@voltro/cli 0.11.2 → 0.11.4

package/dist/{serveCommand-Dd3oLzbo.js → serveCommand-ARqSs73o.js}

@@ -1,46 +1,70 @@
-import { kt as e, t } from "./inspectMetrics-BuBwg1yW.js";
-import { $ as n, A as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as d, M as f, N as p, O as ee, P as m, Q as h, S as g, T as te, U as ne, W as re, X as _, Y as ie, Z as ae, _ as oe, at as v, b as se, d as ce, et as y, f as b, g as le, h as ue, i as x, it as de, j as S, k as C, m as fe, n as pe, nt as me, o as w, ot as T, q as he, s as ge, st as _e, t as ve, ut as E, v as ye, w as be, x as xe, y as D } from "./dev-zJGsTTNb.js";
-import { a as Se, r as Ce } from "./startupRunner-DhlX9nqd.js";
-import { n as we, s as O } from "./apiBuild-BVIiATXr.js";
-import { t as Te } from "./bootTiming-BdyP9nYw.js";
-import { join as Ee } from "node:path";
-import { pathToFileURL as De } from "node:url";
-import { Cause as k, Effect as A, Layer as j, ManagedRuntime as Oe } from "effect";
-import { createLogger as M } from "@voltro/logger";
-import { existsSync as N } from "node:fs";
-import { AggregateRegistry as ke, Dispatcher as P, apiKeyManagementRoutes as Ae, applySoftDeleteScope as je, applyTenantScope as Me, attachAnalyticsMirror as Ne, awaitServerListening as Pe, bindMutation as F, bindStream as Fe, bindSubscription as I, buildTracingLayer as Ie, cancelWakeup as Le, compileCron as Re, dataStoreApiKeyStore as ze, dataStoreIdempotencyStore as Be, frameworkApiKeyStrategy as Ve, installPolicyGuardResolver as He, loadResourceTuples as Ue, makeActionRunner as L, makeAdvisoryLockCoordinator as We, makeApiKeyService as Ge, makeAsyncKv as R, makeCoordinatedScheduler as Ke, makeEffectStoreLayer as qe, makeLazyWorkflowFacade as Je, makeMutationRunner as Ye, makeQueryDescriptorProducer as Xe, makeQueryReauthorizer as Ze, makeSchemaRegistry as Qe, makeWorkflowFacade as $e, makeWorkflowFacadeWithCallerContext as et, makeWorkflowLayers as tt, noopKv as nt, recordSubscriptionDelivery as rt, registerWakeup as z, resolveSecretsBackend as it, runProvidedEffect as at, setSecretsBackend as ot, setSystemStoreHandle as st, setTupleSource as ct, singleCoordinator as lt, startRpcServer as ut, startScheduler as dt, workflowToRpc as B } from "@voltro/runtime";
-import { RpcGroup as ft } from "@effect/rpc";
-import { SqlClient as pt } from "@effect/sql";
-import { and as mt, ensureTableRegistered as ht, eq as V, or as gt } from "@voltro/database";
-import { fromNodeReadable as _t, getObjectStream as vt, putObjectStream as yt, resolveStorageProvider as H, toNodeReadable as U } from "@voltro/plugin-storage";
-import { AuthMiddleware as bt, ConnectionInfoMiddleware as xt, actionToRpc as W, anonymousSubject as St, mutationToRpc as Ct, queryToRpc as G, streamToRpc as wt, workflowCancelDescriptor as Tt, workflowDomainEventsQueryDescriptor as Et, workflowEventDeliveriesQueryDescriptor as K, workflowResumeDescriptor as Dt, workflowRunEventsQueryDescriptor as q, workflowRunQueryDescriptor as J, workflowRunStepsQueryDescriptor as Y, workflowRunsQueryDescriptor as Ot, workflowSignalDescriptor as X, workflowUpdateDescriptor as kt } from "@voltro/protocol";
-import { createHash as Z, timingSafeEqual as At } from "node:crypto";
-import { declaredSnapshot as jt, describeOutcome as Mt, runPlannedMigrations as Nt } from "@voltro/database/sql";
-import { assertProductionSessionSecret as Pt } from "@voltro/protocol/session";
-import { getAuthSessionStrategy as Ft } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as It, restRoutesToHttpRoutes as Lt } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as Rt, buildWebhooksService as zt, defaultIncomingPath as Bt, deliverWebhookWorkflow as Vt, mountIncomingWebhook as Ht } from "@voltro/plugin-webhooks";
-import { packBundle as Ut, runExport as Wt, runImport as Gt, storageBlobSink as Kt, storageRefsBlobSource as qt, unpackBundle as Jt, unpackBundleToDir as Yt } from "@voltro/data-transfer";
-//#region src/adminAuth.ts
-var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
+import { At as e, t } from "./inspectMetrics-D4EJ8LTi.js";
+import { $ as n, A as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as d, M as f, N as p, O as ee, P as m, Q as h, S as g, T as te, U as ne, W as re, X as _, Y as ie, Z as ae, _ as oe, b as v, d as se, dt as ce, et as y, f as b, ft as le, g as ue, gt as x, h as de, i as S, it as fe, j as C, k as w, m as pe, n as me, nt as T, o as he, pt as ge, q as _e, s as E, t as ve, ut as ye, v as be, w as xe, x as Se, y as D } from "./dev-Cvojvb_J.js";
+import { a as Ce, r as we } from "./startupRunner-DhlX9nqd.js";
+import { c as O, r as Te } from "./apiBuild-DHHuiwXF.js";
+import { t as Ee } from "./bootTiming-BdyP9nYw.js";
+import { join as De } from "node:path";
+import { pathToFileURL as Oe } from "node:url";
+import { Cause as ke, Effect as k, Layer as A, ManagedRuntime as Ae } from "effect";
+import { createLogger as j } from "@voltro/logger";
+import { existsSync as je } from "node:fs";
+import { AggregateRegistry as Me, Dispatcher as M, apiKeyManagementRoutes as N, applySoftDeleteScope as Ne, applyTenantScope as Pe, attachAnalyticsMirror as P, awaitServerListening as Fe, bindMutation as F, bindStream as Ie, bindSubscription as I, buildTracingLayer as Le, cancelWakeup as Re, compileCron as ze, dataStoreApiKeyStore as Be, dataStoreIdempotencyStore as Ve, frameworkApiKeyStrategy as He, installPolicyGuardResolver as Ue, loadResourceTuples as We, makeActionRunner as L, makeAdvisoryLockCoordinator as Ge, makeApiKeyService as Ke, makeAsyncKv as qe, makeCoordinatedScheduler as Je, makeEffectStoreLayer as Ye, makeLazyWorkflowFacade as Xe, makeMutationRunner as Ze, makeOneShotQueryRunner as Qe, makeQueryDescriptorProducer as $e, makeQueryReauthorizer as et, makeQuerySubscriber as tt, makeSchemaRegistry as R, makeWorkflowFacade as nt, makeWorkflowFacadeWithCallerContext as rt, makeWorkflowLayers as it, noopKv as z, recordSubscriptionDelivery as at, registerWakeup as ot, resolveSecretsBackend as st, runProvidedEffect as ct, setSecretsBackend as lt, setSystemStoreHandle as ut, setTupleSource as dt, singleCoordinator as ft, startRpcServer as B, startScheduler as pt, workflowToRpc as mt } from "@voltro/runtime";
+import { RpcGroup as ht } from "@effect/rpc";
+import { SqlClient as gt } from "@effect/sql";
+import { and as _t, ensureTableRegistered as vt, eq as V, or as yt } from "@voltro/database";
+import { fromNodeReadable as bt, getObjectStream as xt, putObjectStream as H, resolveStorageProvider as U, toNodeReadable as St } from "@voltro/plugin-storage";
+import { AuthMiddleware as Ct, ConnectionInfoMiddleware as W, actionToRpc as G, anonymousSubject as wt, mutationToRpc as Tt, queryToRpc as K, streamToRpc as Et, workflowCancelDescriptor as Dt, workflowDomainEventsQueryDescriptor as Ot, workflowEventDeliveriesQueryDescriptor as q, workflowResumeDescriptor as kt, workflowRunEventsQueryDescriptor as J, workflowRunQueryDescriptor as At, workflowRunStepsQueryDescriptor as Y, workflowRunsQueryDescriptor as X, workflowSignalDescriptor as jt, workflowUpdateDescriptor as Mt } from "@voltro/protocol";
+import { createHash as Z, timingSafeEqual as Nt } from "node:crypto";
+import { declaredSnapshot as Pt, describeOutcome as Ft, runPlannedMigrations as It } from "@voltro/database/sql";
+import { assertProductionSessionSecret as Lt } from "@voltro/protocol/session";
+import { getAuthSessionStrategy as Rt } from "@voltro/plugin-auth";
+import { collectPublicApiRoutes as zt, restRoutesToHttpRoutes as Bt } from "@voltro/protocol/rest";
+import { buildDeliverWebhookExecute as Vt, buildWebhooksService as Ht, defaultIncomingPath as Ut, deliverWebhookWorkflow as Wt, mountIncomingWebhook as Gt } from "@voltro/plugin-webhooks";
+import { packBundle as Kt, runExport as qt, runImport as Jt, storageBlobSink as Yt, storageRefsBlobSource as Xt, unpackBundle as Zt, unpackBundleToDir as Qt } from "@voltro/data-transfer";
+//#region src/cliArgs.ts
+var $t = (e, t) => {
+	for (let n = 0; n < e.length; n++) {
+		let r = e[n];
+		if (r === t) return e[n + 1];
+		if (r.startsWith(t + "=")) return r.slice(t.length + 1);
+	}
+}, en = (e, t) => {
+	let n = [], r, i = !1;
+	for (let a = 0; a < e.length; a++) {
+		let o = e[a];
+		if (!i && o === t) {
+			r = e[++a], i = !0;
+			continue;
+		}
+		if (!i && o.startsWith(t + "=")) {
+			r = o.slice(t.length + 1), i = !0;
+			continue;
+		}
+		n.push(o);
+	}
+	return {
+		value: r,
+		rest: n
+	};
+}, tn = (e, ...t) => e.some((e) => t.includes(e)), nn = (e) => e.find((e) => !e.startsWith("-")), rn = "/_voltro/admin/import", an = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Qt = (e) => {
+}), on = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, $t = (e, t) => At(Z("sha256").update(e).digest(), Z("sha256").update(t).digest()), en = (e, t) => {
+}, sn = (e, t) => Nt(Z("sha256").update(e).digest(), Z("sha256").update(t).digest()), cn = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = Qt(e.headers);
-	return !n || !$t(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, tn = M({ scope: "voltro:admin-import" }), nn = "VBUNDLE2", rn = async function* (e) {
+	let n = on(e.headers);
+	return !n || !sn(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, ln = j({ scope: "voltro:admin-import" }), un = "VBUNDLE2", dn = async function* (e) {
 	yield e;
-}, an = (e) => async (t) => {
-	let n = en(t, e.secret);
+}, fn = (e) => async (t) => {
+	let n = cn(t, e.secret);
 	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === nn, c, l;
-	if (s) c = rn(t.rawBody), l = "upload";
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === un, c, l;
+	if (s) c = dn(t.rawBody), l = "upload";
 	else {
 		let n;
 		try {
@@ -54,11 +78,11 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 	}
 	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await Jt(c, {
+		e.assetSink ? await Zt(c, {
 			dir: p,
 			blobs: e.assetSink
-		}) : await Yt(c, p);
-		let t = await A.runPromiseExit(Gt({
+		}) : await Qt(c, p);
+		let t = await k.runPromiseExit(Jt({
 			store: e.store,
 			bundleDir: p,
 			...r ? { mode: r } : {},
@@ -66,14 +90,14 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			...a ? { atomic: a } : {},
 			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
 			force: o,
-			onWarn: (e) => tn.warn("admin.import", { message: e }),
+			onWarn: (e) => ln.warn("admin.import", { message: e }),
 			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
 		}));
 		if (t._tag === "Failure") {
 			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
 			if (e && e._tag === "SchemaDriftError") {
 				let t = e;
-				return tn.warn("admin.import refused (schema drift)", {
+				return ln.warn("admin.import refused (schema drift)", {
 					transport: l,
 					bundle: t.bundleFingerprint.slice(0, 16),
 					target: t.targetFingerprint.slice(0, 16)
@@ -88,7 +112,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			throw Error(String(e?.message ?? e ?? "import failed"));
 		}
 		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return tn.info("admin.import", {
+		return ln.info("admin.import", {
 			transport: l,
 			tables: n.tables.length,
 			rows: s,
@@ -100,7 +124,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			transport: l
 		});
 	} catch (e) {
-		return tn.warn("admin.import failed", {
+		return ln.warn("admin.import failed", {
 			transport: l,
 			error: e?.message ?? String(e)
 		}), Q(500, {
@@ -113,18 +137,18 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			force: !0
 		});
 	}
-}, on = M({ scope: "voltro:admin-export" }), sn = async (e) => {
+}, pn = j({ scope: "voltro:admin-export" }), mn = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
-}, cn = (e) => typeof e.tenant == "string" && e.tenant ? {
+}, hn = (e) => typeof e.tenant == "string" && e.tenant ? {
 	kind: "tenant",
 	tenantId: e.tenant
 } : Array.isArray(e.tables) && e.tables.length ? {
 	kind: "tables",
 	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, ln = (e) => async (t) => {
-	let n = en(t, e.secret);
+} : { kind: "all" }, gn = (e) => async (t) => {
+	let n = cn(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -144,9 +168,9 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? cn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? hn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await A.runPromise(Wt({
+		let t = await k.runPromise(qt({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -162,10 +186,10 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 		if (c) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => Ut({
+			return await e.putArchive(i, () => Kt({
 				dir: p,
 				...l
-			})), on.info("admin.export", {
+			})), pn.info("admin.export", {
 				transport: "storage",
 				tables: t.tables.length,
 				rows: n,
@@ -179,11 +203,11 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				transport: "storage"
 			});
 		}
-		let d = await sn(Ut({
+		let d = await mn(Kt({
 			dir: p,
 			...l
 		}));
-		return on.info("admin.export", {
+		return pn.info("admin.export", {
 			transport: "download",
 			tables: t.tables.length,
 			rows: n,
@@ -200,7 +224,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			}
 		};
 	} catch (e) {
-		return on.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+		return pn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
 			error: "export failed",
 			message: e?.message ?? String(e)
 		});
@@ -210,7 +234,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			force: !0
 		});
 	}
-}, un = async (e) => {
+}, _n = async (e) => {
 	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
 		e,
 		`${e}.profile.ts`,
@@ -221,7 +245,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 	let a = await import(i), o = a.default ?? a.profile;
 	if (!o) throw Error(`data profile '${i}' has no default export`);
 	return o;
-}, dn = {
+}, vn = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -230,21 +254,21 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, fn = async (e) => {
-	st({
+}, yn = async (e) => {
+	ut({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = new P({
+	let t = new M({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => rt({
+		recordDelivery: (e) => at({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), n = e.cache ?? dn, r = e.kv ?? nt, a, o, c, l = /* @__PURE__ */ new Map(), u = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, d = async (t, n, r) => {
+	}), n = e.cache ?? vn, r = e.kv ?? z, a, o, c, l = /* @__PURE__ */ new Map(), u = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, d = async (t, n, r) => {
 		let i = {
 			...r,
 			source: r.source ?? `workflow:${t}`
@@ -300,7 +324,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
 			return;
 		}
-	}, g = (e.discovered.workflows?.length ?? 0) > 0 ? Je(() => a) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? M({ scope: "voltro:serve" })).child("webhooks"), oe, v = e.discovered.webhooks;
+	}, g = (e.discovered.workflows?.length ?? 0) > 0 ? Xe(() => a) : void 0, te = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ne = te || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? j({ scope: "voltro:serve" })).child("webhooks"), oe, v = e.discovered.webhooks;
 	if (v && v.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		let t = e.workflowEngineLayer, i = h({
 			store: e.store,
@@ -308,9 +332,9 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			cache: n,
 			kv: r
 		}), a = v.outgoing.map((e) => e.descriptor);
-		oe = zt(i, async (e) => {
-			let n = Vt.execute(e).pipe(A.provide(Vt.toLayer(Rt(i, { events: a })).pipe(j.provideMerge(t))));
-			A.runPromise(n).catch((t) => {
+		oe = Ht(i, async (e) => {
+			let n = Wt.execute(e).pipe(k.provide(Wt.toLayer(Vt(i, { events: a })).pipe(A.provideMerge(t))));
+			k.runPromise(n).catch((t) => {
 				ie.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -320,9 +344,9 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 	}
 	let se = /* @__PURE__ */ new Map();
 	if (v) for (let e of v.incoming) {
-		let t = e.descriptor.path ?? Bt(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ht(e.descriptor, {
+		let t = e.descriptor.path ?? Ut(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Gt(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => g === void 0 ? void 0 : et(g, {
+			resolveWorkflows: () => g === void 0 ? void 0 : rt(g, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -339,16 +363,16 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 		});
 		se.set(t, { handle: r });
 	}
-	He(), ct((t) => Ue(e.store, t.subjectId, t.resourceType, t.resourceId));
+	Ue(), dt((t) => We(e.store, t.subjectId, t.resourceType, t.resourceId));
 	let ce = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? m({
 		handlers: e.discovered.outboxHandlers ?? [],
 		store: e.store,
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("outbox")
+		log: (e.log ?? j({ scope: "voltro:serve" })).child("outbox")
 	}) : void 0, y = f({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: S(e.port ?? 4e3),
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("connections")
+		publicUrl: C(e.port ?? 4e3),
+		log: (e.log ?? j({ scope: "voltro:serve" })).child("connections")
 	}), b = ae({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
@@ -360,101 +384,122 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 		namespaceIsolationOn: re,
 		...ce === void 0 ? {} : { outbox: { nudge: ce.nudge } },
 		...y.active ? { connections: { registry: y.registry } } : {}
-	}), le = j.succeed(ke, be), x = (t, n) => {
-		let r = t.pipe(A.provide(qe(n)));
-		return at((e.baseLayer ? r.pipe(A.provide(e.baseLayer)) : r).pipe(A.provide(le)));
-	}, de = Ye({
+	}), le = A.succeed(Me, xe), ue = (t, n) => {
+		let r = t.pipe(k.provide(Ye(n)));
+		return ct((e.baseLayer ? r.pipe(k.provide(e.baseLayer)) : r).pipe(k.provide(le)));
+	}, x = Ze({
 		store: e.store,
 		buildContext: (e, t, n) => b(e, t, n),
-		runEffect: x,
+		runEffect: ue,
 		undoCapture: D()
-	}), pe = ye(), me = L({
+	}), S = be(), fe = L({
 		buildContext: (e) => b(e),
-		runEffect: x
-	}), w = Xe({
+		runEffect: ue
+	}), me = {
 		buildContext: (e) => b(e),
-		finalize: (t, n) => je(Me(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(A.provide(qe(t)))
-	}), T = {};
+		finalize: (t, n) => Ne(Pe(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
+		provideEffect: (e, t) => e.pipe(k.provide(Ye(t)))
+	}, T = $e(me), he = Qe({
+		...me,
+		queryRows: (t) => e.store.query(t)
+	}), ge = tt({
+		...me,
+		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
+		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
+	}), E = {};
 	for (let n of [
 		...e.discovered.queries,
-		...pe.queries,
+		...S.queries,
 		...y.queries
-	]) T[n.descriptor.name] = (e) => I(w(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, Ze(n, e));
+	]) E[n.descriptor.name] = (e) => I(T(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, et(n, e));
 	for (let t of [
 		...e.discovered.mutations,
-		...pe.mutations,
+		...S.mutations,
 		...y.mutations
-	]) T[t.descriptor.name] = (e) => F(async (e, n) => de(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...y.actions]) T[t.descriptor.name] = (e) => F(async (e, n) => me(t, e, n), e, `action.${t.descriptor.name}`);
-	let ge = () => `public-${Math.random().toString(36).slice(2, 10)}`, _e = [...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-		descriptor: e.descriptor,
-		invoke: (t, n) => de(e, t, {
-			subject: n.subject,
-			traceId: ge()
-		})
-	})), ...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
-		descriptor: e.descriptor,
-		invoke: (t, n) => me(e, t, {
-			subject: n.subject,
-			traceId: ge()
-		})
-	}))], ve = _e.length > 0 ? Lt(It(_e), {
+	]) E[t.descriptor.name] = (e) => F(async (e, n) => x(t, e, n), e, `mutation.${t.descriptor.name}`);
+	for (let t of [...e.discovered.actions, ...y.actions]) E[t.descriptor.name] = (e) => F(async (e, n) => fe(t, e, n), e, `action.${t.descriptor.name}`);
+	let ve = () => `public-${Math.random().toString(36).slice(2, 10)}`, ye = [
+		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => he(e, t, {
+				subject: n.subject,
+				traceId: ve()
+			}),
+			subscribe: (t, n, r) => ge(e, t, {
+				subject: n.subject,
+				traceId: ve()
+			}, r)
+		})),
+		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => x(e, t, {
+				subject: n.subject,
+				traceId: ve()
+			})
+		})),
+		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+			descriptor: e.descriptor,
+			invoke: (t, n) => fe(e, t, {
+				subject: n.subject,
+				traceId: ve()
+			})
+		}))
+	], Se = ye.length > 0 ? Bt(zt(ye), {
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], E = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xe = E && E.length >= 16 ? [{
+	}) : [], Ce = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, we = Ce && Ce.length >= 16 ? [{
 		method: "POST",
-		path: Xt,
-		handle: an({
-			secret: E,
+		path: rn,
+		handle: fn({
+			secret: Ce,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Kt(H({})),
+			assetSink: Yt(U({})),
 			openArchive: (e) => (async function* () {
-				let t = H({}), n = await U((await A.runPromise(vt(t, e))).stream);
+				let t = U({}), n = await St((await k.runPromise(xt(t, e))).stream);
 				for await (let e of n) yield e instanceof Uint8Array ? e : new Uint8Array(e);
 			})()
 		})
 	}, {
 		method: "POST",
-		path: Zt,
-		handle: ln({
-			secret: E,
+		path: an,
+		handle: gn({
+			secret: Ce,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
-			loadProfile: un,
-			assetSource: qt(H({}), e.store),
+			loadProfile: _n,
+			assetSource: Xt(U({}), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = H({}), i = _t("storage", () => n.from(t()));
-				await A.runPromise(yt(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = U({}), i = bt("storage", () => n.from(t()));
+				await k.runPromise(H(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], Se = [
+	}] : [], O = [
 		...e.httpRoutes ?? [],
-		...ve,
-		...xe,
+		...Se,
+		...we,
 		...y.httpRoutes
 	];
-	for (let t of e.discovered.streams ?? []) T[t.descriptor.name] = (n) => Fe((r) => {
+	for (let t of e.discovered.streams ?? []) E[t.descriptor.name] = (n) => Ie((r) => {
 		let i = b(r), a = t.executor(n, i);
-		if (A.isEffect(a)) {
-			let t = a.pipe(A.provide(qe(i.store)));
-			return (e.baseLayer ? t.pipe(A.provide(e.baseLayer)) : t).pipe(A.provide(le));
+		if (k.isEffect(a)) {
+			let t = a.pipe(k.provide(Ye(i.store)));
+			return (e.baseLayer ? t.pipe(k.provide(e.baseLayer)) : t).pipe(k.provide(le));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? A.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? k.promise(() => a) : a;
 	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => F(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) E[t.definition.name] = (e) => F(async (e, n) => {
 		let r = n;
-		return et(g, {
+		return rt(g, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	te && (T[J.name] = (e) => I(w({
-		descriptor: J,
+	te && (E[At.name] = (e) => I(T({
+		descriptor: At,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -463,14 +508,14 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: gt(V("id", t), V("executionId", t)),
+				predicate: yt(V("id", t), V("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${J.name}`), T[Ot.name] = (e) => I(w({
-		descriptor: Ot,
+	}, e), t, `subscription.${At.name}`), E[X.name] = (e) => I(T({
+		descriptor: X,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [V("tag", t.tag)], ...t.status === void 0 ? [] : [V("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
@@ -479,13 +524,13 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : mt(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : _t(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Ot.name}`), T[Y.name] = (e) => I(w({
+	}, e), t, `subscription.${X.name}`), E[Y.name] = (e) => I(T({
 		descriptor: Y,
 		executor: (e) => {
 			let t = e.runId;
@@ -501,8 +546,8 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Y.name}`), T[q.name] = (e) => I(w({
-		descriptor: q,
+	}, e), t, `subscription.${Y.name}`), E[J.name] = (e) => I(T({
+		descriptor: J,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -517,8 +562,8 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${q.name}`), T[Et.name] = (e) => I(w({
-		descriptor: Et,
+	}, e), t, `subscription.${J.name}`), E[Ot.name] = (e) => I(T({
+		descriptor: Ot,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -533,8 +578,8 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Et.name}`), T[K.name] = (e) => I(w({
-		descriptor: K,
+	}, e), t, `subscription.${Ot.name}`), E[q.name] = (e) => I(T({
+		descriptor: q,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -549,63 +594,63 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${K.name}`), T[Tt.name] = (t) => F(async (t, n) => {
+	}, e), t, `subscription.${q.name}`), E[Dt.name] = (t) => F(async (t, n) => {
 		let r = t;
-		return await _(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Ne(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Tt.name}`), T[Dt.name] = (t) => F(async (t, n) => {
+		return await _(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Be(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Dt.name}`), E[kt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await _(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Dt.name}`), T[X.name] = (t) => F(async (t, n) => {
+	}, t, `action.${kt.name}`), E[jt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await _(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${X.name}`), T[kt.name] = (t) => F(async (t, n) => {
+	}, t, `action.${jt.name}`), E[Mt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await _(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${kt.name}`));
-	let Ce = [
-		...e.discovered.queries.map((e) => G(e.descriptor)),
-		...e.discovered.mutations.map((e) => Ct(e.descriptor)),
-		...e.discovered.actions.map((e) => W(e.descriptor)),
-		...pe.queries.map((e) => G(e.descriptor)),
-		...pe.mutations.map((e) => Ct(e.descriptor)),
-		...y.queries.map((e) => G(e.descriptor)),
-		...y.mutations.map((e) => Ct(e.descriptor)),
-		...y.actions.map((e) => W(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => wt(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => B(e.definition)),
+	}, t, `action.${Mt.name}`));
+	let Te = [
+		...e.discovered.queries.map((e) => K(e.descriptor)),
+		...e.discovered.mutations.map((e) => Tt(e.descriptor)),
+		...e.discovered.actions.map((e) => G(e.descriptor)),
+		...S.queries.map((e) => K(e.descriptor)),
+		...S.mutations.map((e) => Tt(e.descriptor)),
+		...y.queries.map((e) => K(e.descriptor)),
+		...y.mutations.map((e) => Tt(e.descriptor)),
+		...y.actions.map((e) => G(e.descriptor)),
+		...(e.discovered.streams ?? []).map((e) => Et(e.descriptor)),
+		...(e.discovered.workflows ?? []).map((e) => mt(e.definition)),
 		...te ? [
-			G(J),
-			G(Ot),
-			G(Y),
-			G(q),
-			G(Et),
-			G(K),
-			W(Tt),
-			W(Dt),
-			W(X),
-			W(kt)
+			K(At),
+			K(X),
+			K(Y),
+			K(J),
+			K(Ot),
+			K(q),
+			G(Dt),
+			G(kt),
+			G(jt),
+			G(Mt)
 		] : []
-	], we = ft.make(...Ce).middleware(bt).middleware(xt), O = j.succeed(bt, bt.of(({ headers: t, clientId: n }) => A.promise(() => e.resolveSubject(t, n)))), Te = j.succeed(xt, xt.of(({ clientId: e }) => A.succeed({ clientId: e }))), Ee = e.dormancyTenantId ?? "default", De = e.dormancy === "sleep" ? {
-		register: (t, n, r) => z(e.store, {
-			tenantId: r ?? Ee,
+	], Ee = ht.make(...Te).middleware(Ct).middleware(W), De = A.succeed(Ct, Ct.of(({ headers: t, clientId: n }) => k.promise(() => e.resolveSubject(t, n)))), Oe = A.succeed(W, W.of(({ clientId: e }) => k.succeed({ clientId: e }))), ke = e.dormancyTenantId ?? "default", je = e.dormancy === "sleep" ? {
+		register: (t, n, r) => ot(e.store, {
+			tenantId: r ?? ke,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => Le(e.store, {
-			tenantId: n ?? Ee,
+		cancel: (t, n) => Re(e.store, {
+			tenantId: n ?? ke,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, k = ne ? await import("@voltro/workflow") : void 0, N = k?.makeWorkflowRunRecorder({
+	} : void 0, N = ne ? await import("@voltro/workflow") : void 0, P = N?.makeWorkflowRunRecorder({
 		store: e.store,
-		...De === void 0 ? {} : { wakeups: De }
-	}), Ae = async (t, n) => {
-		await k.closeWorkflowChildrenForParent({
+		...je === void 0 ? {} : { wakeups: je }
+	}), ze = async (t, n) => {
+		await N.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: N,
+			recorder: P,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -616,7 +661,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				await o.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Ne = async (t, n, r) => {
+	}, Be = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -631,7 +676,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await N.recordEvent({
+		a && await P.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -640,16 +685,16 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Ae(n, "cancelled");
-	}, Re = [...tt(e.discovered.workflows ?? [], {
+		}), a && await ze(n, "cancelled");
+	}, Ve = [...it(e.discovered.workflows ?? [], {
 		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
 			subject: t.subject,
 			traceId: t.traceId
 		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
 		resolveStartContext: p
 	}, (t, n, r) => {
-		let i = k.getWorkflowVersionMetadata(t.definition);
-		return k.wrapWorkflowExecuteWithRunRecording({
+		let i = N.getWorkflowVersionMetadata(t.definition);
+		return N.wrapWorkflowExecuteWithRunRecording({
 			name: t.definition.name,
 			store: e.store,
 			subject: r.subject,
@@ -660,66 +705,66 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			workflowPatches: i.patches,
 			parentExecutionId: r?.parentExecutionId ?? null,
 			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Ae(e, t),
-			recorder: N
+			onParentClose: ({ executionId: e, status: t }) => ze(e, t),
+			recorder: P
 		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], ze = Re.length > 0 ? j.mergeAll(...Re) : j.empty;
-	((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0 && (o = Oe.make(ze.pipe(j.provideMerge(e.workflowEngineLayer))), await o.runPromise(A.void), a = (e.discovered.workflows?.length ?? 0) > 0 ? $e({
+	}), ...e.discovered.workflowWorkers ?? []], He = Ve.length > 0 ? A.mergeAll(...Ve) : A.empty;
+	((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0 && (o = Ae.make(He.pipe(A.provideMerge(e.workflowEngineLayer))), await o.runPromise(k.void), a = (e.discovered.workflows?.length ?? 0) > 0 ? nt({
 		workflows: e.discovered.workflows ?? [],
 		runEffect: (e) => o.runPromise(e),
 		rememberStartContext: d,
 		signal: async (t, n, r) => {
-			let i = await k.sendWorkflowSignal({
+			let i = await N.sendWorkflowSignal({
 				store: e.store,
-				recorder: N,
+				recorder: P,
 				target: t,
 				signalName: n,
 				payload: r
 			});
-			return await o.runPromise(k.completeSuspendingSignal({
+			return await o.runPromise(N.completeSuspendingSignal({
 				store: e.store,
 				target: t,
 				signalName: n,
 				payload: r
 			})).catch(() => {}), i;
 		},
-		update: (t, n, r, i) => k.sendWorkflowUpdate({
+		update: (t, n, r, i) => N.sendWorkflowUpdate({
 			store: e.store,
-			recorder: N,
+			recorder: P,
 			target: t,
 			updateName: n,
 			payload: r,
 			...i === void 0 ? {} : { options: i }
 		}),
-		listRuns: (t) => fe(e.store, t),
-		retry: (t, n) => ue({
+		listRuns: (t) => pe(e.store, t),
+		retry: (t, n) => de({
 			store: e.store,
 			workflows: e.discovered.workflows ?? [],
 			runPromise: (e) => o.runPromise(e)
 		}, t, n)
 	}) : void 0);
-	let Be = j.mergeAll(we.toLayer(T), O, Te), Ve = he(T, e.discovered.queries.map((e) => e.descriptor.name), te), Ge = j.mergeAll(we.toLayer(Ve), O, Te), R = e.observability, Ke = await Ie({
+	let Ke = A.mergeAll(Ee.toLayer(E), De, Oe), qe = _e(E, e.discovered.queries.map((e) => e.descriptor.name), te), Je = A.mergeAll(Ee.toLayer(qe), De, Oe), R = e.observability, st = await Le({
 		...R && R.spanProcessors.length > 0 ? { extraSpanProcessors: R.spanProcessors } : {},
 		...R && R.metricReaders.length > 0 ? { extraMetricReaders: R.metricReaders } : {},
 		...R && Object.keys(R.resourceAttributes).length > 0 ? { resourceAttributes: R.resourceAttributes } : {},
 		...R && R.sampler !== void 0 ? { sampler: R.sampler } : {}
-	}), Qe = !1, it = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, ot = ut({
-		group: we,
-		handlersLayer: Be,
-		httpHandlersLayer: Ge,
+	}), lt = !1, gt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, vt = B({
+		group: Ee,
+		handlersLayer: Ke,
+		httpHandlersLayer: Je,
 		port: e.port ?? 4e3,
 		path: e.path ?? "/ws",
-		tracerLayer: Ke.layer,
+		tracerLayer: st.layer,
 		healthCheck: {
-			isReady: () => Qe,
-			...it ? { ping: it } : {}
+			isReady: () => lt,
+			...gt ? { ping: gt } : {}
 		},
-		...Se.length > 0 ? { httpRoutes: Se } : {},
+		...O.length > 0 ? { httpRoutes: O } : {},
 		...se.size > 0 ? { webhookRoutes: se } : {}
 	});
-	if (await Pe(ot), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? We(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : lt;
-		c = await dt(e.discovered.schedules ?? [], {
+	if (await Fe(vt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Ge(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ft;
+		c = await pt(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -738,16 +783,19 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				warn: (e, t) => {
 					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 				},
+				error: (e, t) => {
+					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				},
 				debug: () => {}
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
 		}), e.onSchedulerReady?.(c);
 	}
-	let pt = e.log ?? M({ scope: "voltro:serve" }), ht, Z;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (ht = s(e.discovered.subscribers ?? [], e.store, pt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = pt.child("reaction");
-		Z = ee(e.discovered.reactions ?? [], e.store, {
+	let Z = e.log ?? j({ scope: "voltro:serve" }), Nt, Pt;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Nt = s(e.discovered.subscribers ?? [], e.store, Z.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = Z.child("reaction");
+		Pt = ee(e.discovered.reactions ?? [], e.store, {
 			runAct: async (n, r) => {
 				if (n.kind === "workflow") {
 					if (g === void 0) {
@@ -755,16 +803,16 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 						return;
 					}
 					let e = r.new ?? r.old ?? {};
-					await et(g, {
+					await rt(g, {
 						traceId: `reaction:${n.workflow}`,
 						source: `reaction:${n.workflow}`
 					}).start(n.workflow, e);
 					return;
 				}
-				await C(n.agent, r, {
+				await w(n.agent, r, {
 					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(me(e, t, n)),
-					makeSubject: (e) => St(e),
+					runAction: (e, t, n) => Promise.resolve(fe(e, t, n)),
+					makeSubject: (e) => wt(e),
 					now: () => Date.now(),
 					log: t
 				});
@@ -772,7 +820,7 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			checkBudget: async (n, r) => {
 				try {
 					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await A.runPromise(A.either(t(e.store, {
+					return (await k.runPromise(k.either(t(e.store, {
 						tenantId: n,
 						limitUsd: r
 					}))))._tag === "Right";
@@ -782,124 +830,121 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			}
 		}, t);
 	}
-	let At;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (At = await i({
+	let Ft;
+	return (e.discovered.aggregates?.length ?? 0) > 0 && (Ft = await i({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: pt.child("aggregate"),
+		log: Z.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), le = j.succeed(ke, At.registry)), Qe = !0, e.bootTiming?.mark("ready"), {
+	}), le = A.succeed(Me, Ft.registry)), lt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: t,
-		server: ot,
+		server: vt,
 		scheduler: c,
 		close: async () => {
-			Qe = !1, At?.detach(), Z?.(), ht?.(), await c?.shutdown(), t.close(), await o?.dispose(), await new Promise((e) => ot.close(() => e()));
+			lt = !1, Ft?.detach(), Pt?.(), Nt?.(), await c?.shutdown(), t.close(), await o?.dispose(), await new Promise((e) => vt.close(() => e()));
 		}
 	};
-}, $ = M({ scope: "voltro:serve" }), pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", mn = (e, t) => {
-	let n = e.indexOf(t);
-	return n >= 0 ? e[n + 1] : void 0;
-}, hn = async (e) => {
+}, $ = j({ scope: "voltro:serve" }), bn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", xn = $t, Sn = async (e) => {
 	let t = O(process.cwd());
-	if (N(t)) {
+	if (je(t)) {
 		let n;
 		try {
-			let e = await import(De(t).href);
+			let e = await import(Oe(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return gn(e);
-}, gn = async (i) => {
-	let s = Te();
-	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), Pt();
-	let f = process.cwd(), ee = Number(process.env.PORT ?? mn(i, "--port") ?? 4e3), m = await w(f);
-	ot(it(m?.secrets)), await e({
+	return Cn(e);
+}, Cn = async (i) => {
+	let s = Ee();
+	process.env.NODE_ENV || (process.env.NODE_ENV = "production"), Lt();
+	let f = process.cwd(), ee = Number(process.env.PORT ?? xn(i, "--port") ?? 4e3), m = await he(f);
+	lt(st(m?.secrets)), await e({
 		rawEnv: m?.env,
 		appType: "api",
 		root: f,
 		log: $,
 		generateTypes: !1
 	}), s.mark("config");
-	let h = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), _ = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", ae = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, ue = we(f);
-	if (!Ce() && N(ue)) try {
-		let e = await import(De(ue).href);
+	let h = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), _ = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", ae = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, de = Te(f);
+	if (!we() && je(de)) try {
+		let e = await import(Oe(de).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Ee(f, n)] = r;
-			Se(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
+			for (let [n, r] of Object.entries(e.modules)) t[De(f, n)] = r;
+			Ce(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let S = await ce(f), C = await ge(S, { cdc: _ && ae !== void 0 }), fe = S.filter((e) => xe.test(e)), he = fe.length > 0 ? await g(fe, $.child("webhooks")) : void 0, ye = me({
-		mix: C.featureMix,
+	let C = await se(f), w = await E(C, { cdc: _ && ae !== void 0 }), pe = C.filter((e) => Se.test(e)), _e = pe.length > 0 ? await g(pe, $.child("webhooks")) : void 0, be = T({
+		mix: w.featureMix,
 		plugins: m?.plugins ?? [],
 		cdc: _ && ae !== void 0,
 		...ae ? { cdcDialect: ae } : {}
-	}), be = m?.analytics !== void 0 && m.analytics.kind !== "noop" && h !== "memory" ? (await E(h)).makeSqlLayer(x()) : void 0, D = await ne({
+	}), xe = m?.analytics !== void 0 && m.analytics.kind !== "noop" && h !== "memory" ? (await x(h)).makeSqlLayer(S()) : void 0, D = await ne({
 		spec: m?.analytics,
-		sqlLayer: be,
+		sqlLayer: xe,
 		log: $
 	}), O = (() => {
-		let e = new Set(C.tables.map((e) => e.tableName)), t = [...C.tables];
-		for (let n of [...ye, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		let e = new Set(w.tables.map((e) => e.tableName)), t = [...w.tables];
+		for (let n of [...be, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of O) ht(e);
-	let M = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (pn(M, h, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await E(h)).makeSqlLayer(x()), t = await A.runPromise(pt.SqlClient.pipe(A.flatMap((e) => Nt(e, O, {
-			appliedBy: `serve:${M}`,
+	for (let e of O) vt(e);
+	let j = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (bn(j, h, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await x(h)).makeSqlLayer(S()), t = await k.runPromise(gt.SqlClient.pipe(k.flatMap((e) => It(e, O, {
+			appliedBy: `serve:${j}`,
 			environment: "prod",
 			dialectId: h
-		})), A.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Mt(t, h)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Mt(t, h));
+		})), k.provide(e)));
+		t.kind === "prod-mismatch" && ($.error(Ft(t, h)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Ft(t, h));
 	}
-	let ke = Qe(O);
+	let Me = R(O);
 	s.mark("discover");
-	let P = await pe(m, void 0);
+	let M = await me(m, void 0);
 	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: je, invalidationBus: Me, snapshotCache: Pe, cache: F, backend: Fe, dispose: I } = await y({ env: process.env });
-	$.info(`cache backend resolved: ${Fe}` + (Fe === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
-		A.runFork(Me.publish(e.table));
+	let { service: Ne, invalidationBus: Pe, snapshotCache: Fe, cache: F, backend: Ie, dispose: I } = await y({ env: process.env });
+	$.info(`cache backend resolved: ${Ie}` + (Ie === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), M.onChange((e) => {
+		k.runFork(Pe.publish(e.table));
 	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: Ie, service: Le } = await R({ store: P });
+	let { kv: Le, service: Re } = await qe({ store: M });
 	s.mark("store");
-	let He = Ne({
-		store: P,
+	let Ue = P({
+		store: M,
 		sink: D.sink,
 		log: $
-	}), Ue = n({
-		store: P,
+	}), We = n({
+		store: M,
 		dialect: h
-	}), L = m?.plugins ?? [], qe = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Je, Ye;
-	h !== "memory" && (Je = Oe.make((await E(h)).makeSqlLayer(x())), Ye = await Je.runPromise(pt.SqlClient));
-	let Xe = Ke({
+	}), L = m?.plugins ?? [], Ye = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Xe, Ze;
+	h !== "memory" && (Xe = Ae.make((await x(h)).makeSqlLayer(S())), Ze = await Xe.runPromise(gt.SqlClient));
+	let Qe = Je({
 		coordinator: [
 			"postgres",
 			"mariadb",
 			"mysql",
 			"mssql"
-		].includes(h) ? We(P, qe, $) : lt,
-		replicaId: qe,
+		].includes(h) ? Ge(M, Ye, $) : ft,
+		replicaId: Ye,
 		log: $
-	}), Ze = [], $e = {
-		...Ye ? { sql: Ye } : {},
+	}), $e = [], et = {
+		...Ze ? { sql: Ze } : {},
 		scheduleCoordinated: (e, t, n) => {
-			let r = Xe(e, t, n);
-			return Ze.push(r), r;
+			let r = Qe(e, t, n);
+			return $e.push(r), r;
 		}
 	};
-	for (let e of L) e.bindDataStore?.(P, $e);
-	let et = L.filter((e) => typeof e.onChangeEvent == "function");
-	if (et.length > 0) {
-		let e = P.changeScope ?? "local";
-		P.onChange((t) => {
+	for (let e of L) e.bindDataStore?.(M, et);
+	let tt = L.filter((e) => typeof e.onChangeEvent == "function");
+	if (tt.length > 0) {
+		let e = M.changeScope ?? "local";
+		M.onChange((t) => {
 			let n = {
 				table: t.table,
 				op: t.op,
@@ -908,62 +953,62 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 				...t.origin === void 0 ? {} : { origin: t.origin },
 				changeScope: e
 			};
-			for (let e of et) A.runFork(e.onChangeEvent(n).pipe(A.catchAllCause((t) => A.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: k.pretty(t) })))));
+			for (let e of tt) k.runFork(e.onChangeEvent(n).pipe(k.catchAllCause((t) => k.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: ke.pretty(t) })))));
 		});
 	}
-	let tt = oe({
+	let nt = oe({
 		plugins: L,
 		appName: m?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	L.length && await tt.activate(), s.mark("plugins");
-	let nt = await tt.gatherObservability(), rt = await b(P, m, h, {
+	L.length && await nt.activate(), s.mark("plugins");
+	let rt = await nt.gatherObservability(), it = await b(M, m, h, {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}), z = m?.apiKeys, at = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", st = z ? Ge(ze(P), { prefix: at }) : void 0, ct = st ? [Ve(st, { prefix: at })] : [], ut = ve([...m?.auth?.strategies ?? [], ...ct], Ft(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1), dt = [...m?.restRoutes ?? [], ...st ? Ae(st, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = m?.idempotency, ft = B ? {
-		store: Be(P),
+	}), z = m?.apiKeys, at = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", ot = z ? Ke(Be(M), { prefix: at }) : void 0, ct = ot ? [He(ot, { prefix: at })] : [], ut = ve([...m?.auth?.strategies ?? [], ...ct], Rt(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1), dt = [...m?.restRoutes ?? [], ...ot ? N(ot, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = m?.idempotency, pt = B ? {
+		store: Ve(M),
 		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
 		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
-	} : void 0, mt = dt.length > 0 ? Lt(dt, {
-		store: P,
+	} : void 0, mt = dt.length > 0 ? Bt(dt, {
+		store: M,
 		resolveSubject: (e) => ut({
 			headers: e,
 			clientId: -1
 		}),
-		...ft ? { idempotency: ft } : {}
-	}) : [], V = L.map((e) => e.services).filter((e) => e !== void 0), gt = j.mergeAll(ie({
+		...pt ? { idempotency: pt } : {}
+	}) : [], ht = L.map((e) => e.services).filter((e) => e !== void 0), _t = A.mergeAll(ie({
 		analyticsLayer: D.layer,
-		cacheService: je,
-		kvService: Le,
-		pluginServices: V,
+		cacheService: Ne,
+		kvService: Re,
+		pluginServices: ht,
 		userLayers: m?.layers ?? []
-	}), d), _t = m?.scheduling ?? {}, vt = _t.trigger ?? "self", yt = /* @__PURE__ */ new Set([
+	}), d), V = m?.scheduling ?? {}, yt = V.trigger ?? "self", bt = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), H = _t.coordination ?? (yt.has(h) ? "advisoryLock" : "single"), U = H === "cluster" && yt.has(h), bt = U ? "cluster" : H === "advisoryLock" && yt.has(h) ? "advisoryLock" : "single";
-	H === "cluster" && !U && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), H === "advisoryLock" && !yt.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let xt, W = C.workflows.length > 0 || C.workflowWorkers.length > 0 || C.eventTriggers.length > 0 || (he?.outgoing.length ?? 0) > 0 || U, St;
-	if (W) {
+	]), xt = V.coordination ?? (bt.has(h) ? "advisoryLock" : "single"), H = xt === "cluster" && bt.has(h), U = H ? "cluster" : xt === "advisoryLock" && bt.has(h) ? "advisoryLock" : "single";
+	xt === "cluster" && !H && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), xt === "advisoryLock" && !bt.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let St, Ct = w.workflows.length > 0 || w.workflowWorkers.length > 0 || w.eventTriggers.length > 0 || (_e?.outgoing.length ?? 0) > 0 || H, W;
+	if (Ct) {
 		if (h === "mssql") {
 			let e = await l(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), i = U ? C.schedules.filter((e) => (e.trigger ?? vt) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), i = H ? w.schedules.filter((e) => (e.trigger ?? yt) === "self").map((e) => t({
 			name: e.name,
-			cron: Re(e),
+			cron: ze(e),
 			execute: async () => {
-				await xt?.fireFromCluster(e.name);
+				await St?.fireFromCluster(e.name);
 			}
 		})) : [];
-		St = h === "memory" ? e.layerMemory : await (async () => {
-			let e = await E(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+		W = h === "memory" ? e.layerMemory : await (async () => {
+			let e = await x(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(x()),
+				sqlClientLayer: e.makeSqlLayer(S()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -971,18 +1016,18 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			});
 		})();
 	}
-	let Ct = le(L, t()), G = S.filter((e) => /\.subscribe\.tsx?$/.test(e)), wt = G.length > 0 ? await u(G, $) : [], Tt = S.filter((e) => /\.reaction\.tsx?$/.test(e)), Et = Tt.length > 0 ? await r(Tt, $) : [], K = S.filter((e) => /\.outbox\.tsx?$/.test(e)), Dt = K.length > 0 ? await p(K, $) : [], q = S.filter((e) => /\.aggregate\.tsx?$/.test(e)), J = q.length > 0 ? await te(q, $) : [], Y = o();
-	if (J.length > 0 && h !== "memory") try {
-		Y = a((await E(h)).makeSqlLayer(x()));
+	let G = ue(L, t()), wt = C.filter((e) => /\.subscribe\.tsx?$/.test(e)), Tt = wt.length > 0 ? await u(wt, $) : [], K = C.filter((e) => /\.reaction\.tsx?$/.test(e)), Et = K.length > 0 ? await r(K, $) : [], Dt = C.filter((e) => fe.test(e)), Ot = Dt.length > 0 ? await p(Dt, $) : [], q = C.filter((e) => /\.aggregate\.tsx?$/.test(e)), kt = q.length > 0 ? await te(q, $) : [], J = o();
+	if (kt.length > 0 && h !== "memory") try {
+		J = a((await x(h)).makeSqlLayer(S()));
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Ot = h === "memory" ? lt : We(P, `aggregate@${process.pid}`, $), X = [], kt = [], Z = S.filter((e) => de.test(e));
-	if (Z.length > 0) {
-		let e = $.child("agent"), t = S.filter((e) => v.test(e));
-		t.length > 0 && await _e(t, e);
-		let n = await T(Z, e);
-		for (let e of n.agents) for (let t of se(e)) (t.kind === "action" ? X : kt).push({
+	let At = h === "memory" ? ft : Ge(M, `aggregate@${process.pid}`, $), Y = [], X = [], jt = C.filter((e) => ye.test(e));
+	if (jt.length > 0) {
+		let e = $.child("agent"), t = C.filter((e) => ce.test(e));
+		t.length > 0 && await ge(t, e);
+		let n = await le(jt, e);
+		for (let e of n.agents) for (let t of v(e)) (t.kind === "action" ? Y : X).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -990,36 +1035,36 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
 	s.mark("workflow");
-	let At = await fn({
+	let Mt = await yn({
 		bootTiming: s,
 		discovered: {
-			queries: [...C.queries, ...kt],
-			mutations: C.mutations,
-			actions: [...C.actions, ...X],
-			streams: C.streams,
-			workflows: C.workflows,
-			workflowWorkers: C.workflowWorkers,
-			eventTriggers: C.eventTriggers,
-			schedules: C.schedules,
-			subscribers: wt,
-			outboxHandlers: Dt,
-			connections: C.connections,
+			queries: [...w.queries, ...X],
+			mutations: w.mutations,
+			actions: [...w.actions, ...Y],
+			streams: w.streams,
+			workflows: w.workflows,
+			workflowWorkers: w.workflowWorkers,
+			eventTriggers: w.eventTriggers,
+			schedules: w.schedules,
+			subscribers: Tt,
+			outboxHandlers: Ot,
+			connections: w.connections,
 			reactions: Et,
-			aggregates: J,
-			...he === void 0 ? {} : { webhooks: he }
+			aggregates: kt,
+			..._e === void 0 ? {} : { webhooks: _e }
 		},
 		log: $,
 		analytics: D.sink,
-		aggregateStorage: Y,
-		aggregateCoordinator: Ot,
-		store: P,
-		kv: Ie,
+		aggregateStorage: J,
+		aggregateCoordinator: At,
+		store: M,
+		kv: Le,
 		cache: F,
-		snapshotCache: Pe,
-		schemaRegistry: ke,
-		tenantScopedTables: C.tenantScopedTables,
-		softDeleteScopedTables: C.softDeleteScopedTables,
-		dataTransferSnapshot: jt(O),
+		snapshotCache: Fe,
+		schemaRegistry: Me,
+		tenantScopedTables: w.tenantScopedTables,
+		softDeleteScopedTables: w.softDeleteScopedTables,
+		dataTransferSnapshot: Pt(O),
 		dataTransferDialect: h,
 		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
 		resolveSubject: (e, t) => ut({
@@ -1027,44 +1072,46 @@ var Xt = "/_voltro/admin/import", Zt = "/_voltro/admin/export", Q = (e, t) => ({
 			clientId: t
 		}),
 		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...mt],
-		...gt ? { baseLayer: gt } : {},
-		...St === void 0 ? {} : { workflowEngineLayer: St },
-		scheduleDefaultTrigger: vt,
-		scheduleCoordination: bt,
-		scheduleArmSelf: !U,
+		..._t ? { baseLayer: _t } : {},
+		...W === void 0 ? {} : { workflowEngineLayer: W },
+		scheduleDefaultTrigger: yt,
+		scheduleCoordination: U,
+		scheduleArmSelf: !H,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Ct === void 0 ? {} : { scheduleFireInterceptor: Ct },
+		...G === void 0 ? {} : { scheduleFireInterceptor: G },
 		onSchedulerReady: (e) => {
-			xt = e;
+			St = e;
 		},
-		observability: nt,
+		observability: rt,
 		port: ee,
 		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {}
 	});
 	c(re([
-		C.queries,
-		C.mutations,
-		C.actions,
-		C.streams
+		w.queries,
+		w.mutations,
+		w.actions,
+		w.streams
 	]), (e) => {
 		$.warn(e);
 	}), $.info(`API listening on :${ee}`, {
 		dialect: h,
-		queries: C.queries.length,
-		mutations: C.mutations.length,
-		actions: C.actions.length,
-		streams: C.streams.length,
-		workflows: C.workflows.length,
-		workflowWorkers: C.workflowWorkers.length,
-		schedules: C.schedules.length,
-		scheduleCoordination: bt
+		queries: w.queries.length,
+		mutations: w.mutations.length,
+		actions: w.actions.length,
+		streams: w.streams.length,
+		workflows: w.workflows.length,
+		workflowWorkers: w.workflowWorkers.length,
+		schedules: w.schedules.length,
+		scheduleCoordination: U
 	}), s.finish($);
-	let It = () => {
-		for (let e of Ze) e.stop();
-		He.detach(), Ue.stop(), I(), Je?.dispose(), Promise.resolve(tt.deactivate()).then(() => rt?.close()).then(() => D.dispose()).then(() => At.close()).then(() => P.close?.()).then(() => process.exit(0));
+	let Z = () => {
+		for (let e of $e) e.stop();
+		Ue.detach(), We.stop(), I(), Xe?.dispose(), setTimeout(() => process.exit(0), 1e4).unref?.(), Promise.resolve(nt.deactivate()).then(() => it?.close()).then(() => D.dispose()).then(() => Mt.close()).then(() => M.close?.()).then(() => process.exit(0)).catch((e) => {
+			console.error("serve: shutdown step failed, exiting anyway:", e), process.exit(0);
+		});
 	};
-	return process.on("SIGINT", It), process.on("SIGTERM", It), await new Promise(() => {}), 0;
+	return process.on("SIGINT", Z), process.on("SIGTERM", Z), await new Promise(() => {}), 0;
 };
 //#endregion
-export { hn as n, un as r, gn as t };
+export { $t as a, nn as i, Sn as n, tn as o, _n as r, en as s, Cn as t };