 0, _ = () => {
 	i.clear(), a.clear(), o.clear();
 };
-//#endregion
 export { g as _connectionStreamCount, _ as _resetConnectionCredentialsForTest, p as applyConnectionCredential, l as bindConnectionCredential, u as getConnectionCredential, c as getCredentialExpiry, h as interruptConnectionStreams, f as mergeCookieHeader, s as recordCredentialExpiry, m as registerConnectionStream, d as unbindConnection };

package/dist/connectionState.js

@@ -1,4 +1,4 @@
-//#region src/connectionState.ts
+// src/connectionState.ts
 var e = Symbol.for("@voltro/runtime/connectionState"), t = globalThis, n = t[e] ??= /* @__PURE__ */ new WeakMap(), r = (e, t) => {
 	let r = n.get(e);
 	if (r === void 0 && !e.signal.aborted) {
@@ -30,5 +30,4 @@ var e = Symbol.for("@voltro/runtime/connectionState"), t = globalThis, n = t[e]
 		})
 	};
 };
-//#endregion
 export { r as makeConnectionState };

package/dist/connectionVault.js

@@ -2,7 +2,7 @@ import { decryptField as e, encryptField as t, getFieldCipher as n } from "./fie
 import { and as r, eq as i, fieldBinding as a, generateId as o, id as s, json as c, lte as l, table as u, text as d, timestamp as f } from "@voltro/database";
 import { ConnectionHandshakeFailed as p } from "@voltro/protocol";
 import { createLogger as m } from "@voltro/logger";
-//#region src/connectionVault.ts
+// src/connectionVault.ts
 var h = m({ scope: "voltro:connections" }), g = "_voltro_connections", _ = {
 	kind: "typeid",
 	prefix: "conn"
@@ -406,5 +406,4 @@ var h = m({ scope: "voltro:connections" }), g = "_voltro_connections", _ = {
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
 };
-//#endregion
 export { g as CONNECTIONS_TABLE, y as CONNECTION_GRANTS_TABLE, z as ConnectionNotConnected, L as DEFAULT_REFRESH_SKEW_MS, X as GRANT_TTL_MS, R as REFRESH_LEASE_MS, b as _voltroConnectionGrantsTable, v as _voltroConnectionsTable, C as assertConnectionCipherConfigured, ae as beginOAuthConnect, U as clearConnectionRefreshFlights, oe as completeOAuthConnect, Z as connectionCallbackPath, S as connectionLabel, ne as defineConnection, F as exchangeAuthorizationCode, j as forgetCredential, M as listConnectionStates, w as makeConnectionRegistry, x as oauthCredentialValue, O as projectConnectionState, I as refreshAccessToken, K as resolveConnection, $ as resolveRedirectUri, Q as sanitizeRedirectTo, A as storeCredential, se as sweepExpiredGrants };

package/dist/connectionsFacade.js

@@ -1,42 +1,44 @@
-import { ConnectionNotConnected as e, listConnectionStates as t, resolveConnection as n } from "./connectionVault.js";
-//#region src/connectionsFacade.ts
-var r, i = (e) => {
-	r = e;
-}, a = () => r, o = (e, t) => {
-	let n = r;
+import { noteCacheVolatile as e } from "./computedQueryCache.js";
+import { ConnectionNotConnected as t, listConnectionStates as n, resolveConnection as r } from "./connectionVault.js";
+// src/connectionsFacade.ts
+var i, a = (e) => {
+	i = e;
+}, o = () => i, s = (e, t) => {
+	let n = i;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, s = (t) => async (r, i) => {
-	let a = t.registry.get(i);
-	if (a === void 0) throw Error(`connection "${i}" is not declared. Declared: ${t.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-	let o = r.id ?? null;
-	if (o === null || o === "") throw new e(i, "<anonymous>");
-	return n({
-		store: t.store,
+}, c = (e) => async (n, i) => {
+	let a = e.registry.get(i);
+	if (a === void 0) throw Error(`connection "${i}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
+	let o = n.id ?? null;
+	if (o === null || o === "") throw new t(i, "<anonymous>");
+	return r({
+		store: e.store,
 		definition: a,
 		subjectId: o
 	});
-}, c = (r) => {
-	let i = r.subject.id ?? null, a = async (t) => {
-		let a = r.registry.get(t);
-		if (a === void 0) throw Error(`ctx.connections.get("${t}"): no such connection is declared. Declared: ${r.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (i === null || i === "") throw new e(t, "<anonymous>");
-		return n({
-			store: r.store,
-			definition: a,
-			subjectId: i
+}, l = (i) => {
+	let a = i.subject.id ?? null, o = async (n) => {
+		e("ctx.connections");
+		let o = i.registry.get(n);
+		if (o === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${i.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
+		if (a === null || a === "") throw new t(n, "<anonymous>");
+		return r({
+			store: i.store,
+			definition: o,
+			subjectId: a
 		});
 	};
 	return {
-		get: a,
-		tryGet: async (t) => {
+		get: o,
+		tryGet: async (e) => {
 			try {
-				return await a(t);
-			} catch (t) {
-				if (t instanceof e) return null;
-				throw t;
+				return await o(e);
+			} catch (e) {
+				if (e instanceof t) return null;
+				throw e;
 			}
 		},
-		list: async () => i === null || i === "" ? r.registry.list().map((e) => ({
+		list: async () => a === null || a === "" ? i.registry.list().map((e) => ({
 			connectionId: e.id,
 			kind: e.kind,
 			label: e.label ?? e.id,
@@ -47,8 +49,7 @@ var r, i = (e) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : t(r.store, r.registry, i)
+		})) : n(i.store, i.registry, a)
 	};
 };
-//#endregion
-export { a as getConnectionResolver, s as makeConnectionResolver, c as makeConnectionsFacade, o as resolveConnectionForSubject, i as setConnectionResolver };
+export { o as getConnectionResolver, c as makeConnectionResolver, l as makeConnectionsFacade, s as resolveConnectionForSubject, a as setConnectionResolver };

package/dist/coordinatedSchedule.js

@@ -1,19 +1,22 @@
-import { cronForInterval as e, externalizationRefusal as t, registerExternalizedTask as n, unregisterExternalizedTask as r } from "./externalizedTasks.js";
-//#region src/coordinatedSchedule.ts
-var i = (e) => {
+import { cronForInterval as e, externalizationRefusal as t, registerExternalizedTask as n } from "./externalizedTasks.js";
+// src/coordinatedSchedule.ts
+var r = (e) => {
 	if (e === void 0) return null;
 	let t = e.nextDueInMs;
 	return {
 		idle: e.idle === !0,
 		...t === null ? { nextDueInMs: null } : typeof t == "number" && Number.isFinite(t) ? { nextDueInMs: t } : {}
 	};
-}, a = /* @__PURE__ */ new WeakMap(), o = (e) => a.get(e)?.() ?? null, s = 3e4, c = (e = process.env) => {
+}, i = /* @__PURE__ */ new WeakMap(), a = (e) => i.get(e)?.() ?? null, o = 3e4, s = (e = process.env) => {
 	let t = e.VOLTRO_POLL_CEILING_MS;
-	if (t === void 0) return s;
+	if (t === void 0) return o;
 	let n = Number(t);
-	return Number.isFinite(n) && n > 0 ? n : s;
-}, l = (o, s, l, d) => {
-	let f = Math.max(s, d.maxIdleIntervalMs ?? c()), p = !1, m, h = !1, g = s, _ = !1, v = !1, y = 0, b = null, x = {
+	return Number.isFinite(n) && n > 0 ? n : o;
+}, c = (a, o, c, u) => {
+	let d = Math.max(o, u.maxIdleIntervalMs ?? s()), f = !1, p, m = /* @__PURE__ */ new Set(), h = (e) => {
+		let t = Promise.resolve().then(e);
+		return m.add(t), t.then(() => m.delete(t), () => m.delete(t)), t;
+	}, g, _ = !1, v = o, y = !1, b = !1, x = 0, S = null, C = {
 		ticks: 0,
 		claimWins: 0,
 		claimLosses: 0,
@@ -25,115 +28,117 @@ var i = (e) => {
 		lastWakeAt: null,
 		lastDecision: "starting",
 		lastOutcome: null
-	}, S = (e) => {
-		p || (m !== void 0 && clearTimeout(m), m = void 0, b = null, e === "disarm" ? h = !0 : (h = !1, g = Math.max(0, Math.min(e, f)), b = Date.now() + g, m = setTimeout(() => {
-			C();
-		}, g), typeof m.unref == "function" && m.unref()));
-	}, C = async () => {
-		if (p) return;
-		if (_) {
-			v = !0;
+	}, w = (e) => {
+		f || (g !== void 0 && clearTimeout(g), g = void 0, S = null, e === "disarm" ? _ = !0 : (_ = !1, v = Math.max(0, Math.min(e, d)), S = Date.now() + v, g = setTimeout(() => {
+			E();
+		}, v), typeof g.unref == "function" && g.unref()));
+	}, T = async () => {
+		if (f) return;
+		if (y) {
+			b = !0;
 			return;
 		}
-		x.ticks++, x.lastTickAt = Date.now(), x.lastOutcome = null, b = null, _ = !0;
-		let e = new Date(Math.floor(Date.now() / s) * s);
+		C.ticks++, C.lastTickAt = Date.now(), C.lastOutcome = null, S = null, y = !0;
+		let e = new Date(Math.floor(Date.now() / o) * o);
 		try {
 			let t = !1;
 			try {
-				t = await d.coordinator.tryClaim(o, e, s);
+				t = await u.coordinator.tryClaim(a, e, o);
 			} catch (e) {
-				x.claimFailures++, x.lastDecision = "claim-failed", d.log?.warn("coordinated schedule: claim check failed — skipping this tick", {
-					task: o,
+				C.claimFailures++, C.lastDecision = "claim-failed", u.log?.warn("coordinated schedule: claim check failed — skipping this tick", {
+					task: a,
 					reason: e?.message ?? String(e)
-				}), S(s);
+				}), w(o);
 				return;
 			}
 			if (!t) {
-				x.claimLosses++, x.lastDecision = "claim-lost", S(s);
+				C.claimLosses++, C.lastDecision = "claim-lost", w(o);
 				return;
 			}
+			if (f) return;
 			let n;
-			x.claimWins++;
+			C.claimWins++;
 			try {
-				n = await l();
+				n = await c();
 			} catch (e) {
-				x.taskFailures++, x.lastDecision = "task-failed", d.log?.warn("coordinated schedule: task threw", {
-					task: o,
+				C.taskFailures++, C.lastDecision = "task-failed", u.log?.warn("coordinated schedule: task threw", {
+					task: a,
 					reason: e?.message ?? String(e)
-				}), S(s);
+				}), w(o);
 				return;
 			}
-			x.lastOutcome = i(n);
-			let r = u(x.lastOutcome ?? void 0, s, g, f, d.disarmWhenIdle ?? !1);
-			x.lastDecision = r === "disarm" ? "idle-disarmed" : n?.idle ? "idle-backoff" : "active", S(r);
+			C.lastOutcome = r(n);
+			let i = l(C.lastOutcome ?? void 0, o, v, d, u.disarmWhenIdle ?? !1);
+			C.lastDecision = i === "disarm" ? "idle-disarmed" : n?.idle ? "idle-backoff" : "active", w(i);
 		} finally {
-			_ = !1, v && !p && (v = !1, S(0));
+			y = !1, b && !f && (b = !1, w(0));
 		}
-	}, w = async () => {
-		x.ticks++, x.lastTickAt = Date.now(), x.lastOutcome = null;
-		let e = new Date(Math.floor(Date.now() / s) * s), t;
+	}, E = () => f ? Promise.resolve() : h(T), D = async () => {
+		if (f) throw Error("Coordinated schedule is stopped");
+		C.ticks++, C.lastTickAt = Date.now(), C.lastOutcome = null;
+		let e = new Date(Math.floor(Date.now() / o) * o), t;
 		try {
-			t = await (d.externalClaim ?? d.coordinator).tryClaim(o, e, s);
+			t = await (u.externalClaim ?? u.coordinator).tryClaim(a, e, o);
 		} catch (e) {
-			throw x.claimFailures++, x.lastDecision = "claim-failed", e;
+			throw C.claimFailures++, C.lastDecision = "claim-failed", e;
 		}
-		if (!t) return x.claimLosses++, x.lastDecision = "claim-lost", "deduplicated";
-		x.claimWins++;
+		if (!t) return C.claimLosses++, C.lastDecision = "claim-lost", "deduplicated";
+		if (f) throw Error("Coordinated schedule is stopped");
+		C.claimWins++;
 		try {
-			let e = await l();
-			x.lastOutcome = i(e), x.lastDecision = "active";
+			let e = await c();
+			C.lastOutcome = r(e), C.lastDecision = "active";
 		} catch (e) {
-			throw x.taskFailures++, x.lastDecision = "task-failed", e;
+			throw C.taskFailures++, C.lastDecision = "task-failed", e;
 		}
 		return "ran";
-	}, T = d.externalize === !0 ? t(o, s) : void 0, E = d.externalize === !0 && T === void 0;
-	T !== void 0 && d.log?.warn(`coordinated schedule: REFUSING to externalise this task — ${T}`, {
-		task: o,
-		intervalMs: s
-	}), E ? (n({
-		name: o,
-		intervalMs: s,
-		cron: e(s),
-		run: w
-	}), d.log?.info("coordinated schedule: externalised — no in-process timer", {
-		task: o,
-		intervalMs: s
-	})) : S(s);
-	let D = {
-		name: o,
-		currentIntervalMs: () => g,
-		isArmed: () => !p && !h && !E,
+	}, O = () => f ? Promise.reject(/* @__PURE__ */ Error("Coordinated schedule is stopped")) : h(D), k = u.externalize === !0 ? t(a, o) : void 0, A = u.externalize === !0 && k === void 0;
+	k !== void 0 && u.log?.warn(`coordinated schedule: REFUSING to externalise this task — ${k}`, {
+		task: a,
+		intervalMs: o
+	});
+	let j;
+	A ? (j = (u.externalTasks?.register ?? n)({
+		name: a,
+		intervalMs: o,
+		cron: e(o),
+		run: O
+	}), u.log?.info("coordinated schedule: externalised — no in-process timer", {
+		task: a,
+		intervalMs: o
+	})) : w(o);
+	let M = {
+		name: a,
+		currentIntervalMs: () => v,
+		isArmed: () => !f && !_ && !A,
 		wake: () => {
-			if (p) return;
-			x.wakes++, x.lastWakeAt = Date.now();
+			if (f) return;
+			C.wakes++, C.lastWakeAt = Date.now();
 			let e = Date.now();
-			!h && e - y < s ? x.coalescedWakes++ : (x.lastDecision = "wake", y = e, _ ? v = !0 : S(0));
+			!_ && e - x < o ? C.coalescedWakes++ : (C.lastDecision = "wake", x = e, y ? b = !0 : w(0));
 		},
-		stop: () => {
-			p || (p = !0, m !== void 0 && clearTimeout(m), m = void 0, b = null, E && r(o));
-		}
+		stop: () => (p === void 0 && (f = !0, g !== void 0 && clearTimeout(g), g = void 0, S = null, j?.(), p = Promise.allSettled([...m]).then(() => {})), p)
 	};
-	return a.set(D, () => ({
-		...x,
-		lastOutcome: x.lastOutcome === null ? null : { ...x.lastOutcome },
-		task: o,
-		state: p ? "stopped" : E ? "externalized" : _ ? "running" : h ? "disarmed" : "armed",
-		baseIntervalMs: s,
-		currentIntervalMs: g,
-		maxIdleIntervalMs: f,
-		nextTickAt: b,
-		disarmWhenIdle: d.disarmWhenIdle ?? !1
-	})), D;
-}, u = (e, t, n, r, i = !1) => {
+	return i.set(M, () => ({
+		...C,
+		lastOutcome: C.lastOutcome === null ? null : { ...C.lastOutcome },
+		task: a,
+		state: f ? "stopped" : A ? "externalized" : y ? "running" : _ ? "disarmed" : "armed",
+		baseIntervalMs: o,
+		currentIntervalMs: v,
+		maxIdleIntervalMs: d,
+		nextTickAt: S,
+		disarmWhenIdle: u.disarmWhenIdle ?? !1
+	})), M;
+}, l = (e, t, n, r, i = !1) => {
 	if (e === void 0 || !e.idle) return t;
 	let a = typeof e.nextDueInMs == "number" && Number.isFinite(e.nextDueInMs) ? e.nextDueInMs : void 0;
 	if (a === void 0 && e.nextDueInMs === null && i) return "disarm";
 	let o = Math.min(Math.max(n, t) * 2, r);
 	return a === void 0 ? o : Math.max(t, i ? a : Math.min(o, a));
-}, d = (e) => (t, n, r, i) => l(t, n, r, {
+}, u = (e) => (t, n, r, i) => c(t, n, r, {
 	...e,
 	...e.externalizeTask === void 0 ? {} : { externalize: e.externalizeTask(t) },
 	...i?.disarmWhenIdle === void 0 ? {} : { disarmWhenIdle: i.disarmWhenIdle }
 });
-//#endregion
-export { s as DEFAULT_MAX_IDLE_INTERVAL_MS, o as inspectCoordinatedSchedule, d as makeCoordinatedScheduler, u as nextDelay, c as readPollCeilingMs, l as scheduleCoordinated };
+export { o as DEFAULT_MAX_IDLE_INTERVAL_MS, a as inspectCoordinatedSchedule, u as makeCoordinatedScheduler, l as nextDelay, s as readPollCeilingMs, c as scheduleCoordinated };