orez-lite 0.12.14 → 0.12.16

package/README.md

@@ -86,3 +86,21 @@ CLI:
 ```sh
 orez-lite dev -- node server.js
 ```
+
+## Cloudflare data-object status
+
+The Cloudflare data worker forwards `GET /<namespace>/_orez/status` to the
+namespace's data Durable Object. The request must present the configured
+`OREZ_DO_WRITE_BUDGET_ADMIN_TOKEN` as `x-orez-admin-token` or a bearer token.
+The response identifies the namespace and object, reports database size,
+application SQL reader/writer queue depth, recent write-grant wait p50/p99/max,
+SQL rows read and written, and request/session counters.
+
+These measurements are bounded, in-memory values since the current object boot.
+They reset on eviction and do not add storage writes. The existing environment
+variable name is retained for deployed compatibility even though the token now
+protects the broader status route as well as write-budget controls.
+
+Cloudflare namespace backup summaries also include `tableRows`, the row count
+observed for every exported table during the existing streaming scan. Consumers
+can persist fleet profiles without issuing a second set of table reads.

package/dist/cf-deploy/migration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migration.d.ts","sourceRoot":"","sources":["../../src/cf-deploy/migration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAcnD,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,OAAO,CAAA;QAChB,eAAe,EAAE,MAAM,CAAA;QACvB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;IACF,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,oCAAoC,GAC5C;IACE,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,CAAA;CACtB,GACD;IACE,sEAAsE;IACtE,IAAI,EAAE,QAAQ,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5D,cAAc,CAAC,EAAE,0BAA0B,EAAE,CAAA;CAC9C,CAAA;AAEL,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,oCAAoC,GAC1C,MAAM,CAk0BR"}
+{"version":3,"file":"migration.d.ts","sourceRoot":"","sources":["../../src/cf-deploy/migration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAcnD,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,OAAO,CAAA;QAChB,eAAe,EAAE,MAAM,CAAA;QACvB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAC,CAAA;IACF,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,MAAM,MAAM,oCAAoC,GAC5C;IACE,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,CAAA;CACtB,GACD;IACE,sEAAsE;IACtE,IAAI,EAAE,QAAQ,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC5D,cAAc,CAAC,EAAE,0BAA0B,EAAE,CAAA;CAC9C,CAAA;AAEL,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,oCAAoC,GAC1C,MAAM,CA65BR"}

package/dist/cf-deploy/migration.js

@@ -307,10 +307,54 @@ function migrationStatementTargetTable(sql) {
 }
 
 function appliedHasStatement(applied, baseId) {
-  for (const id of applied) {
-    if (id === baseId || id.startsWith(baseId + ':')) return true
+  return applied.has(baseId)
+}
+
+function knownMigrationStatementIds() {
+  const ids = new Set()
+  for (const [index, statement] of nativeSqlStatements.entries()) {
+    const item = typeof statement === 'string'
+      ? { id: 'statement-' + index, sql: statement }
+      : statement
+    if (!item || typeof item.sql !== 'string' || !item.sql.trim()) continue
+    ids.add(typeof item.id === 'string' && item.id ? item.id : 'statement-' + index)
   }
-  return false
+  return [...ids]
+}
+
+const migrationStatementIds = knownMigrationStatementIds()
+
+// The ledger grows with deployment history, while this worker can only act on
+// the statement ids compiled into THIS bundle. Probe those ids through the
+// ledger primary key in bounded packs instead of scanning every historical row
+// once for prepare, once per migration file, and once again for finalize.
+async function readAppliedMigrationStatements(tx) {
+  const applied = new Set()
+  const statementIdsPerQuery = 32
+  for (let offset = 0; offset < migrationStatementIds.length; offset += statementIdsPerQuery) {
+    const ids = migrationStatementIds.slice(offset, offset + statementIdsPerQuery)
+    const params = []
+    for (const id of ids) params.push(id, id + ':', id + ';')
+    const rows = await tx.query(
+      'WITH expected(baseId, lowerId, upperId) AS (VALUES ' +
+        ids.map(() => '(?, ?, ?)').join(', ') +
+        ') SELECT expected.baseId FROM expected WHERE EXISTS (' +
+        'SELECT 1 FROM ' + quoteIdentifier(migrationTable) +
+        ' WHERE id = expected.baseId OR (id >= expected.lowerId AND id < expected.upperId)' +
+        ' LIMIT 1)',
+      params,
+    )
+    for (const row of rows) applied.add(row.baseId)
+  }
+  return applied
+}
+
+async function deleteAppliedMigrationStatement(tx, baseId) {
+  await tx.exec(
+    'DELETE FROM ' + quoteIdentifier(migrationTable) +
+      ' WHERE id = ? OR (id >= ? AND id < ?)',
+    [baseId, baseId + ':', baseId + ';'],
+  )
 }
 
 // A migration can create scratch/candidate/guard tables, use them, and drop
@@ -526,25 +570,27 @@ async function reconcilePhantomLedger(tx, applied) {
     await tx.exec('DROP TABLE IF EXISTS ' + quoteIdentifier('__new_' + table))
   }
   for (const baseId of resurrect) {
-    for (const id of [...applied]) {
-      if (id !== baseId && !id.startsWith(baseId + ':')) continue
-      await tx.exec(
-        'DELETE FROM ' + quoteIdentifier(migrationTable) + ' WHERE id = ?',
-        [id],
-      )
-      applied.delete(id)
-    }
+    await deleteAppliedMigrationStatement(tx, baseId)
+    applied.delete(baseId)
   }
 }
 
-async function applyNativeSchema(tx, instance) {
-  await tx.exec(
-    'CREATE TABLE IF NOT EXISTS ' + quoteIdentifier(migrationTable) +
-      ' (id TEXT PRIMARY KEY, applied_at INTEGER NOT NULL)',
-  )
-  const appliedRows = await tx.query('SELECT id FROM ' + quoteIdentifier(migrationTable))
-  const applied = new Set(appliedRows.map((row) => row.id))
-  await reconcilePhantomLedger(tx, applied)
+async function applyNativeSchema(tx, instance, {
+  applied = null,
+  prepare = true,
+  migrationFile = null,
+  finalize = true,
+} = {}) {
+  if (prepare) {
+    await tx.exec(
+      'CREATE TABLE IF NOT EXISTS ' + quoteIdentifier(migrationTable) +
+        ' (id TEXT PRIMARY KEY, applied_at INTEGER NOT NULL)',
+    )
+    applied = await readAppliedMigrationStatements(tx)
+  } else if (!(applied instanceof Set)) {
+    throw new Error('migration ledger state is required after prepare')
+  }
+  if (prepare) await reconcilePhantomLedger(tx, applied)
   // register BEFORE the statements, not only after them. a cdc trigger whose
   // _orez_cdc_tables row is missing is invisible to beginSchemaChange, which
   // skips unregistered tables, so it never suspends capture and the next
@@ -555,9 +601,8 @@ async function applyNativeSchema(tx, instance) {
   // still runs and still owns publication; this one only heals. on a fresh
   // namespace every table is absent, ensureTable returns false for each, and
   // this is a no-op beyond creating the cdc bookkeeping tables early.
-  await tx.registerTables(publicTables())
-  const appliedIds = [...applied]
-  const appliedStatementIds = new Set()
+  if (prepare) await tx.registerTables(publicTables())
+  const appliedStatementIds = new Set(applied)
   const supersededStatementIds = new Set()
   for (const [index, statement] of nativeSqlStatements.entries()) {
     const item = typeof statement === 'string'
@@ -565,16 +610,30 @@ async function applyNativeSchema(tx, instance) {
       : statement
     if (!item || typeof item.sql !== 'string' || !item.sql.trim()) continue
     const baseId = typeof item.id === 'string' && item.id ? item.id : 'statement-' + index
-    if (
-      applied.has(baseId) ||
-      appliedIds.some((appliedId) => appliedId.startsWith(baseId + ':'))
-    ) {
-      appliedStatementIds.add(baseId)
-    }
     for (const id of Array.isArray(item.supersedes) ? item.supersedes : []) {
       supersededStatementIds.add(id)
     }
   }
+  const pendingMigrationFiles = []
+  for (const [index, statement] of nativeSqlStatements.entries()) {
+    const item = typeof statement === 'string'
+      ? { id: 'statement-' + index, sql: statement }
+      : statement
+    if (!item || typeof item.sql !== 'string' || !item.sql.trim()) continue
+    if (!item.sql.split('\\n').some((line) => {
+      const trimmed = line.trim()
+      return trimmed.length > 0 && !trimmed.startsWith('--')
+    })) continue
+    const baseId = typeof item.id === 'string' && item.id ? item.id : 'statement-' + index
+    if (supersededStatementIds.has(baseId) || appliedStatementIds.has(baseId)) continue
+    const file = baseId.split(':')[0]
+    if (!pendingMigrationFiles.includes(file)) pendingMigrationFiles.push(file)
+  }
+  const selectedMigrationFile =
+    migrationFile === null && prepare ? (pendingMigrationFiles[0] ?? null) : migrationFile
+  const remainingMigrationFiles = pendingMigrationFiles.filter(
+    (file) => file !== selectedMigrationFile,
+  )
   // CREATE TABLE IF NOT EXISTS is a SILENT NO-OP against a table that already
   // exists in an older shape, so every column that only ever appears inside a
   // CREATE definition is unreachable on a namespace whose table predates it,
@@ -587,7 +646,7 @@ async function applyNativeSchema(tx, instance) {
   // failure compensation below, so at the start of every retry the CREATE is
   // unledgered and the pass skipped it. converging here is independent of
   // ledger state, which is the only thing that made it reachable at all.
-  for (const [index, statement] of nativeSqlStatements.entries()) {
+  for (const [index, statement] of prepare ? nativeSqlStatements.entries() : []) {
     const item = typeof statement === 'string' ? null : statement
     if (!item || !Array.isArray(item.declaredColumns)) continue
     if (typeof item.sql !== 'string') continue
@@ -650,6 +709,9 @@ async function applyNativeSchema(tx, instance) {
       })) continue
       const baseId = typeof item.id === 'string' && item.id ? item.id : 'statement-' + index
       if (supersededStatementIds.has(baseId)) continue
+      if (selectedMigrationFile === null || baseId.split(':')[0] !== selectedMigrationFile) {
+        continue
+      }
       const id = baseId + ':' + hashMigrationSql(item.sql)
       // migration statement ids are immutable execution identities. the SQL hash
       // records which source version ran, but editing an old migration must never
@@ -696,46 +758,51 @@ async function applyNativeSchema(tx, instance) {
           )
         }
       }
-      if (!applied.has(id)) {
+      if (!appliedStatementIds.has(baseId)) {
         await tx.exec(
           'INSERT INTO ' + quoteIdentifier(migrationTable) + ' (id, applied_at) VALUES (?, ?)',
           [id, Date.now()],
         )
-        applied.add(id)
+        applied.add(baseId)
         appliedStatementIds.add(baseId)
-        insertedThisRun.push(id)
+        insertedThisRun.push({ baseId, id })
+      }
+    }
+    if (finalize && remainingMigrationFiles.length === 0) {
+      await assertExpectedSchema(tx)
+      await tx.exec(
+        'CREATE TABLE IF NOT EXISTS _zero_schema_tables (name TEXT PRIMARY KEY, schema_json TEXT NOT NULL)',
+      )
+      try {
+        for (const statement of schemaMetadataStatements()) {
+          await tx.exec(statement.sql, statement.params)
+        }
+        await tx.registerTables(publicTables())
+      } catch (error) {
+        // publication runs against every registered table, so a table this schema
+        // no longer has still gets queried here. without the label the error is
+        // indistinguishable from a migration statement failing.
+        throw new Error(
+          'schema publication failed on instance ' + instance + ': ' +
+            (error && error.message ? error.message : String(error)),
+          { cause: error },
+        )
       }
     }
   } catch (error) {
-    for (const insertedId of insertedThisRun) {
+    for (const inserted of insertedThisRun) {
       try {
         await tx.exec(
           'DELETE FROM ' + quoteIdentifier(migrationTable) + ' WHERE id = ?',
-          [insertedId],
+          [inserted.id],
         )
       } catch {}
+      applied.delete(inserted.baseId)
+      appliedStatementIds.delete(inserted.baseId)
     }
     throw error
   }
-  await assertExpectedSchema(tx)
-  await tx.exec(
-    'CREATE TABLE IF NOT EXISTS _zero_schema_tables (name TEXT PRIMARY KEY, schema_json TEXT NOT NULL)',
-  )
-  try {
-    for (const statement of schemaMetadataStatements()) {
-      await tx.exec(statement.sql, statement.params)
-    }
-    await tx.registerTables(publicTables())
-  } catch (error) {
-    // publication runs against every registered table, so a table this schema
-    // no longer has still gets queried here. without the label the error is
-    // indistinguishable from a migration statement failing.
-    throw new Error(
-      'schema publication failed on instance ' + instance + ': ' +
-        (error && error.message ? error.message : String(error)),
-      { cause: error },
-    )
-  }
+  return { applied, pendingMigrationFiles: remainingMigrationFiles }
 }
 
 // what the namespace actually looks like, for a failure message. the single
@@ -796,7 +863,7 @@ export async function ${runCloudflareMigrations}({
     await client.registerTables(resolvedPublicTables)
     return { tables: resolvedPublicTables.map((table) => table.publicTable) }
   }
-  // the statement loop labels its own failures; acquiring the session and
+  // the migration-file loop labels its own failures; acquiring a session and
   // committing sit OUTSIDE every try/catch in applyNativeSchema, so a Durable
   // Object SQL error raised there arrives bare. the schema barrier hands that
   // string straight back as a 503 body, which is the entire diagnosis budget a
@@ -807,13 +874,37 @@ export async function ${runCloudflareMigrations}({
   // so what is left is only reachable through a message that says more.
   let phase = 'session-acquire'
   try {
+    let migrationState
     await client.transaction(() => {
       throw new Error('native schema migration does not use queryAst')
     }, async (tx) => {
-      phase = 'reconcile'
-      await applyNativeSchema(tx, instance)
-      phase = 'commit'
+      phase = 'prepare'
+      migrationState = await applyNativeSchema(tx, instance, {
+        prepare: true,
+        migrationFile: null,
+        finalize: true,
+      })
+      phase = migrationState.pendingMigrationFiles.length > 0
+        ? 'first-migration-commit'
+        : 'finalize-commit'
     })
+    const remainingMigrationFiles = migrationState.pendingMigrationFiles
+    for (const [index, migrationFile] of remainingMigrationFiles.entries()) {
+      await client.transaction(() => {
+        throw new Error('native schema migration does not use queryAst')
+      }, async (tx) => {
+        phase = 'migration ' + migrationFile
+        migrationState = await applyNativeSchema(tx, instance, {
+          applied: migrationState.applied,
+          prepare: false,
+          migrationFile,
+          finalize: index === remainingMigrationFiles.length - 1,
+        })
+        phase = migrationState.pendingMigrationFiles.length === 0
+          ? 'finalize-commit'
+          : 'migration-commit ' + migrationFile
+      })
+    }
   } catch (error) {
     throw new Error(
       'schema migration failed on instance ' + instance + ' during ' + phase + ': ' +

package/dist/cf-deploy/migration.js.map

@@ -1 +1 @@
-{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/cf-deploy/migration.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,OAAO,CAAA;AAC9B,MAAM,eAAe,GAAG,OAAO,CAAA;AAE/B,SAAS,WAAW,CAAC,QAAgB,EAAE,GAAqB;IAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,QAAQ;SACZ,KAAK,CAAC,eAAe,CAAC;SACtB,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,cAAc,CAAC;SACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AA2BD,MAAM,UAAU,0BAA0B,CACxC,GAAqB,EACrB,KAA2C;IAE3C,MAAM,uBAAuB,GAAG,WAAW,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;IAChF,MAAM,kBAAkB,GAAG,WAAW,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAA;IAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,iCAAiC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;wBACvD,uBAAuB;WACpC,uBAAuB;;;;;aAKrB,uBAAuB;;CAEnC,CAAA;IACC,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,oBAAoB,GAAG,WAAW,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAA;QAClF,OAAO,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC;;gCAEhD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;;8BAErC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC;iCACtC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;yBAChD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;yBAC1C,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAuuBnC,uBAAuB;;;;;;;;;;;sCAWT,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA0C/C,uBAAuB;;;;;aAKrB,uBAAuB;;CAEnC,CAAA;IACC,CAAC;IAED,MAAM,UAAU,GAAU,KAAK,CAAA;IAC/B,MAAM,IAAI,SAAS,CAAC,0CAA0C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;AACrF,CAAC"}
+{"version":3,"file":"migration.js","sourceRoot":"","sources":["../../src/cf-deploy/migration.ts"],"names":[],"mappings":"AAEA,MAAM,cAAc,GAAG,OAAO,CAAA;AAC9B,MAAM,eAAe,GAAG,OAAO,CAAA;AAE/B,SAAS,WAAW,CAAC,QAAgB,EAAE,GAAqB;IAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACvE,OAAO,QAAQ;SACZ,KAAK,CAAC,eAAe,CAAC;SACtB,IAAI,CAAC,UAAU,CAAC;SAChB,KAAK,CAAC,cAAc,CAAC;SACrB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AA2BD,MAAM,UAAU,0BAA0B,CACxC,GAAqB,EACrB,KAA2C;IAE3C,MAAM,uBAAuB,GAAG,WAAW,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAA;IAChF,MAAM,kBAAkB,GAAG,WAAW,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAA;IAEpE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,iCAAiC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;wBACvD,uBAAuB;WACpC,uBAAuB;;;;;aAKrB,uBAAuB;;CAEnC,CAAA;IACC,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,oBAAoB,GAAG,WAAW,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAA;QAClF,OAAO,0BAA0B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC;;gCAEhD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;;8BAErC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC;iCACtC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;yBAChD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;yBAC1C,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBA0yBnC,uBAAuB;;;;;;;;;;;sCAWT,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkE/C,uBAAuB;;;;;aAKrB,uBAAuB;;CAEnC,CAAA;IACC,CAAC;IAED,MAAM,UAAU,GAAU,KAAK,CAAA;IAC/B,MAAM,IAAI,SAAS,CAAC,0CAA0C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;AACrF,CAAC"}

package/dist/cf-do/lite-data-worker.d.ts

@@ -80,6 +80,11 @@ export interface OrezRequestContext<Env extends OrezDataWorkerEnv> {
         force?: boolean;
     }): Promise<unknown>;
 }
+export interface OrezApplicationSqlCommitContext<Env extends OrezDataWorkerEnv> {
+    env: Env;
+    executionContext: OrezExecutionContext;
+    instance: string;
+}
 export interface OrezBackupConfig<Env extends OrezDataWorkerEnv> extends Partial<Pick<NamespaceBackupOptions<Env>, 'acceptedFormats' | 'chunkTargetBytes' | 'controlPlaneNamespace' | 'excludedTables' | 'keep' | 'keepControlPlane' | 'partBytes' | 'prefix' | 'runBudgetMs'>> {
     bucket(env: Env): NamespaceBackupBucket;
     /**
@@ -111,6 +116,12 @@ export interface OrezDataWorkerOptions<Env extends OrezDataWorkerEnv, S extends
         rows?: number;
         windowMs?: number;
     };
+    /**
+     * Notify an application-owned consumer after a transaction durably commits
+     * published CDC rows. Invocation and failure handling run through the
+     * Durable Object execution context, outside the application write result.
+     */
+    applicationSqlDidCommit?(context: OrezApplicationSqlCommitContext<Env>): MaybePromise<void>;
     setup?(context: OrezRequestContext<Env>): MaybePromise<void>;
     routes?(context: OrezRequestContext<Env>): MaybePromise<Response | null | undefined>;
     onError?(error: unknown, context: OrezErrorContext<Env>): MaybePromise<void>;

package/dist/cf-do/lite-data-worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lite-data-worker.d.ts","sourceRoot":"","sources":["../../src/cf-do/lite-data-worker.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,KAAK,EACV,oBAAoB,EACpB,oCAAoC,EACpC,iBAAiB,EAClB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,KAAK,YAAY,CAAC,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;AAGjD,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,oBAAoB,CAAA;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,CAAC,CAAA;IACT,YAAY,EAAE,SAAS;QACrB,yDAAyD;QACzD,KAAK,EAAE,MAAM,CAAA;QACb,uDAAuD;QACvD,WAAW,EAAE,MAAM,CAAA;KACpB,EAAE,CAAA;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvE,wBAAwB,CACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACxF,eAAe,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,uBAAwB,SAAQ,oCAAoC;IACnF,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAAA;IAC7C,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,kBAAkB,CAAA;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5B,WAAW,EAAE,uBAAuB,CAAA;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB,CAAC,GAAG,SAAS,iBAAiB;IAC7D,GAAG,EAAE,GAAG,CAAA;IACR,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAA;CAC3B;AAED,MAAM,WAAW,kBAAkB,CAAC,GAAG,SAAS,iBAAiB;IAC/D,GAAG,EAAE,GAAG,CAAA;IACR,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,GAAG,CAAA;IACR,cAAc,IAAI,oBAAoB,CAAA;IACtC,YAAY,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,gBAAgB,CAAC,GAAG,SAAS,iBAAiB,CAAE,SAAQ,OAAO,CAC9E,IAAI,CACF,sBAAsB,CAAC,GAAG,CAAC,EACzB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,gBAAgB,GAChB,MAAM,GACN,kBAAkB,GAClB,WAAW,GACX,QAAQ,GACR,aAAa,CAChB,CACF;IACC,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,qBAAqB,CAAA;IACvC;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,GAAG,GAAG,YAAY,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IAC/E,SAAS,CACP,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,QAAQ,GAAG,SAAS,GAC3B,YAAY,CAAC,OAAO,CAAC,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,qBAAqB,CACpC,GAAG,SAAS,iBAAiB,EAC7B,CAAC,SAAS,MAAM,GAAG,MAAM;IAEzB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAA;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,IAAI,MAAM,EAAE,CAAA;IAC1B,SAAS,CAAC,EAAE,uBAAuB,CAAA;IACnC,MAAM,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE;QACX,+EAA+E;QAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAC9B,CAAA;IACD,mFAAmF;IACnF,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,KAAK,CAAC,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5D,MAAM,CAAC,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,QAAQ,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACpF,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5E;;;OAGG;IACH,SAAS,CAAC,EAAE,QAAQ,CAClB,MAAM,CACJ,MAAM,EACN,CACE,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,oBAAoB,KACtB,YAAY,CAAC,IAAI,CAAC,CACxB,CACF,CAAA;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,GAAG,CAAA;CACT;AAED,MAAM,MAAM,2BAA2B,GAAG,UAAU,GAAG;IACrD,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAAA;IAC9D,wBAAwB,CACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAA;IAC/E,eAAe,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,WAAW,oBAAoB,CAAC,GAAG,SAAS,iBAAiB;IACjE,SAAS,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,2BAA2B,CAAA;IAClE,MAAM,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,2BAA2B,CAAA;IAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E,SAAS,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxF,oBAAoB,CAClB,GAAG,EAAE,GAAG,EACR,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,oBAAoB,CAAA;IACvB,qBAAqB,CACnB,GAAG,EAAE,GAAG,EACR,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,aAAa,EAAE,sBAAsB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;CAClD;AA+BD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,OAAO,GAAE,uBAA4B,GACpC,MAAM,GAAG,IAAI,CAWf;AAsBD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,uBAA4B,GACpC,uBAAuB,GAAG,IAAI,CAahC;AAwED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,uBAAuB,EACnC,KAAK,EAAE,OAAO,EACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAET;AAgGD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,SAAS,iBAAiB,EAC7B,CAAC,SAAS,MAAM,GAAG,MAAM,EACzB,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAgpBnE"}
+{"version":3,"file":"lite-data-worker.d.ts","sourceRoot":"","sources":["../../src/cf-do/lite-data-worker.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,KAAK,EACV,oBAAoB,EACpB,oCAAoC,EACpC,iBAAiB,EAClB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAE5C,KAAK,YAAY,CAAC,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;AAGjD,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,oBAAoB,CAAA;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,CAAC,CAAA;IACT,YAAY,EAAE,SAAS;QACrB,yDAAyD;QACzD,KAAK,EAAE,MAAM,CAAA;QACb,uDAAuD;QACvD,WAAW,EAAE,MAAM,CAAA;KACpB,EAAE,CAAA;IACH,OAAO,CAAC,OAAO,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAChE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,IAAI,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC3D,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvE,wBAAwB,CACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACxF,eAAe,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,uBAAwB,SAAQ,oCAAoC;IACnF,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAAA;IAC7C,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,kBAAkB,CAAA;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC5B,WAAW,EAAE,uBAAuB,CAAA;IACpC,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB,CAAC,GAAG,SAAS,iBAAiB;IAC7D,GAAG,EAAE,GAAG,CAAA;IACR,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,kBAAkB,CAAA;CAC3B;AAED,MAAM,WAAW,kBAAkB,CAAC,GAAG,SAAS,iBAAiB;IAC/D,GAAG,EAAE,GAAG,CAAA;IACR,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,EAAE,GAAG,CAAA;IACR,cAAc,IAAI,oBAAoB,CAAA;IACtC,YAAY,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,+BAA+B,CAAC,GAAG,SAAS,iBAAiB;IAC5E,GAAG,EAAE,GAAG,CAAA;IACR,gBAAgB,EAAE,oBAAoB,CAAA;IACtC,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,gBAAgB,CAAC,GAAG,SAAS,iBAAiB,CAAE,SAAQ,OAAO,CAC9E,IAAI,CACF,sBAAsB,CAAC,GAAG,CAAC,EACzB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,gBAAgB,GAChB,MAAM,GACN,kBAAkB,GAClB,WAAW,GACX,QAAQ,GACR,aAAa,CAChB,CACF;IACC,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,qBAAqB,CAAA;IACvC;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,GAAG,GAAG,YAAY,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IAC/E,SAAS,CACP,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,QAAQ,GAAG,SAAS,GAC3B,YAAY,CAAC,OAAO,CAAC,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,qBAAqB,CACpC,GAAG,SAAS,iBAAiB,EAC7B,CAAC,SAAS,MAAM,GAAG,MAAM;IAEzB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAA;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,IAAI,MAAM,EAAE,CAAA;IAC1B,SAAS,CAAC,EAAE,uBAAuB,CAAA;IACnC,MAAM,CAAC,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC9B,UAAU,CAAC,EAAE;QACX,+EAA+E;QAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAC9B,CAAA;IACD,mFAAmF;IACnF,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,CAAA;IACD;;;;OAIG;IACH,uBAAuB,CAAC,CACtB,OAAO,EAAE,+BAA+B,CAAC,GAAG,CAAC,GAC5C,YAAY,CAAC,IAAI,CAAC,CAAA;IACrB,KAAK,CAAC,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5D,MAAM,CAAC,CAAC,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,QAAQ,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IACpF,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5E;;;OAGG;IACH,SAAS,CAAC,EAAE,QAAQ,CAClB,MAAM,CACJ,MAAM,EACN,CACE,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,GAAG,EACR,GAAG,EAAE,oBAAoB,KACtB,YAAY,CAAC,IAAI,CAAC,CACxB,CACF,CAAA;CACF;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,GAAG,CAAA;CACT;AAED,MAAM,MAAM,2BAA2B,GAAG,UAAU,GAAG;IACrD,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAAA;IAC9D,wBAAwB,CACtB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAAA;IAC/E,eAAe,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAClC,CAAA;AAED,MAAM,WAAW,oBAAoB,CAAC,GAAG,SAAS,iBAAiB;IACjE,SAAS,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,2BAA2B,CAAA;IAClE,MAAM,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,2BAA2B,CAAA;IAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E,SAAS,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxF,oBAAoB,CAClB,GAAG,EAAE,GAAG,EACR,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,WAAW,GACnB,oBAAoB,CAAA;IACvB,qBAAqB,CACnB,GAAG,EAAE,GAAG,EACR,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,aAAa,EAAE,sBAAsB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;CAClD;AAgCD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,OAAO,GAAE,uBAA4B,GACpC,MAAM,GAAG,IAAI,CAWf;AAsBD;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,uBAA4B,GACpC,uBAAuB,GAAG,IAAI,CAahC;AAwED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,uBAAuB,EACnC,KAAK,EAAE,OAAO,EACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAET;AAgGD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,SAAS,iBAAiB,EAC7B,CAAC,SAAS,MAAM,GAAG,MAAM,EACzB,OAAO,EAAE,qBAAqB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAutBnE"}

package/dist/cf-do/lite-data-worker.js

@@ -6,6 +6,7 @@ import { ZeroDO as OrezZeroDO } from './worker.js';
 const STANDARD_DATA_PATHS = [
     '/_orez/backup/restore',
     '/_orez/backup/export',
+    '/_orez/status',
     '/_orez/write-budget/trip',
     '/_orez/write-budget/reopen',
     '/_orez/write-budget',
@@ -280,6 +281,9 @@ export function createOrezDataWorker(options) {
     class ZeroSqlDO extends OrezZeroDO {
         orezStorage;
         orezWorkerVersion;
+        orezEnv;
+        orezExecutionContext;
+        orezInstance;
         orezSchemaRunVersion = null;
         orezSchemaRun = null;
         orezReadyVersion = null;
@@ -301,13 +305,55 @@ export function createOrezDataWorker(options) {
                 : env));
             this.orezStorage = ctx.storage;
             this.orezWorkerVersion = env.CF_VERSION?.id ?? '';
+            this.orezEnv = env;
+            this.orezExecutionContext = ctx;
+            const instance = ctx.id.name;
+            if (options.applicationSqlDidCommit && typeof instance !== 'string') {
+                throw new Error('application SQL commit notifications require a named Durable Object');
+            }
+            this.orezInstance = instance ?? '';
             ctx.storage.sql.exec(`CREATE TABLE IF NOT EXISTS ${readyTable} (id INTEGER PRIMARY KEY CHECK (id = 1), version TEXT NOT NULL)`);
             ctx.storage.sql.exec(`CREATE TABLE IF NOT EXISTS ${attemptTable} (id INTEGER PRIMARY KEY CHECK (id = 1), version TEXT NOT NULL, attempt_count INTEGER NOT NULL, last_error TEXT)`);
             ctx.storage.sql.exec(`CREATE TABLE IF NOT EXISTS ${restoreTable} (id INTEGER PRIMARY KEY CHECK (id = 1), started_at INTEGER NOT NULL)`);
         }
-        applicationSqlDidCommit(_changed, mutated) {
+        applicationSqlDidCommit(published, mutated) {
             if (mutated)
                 this.orezBumpBackupMarker();
+            if (published && options.applicationSqlDidCommit) {
+                const notification = Promise.resolve()
+                    .then(() => options.applicationSqlDidCommit({
+                    env: this.orezEnv,
+                    executionContext: this.orezExecutionContext,
+                    instance: this.orezInstance,
+                }))
+                    .catch((error) => {
+                    try {
+                        console.error(JSON.stringify({
+                            event: 'application_sql_commit_notification_failed',
+                            instance: this.orezInstance,
+                            error: errorMessage(error),
+                        }));
+                    }
+                    catch {
+                        // Reporting is post-commit too and cannot change the write result.
+                    }
+                });
+                try {
+                    this.orezExecutionContext.waitUntil(notification);
+                }
+                catch (error) {
+                    try {
+                        console.error(JSON.stringify({
+                            event: 'application_sql_commit_notification_schedule_failed',
+                            instance: this.orezInstance,
+                            error: errorMessage(error),
+                        }));
+                    }
+                    catch {
+                        // The durable application write is already committed.
+                    }
+                }
+            }
         }
         async orezImportBatch(statements) {
             if (statements.length === 0)
@@ -356,7 +402,7 @@ export function createOrezDataWorker(options) {
                         result = await options.schema.migrate({ client, instance });
                     }
                     finally {
-                        // each migration statement commits through its own session, so a
+                        // each migration file commits through its own session, so a
                         // migrate() that throws partway has already moved the persisted
                         // schema; the cached table shapes are stale on every exit
                         this.invalidateSchemaCaches();
@@ -586,6 +632,12 @@ export function createOrezDataWorker(options) {
             // Observability must never replace the request's actual outcome.
         }
     };
+    const hasAdminToken = (request, env) => {
+        const supplied = request.headers.get('x-orez-admin-token') ??
+            request.headers.get('authorization')?.replace(/^Bearer\s+/i, '');
+        return Boolean(env.OREZ_DO_WRITE_BUDGET_ADMIN_TOKEN &&
+            supplied === env.OREZ_DO_WRITE_BUDGET_ADMIN_TOKEN);
+    };
     const worker = {
         async fetch(request, env, executionContext) {
             const route = new URL(request.url).pathname;
@@ -595,6 +647,13 @@ export function createOrezDataWorker(options) {
                     const resolved = resolveOrezDataRequest(request, namespaceOptions);
                     if (!resolved)
                         return new Response('invalid namespace', { status: 400 });
+                    // The DO constructor creates durable control tables. Reject the
+                    // protected status probe at the worker boundary so an unauthenticated
+                    // request cannot name or instantiate a cold object just to receive a
+                    // 403 from inside it.
+                    if (resolved.pathname === '/_orez/status' && !hasAdminToken(request, env)) {
+                        return Response.json({ error: 'forbidden', sqlBillingSinceBoot: { rowsWritten: 0 } }, { status: 403 });
+                    }
                     const routedHeaders = new Headers(request.headers);
                     routedHeaders.set(namespaceOptions.nsHeader, resolved.instance === 'singleton'
                         ? 'singleton'
@@ -643,6 +702,7 @@ export function createOrezDataWorker(options) {
                     }
                     if (resolved.pathname === '/changes' ||
                         resolved.pathname === '/snapshot' ||
+                        resolved.pathname === '/_orez/status' ||
                         resolved.pathname === '/_orez/write-budget' ||
                         resolved.pathname === '/_orez/write-budget/trip' ||
                         resolved.pathname === '/_orez/write-budget/reopen') {