@voltro/cli 0.10.0 → 0.11.1

package/dist/{serveCommand-YR3mKjvf.js → serveCommand-BU454-ay.js}

@@ -1,68 +1,40 @@
-import { t as e, yt as t } from "./inspectMetrics-BeMjgt8x.js";
-import { $ as n, A as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as d, K as f, M as p, N as ee, O as m, P as h, Q as g, S as te, T as ne, U as re, W as ie, X as ae, Y as _, Z as oe, _ as se, at as v, b as ce, d as le, f as y, g as b, h as x, i as S, it as ue, j as C, k as de, lt as w, m as fe, n as pe, o as me, ot as T, q as E, rt as he, s as ge, t as _e, tt as ve, v as ye, w as be, x as xe, y as D } from "./dev-CK9fbuAM.js";
+import { kt as e, t } from "./inspectMetrics-BuBwg1yW.js";
+import { $ as n, A as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as d, M as f, N as p, O as ee, P as m, Q as h, S as g, T as te, U as ne, W as re, X as _, Y as ie, Z as ae, _ as oe, at as v, b as se, d as ce, et as y, f as b, g as le, h as ue, i as x, it as de, j as S, k as C, m as fe, n as pe, nt as me, o as w, ot as T, q as he, s as ge, st as _e, t as ve, ut as E, v as ye, w as be, x as xe, y as D } from "./dev-zJGsTTNb.js";
 import { a as Se, r as Ce } from "./startupRunner-DhlX9nqd.js";
-import { a as O, t as we } from "./apiBuild-DTLPSlt9.js";
-import { join as Te } from "node:path";
-import { pathToFileURL as Ee } from "node:url";
-import { Cause as De, Effect as k, Layer as A, ManagedRuntime as Oe } from "effect";
-import { createLogger as j } from "@voltro/logger";
-import { existsSync as M } from "node:fs";
-import { AggregateRegistry as ke, Dispatcher as N, apiKeyManagementRoutes as P, applySoftDeleteScope as Ae, applyTenantScope as je, attachAnalyticsMirror as Me, awaitServerListening as Ne, bindMutation as F, bindStream as Pe, bindSubscription as I, buildTracingLayer as Fe, cancelWakeup as Ie, compileCron as Le, dataStoreApiKeyStore as Re, dataStoreIdempotencyStore as ze, frameworkApiKeyStrategy as Be, installPolicyGuardResolver as Ve, loadResourceTuples as He, makeActionRunner as L, makeAdvisoryLockCoordinator as Ue, makeApiKeyService as We, makeAsyncKv as Ge, makeCoordinatedScheduler as R, makeEffectStoreLayer as Ke, makeLazyWorkflowFacade as qe, makeMutationRunner as Je, makeQueryDescriptorProducer as Ye, makeQueryReauthorizer as Xe, makeSchemaRegistry as Ze, makeWorkflowFacade as Qe, makeWorkflowFacadeWithCallerContext as $e, makeWorkflowLayers as et, noopKv as tt, recordSubscriptionDelivery as nt, registerWakeup as z, resolveSecretsBackend as rt, runProvidedEffect as it, setSecretsBackend as at, setTupleSource as ot, singleCoordinator as st, startRpcServer as ct, startScheduler as lt, workflowToRpc as ut } from "@voltro/runtime";
-import { createHash as B, timingSafeEqual as V } from "node:crypto";
-import { assertProductionSessionSecret as dt } from "@voltro/protocol/session";
+import { n as we, s as O } from "./apiBuild-D_kEJTxc.js";
+import { t as Te } from "./bootTiming-BdyP9nYw.js";
+import { join as Ee } from "node:path";
+import { pathToFileURL as De } from "node:url";
+import { Cause as k, Effect as A, Layer as j, ManagedRuntime as Oe } from "effect";
+import { createLogger as M } from "@voltro/logger";
+import { existsSync as N } from "node:fs";
+import { AggregateRegistry as ke, Dispatcher as P, apiKeyManagementRoutes as Ae, applySoftDeleteScope as je, applyTenantScope as Me, attachAnalyticsMirror as Ne, awaitServerListening as Pe, bindMutation as F, bindStream as Fe, bindSubscription as I, buildTracingLayer as Ie, cancelWakeup as Le, compileCron as Re, dataStoreApiKeyStore as ze, dataStoreIdempotencyStore as Be, frameworkApiKeyStrategy as Ve, installPolicyGuardResolver as He, loadResourceTuples as Ue, makeActionRunner as L, makeAdvisoryLockCoordinator as We, makeApiKeyService as Ge, makeAsyncKv as R, makeCoordinatedScheduler as Ke, makeEffectStoreLayer as qe, makeLazyWorkflowFacade as Je, makeMutationRunner as Ye, makeQueryDescriptorProducer as Xe, makeQueryReauthorizer as Ze, makeSchemaRegistry as Qe, makeWorkflowFacade as $e, makeWorkflowFacadeWithCallerContext as et, makeWorkflowLayers as tt, noopKv as nt, recordSubscriptionDelivery as rt, registerWakeup as z, resolveSecretsBackend as it, runProvidedEffect as at, setSecretsBackend as ot, setSystemStoreHandle as st, setTupleSource as ct, singleCoordinator as lt, startRpcServer as ut, startScheduler as dt, workflowToRpc as B } from "@voltro/runtime";
 import { RpcGroup as ft } from "@effect/rpc";
 import { SqlClient as pt } from "@effect/sql";
-import { and as mt, ensureTableRegistered as ht, eq as H, or as gt } from "@voltro/database";
-import { fromNodeReadable as _t, getObjectStream as vt, putObjectStream as yt, resolveStorageProvider as U, toNodeReadable as bt } from "@voltro/plugin-storage";
-import { AuthMiddleware as xt, ConnectionInfoMiddleware as St, actionToRpc as W, anonymousSubject as Ct, mutationToRpc as wt, queryToRpc as G, streamToRpc as Tt, workflowCancelDescriptor as Et, workflowDomainEventsQueryDescriptor as K, workflowEventDeliveriesQueryDescriptor as Dt, workflowResumeDescriptor as Ot, workflowRunEventsQueryDescriptor as q, workflowRunQueryDescriptor as J, workflowRunStepsQueryDescriptor as kt, workflowRunsQueryDescriptor as Y, workflowSignalDescriptor as X, workflowUpdateDescriptor as Z } from "@voltro/protocol";
-import { declaredSnapshot as At, describeOutcome as jt, runPlannedMigrations as Mt } from "@voltro/database/sql";
-import { getAuthSessionStrategy as Nt } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as Pt, restRoutesToHttpRoutes as Ft } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as It, buildWebhooksService as Lt, defaultIncomingPath as Rt, deliverWebhookWorkflow as zt, mountIncomingWebhook as Bt } from "@voltro/plugin-webhooks";
-import { packBundle as Vt, runExport as Ht, runImport as Ut, storageBlobSink as Wt, storageRefsBlobSource as Gt, unpackBundle as Kt, unpackBundleToDir as qt } from "@voltro/data-transfer";
-//#region src/bootTiming.ts
-var Jt = () => {
-	let e = process.env.VOLTRO_BOOT_TIMING;
-	return e === "1" || e === "true";
-}, Yt = () => {
-	let e = [{
-		name: "modules",
-		at: performance.now()
-	}];
-	return {
-		mark: (t) => {
-			e.push({
-				name: t,
-				at: performance.now()
-			});
-		},
-		finish: (t) => {
-			let n = Math.round(e[e.length - 1].at);
-			if (!Jt()) {
-				t.info(`serve: ready in ${n}ms`);
-				return;
-			}
-			let r = {}, i = 0;
-			for (let t of e) r[t.name] = Math.round(t.at - i), i = t.at;
-			t.info(`serve: ready in ${n}ms`, {
-				bootMs: n,
-				phases: r
-			});
-		}
-	};
-}, Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
+import { and as mt, ensureTableRegistered as ht, eq as V, or as gt } from "@voltro/database";
+import { fromNodeReadable as _t, getObjectStream as vt, putObjectStream as yt, resolveStorageProvider as H, toNodeReadable as U } from "@voltro/plugin-storage";
+import { AuthMiddleware as bt, ConnectionInfoMiddleware as xt, actionToRpc as W, anonymousSubject as St, mutationToRpc as Ct, queryToRpc as G, streamToRpc as wt, workflowCancelDescriptor as Tt, workflowDomainEventsQueryDescriptor as Et, workflowEventDeliveriesQueryDescriptor as K, workflowResumeDescriptor as Dt, workflowRunEventsQueryDescriptor as q, workflowRunQueryDescriptor as J, workflowRunStepsQueryDescriptor as Y, workflowRunsQueryDescriptor as Ot, workflowSignalDescriptor as X, workflowUpdateDescriptor as kt } from "@voltro/protocol";
+import { createHash as Z, timingSafeEqual as At } from "node:crypto";
+import { declaredSnapshot as jt, describeOutcome as Mt, runPlannedMigrations as Nt } from "@voltro/database/sql";
+import { assertProductionSessionSecret as Pt } from "@voltro/protocol/session";
+import { getAuthSessionStrategy as Ft } from "@voltro/plugin-auth";
+import { collectPublicApiRoutes as It, restRoutesToHttpRoutes as Lt } from "@voltro/protocol/rest";
+import { buildDeliverWebhookExecute as Rt, buildWebhooksService as zt, defaultIncomingPath as Bt, deliverWebhookWorkflow as Vt, mountIncomingWebhook as Ht } from "@voltro/plugin-webhooks";
+import { packBundle as Ut, runExport as Wt, runImport as Gt, storageBlobSink as Kt, storageRefsBlobSource as qt, unpackBundle as Jt, unpackBundleToDir as Yt } from "@voltro/data-transfer";
+//#region src/adminAuth.ts
+var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
 }), Qt = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, $t = (e, t) => V(B("sha256").update(e).digest(), B("sha256").update(t).digest()), en = (e, t) => {
+}, $t = (e, t) => At(Z("sha256").update(e).digest(), Z("sha256").update(t).digest()), en = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
 	let n = Qt(e.headers);
 	return !n || !$t(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, tn = j({ scope: "voltro:admin-import" }), nn = "VBUNDLE2", rn = async function* (e) {
+}, tn = M({ scope: "voltro:admin-import" }), nn = "VBUNDLE2", rn = async function* (e) {
 	yield e;
 }, an = (e) => async (t) => {
 	let n = en(t, e.secret);
@@ -82,11 +54,11 @@ var Jt = () => {
 	}
 	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await Kt(c, {
+		e.assetSink ? await Jt(c, {
 			dir: p,
 			blobs: e.assetSink
-		}) : await qt(c, p);
-		let t = await k.runPromiseExit(Ut({
+		}) : await Yt(c, p);
+		let t = await A.runPromiseExit(Gt({
 			store: e.store,
 			bundleDir: p,
 			...r ? { mode: r } : {},
@@ -141,7 +113,7 @@ var Jt = () => {
 			force: !0
 		});
 	}
-}, on = j({ scope: "voltro:admin-export" }), sn = async (e) => {
+}, on = M({ scope: "voltro:admin-export" }), sn = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
@@ -174,7 +146,7 @@ var Jt = () => {
 	}
 	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? cn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await k.runPromise(Ht({
+		let t = await A.runPromise(Wt({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -190,7 +162,7 @@ var Jt = () => {
 		if (c) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => Vt({
+			return await e.putArchive(i, () => Ut({
 				dir: p,
 				...l
 			})), on.info("admin.export", {
@@ -207,7 +179,7 @@ var Jt = () => {
 				transport: "storage"
 			});
 		}
-		let d = await sn(Vt({
+		let d = await sn(Ut({
 			dir: p,
 			...l
 		}));
@@ -259,16 +231,20 @@ var Jt = () => {
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
 }, fn = async (e) => {
-	let t = new N({
+	st({
+		dataStore: e.store,
+		schemaRegistry: e.schemaRegistry
+	});
+	let t = new P({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => nt({
+		recordDelivery: (e) => rt({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), n = e.cache ?? dn, r = e.kv ?? tt, a, o, c, l = /* @__PURE__ */ new Map(), u = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, d = async (t, n, r) => {
+	}), n = e.cache ?? dn, r = e.kv ?? nt, a, o, c, l = /* @__PURE__ */ new Map(), u = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, d = async (t, n, r) => {
 		let i = {
 			...r,
 			source: r.source ?? `workflow:${t}`
@@ -278,7 +254,7 @@ var Jt = () => {
 			let r = await e.store.query({
 				table: "_voltro_workflow_start_contexts",
 				order: [],
-				predicate: H("executionId", n),
+				predicate: V("executionId", n),
 				projection: ["id"],
 				skip: void 0,
 				take: 1
@@ -299,14 +275,14 @@ var Jt = () => {
 		} catch (e) {
 			process.stderr.write(`[workflow] failed to persist start context for ${t}/${n}: ${e?.message ?? String(e)}\n`);
 		}
-	}, ee = async (t, n) => {
+	}, p = async (t, n) => {
 		let r = l.get(n);
 		if (r !== void 0) return r;
 		try {
 			let t = (await e.store.query({
 				table: "_voltro_workflow_start_contexts",
 				order: [],
-				predicate: H("executionId", n),
+				predicate: V("executionId", n),
 				projection: void 0,
 				skip: void 0,
 				take: 1
@@ -324,17 +300,17 @@ var Jt = () => {
 			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
 			return;
 		}
-	}, g = (e.discovered.workflows?.length ?? 0) > 0 ? qe(() => a) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? j({ scope: "voltro:serve" })).child("webhooks"), se, v = e.discovered.webhooks;
+	}, g = (e.discovered.workflows?.length ?? 0) > 0 ? Je(() => a) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? M({ scope: "voltro:serve" })).child("webhooks"), oe, v = e.discovered.webhooks;
 	if (v && v.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = oe({
+		let t = e.workflowEngineLayer, i = h({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: n,
 			kv: r
 		}), a = v.outgoing.map((e) => e.descriptor);
-		se = Lt(i, async (e) => {
-			let n = zt.execute(e).pipe(k.provide(zt.toLayer(It(i, { events: a })).pipe(A.provideMerge(t))));
-			k.runPromise(n).catch((t) => {
+		oe = zt(i, async (e) => {
+			let n = Vt.execute(e).pipe(A.provide(Vt.toLayer(Rt(i, { events: a })).pipe(j.provideMerge(t))));
+			A.runPromise(n).catch((t) => {
 				ie.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -342,11 +318,11 @@ var Jt = () => {
 			});
 		}, { events: a });
 	}
-	let ce = /* @__PURE__ */ new Map();
+	let se = /* @__PURE__ */ new Map();
 	if (v) for (let e of v.incoming) {
-		let t = e.descriptor.path ?? Rt(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Bt(e.descriptor, {
+		let t = e.descriptor.path ?? Bt(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ht(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => g === void 0 ? void 0 : $e(g, {
+			resolveWorkflows: () => g === void 0 ? void 0 : et(g, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -361,81 +337,81 @@ var Jt = () => {
 				e.status >= 500 ? ie.error("incoming delivery failed", t) : e.status >= 400 ? ie.warn("incoming delivery rejected", t) : ie.info("incoming delivery handled", t);
 			}
 		});
-		ce.set(t, { handle: r });
+		se.set(t, { handle: r });
 	}
-	Ve(), ot((t) => He(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let le = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? h({
+	He(), ct((t) => Ue(e.store, t.subjectId, t.resourceType, t.resourceId));
+	let ce = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? m({
 		handlers: e.discovered.outboxHandlers ?? [],
 		store: e.store,
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, y = p({
+		log: (e.log ?? M({ scope: "voltro:serve" })).child("outbox")
+	}) : void 0, y = f({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: C(e.port ?? 4e3),
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("connections")
+		publicUrl: S(e.port ?? 4e3),
+		log: (e.log ?? M({ scope: "voltro:serve" })).child("connections")
 	}), b = ae({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: n,
 		kv: r,
-		...se === void 0 ? {} : { webhooksService: se },
+		...oe === void 0 ? {} : { webhooksService: oe },
 		...g === void 0 ? {} : { workflowsProxy: g },
 		eventTriggers: e.discovered.eventTriggers ?? [],
 		namespaceIsolationOn: re,
-		...le === void 0 ? {} : { outbox: { nudge: le.nudge } },
+		...ce === void 0 ? {} : { outbox: { nudge: ce.nudge } },
 		...y.active ? { connections: { registry: y.registry } } : {}
-	}), S = A.succeed(ke, be), ue = (t, n) => {
-		let r = t.pipe(k.provide(Ke(n)));
-		return it((e.baseLayer ? r.pipe(k.provide(e.baseLayer)) : r).pipe(k.provide(S)));
-	}, w = Je({
+	}), le = j.succeed(ke, be), x = (t, n) => {
+		let r = t.pipe(A.provide(qe(n)));
+		return at((e.baseLayer ? r.pipe(A.provide(e.baseLayer)) : r).pipe(A.provide(le)));
+	}, de = Ye({
 		store: e.store,
 		buildContext: (e, t, n) => b(e, t, n),
-		runEffect: ue,
+		runEffect: x,
 		undoCapture: D()
 	}), pe = ye(), me = L({
 		buildContext: (e) => b(e),
-		runEffect: ue
-	}), T = Ye({
+		runEffect: x
+	}), w = Xe({
 		buildContext: (e) => b(e),
-		finalize: (t, n) => Ae(je(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(k.provide(Ke(t)))
-	}), E = {};
+		finalize: (t, n) => je(Me(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
+		provideEffect: (e, t) => e.pipe(A.provide(qe(t)))
+	}), T = {};
 	for (let n of [
 		...e.discovered.queries,
 		...pe.queries,
 		...y.queries
-	]) E[n.descriptor.name] = (e) => I(T(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, Xe(n, e));
+	]) T[n.descriptor.name] = (e) => I(w(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, Ze(n, e));
 	for (let t of [
 		...e.discovered.mutations,
 		...pe.mutations,
 		...y.mutations
-	]) E[t.descriptor.name] = (e) => F(async (e, n) => w(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...y.actions]) E[t.descriptor.name] = (e) => F(async (e, n) => me(t, e, n), e, `action.${t.descriptor.name}`);
-	let he = () => `public-${Math.random().toString(36).slice(2, 10)}`, ge = [...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+	]) T[t.descriptor.name] = (e) => F(async (e, n) => de(t, e, n), e, `mutation.${t.descriptor.name}`);
+	for (let t of [...e.discovered.actions, ...y.actions]) T[t.descriptor.name] = (e) => F(async (e, n) => me(t, e, n), e, `action.${t.descriptor.name}`);
+	let ge = () => `public-${Math.random().toString(36).slice(2, 10)}`, _e = [...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 		descriptor: e.descriptor,
-		invoke: (t, n) => w(e, t, {
+		invoke: (t, n) => de(e, t, {
 			subject: n.subject,
-			traceId: he()
+			traceId: ge()
 		})
 	})), ...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 		descriptor: e.descriptor,
 		invoke: (t, n) => me(e, t, {
 			subject: n.subject,
-			traceId: he()
+			traceId: ge()
 		})
-	}))], _e = ge.length > 0 ? Ft(Pt(ge), {
+	}))], ve = _e.length > 0 ? Lt(It(_e), {
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], ve = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xe = ve && ve.length >= 16 ? [{
+	}) : [], E = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xe = E && E.length >= 16 ? [{
 		method: "POST",
 		path: Xt,
 		handle: an({
-			secret: ve,
+			secret: E,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Wt(U({})),
+			assetSink: Kt(H({})),
 			openArchive: (e) => (async function* () {
-				let t = U({}), n = await bt((await k.runPromise(vt(t, e))).stream);
+				let t = H({}), n = await U((await A.runPromise(vt(t, e))).stream);
 				for await (let e of n) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 			})()
 		})
@@ -443,41 +419,41 @@ var Jt = () => {
 		method: "POST",
 		path: Zt,
 		handle: ln({
-			secret: ve,
+			secret: E,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
 			loadProfile: un,
-			assetSource: Gt(U({}), e.store),
+			assetSource: qt(H({}), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = U({}), i = _t("storage", () => n.from(t()));
-				await k.runPromise(yt(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = H({}), i = _t("storage", () => n.from(t()));
+				await A.runPromise(yt(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
 	}] : [], Se = [
 		...e.httpRoutes ?? [],
-		..._e,
+		...ve,
 		...xe,
 		...y.httpRoutes
 	];
-	for (let t of e.discovered.streams ?? []) E[t.descriptor.name] = (n) => Pe((r) => {
+	for (let t of e.discovered.streams ?? []) T[t.descriptor.name] = (n) => Fe((r) => {
 		let i = b(r), a = t.executor(n, i);
-		if (k.isEffect(a)) {
-			let t = a.pipe(k.provide(Ke(i.store)));
-			return (e.baseLayer ? t.pipe(k.provide(e.baseLayer)) : t).pipe(k.provide(S));
+		if (A.isEffect(a)) {
+			let t = a.pipe(A.provide(qe(i.store)));
+			return (e.baseLayer ? t.pipe(A.provide(e.baseLayer)) : t).pipe(A.provide(le));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? k.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? A.promise(() => a) : a;
 	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) E[t.definition.name] = (e) => F(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => F(async (e, n) => {
 		let r = n;
-		return $e(g, {
+		return et(g, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	te && (E[J.name] = (e) => I(T({
+	te && (T[J.name] = (e) => I(w({
 		descriptor: J,
 		executor: (e) => {
 			let t = e.id;
@@ -487,16 +463,16 @@ var Jt = () => {
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: gt(H("id", t), H("executionId", t)),
+				predicate: gt(V("id", t), V("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${J.name}`), E[Y.name] = (e) => I(T({
-		descriptor: Y,
+	}, e), t, `subscription.${J.name}`), T[Ot.name] = (e) => I(w({
+		descriptor: Ot,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [V("tag", t.tag)], ...t.status === void 0 ? [] : [V("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
@@ -509,8 +485,8 @@ var Jt = () => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Y.name}`), E[kt.name] = (e) => I(T({
-		descriptor: kt,
+	}, e), t, `subscription.${Ot.name}`), T[Y.name] = (e) => I(w({
+		descriptor: Y,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -519,13 +495,13 @@ var Jt = () => {
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: H("runId", t),
+				predicate: V("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${kt.name}`), E[q.name] = (e) => I(T({
+	}, e), t, `subscription.${Y.name}`), T[q.name] = (e) => I(w({
 		descriptor: q,
 		executor: (e) => {
 			let t = e.runId;
@@ -535,14 +511,14 @@ var Jt = () => {
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: H("runId", t),
+				predicate: V("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${q.name}`), E[K.name] = (e) => I(T({
-		descriptor: K,
+	}, e), t, `subscription.${q.name}`), T[Et.name] = (e) => I(w({
+		descriptor: Et,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -551,14 +527,14 @@ var Jt = () => {
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : H("name", t.name),
+				predicate: t.name === void 0 ? void 0 : V("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${K.name}`), E[Dt.name] = (e) => I(T({
-		descriptor: Dt,
+	}, e), t, `subscription.${Et.name}`), T[K.name] = (e) => I(w({
+		descriptor: K,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -567,69 +543,69 @@ var Jt = () => {
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: H("eventId", t),
+				predicate: V("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Dt.name}`), E[Et.name] = (t) => F(async (t, n) => {
+	}, e), t, `subscription.${K.name}`), T[Tt.name] = (t) => F(async (t, n) => {
 		let r = t;
-		return await _(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Le(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Et.name}`), E[Ot.name] = (t) => F(async (t, n) => {
+		return await _(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Ne(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Tt.name}`), T[Dt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await _(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Ot.name}`), E[X.name] = (t) => F(async (t, n) => {
+	}, t, `action.${Dt.name}`), T[X.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await _(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${X.name}`), E[Z.name] = (t) => F(async (t, n) => {
+	}, t, `action.${X.name}`), T[kt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await _(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Z.name}`));
+	}, t, `action.${kt.name}`));
 	let Ce = [
 		...e.discovered.queries.map((e) => G(e.descriptor)),
-		...e.discovered.mutations.map((e) => wt(e.descriptor)),
+		...e.discovered.mutations.map((e) => Ct(e.descriptor)),
 		...e.discovered.actions.map((e) => W(e.descriptor)),
 		...pe.queries.map((e) => G(e.descriptor)),
-		...pe.mutations.map((e) => wt(e.descriptor)),
+		...pe.mutations.map((e) => Ct(e.descriptor)),
 		...y.queries.map((e) => G(e.descriptor)),
-		...y.mutations.map((e) => wt(e.descriptor)),
+		...y.mutations.map((e) => Ct(e.descriptor)),
 		...y.actions.map((e) => W(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => Tt(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => ut(e.definition)),
+		...(e.discovered.streams ?? []).map((e) => wt(e.descriptor)),
+		...(e.discovered.workflows ?? []).map((e) => B(e.definition)),
 		...te ? [
 			G(J),
+			G(Ot),
 			G(Y),
-			G(kt),
 			G(q),
+			G(Et),
 			G(K),
-			G(Dt),
-			W(Et),
-			W(Ot),
+			W(Tt),
+			W(Dt),
 			W(X),
-			W(Z)
+			W(kt)
 		] : []
-	], O = ft.make(...Ce).middleware(xt).middleware(St), we = A.succeed(xt, xt.of(({ headers: t, clientId: n }) => k.promise(() => e.resolveSubject(t, n)))), Te = A.succeed(St, St.of(({ clientId: e }) => k.succeed({ clientId: e }))), Ee = e.dormancyTenantId ?? "default", De = e.dormancy === "sleep" ? {
+	], we = ft.make(...Ce).middleware(bt).middleware(xt), O = j.succeed(bt, bt.of(({ headers: t, clientId: n }) => A.promise(() => e.resolveSubject(t, n)))), Te = j.succeed(xt, xt.of(({ clientId: e }) => A.succeed({ clientId: e }))), Ee = e.dormancyTenantId ?? "default", De = e.dormancy === "sleep" ? {
 		register: (t, n, r) => z(e.store, {
 			tenantId: r ?? Ee,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => Ie(e.store, {
+		cancel: (t, n) => Le(e.store, {
 			tenantId: n ?? Ee,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, M = ne ? await import("@voltro/workflow") : void 0, P = M?.makeWorkflowRunRecorder({
+	} : void 0, k = ne ? await import("@voltro/workflow") : void 0, N = k?.makeWorkflowRunRecorder({
 		store: e.store,
 		...De === void 0 ? {} : { wakeups: De }
-	}), Me = async (t, n) => {
-		await M.closeWorkflowChildrenForParent({
+	}), Ae = async (t, n) => {
+		await k.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: P,
+			recorder: N,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -640,11 +616,11 @@ var Jt = () => {
 				await o.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Le = async (t, n, r) => {
+	}, Ne = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: H("executionId", n),
+			predicate: V("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -655,7 +631,7 @@ var Jt = () => {
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await P.recordEvent({
+		a && await N.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -664,16 +640,16 @@ var Jt = () => {
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Me(n, "cancelled");
-	}, Re = [...et(e.discovered.workflows ?? [], {
+		}), a && await Ae(n, "cancelled");
+	}, Re = [...tt(e.discovered.workflows ?? [], {
 		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
 			subject: t.subject,
 			traceId: t.traceId
 		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-		resolveStartContext: ee
+		resolveStartContext: p
 	}, (t, n, r) => {
-		let i = M.getWorkflowVersionMetadata(t.definition);
-		return M.wrapWorkflowExecuteWithRunRecording({
+		let i = k.getWorkflowVersionMetadata(t.definition);
+		return k.wrapWorkflowExecuteWithRunRecording({
 			name: t.definition.name,
 			store: e.store,
 			subject: r.subject,
@@ -684,66 +660,66 @@ var Jt = () => {
 			workflowPatches: i.patches,
 			parentExecutionId: r?.parentExecutionId ?? null,
 			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Me(e, t),
-			recorder: P
+			onParentClose: ({ executionId: e, status: t }) => Ae(e, t),
+			recorder: N
 		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], ze = Re.length > 0 ? A.mergeAll(...Re) : A.empty;
-	((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0 && (o = Oe.make(ze.pipe(A.provideMerge(e.workflowEngineLayer))), await o.runPromise(k.void), a = (e.discovered.workflows?.length ?? 0) > 0 ? Qe({
+	}), ...e.discovered.workflowWorkers ?? []], ze = Re.length > 0 ? j.mergeAll(...Re) : j.empty;
+	((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0 && (o = Oe.make(ze.pipe(j.provideMerge(e.workflowEngineLayer))), await o.runPromise(A.void), a = (e.discovered.workflows?.length ?? 0) > 0 ? $e({
 		workflows: e.discovered.workflows ?? [],
 		runEffect: (e) => o.runPromise(e),
 		rememberStartContext: d,
 		signal: async (t, n, r) => {
-			let i = await M.sendWorkflowSignal({
+			let i = await k.sendWorkflowSignal({
 				store: e.store,
-				recorder: P,
+				recorder: N,
 				target: t,
 				signalName: n,
 				payload: r
 			});
-			return await o.runPromise(M.completeSuspendingSignal({
+			return await o.runPromise(k.completeSuspendingSignal({
 				store: e.store,
 				target: t,
 				signalName: n,
 				payload: r
 			})).catch(() => {}), i;
 		},
-		update: (t, n, r, i) => M.sendWorkflowUpdate({
+		update: (t, n, r, i) => k.sendWorkflowUpdate({
 			store: e.store,
-			recorder: P,
+			recorder: N,
 			target: t,
 			updateName: n,
 			payload: r,
 			...i === void 0 ? {} : { options: i }
 		}),
 		listRuns: (t) => fe(e.store, t),
-		retry: (t, n) => x({
+		retry: (t, n) => ue({
 			store: e.store,
 			workflows: e.discovered.workflows ?? [],
 			runPromise: (e) => o.runPromise(e)
 		}, t, n)
 	}) : void 0);
-	let Be = A.mergeAll(O.toLayer(E), we, Te), We = f(E, e.discovered.queries.map((e) => e.descriptor.name), te), Ge = A.mergeAll(O.toLayer(We), we, Te), R = e.observability, Ze = await Fe({
+	let Be = j.mergeAll(we.toLayer(T), O, Te), Ve = he(T, e.discovered.queries.map((e) => e.descriptor.name), te), Ge = j.mergeAll(we.toLayer(Ve), O, Te), R = e.observability, Ke = await Ie({
 		...R && R.spanProcessors.length > 0 ? { extraSpanProcessors: R.spanProcessors } : {},
 		...R && R.metricReaders.length > 0 ? { extraMetricReaders: R.metricReaders } : {},
 		...R && Object.keys(R.resourceAttributes).length > 0 ? { resourceAttributes: R.resourceAttributes } : {},
 		...R && R.sampler !== void 0 ? { sampler: R.sampler } : {}
-	}), rt = !1, at = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, B = ct({
-		group: O,
+	}), Qe = !1, it = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, ot = ut({
+		group: we,
 		handlersLayer: Be,
 		httpHandlersLayer: Ge,
 		port: e.port ?? 4e3,
 		path: e.path ?? "/ws",
-		tracerLayer: Ze.layer,
+		tracerLayer: Ke.layer,
 		healthCheck: {
-			isReady: () => rt,
-			...at ? { ping: at } : {}
+			isReady: () => Qe,
+			...it ? { ping: it } : {}
 		},
 		...Se.length > 0 ? { httpRoutes: Se } : {},
-		...ce.size > 0 ? { webhookRoutes: ce } : {}
+		...se.size > 0 ? { webhookRoutes: se } : {}
 	});
-	if (await Ne(B), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Ue(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : st;
-		c = await lt(e.discovered.schedules ?? [], {
+	if (await Pe(ot), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? We(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : lt;
+		c = await dt(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -768,10 +744,10 @@ var Jt = () => {
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
 		}), e.onSchedulerReady?.(c);
 	}
-	let V = e.log ?? j({ scope: "voltro:serve" }), dt, pt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (dt = s(e.discovered.subscribers ?? [], e.store, V.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = V.child("reaction");
-		pt = m(e.discovered.reactions ?? [], e.store, {
+	let pt = e.log ?? M({ scope: "voltro:serve" }), ht, Z;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (ht = s(e.discovered.subscribers ?? [], e.store, pt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = pt.child("reaction");
+		Z = ee(e.discovered.reactions ?? [], e.store, {
 			runAct: async (n, r) => {
 				if (n.kind === "workflow") {
 					if (g === void 0) {
@@ -779,16 +755,16 @@ var Jt = () => {
 						return;
 					}
 					let e = r.new ?? r.old ?? {};
-					await $e(g, {
+					await et(g, {
 						traceId: `reaction:${n.workflow}`,
 						source: `reaction:${n.workflow}`
 					}).start(n.workflow, e);
 					return;
 				}
-				await de(n.agent, r, {
+				await C(n.agent, r, {
 					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
 					runAction: (e, t, n) => Promise.resolve(me(e, t, n)),
-					makeSubject: (e) => Ct(e),
+					makeSubject: (e) => St(e),
 					now: () => Date.now(),
 					log: t
 				});
@@ -796,7 +772,7 @@ var Jt = () => {
 			checkBudget: async (n, r) => {
 				try {
 					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await k.runPromise(k.either(t(e.store, {
+					return (await A.runPromise(A.either(t(e.store, {
 						tenantId: n,
 						limitUsd: r
 					}))))._tag === "Right";
@@ -806,31 +782,31 @@ var Jt = () => {
 			}
 		}, t);
 	}
-	let ht;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (ht = await i({
+	let At;
+	return (e.discovered.aggregates?.length ?? 0) > 0 && (At = await i({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: V.child("aggregate"),
+		log: pt.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), S = A.succeed(ke, ht.registry)), rt = !0, e.bootTiming?.mark("ready"), {
+	}), le = j.succeed(ke, At.registry)), Qe = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: t,
-		server: B,
+		server: ot,
 		scheduler: c,
 		close: async () => {
-			rt = !1, ht?.detach(), pt?.(), dt?.(), await c?.shutdown(), t.close(), await o?.dispose(), await new Promise((e) => B.close(() => e()));
+			Qe = !1, At?.detach(), Z?.(), ht?.(), await c?.shutdown(), t.close(), await o?.dispose(), await new Promise((e) => ot.close(() => e()));
 		}
 	};
-}, $ = j({ scope: "voltro:serve" }), pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", mn = (e, t) => {
+}, $ = M({ scope: "voltro:serve" }), pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", mn = (e, t) => {
 	let n = e.indexOf(t);
 	return n >= 0 ? e[n + 1] : void 0;
 }, hn = async (e) => {
 	let t = O(process.cwd());
-	if (M(t)) {
+	if (N(t)) {
 		let n;
 		try {
-			let e = await import(Ee(t).href);
+			let e = await import(De(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
@@ -839,33 +815,33 @@ var Jt = () => {
 	}
 	return gn(e);
 }, gn = async (i) => {
-	let s = Yt();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), dt();
-	let f = process.cwd(), p = Number(process.env.PORT ?? mn(i, "--port") ?? 4e3), m = await me(f);
-	at(rt(m?.secrets)), await t({
+	let s = Te();
+	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), Pt();
+	let f = process.cwd(), ee = Number(process.env.PORT ?? mn(i, "--port") ?? 4e3), m = await w(f);
+	ot(it(m?.secrets)), await e({
 		rawEnv: m?.env,
 		appType: "api",
 		root: f,
 		log: $,
 		generateTypes: !1
 	}), s.mark("config");
-	let h = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), ae = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", _ = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, oe = we(f);
-	if (!Ce() && M(oe)) try {
-		let e = await import(Ee(oe).href);
+	let h = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), _ = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", ae = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, ue = we(f);
+	if (!Ce() && N(ue)) try {
+		let e = await import(De(ue).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Te(f, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Ee(f, n)] = r;
 			Se(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let x = await le(f), C = await ge(x, { cdc: ae && _ !== void 0 }), de = x.filter((e) => xe.test(e)), fe = de.length > 0 ? await te(de, $.child("webhooks")) : void 0, ye = ve({
+	let S = await ce(f), C = await ge(S, { cdc: _ && ae !== void 0 }), fe = S.filter((e) => xe.test(e)), he = fe.length > 0 ? await g(fe, $.child("webhooks")) : void 0, ye = me({
 		mix: C.featureMix,
 		plugins: m?.plugins ?? [],
-		cdc: ae && _ !== void 0,
-		..._ ? { cdcDialect: _ } : {}
-	}), be = m?.analytics !== void 0 && m.analytics.kind !== "noop" && h !== "memory" ? (await w(h)).makeSqlLayer(S()) : void 0, D = await re({
+		cdc: _ && ae !== void 0,
+		...ae ? { cdcDialect: ae } : {}
+	}), be = m?.analytics !== void 0 && m.analytics.kind !== "noop" && h !== "memory" ? (await E(h)).makeSqlLayer(x()) : void 0, D = await ne({
 		spec: m?.analytics,
 		sqlLayer: be,
 		log: $
@@ -875,55 +851,55 @@ var Jt = () => {
 		return t;
 	})();
 	for (let e of O) ht(e);
-	let j = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (pn(j, h, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await w(h)).makeSqlLayer(S()), t = await k.runPromise(pt.SqlClient.pipe(k.flatMap((e) => Mt(e, O, {
-			appliedBy: `serve:${j}`,
+	let M = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (pn(M, h, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await E(h)).makeSqlLayer(x()), t = await A.runPromise(pt.SqlClient.pipe(A.flatMap((e) => Nt(e, O, {
+			appliedBy: `serve:${M}`,
 			environment: "prod",
 			dialectId: h
-		})), k.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(jt(t, h)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(jt(t, h));
+		})), A.provide(e)));
+		t.kind === "prod-mismatch" && ($.error(Mt(t, h)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Mt(t, h));
 	}
-	let ke = Ze(O);
+	let ke = Qe(O);
 	s.mark("discover");
-	let N = await pe(m, void 0);
+	let P = await pe(m, void 0);
 	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: Ae, invalidationBus: je, snapshotCache: Ne, cache: F, backend: Pe, dispose: I } = await n({ env: process.env });
-	$.info(`cache backend resolved: ${Pe}` + (Pe === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), N.onChange((e) => {
-		k.runFork(je.publish(e.table));
+	let { service: je, invalidationBus: Me, snapshotCache: Pe, cache: F, backend: Fe, dispose: I } = await y({ env: process.env });
+	$.info(`cache backend resolved: ${Fe}` + (Fe === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
+		A.runFork(Me.publish(e.table));
 	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: Fe, service: Ie } = await Ge({ store: N });
+	let { kv: Ie, service: Le } = await R({ store: P });
 	s.mark("store");
-	let Ve = Me({
-		store: N,
+	let He = Ne({
+		store: P,
 		sink: D.sink,
 		log: $
-	}), He = g({
-		store: N,
+	}), Ue = n({
+		store: P,
 		dialect: h
-	}), L = m?.plugins ?? [], Ke = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, qe, Je;
-	h !== "memory" && (qe = Oe.make((await w(h)).makeSqlLayer(S())), Je = await qe.runPromise(pt.SqlClient));
-	let Ye = R({
+	}), L = m?.plugins ?? [], qe = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Je, Ye;
+	h !== "memory" && (Je = Oe.make((await E(h)).makeSqlLayer(x())), Ye = await Je.runPromise(pt.SqlClient));
+	let Xe = Ke({
 		coordinator: [
 			"postgres",
 			"mariadb",
 			"mysql",
 			"mssql"
-		].includes(h) ? Ue(N, Ke, $) : st,
-		replicaId: Ke,
+		].includes(h) ? We(P, qe, $) : lt,
+		replicaId: qe,
 		log: $
-	}), Xe = [], Qe = {
-		...Je ? { sql: Je } : {},
+	}), Ze = [], $e = {
+		...Ye ? { sql: Ye } : {},
 		scheduleCoordinated: (e, t, n) => {
-			let r = Ye(e, t, n);
-			return Xe.push(r), r;
+			let r = Xe(e, t, n);
+			return Ze.push(r), r;
 		}
 	};
-	for (let e of L) e.bindDataStore?.(N, Qe);
-	let $e = L.filter((e) => typeof e.onChangeEvent == "function");
-	if ($e.length > 0) {
-		let e = N.changeScope ?? "local";
-		N.onChange((t) => {
+	for (let e of L) e.bindDataStore?.(P, $e);
+	let et = L.filter((e) => typeof e.onChangeEvent == "function");
+	if (et.length > 0) {
+		let e = P.changeScope ?? "local";
+		P.onChange((t) => {
 			let n = {
 				table: t.table,
 				op: t.op,
@@ -932,62 +908,62 @@ var Jt = () => {
 				...t.origin === void 0 ? {} : { origin: t.origin },
 				changeScope: e
 			};
-			for (let e of $e) k.runFork(e.onChangeEvent(n).pipe(k.catchAllCause((t) => k.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: De.pretty(t) })))));
+			for (let e of et) A.runFork(e.onChangeEvent(n).pipe(A.catchAllCause((t) => A.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: k.pretty(t) })))));
 		});
 	}
-	let et = se({
+	let tt = oe({
 		plugins: L,
 		appName: m?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	L.length && await et.activate(), s.mark("plugins");
-	let tt = await et.gatherObservability(), nt = await y(N, m, h, {
+	L.length && await tt.activate(), s.mark("plugins");
+	let nt = await tt.gatherObservability(), rt = await b(P, m, h, {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}), z = m?.apiKeys, it = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", ot = z ? We(Re(N), { prefix: it }) : void 0, ct = ot ? [Be(ot, { prefix: it })] : [], lt = _e([...m?.auth?.strategies ?? [], ...ct], Nt(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1), ut = [...m?.restRoutes ?? [], ...ot ? P(ot, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = m?.idempotency, V = B ? {
-		store: ze(N),
+	}), z = m?.apiKeys, at = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", st = z ? Ge(ze(P), { prefix: at }) : void 0, ct = st ? [Ve(st, { prefix: at })] : [], ut = ve([...m?.auth?.strategies ?? [], ...ct], Ft(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1), dt = [...m?.restRoutes ?? [], ...st ? Ae(st, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = m?.idempotency, ft = B ? {
+		store: Be(P),
 		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
 		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
-	} : void 0, ft = ut.length > 0 ? Ft(ut, {
-		store: N,
-		resolveSubject: (e) => lt({
+	} : void 0, mt = dt.length > 0 ? Lt(dt, {
+		store: P,
+		resolveSubject: (e) => ut({
 			headers: e,
 			clientId: -1
 		}),
-		...V ? { idempotency: V } : {}
-	}) : [], mt = L.map((e) => e.services).filter((e) => e !== void 0), H = A.mergeAll(d({
+		...ft ? { idempotency: ft } : {}
+	}) : [], V = L.map((e) => e.services).filter((e) => e !== void 0), gt = j.mergeAll(ie({
 		analyticsLayer: D.layer,
-		cacheService: Ae,
-		kvService: Ie,
-		pluginServices: mt,
+		cacheService: je,
+		kvService: Le,
+		pluginServices: V,
 		userLayers: m?.layers ?? []
-	}), E), gt = m?.scheduling ?? {}, _t = gt.trigger ?? "self", vt = /* @__PURE__ */ new Set([
+	}), d), _t = m?.scheduling ?? {}, vt = _t.trigger ?? "self", yt = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), yt = gt.coordination ?? (vt.has(h) ? "advisoryLock" : "single"), U = yt === "cluster" && vt.has(h), bt = U ? "cluster" : yt === "advisoryLock" && vt.has(h) ? "advisoryLock" : "single";
-	yt === "cluster" && !U && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), yt === "advisoryLock" && !vt.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let xt, St = C.workflows.length > 0 || C.workflowWorkers.length > 0 || C.eventTriggers.length > 0 || (fe?.outgoing.length ?? 0) > 0 || U, W;
-	if (St) {
+	]), H = _t.coordination ?? (yt.has(h) ? "advisoryLock" : "single"), U = H === "cluster" && yt.has(h), bt = U ? "cluster" : H === "advisoryLock" && yt.has(h) ? "advisoryLock" : "single";
+	H === "cluster" && !U && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), H === "advisoryLock" && !yt.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let xt, W = C.workflows.length > 0 || C.workflowWorkers.length > 0 || C.eventTriggers.length > 0 || (he?.outgoing.length ?? 0) > 0 || U, St;
+	if (W) {
 		if (h === "mssql") {
 			let e = await l(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), i = U ? C.schedules.filter((e) => (e.trigger ?? _t) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), i = U ? C.schedules.filter((e) => (e.trigger ?? vt) === "self").map((e) => t({
 			name: e.name,
-			cron: Le(e),
+			cron: Re(e),
 			execute: async () => {
 				await xt?.fireFromCluster(e.name);
 			}
 		})) : [];
-		W = h === "memory" ? e.layerMemory : await (async () => {
-			let e = await w(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+		St = h === "memory" ? e.layerMemory : await (async () => {
+			let e = await E(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(S()),
+				sqlClientLayer: e.makeSqlLayer(x()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -995,18 +971,18 @@ var Jt = () => {
 			});
 		})();
 	}
-	let Ct = b(L, e()), wt = x.filter((e) => /\.subscribe\.tsx?$/.test(e)), G = wt.length > 0 ? await u(wt, $) : [], Tt = x.filter((e) => /\.reaction\.tsx?$/.test(e)), Et = Tt.length > 0 ? await r(Tt, $) : [], K = x.filter((e) => /\.outbox\.tsx?$/.test(e)), Dt = K.length > 0 ? await ee(K, $) : [], Ot = x.filter((e) => /\.aggregate\.tsx?$/.test(e)), q = Ot.length > 0 ? await ne(Ot, $) : [], J = o();
-	if (q.length > 0 && h !== "memory") try {
-		J = a((await w(h)).makeSqlLayer(S()));
+	let Ct = le(L, t()), G = S.filter((e) => /\.subscribe\.tsx?$/.test(e)), wt = G.length > 0 ? await u(G, $) : [], Tt = S.filter((e) => /\.reaction\.tsx?$/.test(e)), Et = Tt.length > 0 ? await r(Tt, $) : [], K = S.filter((e) => /\.outbox\.tsx?$/.test(e)), Dt = K.length > 0 ? await p(K, $) : [], q = S.filter((e) => /\.aggregate\.tsx?$/.test(e)), J = q.length > 0 ? await te(q, $) : [], Y = o();
+	if (J.length > 0 && h !== "memory") try {
+		Y = a((await E(h)).makeSqlLayer(x()));
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let kt = h === "memory" ? st : Ue(N, `aggregate@${process.pid}`, $), Y = [], X = [], Z = x.filter((e) => he.test(e));
+	let Ot = h === "memory" ? lt : We(P, `aggregate@${process.pid}`, $), X = [], kt = [], Z = S.filter((e) => de.test(e));
 	if (Z.length > 0) {
-		let e = $.child("agent"), t = x.filter((e) => ue.test(e));
-		t.length > 0 && await T(t, e);
-		let n = await v(Z, e);
-		for (let e of n.agents) for (let t of ce(e)) (t.kind === "action" ? Y : X).push({
+		let e = $.child("agent"), t = S.filter((e) => v.test(e));
+		t.length > 0 && await _e(t, e);
+		let n = await T(Z, e);
+		for (let e of n.agents) for (let t of se(e)) (t.kind === "action" ? X : kt).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -1014,46 +990,46 @@ var Jt = () => {
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
 	s.mark("workflow");
-	let Pt = await fn({
+	let At = await fn({
 		bootTiming: s,
 		discovered: {
-			queries: [...C.queries, ...X],
+			queries: [...C.queries, ...kt],
 			mutations: C.mutations,
-			actions: [...C.actions, ...Y],
+			actions: [...C.actions, ...X],
 			streams: C.streams,
 			workflows: C.workflows,
 			workflowWorkers: C.workflowWorkers,
 			eventTriggers: C.eventTriggers,
 			schedules: C.schedules,
-			subscribers: G,
+			subscribers: wt,
 			outboxHandlers: Dt,
 			connections: C.connections,
 			reactions: Et,
-			aggregates: q,
-			...fe === void 0 ? {} : { webhooks: fe }
+			aggregates: J,
+			...he === void 0 ? {} : { webhooks: he }
 		},
 		log: $,
 		analytics: D.sink,
-		aggregateStorage: J,
-		aggregateCoordinator: kt,
-		store: N,
-		kv: Fe,
+		aggregateStorage: Y,
+		aggregateCoordinator: Ot,
+		store: P,
+		kv: Ie,
 		cache: F,
-		snapshotCache: Ne,
+		snapshotCache: Pe,
 		schemaRegistry: ke,
 		tenantScopedTables: C.tenantScopedTables,
 		softDeleteScopedTables: C.softDeleteScopedTables,
-		dataTransferSnapshot: At(O),
+		dataTransferSnapshot: jt(O),
 		dataTransferDialect: h,
 		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => lt({
+		resolveSubject: (e, t) => ut({
 			headers: e,
 			clientId: t
 		}),
-		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...ft],
-		...H ? { baseLayer: H } : {},
-		...W === void 0 ? {} : { workflowEngineLayer: W },
-		scheduleDefaultTrigger: _t,
+		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...mt],
+		...gt ? { baseLayer: gt } : {},
+		...St === void 0 ? {} : { workflowEngineLayer: St },
+		scheduleDefaultTrigger: vt,
 		scheduleCoordination: bt,
 		scheduleArmSelf: !U,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
@@ -1062,18 +1038,18 @@ var Jt = () => {
 		onSchedulerReady: (e) => {
 			xt = e;
 		},
-		observability: tt,
-		port: p,
+		observability: nt,
+		port: ee,
 		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {}
 	});
-	c(ie([
+	c(re([
 		C.queries,
 		C.mutations,
 		C.actions,
 		C.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${p}`, {
+	}), $.info(`API listening on :${ee}`, {
 		dialect: h,
 		queries: C.queries.length,
 		mutations: C.mutations.length,
@@ -1085,8 +1061,8 @@ var Jt = () => {
 		scheduleCoordination: bt
 	}), s.finish($);
 	let It = () => {
-		for (let e of Xe) e.stop();
-		Ve.detach(), He.stop(), I(), qe?.dispose(), Promise.resolve(et.deactivate()).then(() => nt?.close()).then(() => D.dispose()).then(() => Pt.close()).then(() => N.close?.()).then(() => process.exit(0));
+		for (let e of Ze) e.stop();
+		He.detach(), Ue.stop(), I(), Je?.dispose(), Promise.resolve(tt.deactivate()).then(() => rt?.close()).then(() => D.dispose()).then(() => At.close()).then(() => P.close?.()).then(() => process.exit(0));
 	};
 	return process.on("SIGINT", It), process.on("SIGTERM", It), await new Promise(() => {}), 0;
 };