@voltro/cli 0.21.0 → 0.22.1

package/dist/{serveCommand-qHJCs0cX.js → serveCommand-DXJOARkO.js}

@@ -1,54 +1,54 @@
-import { at as e, t } from "./inspectMetrics-DMjWBQif.js";
+import { at as e, t } from "./inspectMetrics-9ZSuDeqD.js";
 import { s as n } from "./seedRunner-D6eu-u5U.js";
 import { r, t as i } from "./appModuleLoader-C9r9mxZt.js";
 import { f as a, m as o, n as s, p as c, u as l } from "./frameworkTableAssembly-sg41s14F.js";
 import { l as u } from "./fileConventions-CBNPZVOV.js";
-import { p as d } from "./inspect-Dwx0_tUj.js";
-import { $ as ee, A as f, B as p, C as te, D as m, E as ne, F as re, G as ie, H as ae, I as h, K as oe, L as g, M as _, N as se, O as v, P as y, R as ce, S as le, T as ue, V as de, W as fe, _ as b, at as pe, b as me, c as he, et as ge, h as x, i as _e, it as S, j as ve, k as ye, lt as C, m as be, nt as w, o as T, ot as xe, q as Se, r as Ce, rt as we, st as Te, t as Ee, tt as De, u as Oe, ut as ke, v as Ae, w as je, x as E, y as Me, z as D } from "./dev-DKb92NYX.js";
-import { l as O, r as Ne } from "./apiBuild-BHOtsQkp.js";
-import { t as Pe } from "./bootTiming-BdyP9nYw.js";
-import { n as Fe } from "./cliArgs-qdZSElM3.js";
-import { join as Ie } from "node:path";
-import { pathToFileURL as Le } from "node:url";
-import { Cause as Re, Effect as k, Layer as A, ManagedRuntime as ze } from "effect";
-import { createLogger as j } from "@voltro/logger";
-import { existsSync as Be } from "node:fs";
-import { AggregateRegistry as M, Dispatcher as Ve, apiKeyManagementRoutes as N, applySoftDeleteScope as He, applyTenantScope as Ue, attachAnalyticsMirror as We, awaitServerListening as Ge, bindMutation as P, bindStream as Ke, bindSubscription as F, buildTracingLayer as qe, cancelWakeup as Je, compileCron as Ye, dataStoreApiKeyStore as Xe, dataStoreIdempotencyStore as Ze, formatServerOnlyLeaks as Qe, frameworkApiKeyStrategy as $e, installPolicyGuardResolver as et, loadResourceTuples as tt, makeActionRunner as I, makeAdvisoryLockCoordinator as nt, makeApiKeyService as rt, makeApiKeyUsageBuffer as it, makeApiKeyUsageFlusher as at, makeAsyncKv as ot, makeCoordinatedScheduler as st, makeEffectStoreLayer as L, makeLazyWorkflowFacade as ct, makeMutationRunner as lt, makeOneShotQueryRunner as ut, makeQueryDescriptorProducer as dt, makeQueryReauthorizer as ft, makeQuerySubscriber as pt, makeSchemaRegistry as mt, makeWorkflowFacade as ht, makeWorkflowFacadeWithCallerContext as gt, makeWorkflowLayers as _t, noopKv as R, recordSubscriptionDelivery as vt, registerWakeup as yt, resolveSecretsBackend as bt, runProvidedEffect as z, setSecretsBackend as xt, setSystemStoreHandle as St, setTupleSource as Ct, singleCoordinator as wt, startRpcServer as Tt, startScheduler as Et, workflowToRpc as B, wrapStoreWithBootCodec as Dt } from "@voltro/runtime";
+import { p as d } from "./inspect-_ldwsAwH.js";
+import { $ as ee, A as f, B as p, C as te, D as m, E as ne, F as re, G as ie, H as ae, I as h, K as oe, L as g, M as _, N as se, O as v, P as y, R as ce, S as le, T as ue, V as de, W as fe, _ as b, at as pe, b as me, c as he, et as ge, h as _e, i as x, it as S, j as ve, k as ye, lt as be, m as C, nt as w, o as T, ot as xe, q as Se, r as Ce, rt as we, st as Te, t as Ee, tt as De, u as Oe, ut as ke, v as Ae, w as je, x as E, y as Me, z as Ne } from "./dev-BRiPgbKw.js";
+import { l as D, r as O } from "./apiBuild-DiWxVz-M.js";
+import { t as k } from "./bootTiming-BdyP9nYw.js";
+import { n as Pe } from "./cliArgs-qdZSElM3.js";
+import { join as Fe } from "node:path";
+import { pathToFileURL as Ie } from "node:url";
+import { Cause as Le, Effect as A, Layer as j, ManagedRuntime as Re } from "effect";
+import { createLogger as M } from "@voltro/logger";
+import { existsSync as ze } from "node:fs";
+import { AggregateRegistry as N, Dispatcher as Be, apiKeyManagementRoutes as Ve, applySoftDeleteScope as He, applyTenantScope as Ue, attachAnalyticsMirror as We, awaitServerListening as Ge, bindMutation as P, bindStream as Ke, bindSubscription as F, buildTracingLayer as qe, cancelWakeup as Je, compileCron as I, dataStoreApiKeyStore as Ye, dataStoreIdempotencyStore as Xe, formatServerOnlyLeaks as Ze, frameworkApiKeyStrategy as Qe, installPolicyGuardResolver as $e, loadResourceTuples as et, makeActionRunner as L, makeAdvisoryLockCoordinator as tt, makeApiKeyService as nt, makeApiKeyUsageBuffer as rt, makeApiKeyUsageFlusher as it, makeAsyncKv as at, makeCoordinatedScheduler as ot, makeEffectStoreLayer as st, makeLazyWorkflowFacade as ct, makeMutationRunner as lt, makeOneShotQueryRunner as ut, makeQueryDescriptorProducer as dt, makeQueryReauthorizer as ft, makeQuerySubscriber as pt, makeSchemaRegistry as mt, makeWorkflowFacade as ht, makeWorkflowFacadeWithCallerContext as gt, makeWorkflowLayers as _t, noopKv as R, onProcessShutdown as vt, recordSubscriptionDelivery as yt, registerWakeup as z, resolveSecretsBackend as bt, runProvidedEffect as B, setSecretsBackend as xt, setSystemStoreHandle as St, setTupleSource as Ct, singleCoordinator as wt, startRpcServer as Tt, startScheduler as Et, workflowToRpc as V, wrapStoreWithBootCodec as Dt } from "@voltro/runtime";
 import { RpcGroup as Ot } from "@effect/rpc";
 import { SqlClient as kt } from "@effect/sql";
-import { and as At, ensureTableRegistered as jt, eq as V, or as Mt } from "@voltro/database";
-import { appStorageProvider as H, fromNodeReadable as Nt, getObjectStream as Pt, putObjectStream as U, toNodeReadable as W } from "@voltro/plugin-storage";
-import { AuthMiddleware as Ft, ConnectionInfoMiddleware as G, actionToRpc as K, anonymousSubject as It, mutationToRpc as Lt, queryToRpc as q, streamToRpc as Rt, workflowCancelDescriptor as zt, workflowDomainEventsQueryDescriptor as Bt, workflowEventDeliveriesQueryDescriptor as J, workflowResumeDescriptor as Vt, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as X, workflowRunStepsQueryDescriptor as Z, workflowRunsQueryDescriptor as Ht, workflowSignalDescriptor as Ut, workflowUpdateDescriptor as Wt } from "@voltro/protocol";
-import { assertProductionSessionSecret as Gt } from "@voltro/protocol/session";
-import { createHash as Kt, timingSafeEqual as qt } from "node:crypto";
-import { declaredSnapshot as Jt, describeOutcome as Yt, runPlannedMigrations as Xt } from "@voltro/database/sql";
-import { getAuthSessionStrategy as Zt } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as Qt, restRoutesToHttpRoutes as $t } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as en, buildWebhooksService as tn, defaultIncomingPath as nn, deliverWebhookWorkflow as rn, mountIncomingWebhook as an } from "@voltro/plugin-webhooks";
-import { packBundle as on, runExport as sn, runImport as cn, storageBlobSink as ln, storageRefsBlobSource as un, unpackBundle as dn, unpackBundleToDir as fn } from "@voltro/data-transfer";
+import { and as At, ensureTableRegistered as jt, eq as H, or as Mt } from "@voltro/database";
+import { appStorageProvider as U, fromNodeReadable as Nt, getObjectStream as Pt, putObjectStream as Ft, toNodeReadable as W } from "@voltro/plugin-storage";
+import { AuthMiddleware as It, ConnectionInfoMiddleware as G, actionToRpc as K, anonymousSubject as Lt, isWireReachable as Rt, mutationToRpc as zt, queryToRpc as q, streamToRpc as Bt, workflowCancelDescriptor as Vt, workflowDomainEventsQueryDescriptor as J, workflowEventDeliveriesQueryDescriptor as Ht, workflowResumeDescriptor as Ut, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as X, workflowRunStepsQueryDescriptor as Wt, workflowRunsQueryDescriptor as Z, workflowSignalDescriptor as Gt, workflowUpdateDescriptor as Kt } from "@voltro/protocol";
+import { assertProductionSessionSecret as qt } from "@voltro/protocol/session";
+import { createHash as Jt, timingSafeEqual as Yt } from "node:crypto";
+import { declaredSnapshot as Xt, describeOutcome as Zt, runPlannedMigrations as Qt } from "@voltro/database/sql";
+import { getAuthSessionStrategy as $t } from "@voltro/plugin-auth";
+import { collectPublicApiRoutes as en, restRoutesToHttpRoutes as tn } from "@voltro/protocol/rest";
+import { buildDeliverWebhookExecute as nn, buildWebhooksService as rn, defaultIncomingPath as an, deliverWebhookWorkflow as on, mountIncomingWebhook as sn } from "@voltro/plugin-webhooks";
+import { packBundle as cn, runExport as ln, runImport as un, storageBlobSink as dn, storageRefsBlobSource as fn, unpackBundle as pn, unpackBundleToDir as mn } from "@voltro/data-transfer";
 //#region src/bootRefusal.ts
-var pn = "VoltroBootRefusal", mn = (e) => {
+var hn = "VoltroBootRefusal", gn = (e) => {
 	let t = Error(e);
-	return t.name = pn, t;
-}, hn = "/_voltro/admin/import", gn = "/_voltro/admin/export", Q = (e, t) => ({
+	return t.name = hn, t;
+}, _n = "/_voltro/admin/import", vn = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), _n = (e) => {
+}), yn = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, vn = (e, t) => qt(Kt("sha256").update(e).digest(), Kt("sha256").update(t).digest()), yn = (e, t) => {
+}, bn = (e, t) => Yt(Jt("sha256").update(e).digest(), Jt("sha256").update(t).digest()), xn = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = _n(e.headers);
-	return !n || !vn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, bn = j({ scope: "voltro:admin-import" }), xn = "VBUNDLE2", Sn = async function* (e) {
+	let n = yn(e.headers);
+	return !n || !bn(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, Sn = M({ scope: "voltro:admin-import" }), Cn = "VBUNDLE2", wn = async function* (e) {
 	yield e;
-}, Cn = (e) => async (t) => {
-	let n = yn(t, e.secret);
+}, Tn = (e) => async (t) => {
+	let n = xn(t, e.secret);
 	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === xn, c, l;
-	if (s) c = Sn(t.rawBody), l = "upload";
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Cn, c, l;
+	if (s) c = wn(t.rawBody), l = "upload";
 	else {
 		let n;
 		try {
@@ -62,11 +62,11 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 	}
 	let u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await dn(c, {
+		e.assetSink ? await pn(c, {
 			dir: f,
 			blobs: e.assetSink
-		}) : await fn(c, f);
-		let t = await k.runPromiseExit(cn({
+		}) : await mn(c, f);
+		let t = await A.runPromiseExit(un({
 			store: e.store,
 			bundleDir: f,
 			...r ? { mode: r } : {},
@@ -74,14 +74,14 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			...a ? { atomic: a } : {},
 			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
 			force: o,
-			onWarn: (e) => bn.warn("admin.import", { message: e }),
+			onWarn: (e) => Sn.warn("admin.import", { message: e }),
 			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
 		}));
 		if (t._tag === "Failure") {
 			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
 			if (e && e._tag === "SchemaDriftError") {
 				let t = e;
-				return bn.warn("admin.import refused (schema drift)", {
+				return Sn.warn("admin.import refused (schema drift)", {
 					transport: l,
 					bundle: t.bundleFingerprint.slice(0, 16),
 					target: t.targetFingerprint.slice(0, 16)
@@ -96,7 +96,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			throw Error(String(e?.message ?? e ?? "import failed"));
 		}
 		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return bn.info("admin.import", {
+		return Sn.info("admin.import", {
 			transport: l,
 			tables: n.tables.length,
 			rows: s,
@@ -108,7 +108,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			transport: l
 		});
 	} catch (e) {
-		return bn.warn("admin.import failed", {
+		return Sn.warn("admin.import failed", {
 			transport: l,
 			error: e?.message ?? String(e)
 		}), Q(500, {
@@ -121,18 +121,18 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			force: !0
 		});
 	}
-}, wn = j({ scope: "voltro:admin-export" }), Tn = async (e) => {
+}, En = M({ scope: "voltro:admin-export" }), Dn = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
-}, En = (e) => typeof e.tenant == "string" && e.tenant ? {
+}, On = (e) => typeof e.tenant == "string" && e.tenant ? {
 	kind: "tenant",
 	tenantId: e.tenant
 } : Array.isArray(e.tables) && e.tables.length ? {
 	kind: "tables",
 	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, Dn = (e) => async (t) => {
-	let n = yn(t, e.secret);
+} : { kind: "all" }, kn = (e) => async (t) => {
+	let n = xn(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -152,9 +152,9 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? En(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? On(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await k.runPromise(sn({
+		let t = await A.runPromise(ln({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -170,10 +170,10 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		if (c) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => on({
+			return await e.putArchive(i, () => cn({
 				dir: f,
 				...l
-			})), wn.info("admin.export", {
+			})), En.info("admin.export", {
 				transport: "storage",
 				tables: t.tables.length,
 				rows: n,
@@ -187,11 +187,11 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 				transport: "storage"
 			});
 		}
-		let d = await Tn(on({
+		let d = await Dn(cn({
 			dir: f,
 			...l
 		}));
-		return wn.info("admin.export", {
+		return En.info("admin.export", {
 			transport: "download",
 			tables: t.tables.length,
 			rows: n,
@@ -208,7 +208,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			}
 		};
 	} catch (e) {
-		return wn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+		return En.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
 			error: "export failed",
 			message: e?.message ?? String(e)
 		});
@@ -218,7 +218,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			force: !0
 		});
 	}
-}, On = async (e) => {
+}, An = async (e) => {
 	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
 		e,
 		`${e}.profile.ts`,
@@ -229,8 +229,8 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 	let a = await import(i), o = a.default ?? a.profile;
 	if (!o) throw Error(`data profile '${i}' has no default export`);
 	return o;
-}, kn = (e, t, n = {}) => (async function* () {
-	let r = await W((await k.runPromise(Pt(e, t).pipe(k.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
+}, jn = (e, t, n = {}) => (async function* () {
+	let r = await W((await A.runPromise(Pt(e, t).pipe(A.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
 		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
 	};
 	try {
@@ -239,7 +239,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 	} finally {
 		a && clearTimeout(a), r.destroy();
 	}
-})(), An = {
+})(), Mn = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -248,21 +248,21 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, jn = async (e) => {
+}, Nn = async (e) => {
 	St({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = new Ve({
+	let t = new Be({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => vt({
+		recordDelivery: (e) => yt({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), n = e.cache ?? An, r = e.kv ?? R, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
+	}), n = e.cache ?? Mn, r = e.kv ?? R, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
 		let i = {
 			...r,
 			source: r.source ?? `workflow:${t}`
@@ -272,7 +272,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			let r = await e.store.query({
 				table: "_voltro_workflow_start_contexts",
 				order: [],
-				predicate: V("executionId", n),
+				predicate: H("executionId", n),
 				projection: ["id"],
 				skip: void 0,
 				take: 1
@@ -300,7 +300,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			let t = (await e.store.query({
 				table: "_voltro_workflow_start_contexts",
 				order: [],
-				predicate: V("executionId", n),
+				predicate: H("executionId", n),
 				projection: void 0,
 				skip: void 0,
 				take: 1
@@ -318,7 +318,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
 			return;
 		}
-	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? ct(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, te = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? j({ scope: "voltro:serve" })).child("webhooks"), ae, h = e.discovered.webhooks;
+	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? ct(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, te = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? M({ scope: "voltro:serve" })).child("webhooks"), ae, h = e.discovered.webhooks;
 	if (h && h.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		let t = e.workflowEngineLayer, i = S({
 			store: e.store,
@@ -326,9 +326,9 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			cache: n,
 			kv: r
 		}), a = h.outgoing.map((e) => e.descriptor);
-		ae = tn(i, async (e) => {
-			let n = rn.execute(e).pipe(k.provide(rn.toLayer(en(i, { events: a })).pipe(A.provideMerge(t))));
-			k.runPromise(n).catch((t) => {
+		ae = rn(i, async (e) => {
+			let n = on.execute(e).pipe(A.provide(on.toLayer(nn(i, { events: a })).pipe(j.provideMerge(t))));
+			A.runPromise(n).catch((t) => {
 				ie.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -338,7 +338,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 	}
 	let oe = /* @__PURE__ */ new Map();
 	if (h) for (let e of h.incoming) {
-		let t = e.descriptor.path ?? nn(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = an(e.descriptor, {
+		let t = e.descriptor.path ?? an(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = sn(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
 			resolveWorkflows: () => d === void 0 ? void 0 : gt(d, {
 				traceId: `incoming:${e.descriptor.id}`,
@@ -357,16 +357,16 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		});
 		oe.set(t, { handle: r });
 	}
-	et(), Ct((t) => tt(e.store, t.subjectId, t.resourceType, t.resourceId));
+	$e(), Ct((t) => et(e.store, t.subjectId, t.resourceType, t.resourceId));
 	let se = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? p({
 		handlers: e.discovered.outboxHandlers ?? [],
 		store: e.store,
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("outbox")
+		log: (e.log ?? M({ scope: "voltro:serve" })).child("outbox")
 	}) : void 0, v = ce({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
 		publicUrl: g(e.port ?? 4e3),
-		log: (e.log ?? j({ scope: "voltro:serve" })).child("connections")
+		log: (e.log ?? M({ scope: "voltro:serve" })).child("connections")
 	}), y = we({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
@@ -378,108 +378,108 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		namespaceIsolationOn: re,
 		...se === void 0 ? {} : { outbox: { nudge: se.nudge } },
 		...v.active ? { connections: { registry: v.registry } } : {}
-	}), ue = A.succeed(M, m), fe = (t, n) => {
-		let r = t.pipe(k.provide(L(n)));
-		return z((e.baseLayer ? r.pipe(k.provide(e.baseLayer)) : r).pipe(k.provide(ue)));
-	}, pe = lt({
+	}), ue = j.succeed(N, m), fe = (t, n) => {
+		let r = t.pipe(A.provide(st(n)));
+		return (e.baseLayer ? r.pipe(A.provide(e.baseLayer)) : r).pipe(A.provide(ue));
+	}, pe = (e, t) => B(fe(e, t)), me = lt({
 		store: e.store,
 		buildContext: (e, t, n) => y(e, t, n),
-		runEffect: fe,
+		runEffect: pe,
 		undoCapture: le()
-	}), me = E(), he = I({
+	}), he = E(), ge = L({
 		buildContext: (e) => y(e),
-		runEffect: fe
-	}), ge = {
+		runEffect: pe
+	}), _e = {
 		buildContext: (e) => y(e),
 		finalize: (t, n) => He(Ue(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(k.provide(L(t)))
-	}, x = dt(ge), _e = ut({
-		...ge,
+		provideEffect: fe
+	}, x = dt(_e), ye = ut({
+		..._e,
 		queryRows: (t) => e.store.query(t)
-	}), ye = pt({
-		...ge,
+	}), be = pt({
+		..._e,
 		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
 		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
 	}), C = {};
 	for (let n of [
 		...e.discovered.queries,
-		...me.queries,
+		...he.queries,
 		...v.queries
 	]) C[n.descriptor.name] = (e) => F(x(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, ft(n, e));
 	for (let t of [
 		...e.discovered.mutations,
-		...me.mutations,
+		...he.mutations,
 		...v.mutations
-	]) C[t.descriptor.name] = (e) => P(async (e, n) => pe(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...v.actions]) C[t.descriptor.name] = (e) => P(async (e, n) => he(t, e, n), e, `action.${t.descriptor.name}`);
-	let be = () => `public-${Math.random().toString(36).slice(2, 10)}`, T = [
+	]) C[t.descriptor.name] = (e) => P(async (e, n) => me(t, e, n), e, `mutation.${t.descriptor.name}`);
+	for (let t of [...e.discovered.actions, ...v.actions]) C[t.descriptor.name] = (e) => P(async (e, n) => ge(t, e, n), e, `action.${t.descriptor.name}`);
+	let T = () => `public-${Math.random().toString(36).slice(2, 10)}`, xe = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => _e(e, t, {
+			invoke: (t, n) => ye(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: T()
 			}),
-			subscribe: (t, n, r) => ye(e, t, {
+			subscribe: (t, n, r) => be(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: T()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => pe(e, t, {
+			invoke: (t, n) => me(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: T()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => he(e, t, {
+			invoke: (t, n) => ge(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: T()
 			})
 		}))
-	], xe = T.length > 0 ? $t(Qt(T), {
+	], Se = xe.length > 0 ? tn(en(xe), {
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], Se = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Ce = Se && Se.length >= 16 ? [{
+	}) : [], Ce = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Te = Ce && Ce.length >= 16 ? [{
 		method: "POST",
-		path: hn,
-		handle: Cn({
-			secret: Se,
+		path: _n,
+		handle: Tn({
+			secret: Ce,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: ln(H()),
-			openArchive: (e) => kn(H(), e)
+			assetSink: dn(U()),
+			openArchive: (e) => jn(U(), e)
 		})
 	}, {
 		method: "POST",
-		path: gn,
-		handle: Dn({
-			secret: Se,
+		path: vn,
+		handle: kn({
+			secret: Ce,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
-			loadProfile: On,
-			assetSource: un(H(), e.store),
+			loadProfile: An,
+			assetSource: fn(U(), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = H(), i = Nt("storage", () => n.from(t()));
-				await k.runPromise(U(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = U(), i = Nt("storage", () => n.from(t()));
+				await A.runPromise(Ft(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], Te = [
+	}] : [], Ee = [
 		...e.httpRoutes ?? [],
-		...xe,
-		...Ce,
+		...Se,
+		...Te,
 		...v.httpRoutes
 	];
 	for (let t of e.discovered.streams ?? []) C[t.descriptor.name] = (n) => Ke((r) => {
 		let i = y(r), a = t.executor(n, i);
-		if (k.isEffect(a)) {
-			let t = a.pipe(k.provide(L(i.store)));
-			return (e.baseLayer ? t.pipe(k.provide(e.baseLayer)) : t).pipe(k.provide(ue));
+		if (A.isEffect(a)) {
+			let t = a.pipe(A.provide(st(i.store)));
+			return (e.baseLayer ? t.pipe(A.provide(e.baseLayer)) : t).pipe(A.provide(ue));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? k.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? A.promise(() => a) : a;
 	}, `stream.${t.descriptor.name}`);
 	for (let t of e.discovered.workflows ?? []) C[t.definition.name] = (e) => P(async (e, n) => {
 		let r = n;
@@ -499,16 +499,16 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: Mt(V("id", t), V("executionId", t)),
+				predicate: Mt(H("id", t), H("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${X.name}`), C[Ht.name] = (e) => F(x({
-		descriptor: Ht,
+	}, e), t, `subscription.${X.name}`), C[Z.name] = (e) => F(x({
+		descriptor: Z,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [V("tag", t.tag)], ...t.status === void 0 ? [] : [V("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
@@ -521,8 +521,8 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Ht.name}`), C[Z.name] = (e) => F(x({
-		descriptor: Z,
+	}, e), t, `subscription.${Z.name}`), C[Wt.name] = (e) => F(x({
+		descriptor: Wt,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -531,13 +531,13 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: V("runId", t),
+				predicate: H("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Z.name}`), C[Y.name] = (e) => F(x({
+	}, e), t, `subscription.${Wt.name}`), C[Y.name] = (e) => F(x({
 		descriptor: Y,
 		executor: (e) => {
 			let t = e.runId;
@@ -547,14 +547,14 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: V("runId", t),
+				predicate: H("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Y.name}`), C[Bt.name] = (e) => F(x({
-		descriptor: Bt,
+	}, e), t, `subscription.${Y.name}`), C[J.name] = (e) => F(x({
+		descriptor: J,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -563,14 +563,14 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : V("name", t.name),
+				predicate: t.name === void 0 ? void 0 : H("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Bt.name}`), C[J.name] = (e) => F(x({
-		descriptor: J,
+	}, e), t, `subscription.${J.name}`), C[Ht.name] = (e) => F(x({
+		descriptor: Ht,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -579,69 +579,69 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: V("eventId", t),
+				predicate: H("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${J.name}`), C[zt.name] = (t) => P(async (t, n) => {
+	}, e), t, `subscription.${Ht.name}`), C[Vt.name] = (t) => P(async (t, n) => {
 		let r = t;
-		return await w(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Pe(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${zt.name}`), C[Vt.name] = (t) => P(async (t, n) => {
+		return await w(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Fe(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Vt.name}`), C[Ut.name] = (t) => P(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { executionId: r.executionId }), await d.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Vt.name}`), C[Ut.name] = (t) => P(async (t, n) => {
+	}, t, `action.${Ut.name}`), C[Gt.name] = (t) => P(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { id: r.id }), d.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Ut.name}`), C[Wt.name] = (t) => P(async (t, n) => {
+	}, t, `action.${Gt.name}`), C[Kt.name] = (t) => P(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { id: r.id }), d.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Wt.name}`));
-	let Ee = [
-		...e.discovered.queries.map((e) => q(e.descriptor)),
-		...e.discovered.mutations.map((e) => Lt(e.descriptor)),
-		...e.discovered.actions.map((e) => K(e.descriptor)),
-		...me.queries.map((e) => q(e.descriptor)),
-		...me.mutations.map((e) => Lt(e.descriptor)),
+	}, t, `action.${Kt.name}`));
+	let De = (e) => e.filter((e) => Rt(e.descriptor)), Oe = [
+		...De(e.discovered.queries).map((e) => q(e.descriptor)),
+		...De(e.discovered.mutations).map((e) => zt(e.descriptor)),
+		...De(e.discovered.actions).map((e) => K(e.descriptor)),
+		...he.queries.map((e) => q(e.descriptor)),
+		...he.mutations.map((e) => zt(e.descriptor)),
 		...v.queries.map((e) => q(e.descriptor)),
-		...v.mutations.map((e) => Lt(e.descriptor)),
+		...v.mutations.map((e) => zt(e.descriptor)),
 		...v.actions.map((e) => K(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => Rt(e.descriptor)),
-		...(e.discovered.workflows ?? []).map((e) => B(e.definition)),
+		...(e.discovered.streams ?? []).map((e) => Bt(e.descriptor)),
+		...(e.discovered.workflows ?? []).map((e) => V(e.definition)),
 		...f ? [
 			q(X),
-			q(Ht),
 			q(Z),
+			q(Wt),
 			q(Y),
-			q(Bt),
 			q(J),
-			K(zt),
+			q(Ht),
 			K(Vt),
 			K(Ut),
-			K(Wt)
+			K(Gt),
+			K(Kt)
 		] : []
-	], De = Ot.make(...Ee).middleware(Ft).middleware(G), Oe = A.succeed(Ft, Ft.of(({ headers: t, clientId: n }) => k.promise(() => e.resolveSubject(t, n)))), ke = A.succeed(G, G.of(({ clientId: e }) => k.succeed({ clientId: e }))), je = e.dormancyTenantId ?? "default", Me = e.dormancy === "sleep" ? {
-		register: (t, n, r) => yt(e.store, {
-			tenantId: r ?? je,
+	], ke = Ot.make(...Oe).middleware(It).middleware(G), je = j.succeed(It, It.of(({ headers: t, clientId: n }) => A.promise(() => e.resolveSubject(t, n)))), Me = j.succeed(G, G.of(({ clientId: e }) => A.succeed({ clientId: e }))), Ne = e.dormancyTenantId ?? "default", D = e.dormancy === "sleep" ? {
+		register: (t, n, r) => z(e.store, {
+			tenantId: r ?? Ne,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
 		cancel: (t, n) => Je(e.store, {
-			tenantId: n ?? je,
+			tenantId: n ?? Ne,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, D = te ? await import("@voltro/workflow") : void 0, O = D?.makeWorkflowRunRecorder({
+	} : void 0, O = te ? await import("@voltro/workflow") : void 0, k = O?.makeWorkflowRunRecorder({
 		store: e.store,
-		...Me === void 0 ? {} : { wakeups: Me }
-	}), Ne = async (t, n) => {
-		await D.closeWorkflowChildrenForParent({
+		...D === void 0 ? {} : { wakeups: D }
+	}), Pe = async (t, n) => {
+		await O.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: O,
+			recorder: k,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -652,11 +652,11 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 				await a.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Pe = async (t, n, r) => {
+	}, Fe = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: V("executionId", n),
+			predicate: H("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -667,7 +667,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await O.recordEvent({
+		a && await k.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -676,16 +676,16 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Ne(n, "cancelled");
-	}, Fe = [..._t(e.discovered.workflows ?? [], {
+		}), a && await Pe(n, "cancelled");
+	}, Ie = [..._t(e.discovered.workflows ?? [], {
 		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? y({
 			subject: t.subject,
 			traceId: t.traceId
 		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
 		resolveStartContext: u
 	}, (t, n, r) => {
-		let i = D.getWorkflowVersionMetadata(t.definition);
-		return D.wrapWorkflowExecuteWithRunRecording({
+		let i = O.getWorkflowVersionMetadata(t.definition);
+		return O.wrapWorkflowExecuteWithRunRecording({
 			name: t.definition.name,
 			store: e.store,
 			subject: r.subject,
@@ -696,34 +696,34 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			workflowPatches: i.patches,
 			parentExecutionId: r?.parentExecutionId ?? null,
 			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Ne(e, t),
-			recorder: O
+			onParentClose: ({ executionId: e, status: t }) => Pe(e, t),
+			recorder: k
 		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], Ie = Fe.length > 0 ? A.mergeAll(...Fe) : A.empty;
+	}), ...e.discovered.workflowWorkers ?? []], Le = Ie.length > 0 ? j.mergeAll(...Ie) : j.empty;
 	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0) {
-		let t = Ie.pipe(A.provideMerge(e.workflowEngineLayer));
-		a = ze.make(e.baseLayer === void 0 ? t : t.pipe(A.provideMerge(e.baseLayer))), await a.runPromise(k.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ht({
+		let t = Le.pipe(j.provideMerge(e.workflowEngineLayer));
+		a = Re.make(e.baseLayer === void 0 ? t : t.pipe(j.provideMerge(e.baseLayer))), await a.runPromise(A.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ht({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => a.runPromise(e),
 			rememberStartContext: l,
 			signal: async (t, n, r) => {
-				let i = await D.sendWorkflowSignal({
+				let i = await O.sendWorkflowSignal({
 					store: e.store,
-					recorder: O,
+					recorder: k,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await a.runPromise(D.completeSuspendingSignal({
+				return await a.runPromise(O.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => D.sendWorkflowUpdate({
+			update: (t, n, r, i) => O.sendWorkflowUpdate({
 				store: e.store,
-				recorder: O,
+				recorder: k,
 				target: t,
 				updateName: n,
 				payload: r,
@@ -737,29 +737,29 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			}, t, n)
 		}) : void 0;
 	}
-	let Le = A.mergeAll(De.toLayer(C), Oe, ke), Re = ee(C, e.discovered.queries.map((e) => e.descriptor.name), f), Be = A.mergeAll(De.toLayer(Re), Oe, ke), N = e.observability, We = await qe({
-		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
-		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
-		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
-		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
-	}), Ye = !1, Xe = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Ze, shutdown: Qe } = Tt({
-		group: De,
-		handlersLayer: Le,
-		httpHandlersLayer: Be,
+	let ze = j.mergeAll(ke.toLayer(C), je, Me), Ve = ee(C, e.discovered.queries.map((e) => e.descriptor.name), f), We = j.mergeAll(ke.toLayer(Ve), je, Me), I = e.observability, Ye = await qe({
+		...I && I.spanProcessors.length > 0 ? { extraSpanProcessors: I.spanProcessors } : {},
+		...I && I.metricReaders.length > 0 ? { extraMetricReaders: I.metricReaders } : {},
+		...I && Object.keys(I.resourceAttributes).length > 0 ? { resourceAttributes: I.resourceAttributes } : {},
+		...I && I.sampler !== void 0 ? { sampler: I.sampler } : {}
+	}), Xe = !1, Ze = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Qe, shutdown: nt } = Tt({
+		group: ke,
+		handlersLayer: ze,
+		httpHandlersLayer: We,
 		port: e.port ?? 4e3,
 		path: e.path ?? "/ws",
-		tracerLayer: We.layer,
+		tracerLayer: Ye.layer,
 		healthCheck: {
-			isReady: () => Ye,
-			...Xe ? { ping: Xe } : {}
+			isReady: () => Xe,
+			...Ze ? { ping: Ze } : {}
 		},
-		...Te.length > 0 ? { httpRoutes: Te } : {},
+		...Ee.length > 0 ? { httpRoutes: Ee } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
 		...oe.size > 0 ? { webhookRoutes: oe } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
 	});
-	if (await Ge(Ze), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? nt(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : wt;
+	if (await Ge(Qe), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? tt(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : wt;
 		o = await Et(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
@@ -788,10 +788,10 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
 		}), e.onSchedulerReady?.(o);
 	}
-	let $e = e.log ?? j({ scope: "voltro:serve" }), rt, it;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (rt = de(e.discovered.subscribers ?? [], e.store, $e.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = $e.child("reaction");
-		it = ve(e.discovered.reactions ?? [], e.store, {
+	let rt = e.log ?? M({ scope: "voltro:serve" }), it, at;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (it = de(e.discovered.subscribers ?? [], e.store, rt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = rt.child("reaction");
+		at = ve(e.discovered.reactions ?? [], e.store, {
 			runAct: async (n, r) => {
 				if (n.kind === "workflow") {
 					if (d === void 0) {
@@ -807,8 +807,8 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 				}
 				await _(n.agent, r, {
 					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(he(e, t, n)),
-					makeSubject: (e) => It(e),
+					runAction: (e, t, n) => Promise.resolve(ge(e, t, n)),
+					makeSubject: (e) => Lt(e),
 					now: () => Date.now(),
 					log: t
 				});
@@ -816,7 +816,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			checkBudget: async (n, r) => {
 				try {
 					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await k.runPromise(k.either(t(e.store, {
+					return (await A.runPromise(A.either(t(e.store, {
 						tenantId: n,
 						limitUsd: r
 					}))))._tag === "Right";
@@ -826,44 +826,44 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			}
 		}, t);
 	}
-	let at;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (at = await ne({
+	let ot;
+	return (e.discovered.aggregates?.length ?? 0) > 0 && (ot = await ne({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: $e.child("aggregate"),
+		log: rt.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), ue = A.succeed(M, at.registry)), Ye = !0, e.bootTiming?.mark("ready"), {
+	}), ue = j.succeed(N, ot.registry)), Xe = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: t,
-		server: Ze,
+		server: Qe,
 		scheduler: o,
 		close: async () => {
-			Ye = !1, at?.detach(), it?.(), rt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Ze.close(() => e())), await Qe();
+			Xe = !1, ot?.detach(), at?.(), it?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Qe.close(() => e())), await nt();
 		}
 	};
-}, $ = j({ scope: "voltro:serve" }), Mn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Nn = Fe, Pn = async (e) => {
-	let t = O(process.cwd());
-	if (Be(t)) {
+}, $ = M({ scope: "voltro:serve" }), Pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Fn = Pe, In = async (e) => {
+	let t = D(process.cwd());
+	if (ze(t)) {
 		let n;
 		try {
-			let e = await import(Le(t).href);
+			let e = await import(Ie(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return Fn(e);
-}, Fn = async (ee) => {
-	let p = Pe();
+	return Ln(e);
+}, Ln = async (ee) => {
+	let p = k();
 	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
 	try {
-		Gt();
+		qt();
 	} catch (e) {
-		throw mn(e instanceof Error ? e.message : String(e));
+		throw gn(e instanceof Error ? e.message : String(e));
 	}
-	let m = process.cwd(), ne = Number(process.env.PORT ?? Nn(ee, "--port") ?? 4e3), g = await he(m);
+	let m = process.cwd(), ne = Number(process.env.PORT ?? Fn(ee, "--port") ?? 4e3), g = await he(m);
 	xt(bt(g?.secrets)), await e({
 		rawEnv: g?.env,
 		appType: "api",
@@ -871,21 +871,21 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		log: $,
 		generateTypes: !1
 	}), p.mark("config");
-	let _ = (process.env.DB_DIALECT ?? g?.store ?? "memory").toLowerCase(), ce = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", le = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, de = Ne(m);
-	if (!i() && Be(de)) try {
-		let e = await import(Le(de).href);
+	let _ = (process.env.DB_DIALECT ?? g?.store ?? "memory").toLowerCase(), ce = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", le = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, de = O(m);
+	if (!i() && ze(de)) try {
+		let e = await import(Ie(de).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Ie(m, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Fe(m, n)] = r;
 			r(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let b = await be(m), S = await Oe(b, { cdc: ce && le !== void 0 });
+	let b = await C(m), S = await Oe(b, { cdc: ce && le !== void 0 });
 	{
-		let e = h(S.serverOnlyLeaks, re(process.env, "strict"), Qe, "`voltro serve`");
-		if (e.action === "fail") throw mn(e.message ?? "");
+		let e = h(S.serverOnlyLeaks, re(process.env, "strict"), Ze, "`voltro serve`");
+		if (e.action === "fail") throw gn(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
 	let ve = b.filter((e) => je.test(e)), w = ve.length > 0 ? await ue(ve, $.child("webhooks")) : void 0, we = s({
@@ -897,24 +897,24 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		spec: g?.analytics,
 		sqlLayer: Ae,
 		log: $
-	}), O = (() => {
+	}), D = (() => {
 		let e = new Set(S.tables.map((e) => e.tableName)), t = [...S.tables];
 		for (let n of [...we, ...E.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of O) jt(e);
-	let Fe = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Mn(Fe, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await n(_)).makeSqlLayer(T()), t = await k.runPromise(kt.SqlClient.pipe(k.flatMap((e) => Xt(e, O, {
-			appliedBy: `serve:${Fe}`,
+	for (let e of D) jt(e);
+	let Pe = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (Pn(Pe, _, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await n(_)).makeSqlLayer(T()), t = await A.runPromise(kt.SqlClient.pipe(A.flatMap((e) => Qt(e, D, {
+			appliedBy: `serve:${Pe}`,
 			environment: "prod",
 			dialectId: _
-		})), k.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Yt(t, _)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Yt(t, _));
+		})), A.provide(e)));
+		t.kind === "prod-mismatch" && ($.error(Zt(t, _)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Zt(t, _));
 	}
-	let j = mt(O);
+	let M = mt(D);
 	p.mark("discover");
-	let M = await _e(g, void 0), Ve = Dt(M, _);
+	let N = await x(g, void 0), Be = Dt(N, _);
 	for (let e of Te({
 		dialect: String(g?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
@@ -930,28 +930,28 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	g?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = g.cache), g?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = g.cacheRedisUrl), g?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = g.cacheRedisDriver), g?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = g.cacheKeyPrefix);
 	let { service: He, invalidationBus: Ue, snapshotCache: Ge, cache: P, backend: Ke, dispose: F } = await xe({ env: process.env });
-	$.info(`cache backend resolved: ${Ke}` + (Ke === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), M.onChange((e) => {
-		k.runFork(Ue.publish(e.table));
+	$.info(`cache backend resolved: ${Ke}` + (Ke === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), N.onChange((e) => {
+		A.runFork(Ue.publish(e.table));
 	}), g?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = g.kv), g?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = g.kvRedisUrl), g?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = g.kvKeyPrefix);
-	let { kv: qe, service: Je } = await ot({ store: M });
+	let { kv: qe, service: Je } = await at({ store: N });
 	p.mark("store");
-	let et = We({
-		store: M,
+	let $e = We({
+		store: N,
 		sink: E.sink,
 		log: $
-	}), tt = pe({
-		store: M,
+	}), et = pe({
+		store: N,
 		dialect: _
-	}), I = g?.plugins ?? [], L = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, ct, lt;
-	_ !== "memory" && (ct = ze.make((await n(_)).makeSqlLayer(T())), lt = await ct.runPromise(kt.SqlClient));
-	let ut = st({
+	}), L = g?.plugins ?? [], st = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, ct, lt;
+	_ !== "memory" && (ct = Re.make((await n(_)).makeSqlLayer(T())), lt = await ct.runPromise(kt.SqlClient));
+	let ut = ot({
 		coordinator: [
 			"postgres",
 			"mariadb",
 			"mysql",
 			"mssql"
-		].includes(_) ? nt(M, L, $) : wt,
-		replicaId: L,
+		].includes(_) ? tt(N, st, $) : wt,
+		replicaId: st,
 		log: $
 	}), dt = [], ft = {
 		...lt ? { sql: lt } : {},
@@ -960,59 +960,57 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			return dt.push(r), r;
 		}
 	};
-	for (let e of I) e.bindDataStore?.(M, ft);
-	let pt = I.filter((e) => typeof e.onChangeEvent == "function");
+	for (let e of L) e.bindDataStore?.(N, ft);
+	let pt = L.filter((e) => typeof e.onChangeEvent == "function");
 	if (pt.length > 0) {
-		let e = M.changeScope ?? "local";
-		M.onChange((t) => {
+		let e = N.changeScope ?? "local";
+		N.onChange((t) => {
 			let n = y(t, e);
-			for (let e of pt) k.runFork(e.onChangeEvent(n).pipe(k.catchAllCause((t) => k.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Re.pretty(t) })))));
+			for (let e of pt) A.runFork(e.onChangeEvent(n).pipe(A.catchAllCause((t) => A.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Le.pretty(t) })))));
 		});
 	}
 	let ht = me({
-		plugins: I,
+		plugins: L,
 		appName: g?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	I.length && await ht.activate(), p.mark("plugins");
-	let gt = await ht.gatherObservability(), _t = await x(M, g, _, {
+	L.length && await ht.activate(), p.mark("plugins");
+	let gt = await ht.gatherObservability(), _t = await _e(N, g, _, {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}), R = g?.apiKeys, vt = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", yt = R ? Xe(M) : void 0, z = yt ? it({ flush: at(yt) }) : void 0;
-	z && process.once("exit", () => {
-		z.shutdown();
-	});
-	let St = yt ? rt(yt, {
-		prefix: vt,
-		...z ? { usage: z } : {}
-	}) : void 0, Ct = St ? [$e(St, { prefix: vt })] : [], Tt = Ce([...g?.auth?.strategies ?? [], ...Ct], Zt(g?.plugins ?? []), g?.auth?.anonymousTenantRequired ?? !1, g?.auth?.resolveScopes, () => Ve), Et = [...g?.restRoutes ?? [], ...St ? N(St, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], B = g?.idempotency, Ot = B ? {
-		store: Ze(M),
-		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
-	} : void 0, At = Et.length > 0 ? $t(Et, {
-		store: M,
+	}), R = g?.apiKeys, yt = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", z = R ? Ye(N) : void 0, B = z ? rt({ flush: it(z) }) : void 0;
+	B && vt(() => B.shutdown());
+	let St = z ? nt(z, {
+		prefix: yt,
+		...B ? { usage: B } : {}
+	}) : void 0, Ct = St ? [Qe(St, { prefix: yt })] : [], Tt = Ce([...g?.auth?.strategies ?? [], ...Ct], $t(g?.plugins ?? []), g?.auth?.anonymousTenantRequired ?? !1, g?.auth?.resolveScopes, () => Be), Et = [...g?.restRoutes ?? [], ...St ? Ve(St, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], V = g?.idempotency, Ot = V ? {
+		store: Xe(N),
+		header: (typeof V == "object" ? V.header : void 0) ?? "Idempotency-Key",
+		ttlMs: (typeof V == "object" ? V.ttlMs : void 0) ?? 864e5
+	} : void 0, At = Et.length > 0 ? tn(Et, {
+		store: N,
 		resolveSubject: (e) => Tt({
 			headers: e,
 			clientId: -1
 		}),
 		...Ot ? { idempotency: Ot } : {}
-	}) : [], V = I.map((e) => e.services).filter((e) => e !== void 0), Mt = A.mergeAll(De({
+	}) : [], H = L.map((e) => e.services).filter((e) => e !== void 0), Mt = j.mergeAll(De({
 		analyticsLayer: E.layer,
 		cacheService: He,
 		kvService: Je,
-		pluginServices: V,
+		pluginServices: H,
 		userLayers: g?.layers ?? []
-	}), ge(g?.http ?? {})), H = g?.scheduling ?? {}, Nt = H.trigger ?? "self", Pt = /* @__PURE__ */ new Set([
+	}), ge(g?.http ?? {})), U = g?.scheduling ?? {}, Nt = U.trigger ?? "self", Pt = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), U = H.coordination ?? (Pt.has(_) ? "advisoryLock" : "single"), W = U === "cluster" && Pt.has(_), Ft = W ? "cluster" : U === "advisoryLock" && Pt.has(_) ? "advisoryLock" : "single";
-	U === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), U === "advisoryLock" && !Pt.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let G, K = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (w?.outgoing.length ?? 0) > 0 || W, It;
+	]), Ft = U.coordination ?? (Pt.has(_) ? "advisoryLock" : "single"), W = Ft === "cluster" && Pt.has(_), It = W ? "cluster" : Ft === "advisoryLock" && Pt.has(_) ? "advisoryLock" : "single";
+	Ft === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Ft === "advisoryLock" && !Pt.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let G, K = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (w?.outgoing.length ?? 0) > 0 || W, Lt;
 	if (K) {
 		if (_ === "mssql") {
 			let e = await fe(process.cwd());
@@ -1020,12 +1018,12 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		}
 		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = W ? S.schedules.filter((e) => (e.trigger ?? Nt) === "self").map((e) => t({
 			name: e.name,
-			cron: Ye(e),
+			cron: I(e),
 			execute: async () => {
 				await G?.fireFromCluster(e.name);
 			}
 		})) : [];
-		It = _ === "memory" ? e.layerMemory : await (async () => {
+		Lt = _ === "memory" ? e.layerMemory : await (async () => {
 			let e = await n(_), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), r({
 				sqlClientLayer: e.makeSqlLayer(T()),
@@ -1036,18 +1034,18 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 			});
 		})();
 	}
-	let Lt = Me(I, t()), q = b.filter((e) => /\.subscribe\.tsx?$/.test(e)), Rt = q.length > 0 ? await ae(q, $) : [], zt = b.filter((e) => /\.reaction\.tsx?$/.test(e)), Bt = zt.length > 0 ? await se(zt, $) : [], J = b.filter((e) => u.test(e)), Vt = J.length > 0 ? await D(J, $) : [], Y = b.filter((e) => /\.aggregate\.tsx?$/.test(e)), X = Y.length > 0 ? await v(Y, $) : [], Z = ye();
-	if (X.length > 0 && _ !== "memory") try {
-		Z = f((await n(_)).makeSqlLayer(T()));
+	let Rt = Me(L, t()), zt = b.filter((e) => /\.subscribe\.tsx?$/.test(e)), q = zt.length > 0 ? await ae(zt, $) : [], Bt = b.filter((e) => /\.reaction\.tsx?$/.test(e)), Vt = Bt.length > 0 ? await se(Bt, $) : [], J = b.filter((e) => u.test(e)), Ht = J.length > 0 ? await Ne(J, $) : [], Ut = b.filter((e) => /\.aggregate\.tsx?$/.test(e)), Y = Ut.length > 0 ? await v(Ut, $) : [], X = ye();
+	if (Y.length > 0 && _ !== "memory") try {
+		X = f((await n(_)).makeSqlLayer(T()));
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Ht = _ === "memory" ? wt : nt(M, `aggregate@${process.pid}`, $), Ut = [], Wt = [], Kt = b.filter((e) => l.test(e));
+	let Wt = _ === "memory" ? wt : tt(N, `aggregate@${process.pid}`, $), Z = [], Gt = [], Kt = b.filter((e) => l.test(e));
 	if (Kt.length > 0) {
 		let e = $.child("agent"), t = b.filter((e) => a.test(e));
 		t.length > 0 && await o(t, e);
 		let n = await c(Kt, e);
-		for (let e of n.agents) for (let t of te(e)) (t.kind === "action" ? Ut : Wt).push({
+		for (let e of n.agents) for (let t of te(e)) (t.kind === "action" ? Z : Gt).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -1055,52 +1053,52 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
 	p.mark("workflow");
-	let qt = await jn({
+	let Jt = await Nn({
 		bootTiming: p,
 		discovered: {
-			queries: [...S.queries, ...Wt],
+			queries: [...S.queries, ...Gt],
 			mutations: S.mutations,
-			actions: [...S.actions, ...Ut],
+			actions: [...S.actions, ...Z],
 			streams: S.streams,
 			workflows: S.workflows,
 			workflowWorkers: S.workflowWorkers,
 			eventTriggers: S.eventTriggers,
 			schedules: S.schedules,
-			subscribers: Rt,
-			outboxHandlers: Vt,
+			subscribers: q,
+			outboxHandlers: Ht,
 			connections: S.connections,
-			reactions: Bt,
-			aggregates: X,
+			reactions: Vt,
+			aggregates: Y,
 			...w === void 0 ? {} : { webhooks: w }
 		},
 		log: $,
 		analytics: E.sink,
-		aggregateStorage: Z,
-		aggregateCoordinator: Ht,
-		store: M,
+		aggregateStorage: X,
+		aggregateCoordinator: Wt,
+		store: N,
 		kv: qe,
 		cache: P,
 		snapshotCache: Ge,
-		schemaRegistry: j,
+		schemaRegistry: M,
 		tenantScopedTables: S.tenantScopedTables,
 		softDeleteScopedTables: S.softDeleteScopedTables,
-		dataTransferSnapshot: Jt(O),
+		dataTransferSnapshot: Xt(D),
 		dataTransferDialect: _,
 		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? g?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
 		resolveSubject: (e, t) => Tt({
 			headers: e,
 			clientId: t
 		}),
-		httpRoutes: [...I.flatMap((e) => e.httpRoutes ?? []), ...At],
-		getStore: () => Ve,
+		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...At],
+		getStore: () => Be,
 		...Mt ? { baseLayer: Mt } : {},
-		...It === void 0 ? {} : { workflowEngineLayer: It },
+		...Lt === void 0 ? {} : { workflowEngineLayer: Lt },
 		scheduleDefaultTrigger: Nt,
-		scheduleCoordination: Ft,
+		scheduleCoordination: It,
 		scheduleArmSelf: !W,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : g?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Lt === void 0 ? {} : { scheduleFireInterceptor: Lt },
+		...Rt === void 0 ? {} : { scheduleFireInterceptor: Rt },
 		onSchedulerReady: (e) => {
 			G = e;
 		},
@@ -1114,7 +1112,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 				store: _,
 				cdc: ce ? "on" : "off"
 			},
-			rpc: C(S, m),
+			rpc: be(S, m),
 			workflows: ke(S, m),
 			inspectFireSchedule: async ({ name: e, trigger: t }) => {
 				if (!G) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
@@ -1132,7 +1130,7 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		port: ne,
 		...g?.transport?.wsPath ? { path: g.transport.wsPath } : {}
 	});
-	Se(oe([
+	return Se(oe([
 		S.queries,
 		S.mutations,
 		S.actions,
@@ -1148,15 +1146,16 @@ var pn = "VoltroBootRefusal", mn = (e) => {
 		workflows: S.workflows.length,
 		workflowWorkers: S.workflowWorkers.length,
 		schedules: S.schedules.length,
-		scheduleCoordination: Ft
-	}), p.finish($);
-	let Qt = () => {
+		scheduleCoordination: It
+	}), p.finish($), vt(async () => {
 		for (let e of dt) e.stop();
-		et.detach(), tt.stop(), F(), ct?.dispose(), setTimeout(() => process.exit(0), 1e4).unref?.(), Promise.resolve(ht.deactivate()).then(() => _t?.close()).then(() => E.dispose()).then(() => qt.close()).then(() => M.close?.()).then(() => process.exit(0)).catch((e) => {
-			console.error("serve: shutdown step failed, exiting anyway:", e), process.exit(0);
-		});
-	};
-	return process.on("SIGINT", Qt), process.on("SIGTERM", Qt), await new Promise(() => {}), 0;
+		$e.detach(), et.stop(), F(), ct?.dispose();
+		try {
+			await ht.deactivate(), await _t?.close(), await E.dispose(), await Jt.close(), await N.close?.();
+		} catch (e) {
+			console.error("serve: shutdown step failed, exiting anyway:", e);
+		}
+	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { Pn as n, On as r, Fn as t };
+export { In as n, An as r, Ln as t };