@voltro/sql-postgres 0.20.0 → 0.20.2

package/CHANGELOG.md

@@ -39,6 +39,165 @@ _Changes staged for the next release accumulate here (rolled up from
 
 ---
 
+## [0.20.2] — 2026-07-30
+
+### Fixed
+
+- **@voltro/database, @voltro/cli, @voltro/voltro** — `voltro db drift` could never report clean. It compared the LIVE schema's fingerprint against `_voltro_migration_plans.fingerprint` — which is the **declared** snapshot's hash. The two are not comparable: introspection cannot recover everything a declaration carries (generated expressions, `maxLength`, sensitivity markers), so hashing a live snapshot never equals hashing the declaration it came from. The command was therefore RED on a provably clean database, permanently.
+
+  Fixing the postgres-only cast in the previous release is what made this visible — before that, `db drift` crashed before it could compute a wrong answer.
+
+  A consumer measured it precisely: three different fingerprints for one database (`apply` recorded `b1078b73…`, `drift` computed `8dcc9c5e…`, `plan` computed `0c376108…`), stable across runs, with `db plan` reporting 0 operations in between.
+
+  **The fix is a second, comparable baseline.** `_voltro_migration_plans` gains `liveFingerprint` — the post-apply LIVE fingerprint, taken from the convergence re-plan's `fromFingerprint` (that re-plan runs AFTER the apply, so its "pre-state" is our post-state; it is already computed, so this costs nothing). `db drift` compares against that, and hashes the live snapshot WHOLE, exactly as the applier did.
+
+  It used to strip `_voltro_*` tables before hashing, which sounds reasonable and was half the incomparability. A framework upgrade that adds a `_voltro_*` column will now show as drift until the next `db apply` records a new baseline — honest, since the live schema did change, and it self-heals on the apply an upgrade needs anyway.
+
+  Rows written before the column exists have no baseline. `db drift` says so and exits 0, instead of comparing a live hash against a declared one and calling the difference drift. `_voltro_*` table changes ride the declarative differ, so no codemod.
+
+  **The "Probable causes" list is gone.** It named out-of-band DDL and a missing ledger row, and the consumer hit it with neither being true — the row was right there in `db plans`. A diagnosis that asserts a cause it cannot know is the same defect as the `ALTER TABLE FORCE` repair line retracted in the same release, and it costs more here because it is confident: it sends the reader hunting through somebody's shell history. The command now says what it can actually see — that the schema changed, not what or who — and points at `db plan` for the real difference.
+
+  Worth recording what the pair of defects cost together, in the consumer's framing: `db drift` exists to catch a divergence between declared and live, and the one real divergence they have (`sessions.tokenHash` declared `varchar(64)`, live `longtext`) is invisible to it — while it loudly reported a divergence that did not exist. False negative on the real thing, false positive on nothing. The false negative is the still-open `maxLength`-in-the-snapshot item.
+
+---
+
+## [0.20.1] — 2026-07-30
+
+### Changed
+
+- **@voltro/database, @voltro/runtime, @voltro/plugin-versioning, @voltro/plugin-presence, @voltro/voltro** — Five framework-table indexes were holding GENERIC names in a namespace that is shared with your tables. Index names are unique per SCHEMA on every supported dialect, so `_voltro_row_history.index('byTrace')` reserved `byTrace` for the whole database — and `byTrace` is the first thing anyone reaches for when indexing a `traceId`. A consumer added `traceId` to their own audit table, indexed it the obvious way, and collided with ours; the framework's own error message even suggested renaming the framework's index as the fix.
+
+  Renamed: `_voltro_row_history` `byTrace` → `byRowHistoryTrace`, `bySubject` → `byRowHistorySubject`; `_voltro_api_keys` `byTenant` → `byApiKeyTenant`; `_voltro_presence` `byChannel` → `byPresenceChannel`; `_voltro_connections` `bySubject` → `byConnectionSubject`. These are `_voltro_*` tables, so the rename rides the declarative differ on `voltro db apply` / boot — no codemod. Adopters see a one-time index rebuild.
+
+  A test now enforces the rule that most framework tables already followed: a framework index name must MENTION its own table. Mechanical, so it cannot rot the way a curated list of "generic" names would, and it does not demand the full `_voltro_<table>_<name>` form — which would force renaming ~20 already-safe indexes for no benefit. It also asserts no two framework tables claim the same index name, since installing two such plugins together would fail at migrate time for a reason neither plugin's author could see.
+
+### Fixed
+
+- **@voltro/sql-mysql, @voltro/voltro** — A MariaDB table with a UNIQUE constraint on an UNBOUNDED text column can never be decoded from the binlog. The reader now says so ONCE — with the real cause and a remedy that works — and excludes the table, instead of looping on it forever.
+
+  **The mechanism.** MariaDB backs an unbounded UNIQUE with a **HASH long-unique index**, which adds a hidden `DB_ROW_HASH_n` column to the InnoDB row. That column IS in the binlog row image and is NOT in `information_schema.COLUMNS`, so the reader compares N+1 against N and throws on every write to that table:
+
+  ```text
+  Table app.sessions schema changed between binlog event and metadata fetch:
+    the event has 9 columns, fetched metadata has 8
+  ```
+
+  Nothing is broken; the table is shaped that way, permanently. The previous recovery (skip to the current binlog end) recovered nothing, because the end is exactly where the next failing write appears — a loop a consumer measured at roughly every 9 seconds, re-signalling resync to the whole fleet each pass.
+
+  **The cause we shipped in the previous entry was WRONG, and this retracts it.** It blamed a `DROP COLUMN` that ran as `ALGORITHM=INSTANT` leaving a phantom column, and told people to run `ALTER TABLE … FORCE`. The same consumer measured that: 9 InnoDB columns before the rebuild, 9 after, hidden column still present — the rebuild recreates the index and therefore recreates the hidden column. The repair line sent readers in a circle. They also disproved the version theory, being on the same MariaDB 11.8 we had tested on and failed to reproduce a phantom column with.
+
+  **Now:** affected tables are found at CDC start by a privilege-free probe — the direct evidence in `INNODB_SYS_COLUMNS` needs `PROCESS`, which an app DB user does not have, so the constraint SHAPE is inferred from `information_schema.STATISTICS` + `COLUMNS` instead — reported once as an error naming `text().maxLength(n)` as the remedy and `ALTER TABLE FORCE` as explicitly not one, and EXCLUDED from the reader.
+
+  Excluding is what makes it converge, and that is measured rather than assumed: an excluded table with a hidden hash column produces no reader error at all, while the same table included throws on the first write. Cross-instance change events for such a table are lost until it is bounded; own-node reactivity is unaffected (writes still emit inline).
+
+  Framework `_voltro_*` tables cannot hit this — they are filtered out of the reader's include list before it reaches the replication client, and exclusion demonstrably shields the metadata fetch.
+
+  **Caveat worth reading if you are already affected:** on a table that ALREADY exists, adding `.maxLength(n)` currently changes nothing — the schema differ does not diff text length, so it plans 0 operations and reports "up to date". That is a separate defect, reported in the same round and not yet fixed; until it is, the remedy only applies to newly created tables.
+- **@voltro/cli, @voltro/voltro** — `voltro codegen` no longer writes a silently plugin-less `rpcGroup.generated.ts`, and it now reports what it merged.
+
+  `loadApiConfig` swallows every failure into `null`, and `config?.plugins ?? []` turned that into "this app has no plugins". So an `app.config.ts` that threw while importing produced a generated file with **no plugin error union and no plugin routes** — followed by `voltro codegen: wrote rpcGroup.generated.ts`. The file typechecks, so nothing downstream catches it; the only symptom is a client branching on an error tag that never arrives.
+
+  A consumer with ~140 declarative `guards:` measured that file 2781 lines shorter after a version bump, with the `ScopeError` import and the whole `__voltroPluginErrors` union gone. For the record, since they were careful to separate measurement from conclusion: the generator did NOT drop the feature — the plugin-codegen path is byte-identical between 0.19.0 and 0.20.0, and the published `@voltro/cli@0.20.0` does contain the identifier they grepped for. Their `grep` came back empty because the bundled chunk contained a literal NUL byte, which makes a file binary to most search tools (fixed separately, and it had been hiding files from our own audits too). What was real is the artefact diff, and this is the path that produces it without a word.
+
+  Now: a config that EXISTS but fails to load is a refusal with a non-zero exit and the underlying cause, not a quiet downgrade. An app with no `app.config.ts` at all still generates — absence is legitimate, failure is not. And every run prints `(plugins N, error schemas N, plugin routes N)`, because a count that drops from 7 to 0 has to be visible in the success line or the next occurrence is found the same way: by diffing artefacts during a debugging session.
+
+  `loadApiConfigDiagnosed` is the new seam (`{ config, present, error }`); `loadApiConfig` is unchanged for every existing caller.
+- **@voltro/cli, @voltro/voltro** — `ssr cold-compile` log lines now carry the compile's duration, and `voltro start` emits them at all.
+
+  The lines had a `start` and an `end` and no timing, which looks readable and is not: cold compiles run concurrently up to `VOLTRO_DEV_SSR_COMPILE_CONCURRENCY`, so the pairs INTERLEAVE. Subtracting adjacent timestamps names the wrong module, and above a limit of two they cannot be paired by eye at all — which is what a user reading a pod log actually hit, with three `start` lines before their `end`s:
+
+  ```
+  …:59.704 ssr cold-compile start id=…/layout.tsx
+  …:59.704 ssr cold-compile start id=…/(main)/layout.tsx
+  …:03.447 ssr cold-compile end 3743ms id=…/layout.tsx
+  ```
+
+  The gate had the number for free and threw it away. It is measured INSIDE the concurrency permit, so it is the module's own compile cost rather than the time it spent queued behind the limit — those are different numbers and only one of them is a property of the module. A slow first paint is usually one slow module, and this is the line that names it.
+
+  A failed compile now says `FAILED` instead of `end`. Without that, a 3.7-second line for a module that threw read exactly like a slow but successful compile.
+
+  `voltro start`'s middleware fallback constructed the same gate with NO callbacks, so an on-demand compile there produced no line whatsoever; it is wired now.
+- **@voltro/cli, @voltro/voltro** — `voltro db plans`, `db drift` and `db restore-snapshot` worked on postgres only. On mysql/mariadb (and mssql and sqlite) all three died with:
+
+  ```text
+  fatal  unhandled cli error  (FiberFailure) SqlError: Failed to execute statement
+  ```
+
+  The cause is three `${sql('col')}::text AS ${sql('col')}` casts — POSTGRES syntax, in read paths whose helper is still called `buildPgLayer`. `db apply`, which WRITES the same ledger table, has no cast and worked, which is exactly the split a consumer reported: the commands that read were broken, the one that writes was fine.
+
+  The casts existed to stop a driver handing back a `jsonb` object or a `Date`. Normalising in JS gets the same result and cannot be dialect-specific, since drivers differ in whether a json column arrives parsed and whether a timestamp arrives as a `Date`.
+
+  Worth naming what it cost: `db drift` is the command whose whole job is "alert if live diverged from declared", and the consumer who found this had live divergence at the time. The specific detector and the general one were blind together.
+
+  **And the error now names the failing statement.** Their verdict was the actionable part of the report:
+
+  > *"the error names no statement … the statement text (or even the operation name) > would turn this from a dead end into a bug report. We would have sent you the > failing SQL if the error had contained it."*
+
+  Right twice over — they could not diagnose it, and neither could we from the report; it took reading our own source. `@effect/sql`'s `SqlError` carries the driver error in `cause`, and every supported driver puts the useful part there (mysql2: `code`, `errno`, `sqlState`, `sqlMessage`, usually `sql`; pg: `code`, `detail`, `hint`, `position`). The CLI's fatal reporter printed only the wrapper. It now walks the cause chain and prints the driver message, the codes and the statement — collapsed to one line, and saying `<not attached by the driver>` when there genuinely is none, because that is information too.
+
+  Shape-based rather than `instanceof SqlError`, deliberately: the CLI catches errors that have crossed the serve/start bundle boundary, where two copies of `@effect/sql` make `instanceof` silently false — the failure mode this repo has already paid for elsewhere.
+- **@voltro/cli, @voltro/voltro** — `voltro doctor`'s `plaintext-secret` rule no longer flags metadata ABOUT a credential. An audit row denormalising the public facts of an api key — `apiKeyId`, `apiKeyKeyId`, `apiKeyType`, `apiKeyOwnerId`, `apiKeyName` — had three columns already excluded by the `*Id` suffix, while `apiKeyType` and `apiKeyName` fired. Telling a team to encrypt the LABEL of a credential is how a rule earns being ignored.
+
+  The exclusion now covers final words that cannot BE the credential — `Name`, `Type`, `Kind`, `Label`, `Prefix`, `Suffix`, `Status`, `State`, `Scope(s)`, `Version`, `Count`, `Provider`, `Format`, `Note`/`Description`/`Comment`, plus the existing `Id` and the hash family. Deliberately NOT on the list: `Value`, `Secret`, `Token`, `Key`, `Password` — the words that name the thing itself. A false negative from an over-wide list is silent, so that is the failure mode the list is built against, and a test pins the words that must still fire.
+- **@voltro/database, @voltro/cli, @voltro/voltro** — `voltro doctor` no longer contradicts itself about the `.serverOnly()` wire audit. The same command on the same tree reported:
+
+  ```
+  human: serverOnly: NOT CHECKED | json: {'checked': True, 'leaks': 0}
+  ```
+
+  Two causes, both fixed. `registerRelations` refused a re-registration of the IDENTICAL relation object, so a process that executes a module twice looked like two conflicting declarations — it now mirrors `registerTable`'s `existing === table` tolerance (a DIFFERENT block claiming the same name still throws). And doctor loaded the app three times per run; it now loads once, so every report sees the same outcome instead of the first one succeeding and the next failing.
+
+  The consequence was worse than the noise: the throw aborted the wire audit, so the check that a token cannot reach a client had not run since the reporting app adopted the marker — and a CI gate written exactly as we documented (`fail on serverOnly.checked === false`) reported green on an app where the audit provably had not run. That is the "reads as coverage without being coverage" failure the `serverOnly` field was added to remove, reappearing in the field added to prevent it.
+- **@voltro/sql-mysql, @voltro/voltro** — `insertIgnore` on MariaDB no longer reports a cause it cannot know, and no longer turns a REJECTED write into a silent "conflict". `INSERT IGNORE` downgrades EVERY error to a warning — foreign key, NOT NULL, CHECK, truncation — so the post-check's premise ("the insert was skipped ⇒ a unique constraint fired") does not hold on this dialect. It asserted a second unique index that did not exist; the real cause was an FK (an auto-stamped `createdBy` with no matching `actors` row), and a consumer spent the diagnosis looking for a phantom index.
+
+  The message now reads the real error from `SHOW WARNINGS` on the same connection — BEFORE the existing-row lookup, since that lookup is itself a statement and resets the warning list. A non-duplicate warning is reported as a rejection and throws, because returning there is data loss presented as a normal outcome: the row is not written and the caller is told it already was. A genuine duplicate on an unnamed constraint now names the constraint that fired. Outside a transaction the warning cannot be attributed to our own statement (each statement acquires from the pool independently), so the message says the constraint is unknown rather than guessing — framework mutations are auto-transactional, so the common path has the cause.
+- **@voltro/logger, @voltro/cli, @voltro/database, @voltro/voltro** — `voltro doctor --json` and `voltro capabilities --json` now emit exactly one JSON document on stdout. A `log.warn` from module discovery landed there ahead of it, so:
+
+  ```console
+  $ voltro doctor --json 2>/dev/null | python3 -c 'import json,sys; json.load(sys.stdin)'
+  JSONDecodeError: Extra data: line 2 column 1
+  ```
+
+  Note the `2>/dev/null` in that repro — stderr was already redirected, so there was no shell-side workaround. And it only happened when a warning fired, so a consumer's CI parsed the document correctly until one file out of 368 tripped one. That is the same failure the `serverOnly.checked` field was added to remove — an automat unable to separate the normal case from the special case — one layer out, in the surface added to fix it.
+
+  A command that owns stdout for machine output now calls `claimStdoutForJson()` before doing any work that could log, and every record goes to stderr from then on. The stream decision itself moved into ONE place (`@voltro/logger`'s `stream.ts`, exported as `routeDiagnosticsToStderr`): the Effect surface and the direct surface each carried their own copy of `level === 'error' ? stderr : stdout`, and two copies of one rule is how the rule failed to change.
+
+  **Also fixed, same report:** the warning that started it was itself wrong. A `*.relations.ts` whose `relations(...)` map is EMPTY was reported as *"no relations(...) export found"* — pointing the reader at a missing export that is right there. `isRelationsSpec` rejects an empty map (correctly — there is nothing to register), but the caller could not tell that apart from a module with no export at all. It now says the map is empty and names the export.
+- **@voltro/cli, @voltro/voltro** — The SSR bundle build now externalises a bare specifier it cannot resolve instead of aborting, so an uninstalled OPTIONAL peer no longer makes `voltro build` impossible.
+
+  The SSR step runs with `ssr: { noExternal: true }` — inlining everything is what lets a production web image ship without a framework dependency tree — and that left no escape for a package that cannot be resolved at all. The commonest such package is an optional native peer reached through a library's Node entry:
+
+  ```
+  Rolldown failed to resolve import "canvas"
+    from ".../konva/lib/index-node.js"
+  ```
+
+  `konva`'s `main` is its Node build, which requires the optional native `canvas`; its `browser` field points at one that does not. An app that never renders to a canvas server-side has nothing to install.
+
+  A consumer measured that there was no way out from their side either, and each measurement is worth keeping: the import was ALREADY dynamic (rolldown must still resolve it to form the chunk), `renderMode: 'spa'` does not help (`.framework/app.tsx` imports every page statically for the router, so the module is in the SSR graph whatever the render mode), and an `ssr.external` passthrough in `app.config.ts` is not read. So `voltro build` — and with it the production image — was unavailable for that app.
+
+  The api serve bundle and the web start bundle already did exactly this; that plugin is esbuild's and this step is vite/rolldown, so it is the same probe behind a different interface. Framework packages (`@voltro/*`, `@effect/*`, `effect`) are never externalised, so the "needs nothing from node_modules" property still holds.
+
+  Every externalised specifier is NAMED in the `SSR bundle ready` line. Externalising is right for an uninstalled optional peer and wrong for a genuine missing dependency — it trades a loud build failure for a quiet runtime one — and only the reader can tell which, so it is reported rather than swallowed.
+- **@voltro/sql-mysql, @voltro/sql-sqlite, @voltro/sql-mssql, @voltro/sql-postgres, @voltro/database, @voltro/voltro** — A typed error thrown inside a mutation now reaches the client TYPED, on every dialect. It arrived as an untagged `Die` defect on mysql/mariadb, sqlite and mssql: `transactional()` settled its program with `runPromise`, which rejects with Effect's `FiberFailure` wrapper, and the wrapper copies `message` and a decorated `name` but nothing else — no `_tag`, no payload, no prototype. So the rpc encoder could not match the failure against the mutation descriptor's `error:` union:
+
+  ```
+  └─ ["error"] └─ ["_tag"] └─ is missing
+     Expected never, actual (FiberFailure) NotFoundError: …
+  ```
+
+  Framework mutations are auto-transactional, so this was EVERY typed mutation error in an app. Nothing failed — `defineMutation({ error: … })` compiled, the client's type still said `NotFoundError`, and the `error._tag === 'NotFoundError'` branch was simply never taken at runtime. Actions, which are not auto-transactional, marshalled correctly the whole time, which is what made the transaction the discriminator. A hand-rolled error class lost its fields and its `instanceof` too; only `message` survived, which is why a workaround built on `error.message` looked like it worked and hid this.
+
+  Postgres already had the unwrap, with a comment describing this exact consequence, and the three sibling dialects kept the broken call — so the fix is now one shared `settleTransactionExit` in `@voltro/database` that all four import, plus a parity test that fails if any store's `transactional()` reaches `runtime.runPromise` again. Reported by a consumer on MariaDB who verified it against 0.19.0 too, so it is not a 0.20.0 regression.
+
+### Internal (no consumer-facing effect)
+
+- **@voltro/runtime, @voltro/database, @voltro/protocol, @voltro/cli, @voltro/plugin-billing, @voltro/plugin-mail, @voltro/plugin-sso-saml, @voltro/plugin-storage** — Fourteen source files carried a LITERAL NUL byte — the house idiom for a composite map key, written as the raw character instead of an escape. That makes the file BINARY to every text tool: `grep` skips it entirely and reports nothing, which is indistinguishable from a clean file. It was found because a new guard test scanning for framework index names came back clean on `runtime/src/connectionVault.ts` — 1020 lines that every previous grep-based audit in this repo had also silently skipped, including the one looking for exactly the index name that file declares.
+
+  Replaced with the JavaScript escape for U+0000. Identical runtime value, files are text again. No behaviour change.
+
+---
+
 ## [0.20.0] — 2026-07-29
 
 ### ⚠ BREAKING

package/dist/index.js

@@ -1,23 +1,23 @@
 import { PgClient as e, PgClient as t } from "@effect/sql-pg";
-import { Cause as n, Config as r, Effect as i, Exit as a, Fiber as o, Layer as s, ManagedRuntime as c, Option as l, Redacted as u, Schedule as d, Stream as f } from "effect";
-import p from "pg";
-import { EventEmitter as m } from "node:events";
-import { createLogger as h } from "@voltro/logger";
-import { SqlClient as g, TransactionConnection as _ } from "@effect/sql/SqlClient";
-import { EagerCardinalityError as v, attachEagerLoads as y, attributionFields as b, attributionKey as x, claimPendingAttribution as S, compileEagerJson as C, compilePredicate as w, compileRawFragment as T, compileSelect as E, currentWriteAttribution as D, encodeRowForSchema as O, hasEagerLoads as k, isTableReactive as A, raiseChangeListenerCeiling as j, recordsTable as M, registerPendingAttribution as N, requireTable as P, runWithWriteAttribution as ee, runWriteRecorders as te, stampGeneratedId as F, stampGeneratedIds as I } from "@voltro/database";
+import { Config as n, Effect as r, Fiber as i, Layer as a, ManagedRuntime as o, Option as s, Redacted as c, Schedule as l, Stream as u } from "effect";
+import d from "pg";
+import { EventEmitter as f } from "node:events";
+import { createLogger as p } from "@voltro/logger";
+import { SqlClient as m, TransactionConnection as h } from "@effect/sql/SqlClient";
+import { EagerCardinalityError as g, attachEagerLoads as _, attributionFields as v, attributionKey as y, claimPendingAttribution as b, compileEagerJson as x, compilePredicate as S, compileRawFragment as C, compileSelect as w, currentWriteAttribution as T, encodeRowForSchema as E, hasEagerLoads as D, isTableReactive as O, raiseChangeListenerCeiling as k, recordsTable as A, registerPendingAttribution as j, requireTable as M, runWithWriteAttribution as N, runWriteRecorders as P, settleTransactionExit as ee, stampGeneratedId as F, stampGeneratedIds as I } from "@voltro/database";
 //#region src/sqlLayer.ts
 var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*$/, z = (t) => {
 	if (t.schema === void 0) return e.layerConfig({
-		host: r.succeed(t.host),
-		port: r.succeed(t.port),
-		username: r.succeed(t.username),
-		password: r.succeed(u.make(t.password)),
-		database: r.succeed(t.database),
-		...t.maxConnections === void 0 ? {} : { maxConnections: r.succeed(t.maxConnections) },
-		...t.ssl === void 0 ? {} : { ssl: r.succeed(L(t.ssl)) }
+		host: n.succeed(t.host),
+		port: n.succeed(t.port),
+		username: n.succeed(t.username),
+		password: n.succeed(c.make(t.password)),
+		database: n.succeed(t.database),
+		...t.maxConnections === void 0 ? {} : { maxConnections: n.succeed(t.maxConnections) },
+		...t.ssl === void 0 ? {} : { ssl: n.succeed(L(t.ssl)) }
 	});
 	if (!R.test(t.schema)) throw Error(`DB_SCHEMA '${t.schema}' is not a valid postgres identifier (expected ${R}).`);
-	let n = t.schema, a = i.acquireRelease(i.sync(() => new p.Pool({
+	let i = t.schema, a = r.acquireRelease(r.sync(() => new d.Pool({
 		host: t.host,
 		port: t.port,
 		user: t.username,
@@ -25,8 +25,8 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 		database: t.database,
 		...t.maxConnections === void 0 ? {} : { max: t.maxConnections },
 		...t.ssl === void 0 ? {} : { ssl: L(t.ssl) },
-		options: `-c search_path="${n}"`
-	})), (e) => i.promise(() => e.end()));
+		options: `-c search_path="${i}"`
+	})), (e) => r.promise(() => e.end()));
 	return e.layerFromPool({ acquire: a });
 }, B = (e) => {
 	let t = e.get("sslmode");
@@ -76,39 +76,39 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 }, G = (e) => {
 	let t = W(e);
 	return t !== void 0 && U.has(t);
-}, K = (e) => G(e) ? "retry" : "noRetry", q = ["json"], J = h({ scope: "voltro:postgres" }), Y = async (e) => {
-	let t = e.tracerLayer ? s.mergeAll(e.sqlLayer, e.tracerLayer) : e.sqlLayer, n = c.make(t), r = await n.runPromise(g), i = e.changeStrategy ?? "inline", a = new Z(r, n, i, e.cdcChannel ?? "framework_changes");
-	return i === "cdc" && await a.startCdcConsumer(), a;
+}, K = (e) => G(e) ? "retry" : "noRetry", q = ["json"], J = p({ scope: "voltro:postgres" }), Y = async (e) => {
+	let t = e.tracerLayer ? a.mergeAll(e.sqlLayer, e.tracerLayer) : e.sqlLayer, n = o.make(t), r = await n.runPromise(m), i = e.changeStrategy ?? "inline", s = new Z(r, n, i, e.cdcChannel ?? "framework_changes");
+	return i === "cdc" && await s.startCdcConsumer(), s;
 }, X = () => {
-	let e = D();
-	return e === void 0 ? (e) => e() : (t) => ee(e, t);
+	let e = T();
+	return e === void 0 ? (e) => e() : (t) => N(e, t);
 }, Z = class {
 	sql;
 	runtime;
 	changeStrategy;
 	cdcChannel;
-	emitter = new m();
+	emitter = new f();
 	cdcFiber = null;
 	inflightTxns = 0;
 	constructor(e, t, n, r) {
-		this.sql = e, this.runtime = t, this.changeStrategy = n, this.cdcChannel = r, j(this.emitter);
+		this.sql = e, this.runtime = t, this.changeStrategy = n, this.cdcChannel = r, k(this.emitter);
 	}
 	withNamespace(e) {
-		return e === null ? this : new ne(this, e);
+		return e === null ? this : new te(this, e);
 	}
 	async runInNamespace(e, t) {
 		this.inflightTxns++;
-		let n = X(), r = this.sql, a = this.sql.withTransaction(i.flatMap(i.serviceOption(_), (a) => {
-			if (l.isNone(a)) return i.fail(/* @__PURE__ */ Error("PostgresDataStore.runInNamespace: TransactionConnection missing."));
-			let o = a.value, s = i.provideService(r`SET LOCAL search_path TO ${r(e)}`, _, o), c = new Q(this, o);
-			return i.flatMap(s, () => i.tryPromise({
-				try: () => n(() => t(c)).then((e) => ({
+		let n = X(), i = this.sql, a = this.sql.withTransaction(r.flatMap(r.serviceOption(h), (a) => {
+			if (s.isNone(a)) return r.fail(/* @__PURE__ */ Error("PostgresDataStore.runInNamespace: TransactionConnection missing."));
+			let o = a.value, c = r.provideService(i`SET LOCAL search_path TO ${i(e)}`, h, o), l = new Q(this, o);
+			return r.flatMap(c, () => r.tryPromise({
+				try: () => n(() => t(l)).then((e) => ({
 					result: e,
-					view: c
+					view: l
 				})),
 				catch: (e) => e
 			}));
-		})).pipe(i.withSpan("store.namespace", { attributes: {
+		})).pipe(r.withSpan("store.namespace", { attributes: {
 			"db.system": "postgresql",
 			"db.operation": "namespace.transaction"
 		} }));
@@ -121,113 +121,113 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 	}
 	__postgresReplicationFriend = { runEffect: (e) => this.runtime.runPromise(e) };
 	async executeQuery(e, t) {
-		let n = E(e, this.sql), r = t ? i.provideService(n, _, t) : n;
-		return this.runtime.runPromise(r);
+		let n = w(e, this.sql), i = t ? r.provideService(n, h, t) : n;
+		return this.runtime.runPromise(i);
 	}
-	async executeInsert(e, t, n, r) {
+	async executeInsert(e, t, n, i) {
 		t = F(e, t);
-		let a = this.sql, o = a`INSERT INTO ${a(e)} ${a.insert(O(t, e, q))} RETURNING *`, s = n ? i.provideService(o, _, n) : o, c = (await this.runtime.runPromise(s))[0];
+		let a = this.sql, o = a`INSERT INTO ${a(e)} ${a.insert(E(t, e, q))} RETURNING *`, s = n ? r.provideService(o, h, n) : o, c = (await this.runtime.runPromise(s))[0];
 		if (!c) throw Error(`PostgresDataStore.insert: no row returned for table '${e}'`);
 		return await this.routeEvent({
 			table: e,
 			op: "insert",
 			old: null,
 			new: c
-		}, r, n), c;
+		}, i, n), c;
 	}
-	async executeUpdate(e, t, n, r, a) {
-		let o = this.sql, s = o`UPDATE ${o(e)} SET ${o.update(O(n, e, q))} WHERE ${o("id")} = ${t} RETURNING *`, c = r ? i.provideService(s, _, r) : s, l = (await this.runtime.runPromise(c))[0];
+	async executeUpdate(e, t, n, i, a) {
+		let o = this.sql, s = o`UPDATE ${o(e)} SET ${o.update(E(n, e, q))} WHERE ${o("id")} = ${t} RETURNING *`, c = i ? r.provideService(s, h, i) : s, l = (await this.runtime.runPromise(c))[0];
 		return l ? (await this.routeEvent({
 			table: e,
 			op: "update",
 			old: null,
 			new: l
-		}, a, r), l) : null;
+		}, a, i), l) : null;
 	}
-	async executeUpsert(e, t, n, r, a) {
+	async executeUpsert(e, t, n, i, a) {
 		let o = this.sql;
 		if (typeof n.update == "function") {
-			let s = n.update, c = n.conflictColumns.map((e) => o`${o(e)} = ${t[e]}`), u = (n) => {
-				let r = o`SELECT * FROM ${o(e)} WHERE ${o.and(c)} LIMIT 1 FOR UPDATE`;
-				return this.runtime.runPromise(i.flatMap(i.provideService(r, _, n), (r) => i.promise(() => r[0] ? this.executeUpdate(e, r[0].id, s(r[0]), n, a).then((e) => e) : this.executeInsert(e, t, n, a))));
+			let c = n.update, u = n.conflictColumns.map((e) => o`${o(e)} = ${t[e]}`), d = (n) => {
+				let i = o`SELECT * FROM ${o(e)} WHERE ${o.and(u)} LIMIT 1 FOR UPDATE`;
+				return this.runtime.runPromise(r.flatMap(r.provideService(i, h, n), (i) => r.promise(() => i[0] ? this.executeUpdate(e, i[0].id, c(i[0]), n, a).then((e) => e) : this.executeInsert(e, t, n, a))));
 			};
-			if (r) return u(r);
+			if (i) return d(i);
 			this.inflightTxns++;
 			try {
-				let e = i.suspend(() => this.sql.withTransaction(i.flatMap(i.serviceOption(_), (e) => l.isNone(e) ? i.fail(/* @__PURE__ */ Error("PostgresDataStore.upsert: TransactionConnection missing.")) : i.promise(() => u(e.value))))), t = d.exponential("10 millis").pipe(d.compose(d.recurs(3)), d.whileInput(G));
-				return await this.runtime.runPromise(e.pipe(i.retry(t)));
+				let e = r.suspend(() => this.sql.withTransaction(r.flatMap(r.serviceOption(h), (e) => s.isNone(e) ? r.fail(/* @__PURE__ */ Error("PostgresDataStore.upsert: TransactionConnection missing.")) : r.promise(() => d(e.value))))), t = l.exponential("10 millis").pipe(l.compose(l.recurs(3)), l.whileInput(G));
+				return await this.runtime.runPromise(e.pipe(r.retry(t)));
 			} finally {
 				this.inflightTxns--;
 			}
 		}
-		let s = n.conflictColumns.map((e) => o`${o(e)}`), c = Object.keys(t).filter((e) => t[e] !== void 0), u = n.update === void 0 ? c.filter((e) => e !== "id" && !n.conflictColumns.includes(e)) : n.update, f = u.length > 0 ? o.csv(u.map((e) => o`${o(e)} = EXCLUDED.${o(e)}`)) : o`${o(n.conflictColumns[0])} = EXCLUDED.${o(n.conflictColumns[0])}`, p = o`INSERT INTO ${o(e)} ${o.insert(O(t, e, q))} ON CONFLICT (${o.csv(s)}) DO UPDATE SET ${f} RETURNING *`, m = r ? i.provideService(p, _, r) : p, h = (await this.runtime.runPromise(m))[0];
-		if (!h) throw Error(`PostgresDataStore.upsert: no row returned for table '${e}'`);
+		let c = n.conflictColumns.map((e) => o`${o(e)}`), u = Object.keys(t).filter((e) => t[e] !== void 0), d = n.update === void 0 ? u.filter((e) => e !== "id" && !n.conflictColumns.includes(e)) : n.update, f = d.length > 0 ? o.csv(d.map((e) => o`${o(e)} = EXCLUDED.${o(e)}`)) : o`${o(n.conflictColumns[0])} = EXCLUDED.${o(n.conflictColumns[0])}`, p = o`INSERT INTO ${o(e)} ${o.insert(E(t, e, q))} ON CONFLICT (${o.csv(c)}) DO UPDATE SET ${f} RETURNING *`, m = i ? r.provideService(p, h, i) : p, g = (await this.runtime.runPromise(m))[0];
+		if (!g) throw Error(`PostgresDataStore.upsert: no row returned for table '${e}'`);
 		{
-			let n = t.id !== void 0 && t.id === h.id ? "insert" : "update";
+			let n = t.id !== void 0 && t.id === g.id ? "insert" : "update";
 			await this.routeEvent({
 				table: e,
 				op: n,
 				old: null,
-				new: h
-			}, a, r);
+				new: g
+			}, a, i);
 		}
-		return h;
+		return g;
 	}
-	async executeInsertIgnore(e, t, n, r, a) {
+	async executeInsertIgnore(e, t, n, i, a) {
 		t = F(e, t);
-		let o = this.sql, s = n.conflictColumns.map((e) => o`${o(e)}`), c = o`INSERT INTO ${o(e)} ${o.insert(O(t, e, q))} ON CONFLICT (${o.csv(s)}) DO NOTHING RETURNING *`, l = r ? i.provideService(c, _, r) : c, u = (await this.runtime.runPromise(l))[0];
+		let o = this.sql, s = n.conflictColumns.map((e) => o`${o(e)}`), c = o`INSERT INTO ${o(e)} ${o.insert(E(t, e, q))} ON CONFLICT (${o.csv(s)}) DO NOTHING RETURNING *`, l = i ? r.provideService(c, h, i) : c, u = (await this.runtime.runPromise(l))[0];
 		if (u) return await this.routeEvent({
 			table: e,
 			op: "insert",
 			old: null,
 			new: u
-		}, a, r), u;
-		let d = n.conflictColumns.map((e) => o`${o(e)} = ${t[e]}`), f = o`SELECT * FROM ${o(e)} WHERE ${o.and(d)} LIMIT 1`, p = r ? i.provideService(f, _, r) : f, m = await this.runtime.runPromise(p);
+		}, a, i), u;
+		let d = n.conflictColumns.map((e) => o`${o(e)} = ${t[e]}`), f = o`SELECT * FROM ${o(e)} WHERE ${o.and(d)} LIMIT 1`, p = i ? r.provideService(f, h, i) : f, m = await this.runtime.runPromise(p);
 		if (!m[0]) throw Error(`PostgresDataStore.insertIgnore: the insert was skipped as a conflict, but no existing row matches conflictColumns [${n.conflictColumns.join(", ")}] on '${e}'. A DIFFERENT unique constraint fired — a second unique index, or the primary key when you named something else. insertIgnore models ONE conflict target: name the columns of the constraint that actually collides, or handle the unique violation yourself.`);
 		return m[0];
 	}
-	async executeInsertMany(e, t, n, r) {
+	async executeInsertMany(e, t, n, i) {
 		if (t = I(e, t), t.length === 0) return [];
-		let a = this.sql, o = a`INSERT INTO ${a(e)} ${a.insert(t.map((t) => O(t, e, q)))} RETURNING *`, s = n ? i.provideService(o, _, n) : o, c = await this.runtime.runPromise(s);
+		let a = this.sql, o = a`INSERT INTO ${a(e)} ${a.insert(t.map((t) => E(t, e, q)))} RETURNING *`, s = n ? r.provideService(o, h, n) : o, c = await this.runtime.runPromise(s);
 		for (let t of c) await this.routeEvent({
 			table: e,
 			op: "insert",
 			old: null,
 			new: t
-		}, r, n);
+		}, i, n);
 		return c;
 	}
-	async executePatchJson(e, t, n, r, a, o) {
-		let s = this.sql, c = n.split("."), l = c[0], u = c.slice(1), d = JSON.stringify(r ?? null), f = u.length === 0 ? s`${s(l)} = COALESCE(${s(l)}, '{}'::jsonb) || ${d}::jsonb` : s`${s(l)} = jsonb_set(COALESCE(${s(l)}, '{}'::jsonb), ${`{${u.join(",")}}`}, ${d}::jsonb, true)`, p = s`UPDATE ${s(e)} SET ${f} WHERE ${s("id")} = ${t} RETURNING *`, m = a ? i.provideService(p, _, a) : p, h = (await this.runtime.runPromise(m))[0];
-		return h ? (await this.routeEvent({
+	async executePatchJson(e, t, n, i, a, o) {
+		let s = this.sql, c = n.split("."), l = c[0], u = c.slice(1), d = JSON.stringify(i ?? null), f = u.length === 0 ? s`${s(l)} = COALESCE(${s(l)}, '{}'::jsonb) || ${d}::jsonb` : s`${s(l)} = jsonb_set(COALESCE(${s(l)}, '{}'::jsonb), ${`{${u.join(",")}}`}, ${d}::jsonb, true)`, p = s`UPDATE ${s(e)} SET ${f} WHERE ${s("id")} = ${t} RETURNING *`, m = a ? r.provideService(p, h, a) : p, g = (await this.runtime.runPromise(m))[0];
+		return g ? (await this.routeEvent({
 			table: e,
 			op: "update",
 			old: null,
-			new: h
-		}, o, a), h) : null;
+			new: g
+		}, o, a), g) : null;
 	}
-	async executeDelete(e, t, n, r) {
-		let a = this.sql, o = a`DELETE FROM ${a(e)} WHERE ${a("id")} = ${t} RETURNING *`, s = n ? i.provideService(o, _, n) : o, c = (await this.runtime.runPromise(s))[0];
+	async executeDelete(e, t, n, i) {
+		let a = this.sql, o = a`DELETE FROM ${a(e)} WHERE ${a("id")} = ${t} RETURNING *`, s = n ? r.provideService(o, h, n) : o, c = (await this.runtime.runPromise(s))[0];
 		return c ? (await this.routeEvent({
 			table: e,
 			op: "delete",
 			old: c,
 			new: null
-		}, r, n), !0) : !1;
+		}, i, n), !0) : !1;
 	}
 	async appendInTxn(e, t, n) {
-		let r = this.sql, a = r`INSERT INTO ${r(e)} ${r.insert(O(t, e, q))}`;
-		await this.runtime.runPromise(n ? i.provideService(a, _, n) : a);
+		let i = this.sql, a = i`INSERT INTO ${i(e)} ${i.insert(E(t, e, q))}`;
+		await this.runtime.runPromise(n ? r.provideService(a, h, n) : a);
 	}
-	async maxInTxn(e, t, n, r) {
-		let a = this.sql, o = Object.entries(n).map(([e, t]) => a`${a(e)} = ${t}`), s = a`SELECT MAX(${a(t)}) AS ${a("m")} FROM ${a(e)} WHERE ${a.and(o)}`, c = (await this.runtime.runPromise(r ? i.provideService(s, _, r) : s))[0]?.m;
+	async maxInTxn(e, t, n, i) {
+		let a = this.sql, o = Object.entries(n).map(([e, t]) => a`${a(e)} = ${t}`), s = a`SELECT MAX(${a(t)}) AS ${a("m")} FROM ${a(e)} WHERE ${a.and(o)}`, c = (await this.runtime.runPromise(i ? r.provideService(s, h, i) : s))[0]?.m;
 		return c == null ? null : Number(c);
 	}
 	async routeEvent(e, t, n = null) {
 		if (e = {
-			...b(),
+			...v(),
 			...e
-		}, M(e.table) && await te({
+		}, A(e.table) && await P({
 			append: (e, t) => this.appendInTxn(e, t, n),
 			maxOf: (e, t, r) => this.maxInTxn(e, t, r, n)
 		}, {
@@ -237,10 +237,10 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 			prev: e.old,
 			traceId: e.traceId,
 			subjectId: e.subjectId
-		}), A(e.table)) {
+		}), O(e.table)) {
 			if (this.changeStrategy === "cdc") {
 				let t = (e.op === "delete" ? e.old : e.new)?.id;
-				t != null && N(x(e.table, e.op, t), {
+				t != null && j(y(e.table, e.op, t), {
 					...e.traceId === void 0 ? {} : { traceId: e.traceId },
 					...e.subjectId === void 0 ? {} : { subjectId: e.subjectId }
 				});
@@ -253,20 +253,20 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 		return this.runWithEager(e, null);
 	}
 	raw(e, t) {
-		let n = T(e, this.sql);
+		let n = C(e, this.sql);
 		return this.runtime.runPromise(n);
 	}
 	async runWithEager(e, t) {
-		if (!k(e)) return this.executeQuery(e, t);
-		let n = C(e, this.sql, "postgres");
+		if (!D(e)) return this.executeQuery(e, t);
+		let n = x(e, this.sql, "postgres");
 		if (n !== null) try {
-			let e = t ? i.provideService(n.fragment, _, t) : n.fragment, r = await this.runtime.runPromise(e);
-			return n.decode(r);
+			let e = t ? r.provideService(n.fragment, h, t) : n.fragment, i = await this.runtime.runPromise(e);
+			return n.decode(i);
 		} catch (e) {
-			if (e instanceof v) throw e;
+			if (e instanceof g) throw e;
 			J.warn("postgres JSON-agg eager-load failed; falling back to walker", { err: e });
 		}
-		return y(await this.executeQuery(e, t), e.eager, e.sourceTable ?? P(e.table), (e) => this.executeQuery(e, t));
+		return _(await this.executeQuery(e, t), e.eager, e.sourceTable ?? M(e.table), (e) => this.executeQuery(e, t));
 	}
 	getInternalRunWithEager() {
 		return (e, t) => this.runWithEager(e, t);
@@ -292,24 +292,24 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 	async deleteMany(e, t) {
 		return X()(() => this.executeDeleteMany(e, t, null, null));
 	}
-	async executeUpdateMany(e, t, n, r, a) {
-		let o = this.sql, s = w(n.where, o), c = o`UPDATE ${o(e)} SET ${o.update(O(t, e, q))} WHERE ${s} RETURNING *`, l = r ? i.provideService(c, _, r) : c, u = await this.runtime.runPromise(l);
+	async executeUpdateMany(e, t, n, i, a) {
+		let o = this.sql, s = S(n.where, o), c = o`UPDATE ${o(e)} SET ${o.update(E(t, e, q))} WHERE ${s} RETURNING *`, l = i ? r.provideService(c, h, i) : c, u = await this.runtime.runPromise(l);
 		for (let t of u) await this.routeEvent({
 			table: e,
 			op: "update",
 			old: null,
 			new: t
-		}, a, r);
+		}, a, i);
 		return u.length;
 	}
-	async executeDeleteMany(e, t, n, r) {
-		let a = this.sql, o = w(t.where, a), s = a`DELETE FROM ${a(e)} WHERE ${o} RETURNING *`, c = n ? i.provideService(s, _, n) : s, l = await this.runtime.runPromise(c);
+	async executeDeleteMany(e, t, n, i) {
+		let a = this.sql, o = S(t.where, a), s = a`DELETE FROM ${a(e)} WHERE ${o} RETURNING *`, c = n ? r.provideService(s, h, n) : s, l = await this.runtime.runPromise(c);
 		for (let t of l) await this.routeEvent({
 			table: e,
 			op: "delete",
 			old: t,
 			new: null
-		}, r, n);
+		}, i, n);
 		return l.length;
 	}
 	upsert(e, t, n) {
@@ -353,28 +353,27 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 	}
 	async transactional(e) {
 		this.inflightTxns++;
-		let t = X(), r = 0, o = i.suspend(() => {
-			let n = ++r;
-			return this.sql.withTransaction(i.flatMap(i.serviceOption(_), (r) => {
-				if (l.isNone(r)) return i.fail(/* @__PURE__ */ Error("PostgresDataStore.transactional: TransactionConnection unexpectedly missing inside withTransaction."));
-				let a = new Q(this, r.value);
-				return i.tryPromise({
+		let t = X(), n = 0, i = r.suspend(() => {
+			let i = ++n;
+			return this.sql.withTransaction(r.flatMap(r.serviceOption(h), (n) => {
+				if (s.isNone(n)) return r.fail(/* @__PURE__ */ Error("PostgresDataStore.transactional: TransactionConnection unexpectedly missing inside withTransaction."));
+				let a = new Q(this, n.value);
+				return r.tryPromise({
 					try: () => t(() => e(a)).then((e) => ({
 						result: e,
 						view: a,
-						attempt: n
+						attempt: i
 					})),
 					catch: (e) => e
 				});
 			}));
-		}), s = d.exponential("10 millis").pipe(d.compose(d.recurs(3)), d.whileInput(G)), c = o.pipe(i.retry(s), i.withSpan("store.transactional", { attributes: {
+		}), a = l.exponential("10 millis").pipe(l.compose(l.recurs(3)), l.whileInput(G)), o = i.pipe(r.retry(a), r.withSpan("store.transactional", { attributes: {
 			"db.system": "postgresql",
 			"db.operation": "transaction"
 		} }));
 		try {
-			let e = await this.runtime.runPromiseExit(c);
-			if (a.isSuccess(e)) return e.value.view.commitEvents(), e.value.result;
-			throw n.squash(e.cause);
+			let e = ee(await this.runtime.runPromiseExit(o));
+			return e.view.commitEvents(), e.result;
 		} finally {
 			this.inflightTxns--;
 		}
@@ -388,8 +387,8 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 		return this.changeStrategy === "cdc" ? "fleet" : "local";
 	}
 	injectExternalChange(e) {
-		if (!A(e.table)) return;
-		let t = (e.op === "delete" ? e.old : e.new)?.id, n = t == null ? void 0 : S(x(e.table, e.op, t));
+		if (!O(e.table)) return;
+		let t = (e.op === "delete" ? e.old : e.new)?.id, n = t == null ? void 0 : b(y(e.table, e.op, t));
 		this.emitter.emit("change", {
 			...n,
 			...e,
@@ -408,7 +407,7 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 				inflight: this.inflightTxns
 			});
 		}
-		this.cdcFiber &&= (await this.runtime.runPromise(o.interrupt(this.cdcFiber)), null), await this.runtime.dispose();
+		this.cdcFiber &&= (await this.runtime.runPromise(i.interrupt(this.cdcFiber)), null), await this.runtime.dispose();
 	}
 	async ping() {
 		await this.runtime.runPromise(this.sql`SELECT 1`);
@@ -422,7 +421,7 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 				J.warn("cdc: bad payload", { channel: this.cdcChannel }, e);
 			}
 		};
-		this.cdcFiber = this.runtime.runFork(e.pipe(f.runForEach((e) => i.sync(() => n(e)))));
+		this.cdcFiber = this.runtime.runFork(e.pipe(u.runForEach((e) => r.sync(() => n(e)))));
 	}
 }, Q = class {
 	parent;
@@ -478,7 +477,7 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 			this.events.length = 0;
 		}
 	}
-}, ne = class {
+}, te = class {
 	parent;
 	namespace;
 	constructor(e, t) {
@@ -532,34 +531,34 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 			return r === void 0 ? Promise.reject(/* @__PURE__ */ Error("PostgresNamespaceView.raw: underlying store has no raw()")) : r(e, t);
 		});
 	}
-}, $ = (e) => e.__postgresReplicationFriend ?? null, re = (e, t) => {
+}, $ = (e) => e.__postgresReplicationFriend ?? null, ne = (e, t) => {
 	let [n, r] = e.split("/"), [i, a] = t.split("/");
 	if (!n || !r || !i || !a) throw Error(`postgres LSN compare: invalid format (${e} vs ${t})`);
 	let o = parseInt(n, 16), s = parseInt(r, 16), c = parseInt(i, 16);
 	return o === c ? s - parseInt(a, 16) : o - c;
-}, ie = () => ({
+}, re = () => ({
 	async capturePrimaryPosition(e) {
 		let t = $(e);
 		if (t === null) throw Error("postgresReplicationAdapter: primary is not a PostgresDataStore (missing __postgresReplicationFriend). Pass the postgres store directly.");
-		return t.runEffect(i.gen(function* () {
-			let e = (yield* (yield* g)`SELECT pg_current_wal_lsn()::text AS lsn`)[0]?.lsn;
-			return typeof e == "string" ? e : yield* i.die("postgres did not return a WAL LSN");
+		return t.runEffect(r.gen(function* () {
+			let e = (yield* (yield* m)`SELECT pg_current_wal_lsn()::text AS lsn`)[0]?.lsn;
+			return typeof e == "string" ? e : yield* r.die("postgres did not return a WAL LSN");
 		}));
 	},
 	async probeReplicaPosition(e) {
 		let t = $(e);
 		if (t === null) throw Error("postgresReplicationAdapter: replica is not a PostgresDataStore.");
-		return t.runEffect(i.gen(function* () {
-			let e = (yield* (yield* g)`
+		return t.runEffect(r.gen(function* () {
+			let e = (yield* (yield* m)`
           SELECT COALESCE(pg_last_wal_replay_lsn()::text, pg_current_wal_lsn()::text) AS lsn
         `)[0]?.lsn;
-			return typeof e == "string" ? e : yield* i.die("postgres did not return a replay LSN");
+			return typeof e == "string" ? e : yield* r.die("postgres did not return a replay LSN");
 		}));
 	},
 	compare(e, t) {
-		return re(t, e) >= 0 ? "caught-up" : "behind";
+		return ne(t, e) >= 0 ? "caught-up" : "behind";
 	}
-}), ae = {
+}), ie = {
 	id: "postgres",
 	makeSqlLayer: (e) => H(e),
 	makeStore: (e) => Y(e),
@@ -567,4 +566,4 @@ var L = (e) => e ? { rejectUnauthorized: !1 } : !1, R = /^[A-Za-z_][A-Za-z0-9_]*
 	retryFilter: K
 };
 //#endregion
-export { e as PgClient, V as connectionFromConfig, Y as makePostgresDataStore, z as makePostgresSqlLayer, H as makePostgresSqlLayerFromConfig, ae as postgresDialect, ie as postgresReplicationAdapter, K as postgresRetryFilter };
+export { e as PgClient, V as connectionFromConfig, Y as makePostgresDataStore, z as makePostgresSqlLayer, H as makePostgresSqlLayerFromConfig, ie as postgresDialect, re as postgresReplicationAdapter, K as postgresRetryFilter };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voltro/sql-postgres",
-  "version": "0.20.0",
+  "version": "0.20.2",
   "description": "PostgreSQL dialect adapter for Voltro's cross-dialect DataStore (LISTEN/NOTIFY reactivity, logical-replication CDC).",
   "keywords": [
     "voltro",
@@ -34,8 +34,8 @@
   "dependencies": {
     "@effect/sql": "^0.51.1",
     "@effect/sql-pg": "^0.52.1",
-    "@voltro/database": "0.20.0",
-    "@voltro/logger": "0.20.0",
+    "@voltro/database": "0.20.2",
+    "@voltro/logger": "0.20.2",
     "pg": "^8.22.0"
   },
   "peerDependencies": {