@voltro/runtime 0.87.0 → 0.89.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (179) hide show
  1. package/CHANGELOG.md +272 -6
  2. package/THIRD-PARTY-NOTICES.md +644 -48
  3. package/dist/aggregate.js +1 -2
  4. package/dist/aggregateExtrema.js +1 -2
  5. package/dist/aggregateIvm.js +1 -2
  6. package/dist/analyticsMirror.js +1 -2
  7. package/dist/analyticsSink.js +1 -2
  8. package/dist/apiKeyUsage.js +1 -2
  9. package/dist/apiKeys.js +1 -2
  10. package/dist/apiKeysWiring.js +1 -2
  11. package/dist/apiRoleBucketSampler.js +1 -2
  12. package/dist/apiRoleWorkloadHistory.js +1 -2
  13. package/dist/apiRoleWorkloadMetrics.js +1 -2
  14. package/dist/apiRoleWorkloadStorage.js +1 -2
  15. package/dist/approvalBuiltins.js +1 -2
  16. package/dist/approvals.js +1 -2
  17. package/dist/authMiddlewareLayer.js +1 -2
  18. package/dist/bindEvent.js +1 -2
  19. package/dist/boot-refusal.d.ts +10 -0
  20. package/dist/{bootRefusal.js → boot-refusal.js} +1 -2
  21. package/dist/bootListener.js +154 -65
  22. package/dist/bootStoreCodec.js +1 -2
  23. package/dist/businessRules.js +1 -2
  24. package/dist/changeClaimsTable.js +1 -2
  25. package/dist/columnOnUpdate.js +1 -2
  26. package/dist/composeAnalytics.js +1 -2
  27. package/dist/computedQuery.js +1 -2
  28. package/dist/computedQueryCache.js +136 -78
  29. package/dist/connectionBuiltins.js +1 -2
  30. package/dist/connectionCredentials.js +1 -2
  31. package/dist/connectionState.js +1 -2
  32. package/dist/connectionVault.js +1 -2
  33. package/dist/connectionsFacade.js +1 -2
  34. package/dist/coordinatedSchedule.js +1 -2
  35. package/dist/crdtHistory.js +1 -2
  36. package/dist/crdtMerge.js +1 -2
  37. package/dist/crdtVersionsTable.js +1 -2
  38. package/dist/credentialBound.js +1 -2
  39. package/dist/crud.js +1 -2
  40. package/dist/dataStore.js +1 -2
  41. package/dist/dataloader.js +1 -2
  42. package/dist/declaredTablesGuard.js +1 -2
  43. package/dist/defineExecutor.js +1 -2
  44. package/dist/dependencyGraph.js +1 -2
  45. package/dist/devices.js +1 -2
  46. package/dist/devicesWiring.js +1 -2
  47. package/dist/dialectReplicationAdapter.js +1 -2
  48. package/dist/dispatcher.js +1 -2
  49. package/dist/effectStore.js +1 -2
  50. package/dist/engineClients.js +1 -2
  51. package/dist/eventBus.js +1 -2
  52. package/dist/eventPublish.js +1 -2
  53. package/dist/events.js +1 -2
  54. package/dist/expectation.js +1 -2
  55. package/dist/expectationEvaluator.js +2 -3
  56. package/dist/experiment.js +1 -2
  57. package/dist/experimentEvaluator.js +1 -2
  58. package/dist/externalizedTasks.js +1 -2
  59. package/dist/fieldCipher.js +1 -2
  60. package/dist/fieldKeyRegistry.js +1 -2
  61. package/dist/fieldKeyRekey.js +1 -2
  62. package/dist/fieldKeyScan.js +1 -2
  63. package/dist/fieldKeyring.js +1 -2
  64. package/dist/fingerprint.js +1 -2
  65. package/dist/finops.js +1 -2
  66. package/dist/finopsAccountant.js +1 -2
  67. package/dist/handlerBody.js +1 -2
  68. package/dist/healthProbes.js +1 -2
  69. package/dist/hotDataStore.js +1 -2
  70. package/dist/hotDataStoreSnapshot.js +1 -2
  71. package/dist/hotDataStoreTables.js +1 -2
  72. package/dist/http-range.js +1 -2
  73. package/dist/httpClientSsrf.js +1 -2
  74. package/dist/httpClientTracing.js +1 -2
  75. package/dist/httpCompression.js +1 -2
  76. package/dist/httpInputStream.js +1 -2
  77. package/dist/httpKeepAlive.js +1 -2
  78. package/dist/httpRouteMounts.js +1 -2
  79. package/dist/idempotencyStore.js +1 -2
  80. package/dist/idleDetector.js +1 -2
  81. package/dist/index.d.ts +22 -2
  82. package/dist/index.js +109 -110
  83. package/dist/insertRequiredColumns.js +1 -2
  84. package/dist/instanceMembership.js +1 -2
  85. package/dist/ivm.js +1 -2
  86. package/dist/kvDataStore.js +1 -2
  87. package/dist/kvFacade.js +1 -2
  88. package/dist/matcher.js +1 -2
  89. package/dist/memoryColumnDefaults.js +1 -2
  90. package/dist/memoryQueryJoins.js +1 -2
  91. package/dist/memorySetOperations.js +1 -2
  92. package/dist/metrics.js +1 -2
  93. package/dist/observability.js +2 -3
  94. package/dist/observedGraph.js +1 -2
  95. package/dist/originGuard.js +1 -2
  96. package/dist/outbox.js +1 -2
  97. package/dist/pluginRefRules.js +1 -2
  98. package/dist/policyGuardResolver.js +1 -2
  99. package/dist/preview.js +1 -2
  100. package/dist/projectedRows.js +1 -2
  101. package/dist/provenance.js +1 -2
  102. package/dist/rangeIndex.js +1 -2
  103. package/dist/rawReadScope.js +2 -3
  104. package/dist/reaction.js +1 -2
  105. package/dist/reactiveConfig.js +1 -2
  106. package/dist/readClassification.js +1 -2
  107. package/dist/readRecorder.js +1 -2
  108. package/dist/readScopePredicate.js +1 -2
  109. package/dist/rebac.js +1 -2
  110. package/dist/rebacInterceptor.js +1 -2
  111. package/dist/registry.js +1 -2
  112. package/dist/relevantFields.js +1 -2
  113. package/dist/replicaHealth.js +1 -2
  114. package/dist/replicaLocality.js +1 -2
  115. package/dist/replicaObservations.js +1 -2
  116. package/dist/replicaSelection.js +1 -2
  117. package/dist/replicatedDataStore.js +1 -2
  118. package/dist/requestLoader.js +1 -2
  119. package/dist/resumeCensus.js +1 -2
  120. package/dist/revalidation.js +1 -2
  121. package/dist/rowFilter.js +1 -2
  122. package/dist/rowStateBytes.js +1 -2
  123. package/dist/rpcBodyCap.js +1 -2
  124. package/dist/rpcConnections.js +1 -2
  125. package/dist/rpcDefectDiagnostics.js +1 -2
  126. package/dist/rpcServer.js +1 -2
  127. package/dist/rpcWorkloadAdmission.js +1 -2
  128. package/dist/runAsSystem.js +1 -2
  129. package/dist/rywPositionStore.js +1 -2
  130. package/dist/schedule.js +1 -2
  131. package/dist/scheduleBackfillRequests.js +1 -2
  132. package/dist/scheduleClaimsTable.js +1 -2
  133. package/dist/scheduleRunsTable.js +1 -2
  134. package/dist/scheduler.js +4 -4
  135. package/dist/schemaRegistry.js +1 -2
  136. package/dist/secretsResolver.js +1 -2
  137. package/dist/securityHeaders.js +1 -2
  138. package/dist/servePipeline.js +198 -183
  139. package/dist/serverOnlyAudit.js +1 -2
  140. package/dist/serverTracer.js +1 -2
  141. package/dist/serviceCredentials.js +1 -2
  142. package/dist/setReadScopes.js +1 -2
  143. package/dist/singleNodeOrchestrator.js +1 -2
  144. package/dist/snapshotValueCodec.js +1 -2
  145. package/dist/sourceResolution.js +1 -2
  146. package/dist/storeMiddleware.js +3 -4
  147. package/dist/storeQuery.js +1 -2
  148. package/dist/storeRead.js +1 -2
  149. package/dist/subscriber.js +1 -2
  150. package/dist/subscriptionOutbox.js +1 -2
  151. package/dist/subscriptionRegistry.js +1 -2
  152. package/dist/subscriptionResume.js +1 -2
  153. package/dist/subscriptionSocketMetrics.js +1 -2
  154. package/dist/systemSubject.js +1 -2
  155. package/dist/tenantScope.js +1 -2
  156. package/dist/tenantSelection.js +1 -2
  157. package/dist/timeline.js +1 -2
  158. package/dist/traceContext.js +1 -2
  159. package/dist/traceSink.js +1 -2
  160. package/dist/traceSpansTable.js +1 -2
  161. package/dist/traceparent.js +1 -2
  162. package/dist/transactionSubject.js +1 -2
  163. package/dist/trustedProxy.js +2 -3
  164. package/dist/undo.js +1 -2
  165. package/dist/undoBuiltins.js +1 -2
  166. package/dist/undoCapture.js +1 -2
  167. package/dist/undoLogTable.js +1 -2
  168. package/dist/upsertBinding.js +1 -2
  169. package/dist/wakeOrchestrator.js +1 -2
  170. package/dist/wakeRegistry.js +1 -2
  171. package/dist/wakeRouter.js +1 -2
  172. package/dist/wakeSupervisor.js +1 -2
  173. package/dist/wakeupsTable.js +1 -2
  174. package/dist/webSocketGatewayRuntime.js +1 -2
  175. package/dist/webhookVerification.js +1 -2
  176. package/dist/wireColumnStrip.js +1 -2
  177. package/dist/workflowReadBuiltins.js +1 -2
  178. package/dist/workflowRuntime.js +1 -2
  179. package/package.json +26 -19
package/dist/index.js CHANGED
@@ -38,119 +38,118 @@ import { DEFAULT_COMPRESSION_MIN_BYTES as Ln, isCompressibleContentType as Rn, m
38
38
  import { noteResumeVerdict as Un, resetResumeCensus as Wn, resumeCensus as Gn } from "./resumeCensus.js";
39
39
  import { publishServerTracerLayer as Kn, serverTracer as qn, setServerTracer as Jn, withServerTracer as Yn } from "./serverTracer.js";
40
40
  import { classifyRequestOrigin as Xn, isStateChangingMethod as Zn, makeOriginGuardExemption as Qn, normalizeOrigin as $n, resolveOriginGuardConfig as er } from "./originGuard.js";
41
- import { BOOT_REFUSAL_NAME as tr, bootRefusal as nr, isBootRefusal as rr } from "./bootRefusal.js";
41
+ import { BOOT_REFUSAL_NAME as tr, bootRefusal as nr, isBootRefusal as rr } from "./boot-refusal.js";
42
42
  import { NO_TRUSTED_PROXIES as ir, ipToBytes as ar, isTrustedProxy as or, normalizeIp as sr, resolveClientAddress as cr, resolveRequestClientAddress as lr, resolveRequestIsHttps as ur, resolveTrustedProxies as dr } from "./trustedProxy.js";
43
43
  import { API_CSP as fr, DEFAULT_HSTS as pr, HTML_CSP as mr, ORIGIN_NULLING_REFERRER_POLICIES as hr, preservesSameOriginHeader as gr, resolveSecurityHeaders as _r, securityHeadersFor as vr } from "./securityHeaders.js";
44
44
  import { UnverifiedWebhookRoute as yr, WEBHOOK_VERIFICATION_PROPERTY as br, assertWebhookRoutesDeclareVerification as xr, webhookVerificationOf as Sr } from "./webhookVerification.js";
45
45
  import { DEFAULT_MAX_RPC_BODY_BYTES as Cr, awaitServerListening as wr, bindComputedUntyped as Tr, bindMutation as Er, bindStream as Dr, bindSubscription as Or, bindSubscriptionUntyped as kr, defectMessage as Ar, drainForShutdown as jr, isInfraError as Mr, makeMutationCodec as Nr, onProcessShutdown as Pr, shutdownGraceMsFromEnv as Fr, startRpcServer as Ir } from "./rpcServer.js";
46
46
  import { answerProbe as Lr, probeFor as Rr, resolveHealth as zr } from "./healthProbes.js";
47
47
  import { engineClientsSnapshot as Br, parseEngineSdkHeader as Vr } from "./engineClients.js";
48
- import { bindBootListener as Hr } from "./bootListener.js";
49
- import { buildTracingLayer as Ur, describeOtelReasons as Wr, otelImportFailure as Gr } from "./observability.js";
50
- import { makeBufferingSpanProcessor as Kr } from "./traceSink.js";
51
- import { cachedBackend as qr, envSecretsBackend as Jr, httpSecretsBackend as Yr, resetSecretsBackend as Xr, resolveSecret as Zr, resolveSecretSync as Qr, resolveSecretsBackend as $r, setSecretsBackend as ei } from "./secretsResolver.js";
52
- import { FIELD_ENCRYPTION_ACTIVE_ENV as ti, FIELD_ENCRYPTION_KEYS_ENV as ni, FIELD_ENCRYPTION_KEY_ENV as ri, FIELD_ENCRYPTION_PREVIOUS_KEY_ENV as ii, FIELD_KEYRING_ENV_NAMES as ai, resolveFieldKeyring as oi } from "./fieldKeyring.js";
53
- import { FIELD_KEYS_TABLE as si, FIELD_KEY_HEARTBEAT_MS as ci, FIELD_KEY_HOLDERS_TABLE as li, FIELD_KEY_LEASE_MS as ui, FIELD_KEY_REPORTS_TABLE as di, FieldKeyringRefusal as fi, _voltroFieldKeyHoldersTable as pi, _voltroFieldKeyReportsTable as mi, _voltroFieldKeysTable as hi, activateFieldKeyNow as gi, checkFieldKeyring as _i, fieldKeyHolderId as vi, heartbeatFieldKeys as yi, readFieldKeyHolders as bi, readFieldKeyReports as xi, readFieldKeys as Si, recordFieldKeyReport as Ci, registerFieldKey as wi, releaseFieldKeyHolder as Ti, retireFieldKey as Ei, startFieldKeyHolder as Di, verifyFieldKeyring as Oi } from "./fieldKeyRegistry.js";
54
- import { declaredEncryptedColumns as ki, declaredRenames as Ai, fieldKeyStatus as ji } from "./fieldKeyScan.js";
55
- import { nullUnreadableSealedValues as Mi, openCell as Ni, rekeyCell as Pi, rekeySealedValues as Fi, verifySealedValues as Ii } from "./fieldKeyRekey.js";
56
- import { dataStoreIdempotencyStore as Li } from "./idempotencyStore.js";
57
- import { dataStoreKvStore as Ri } from "./kvDataStore.js";
58
- import { makeAsyncKv as zi, noopKv as Bi } from "./kvFacade.js";
59
- import { ACTORS_TABLE as Vi, API_KEYS_TABLE as Hi, dataStoreApiKeyStore as Ui, generateApiKeyToken as Wi, lockApiKeyById as Gi, makeApiKeyService as Ki, makeApiKeyUsageFlusher as qi, memoryApiKeyStore as Ji, plantMissingApiKeyActors as Yi, sha256Hex as Xi } from "./apiKeys.js";
60
- import { TENANT_SELECTIONS_TABLE as Zi, clearTenantSelection as Qi, selectTenant as $i, tenantSelectionId as ea, tenantSelectionStore as ta } from "./tenantSelection.js";
61
- import { DEVICES_TABLE as na, dataStoreDeviceStore as ra, deviceTokenPrefixes as ia, makeDeviceService as aa, memoryDeviceStore as oa, sha256HexOf as sa } from "./devices.js";
62
- import { deviceManagementRoutes as ca, frameworkDeviceStrategy as la } from "./devicesWiring.js";
63
- import { apiKeyManagementRoutes as ua, frameworkApiKeyStrategy as da } from "./apiKeysWiring.js";
64
- import { SYSTEM_SUBJECT as fa } from "./systemSubject.js";
65
- import { EffectStore as pa, insertIgnoreRowOutcomeEffect as ma, insertManyRowsEffect as ha, insertRowEffect as ga, makeEffectStoreLayer as _a, upsertRowEffect as va, upsertRowOutcomeEffect as ya } from "./effectStore.js";
66
- import { WorkflowPayloadError as ba, WorkflowRateLimitedError as xa, WorkflowSingletonHeldError as Sa, WorkflowStartNotExecuted as Ca, makeLazyWorkflowFacade as wa, makeTransactionalWorkflowFacade as Ta, makeWorkflowFacade as Ea, makeWorkflowFacadeWithCallerContext as Da, makeWorkflowHandlers as Oa, makeWorkflowLayers as ka, makeWorkflowRunHandle as Aa, payloadPropertyNames as ja } from "./workflowRuntime.js";
67
- import { _voltroWorkflowEventDeliveriesTable as Ma, _voltroWorkflowEventsTable as Na, defineEventTrigger as Pa, isWorkflowEventTriggerDefinition as Fa, makeEventsFacade as Ia, triggerWorkflow as La } from "./events.js";
68
- import { EventBus as Ra } from "./eventBus.js";
69
- import { OutboxEventPublisher as za, makeEventPublisher as Ba, publishEvent as Va } from "./eventPublish.js";
70
- import { EVENT_CLIENT_QUEUE_SIZE as Ha, EVENT_LATEST_QUEUE_SIZE as Ua, bindEvent as Wa, makeBufferGapDetector as Ga } from "./bindEvent.js";
71
- import { InstanceMembership as Ka } from "./instanceMembership.js";
72
- import { DEFAULT_OUTBOX_CLAIM_LEASE_MS as qa, OUTBOX_ATTEMPTS_TABLE as Ja, OUTBOX_ATTEMPT_LOG_CAP as Ya, OUTBOX_TABLE as Xa, backoffMs as Za, defineOutboxHandler as Qa, drainOutbox as $a, makeOutboxFacade as eo, outboxAttemptsTable as to, outboxTable as no } from "./outbox.js";
73
- import { CONNECTIONS_TABLE as ro, CONNECTION_GRANTS_TABLE as io, ConnectionNotConnected as ao, DEFAULT_REFRESH_SKEW_MS as oo, GRANT_TTL_MS as so, REFRESH_LEASE_MS as co, _voltroConnectionGrantsTable as lo, _voltroConnectionsTable as uo, assertConnectionCipherConfigured as fo, beginOAuthConnect as po, clearConnectionRefreshFlights as mo, completeOAuthConnect as ho, connectionCallbackPath as go, connectionLabel as _o, defineConnection as vo, exchangeAuthorizationCode as yo, forgetCredential as bo, listConnectionStates as xo, makeConnectionRegistry as So, oauthCredentialValue as Co, projectConnectionState as wo, refreshAccessToken as To, resolveConnection as Eo, resolveRedirectUri as Do, sanitizeRedirectTo as Oo, storeCredential as ko, sweepExpiredGrants as Ao } from "./connectionVault.js";
74
- import { getConnectionResolver as jo, makeConnectionResolver as Mo, makeConnectionsFacade as No, resolveConnectionForSubject as Po, setConnectionResolver as Fo } from "./connectionsFacade.js";
75
- import { makeDisconnectConnectionExecutor as Io, makeListConnectionsExecutor as Lo, makeStartConnectionExecutor as Ro, makeSubmitTokenExecutor as zo } from "./connectionBuiltins.js";
76
- import { AccessDenied as Bo, REBAC_ADMIN_SCOPE as Vo, assertCan as Ho, can as Uo, clearResourcePolicies as Wo, defineResourcePolicy as Go, effectiveRelations as Ko, getResourcePolicy as qo, listResourcePolicies as Jo, rebacPolicyGraph as Yo, revokedIds as Xo, visibleRows as Zo } from "./rebac.js";
77
- import { currentRequestLoader as Qo, enterRequestLoader as $o, runWithRequestLoader as es } from "./requestLoader.js";
78
- import { getTupleSource as ts, installPolicyGuardResolver as ns, registerDefaultTupleSource as rs, setTupleSource as is } from "./policyGuardResolver.js";
79
- import { makeDataLoader as as } from "./dataloader.js";
80
- import { tracingHttpClientLayer as os } from "./httpClientTracing.js";
81
- import { SsrfBlockedError as ss, ssrfGuardHttpClientLayer as cs, ssrfReason as ls } from "./httpClientSsrf.js";
82
- import { makeApiKeyUsageBuffer as us } from "./apiKeyUsage.js";
83
- import { VOLTRO_AUDIT_MIXIN_ID as ds, VOLTRO_EXPIRES_MIXIN_ID as fs, VOLTRO_LOCAL_FIRST_MIXIN_ID as ps, VOLTRO_SOFT_DELETE_MIXIN_ID as ms, VOLTRO_TENANT_MIXIN_ID as hs, emptySchemaRegistry as gs, makeSchemaRegistry as _s } from "./schemaRegistry.js";
84
- import { wrapStoreWithBootCodec as vs } from "./bootStoreCodec.js";
85
- import { crud as ys, redactColumns as bs } from "./crud.js";
86
- import { cacheScopeLeaks as xs, formatCacheScopeLeaks as Ss, formatServerOnlyLeaks as Cs, schemaPropertyNames as ws, serverOnlyLeaks as Ts } from "./serverOnlyAudit.js";
87
- import { formatUnresolvedSources as Es, unresolvedSources as Ds } from "./sourceResolution.js";
88
- import { applyPluginRefRules as Os, collectPluginRefRules as ks, collectReferenceSoftDeleteRules as As, isSoftDelete as js, rulesFor as Ms } from "./pluginRefRules.js";
89
- import { DEFAULT_STALE_AFTER_MS as Ns, REPLICA_OBSERVATIONS_TABLE as Ps, forgetReplicaObservations as Fs, mergeFleetObservations as Is, readReplicaObservations as Ls, resetReplicaObservationWarnings as Rs, writeReplicaObservation as zs } from "./replicaObservations.js";
90
- import { CircuitBreaker as Bs, CircuitOpen as Vs } from "./circuitBreaker.js";
91
- import { clearSystemStoreHandle as Hs, getSystemStoreHandle as Us, runAsSystem as Ws, setSystemStoreHandle as Gs } from "./runAsSystem.js";
92
- import { inspectWorkflow as Ks } from "./inspectWorkflow.js";
93
- import { makeConnectionState as qs } from "./connectionState.js";
94
- import { makeAuthMiddlewareLayers as Js, observeConnectionHeaders as Ys, withRpcAuthMiddleware as Xs } from "./authMiddlewareLayer.js";
95
- import { SERVICE_TOKEN_PREFIX as Zs, apiBindingTokenEnv as Qs, apiBindingUrlEnv as $s, assertServiceCallersConfig as ec, isWellFormedServiceToken as tc, mintServiceToken as nc, serviceCallerNextTokenEnv as rc, serviceCallerStrategy as ic, serviceCallerTokenEnv as ac, serviceEnvSegment as oc } from "./serviceCredentials.js";
96
- import { UndeclaredTableAccess as sc, guardUndeclaredTables as cc } from "./declaredTablesGuard.js";
97
- import { localityAwareSelector as lc, resolveCurrentRegion as uc } from "./replicaLocality.js";
98
- import { memoryReplicationAdapter as dc } from "./dialectReplicationAdapter.js";
99
- import { DEFAULT_MAX_RUNTIME_MS as fc, compileCron as pc, cronOccurrences as mc, defineSchedule as hc, isScheduleDefinition as gc, nextFiring as _c } from "./schedule.js";
100
- import { resolveTransactionSubject as vc } from "./transactionSubject.js";
101
- import { scheduleBackfillRequestsTable as yc } from "./scheduleBackfillRequests.js";
102
- import { cancelWakeup as bc, dueWakeups as xc, markWakeupFired as Sc, nextWakeup as Cc, pruneWakeups as wc, registerWakeup as Tc, releaseWakeup as Ec, tryClaimWakeup as Dc } from "./wakeRegistry.js";
103
- import { CLAIM_RETENTION_BUCKETS as Oc, DEFAULT_CLAIM_BUCKET_MS as kc, DEFAULT_EXTERNAL_RECONCILE_MS as Ac, DEFAULT_EXTERNAL_TRIGGER_SKEW_MS as jc, DEFAULT_SCHEDULE_HEARTBEAT_MS as Mc, DORMANCY_WAKEUP_TENANT as Nc, EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS as Pc, SCHEDULE_SUBJECT as Fc, TERMINAL_RUN_STATUSES as Ic, claimGraceMs as Lc, makeAdvisoryLockCoordinator as Rc, peerRunIsAlive as zc, singleCoordinator as Bc, startScheduler as Vc } from "./scheduler.js";
104
- import { MIN_EXTERNALIZABLE_INTERVAL_MS as Hc, cronForInterval as Uc, externalizationRefusal as Wc, externalizedTask as Gc, externalizedTaskNames as Kc, makeExternalizedTaskRegistry as qc, registerExternalizedTask as Jc } from "./externalizedTasks.js";
105
- import { DEFAULT_MAX_IDLE_INTERVAL_MS as Yc, inspectCoordinatedSchedule as Xc, makeCoordinatedScheduler as Zc, nextDelay as Qc, readPollCeilingMs as $c, scheduleCoordinated as el } from "./coordinatedSchedule.js";
106
- import { _voltroScheduleRunsTable as tl } from "./scheduleRunsTable.js";
107
- import { _voltroScheduleClaimsTable as nl } from "./scheduleClaimsTable.js";
108
- import { _voltroChangeClaimsTable as rl } from "./changeClaimsTable.js";
109
- import { _voltroTracesTable as il } from "./traceSpansTable.js";
110
- import { _voltroUndoLogTable as al } from "./undoLogTable.js";
111
- import { crdtCellStats as ol, listCrdtVersions as sl, migrateCrdtColumn as cl, prepareSealedCrdtRestore as ll, restoreCrdtVersion as ul, snapshotCrdt as dl } from "./crdtHistory.js";
112
- import { makeUndoCapture as fl, undoCaptureEnabled as pl, undoSurfaceEnabled as ml, wrapCaptureStore as hl } from "./undoCapture.js";
113
- import { evaluateTouchedRules as gl, makeRuleCapture as _l } from "./businessRules.js";
114
- import { UndoBoundaryError as vl, UndoStack as yl, applyInverse as bl, applyInverses as xl, forwardChangeFromCdc as Sl, invertChange as Cl, isSafeToApply as wl, synthesizeInverse as Tl } from "./undo.js";
115
- import { applyUndoInvocation as El, redoUndoInvocation as Dl, undoLogExecutor as Ol } from "./undoBuiltins.js";
116
- import { APPROVALS_TABLE as kl, DEFAULT_APPROVAL_EXPIRY_MS as Al, _voltroApprovalsTable as jl, approvalIntentKey as Ml, approvalNonce as Nl, canonicalJson as Pl, clearApprovalGate as Fl, decideApproval as Il, enforceApproval as Ll, getApprovalGate as Rl, installApprovalGate as zl, makeApprovalGate as Bl, parseApprovalInterval as Vl, pendingApprovalsFor as Hl, rehydrateGuards as Ul, scopeStringsOf as Wl, serializeGuards as Gl } from "./approvals.js";
117
- import { approvalsPendingExecutor as Kl, decideApprovalInvocation as ql } from "./approvalBuiltins.js";
118
- import { workflowDomainEventsExecutor as Jl, workflowEventDeliveriesExecutor as Yl, workflowRowVisibleTo as Xl, workflowRunEventsExecutor as Zl, workflowRunExecutor as Ql, workflowRunStepsExecutor as $l, workflowRunsExecutor as eu } from "./workflowReadBuiltins.js";
119
- import { TimelineRecorder as tu, getTimelineRecorder as nu, recordTimelineEvent as ru, redactRow as iu, resolveTimelineMode as au, reverseEventOverRows as ou, setTimelineRecorderForTest as su } from "./timeline.js";
120
- import { applyDelta as cu, buildIvmState as lu, classifyShape as uu, groupKeyOf as du, ivmValue as fu, materializeIvm as pu, resolveRescan as mu } from "./ivm.js";
121
- import { AggregateMaintainer as hu } from "./aggregateIvm.js";
122
- import { _voltroRebacTuplesTable as gu, buildRebacInterceptor as _u, buildRebacReadFilter as vu, loadResourceTuples as yu, loadSubjectTuples as bu } from "./rebacInterceptor.js";
123
- import { DEFAULT_LEVEL_RESYNC_MS as xu, DEFAULT_LEVEL_STUCK_MS as Su, MIN_LEVEL_RESYNC_MS as Cu, ReactionRateLimiter as wu, defineReaction as Tu, isLevelReaction as Eu, isLevelWatch as Du, reactionDurationMs as Ou, reactionRateBucketKey as ku, runReaction as Au } from "./reaction.js";
124
- import { ExpectationRegistry as ju, defineExpectation as Mu, isExpectationDefinition as Nu, useExpectation as Pu } from "./expectation.js";
125
- import { ExpectationEvaluator as Fu, attachExpectations as Iu } from "./expectationEvaluator.js";
126
- import { CostRegistry as Lu, defineCostBudget as Ru, isCostBudgetDefinition as zu, useCostBudget as Bu } from "./finops.js";
127
- import { CostAccountant as Vu, attachFinops as Hu } from "./finopsAccountant.js";
128
- import { ExperimentRegistry as Uu, HOLDOUT_VARIANT as Wu, assignVariant as Gu, defineExperiment as Ku, hashUnitInterval as qu, isExperimentDefinition as Ju, resultVariantNames as Yu, useExperiment as Xu } from "./experiment.js";
129
- import { ExperimentEvaluator as Zu, attachExperiments as Qu } from "./experimentEvaluator.js";
130
- import { _voltroWakeupsTable as $u } from "./wakeupsTable.js";
131
- import { runWakeLoop as ed, wakeDueOnce as td } from "./wakeOrchestrator.js";
132
- import { makeProcessAdapter as nd, nodeProcessSupervisor as rd } from "./wakeSupervisor.js";
133
- import { isIdleNow as id, makeIdleGate as ad } from "./idleDetector.js";
134
- import { makeRouterActivity as od, makeWakeGate as sd, makeWakeProxyServer as cd } from "./wakeRouter.js";
135
- import { countRunningWorkflows as ld, runOrchestratorTick as ud, runSingleNodeOrchestrator as dd } from "./singleNodeOrchestrator.js";
136
- import { defineSubscriber as fd } from "./subscriber.js";
137
- import { AnalyticsCapabilityNotSupported as pd, AnalyticsError as md, AnalyticsSink as hd, useAnalytics as gd } from "./analyticsSink.js";
138
- import { NOOP_ANALYTICS_PROVIDER as _d, composeAnalytics as vd, composeAnalyticsSinks as yd, noopAnalytics as bd, noopAnalyticsSpec as xd } from "./composeAnalytics.js";
139
- import { DEFAULT_ANALYTICS_MIRROR_TUNABLES as Sd, attachAnalyticsMirror as Cd } from "./analyticsMirror.js";
140
- import { AggregateError as wd, AggregateNotFound as Td, AggregateRegistry as Ed, AggregateStale as Dd, defineAggregate as Od, isAggregateDefinition as kd, useAggregate as Ad } from "./aggregate.js";
141
- import { applySoftDeleteScope as jd, applyTenantScope as Md, isEmptyTenantScopedRead as Nd, isOrglessUserSubject as Pd, makeQueryFinalizer as Fd } from "./tenantScope.js";
142
- import { defineExecutor as Id } from "./defineExecutor.js";
143
- import { apiRoleMetricLabel as Ld, makeApiRoleWorkloadMetrics as Rd, observeApiRoleEffect as zd } from "./apiRoleWorkloadMetrics.js";
144
- import { DEFAULT_MUTATION_REPLAY_ATTEMPTS as Bd, applyDeclaredRelations as Vd, makeActionRunner as Hd, makeMutationReplayAdmission as Ud, makeMutationRunner as Wd, makeOneShotQueryRunner as Gd, makeQueryDescriptorProducer as Kd, makeQueryReauthorizer as qd, makeQuerySubscriber as Jd, makeWorkflowStartRunner as Yd, runProvidedEffect as Xd, runWithDeadlockRetry as Zd, withRowFilter as Qd, withScopedRequest as $d } from "./servePipeline.js";
145
- import { decodeSnapshotValue as ef, encodeSnapshotValue as tf } from "./snapshotValueCodec.js";
146
- import { historyProvenance as nf, lastWriteProvenance as rf } from "./provenance.js";
147
- import { buildPreview as af, diffChange as of, previewInRollback as sf } from "./preview.js";
148
- import { API_ROLE_BUCKET_MS as cf, API_ROLE_WINDOW_MS as lf, assessApiRoleWorkloadWindow as uf } from "./apiRoleWorkloadHistory.js";
149
- import { API_ROLE_WORKLOAD_BUCKETS_TABLE as df, readApiRoleWorkloadWindow as ff, writeApiRoleWorkloadBucket as pf } from "./apiRoleWorkloadStorage.js";
150
- import { makeApiRoleBucketSampler as mf } from "./apiRoleBucketSampler.js";
151
- import { classifyConstraintViolation as hf, clearRetentions as gf, extractDbCause as _f, isForeignKeyViolation as vf, isQueryTimeout as yf, listRetentionConflicts as bf, listRetentions as xf, registerRetention as Sf, retentionTtlMsFromEnv as Cf, sweepRetention as wf } from "@voltro/database";
152
- import { ConstraintViolation as Tf, ServerOnlyColumnWrite as Ef, StoreOperationFailed as Df, TableValidationFailed as Of, TenantRowNotFound as kf, TenantScopeViolation as Af } from "@voltro/protocol";
153
- //#region src/index.ts
154
- var jf = "framework-runtime";
155
- //#endregion
156
- export { Vi as ACTORS_TABLE, fr as API_CSP, Hi as API_KEYS_TABLE, cf as API_ROLE_BUCKET_MS, lf as API_ROLE_WINDOW_MS, df as API_ROLE_WORKLOAD_BUCKETS_TABLE, kl as APPROVALS_TABLE, Bo as AccessDenied, wd as AggregateError, hu as AggregateMaintainer, Td as AggregateNotFound, Ed as AggregateRegistry, Dd as AggregateStale, pd as AnalyticsCapabilityNotSupported, md as AnalyticsError, hd as AnalyticsSink, tr as BOOT_REFUSAL_NAME, Oc as CLAIM_RETENTION_BUCKETS, ro as CONNECTIONS_TABLE, io as CONNECTION_GRANTS_TABLE, nn as CRDT_VERSIONS_TABLE, Bs as CircuitBreaker, Vs as CircuitOpen, ao as ConnectionNotConnected, Tf as ConstraintViolation, Vu as CostAccountant, Lu as CostRegistry, Sd as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Al as DEFAULT_APPROVAL_EXPIRY_MS, kc as DEFAULT_CLAIM_BUCKET_MS, Ln as DEFAULT_COMPRESSION_MIN_BYTES, _ as DEFAULT_CRDT_COMPACT_MAX_BYTES, v as DEFAULT_CRDT_MAX_DOCUMENT_BYTES, y as DEFAULT_CRDT_MAX_UPDATE_BYTES, b as DEFAULT_CRDT_REBASE_MAX_BYTES, l as DEFAULT_DELIVERY_CONCURRENCY, Ac as DEFAULT_EXTERNAL_RECONCILE_MS, jc as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, pr as DEFAULT_HSTS, ft as DEFAULT_KEEP_ALIVE_MS, xu as DEFAULT_LEVEL_RESYNC_MS, Su as DEFAULT_LEVEL_STUCK_MS, Yc as DEFAULT_MAX_IDLE_INTERVAL_MS, Cr as DEFAULT_MAX_RPC_BODY_BYTES, fc as DEFAULT_MAX_RUNTIME_MS, Bd as DEFAULT_MUTATION_REPLAY_ATTEMPTS, qa as DEFAULT_OUTBOX_CLAIM_LEASE_MS, u as DEFAULT_RAW_READ_TRACKING_LIMIT, oo as DEFAULT_REFRESH_SKEW_MS, Lt as DEFAULT_RESUME_MAX_DELTAS, Rt as DEFAULT_RESUME_WINDOW_MS, Re as DEFAULT_ROW_FILTER_RETRY, Mc as DEFAULT_SCHEDULE_HEARTBEAT_MS, kt as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, At as DEFAULT_SOCKET_OVERRUN_AFTER_MS, jt as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, Mt as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, Ns as DEFAULT_STALE_AFTER_MS, na as DEVICES_TABLE, Nc as DORMANCY_WAKEUP_TENANT, Cn as DeleteBuilder, at as Dispatcher, Ha as EVENT_CLIENT_QUEUE_SIZE, Ua as EVENT_LATEST_QUEUE_SIZE, Pc as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, pa as EffectStore, Ra as EventBus, Fu as ExpectationEvaluator, ju as ExpectationRegistry, Zu as ExperimentEvaluator, Uu as ExperimentRegistry, ti as FIELD_ENCRYPTION_ACTIVE_ENV, ni as FIELD_ENCRYPTION_KEYS_ENV, ri as FIELD_ENCRYPTION_KEY_ENV, ii as FIELD_ENCRYPTION_PREVIOUS_KEY_ENV, ai as FIELD_KEYRING_ENV_NAMES, si as FIELD_KEYS_TABLE, ci as FIELD_KEY_HEARTBEAT_MS, li as FIELD_KEY_HOLDERS_TABLE, ui as FIELD_KEY_LEASE_MS, di as FIELD_KEY_REPORTS_TABLE, an as FieldKeyringConfigError, fi as FieldKeyringRefusal, so as GRANT_TTL_MS, pt as HEADERS_TIMEOUT_MARGIN_MS, Wu as HOLDOUT_VARIANT, mr as HTML_CSP, o as InMemoryDataStore, t as IndexedMatcher, Ka as InstanceMembership, n as LinearScanMatcher, Hc as MIN_EXTERNALIZABLE_INTERVAL_MS, Cu as MIN_LEVEL_RESYNC_MS, _d as NOOP_ANALYTICS_PROVIDER, ze as NO_ROW_FILTER, ir as NO_TRUSTED_PROXIES, wn as NoRowFound, hr as ORIGIN_NULLING_REFERRER_POLICIES, Ja as OUTBOX_ATTEMPTS_TABLE, Ya as OUTBOX_ATTEMPT_LOG_CAP, Xa as OUTBOX_TABLE, Tn as OptimisticLockError, za as OutboxEventPublisher, Vo as REBAC_ADMIN_SCOPE, co as REFRESH_LEASE_MS, Ps as REPLICA_OBSERVATIONS_TABLE, Dt as RPC_CLIENT_ADDRESS_HEADER, jf as RUNTIME_NAME, wu as ReactionRateLimiter, _e as ReplicatedDataStore, Be as RowFilterDeclarationViolated, Ve as RowFilterUnavailable, Fc as SCHEDULE_SUBJECT, Zs as SERVICE_TOKEN_PREFIX, fa as SYSTEM_SUBJECT, En as SelectBuilder, Ef as ServerOnlyColumnWrite, ss as SsrfBlockedError, Df as StoreOperationFailed, a as SubscriptionRegistry, Zi as TENANT_SELECTIONS_TABLE, Ic as TERMINAL_RUN_STATUSES, An as TRANSACTION_READ_CONFLICT_NAME, jn as TX_READ_VERSIONS_KEY, Of as TableValidationFailed, kf as TenantRowNotFound, Af as TenantScopeViolation, tu as TimelineRecorder, Mn as TransactionReadConflict, sc as UndeclaredTableAccess, vl as UndoBoundaryError, yl as UndoStack, yr as UnverifiedWebhookRoute, Dn as UpdateBuilder, ds as VOLTRO_AUDIT_MIXIN_ID, fs as VOLTRO_EXPIRES_MIXIN_ID, ps as VOLTRO_LOCAL_FIRST_MIXIN_ID, ms as VOLTRO_SOFT_DELETE_MIXIN_ID, hs as VOLTRO_TENANT_MIXIN_ID, br as WEBHOOK_VERIFICATION_PROPERTY, ba as WorkflowPayloadError, xa as WorkflowRateLimitedError, Sa as WorkflowSingletonHeldError, Ca as WorkflowStartNotExecuted, gt as _connectionStreamCount, _t as _resetConnectionCredentialsForTest, jl as _voltroApprovalsTable, rl as _voltroChangeClaimsTable, lo as _voltroConnectionGrantsTable, uo as _voltroConnectionsTable, rn as _voltroCrdtVersionsTable, pi as _voltroFieldKeyHoldersTable, mi as _voltroFieldKeyReportsTable, hi as _voltroFieldKeysTable, gu as _voltroRebacTuplesTable, nl as _voltroScheduleClaimsTable, tl as _voltroScheduleRunsTable, il as _voltroTracesTable, al as _voltroUndoLogTable, $u as _voltroWakeupsTable, Ma as _voltroWorkflowEventDeliveriesTable, Na as _voltroWorkflowEventsTable, Nn as actingUserId, gi as activateFieldKeyNow, zt as adoptDetached, Lr as answerProbe, Bt as answerResume, Qs as apiBindingTokenEnv, $s as apiBindingUrlEnv, ua as apiKeyManagementRoutes, Ld as apiRoleMetricLabel, s as appValidation, vt as applyConnectionCredential, Vd as applyDeclaredRelations, Pn as applyDefined, cu as applyDelta, bl as applyInverse, xl as applyInverses, mt as applyKeepAlive, Os as applyPluginRefRules, He as applyRowFilter, Ue as applyRowFilterToDescriptor, jd as applySoftDeleteScope, Md as applyTenantScope, El as applyUndoInvocation, Ml as approvalIntentKey, Nl as approvalNonce, Kl as approvalsPendingExecutor, Ho as assertCan, fo as assertConnectionCipherConfigured, ec as assertServiceCallersConfig, xr as assertWebhookRoutesDeclareVerification, uf as assessApiRoleWorkloadWindow, Gu as assignVariant, Cd as attachAnalyticsMirror, Iu as attachExpectations, Qu as attachExperiments, Hu as attachFinops, wr as awaitServerListening, Za as backoffMs, po as beginOAuthConnect, Hr as bindBootListener, Tr as bindComputedUntyped, yt as bindConnectionCredential, Wa as bindEvent, Er as bindMutation, Dr as bindStream, Or as bindSubscription, kr as bindSubscriptionUntyped, nr as bootRefusal, lu as buildIvmState, af as buildPreview, _u as buildRebacInterceptor, vu as buildRebacReadFilter, me as buildSubjectKey, Ur as buildTracingLayer, xs as cacheScopeLeaks, qr as cachedBackend, xe as cachedComputedCall, Uo as can, bc as cancelWakeup, Vt as canonicalInputKey, Pl as canonicalJson, r as canonicalize, _i as checkFieldKeyring, Lc as claimGraceMs, hf as classifyConstraintViolation, de as classifyRead, Xn as classifyRequestOrigin, uu as classifyShape, Fl as clearApprovalGate, mo as clearConnectionRefreshFlights, Wo as clearResourcePolicies, gf as clearRetentions, Hs as clearSystemStoreHandle, Qi as clearTenantSelection, ks as collectPluginRefRules, As as collectReferenceSoftDeleteRules, pc as compileCron, ho as completeOAuthConnect, vd as composeAnalytics, yd as composeAnalyticsSinks, Se as computedCacheKey, Ce as computedQueryCacheCaptureInstalled, go as connectionCallbackPath, _o as connectionLabel, ld as countRunningWorkflows, z as counter, ol as crdtCellStats, x as crdtCompactMaxBytes, S as crdtMaxDocumentBytes, C as crdtMaxUpdateBytes, w as crdtMigrationsFor, T as crdtRebaseMaxBytes, Uc as cronForInterval, mc as cronOccurrences, ys as crud, f as currentRawReads, Qo as currentRequestLoader, ve as currentRoutingContext, $t as currentTraceContext, Ui as dataStoreApiKeyStore, ra as dataStoreDeviceStore, Li as dataStoreIdempotencyStore, Ri as dataStoreKvStore, Il as decideApproval, ql as decideApprovalInvocation, ki as declaredEncryptedColumns, Ai as declaredRenames, ef as decodeSnapshotValue, on as decryptField, Ar as defectMessage, Od as defineAggregate, vo as defineConnection, Ru as defineCostBudget, Pa as defineEventTrigger, Id as defineExecutor, Mu as defineExpectation, Ku as defineExperiment, Qa as defineOutboxHandler, Tu as defineReaction, Go as defineResourcePolicy, hc as defineSchedule, fd as defineSubscriber, ot as deliveredRowCount, sn as deriveKey, E as describeCrdtState, Wr as describeOtelReasons, Ht as detachForResume, ca as deviceManagementRoutes, ia as deviceTokenPrefixes, of as diffChange, jr as drainForShutdown, $a as drainOutbox, xc as dueWakeups, Ko as effectiveRelations, gs as emptySchemaRegistry, gn as enableGraphObservation, tf as encodeSnapshotValue, cn as encryptField, Ll as enforceApproval, Br as engineClientsSnapshot, ke as enterReadRecording, $o as enterRequestLoader, Jr as envSecretsBackend, gl as evaluateTouchedRules, B as eventMetricTagCacheSizeForTests, yo as exchangeAuthorizationCode, V as exponentialBoundaries, Yt as externalSpanFromTraceparent, Wc as externalizationRefusal, Gc as externalizedTask, Kc as externalizedTaskNames, _f as extractDbCause, H as fieldDecryptSnapshot, vi as fieldKeyHolderId, ln as fieldKeyIdOf, ji as fieldKeyStatus, i as fingerprintFor, et as forbiddenColumnsForSubject, bo as forgetCredential, Fs as forgetReplicaObservations, Ss as formatCacheScopeLeaks, Cs as formatServerOnlyLeaks, Xt as formatTraceparent, Es as formatUnresolvedSources, Sl as forwardChangeFromCdc, da as frameworkApiKeyStrategy, la as frameworkDeviceStrategy, U as gauge, Wi as generateApiKeyToken, Rl as getApprovalGate, bt as getConnectionCredential, jo as getConnectionResolver, xt as getCredentialExpiry, un as getFieldCipher, qo as getResourcePolicy, We as getRowFilter, Ot as getRpcConnection, Us as getSystemStoreHandle, nu as getTimelineRecorder, ts as getTupleSource, du as groupKeyOf, cc as guardUndeclaredTables, qu as hashUnitInterval, yi as heartbeatFieldKeys, W as histogramMetric, nf as historyProvenance, Yr as httpSecretsBackend, ma as insertIgnoreRowOutcomeEffect, ha as insertManyRowsEffect, ga as insertRowEffect, Xc as inspectCoordinatedSchedule, Ks as inspectWorkflow, zl as installApprovalGate, we as installComputedQueryCacheCapture, ns as installPolicyGuardResolver, St as interruptConnectionStreams, Cl as invertChange, ar as ipToBytes, kd as isAggregateDefinition, rr as isBootRefusal, Rn as isCompressibleContentType, zu as isCostBudgetDefinition, Nd as isEmptyTenantScopedRead, Nu as isExpectationDefinition, Ju as isExperimentDefinition, dn as isFieldKeyring, vf as isForeignKeyViolation, id as isIdleNow, Mr as isInfraError, Eu as isLevelReaction, Du as isLevelWatch, _n as isObservingGraph, Pd as isOrglessUserSubject, yf as isQueryTimeout, wl as isSafeToApply, gc as isScheduleDefinition, js as isSoftDelete, Zn as isStateChangingMethod, Fn as isTransactionReadConflict, or as isTrustedProxy, tc as isWellFormedServiceToken, Fa as isWorkflowEventTriggerDefinition, p as isolateRawReadScope, fu as ivmValue, rf as lastWriteProvenance, G as linearBoundaries, xo as listConnectionStates, sl as listCrdtVersions, Jo as listResourcePolicies, bf as listRetentionConflicts, xf as listRetentions, yu as loadResourceTuples, bu as loadSubjectTuples, lc as localityAwareSelector, Gi as lockApiKeyById, Hd as makeActionRunner, Rc as makeAdvisoryLockCoordinator, fn as makeAesCipher, Ki as makeApiKeyService, us as makeApiKeyUsageBuffer, qi as makeApiKeyUsageFlusher, mf as makeApiRoleBucketSampler, Rd as makeApiRoleWorkloadMetrics, c as makeAppAccess, Bl as makeApprovalGate, zi as makeAsyncKv, Js as makeAuthMiddlewareLayers, Ga as makeBufferGapDetector, Kr as makeBufferingSpanProcessor, So as makeConnectionRegistry, Mo as makeConnectionResolver, qs as makeConnectionState, No as makeConnectionsFacade, Zc as makeCoordinatedScheduler, as as makeDataLoader, Ge as makeDefaultRefilter, aa as makeDeviceService, Io as makeDisconnectConnectionExecutor, _a as makeEffectStoreLayer, Ba as makeEventPublisher, Ia as makeEventsFacade, qc as makeExternalizedTaskRegistry, pn as makeFieldCipher, mn as makeFieldKeyring, On as makeFluentStore, ad as makeIdleGate, wa as makeLazyWorkflowFacade, Lo as makeListConnectionsExecutor, Nr as makeMutationCodec, Ud as makeMutationReplayAdmission, Wd as makeMutationRunner, Gd as makeOneShotQueryRunner, Qn as makeOriginGuardExemption, eo as makeOutboxFacade, nd as makeProcessAdapter, Kd as makeQueryDescriptorProducer, Fd as makeQueryFinalizer, qd as makeQueryReauthorizer, Jd as makeQuerySubscriber, od as makeRouterActivity, _l as makeRuleCapture, _s as makeSchemaRegistry, Ro as makeStartConnectionExecutor, zo as makeSubmitTokenExecutor, Nt as makeSubscriptionOutbox, Ta as makeTransactionalWorkflowFacade, fl as makeUndoCapture, sd as makeWakeGate, cd as makeWakeProxyServer, Ea as makeWorkflowFacade, Da as makeWorkflowFacadeWithCallerContext, Oa as makeWorkflowHandlers, ka as makeWorkflowLayers, Aa as makeWorkflowRunHandle, Yd as makeWorkflowStartRunner, Sc as markWakeupFired, pu as materializeIvm, zn as maybeCompress, Ji as memoryApiKeyStore, oa as memoryDeviceStore, dc as memoryReplicationAdapter, he as memoryRywPositionStore, Bn as mergeCompressionHeaders, Ct as mergeCookieHeader, Is as mergeFleetObservations, cl as migrateCrdtColumn, nc as mintServiceToken, kn as missingRowError, Vn as negotiateEncoding, Hn as negotiatedCompression, Zt as newTraceId, Qc as nextDelay, _c as nextFiring, Cc as nextWakeup, rd as nodeProcessSupervisor, bd as noopAnalytics, xd as noopAnalyticsSpec, Bi as noopKv, sr as normalizeIp, $n as normalizeOrigin, Te as noteCacheVolatile, Ee as noteDependency, Ae as noteRead, Un as noteResumeVerdict, Ke as noteRowFilterResolved, Mi as nullUnreadableSealedValues, Co as oauthCredentialValue, zd as observeApiRoleEffect, Ys as observeConnectionHeaders, vn as observeStore, yn as observedGraph, Pr as onProcessShutdown, Ni as openCell, Gr as otelImportFailure, to as outboxAttemptsTable, no as outboxTable, Vl as parseApprovalInterval, Vr as parseEngineSdkHeader, Qt as parseTraceparent, ja as payloadPropertyNames, zc as peerRunIsAlive, Hl as pendingApprovalsFor, Yi as plantMissingApiKeyActors, fe as powerOfTwoSelector, ll as prepareSealedCrdtRestore, gr as preservesSameOriginHeader, sf as previewInRollback, Rr as probeFor, wo as projectConnectionState, wc as pruneWakeups, Va as publishEvent, Kn as publishServerTracerLayer, Pt as pumpOutbox, De as queryCachePolicy, m as rawSqlPreview, Ou as reactionDurationMs, ku as reactionRateBucketKey, Ft as reactiveSocketTunables, ff as readApiRoleWorkloadWindow, bi as readFieldKeyHolders, xi as readFieldKeyReports, Si as readFieldKeys, tn as readMaybeOne, $c as readPollCeilingMs, je as readRecordingActive, Ls as readReplicaObservations, Yo as rebacPolicyGraph, j as recordCoalesced, wt as recordCredentialExpiry, K as recordEventDelivered, q as recordEventDropped, J as recordEventPublished, Y as recordEventSubscribers, X as recordExternalMissed, Z as recordExternalTrigger, Q as recordFieldDecrypt, Ci as recordFieldKeyReport, Ut as recordForResume, M as recordOverrun, N as recordOversized, h as recordRawRead, Me as recordReads, $ as recordSample, ee as recordScheduleQueueRecovery, te as recordScheduleQueueWait, ne as recordScheduleQueued, re as recordScheduleRun, P as recordStalled, ie as recordSubscriptionActive, ae as recordSubscriptionDelivery, bn as recordTableAccess, ru as recordTimelineEvent, oe as recordWorkflowRun, Ne as recordingStore, bs as redactColumns, iu as redactRow, ge as redisRywPositionStore, Dl as redoUndoInvocation, To as refreshAccessToken, Tt as registerConnectionStream, rs as registerDefaultTupleSource, Jc as registerExternalizedTask, wi as registerFieldKey, Sf as registerRetention, Tc as registerWakeup, Ul as rehydrateGuards, Pi as rekeyCell, Fi as rekeySealedValues, Ti as releaseFieldKeyHolder, Ec as releaseWakeup, pe as replicaHealth, Oe as resetComputedQueryCacheCaptureForTests, Wt as resetDetachedForTest, se as resetEventMetricTagCacheForTests, ce as resetFieldDecryptCountsForTests, xn as resetObservedGraph, Rs as resetReplicaObservationWarnings, Wn as resetResumeCensus, Gt as resetResumeRingsForTest, qe as resetRowFilterResolvedArms, Xr as resetSecretsBackend, F as resetSubscriptionSocketMetrics, cr as resolveClientAddress, Eo as resolveConnection, Po as resolveConnectionForSubject, uc as resolveCurrentRegion, A as resolveDependentTables, oi as resolveFieldKeyring, zr as resolveHealth, ht as resolveKeepAlive, er as resolveOriginGuardConfig, d as resolveReactiveConfig, Do as resolveRedirectUri, lr as resolveRequestClientAddress, ur as resolveRequestIsHttps, mu as resolveRescan, Je as resolveRowFilterScope, Ye as resolveRowFilterScopeFor, Zr as resolveSecret, Qr as resolveSecretSync, $r as resolveSecretsBackend, _r as resolveSecurityHeaders, au as resolveTimelineMode, vc as resolveTransactionSubject, dr as resolveTrustedProxies, ul as restoreCrdtVersion, Pe as restrictingReads, Fe as restrictingReadsEffect, Yu as resultVariantNames, Gn as resumeCensus, Kt as resumeKeyOf, qt as resumeTunables, Cf as retentionTtlMsFromEnv, Ei as retireFieldKey, ct as revalidatePath, lt as revalidateTable, ut as revalidateTag, ou as reverseEventOverRows, Xo as revokedIds, Xe as rowFilterMayNarrow, Ze as rowFilterRegistered, Qe as rowFilterResolvedArms, Ms as rulesFor, Ws as runAsSystem, ud as runOrchestratorTick, Xd as runProvidedEffect, Au as runReaction, dd as runSingleNodeOrchestrator, ed as runWakeLoop, Zd as runWithDeadlockRetry, Sn as runWithObservedProcedure, g as runWithRawReadScope, es as runWithRequestLoader, ye as runWithRoutingContext, be as runWithRoutingContextEffect, en as runWithTraceContext, Oo as sanitizeRedirectTo, yc as scheduleBackfillRequestsTable, el as scheduleCoordinated, ws as schemaPropertyNames, Wl as scopeStringsOf, vr as securityHeadersFor, $i as selectTenant, Gl as serializeGuards, tt as serverOnlyColumnNames, Ts as serverOnlyLeaks, qn as serverTracer, rc as serviceCallerNextTokenEnv, ic as serviceCallerStrategy, ac as serviceCallerTokenEnv, oc as serviceEnvSegment, I as setBufferedBytes, Fo as setConnectionResolver, D as setCrdtAdmission, O as setCrdtBackend, k as setCrdtCompactMaxBytes, hn as setFieldCipher, It as setReactiveSocketTunables, Jt as setResumeTunables, dt as setRevalidationPublisher, $e as setRowFilter, ei as setSecretsBackend, Jn as setServerTracer, Ie as setSourceGapSink, Gs as setSystemStoreHandle, su as setTimelineRecorderForTest, is as setTupleSource, e as settleHandlerBody, Xi as sha256Hex, sa as sha256HexOf, Fr as shutdownGraceMsFromEnv, Bc as singleCoordinator, dl as snapshotCrdt, st as snapshotEntryFor, le as snapshotMetrics, ue as snapshotMetricsSync, Le as sourceGapReport, cs as ssrfGuardHttpClientLayer, ls as ssrfReason, Di as startFieldKeyHolder, Ir as startRpcServer, Vc as startScheduler, ko as storeCredential, nt as stripColumnsFromRows, rt as stripForbiddenForWire, it as stripServerOnlyForWire, L as subscriptionSocketMetricSamples, R as subscriptionSocketMetricsSnapshot, Ao as sweepExpiredGrants, wf as sweepRetention, Tl as synthesizeInverse, ea as tenantSelectionId, ta as tenantSelectionStore, os as tracingHttpClientLayer, La as triggerWorkflow, Dc as tryClaimWakeup, Et as unbindConnection, pl as undoCaptureEnabled, Ol as undoLogExecutor, ml as undoSurfaceEnabled, Ds as unresolvedSources, va as upsertRowEffect, ya as upsertRowOutcomeEffect, Ad as useAggregate, gd as useAnalytics, Bu as useCostBudget, Pu as useExpectation, Xu as useExperiment, Oi as verifyFieldKeyring, Ii as verifySealedValues, Zo as visibleRows, td as wakeDueOnce, Sr as webhookVerificationOf, Qd as withRowFilter, Xs as withRpcAuthMiddleware, $d as withScopedRequest, Yn as withServerTracer, Jl as workflowDomainEventsExecutor, Yl as workflowEventDeliveriesExecutor, Xl as workflowRowVisibleTo, Zl as workflowRunEventsExecutor, Ql as workflowRunExecutor, $l as workflowRunStepsExecutor, eu as workflowRunsExecutor, hl as wrapCaptureStore, vs as wrapStoreWithBootCodec, In as wrapStoreWithMixinBehaviour, pf as writeApiRoleWorkloadBucket, zs as writeReplicaObservation };
48
+ import { bindBootListener as Hr, bootHoldMsFromEnv as Ur } from "./bootListener.js";
49
+ import { buildTracingLayer as Wr, describeOtelReasons as Gr, otelImportFailure as Kr } from "./observability.js";
50
+ import { makeBufferingSpanProcessor as qr } from "./traceSink.js";
51
+ import { cachedBackend as Jr, envSecretsBackend as Yr, httpSecretsBackend as Xr, resetSecretsBackend as Zr, resolveSecret as Qr, resolveSecretSync as $r, resolveSecretsBackend as ei, setSecretsBackend as ti } from "./secretsResolver.js";
52
+ import { FIELD_ENCRYPTION_ACTIVE_ENV as ni, FIELD_ENCRYPTION_KEYS_ENV as ri, FIELD_ENCRYPTION_KEY_ENV as ii, FIELD_ENCRYPTION_PREVIOUS_KEY_ENV as ai, FIELD_KEYRING_ENV_NAMES as oi, resolveFieldKeyring as si } from "./fieldKeyring.js";
53
+ import { FIELD_KEYS_TABLE as ci, FIELD_KEY_HEARTBEAT_MS as li, FIELD_KEY_HOLDERS_TABLE as ui, FIELD_KEY_LEASE_MS as di, FIELD_KEY_REPORTS_TABLE as fi, FieldKeyringRefusal as pi, _voltroFieldKeyHoldersTable as mi, _voltroFieldKeyReportsTable as hi, _voltroFieldKeysTable as gi, activateFieldKeyNow as _i, checkFieldKeyring as vi, fieldKeyHolderId as yi, heartbeatFieldKeys as bi, readFieldKeyHolders as xi, readFieldKeyReports as Si, readFieldKeys as Ci, recordFieldKeyReport as wi, registerFieldKey as Ti, releaseFieldKeyHolder as Ei, retireFieldKey as Di, startFieldKeyHolder as Oi, verifyFieldKeyring as ki } from "./fieldKeyRegistry.js";
54
+ import { declaredEncryptedColumns as Ai, declaredRenames as ji, fieldKeyStatus as Mi } from "./fieldKeyScan.js";
55
+ import { nullUnreadableSealedValues as Ni, openCell as Pi, rekeyCell as Fi, rekeySealedValues as Ii, verifySealedValues as Li } from "./fieldKeyRekey.js";
56
+ import { dataStoreIdempotencyStore as Ri } from "./idempotencyStore.js";
57
+ import { dataStoreKvStore as zi } from "./kvDataStore.js";
58
+ import { makeAsyncKv as Bi, noopKv as Vi } from "./kvFacade.js";
59
+ import { ACTORS_TABLE as Hi, API_KEYS_TABLE as Ui, dataStoreApiKeyStore as Wi, generateApiKeyToken as Gi, lockApiKeyById as Ki, makeApiKeyService as qi, makeApiKeyUsageFlusher as Ji, memoryApiKeyStore as Yi, plantMissingApiKeyActors as Xi, sha256Hex as Zi } from "./apiKeys.js";
60
+ import { TENANT_SELECTIONS_TABLE as Qi, clearTenantSelection as $i, selectTenant as ea, tenantSelectionId as ta, tenantSelectionStore as na } from "./tenantSelection.js";
61
+ import { DEVICES_TABLE as ra, dataStoreDeviceStore as ia, deviceTokenPrefixes as aa, makeDeviceService as oa, memoryDeviceStore as sa, sha256HexOf as ca } from "./devices.js";
62
+ import { deviceManagementRoutes as la, frameworkDeviceStrategy as ua } from "./devicesWiring.js";
63
+ import { apiKeyManagementRoutes as da, frameworkApiKeyStrategy as fa } from "./apiKeysWiring.js";
64
+ import { SYSTEM_SUBJECT as pa } from "./systemSubject.js";
65
+ import { EffectStore as ma, insertIgnoreRowOutcomeEffect as ha, insertManyRowsEffect as ga, insertRowEffect as _a, makeEffectStoreLayer as va, upsertRowEffect as ya, upsertRowOutcomeEffect as ba } from "./effectStore.js";
66
+ import { WorkflowPayloadError as xa, WorkflowRateLimitedError as Sa, WorkflowSingletonHeldError as Ca, WorkflowStartNotExecuted as wa, makeLazyWorkflowFacade as Ta, makeTransactionalWorkflowFacade as Ea, makeWorkflowFacade as Da, makeWorkflowFacadeWithCallerContext as Oa, makeWorkflowHandlers as ka, makeWorkflowLayers as Aa, makeWorkflowRunHandle as ja, payloadPropertyNames as Ma } from "./workflowRuntime.js";
67
+ import { _voltroWorkflowEventDeliveriesTable as Na, _voltroWorkflowEventsTable as Pa, defineEventTrigger as Fa, isWorkflowEventTriggerDefinition as Ia, makeEventsFacade as La, triggerWorkflow as Ra } from "./events.js";
68
+ import { EventBus as za } from "./eventBus.js";
69
+ import { OutboxEventPublisher as Ba, makeEventPublisher as Va, publishEvent as Ha } from "./eventPublish.js";
70
+ import { EVENT_CLIENT_QUEUE_SIZE as Ua, EVENT_LATEST_QUEUE_SIZE as Wa, bindEvent as Ga, makeBufferGapDetector as Ka } from "./bindEvent.js";
71
+ import { InstanceMembership as qa } from "./instanceMembership.js";
72
+ import { DEFAULT_OUTBOX_CLAIM_LEASE_MS as Ja, OUTBOX_ATTEMPTS_TABLE as Ya, OUTBOX_ATTEMPT_LOG_CAP as Xa, OUTBOX_TABLE as Za, backoffMs as Qa, defineOutboxHandler as $a, drainOutbox as eo, makeOutboxFacade as to, outboxAttemptsTable as no, outboxTable as ro } from "./outbox.js";
73
+ import { CONNECTIONS_TABLE as io, CONNECTION_GRANTS_TABLE as ao, ConnectionNotConnected as oo, DEFAULT_REFRESH_SKEW_MS as so, GRANT_TTL_MS as co, REFRESH_LEASE_MS as lo, _voltroConnectionGrantsTable as uo, _voltroConnectionsTable as fo, assertConnectionCipherConfigured as po, beginOAuthConnect as mo, clearConnectionRefreshFlights as ho, completeOAuthConnect as go, connectionCallbackPath as _o, connectionLabel as vo, defineConnection as yo, exchangeAuthorizationCode as bo, forgetCredential as xo, listConnectionStates as So, makeConnectionRegistry as Co, oauthCredentialValue as wo, projectConnectionState as To, refreshAccessToken as Eo, resolveConnection as Do, resolveRedirectUri as Oo, sanitizeRedirectTo as ko, storeCredential as Ao, sweepExpiredGrants as jo } from "./connectionVault.js";
74
+ import { getConnectionResolver as Mo, makeConnectionResolver as No, makeConnectionsFacade as Po, resolveConnectionForSubject as Fo, setConnectionResolver as Io } from "./connectionsFacade.js";
75
+ import { makeDisconnectConnectionExecutor as Lo, makeListConnectionsExecutor as Ro, makeStartConnectionExecutor as zo, makeSubmitTokenExecutor as Bo } from "./connectionBuiltins.js";
76
+ import { AccessDenied as Vo, REBAC_ADMIN_SCOPE as Ho, assertCan as Uo, can as Wo, clearResourcePolicies as Go, defineResourcePolicy as Ko, effectiveRelations as qo, getResourcePolicy as Jo, listResourcePolicies as Yo, rebacPolicyGraph as Xo, revokedIds as Zo, visibleRows as Qo } from "./rebac.js";
77
+ import { currentRequestLoader as $o, enterRequestLoader as es, runWithRequestLoader as ts } from "./requestLoader.js";
78
+ import { getTupleSource as ns, installPolicyGuardResolver as rs, registerDefaultTupleSource as is, setTupleSource as as } from "./policyGuardResolver.js";
79
+ import { makeDataLoader as os } from "./dataloader.js";
80
+ import { tracingHttpClientLayer as ss } from "./httpClientTracing.js";
81
+ import { SsrfBlockedError as cs, ssrfGuardHttpClientLayer as ls, ssrfReason as us } from "./httpClientSsrf.js";
82
+ import { makeApiKeyUsageBuffer as ds } from "./apiKeyUsage.js";
83
+ import { VOLTRO_AUDIT_MIXIN_ID as fs, VOLTRO_EXPIRES_MIXIN_ID as ps, VOLTRO_LOCAL_FIRST_MIXIN_ID as ms, VOLTRO_SOFT_DELETE_MIXIN_ID as hs, VOLTRO_TENANT_MIXIN_ID as gs, emptySchemaRegistry as _s, makeSchemaRegistry as vs } from "./schemaRegistry.js";
84
+ import { wrapStoreWithBootCodec as ys } from "./bootStoreCodec.js";
85
+ import { crud as bs, redactColumns as xs } from "./crud.js";
86
+ import { cacheScopeLeaks as Ss, formatCacheScopeLeaks as Cs, formatServerOnlyLeaks as ws, schemaPropertyNames as Ts, serverOnlyLeaks as Es } from "./serverOnlyAudit.js";
87
+ import { formatUnresolvedSources as Ds, unresolvedSources as Os } from "./sourceResolution.js";
88
+ import { applyPluginRefRules as ks, collectPluginRefRules as As, collectReferenceSoftDeleteRules as js, isSoftDelete as Ms, rulesFor as Ns } from "./pluginRefRules.js";
89
+ import { DEFAULT_STALE_AFTER_MS as Ps, REPLICA_OBSERVATIONS_TABLE as Fs, forgetReplicaObservations as Is, mergeFleetObservations as Ls, readReplicaObservations as Rs, resetReplicaObservationWarnings as zs, writeReplicaObservation as Bs } from "./replicaObservations.js";
90
+ import { CircuitBreaker as Vs, CircuitOpen as Hs } from "./circuitBreaker.js";
91
+ import { clearSystemStoreHandle as Us, getSystemStoreHandle as Ws, runAsSystem as Gs, setSystemStoreHandle as Ks } from "./runAsSystem.js";
92
+ import { inspectWorkflow as qs } from "./inspectWorkflow.js";
93
+ import { makeConnectionState as Js } from "./connectionState.js";
94
+ import { makeAuthMiddlewareLayers as Ys, observeConnectionHeaders as Xs, withRpcAuthMiddleware as Zs } from "./authMiddlewareLayer.js";
95
+ import { SERVICE_TOKEN_PREFIX as Qs, apiBindingTokenEnv as $s, apiBindingUrlEnv as ec, assertServiceCallersConfig as tc, isWellFormedServiceToken as nc, mintServiceToken as rc, serviceCallerNextTokenEnv as ic, serviceCallerStrategy as ac, serviceCallerTokenEnv as oc, serviceEnvSegment as sc } from "./serviceCredentials.js";
96
+ import { UndeclaredTableAccess as cc, guardUndeclaredTables as lc } from "./declaredTablesGuard.js";
97
+ import { localityAwareSelector as uc, resolveCurrentRegion as dc } from "./replicaLocality.js";
98
+ import { memoryReplicationAdapter as fc } from "./dialectReplicationAdapter.js";
99
+ import { DEFAULT_MAX_RUNTIME_MS as pc, compileCron as mc, cronOccurrences as hc, defineSchedule as gc, isScheduleDefinition as _c, nextFiring as vc } from "./schedule.js";
100
+ import { resolveTransactionSubject as yc } from "./transactionSubject.js";
101
+ import { scheduleBackfillRequestsTable as bc } from "./scheduleBackfillRequests.js";
102
+ import { cancelWakeup as xc, dueWakeups as Sc, markWakeupFired as Cc, nextWakeup as wc, pruneWakeups as Tc, registerWakeup as Ec, releaseWakeup as Dc, tryClaimWakeup as Oc } from "./wakeRegistry.js";
103
+ import { CLAIM_RETENTION_BUCKETS as kc, DEFAULT_CLAIM_BUCKET_MS as Ac, DEFAULT_EXTERNAL_RECONCILE_MS as jc, DEFAULT_EXTERNAL_TRIGGER_SKEW_MS as Mc, DEFAULT_SCHEDULE_HEARTBEAT_MS as Nc, DORMANCY_WAKEUP_TENANT as Pc, EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS as Fc, SCHEDULE_SUBJECT as Ic, TERMINAL_RUN_STATUSES as Lc, claimGraceMs as Rc, makeAdvisoryLockCoordinator as zc, peerRunIsAlive as Bc, singleCoordinator as Vc, startScheduler as Hc } from "./scheduler.js";
104
+ import { MIN_EXTERNALIZABLE_INTERVAL_MS as Uc, cronForInterval as Wc, externalizationRefusal as Gc, externalizedTask as Kc, externalizedTaskNames as qc, makeExternalizedTaskRegistry as Jc, registerExternalizedTask as Yc } from "./externalizedTasks.js";
105
+ import { DEFAULT_MAX_IDLE_INTERVAL_MS as Xc, inspectCoordinatedSchedule as Zc, makeCoordinatedScheduler as Qc, nextDelay as $c, readPollCeilingMs as el, scheduleCoordinated as tl } from "./coordinatedSchedule.js";
106
+ import { _voltroScheduleRunsTable as nl } from "./scheduleRunsTable.js";
107
+ import { _voltroScheduleClaimsTable as rl } from "./scheduleClaimsTable.js";
108
+ import { _voltroChangeClaimsTable as il } from "./changeClaimsTable.js";
109
+ import { _voltroTracesTable as al } from "./traceSpansTable.js";
110
+ import { _voltroUndoLogTable as ol } from "./undoLogTable.js";
111
+ import { crdtCellStats as sl, listCrdtVersions as cl, migrateCrdtColumn as ll, prepareSealedCrdtRestore as ul, restoreCrdtVersion as dl, snapshotCrdt as fl } from "./crdtHistory.js";
112
+ import { makeUndoCapture as pl, undoCaptureEnabled as ml, undoSurfaceEnabled as hl, wrapCaptureStore as gl } from "./undoCapture.js";
113
+ import { evaluateTouchedRules as _l, makeRuleCapture as vl } from "./businessRules.js";
114
+ import { UndoBoundaryError as yl, UndoStack as bl, applyInverse as xl, applyInverses as Sl, forwardChangeFromCdc as Cl, invertChange as wl, isSafeToApply as Tl, synthesizeInverse as El } from "./undo.js";
115
+ import { applyUndoInvocation as Dl, redoUndoInvocation as Ol, undoLogExecutor as kl } from "./undoBuiltins.js";
116
+ import { APPROVALS_TABLE as Al, DEFAULT_APPROVAL_EXPIRY_MS as jl, _voltroApprovalsTable as Ml, approvalIntentKey as Nl, approvalNonce as Pl, canonicalJson as Fl, clearApprovalGate as Il, decideApproval as Ll, enforceApproval as Rl, getApprovalGate as zl, installApprovalGate as Bl, makeApprovalGate as Vl, parseApprovalInterval as Hl, pendingApprovalsFor as Ul, rehydrateGuards as Wl, scopeStringsOf as Gl, serializeGuards as Kl } from "./approvals.js";
117
+ import { approvalsPendingExecutor as ql, decideApprovalInvocation as Jl } from "./approvalBuiltins.js";
118
+ import { workflowDomainEventsExecutor as Yl, workflowEventDeliveriesExecutor as Xl, workflowRowVisibleTo as Zl, workflowRunEventsExecutor as Ql, workflowRunExecutor as $l, workflowRunStepsExecutor as eu, workflowRunsExecutor as tu } from "./workflowReadBuiltins.js";
119
+ import { TimelineRecorder as nu, getTimelineRecorder as ru, recordTimelineEvent as iu, redactRow as au, resolveTimelineMode as ou, reverseEventOverRows as su, setTimelineRecorderForTest as cu } from "./timeline.js";
120
+ import { applyDelta as lu, buildIvmState as uu, classifyShape as du, groupKeyOf as fu, ivmValue as pu, materializeIvm as mu, resolveRescan as hu } from "./ivm.js";
121
+ import { AggregateMaintainer as gu } from "./aggregateIvm.js";
122
+ import { _voltroRebacTuplesTable as _u, buildRebacInterceptor as vu, buildRebacReadFilter as yu, loadResourceTuples as bu, loadSubjectTuples as xu } from "./rebacInterceptor.js";
123
+ import { DEFAULT_LEVEL_RESYNC_MS as Su, DEFAULT_LEVEL_STUCK_MS as Cu, MIN_LEVEL_RESYNC_MS as wu, ReactionRateLimiter as Tu, defineReaction as Eu, isLevelReaction as Du, isLevelWatch as Ou, reactionDurationMs as ku, reactionRateBucketKey as Au, runReaction as ju } from "./reaction.js";
124
+ import { ExpectationRegistry as Mu, defineExpectation as Nu, isExpectationDefinition as Pu, useExpectation as Fu } from "./expectation.js";
125
+ import { ExpectationEvaluator as Iu, attachExpectations as Lu } from "./expectationEvaluator.js";
126
+ import { CostRegistry as Ru, defineCostBudget as zu, isCostBudgetDefinition as Bu, useCostBudget as Vu } from "./finops.js";
127
+ import { CostAccountant as Hu, attachFinops as Uu } from "./finopsAccountant.js";
128
+ import { ExperimentRegistry as Wu, HOLDOUT_VARIANT as Gu, assignVariant as Ku, defineExperiment as qu, hashUnitInterval as Ju, isExperimentDefinition as Yu, resultVariantNames as Xu, useExperiment as Zu } from "./experiment.js";
129
+ import { ExperimentEvaluator as Qu, attachExperiments as $u } from "./experimentEvaluator.js";
130
+ import { _voltroWakeupsTable as ed } from "./wakeupsTable.js";
131
+ import { runWakeLoop as td, wakeDueOnce as nd } from "./wakeOrchestrator.js";
132
+ import { makeProcessAdapter as rd, nodeProcessSupervisor as id } from "./wakeSupervisor.js";
133
+ import { isIdleNow as ad, makeIdleGate as od } from "./idleDetector.js";
134
+ import { makeRouterActivity as sd, makeWakeGate as cd, makeWakeProxyServer as ld } from "./wakeRouter.js";
135
+ import { countRunningWorkflows as ud, runOrchestratorTick as dd, runSingleNodeOrchestrator as fd } from "./singleNodeOrchestrator.js";
136
+ import { defineSubscriber as pd } from "./subscriber.js";
137
+ import { AnalyticsCapabilityNotSupported as md, AnalyticsError as hd, AnalyticsSink as gd, useAnalytics as _d } from "./analyticsSink.js";
138
+ import { NOOP_ANALYTICS_PROVIDER as vd, composeAnalytics as yd, composeAnalyticsSinks as bd, noopAnalytics as xd, noopAnalyticsSpec as Sd } from "./composeAnalytics.js";
139
+ import { DEFAULT_ANALYTICS_MIRROR_TUNABLES as Cd, attachAnalyticsMirror as wd } from "./analyticsMirror.js";
140
+ import { AggregateError as Td, AggregateNotFound as Ed, AggregateRegistry as Dd, AggregateStale as Od, defineAggregate as kd, isAggregateDefinition as Ad, useAggregate as jd } from "./aggregate.js";
141
+ import { applySoftDeleteScope as Md, applyTenantScope as Nd, isEmptyTenantScopedRead as Pd, isOrglessUserSubject as Fd, makeQueryFinalizer as Id } from "./tenantScope.js";
142
+ import { defineExecutor as Ld } from "./defineExecutor.js";
143
+ import { apiRoleMetricLabel as Rd, makeApiRoleWorkloadMetrics as zd, observeApiRoleEffect as Bd } from "./apiRoleWorkloadMetrics.js";
144
+ import { DEFAULT_MUTATION_REPLAY_ATTEMPTS as Vd, applyDeclaredRelations as Hd, makeActionRunner as Ud, makeMutationReplayAdmission as Wd, makeMutationRunner as Gd, makeOneShotQueryRunner as Kd, makeQueryDescriptorProducer as qd, makeQueryReauthorizer as Jd, makeQuerySubscriber as Yd, makeWorkflowStartRunner as Xd, runProvidedEffect as Zd, runWithDeadlockRetry as Qd, withRowFilter as $d, withScopedRequest as ef } from "./servePipeline.js";
145
+ import { decodeSnapshotValue as tf, encodeSnapshotValue as nf } from "./snapshotValueCodec.js";
146
+ import { historyProvenance as rf, lastWriteProvenance as af } from "./provenance.js";
147
+ import { buildPreview as of, diffChange as sf, previewInRollback as cf } from "./preview.js";
148
+ import { API_ROLE_BUCKET_MS as lf, API_ROLE_WINDOW_MS as uf, assessApiRoleWorkloadWindow as df } from "./apiRoleWorkloadHistory.js";
149
+ import { API_ROLE_WORKLOAD_BUCKETS_TABLE as ff, readApiRoleWorkloadWindow as pf, writeApiRoleWorkloadBucket as mf } from "./apiRoleWorkloadStorage.js";
150
+ import { makeApiRoleBucketSampler as hf } from "./apiRoleBucketSampler.js";
151
+ import { classifyConstraintViolation as gf, clearRetentions as _f, extractDbCause as vf, isForeignKeyViolation as yf, isQueryTimeout as bf, listRetentionConflicts as xf, listRetentions as Sf, registerRetention as Cf, retentionTtlMsFromEnv as wf, sweepRetention as Tf } from "@voltro/database";
152
+ import { ConstraintViolation as Ef, ServerOnlyColumnWrite as Df, StoreOperationFailed as Of, TableValidationFailed as kf, TenantRowNotFound as Af, TenantScopeViolation as jf } from "@voltro/protocol";
153
+ // src/index.ts
154
+ var Mf = "framework-runtime";
155
+ export { Hi as ACTORS_TABLE, fr as API_CSP, Ui as API_KEYS_TABLE, lf as API_ROLE_BUCKET_MS, uf as API_ROLE_WINDOW_MS, ff as API_ROLE_WORKLOAD_BUCKETS_TABLE, Al as APPROVALS_TABLE, Vo as AccessDenied, Td as AggregateError, gu as AggregateMaintainer, Ed as AggregateNotFound, Dd as AggregateRegistry, Od as AggregateStale, md as AnalyticsCapabilityNotSupported, hd as AnalyticsError, gd as AnalyticsSink, tr as BOOT_REFUSAL_NAME, kc as CLAIM_RETENTION_BUCKETS, io as CONNECTIONS_TABLE, ao as CONNECTION_GRANTS_TABLE, nn as CRDT_VERSIONS_TABLE, Vs as CircuitBreaker, Hs as CircuitOpen, oo as ConnectionNotConnected, Ef as ConstraintViolation, Hu as CostAccountant, Ru as CostRegistry, Cd as DEFAULT_ANALYTICS_MIRROR_TUNABLES, jl as DEFAULT_APPROVAL_EXPIRY_MS, Ac as DEFAULT_CLAIM_BUCKET_MS, Ln as DEFAULT_COMPRESSION_MIN_BYTES, _ as DEFAULT_CRDT_COMPACT_MAX_BYTES, v as DEFAULT_CRDT_MAX_DOCUMENT_BYTES, y as DEFAULT_CRDT_MAX_UPDATE_BYTES, b as DEFAULT_CRDT_REBASE_MAX_BYTES, l as DEFAULT_DELIVERY_CONCURRENCY, jc as DEFAULT_EXTERNAL_RECONCILE_MS, Mc as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, pr as DEFAULT_HSTS, ft as DEFAULT_KEEP_ALIVE_MS, Su as DEFAULT_LEVEL_RESYNC_MS, Cu as DEFAULT_LEVEL_STUCK_MS, Xc as DEFAULT_MAX_IDLE_INTERVAL_MS, Cr as DEFAULT_MAX_RPC_BODY_BYTES, pc as DEFAULT_MAX_RUNTIME_MS, Vd as DEFAULT_MUTATION_REPLAY_ATTEMPTS, Ja as DEFAULT_OUTBOX_CLAIM_LEASE_MS, u as DEFAULT_RAW_READ_TRACKING_LIMIT, so as DEFAULT_REFRESH_SKEW_MS, Lt as DEFAULT_RESUME_MAX_DELTAS, Rt as DEFAULT_RESUME_WINDOW_MS, Re as DEFAULT_ROW_FILTER_RETRY, Nc as DEFAULT_SCHEDULE_HEARTBEAT_MS, kt as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, At as DEFAULT_SOCKET_OVERRUN_AFTER_MS, jt as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, Mt as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, Ps as DEFAULT_STALE_AFTER_MS, ra as DEVICES_TABLE, Pc as DORMANCY_WAKEUP_TENANT, Cn as DeleteBuilder, at as Dispatcher, Ua as EVENT_CLIENT_QUEUE_SIZE, Wa as EVENT_LATEST_QUEUE_SIZE, Fc as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, ma as EffectStore, za as EventBus, Iu as ExpectationEvaluator, Mu as ExpectationRegistry, Qu as ExperimentEvaluator, Wu as ExperimentRegistry, ni as FIELD_ENCRYPTION_ACTIVE_ENV, ri as FIELD_ENCRYPTION_KEYS_ENV, ii as FIELD_ENCRYPTION_KEY_ENV, ai as FIELD_ENCRYPTION_PREVIOUS_KEY_ENV, oi as FIELD_KEYRING_ENV_NAMES, ci as FIELD_KEYS_TABLE, li as FIELD_KEY_HEARTBEAT_MS, ui as FIELD_KEY_HOLDERS_TABLE, di as FIELD_KEY_LEASE_MS, fi as FIELD_KEY_REPORTS_TABLE, an as FieldKeyringConfigError, pi as FieldKeyringRefusal, co as GRANT_TTL_MS, pt as HEADERS_TIMEOUT_MARGIN_MS, Gu as HOLDOUT_VARIANT, mr as HTML_CSP, o as InMemoryDataStore, t as IndexedMatcher, qa as InstanceMembership, n as LinearScanMatcher, Uc as MIN_EXTERNALIZABLE_INTERVAL_MS, wu as MIN_LEVEL_RESYNC_MS, vd as NOOP_ANALYTICS_PROVIDER, ze as NO_ROW_FILTER, ir as NO_TRUSTED_PROXIES, wn as NoRowFound, hr as ORIGIN_NULLING_REFERRER_POLICIES, Ya as OUTBOX_ATTEMPTS_TABLE, Xa as OUTBOX_ATTEMPT_LOG_CAP, Za as OUTBOX_TABLE, Tn as OptimisticLockError, Ba as OutboxEventPublisher, Ho as REBAC_ADMIN_SCOPE, lo as REFRESH_LEASE_MS, Fs as REPLICA_OBSERVATIONS_TABLE, Dt as RPC_CLIENT_ADDRESS_HEADER, Mf as RUNTIME_NAME, Tu as ReactionRateLimiter, _e as ReplicatedDataStore, Be as RowFilterDeclarationViolated, Ve as RowFilterUnavailable, Ic as SCHEDULE_SUBJECT, Qs as SERVICE_TOKEN_PREFIX, pa as SYSTEM_SUBJECT, En as SelectBuilder, Df as ServerOnlyColumnWrite, cs as SsrfBlockedError, Of as StoreOperationFailed, a as SubscriptionRegistry, Qi as TENANT_SELECTIONS_TABLE, Lc as TERMINAL_RUN_STATUSES, An as TRANSACTION_READ_CONFLICT_NAME, jn as TX_READ_VERSIONS_KEY, kf as TableValidationFailed, Af as TenantRowNotFound, jf as TenantScopeViolation, nu as TimelineRecorder, Mn as TransactionReadConflict, cc as UndeclaredTableAccess, yl as UndoBoundaryError, bl as UndoStack, yr as UnverifiedWebhookRoute, Dn as UpdateBuilder, fs as VOLTRO_AUDIT_MIXIN_ID, ps as VOLTRO_EXPIRES_MIXIN_ID, ms as VOLTRO_LOCAL_FIRST_MIXIN_ID, hs as VOLTRO_SOFT_DELETE_MIXIN_ID, gs as VOLTRO_TENANT_MIXIN_ID, br as WEBHOOK_VERIFICATION_PROPERTY, xa as WorkflowPayloadError, Sa as WorkflowRateLimitedError, Ca as WorkflowSingletonHeldError, wa as WorkflowStartNotExecuted, gt as _connectionStreamCount, _t as _resetConnectionCredentialsForTest, Ml as _voltroApprovalsTable, il as _voltroChangeClaimsTable, uo as _voltroConnectionGrantsTable, fo as _voltroConnectionsTable, rn as _voltroCrdtVersionsTable, mi as _voltroFieldKeyHoldersTable, hi as _voltroFieldKeyReportsTable, gi as _voltroFieldKeysTable, _u as _voltroRebacTuplesTable, rl as _voltroScheduleClaimsTable, nl as _voltroScheduleRunsTable, al as _voltroTracesTable, ol as _voltroUndoLogTable, ed as _voltroWakeupsTable, Na as _voltroWorkflowEventDeliveriesTable, Pa as _voltroWorkflowEventsTable, Nn as actingUserId, _i as activateFieldKeyNow, zt as adoptDetached, Lr as answerProbe, Bt as answerResume, $s as apiBindingTokenEnv, ec as apiBindingUrlEnv, da as apiKeyManagementRoutes, Rd as apiRoleMetricLabel, s as appValidation, vt as applyConnectionCredential, Hd as applyDeclaredRelations, Pn as applyDefined, lu as applyDelta, xl as applyInverse, Sl as applyInverses, mt as applyKeepAlive, ks as applyPluginRefRules, He as applyRowFilter, Ue as applyRowFilterToDescriptor, Md as applySoftDeleteScope, Nd as applyTenantScope, Dl as applyUndoInvocation, Nl as approvalIntentKey, Pl as approvalNonce, ql as approvalsPendingExecutor, Uo as assertCan, po as assertConnectionCipherConfigured, tc as assertServiceCallersConfig, xr as assertWebhookRoutesDeclareVerification, df as assessApiRoleWorkloadWindow, Ku as assignVariant, wd as attachAnalyticsMirror, Lu as attachExpectations, $u as attachExperiments, Uu as attachFinops, wr as awaitServerListening, Qa as backoffMs, mo as beginOAuthConnect, Hr as bindBootListener, Tr as bindComputedUntyped, yt as bindConnectionCredential, Ga as bindEvent, Er as bindMutation, Dr as bindStream, Or as bindSubscription, kr as bindSubscriptionUntyped, Ur as bootHoldMsFromEnv, nr as bootRefusal, uu as buildIvmState, of as buildPreview, vu as buildRebacInterceptor, yu as buildRebacReadFilter, me as buildSubjectKey, Wr as buildTracingLayer, Ss as cacheScopeLeaks, Jr as cachedBackend, xe as cachedComputedCall, Wo as can, xc as cancelWakeup, Vt as canonicalInputKey, Fl as canonicalJson, r as canonicalize, vi as checkFieldKeyring, Rc as claimGraceMs, gf as classifyConstraintViolation, de as classifyRead, Xn as classifyRequestOrigin, du as classifyShape, Il as clearApprovalGate, ho as clearConnectionRefreshFlights, Go as clearResourcePolicies, _f as clearRetentions, Us as clearSystemStoreHandle, $i as clearTenantSelection, As as collectPluginRefRules, js as collectReferenceSoftDeleteRules, mc as compileCron, go as completeOAuthConnect, yd as composeAnalytics, bd as composeAnalyticsSinks, Se as computedCacheKey, Ce as computedQueryCacheCaptureInstalled, _o as connectionCallbackPath, vo as connectionLabel, ud as countRunningWorkflows, z as counter, sl as crdtCellStats, x as crdtCompactMaxBytes, S as crdtMaxDocumentBytes, C as crdtMaxUpdateBytes, w as crdtMigrationsFor, T as crdtRebaseMaxBytes, Wc as cronForInterval, hc as cronOccurrences, bs as crud, f as currentRawReads, $o as currentRequestLoader, ve as currentRoutingContext, $t as currentTraceContext, Wi as dataStoreApiKeyStore, ia as dataStoreDeviceStore, Ri as dataStoreIdempotencyStore, zi as dataStoreKvStore, Ll as decideApproval, Jl as decideApprovalInvocation, Ai as declaredEncryptedColumns, ji as declaredRenames, tf as decodeSnapshotValue, on as decryptField, Ar as defectMessage, kd as defineAggregate, yo as defineConnection, zu as defineCostBudget, Fa as defineEventTrigger, Ld as defineExecutor, Nu as defineExpectation, qu as defineExperiment, $a as defineOutboxHandler, Eu as defineReaction, Ko as defineResourcePolicy, gc as defineSchedule, pd as defineSubscriber, ot as deliveredRowCount, sn as deriveKey, E as describeCrdtState, Gr as describeOtelReasons, Ht as detachForResume, la as deviceManagementRoutes, aa as deviceTokenPrefixes, sf as diffChange, jr as drainForShutdown, eo as drainOutbox, Sc as dueWakeups, qo as effectiveRelations, _s as emptySchemaRegistry, gn as enableGraphObservation, nf as encodeSnapshotValue, cn as encryptField, Rl as enforceApproval, Br as engineClientsSnapshot, ke as enterReadRecording, es as enterRequestLoader, Yr as envSecretsBackend, _l as evaluateTouchedRules, B as eventMetricTagCacheSizeForTests, bo as exchangeAuthorizationCode, V as exponentialBoundaries, Yt as externalSpanFromTraceparent, Gc as externalizationRefusal, Kc as externalizedTask, qc as externalizedTaskNames, vf as extractDbCause, H as fieldDecryptSnapshot, yi as fieldKeyHolderId, ln as fieldKeyIdOf, Mi as fieldKeyStatus, i as fingerprintFor, et as forbiddenColumnsForSubject, xo as forgetCredential, Is as forgetReplicaObservations, Cs as formatCacheScopeLeaks, ws as formatServerOnlyLeaks, Xt as formatTraceparent, Ds as formatUnresolvedSources, Cl as forwardChangeFromCdc, fa as frameworkApiKeyStrategy, ua as frameworkDeviceStrategy, U as gauge, Gi as generateApiKeyToken, zl as getApprovalGate, bt as getConnectionCredential, Mo as getConnectionResolver, xt as getCredentialExpiry, un as getFieldCipher, Jo as getResourcePolicy, We as getRowFilter, Ot as getRpcConnection, Ws as getSystemStoreHandle, ru as getTimelineRecorder, ns as getTupleSource, fu as groupKeyOf, lc as guardUndeclaredTables, Ju as hashUnitInterval, bi as heartbeatFieldKeys, W as histogramMetric, rf as historyProvenance, Xr as httpSecretsBackend, ha as insertIgnoreRowOutcomeEffect, ga as insertManyRowsEffect, _a as insertRowEffect, Zc as inspectCoordinatedSchedule, qs as inspectWorkflow, Bl as installApprovalGate, we as installComputedQueryCacheCapture, rs as installPolicyGuardResolver, St as interruptConnectionStreams, wl as invertChange, ar as ipToBytes, Ad as isAggregateDefinition, rr as isBootRefusal, Rn as isCompressibleContentType, Bu as isCostBudgetDefinition, Pd as isEmptyTenantScopedRead, Pu as isExpectationDefinition, Yu as isExperimentDefinition, dn as isFieldKeyring, yf as isForeignKeyViolation, ad as isIdleNow, Mr as isInfraError, Du as isLevelReaction, Ou as isLevelWatch, _n as isObservingGraph, Fd as isOrglessUserSubject, bf as isQueryTimeout, Tl as isSafeToApply, _c as isScheduleDefinition, Ms as isSoftDelete, Zn as isStateChangingMethod, Fn as isTransactionReadConflict, or as isTrustedProxy, nc as isWellFormedServiceToken, Ia as isWorkflowEventTriggerDefinition, p as isolateRawReadScope, pu as ivmValue, af as lastWriteProvenance, G as linearBoundaries, So as listConnectionStates, cl as listCrdtVersions, Yo as listResourcePolicies, xf as listRetentionConflicts, Sf as listRetentions, bu as loadResourceTuples, xu as loadSubjectTuples, uc as localityAwareSelector, Ki as lockApiKeyById, Ud as makeActionRunner, zc as makeAdvisoryLockCoordinator, fn as makeAesCipher, qi as makeApiKeyService, ds as makeApiKeyUsageBuffer, Ji as makeApiKeyUsageFlusher, hf as makeApiRoleBucketSampler, zd as makeApiRoleWorkloadMetrics, c as makeAppAccess, Vl as makeApprovalGate, Bi as makeAsyncKv, Ys as makeAuthMiddlewareLayers, Ka as makeBufferGapDetector, qr as makeBufferingSpanProcessor, Co as makeConnectionRegistry, No as makeConnectionResolver, Js as makeConnectionState, Po as makeConnectionsFacade, Qc as makeCoordinatedScheduler, os as makeDataLoader, Ge as makeDefaultRefilter, oa as makeDeviceService, Lo as makeDisconnectConnectionExecutor, va as makeEffectStoreLayer, Va as makeEventPublisher, La as makeEventsFacade, Jc as makeExternalizedTaskRegistry, pn as makeFieldCipher, mn as makeFieldKeyring, On as makeFluentStore, od as makeIdleGate, Ta as makeLazyWorkflowFacade, Ro as makeListConnectionsExecutor, Nr as makeMutationCodec, Wd as makeMutationReplayAdmission, Gd as makeMutationRunner, Kd as makeOneShotQueryRunner, Qn as makeOriginGuardExemption, to as makeOutboxFacade, rd as makeProcessAdapter, qd as makeQueryDescriptorProducer, Id as makeQueryFinalizer, Jd as makeQueryReauthorizer, Yd as makeQuerySubscriber, sd as makeRouterActivity, vl as makeRuleCapture, vs as makeSchemaRegistry, zo as makeStartConnectionExecutor, Bo as makeSubmitTokenExecutor, Nt as makeSubscriptionOutbox, Ea as makeTransactionalWorkflowFacade, pl as makeUndoCapture, cd as makeWakeGate, ld as makeWakeProxyServer, Da as makeWorkflowFacade, Oa as makeWorkflowFacadeWithCallerContext, ka as makeWorkflowHandlers, Aa as makeWorkflowLayers, ja as makeWorkflowRunHandle, Xd as makeWorkflowStartRunner, Cc as markWakeupFired, mu as materializeIvm, zn as maybeCompress, Yi as memoryApiKeyStore, sa as memoryDeviceStore, fc as memoryReplicationAdapter, he as memoryRywPositionStore, Bn as mergeCompressionHeaders, Ct as mergeCookieHeader, Ls as mergeFleetObservations, ll as migrateCrdtColumn, rc as mintServiceToken, kn as missingRowError, Vn as negotiateEncoding, Hn as negotiatedCompression, Zt as newTraceId, $c as nextDelay, vc as nextFiring, wc as nextWakeup, id as nodeProcessSupervisor, xd as noopAnalytics, Sd as noopAnalyticsSpec, Vi as noopKv, sr as normalizeIp, $n as normalizeOrigin, Te as noteCacheVolatile, Ee as noteDependency, Ae as noteRead, Un as noteResumeVerdict, Ke as noteRowFilterResolved, Ni as nullUnreadableSealedValues, wo as oauthCredentialValue, Bd as observeApiRoleEffect, Xs as observeConnectionHeaders, vn as observeStore, yn as observedGraph, Pr as onProcessShutdown, Pi as openCell, Kr as otelImportFailure, no as outboxAttemptsTable, ro as outboxTable, Hl as parseApprovalInterval, Vr as parseEngineSdkHeader, Qt as parseTraceparent, Ma as payloadPropertyNames, Bc as peerRunIsAlive, Ul as pendingApprovalsFor, Xi as plantMissingApiKeyActors, fe as powerOfTwoSelector, ul as prepareSealedCrdtRestore, gr as preservesSameOriginHeader, cf as previewInRollback, Rr as probeFor, To as projectConnectionState, Tc as pruneWakeups, Ha as publishEvent, Kn as publishServerTracerLayer, Pt as pumpOutbox, De as queryCachePolicy, m as rawSqlPreview, ku as reactionDurationMs, Au as reactionRateBucketKey, Ft as reactiveSocketTunables, pf as readApiRoleWorkloadWindow, xi as readFieldKeyHolders, Si as readFieldKeyReports, Ci as readFieldKeys, tn as readMaybeOne, el as readPollCeilingMs, je as readRecordingActive, Rs as readReplicaObservations, Xo as rebacPolicyGraph, j as recordCoalesced, wt as recordCredentialExpiry, K as recordEventDelivered, q as recordEventDropped, J as recordEventPublished, Y as recordEventSubscribers, X as recordExternalMissed, Z as recordExternalTrigger, Q as recordFieldDecrypt, wi as recordFieldKeyReport, Ut as recordForResume, M as recordOverrun, N as recordOversized, h as recordRawRead, Me as recordReads, $ as recordSample, ee as recordScheduleQueueRecovery, te as recordScheduleQueueWait, ne as recordScheduleQueued, re as recordScheduleRun, P as recordStalled, ie as recordSubscriptionActive, ae as recordSubscriptionDelivery, bn as recordTableAccess, iu as recordTimelineEvent, oe as recordWorkflowRun, Ne as recordingStore, xs as redactColumns, au as redactRow, ge as redisRywPositionStore, Ol as redoUndoInvocation, Eo as refreshAccessToken, Tt as registerConnectionStream, is as registerDefaultTupleSource, Yc as registerExternalizedTask, Ti as registerFieldKey, Cf as registerRetention, Ec as registerWakeup, Wl as rehydrateGuards, Fi as rekeyCell, Ii as rekeySealedValues, Ei as releaseFieldKeyHolder, Dc as releaseWakeup, pe as replicaHealth, Oe as resetComputedQueryCacheCaptureForTests, Wt as resetDetachedForTest, se as resetEventMetricTagCacheForTests, ce as resetFieldDecryptCountsForTests, xn as resetObservedGraph, zs as resetReplicaObservationWarnings, Wn as resetResumeCensus, Gt as resetResumeRingsForTest, qe as resetRowFilterResolvedArms, Zr as resetSecretsBackend, F as resetSubscriptionSocketMetrics, cr as resolveClientAddress, Do as resolveConnection, Fo as resolveConnectionForSubject, dc as resolveCurrentRegion, A as resolveDependentTables, si as resolveFieldKeyring, zr as resolveHealth, ht as resolveKeepAlive, er as resolveOriginGuardConfig, d as resolveReactiveConfig, Oo as resolveRedirectUri, lr as resolveRequestClientAddress, ur as resolveRequestIsHttps, hu as resolveRescan, Je as resolveRowFilterScope, Ye as resolveRowFilterScopeFor, Qr as resolveSecret, $r as resolveSecretSync, ei as resolveSecretsBackend, _r as resolveSecurityHeaders, ou as resolveTimelineMode, yc as resolveTransactionSubject, dr as resolveTrustedProxies, dl as restoreCrdtVersion, Pe as restrictingReads, Fe as restrictingReadsEffect, Xu as resultVariantNames, Gn as resumeCensus, Kt as resumeKeyOf, qt as resumeTunables, wf as retentionTtlMsFromEnv, Di as retireFieldKey, ct as revalidatePath, lt as revalidateTable, ut as revalidateTag, su as reverseEventOverRows, Zo as revokedIds, Xe as rowFilterMayNarrow, Ze as rowFilterRegistered, Qe as rowFilterResolvedArms, Ns as rulesFor, Gs as runAsSystem, dd as runOrchestratorTick, Zd as runProvidedEffect, ju as runReaction, fd as runSingleNodeOrchestrator, td as runWakeLoop, Qd as runWithDeadlockRetry, Sn as runWithObservedProcedure, g as runWithRawReadScope, ts as runWithRequestLoader, ye as runWithRoutingContext, be as runWithRoutingContextEffect, en as runWithTraceContext, ko as sanitizeRedirectTo, bc as scheduleBackfillRequestsTable, tl as scheduleCoordinated, Ts as schemaPropertyNames, Gl as scopeStringsOf, vr as securityHeadersFor, ea as selectTenant, Kl as serializeGuards, tt as serverOnlyColumnNames, Es as serverOnlyLeaks, qn as serverTracer, ic as serviceCallerNextTokenEnv, ac as serviceCallerStrategy, oc as serviceCallerTokenEnv, sc as serviceEnvSegment, I as setBufferedBytes, Io as setConnectionResolver, D as setCrdtAdmission, O as setCrdtBackend, k as setCrdtCompactMaxBytes, hn as setFieldCipher, It as setReactiveSocketTunables, Jt as setResumeTunables, dt as setRevalidationPublisher, $e as setRowFilter, ti as setSecretsBackend, Jn as setServerTracer, Ie as setSourceGapSink, Ks as setSystemStoreHandle, cu as setTimelineRecorderForTest, as as setTupleSource, e as settleHandlerBody, Zi as sha256Hex, ca as sha256HexOf, Fr as shutdownGraceMsFromEnv, Vc as singleCoordinator, fl as snapshotCrdt, st as snapshotEntryFor, le as snapshotMetrics, ue as snapshotMetricsSync, Le as sourceGapReport, ls as ssrfGuardHttpClientLayer, us as ssrfReason, Oi as startFieldKeyHolder, Ir as startRpcServer, Hc as startScheduler, Ao as storeCredential, nt as stripColumnsFromRows, rt as stripForbiddenForWire, it as stripServerOnlyForWire, L as subscriptionSocketMetricSamples, R as subscriptionSocketMetricsSnapshot, jo as sweepExpiredGrants, Tf as sweepRetention, El as synthesizeInverse, ta as tenantSelectionId, na as tenantSelectionStore, ss as tracingHttpClientLayer, Ra as triggerWorkflow, Oc as tryClaimWakeup, Et as unbindConnection, ml as undoCaptureEnabled, kl as undoLogExecutor, hl as undoSurfaceEnabled, Os as unresolvedSources, ya as upsertRowEffect, ba as upsertRowOutcomeEffect, jd as useAggregate, _d as useAnalytics, Vu as useCostBudget, Fu as useExpectation, Zu as useExperiment, ki as verifyFieldKeyring, Li as verifySealedValues, Qo as visibleRows, nd as wakeDueOnce, Sr as webhookVerificationOf, $d as withRowFilter, Zs as withRpcAuthMiddleware, ef as withScopedRequest, Yn as withServerTracer, Yl as workflowDomainEventsExecutor, Xl as workflowEventDeliveriesExecutor, Zl as workflowRowVisibleTo, Ql as workflowRunEventsExecutor, $l as workflowRunExecutor, eu as workflowRunStepsExecutor, tu as workflowRunsExecutor, gl as wrapCaptureStore, ys as wrapStoreWithBootCodec, In as wrapStoreWithMixinBehaviour, mf as writeApiRoleWorkloadBucket, Bs as writeReplicaObservation };
@@ -1,5 +1,5 @@
1
1
  import { types as e } from "node:util";
2
- //#region src/insertRequiredColumns.ts
2
+ // src/insertRequiredColumns.ts
3
3
  var t = (t) => {
4
4
  if (e.isProxy(t)) return !1;
5
5
  let n = Object.getPrototypeOf(t);
@@ -15,5 +15,4 @@ var t = (t) => {
15
15
  }
16
16
  return r;
17
17
  };
18
- //#endregion
19
18
  export { n as prepareInsertRequiredColumns };
@@ -1,5 +1,5 @@
1
1
  import { createLogger as e } from "@voltro/logger";
2
- //#region src/instanceMembership.ts
2
+ // src/instanceMembership.ts
3
3
  var t = e({ scope: "voltro:members" }), n = 5e3, r = class {
4
4
  members = /* @__PURE__ */ new Map();
5
5
  listeners = /* @__PURE__ */ new Set();
@@ -94,5 +94,4 @@ var t = e({ scope: "voltro:members" }), n = 5e3, r = class {
94
94
  }
95
95
  }
96
96
  };
97
- //#endregion
98
97
  export { r as InstanceMembership };
package/dist/ivm.js CHANGED
@@ -1,4 +1,4 @@
1
- //#region src/ivm.ts
1
+ // src/ivm.ts
2
2
  var e = /* @__PURE__ */ new Set([
3
3
  "count",
4
4
  "sum",
@@ -121,5 +121,4 @@ var e = /* @__PURE__ */ new Set([
121
121
  n === void 0 ? t.delete(e) : t.set(e, n);
122
122
  }
123
123
  };
124
- //#endregion
125
124
  export { c as applyDelta, l as applyDeltaInto, o as buildIvmState, t as classifyShape, r as groupKeyOf, a as ivmValue, s as materializeIvm, u as resolveRescan, d as resolveRescanInto };
@@ -1,7 +1,7 @@
1
1
  import { Effect as e, Option as t } from "effect";
2
2
  import { and as n, contains as r, eq as i, generateId as a, gt as o, isNull as s, or as c } from "@voltro/database";
3
3
  import { KvError as l } from "@voltro/kv";
4
- //#region src/kvDataStore.ts
4
+ // src/kvDataStore.ts
5
5
  var u = "_voltro_kv", d = (e) => {
6
6
  if (e == null) return null;
7
7
  if (e instanceof Date) return e.getTime();
@@ -82,5 +82,4 @@ var u = "_voltro_kv", d = (e) => {
82
82
  })
83
83
  };
84
84
  };
85
- //#endregion
86
85
  export { h as dataStoreKvStore };
package/dist/kvFacade.js CHANGED
@@ -3,7 +3,7 @@ import { ConfigProvider as t, Layer as n, ManagedRuntime as r, Option as i } fro
3
3
  import { LoggerLayer as a } from "@voltro/logger";
4
4
  import { Kv as o, KvStore as s, layerConnections as c, layerMemory as l, layerRedis as u } from "@voltro/kv";
5
5
  import { RedisConnections as d } from "@voltro/kv/connection";
6
- //#region src/kvFacade.ts
6
+ // src/kvFacade.ts
7
7
  var f = async ({ store: f, env: p = process.env, backend: m, connectionName: h, keyPrefix: g, connections: _ }) => {
8
8
  let v = (p.KV_BACKEND ?? m ?? "database").toLowerCase(), y = v === "redis" ? "redis" : v === "memory" ? "memory" : "database", b = y === "redis" ? u({
9
9
  ...h === void 0 ? {} : { connectionName: h },
@@ -34,5 +34,4 @@ var f = async ({ store: f, env: p = process.env, backend: m, connectionName: h,
34
34
  list: () => Promise.resolve([]),
35
35
  clear: () => Promise.resolve()
36
36
  };
37
- //#endregion
38
37
  export { f as makeAsyncKv, p as noopKv };
package/dist/matcher.js CHANGED
@@ -1,6 +1,6 @@
1
1
  import { RangeIndex as e } from "./rangeIndex.js";
2
2
  import { evaluatePredicate as t, getTable as n, walkLeaves as r } from "@voltro/database";
3
- //#region src/matcher.ts
3
+ // src/matcher.ts
4
4
  var i = class {
5
5
  byTable = /* @__PURE__ */ new Map();
6
6
  register(e) {
@@ -300,5 +300,4 @@ var i = class {
300
300
  return o;
301
301
  }
302
302
  };
303
- //#endregion
304
303
  export { d as IndexedMatcher, i as LinearScanMatcher };
@@ -1,5 +1,5 @@
1
1
  import { getTable as e } from "@voltro/database";
2
- //#region src/memoryColumnDefaults.ts
2
+ // src/memoryColumnDefaults.ts
3
3
  var t = (t, n) => {
4
4
  let r = e(t);
5
5
  if (r === void 0) return n;
@@ -7,5 +7,4 @@ var t = (t, n) => {
7
7
  for (let [e, t] of Object.entries(r.fields)) i[e] === void 0 && t.generatedAs === void 0 && t.computed === void 0 && (t.hasDefault && t.defaultFactory === void 0 && t.defaultValue !== void 0 ? i[e] = t.defaultValue === "now" ? /* @__PURE__ */ new Date() : structuredClone(t.defaultValue) : t.nullable && t.defaultFactory === void 0 && (i[e] = null));
8
8
  return i;
9
9
  };
10
- //#endregion
11
10
  export { t as applyMemoryColumnDefaults };
@@ -1,5 +1,5 @@
1
1
  import { evaluatePredicate as e, getTable as t, isColumnReference as n, preparePredicate as r } from "@voltro/database";
2
- //#region src/memoryQueryJoins.ts
2
+ // src/memoryQueryJoins.ts
3
3
  var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typeof e == "bigint" || typeof e == "number" && !Number.isNaN(e), a = (e, t = /* @__PURE__ */ new WeakSet()) => {
4
4
  if (typeof e != "object" || !e || Object.getPrototypeOf(e) !== Object.prototype || t.has(e)) return !1;
5
5
  t.add(e);
@@ -110,5 +110,4 @@ var i = (e) => e == null || typeof e == "string" || typeof e == "boolean" || typ
110
110
  project: (e) => n.joinedProjection?.length ? Object.fromEntries(n.joinedProjection.map((t) => [t.outputKey, e[t.source]])) : Object.fromEntries((n.projection ?? p).map((t) => [t, e[t]]))
111
111
  };
112
112
  };
113
- //#endregion
114
113
  export { s as memoryQueryJoins };
@@ -1,5 +1,5 @@
1
1
  import { decimalEqualityKey as e, getTable as t } from "@voltro/database";
2
- //#region src/memorySetOperations.ts
2
+ // src/memorySetOperations.ts
3
3
  var n = (e, t = !1) => e == null ? ["null"] : e instanceof Date ? t ? ["string", e.toISOString()] : ["date", e.getTime()] : typeof e == "bigint" ? ["bigint", e.toString()] : typeof e == "number" ? t && !Number.isFinite(e) ? ["null"] : ["number", Number.isFinite(e) ? e : String(e)] : typeof e == "object" ? e instanceof ArrayBuffer ? ["bytes", [...new Uint8Array(e)]] : ArrayBuffer.isView(e) ? ["bytes", [...new Uint8Array(e.buffer, e.byteOffset, e.byteLength)]] : Array.isArray(e) ? ["array", e.map((e) => n(e, t))] : ["object", Object.entries(e).filter(([, e]) => e !== void 0).sort(([e], [t]) => e < t ? -1 : +(e > t)).map(([e, r]) => [e, n(r, t)])] : [typeof e, e], r = (t, r, i) => JSON.stringify(r.map((r) => {
4
4
  let a = t[r], o = a == null || i[r]?.type !== "decimal" ? null : e(a);
5
5
  return o === null ? n(a, i[r]?.type === "json") : ["decimal", o];
@@ -39,5 +39,4 @@ var n = (e, t = !1) => e == null ? ["null"] : e instanceof Date ? t ? ["string",
39
39
  }
40
40
  return [...d.values()];
41
41
  };
42
- //#endregion
43
42
  export { i as memoryOutputColumns, r as memoryRowKey, a as memorySetRows };
package/dist/metrics.js CHANGED
@@ -1,6 +1,6 @@
1
1
  import { subscriptionSocketMetricSamples as e } from "./subscriptionSocketMetrics.js";
2
2
  import { Effect as t, Metric as n } from "effect";
3
- //#region src/metrics.ts
3
+ // src/metrics.ts
4
4
  var r = n.exponentialBoundaries({
5
5
  start: .001,
6
6
  factor: 2,
@@ -171,5 +171,4 @@ var r = n.exponentialBoundaries({
171
171
  for (let e of n) t.push(e);
172
172
  return t;
173
173
  })), se = () => t.runSync($);
174
- //#endregion
175
174
  export { ne as counter, j as eventMetricTagCacheSizeForTests, ae as exponentialBoundaries, z as fieldDecryptSnapshot, re as gauge, ie as histogramMetric, oe as linearBoundaries, N as recordEventDelivered, P as recordEventDropped, M as recordEventPublished, te as recordEventSubscribers, Z as recordExternalMissed, X as recordExternalTrigger, R as recordFieldDecrypt, F as recordSample, Y as recordScheduleQueueRecovery, J as recordScheduleQueueWait, q as recordScheduleQueued, G as recordScheduleRun, W as recordSubscriptionActive, H as recordSubscriptionDelivery, Q as recordWorkflowRun, A as resetEventMetricTagCacheForTests, B as resetFieldDecryptCountsForTests, $ as snapshotMetrics, se as snapshotMetricsSync };
@@ -1,7 +1,7 @@
1
- import { bootRefusal as e } from "./bootRefusal.js";
1
+ import { bootRefusal as e } from "./boot-refusal.js";
2
2
  import { Context as t, Effect as n, Layer as r, Option as i, Tracer as a } from "effect";
3
3
  import { AsyncLocalStorage as o } from "node:async_hooks";
4
- //#region src/observability.ts
4
+ // src/observability.ts
5
5
  var s = () => {
6
6
  let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
7
7
  return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
@@ -119,5 +119,4 @@ var s = () => {
119
119
  inMemoryMetricExporter: O
120
120
  };
121
121
  };
122
- //#endregion
123
122
  export { m as buildTracingLayer, l as describeOtelReasons, d as otelImportFailure };
@@ -1,5 +1,5 @@
1
1
  import { AsyncLocalStorage as e } from "node:async_hooks";
2
- //#region src/observedGraph.ts
2
+ // src/observedGraph.ts
3
3
  var t = new e(), n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), i = "\0", a = process.env.VOLTRO_OBSERVE_GRAPH === "1", o = () => {
4
4
  a = !0;
5
5
  }, s = () => a, c = (e, n) => a ? (r.add(e.tag), t.run(e, n)) : n(), l = (e, r) => {
@@ -48,5 +48,4 @@ var t = new e(), n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), i
48
48
  }
49
49
  return t;
50
50
  };
51
- //#endregion
52
51
  export { o as enableGraphObservation, s as isObservingGraph, f as observeStore, u as observedGraph, l as recordTableAccess, d as resetObservedGraph, c as runWithObservedProcedure };
@@ -1,4 +1,4 @@
1
- //#region src/originGuard.ts
1
+ // src/originGuard.ts
2
2
  var e = (e) => {
3
3
  let t = e.toUpperCase();
4
4
  return t !== "GET" && t !== "HEAD" && t !== "OPTIONS";
@@ -112,5 +112,4 @@ var e = (e) => {
112
112
  allowedOrigins: (i !== void 0 && i.length > 0 ? i : (t.VOLTRO_ALLOWED_ORIGINS ?? "").split(",").map((e) => e.trim()).filter((e) => e.length > 0)).map(a)
113
113
  };
114
114
  };
115
- //#endregion
116
115
  export { u as classifyRequestOrigin, e as isStateChangingMethod, r as makeOriginGuardExemption, a as normalizeOrigin, d as resolveOriginGuardConfig };
package/dist/outbox.js CHANGED
@@ -2,7 +2,7 @@ import { Effect as e } from "effect";
2
2
  import { and as t, eq as n, generateId as r, id as i, inSet as a, integer as o, json as s, lt as c, table as l, text as u, timestamp as d } from "@voltro/database";
3
3
  import { validateOutboxHandlerDefinition as f } from "@voltro/protocol";
4
4
  import { createLogger as p } from "@voltro/logger";
5
- //#region src/outbox.ts
5
+ // src/outbox.ts
6
6
  var m = p({ scope: "voltro:outbox" }), h = "_voltro_outbox", g = {
7
7
  kind: "typeid",
8
8
  prefix: "obx"
@@ -348,5 +348,4 @@ var m = p({ scope: "voltro:outbox" }), h = "_voltro_outbox", g = {
348
348
  ...p === void 0 ? {} : { nextAttemptAt: p }
349
349
  };
350
350
  };
351
- //#endregion
352
351
  export { T as DEFAULT_OUTBOX_CLAIM_LEASE_MS, v as OUTBOX_ATTEMPTS_TABLE, E as OUTBOX_ATTEMPT_LOG_CAP, h as OUTBOX_TABLE, w as backoffMs, x as defineOutboxHandler, M as drainOutbox, C as makeOutboxFacade, b as outboxAttemptsTable, _ as outboxTable };
@@ -1,5 +1,5 @@
1
1
  import { and as e, eq as t } from "@voltro/database";
2
- //#region src/pluginRefRules.ts
2
+ // src/pluginRefRules.ts
3
3
  var n = (e) => e.old ?? e.new ?? {}, r = (e) => String(n(e).id ?? ""), i = (e) => {
4
4
  let t = n(e).tenantId;
5
5
  return typeof t == "string" ? t : null;
@@ -61,5 +61,4 @@ var n = (e) => e.old ?? e.new ?? {}, r = (e) => String(n(e).id ?? ""), i = (e) =
61
61
  }
62
62
  return n.filter((e) => e.policy !== "keep");
63
63
  };
64
- //#endregion
65
64
  export { c as applyPluginRefRules, l as collectPluginRefRules, s as collectReferenceSoftDeleteRules, a as isSoftDelete, o as rulesFor };