@voltro/runtime 0.87.0 → 0.88.0

package/dist/aggregate.js

@@ -1,6 +1,6 @@
 import { classifyShape as e } from "./ivm.js";
 import { Context as t, Effect as n, Schema as r } from "effect";
-//#region src/aggregate.ts
+// src/aggregate.ts
 var i = (t) => {
 	let n = typeof t.refresh == "string" ? { interval: t.refresh } : t.refresh, r = t.strategy ?? "replace";
 	if (r === "merge" && (t.mergeKey === void 0 || t.mergeKey.length === 0)) throw Error(`defineAggregate("${t.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
@@ -38,5 +38,4 @@ var i = (t) => {
 }) {}, l = class extends t.Service()("@voltro/AggregateRegistry") {}, u = (e) => n.gen(function* () {
 	return (yield* l).getHandle(e);
 });
-//#endregion
 export { c as AggregateError, s as AggregateNotFound, l as AggregateRegistry, o as AggregateStale, i as defineAggregate, a as isAggregateDefinition, u as useAggregate };

package/dist/aggregateExtrema.js

@@ -1,6 +1,6 @@
 import { RangeIndex as e } from "./rangeIndex.js";
 import { groupKeyOf as t } from "./ivm.js";
-//#region src/aggregateExtrema.ts
+// src/aggregateExtrema.ts
 var n = Symbol("unavailable"), r = (e, r) => {
 	let i = Object.getPrototypeOf(r);
 	if (i !== Object.prototype && i !== null) return;
@@ -76,5 +76,4 @@ var n = Symbol("unavailable"), r = (e, r) => {
 		return this.groups.get(e)?.numericExtreme(this.shape.op);
 	}
 };
-//#endregion
 export { i as AggregateExtrema };

package/dist/aggregateIvm.js

@@ -1,6 +1,6 @@
 import { applyDeltaInto as e, buildIvmState as t, groupKeyOf as n, ivmValue as r, materializeIvm as i, resolveRescanInto as a } from "./ivm.js";
 import { AggregateExtrema as o } from "./aggregateExtrema.js";
-//#region src/aggregateIvm.ts
+// src/aggregateIvm.ts
 var s = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
@@ -111,5 +111,4 @@ var s = class {
 		return n;
 	}
 };
-//#endregion
 export { s as AggregateMaintainer };

package/dist/analyticsMirror.js

@@ -1,6 +1,6 @@
 import { Cause as e, Duration as t, Effect as n, Metric as r, Schedule as i } from "effect";
 import { eq as a } from "@voltro/database";
-//#region src/analyticsMirror.ts
+// src/analyticsMirror.ts
 var o = r.counter("voltro_analytics_mirror_forwarded_total", { description: "Reactive-table changes successfully applied to the analytics mirror." }), s = r.counter("voltro_analytics_mirror_retries_total", { description: "Analytics-mirror write attempts that failed (each is retried until the budget runs out)." }), c = r.counter("voltro_analytics_mirror_repair_queued_total", { description: "Analytics-mirror changes whose retries were exhausted and were queued for repair." }), l = r.counter("voltro_analytics_mirror_dropped_total", { description: "Analytics-mirror changes provably lost (repair queue overflow)." }), u = (e) => {
 	n.runSync(r.update(e, 1));
 }, d = (t) => e.pretty(t), f = {
@@ -224,5 +224,4 @@ var o = r.counter("voltro_analytics_mirror_forwarded_total", { description: "Rea
 		})
 	};
 };
-//#endregion
 export { f as DEFAULT_ANALYTICS_MIRROR_TUNABLES, _ as attachAnalyticsMirror };

package/dist/analyticsSink.js

@@ -1,7 +1,7 @@
 import { Context as e, Effect as t, Option as n } from "effect";
 import { SubjectService as r } from "@voltro/protocol";
 import { AnalyticsCapabilityNotSupported as i, AnalyticsError as a } from "@voltro/kv/analytics";
-//#region src/analyticsSink.ts
+// src/analyticsSink.ts
 var o = class extends e.Service()("@voltro/AnalyticsSink") {}, s = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
@@ -28,5 +28,4 @@ var o = class extends e.Service()("@voltro/AnalyticsSink") {}, s = (e, t) => ({
 	});
 	return a === null ? e : s(e, a);
 });
-//#endregion
 export { i as AnalyticsCapabilityNotSupported, a as AnalyticsError, o as AnalyticsSink, c as useAnalytics };

package/dist/apiKeyUsage.js

@@ -1,4 +1,4 @@
-//#region src/apiKeyUsage.ts
+// src/apiKeyUsage.ts
 var e = (e) => {
 	let t = e.now ?? Date.now, n = e.intervalMs ?? 3e4, r = e.maxPending ?? 500, i = /* @__PURE__ */ new Map(), a = !1, o = async () => {
 		if (i.size === 0) return;
@@ -29,5 +29,4 @@ var e = (e) => {
 		pending: () => i.size
 	};
 };
-//#endregion
 export { e as makeApiKeyUsageBuffer };

package/dist/apiKeys.js

@@ -1,6 +1,6 @@
 import { and as e, eq as t, generateId as n, inSet as r } from "@voltro/database";
 import { createHash as i, randomBytes as a } from "node:crypto";
-//#region src/apiKeys.ts
+// src/apiKeys.ts
 var o = "_voltro_api_keys", s = "actors", c = (e) => i("sha256").update(e, "utf8").digest("hex"), l = (e = "voltro_") => `${e}${a(30).toString("base64url")}`, u = (e) => ({
 	id: e.id,
 	name: e.name,
@@ -223,5 +223,4 @@ var o = "_voltro_api_keys", s = "actors", c = (e) => i("sha256").update(e, "utf8
 		}
 	};
 };
-//#endregion
 export { s as ACTORS_TABLE, o as API_KEYS_TABLE, b as dataStoreApiKeyStore, l as generateApiKeyToken, _ as lockApiKeyById, f as makeApiKeyService, y as makeApiKeyUsageFlusher, p as memoryApiKeyStore, v as plantMissingApiKeyActors, c as sha256Hex };

package/dist/apiKeysWiring.js

@@ -2,7 +2,7 @@ import { Schema as e } from "effect";
 import { ADMIN_SCOPE as t, APIKEY_ISSUE_ORG_SCOPE as n, APIKEY_ISSUE_OTHER_SCOPE as r, APIKEY_ISSUE_SELF_SCOPE as i, ScopeError as a } from "@voltro/protocol";
 import { defineRestRoute as o, requireAnyScope as s, requireScope as c } from "@voltro/protocol/rest";
 import { apiKeyStrategy as l } from "@voltro/protocol/apikey";
-//#region src/apiKeysWiring.ts
+// src/apiKeysWiring.ts
 var u = (e, t = {}) => l({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
@@ -110,5 +110,4 @@ var u = (e, t = {}) => l({
 		})
 	];
 };
-//#endregion
 export { f as apiKeyManagementRoutes, u as frameworkApiKeyStrategy };

package/dist/apiRoleBucketSampler.js

@@ -1,6 +1,6 @@
 import { API_ROLE_BUCKET_MS as e } from "./apiRoleWorkloadHistory.js";
 import { API_WORKLOADS as t } from "@voltro/protocol";
-//#region src/apiRoleBucketSampler.ts
+// src/apiRoleBucketSampler.ts
 var n = (n) => {
 	let r = [...new Set(n.workloads)];
 	if (!n.replicaId || n.replicaId.length > 191 || !n.role || n.role.length > 2080 || n.startedAt < 0 || n.epochNow < 0 || n.monotonicNow < 0 || !r.length || r.some((e) => !t.includes(e)) || !Number.isFinite(n.monotonicNow) || !Number.isSafeInteger(n.epochNow) || !Number.isSafeInteger(n.startedAt) || n.startedAt > n.epochNow) throw Error("Invalid role sampler configuration");
@@ -60,5 +60,4 @@ var n = (n) => {
 		})
 	};
 };
-//#endregion
 export { n as makeApiRoleBucketSampler };

package/dist/apiRoleWorkloadHistory.js

@@ -1,5 +1,5 @@
 import { API_WORKLOADS as e } from "@voltro/protocol";
-//#region src/apiRoleWorkloadHistory.ts
+// src/apiRoleWorkloadHistory.ts
 var t = 3e5, n = 864e5, r = (r) => {
 	if (!Number.isSafeInteger(r.startedAt) || r.startedAt < 0 || r.startedAt > r.now || !r.replicaId || !r.role || !Number.isSafeInteger(r.now) || r.now < 864e5) throw Error("Invalid role observation time");
 	let i = Math.floor(r.now / t) * t, a = i - n, o = n / t, s = [...new Set(r.requiredWorkloads)];
@@ -52,5 +52,4 @@ var t = 3e5, n = 864e5, r = (r) => {
 		splitCandidates: h.length >= 2 ? h : []
 	};
 };
-//#endregion
 export { t as API_ROLE_BUCKET_MS, n as API_ROLE_WINDOW_MS, r as assessApiRoleWorkloadWindow };

package/dist/apiRoleWorkloadMetrics.js

@@ -1,6 +1,6 @@
 import { Effect as e, Metric as t, Tracer as n } from "effect";
 import { API_WORKLOADS as r } from "@voltro/protocol";
-//#region src/apiRoleWorkloadMetrics.ts
+// src/apiRoleWorkloadMetrics.ts
 var i = t.counter("api_role_workload_seconds_total", { description: "Measured active synchronous loop seconds by selected API role set and workload; excludes asynchronous waits." }), a = (e) => {
 	if (e.length === 0 || e.length > 32 || e.some((e) => !/^[a-z][a-z0-9-]{0,63}$/.test(e))) throw Error("Invalid API metric roles");
 	return [...new Set(e)].sort().join(",");
@@ -74,5 +74,4 @@ var i = t.counter("api_role_workload_seconds_total", { description: "Measured ac
 		}
 	};
 }, s = (e, t, n) => t.observeEffect(e, n);
-//#endregion
 export { a as apiRoleMetricLabel, o as makeApiRoleWorkloadMetrics, s as observeApiRoleEffect };

package/dist/apiRoleWorkloadStorage.js

@@ -1,5 +1,5 @@
 import { API_ROLE_BUCKET_MS as e, API_ROLE_WINDOW_MS as t, assessApiRoleWorkloadWindow as n } from "./apiRoleWorkloadHistory.js";
-//#region src/apiRoleWorkloadStorage.ts
+// src/apiRoleWorkloadStorage.ts
 var r = "_voltro_api_role_workload_buckets", i = 16384, a = (e) => e instanceof Date ? e.getTime() : typeof e == "number" ? e : NaN, o = async (e, t) => {
 	let a = Object.keys(t.workloads);
 	if (n({
@@ -91,5 +91,4 @@ var r = "_voltro_api_role_workload_buckets", i = 16384, a = (e) => e instanceof
 		assessment: u
 	};
 };
-//#endregion
 export { r as API_ROLE_WORKLOAD_BUCKETS_TABLE, s as readApiRoleWorkloadWindow, o as writeApiRoleWorkloadBucket };

package/dist/approvalBuiltins.js

@@ -1,10 +1,9 @@
 import { decideApproval as e, pendingApprovalsFor as t } from "./approvals.js";
-//#region src/approvalBuiltins.ts
+// src/approvalBuiltins.ts
 var n = (e) => e.request?.subject ?? null, r = async (e, r) => t(r.store, n(r), { limit: e.limit ?? 50 }), i = async (t, r) => e(r.store, {
 	approvalId: t.approvalId,
 	decision: t.decision,
 	approver: n(r),
 	...t.note === void 0 ? {} : { note: t.note }
 });
-//#endregion
 export { r as approvalsPendingExecutor, i as decideApprovalInvocation };

package/dist/approvals.js

@@ -2,7 +2,7 @@ import { Effect as e } from "effect";
 import { and as t, eq as n, generateId as r, id as i, inSet as a, registerRetention as o, retentionTtlMsFromEnv as s, table as c, text as l, timestamp as u } from "@voltro/database";
 import { createHash as d, randomUUID as f } from "node:crypto";
 import { ApprovalExpired as p, ApprovalForbidden as m, ApprovalNotFound as h, ApprovalNotPending as g, ApprovalRejected as _, ApprovalRequired as v, ApprovalSelfApproval as y, ApprovalUnavailable as b, canonicalJson as x, checkGuardsEffect as S, isAuthenticatedGuard as C, isPolicyGuard as w, isUpgradedGuard as T, resolvePolicyAction as E, upgradedGuardShapeError as D } from "@voltro/protocol";
-//#region src/approvals.ts
+// src/approvals.ts
 var O = "_voltro_approvals", k = 864e5, A = c(O, {
 	id: i({ prefix: "apv" }),
 	intentKey: l().maxLength(191),
@@ -258,5 +258,4 @@ var O = "_voltro_approvals", k = 864e5, A = c(O, {
 	}
 	return c.sort((e, t) => t.requestedAt.localeCompare(e.requestedAt)).slice(0, r?.limit ?? 50);
 }, Z = () => f();
-//#endregion
 export { O as APPROVALS_TABLE, k as DEFAULT_APPROVAL_EXPIRY_MS, A as _voltroApprovalsTable, F as approvalIntentKey, Z as approvalNonce, x as canonicalJson, q as clearApprovalGate, Y as decideApproval, J as enforceApproval, K as getApprovalGate, G as installApprovalGate, U as makeApprovalGate, H as parseApprovalInterval, X as pendingApprovalsFor, N as rehydrateGuards, P as scopeStringsOf, M as serializeGuards };

package/dist/authMiddlewareLayer.js

@@ -3,7 +3,7 @@ import { Context as r, Effect as i, Layer as a, Option as o, Schema as s } from
 import { AuthMiddleware as c, ConnectionInfo as l, ConnectionInfoMiddleware as u, RequestedTenantRefused as d, SubjectService as f, Unauthenticated as p } from "@voltro/protocol";
 import { Rpc as m } from "effect/rpc";
 import { sessionExpiryFromHeaders as h } from "@voltro/protocol/session";
-//#region src/authMiddlewareLayer.ts
+// src/authMiddlewareLayer.ts
 var g = class extends r.Service()("@voltro/runtime/VerifiedCredentialLifetime") {}, _ = (e) => {
 	for (let t of e.requests.values()) if (m.isRpc(t) && [...t.middlewares].some((e) => e.key === c.key || e.key === u.key)) throw Error("withRpcAuthMiddleware requires a group without AuthMiddleware or ConnectionInfoMiddleware; apply the shared pair once");
 	return e.middleware(u).middleware(c);
@@ -44,5 +44,4 @@ var g = class extends r.Service()("@voltro/runtime/VerifiedCredentialLifetime")
 		};
 	}).pipe(i.flatMap((e) => i.provideService(n, l, e))))));
 }, y = (e) => a.succeed(u, u.of((t, { headers: n, client: r }) => i.sync(() => (e(n, r.id), { clientId: r.id })).pipe(i.flatMap((e) => i.provideService(t, l, e)))));
-//#endregion
 export { v as makeAuthMiddlewareLayers, y as observeConnectionHeaders, _ as withRpcAuthMiddleware };

package/dist/bindEvent.js

@@ -3,7 +3,7 @@ import { registerConnectionStream as n } from "./connectionCredentials.js";
 import { boundByCredential as r } from "./credentialBound.js";
 import { Effect as i, Queue as a, Stream as o } from "effect";
 import { ConnectionInfo as s, ScopeError as c, SubjectService as l, checkGuardsEffect as u, isOpenAccess as d, recheckGuardsEffect as f } from "@voltro/protocol";
-//#region src/bindEvent.ts
+// src/bindEvent.ts
 var p = 64, m = 1, h = (e) => e.kind === "gap" ? {
 	_tag: "gap",
 	missed: e.missed,
@@ -88,5 +88,4 @@ var p = 64, m = 1, h = (e) => e.kind === "gap" ? {
 	let P = { _tag: "attached" }, F = o.concat(o.fromIterable([P]), j), I = w === void 0 ? F : F.pipe(o.interruptWhen(w.pipe(i.catch(() => i.void), i.catchDefect(() => i.void), i.flatMap(() => i.fail(x())))));
 	return r(I, _.credentialExpiresAt, o.fromIterable([P]));
 }));
-//#endregion
 export { p as EVENT_CLIENT_QUEUE_SIZE, m as EVENT_LATEST_QUEUE_SIZE, _ as bindEvent, g as makeBufferGapDetector };

package/dist/boot-refusal.d.ts

@@ -0,0 +1,10 @@
+export declare const BOOT_REFUSAL_NAME = "VoltroBootRefusal";
+
+/** An error the boot path raised on purpose. The launcher prints its message
+ *  once and exits 1 instead of degrading to a fallback path or printing a
+ *  stack. */
+export declare const bootRefusal: (message: string) => Error;
+
+export declare const isBootRefusal: (error: unknown) => boolean;
+
+export { }

package/dist/{bootRefusal.js → boot-refusal.js}

@@ -1,7 +1,6 @@
-//#region src/bootRefusal.ts
+// src/bootRefusal.ts
 var e = "VoltroBootRefusal", t = (t) => {
 	let n = Error(t);
 	return n.name = e, n;
 }, n = (e) => typeof e == "object" && !!e && e.name === "VoltroBootRefusal";
-//#endregion
 export { e as BOOT_REFUSAL_NAME, t as bootRefusal, n as isBootRefusal };

package/dist/bootListener.js

@@ -1,39 +1,66 @@
 import { answerProbe as e, probeFor as t, resolveHealth as n } from "./healthProbes.js";
 import { trackEngineClient as r } from "./engineClients.js";
 import { createServer as i } from "node:http";
-//#region src/bootListener.ts
-var a = "no-store", o = "1", s = /* @__PURE__ */ new Set(["ready", "draining"]), c = async (c) => {
-	let l = c.now ?? Date.now, u = {
+// src/bootListener.ts
+var a = "no-store", o = "1", s = 3e4, c = 3e5, l = 512, u = () => {
+	let e = process.env.VOLTRO_BOOT_HOLD_MS;
+	if (e === void 0 || e.trim() === "") return s;
+	let t = Number(e);
+	return !Number.isFinite(t) || t < 0 ? s : Math.min(c, Math.trunc(t));
+}, d = `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="color-scheme" content="light dark"><meta http-equiv="refresh" content="${o}"><title>Starting…</title><style>body{margin:0;min-height:100vh;display:grid;place-items:center;font:16px/1.5 system-ui,sans-serif}</style></head><body><p role="status">Starting… this page reloads by itself.</p></body></html>`, f = (e) => (e.method === "GET" || e.method === "HEAD") && /\btext\/html\b/i.test(e.headers.accept ?? ""), p = (e, t) => {
+	if (t.headersSent || t.destroyed) return;
+	let n = f(e);
+	t.writeHead(503, {
+		"content-type": n ? "text/html; charset=utf-8" : "text/plain",
+		"cache-control": a,
+		"retry-after": o
+	}), t.end(e.method === "HEAD" ? void 0 : n ? d : "starting");
+}, m = (e) => {
+	e.destroyed || e.end(`HTTP/1.1 503 Service Unavailable\r
+Retry-After: ${o}\r\nCache-Control: no-store\r
+Connection: close\r
+Content-Length: 0\r
+\r
+`);
+}, h = (e, t, n, i) => {
+	e !== void 0 && (r(t, n), e.upgrade(t, n, i));
+}, g = /* @__PURE__ */ new Set(["ready", "draining"]), _ = /* @__PURE__ */ new Set([
+	"booting",
+	"migrating",
+	"ready"
+]), v = async (r) => {
+	let o = r.now ?? Date.now, s = {
 		phase: "booting",
-		startedAt: l()
-	}, d, f, p = /* @__PURE__ */ new Map(), m = /* @__PURE__ */ new Map(), h, g = () => u.phase === "ready", _ = () => s.has(u.phase), v = n(c.health, () => g()), y = c.health?.readiness === void 0 ? async () => g() && (f === void 0 || await f()) : v.readiness, b = () => {
-		if ((p.size > 0 || h !== void 0) && !g()) return !1;
-		for (let e of p.values()) try {
+		startedAt: o()
+	}, c, d, f = /* @__PURE__ */ new Map(), v = /* @__PURE__ */ new Map(), y, b = Math.max(0, r.holdMs ?? u()), x = Math.max(0, r.maxHeld ?? l), S = /* @__PURE__ */ new Set(), C = !1, w = !1, T = () => s.phase === "ready", E = () => g.has(s.phase), D = () => c !== void 0 && E(), O = () => _.has(s.phase) || D(), k = n(r.health, () => T()), A = r.health?.readiness === void 0 ? async () => T() && (d === void 0 || await d()) : k.readiness, j = () => {
+		if ((f.size > 0 || y !== void 0) && !T()) return !1;
+		for (let e of f.values()) try {
 			if (e() !== !0) return !1;
 		} catch {
 			return !1;
 		}
 		return !0;
-	}, x = () => {
-		for (let e of m.values()) try {
+	}, M = () => {
+		for (let e of v.values()) try {
 			if (e() !== !0) return !1;
 		} catch {
 			return !1;
 		}
 		return !0;
-	}, S = {
-		...v,
-		readiness: async () => b() && await y() && b(),
-		liveness: async () => x() && await v.liveness() && x()
-	}, C = () => ({
-		phase: u.phase,
-		ready: g(),
-		elapsedMs: l() - u.startedAt,
-		...u.tablesTotal === void 0 ? {} : { tablesTotal: u.tablesTotal },
-		...u.error === void 0 ? {} : { error: u.error }
-	}), w = i((n, r) => {
-		let i = n.url ?? "/", s = i.indexOf("?"), c = s === -1 ? i : i.slice(0, s);
-		if (c === "/_voltro/health" && (h !== void 0 || p.size > 0)) {
+	}, N = {
+		...k,
+		readiness: async () => j() && await A() && j(),
+		liveness: async () => M() && await k.liveness() && M()
+	}, P = () => ({
+		phase: s.phase,
+		ready: T(),
+		elapsedMs: o() - s.startedAt,
+		...s.tablesTotal === void 0 ? {} : { tablesTotal: s.tablesTotal },
+		...s.error === void 0 ? {} : { error: s.error },
+		...S.size > 0 ? { held: S.size } : {}
+	}), F = i((n, r) => {
+		let i = n.url ?? "/", o = i.indexOf("?"), l = o === -1 ? i : i.slice(0, o);
+		if (l === "/_voltro/health" && (y !== void 0 || f.size > 0)) {
 			if (n.method !== "GET" && n.method !== "HEAD") {
 				r.writeHead(405, {
 					allow: "GET, HEAD",
@@ -41,103 +68,165 @@ var a = "no-store", o = "1", s = /* @__PURE__ */ new Set(["ready", "draining"]),
 				}), r.end();
 				return;
 			}
-			e(S, "readiness", C).then((e) => {
-				let t = e.status === 200 && g() && b();
+			e(N, "readiness", P).then((e) => {
+				let t = e.status === 200 && T() && j();
 				r.writeHead(t ? 200 : 503, {
 					"content-type": "application/json",
 					"cache-control": a
 				}), r.end(n.method === "HEAD" ? void 0 : JSON.stringify({
-					...h,
-					phase: u.phase,
+					...y,
+					phase: s.phase,
 					ready: t
 				}));
 			});
 			return;
 		}
-		let l = t(S, c);
-		l === void 0 ? d !== void 0 && _() ? d.request(n, r) : (r.writeHead(503, {
-			"content-type": "text/plain",
-			"cache-control": a,
-			"retry-after": o
-		}), r.end("starting")) : e(S, l, C).then((e) => {
+		let u = t(N, l);
+		u === void 0 ? D() && S.size === 0 ? c?.request(n, r) : I({
+			attach: (e) => {
+				r.once("close", e);
+			},
+			detach: (e) => {
+				r.removeListener("close", e);
+			},
+			forward: (e) => {
+				e.request(n, r);
+			},
+			refuse: () => {
+				p(n, r);
+			}
+		}) : e(N, u, P).then((e) => {
 			r.writeHead(e.status, {
 				"content-type": e.contentType,
 				"cache-control": a
 			}), r.end(e.body);
 		});
 	});
-	w.on("upgrade", (e, t, n) => {
-		d !== void 0 && _() ? (r(e, t), d.upgrade(e, t, n)) : t.end(`HTTP/1.1 503 Service Unavailable\r
-Retry-After: ${o}\r\nCache-Control: no-store\r
-Connection: close\r
-Content-Length: 0\r
-\r
-`);
-	}), await new Promise((e, t) => {
+	F.on("upgrade", (e, t, n) => {
+		if (D() && S.size === 0) {
+			h(c, e, t, n);
+			return;
+		}
+		let r = () => {};
+		I({
+			attach: (e) => {
+				t.on("error", r), t.once("close", e);
+			},
+			detach: (e) => {
+				t.removeListener("error", r), t.removeListener("close", e);
+			},
+			forward: (r) => {
+				h(r, e, t, n);
+			},
+			refuse: () => {
+				m(t);
+			}
+		});
+	});
+	function I(e) {
+		let t = D();
+		if (!t && (!O() || b === 0 || S.size >= x)) {
+			e.refuse();
+			return;
+		}
+		let n, i = () => {
+			a();
+		}, a = () => {
+			n !== void 0 && clearTimeout(n), e.detach(i), S.delete(o);
+		}, o = {
+			forward: e.forward,
+			refuse: e.refuse,
+			release: a
+		};
+		t || (n = setTimeout(() => {
+			a(), C || (C = !0, r.log?.info("boot still running after the hold window — answering 503 to waiting requests", {
+				holdMs: b,
+				phase: s.phase
+			})), e.refuse();
+		}, b), n.unref()), e.attach(i), S.add(o), t && L();
+	}
+	function L() {
+		w || S.size === 0 || (w = !0, setImmediate(() => {
+			w = !1, R();
+		}));
+	}
+	function R() {
+		if (D()) {
+			let e = c;
+			if (e === void 0) return;
+			let t = S.size;
+			for (let t of [...S]) t.release(), t.forward(e);
+			t > 0 && r.log?.info("handed requests held during boot to the app", { count: t });
+		} else if (!O()) for (let e of [...S]) e.release(), e.refuse();
+	}
+	await new Promise((e, t) => {
 		let n = (e) => {
 			t(e);
 		};
-		w.once("error", n), w.listen(c.host === void 0 ? { port: c.port } : {
-			port: c.port,
-			host: c.host
+		F.once("error", n), F.listen(r.host === void 0 ? { port: r.port } : {
+			port: r.port,
+			host: r.host
 		}, () => {
-			w.removeListener("error", n), e();
+			F.removeListener("error", n), e();
 		});
 	});
-	let T = w.address()?.port ?? c.port;
-	return c.log?.info("listening early — probes answer on the app port from here on", { port: T }), {
-		server: w,
-		port: T,
+	let z = F.address()?.port ?? r.port;
+	return r.log?.info("listening early — probes answer on the app port from here on", { port: z }), {
+		server: F,
+		port: z,
 		get state() {
-			return u;
+			return s;
+		},
+		get held() {
+			return S.size;
 		},
 		set: (e) => {
-			u = {
-				...u,
+			s = {
+				...s,
 				...e
-			};
+			}, L();
 		},
-		isReady: g,
+		isReady: T,
 		delegate: (e) => {
-			d = e;
+			c = e, L();
 		},
 		setDependencyPing: (e) => {
-			f = e;
+			d = e;
 		},
 		setRoleHealth: (e) => {
 			let t = (e) => {
 				if (!Array.isArray(e) || e.length === 0 || e.length > 64 || e.some((e) => typeof e != "string" || !/^[a-z][a-z0-9._-]{0,63}$/.test(e)) || new Set(e).size !== e.length) throw Error("Invalid role health identity");
 				return Object.freeze([...e]);
 			};
-			h = Object.freeze({
+			y = Object.freeze({
 				roles: t(e.roles),
 				workloads: t(e.workloads)
 			});
 		},
 		addReadinessGate: (e, t) => {
 			if (!/^[a-z][a-z0-9._-]{0,63}$/.test(e) || typeof t != "function") throw Error("Invalid readiness gate");
-			if (p.has(e)) throw Error("Readiness gate is already registered");
-			p.set(e, t);
+			if (f.has(e)) throw Error("Readiness gate is already registered");
+			f.set(e, t);
 			let n = !1;
 			return () => {
-				n || (n = !0, p.get(e) === t && p.delete(e));
+				n || (n = !0, f.get(e) === t && f.delete(e));
 			};
 		},
 		addLivenessGate: (e, t) => {
 			if (!/^[a-z][a-z0-9._-]{0,63}$/.test(e) || typeof t != "function") throw Error("Invalid liveness gate");
-			if (m.has(e)) throw Error("Liveness gate is already registered");
-			m.set(e, t);
+			if (v.has(e)) throw Error("Liveness gate is already registered");
+			v.set(e, t);
 			let n = !1;
 			return () => {
-				n || (n = !0, m.get(e) === t && m.delete(e));
+				n || (n = !0, v.get(e) === t && v.delete(e));
 			};
 		},
 		close: () => new Promise((e) => {
-			w.listening ? (w.closeAllConnections(), w.close(() => {
+			for (let e of [...S]) e.release(), e.refuse();
+			F.listening ? (F.closeAllConnections(), F.close(() => {
 				e();
 			})) : e();
 		})
 	};
 };
-//#endregion
-export { c as bindBootListener };
+export { v as bindBootListener, u as bootHoldMsFromEnv };

package/dist/bootStoreCodec.js

@@ -2,7 +2,7 @@ import { getFieldCipher as e } from "./fieldCipher.js";
 import { upsertDestinationId as t } from "./upsertBinding.js";
 import { decryptFieldsOnRead as n, deserializeArraysOnRead as r, encryptFieldsForWrite as i, encryptFieldsForWriteBatch as a, encryptedColumnsOf as o, getTable as s, jsonPatchAssignments as c, refuseIdChangeOfSealedRow as l, serializeArraysForWrite as u, upsertUpdateValues as d } from "@voltro/database";
 import { createLogger as f } from "@voltro/logger";
-//#region src/bootStoreCodec.ts
+// src/bootStoreCodec.ts
 var p = f({ scope: "store.fieldEncryption" }), m = (f, h) => {
 	let g = h, _ = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", v = /* @__PURE__ */ new Set(), y = (e) => {
 		let t = `${e.table}.${e.column}`;
@@ -67,5 +67,4 @@ var p = f({ scope: "store.fieldEncryption" }), m = (f, h) => {
 		transactional: (e) => f.transactional((t) => e(m(t, h)))
 	};
 };
-//#endregion
 export { m as wrapStoreWithBootCodec };

package/dist/businessRules.js

@@ -1,7 +1,7 @@
 import { getTable as e } from "@voltro/database";
 import { BusinessRuleViolation as t } from "@voltro/protocol";
 import { log as n } from "@voltro/logger";
-//#region src/businessRules.ts
+// src/businessRules.ts
 var r = (e) => e.startsWith("_voltro"), i = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
@@ -63,5 +63,4 @@ var r = (e) => e.startsWith("_voltro"), i = (e) => {
 		}
 	}
 };
-//#endregion
 export { s as evaluateTouchedRules, a as makeRuleCapture };

package/dist/changeClaimsTable.js

@@ -1,5 +1,5 @@
 import { id as e, integer as t, table as n, text as r, timestamp as i } from "@voltro/database";
-//#region src/changeClaimsTable.ts
+// src/changeClaimsTable.ts
 var a = n("_voltro_change_claims", {
 	id: e({ prefix: "chclaim" }),
 	scope: r(),
@@ -8,5 +8,4 @@ var a = n("_voltro_change_claims", {
 	claimedAt: i(),
 	nextSlot: t().default(0)
 }).unique(["scope", "key"]).index(["claimedAt"]);
-//#endregion
 export { a as _voltroChangeClaimsTable };

package/dist/columnOnUpdate.js

@@ -1,4 +1,4 @@
-//#region src/columnOnUpdate.ts
+// src/columnOnUpdate.ts
 var e = (e) => {
 	if (!(e.length < 32 || Object.getPrototypeOf(e) !== Array.prototype || Object.getOwnPropertySymbols(e).length > 0 || Object.hasOwn(e, "includes"))) {
 		for (let t = 0; t < e.length; t++) {
@@ -19,5 +19,4 @@ var e = (e) => {
 	}
 	return o;
 };
-//#endregion
 export { t as applyColumnOnUpdate };

package/dist/composeAnalytics.js

@@ -1,6 +1,6 @@
 import { AnalyticsCapabilityNotSupported as e } from "./analyticsSink.js";
 import { Effect as t } from "effect";
-//#region src/composeAnalytics.ts
+// src/composeAnalytics.ts
 var n = "noop", r = () => {
 	let r = (r) => t.fail(new e({
 		provider: n,
@@ -125,5 +125,4 @@ var n = "noop", r = () => {
 	sql: "none",
 	build: () => r()
 };
-//#endregion
 export { n as NOOP_ANALYTICS_PROVIDER, a as composeAnalytics, i as composeAnalyticsSinks, r as noopAnalytics, o as noopAnalyticsSpec };

package/dist/computedQuery.js

@@ -1,4 +1,3 @@
-//#region src/computedQuery.ts
+// src/computedQuery.ts
 var e = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0;
-//#endregion
 export { e as isComputedQuery };