@voltro/cli 0.22.0 → 0.23.0

package/dist/{serveCommand-DEVTtnLy.js → serveCommand-Cl8sicD5.js}

@@ -1,24 +1,24 @@
-import { at as e, t } from "./inspectMetrics-4AVPn6IS.js";
+import { ot as e, t } from "./inspectMetrics-dcC7gnxu.js";
 import { s as n } from "./seedRunner-D6eu-u5U.js";
 import { r, t as i } from "./appModuleLoader-C9r9mxZt.js";
 import { f as a, m as o, n as s, p as c, u as l } from "./frameworkTableAssembly-sg41s14F.js";
 import { l as u } from "./fileConventions-CBNPZVOV.js";
 import { p as d } from "./inspect-_ldwsAwH.js";
-import { $ as ee, A as f, B as p, C as te, D as m, E as ne, F as re, G as ie, H as ae, I as h, K as oe, L as g, M as _, N as se, O as v, P as y, R as ce, S as le, T as ue, V as de, W as fe, _ as b, at as pe, b as me, c as he, et as ge, h as x, i as _e, it as S, j as ve, k as ye, lt as C, m as be, nt as w, o as T, ot as xe, q as E, r as Se, rt as Ce, st as we, t as Te, tt as Ee, u as De, ut as Oe, v as ke, w as Ae, x as D, y as je, z as Me } from "./dev-DeHVUxQx.js";
-import { l as O, r as k } from "./apiBuild-2zRxj2hJ.js";
-import { t as Ne } from "./bootTiming-BdyP9nYw.js";
-import { n as Pe } from "./cliArgs-qdZSElM3.js";
-import { join as Fe } from "node:path";
-import { pathToFileURL as Ie } from "node:url";
-import { Cause as Le, Effect as A, Layer as j, ManagedRuntime as Re } from "effect";
-import { createLogger as M } from "@voltro/logger";
-import { existsSync as ze } from "node:fs";
-import { AggregateRegistry as N, Dispatcher as Be, apiKeyManagementRoutes as Ve, applySoftDeleteScope as He, applyTenantScope as Ue, attachAnalyticsMirror as P, awaitServerListening as We, bindMutation as F, bindStream as Ge, bindSubscription as I, buildTracingLayer as Ke, cancelWakeup as qe, compileCron as Je, dataStoreApiKeyStore as Ye, dataStoreIdempotencyStore as Xe, formatServerOnlyLeaks as Ze, frameworkApiKeyStrategy as Qe, installPolicyGuardResolver as $e, loadResourceTuples as et, makeActionRunner as L, makeAdvisoryLockCoordinator as tt, makeApiKeyService as nt, makeApiKeyUsageBuffer as rt, makeApiKeyUsageFlusher as it, makeAsyncKv as at, makeCoordinatedScheduler as ot, makeEffectStoreLayer as st, makeLazyWorkflowFacade as ct, makeMutationRunner as lt, makeOneShotQueryRunner as ut, makeQueryDescriptorProducer as dt, makeQueryReauthorizer as ft, makeQuerySubscriber as pt, makeSchemaRegistry as mt, makeWorkflowFacade as ht, makeWorkflowFacadeWithCallerContext as gt, makeWorkflowLayers as _t, noopKv as R, onProcessShutdown as vt, recordSubscriptionDelivery as yt, registerWakeup as bt, resolveSecretsBackend as xt, runProvidedEffect as St, setSecretsBackend as Ct, setSystemStoreHandle as z, setTupleSource as wt, singleCoordinator as Tt, startRpcServer as Et, startScheduler as Dt, workflowToRpc as B, wrapStoreWithBootCodec as Ot } from "@voltro/runtime";
+import { $ as ee, A as f, B as p, C as te, D as m, E as ne, F as re, G as ie, H as ae, I as h, K as oe, L as g, M as _, N as se, O as v, P as y, R as ce, S as le, T as ue, V as de, W as fe, _ as b, at as pe, b as me, c as he, et as ge, h as _e, i as x, it as S, j as ve, k as ye, lt as be, m as C, nt as w, o as T, ot as xe, q as Se, r as Ce, rt as we, st as E, t as Te, tt as Ee, u as De, ut as Oe, v as ke, w as Ae, x as D, y as je, z as Me } from "./dev-jM07kq_D.js";
+import { l as O, r as k } from "./apiBuild-JQtIhZPy.js";
+import { t as A } from "./bootTiming-BdyP9nYw.js";
+import { n as Ne } from "./cliArgs-qdZSElM3.js";
+import { join as Pe } from "node:path";
+import { pathToFileURL as Fe } from "node:url";
+import { Cause as Ie, Effect as j, Layer as M, ManagedRuntime as Le } from "effect";
+import { createLogger as N } from "@voltro/logger";
+import { existsSync as Re } from "node:fs";
+import { AggregateRegistry as P, Dispatcher as ze, apiKeyManagementRoutes as Be, applySoftDeleteScope as Ve, applyTenantScope as He, attachAnalyticsMirror as Ue, awaitServerListening as We, bindMutation as F, bindStream as Ge, bindSubscription as I, buildTracingLayer as Ke, cancelWakeup as qe, compileCron as L, dataStoreApiKeyStore as Je, dataStoreIdempotencyStore as Ye, formatServerOnlyLeaks as Xe, frameworkApiKeyStrategy as Ze, installPolicyGuardResolver as Qe, loadResourceTuples as $e, makeActionRunner as R, makeAdvisoryLockCoordinator as et, makeApiKeyService as tt, makeApiKeyUsageBuffer as nt, makeApiKeyUsageFlusher as rt, makeAsyncKv as it, makeCoordinatedScheduler as at, makeEffectStoreLayer as ot, makeLazyWorkflowFacade as st, makeMutationRunner as ct, makeOneShotQueryRunner as lt, makeQueryDescriptorProducer as ut, makeQueryReauthorizer as dt, makeQuerySubscriber as ft, makeSchemaRegistry as pt, makeWorkflowFacade as mt, makeWorkflowFacadeWithCallerContext as ht, makeWorkflowLayers as gt, noopKv as z, onProcessShutdown as _t, recordSubscriptionDelivery as vt, registerWakeup as yt, resolveSecretsBackend as bt, runProvidedEffect as xt, setSecretsBackend as St, setSystemStoreHandle as Ct, setTupleSource as wt, singleCoordinator as Tt, startRpcServer as Et, startScheduler as Dt, workflowToRpc as B, wrapStoreWithBootCodec as Ot } from "@voltro/runtime";
 import { RpcGroup as kt } from "@effect/rpc";
 import { SqlClient as At } from "@effect/sql";
 import { and as jt, ensureTableRegistered as Mt, eq as V, or as Nt } from "@voltro/database";
 import { appStorageProvider as H, fromNodeReadable as Pt, getObjectStream as Ft, putObjectStream as It, toNodeReadable as U } from "@voltro/plugin-storage";
-import { AuthMiddleware as W, ConnectionInfoMiddleware as G, actionToRpc as K, anonymousSubject as Lt, isWireReachable as Rt, mutationToRpc as zt, queryToRpc as q, streamToRpc as Bt, workflowCancelDescriptor as Vt, workflowDomainEventsQueryDescriptor as J, workflowEventDeliveriesQueryDescriptor as Ht, workflowResumeDescriptor as Ut, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as X, workflowRunStepsQueryDescriptor as Wt, workflowRunsQueryDescriptor as Z, workflowSignalDescriptor as Gt, workflowUpdateDescriptor as Kt } from "@voltro/protocol";
+import { AuthMiddleware as Lt, ConnectionInfoMiddleware as W, actionToRpc as G, anonymousSubject as Rt, isWireReachable as zt, mutationToRpc as Bt, queryToRpc as K, streamToRpc as Vt, workflowCancelDescriptor as Ht, workflowDomainEventsQueryDescriptor as q, workflowEventDeliveriesQueryDescriptor as Ut, workflowResumeDescriptor as J, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as X, workflowRunStepsQueryDescriptor as Wt, workflowRunsQueryDescriptor as Z, workflowSignalDescriptor as Gt, workflowUpdateDescriptor as Kt } from "@voltro/protocol";
 import { assertProductionSessionSecret as qt } from "@voltro/protocol/session";
 import { createHash as Jt, timingSafeEqual as Yt } from "node:crypto";
 import { declaredSnapshot as Xt, describeOutcome as Zt, runPlannedMigrations as Qt } from "@voltro/database/sql";
@@ -42,7 +42,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
 	let n = yn(e.headers);
 	return !n || !bn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, Sn = M({ scope: "voltro:admin-import" }), Cn = "VBUNDLE2", wn = async function* (e) {
+}, Sn = N({ scope: "voltro:admin-import" }), Cn = "VBUNDLE2", wn = async function* (e) {
 	yield e;
 }, Tn = (e) => async (t) => {
 	let n = xn(t, e.secret);
@@ -66,7 +66,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			dir: f,
 			blobs: e.assetSink
 		}) : await mn(c, f);
-		let t = await A.runPromiseExit(un({
+		let t = await j.runPromiseExit(un({
 			store: e.store,
 			bundleDir: f,
 			...r ? { mode: r } : {},
@@ -121,7 +121,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			force: !0
 		});
 	}
-}, En = M({ scope: "voltro:admin-export" }), Dn = async (e) => {
+}, En = N({ scope: "voltro:admin-export" }), Dn = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
@@ -154,7 +154,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	}
 	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? On(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await A.runPromise(ln({
+		let t = await j.runPromise(ln({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -230,7 +230,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	if (!o) throw Error(`data profile '${i}' has no default export`);
 	return o;
 }, jn = (e, t, n = {}) => (async function* () {
-	let r = await U((await A.runPromise(Ft(e, t).pipe(A.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
+	let r = await U((await j.runPromise(Ft(e, t).pipe(j.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
 		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
 	};
 	try {
@@ -249,20 +249,20 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
 }, Nn = async (e) => {
-	z({
+	Ct({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = new Be({
+	let t = new ze({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
-		recordDelivery: (e) => yt({
+		recordDelivery: (e) => vt({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), n = e.cache ?? Mn, r = e.kv ?? R, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
+	}), n = e.cache ?? Mn, r = e.kv ?? z, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
 		let i = {
 			...r,
 			source: r.source ?? `workflow:${t}`
@@ -318,7 +318,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
 			return;
 		}
-	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? ct(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, te = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? M({ scope: "voltro:serve" })).child("webhooks"), ae, h = e.discovered.webhooks;
+	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? st(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, te = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? N({ scope: "voltro:serve" })).child("webhooks"), ae, h = e.discovered.webhooks;
 	if (h && h.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		let t = e.workflowEngineLayer, i = S({
 			store: e.store,
@@ -327,8 +327,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			kv: r
 		}), a = h.outgoing.map((e) => e.descriptor);
 		ae = rn(i, async (e) => {
-			let n = on.execute(e).pipe(A.provide(on.toLayer(nn(i, { events: a })).pipe(j.provideMerge(t))));
-			A.runPromise(n).catch((t) => {
+			let n = on.execute(e).pipe(j.provide(on.toLayer(nn(i, { events: a })).pipe(M.provideMerge(t))));
+			j.runPromise(n).catch((t) => {
 				ie.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -340,7 +340,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	if (h) for (let e of h.incoming) {
 		let t = e.descriptor.path ?? an(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = sn(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => d === void 0 ? void 0 : gt(d, {
+			resolveWorkflows: () => d === void 0 ? void 0 : ht(d, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -357,17 +357,17 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		});
 		oe.set(t, { handle: r });
 	}
-	$e(), wt((t) => et(e.store, t.subjectId, t.resourceType, t.resourceId));
+	Qe(), wt((t) => $e(e.store, t.subjectId, t.resourceType, t.resourceId));
 	let se = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? p({
 		handlers: e.discovered.outboxHandlers ?? [],
 		store: e.store,
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("outbox")
+		log: (e.log ?? N({ scope: "voltro:serve" })).child("outbox")
 	}) : void 0, v = ce({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
 		publicUrl: g(e.port ?? 4e3),
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("connections")
-	}), y = Ce({
+		log: (e.log ?? N({ scope: "voltro:serve" })).child("connections")
+	}), y = we({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: n,
@@ -378,70 +378,70 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		namespaceIsolationOn: re,
 		...se === void 0 ? {} : { outbox: { nudge: se.nudge } },
 		...v.active ? { connections: { registry: v.registry } } : {}
-	}), ue = j.succeed(N, m), fe = (t, n) => {
-		let r = t.pipe(A.provide(st(n)));
-		return St((e.baseLayer ? r.pipe(A.provide(e.baseLayer)) : r).pipe(A.provide(ue)));
-	}, pe = lt({
+	}), ue = M.succeed(P, m), fe = (t, n) => {
+		let r = t.pipe(j.provide(ot(n)));
+		return (e.baseLayer ? r.pipe(j.provide(e.baseLayer)) : r).pipe(j.provide(ue));
+	}, pe = (e, t) => xt(fe(e, t)), me = ct({
 		store: e.store,
 		buildContext: (e, t, n) => y(e, t, n),
-		runEffect: fe,
+		runEffect: pe,
 		undoCapture: le()
-	}), me = D(), he = L({
+	}), he = D(), ge = R({
 		buildContext: (e) => y(e),
-		runEffect: fe
-	}), ge = {
+		runEffect: pe
+	}), _e = {
 		buildContext: (e) => y(e),
-		finalize: (t, n) => He(Ue(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: (e, t) => e.pipe(A.provide(st(t)))
-	}, x = dt(ge), _e = ut({
-		...ge,
+		finalize: (t, n) => Ve(He(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
+		provideEffect: fe
+	}, x = ut(_e), ye = lt({
+		..._e,
 		queryRows: (t) => e.store.query(t)
-	}), ye = pt({
-		...ge,
+	}), be = ft({
+		..._e,
 		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
 		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
-	}), C = {};
+	}), C = (e) => e.filter((e) => zt(e.descriptor)), T = {};
 	for (let n of [
-		...e.discovered.queries,
-		...me.queries,
+		...C(e.discovered.queries),
+		...he.queries,
 		...v.queries
-	]) C[n.descriptor.name] = (e) => I(x(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, ft(n, e));
+	]) T[n.descriptor.name] = (e) => I(x(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, dt(n, e));
 	for (let t of [
-		...e.discovered.mutations,
-		...me.mutations,
+		...C(e.discovered.mutations),
+		...he.mutations,
 		...v.mutations
-	]) C[t.descriptor.name] = (e) => F(async (e, n) => pe(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...v.actions]) C[t.descriptor.name] = (e) => F(async (e, n) => he(t, e, n), e, `action.${t.descriptor.name}`);
-	let be = () => `public-${Math.random().toString(36).slice(2, 10)}`, T = [
+	]) T[t.descriptor.name] = (e) => F(async (e, n) => me(t, e, n), e, `mutation.${t.descriptor.name}`);
+	for (let t of [...C(e.discovered.actions), ...v.actions]) T[t.descriptor.name] = (e) => F(async (e, n) => ge(t, e, n), e, `action.${t.descriptor.name}`);
+	let xe = () => `public-${Math.random().toString(36).slice(2, 10)}`, Se = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => _e(e, t, {
+			invoke: (t, n) => ye(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: xe()
 			}),
-			subscribe: (t, n, r) => ye(e, t, {
+			subscribe: (t, n, r) => be(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: xe()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => pe(e, t, {
+			invoke: (t, n) => me(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: xe()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => he(e, t, {
+			invoke: (t, n) => ge(e, t, {
 				subject: n.subject,
-				traceId: be()
+				traceId: xe()
 			})
 		}))
-	], xe = T.length > 0 ? tn(en(T), {
+	], Ce = Se.length > 0 ? tn(en(Se), {
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], E = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Se = E && E.length >= 16 ? [{
+	}) : [], E = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Te = E && E.length >= 16 ? [{
 		method: "POST",
 		path: _n,
 		handle: Tn({
@@ -464,32 +464,32 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			assetSource: fn(H(), e.store),
 			putArchive: async (e, t) => {
 				let { Readable: n } = await import("node:stream"), r = H(), i = Pt("storage", () => n.from(t()));
-				await A.runPromise(It(r, e, i, { contentType: "application/octet-stream" }));
+				await j.runPromise(It(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], we = [
+	}] : [], Ee = [
 		...e.httpRoutes ?? [],
-		...xe,
-		...Se,
+		...Ce,
+		...Te,
 		...v.httpRoutes
 	];
-	for (let t of e.discovered.streams ?? []) C[t.descriptor.name] = (n) => Ge((r) => {
+	for (let t of C(e.discovered.streams ?? [])) T[t.descriptor.name] = (n) => Ge((r) => {
 		let i = y(r), a = t.executor(n, i);
-		if (A.isEffect(a)) {
-			let t = a.pipe(A.provide(st(i.store)));
-			return (e.baseLayer ? t.pipe(A.provide(e.baseLayer)) : t).pipe(A.provide(ue));
+		if (j.isEffect(a)) {
+			let t = a.pipe(j.provide(ot(i.store)));
+			return (e.baseLayer ? t.pipe(j.provide(e.baseLayer)) : t).pipe(j.provide(ue));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? A.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? j.promise(() => a) : a;
 	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) C[t.definition.name] = (e) => F(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => F(async (e, n) => {
 		let r = n;
-		return gt(d, {
+		return ht(d, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	f && (C[X.name] = (e) => I(x({
+	f && (T[X.name] = (e) => I(x({
 		descriptor: X,
 		executor: (e) => {
 			let t = e.id;
@@ -505,7 +505,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${X.name}`), C[Z.name] = (e) => I(x({
+	}, e), t, `subscription.${X.name}`), T[Z.name] = (e) => I(x({
 		descriptor: Z,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [V("tag", t.tag)], ...t.status === void 0 ? [] : [V("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
@@ -521,7 +521,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Z.name}`), C[Wt.name] = (e) => I(x({
+	}, e), t, `subscription.${Z.name}`), T[Wt.name] = (e) => I(x({
 		descriptor: Wt,
 		executor: (e) => {
 			let t = e.runId;
@@ -537,7 +537,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Wt.name}`), C[Y.name] = (e) => I(x({
+	}, e), t, `subscription.${Wt.name}`), T[Y.name] = (e) => I(x({
 		descriptor: Y,
 		executor: (e) => {
 			let t = e.runId;
@@ -553,8 +553,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Y.name}`), C[J.name] = (e) => I(x({
-		descriptor: J,
+	}, e), t, `subscription.${Y.name}`), T[q.name] = (e) => I(x({
+		descriptor: q,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -569,8 +569,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${J.name}`), C[Ht.name] = (e) => I(x({
-		descriptor: Ht,
+	}, e), t, `subscription.${q.name}`), T[Ut.name] = (e) => I(x({
+		descriptor: Ut,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -585,63 +585,63 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Ht.name}`), C[Vt.name] = (t) => F(async (t, n) => {
+	}, e), t, `subscription.${Ut.name}`), T[Ht.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Pe(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Vt.name}`), C[Ut.name] = (t) => F(async (t, n) => {
+	}, t, `action.${Ht.name}`), T[J.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { executionId: r.executionId }), await d.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Ut.name}`), C[Gt.name] = (t) => F(async (t, n) => {
+	}, t, `action.${J.name}`), T[Gt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { id: r.id }), d.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Gt.name}`), C[Kt.name] = (t) => F(async (t, n) => {
+	}, t, `action.${Gt.name}`), T[Kt.name] = (t) => F(async (t, n) => {
 		let r = t;
 		return await w(e.store, n.subject, { id: r.id }), d.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
 	}, t, `action.${Kt.name}`));
-	let Te = (e) => e.filter((e) => Rt(e.descriptor)), Ee = [
-		...Te(e.discovered.queries).map((e) => q(e.descriptor)),
-		...Te(e.discovered.mutations).map((e) => zt(e.descriptor)),
-		...Te(e.discovered.actions).map((e) => K(e.descriptor)),
-		...me.queries.map((e) => q(e.descriptor)),
-		...me.mutations.map((e) => zt(e.descriptor)),
-		...v.queries.map((e) => q(e.descriptor)),
-		...v.mutations.map((e) => zt(e.descriptor)),
-		...v.actions.map((e) => K(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => Bt(e.descriptor)),
+	let De = [
+		...C(e.discovered.queries).map((e) => K(e.descriptor)),
+		...C(e.discovered.mutations).map((e) => Bt(e.descriptor)),
+		...C(e.discovered.actions).map((e) => G(e.descriptor)),
+		...he.queries.map((e) => K(e.descriptor)),
+		...he.mutations.map((e) => Bt(e.descriptor)),
+		...v.queries.map((e) => K(e.descriptor)),
+		...v.mutations.map((e) => Bt(e.descriptor)),
+		...v.actions.map((e) => G(e.descriptor)),
+		...C(e.discovered.streams ?? []).map((e) => Vt(e.descriptor)),
 		...(e.discovered.workflows ?? []).map((e) => B(e.definition)),
 		...f ? [
-			q(X),
-			q(Z),
-			q(Wt),
-			q(Y),
-			q(J),
-			q(Ht),
-			K(Vt),
+			K(X),
+			K(Z),
+			K(Wt),
+			K(Y),
+			K(q),
 			K(Ut),
-			K(Gt),
-			K(Kt)
+			G(Ht),
+			G(J),
+			G(Gt),
+			G(Kt)
 		] : []
-	], De = kt.make(...Ee).middleware(W).middleware(G), Oe = j.succeed(W, W.of(({ headers: t, clientId: n }) => A.promise(() => e.resolveSubject(t, n)))), Ae = j.succeed(G, G.of(({ clientId: e }) => A.succeed({ clientId: e }))), je = e.dormancyTenantId ?? "default", Me = e.dormancy === "sleep" ? {
-		register: (t, n, r) => bt(e.store, {
-			tenantId: r ?? je,
+	], Oe = kt.make(...De).middleware(Lt).middleware(W), Ae = M.succeed(Lt, Lt.of(({ headers: t, clientId: n }) => j.promise(() => e.resolveSubject(t, n)))), je = M.succeed(W, W.of(({ clientId: e }) => j.succeed({ clientId: e }))), Me = e.dormancyTenantId ?? "default", O = e.dormancy === "sleep" ? {
+		register: (t, n, r) => yt(e.store, {
+			tenantId: r ?? Me,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
 		cancel: (t, n) => qe(e.store, {
-			tenantId: n ?? je,
+			tenantId: n ?? Me,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, O = te ? await import("@voltro/workflow") : void 0, k = O?.makeWorkflowRunRecorder({
+	} : void 0, k = te ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
 		store: e.store,
-		...Me === void 0 ? {} : { wakeups: Me }
+		...O === void 0 ? {} : { wakeups: O }
 	}), Ne = async (t, n) => {
-		await O.closeWorkflowChildrenForParent({
+		await k.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: k,
+			recorder: A,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -667,7 +667,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await k.recordEvent({
+		a && await A.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -677,15 +677,15 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				...o == null ? {} : { tenantId: o }
 			}
 		}), a && await Ne(n, "cancelled");
-	}, Fe = [..._t(e.discovered.workflows ?? [], {
+	}, Fe = [...gt(e.discovered.workflows ?? [], {
 		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? y({
 			subject: t.subject,
 			traceId: t.traceId
 		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
 		resolveStartContext: u
 	}, (t, n, r) => {
-		let i = O.getWorkflowVersionMetadata(t.definition);
-		return O.wrapWorkflowExecuteWithRunRecording({
+		let i = k.getWorkflowVersionMetadata(t.definition);
+		return k.wrapWorkflowExecuteWithRunRecording({
 			name: t.definition.name,
 			store: e.store,
 			subject: r.subject,
@@ -697,33 +697,33 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			parentExecutionId: r?.parentExecutionId ?? null,
 			parentClosePolicy: r?.parentClosePolicy ?? null,
 			onParentClose: ({ executionId: e, status: t }) => Ne(e, t),
-			recorder: k
+			recorder: A
 		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], Ie = Fe.length > 0 ? j.mergeAll(...Fe) : j.empty;
+	}), ...e.discovered.workflowWorkers ?? []], Ie = Fe.length > 0 ? M.mergeAll(...Fe) : M.empty;
 	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0) {
-		let t = Ie.pipe(j.provideMerge(e.workflowEngineLayer));
-		a = Re.make(e.baseLayer === void 0 ? t : t.pipe(j.provideMerge(e.baseLayer))), await a.runPromise(A.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ht({
+		let t = Ie.pipe(M.provideMerge(e.workflowEngineLayer));
+		a = Le.make(e.baseLayer === void 0 ? t : t.pipe(M.provideMerge(e.baseLayer))), await a.runPromise(j.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? mt({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => a.runPromise(e),
 			rememberStartContext: l,
 			signal: async (t, n, r) => {
-				let i = await O.sendWorkflowSignal({
+				let i = await k.sendWorkflowSignal({
 					store: e.store,
-					recorder: k,
+					recorder: A,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await a.runPromise(O.completeSuspendingSignal({
+				return await a.runPromise(k.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => O.sendWorkflowUpdate({
+			update: (t, n, r, i) => k.sendWorkflowUpdate({
 				store: e.store,
-				recorder: k,
+				recorder: A,
 				target: t,
 				updateName: n,
 				payload: r,
@@ -737,29 +737,30 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			}, t, n)
 		}) : void 0;
 	}
-	let Le = j.mergeAll(De.toLayer(C), Oe, Ae), ze = ee(C, e.discovered.queries.map((e) => e.descriptor.name), f), Ve = j.mergeAll(De.toLayer(ze), Oe, Ae), P = e.observability, Je = await Ke({
-		...P && P.spanProcessors.length > 0 ? { extraSpanProcessors: P.spanProcessors } : {},
-		...P && P.metricReaders.length > 0 ? { extraMetricReaders: P.metricReaders } : {},
-		...P && Object.keys(P.resourceAttributes).length > 0 ? { resourceAttributes: P.resourceAttributes } : {},
-		...P && P.sampler !== void 0 ? { sampler: P.sampler } : {}
-	}), Ye = !1, Xe = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Ze, shutdown: Qe } = Et({
-		group: De,
-		handlersLayer: Le,
-		httpHandlersLayer: Ve,
+	let Re = M.mergeAll(Oe.toLayer(T), Ae, je), Be = ee(T, e.discovered.queries.map((e) => e.descriptor.name), f), Ue = M.mergeAll(Oe.toLayer(Be), Ae, je), L = e.observability, Je = await Ke({
+		...L && L.spanProcessors.length > 0 ? { extraSpanProcessors: L.spanProcessors } : {},
+		...L && L.metricReaders.length > 0 ? { extraMetricReaders: L.metricReaders } : {},
+		...L && Object.keys(L.resourceAttributes).length > 0 ? { resourceAttributes: L.resourceAttributes } : {},
+		...L && L.sampler !== void 0 ? { sampler: L.sampler } : {}
+	}), Ye = !1, Xe = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Ze, shutdown: tt } = Et({
+		group: Oe,
+		handlersLayer: Re,
+		httpHandlersLayer: Ue,
 		port: e.port ?? 4e3,
+		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
 		tracerLayer: Je.layer,
 		healthCheck: {
 			isReady: () => Ye,
 			...Xe ? { ping: Xe } : {}
 		},
-		...we.length > 0 ? { httpRoutes: we } : {},
+		...Ee.length > 0 ? { httpRoutes: Ee } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
 		...oe.size > 0 ? { webhookRoutes: oe } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
 	});
 	if (await We(Ze), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? tt(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Tt;
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? et(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Tt;
 		o = await Dt(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
@@ -788,7 +789,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
 		}), e.onSchedulerReady?.(o);
 	}
-	let nt = e.log ?? M({ scope: "voltro:serve" }), rt, it;
+	let nt = e.log ?? N({ scope: "voltro:serve" }), rt, it;
 	if ((e.discovered.subscribers?.length ?? 0) > 0 && (rt = de(e.discovered.subscribers ?? [], e.store, nt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
 		let t = nt.child("reaction");
 		it = ve(e.discovered.reactions ?? [], e.store, {
@@ -799,7 +800,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 						return;
 					}
 					let e = r.new ?? r.old ?? {};
-					await gt(d, {
+					await ht(d, {
 						traceId: `reaction:${n.workflow}`,
 						source: `reaction:${n.workflow}`
 					}).start(n.workflow, e);
@@ -807,8 +808,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				}
 				await _(n.agent, r, {
 					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(he(e, t, n)),
-					makeSubject: (e) => Lt(e),
+					runAction: (e, t, n) => Promise.resolve(ge(e, t, n)),
+					makeSubject: (e) => Rt(e),
 					now: () => Date.now(),
 					log: t
 				});
@@ -816,7 +817,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			checkBudget: async (n, r) => {
 				try {
 					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await A.runPromise(A.either(t(e.store, {
+					return (await j.runPromise(j.either(t(e.store, {
 						tenantId: n,
 						limitUsd: r
 					}))))._tag === "Right";
@@ -834,20 +835,20 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), ue = j.succeed(N, at.registry)), Ye = !0, e.bootTiming?.mark("ready"), {
+	}), ue = M.succeed(P, at.registry)), Ye = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: t,
 		server: Ze,
 		scheduler: o,
 		close: async () => {
-			Ye = !1, at?.detach(), it?.(), rt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Ze.close(() => e())), await Qe();
+			Ye = !1, at?.detach(), it?.(), rt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Ze.close(() => e())), await tt();
 		}
 	};
-}, $ = M({ scope: "voltro:serve" }), Pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Fn = Pe, In = async (e) => {
+}, $ = N({ scope: "voltro:serve" }), Pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Fn = Ne, In = async (e) => {
 	let t = O(process.cwd());
-	if (ze(t)) {
+	if (Re(t)) {
 		let n;
 		try {
-			let e = await import(Ie(t).href);
+			let e = await import(Fe(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
@@ -856,7 +857,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	}
 	return Ln(e);
 }, Ln = async (ee) => {
-	let p = Ne();
+	let p = A();
 	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
 	try {
 		qt();
@@ -864,7 +865,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		throw gn(e instanceof Error ? e.message : String(e));
 	}
 	let m = process.cwd(), ne = Number(process.env.PORT ?? Fn(ee, "--port") ?? 4e3), g = await he(m);
-	Ct(xt(g?.secrets)), await e({
+	St(bt(g?.secrets)), await e({
 		rawEnv: g?.env,
 		appType: "api",
 		root: m,
@@ -872,23 +873,23 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		generateTypes: !1
 	}), p.mark("config");
 	let _ = (process.env.DB_DIALECT ?? g?.store ?? "memory").toLowerCase(), ce = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", le = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, de = k(m);
-	if (!i() && ze(de)) try {
-		let e = await import(Ie(de).href);
+	if (!i() && Re(de)) try {
+		let e = await import(Fe(de).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Fe(m, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Pe(m, n)] = r;
 			r(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let b = await be(m), S = await De(b, { cdc: ce && le !== void 0 });
+	let b = await C(m), S = await De(b, { cdc: ce && le !== void 0 });
 	{
-		let e = h(S.serverOnlyLeaks, re(process.env, "strict"), Ze, "`voltro serve`");
+		let e = h(S.serverOnlyLeaks, re(process.env, "strict"), Xe, "`voltro serve`");
 		if (e.action === "fail") throw gn(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
-	let ve = b.filter((e) => Ae.test(e)), w = ve.length > 0 ? await ue(ve, $.child("webhooks")) : void 0, Ce = s({
+	let ve = b.filter((e) => Ae.test(e)), w = ve.length > 0 ? await ue(ve, $.child("webhooks")) : void 0, we = s({
 		mix: S.featureMix,
 		plugins: g?.plugins ?? [],
 		cdc: ce && le !== void 0,
@@ -899,23 +900,23 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		log: $
 	}), O = (() => {
 		let e = new Set(S.tables.map((e) => e.tableName)), t = [...S.tables];
-		for (let n of [...Ce, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		for (let n of [...we, ...D.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
 	for (let e of O) Mt(e);
-	let Pe = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Pn(Pe, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await n(_)).makeSqlLayer(T()), t = await A.runPromise(At.SqlClient.pipe(A.flatMap((e) => Qt(e, O, {
-			appliedBy: `serve:${Pe}`,
+	let Ne = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (Pn(Ne, _, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await n(_)).makeSqlLayer(T()), t = await j.runPromise(At.SqlClient.pipe(j.flatMap((e) => Qt(e, O, {
+			appliedBy: `serve:${Ne}`,
 			environment: "prod",
 			dialectId: _
-		})), A.provide(e)));
+		})), j.provide(e)));
 		t.kind === "prod-mismatch" && ($.error(Zt(t, _)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Zt(t, _));
 	}
-	let M = mt(O);
+	let N = pt(O);
 	p.mark("discover");
-	let N = await _e(g, void 0), Be = Ot(N, _);
-	for (let e of we({
+	let P = await x(g, void 0), ze = Ot(P, _);
+	for (let e of E({
 		dialect: String(g?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
@@ -929,77 +930,77 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	g?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = g.cache), g?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = g.cacheRedisUrl), g?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = g.cacheRedisDriver), g?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = g.cacheKeyPrefix);
-	let { service: He, invalidationBus: Ue, snapshotCache: We, cache: F, backend: Ge, dispose: I } = await xe({ env: process.env });
-	$.info(`cache backend resolved: ${Ge}` + (Ge === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), N.onChange((e) => {
-		A.runFork(Ue.publish(e.table));
+	let { service: Ve, invalidationBus: He, snapshotCache: We, cache: F, backend: Ge, dispose: I } = await xe({ env: process.env });
+	$.info(`cache backend resolved: ${Ge}` + (Ge === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
+		j.runFork(He.publish(e.table));
 	}), g?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = g.kv), g?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = g.kvRedisUrl), g?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = g.kvKeyPrefix);
-	let { kv: Ke, service: qe } = await at({ store: N });
+	let { kv: Ke, service: qe } = await it({ store: P });
 	p.mark("store");
-	let $e = P({
-		store: N,
+	let Qe = Ue({
+		store: P,
 		sink: D.sink,
 		log: $
-	}), et = pe({
-		store: N,
+	}), $e = pe({
+		store: P,
 		dialect: _
-	}), L = g?.plugins ?? [], st = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, ct, lt;
-	_ !== "memory" && (ct = Re.make((await n(_)).makeSqlLayer(T())), lt = await ct.runPromise(At.SqlClient));
-	let ut = ot({
+	}), R = g?.plugins ?? [], ot = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, st, ct;
+	_ !== "memory" && (st = Le.make((await n(_)).makeSqlLayer(T())), ct = await st.runPromise(At.SqlClient));
+	let lt = at({
 		coordinator: [
 			"postgres",
 			"mariadb",
 			"mysql",
 			"mssql"
-		].includes(_) ? tt(N, st, $) : Tt,
-		replicaId: st,
+		].includes(_) ? et(P, ot, $) : Tt,
+		replicaId: ot,
 		log: $
-	}), dt = [], ft = {
-		...lt ? { sql: lt } : {},
+	}), ut = [], dt = {
+		...ct ? { sql: ct } : {},
 		scheduleCoordinated: (e, t, n) => {
-			let r = ut(e, t, n);
-			return dt.push(r), r;
+			let r = lt(e, t, n);
+			return ut.push(r), r;
 		}
 	};
-	for (let e of L) e.bindDataStore?.(N, ft);
-	let pt = L.filter((e) => typeof e.onChangeEvent == "function");
-	if (pt.length > 0) {
-		let e = N.changeScope ?? "local";
-		N.onChange((t) => {
+	for (let e of R) e.bindDataStore?.(P, dt);
+	let ft = R.filter((e) => typeof e.onChangeEvent == "function");
+	if (ft.length > 0) {
+		let e = P.changeScope ?? "local";
+		P.onChange((t) => {
 			let n = y(t, e);
-			for (let e of pt) A.runFork(e.onChangeEvent(n).pipe(A.catchAllCause((t) => A.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Le.pretty(t) })))));
+			for (let e of ft) j.runFork(e.onChangeEvent(n).pipe(j.catchAllCause((t) => j.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Ie.pretty(t) })))));
 		});
 	}
-	let ht = me({
-		plugins: L,
+	let mt = me({
+		plugins: R,
 		appName: g?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	L.length && await ht.activate(), p.mark("plugins");
-	let gt = await ht.gatherObservability(), _t = await x(N, g, _, {
+	R.length && await mt.activate(), p.mark("plugins");
+	let ht = await mt.gatherObservability(), gt = await _e(P, g, _, {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}), R = g?.apiKeys, yt = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", bt = R ? Ye(N) : void 0, St = bt ? rt({ flush: it(bt) }) : void 0;
-	St && vt(() => St.shutdown());
-	let z = bt ? nt(bt, {
-		prefix: yt,
-		...St ? { usage: St } : {}
-	}) : void 0, wt = z ? [Qe(z, { prefix: yt })] : [], Et = Se([...g?.auth?.strategies ?? [], ...wt], $t(g?.plugins ?? []), g?.auth?.anonymousTenantRequired ?? !1, g?.auth?.resolveScopes, () => Be), Dt = [...g?.restRoutes ?? [], ...z ? Ve(z, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], B = g?.idempotency, kt = B ? {
-		store: Xe(N),
+	}), z = g?.apiKeys, vt = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", yt = z ? Je(P) : void 0, xt = yt ? nt({ flush: rt(yt) }) : void 0;
+	xt && _t(() => xt.shutdown());
+	let Ct = yt ? tt(yt, {
+		prefix: vt,
+		...xt ? { usage: xt } : {}
+	}) : void 0, wt = Ct ? [Ze(Ct, { prefix: vt })] : [], Et = Ce([...g?.auth?.strategies ?? [], ...wt], $t(g?.plugins ?? []), g?.auth?.anonymousTenantRequired ?? !1, g?.auth?.resolveScopes, () => ze), Dt = [...g?.restRoutes ?? [], ...Ct ? Be(Ct, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = g?.idempotency, kt = B ? {
+		store: Ye(P),
 		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
 		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
 	} : void 0, jt = Dt.length > 0 ? tn(Dt, {
-		store: N,
+		store: P,
 		resolveSubject: (e) => Et({
 			headers: e,
 			clientId: -1
 		}),
 		...kt ? { idempotency: kt } : {}
-	}) : [], V = L.map((e) => e.services).filter((e) => e !== void 0), Nt = j.mergeAll(Ee({
+	}) : [], V = R.map((e) => e.services).filter((e) => e !== void 0), Nt = M.mergeAll(Ee({
 		analyticsLayer: D.layer,
-		cacheService: He,
+		cacheService: Ve,
 		kvService: qe,
 		pluginServices: V,
 		userLayers: g?.layers ?? []
@@ -1008,22 +1009,22 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), It = H.coordination ?? (Ft.has(_) ? "advisoryLock" : "single"), U = It === "cluster" && Ft.has(_), W = U ? "cluster" : It === "advisoryLock" && Ft.has(_) ? "advisoryLock" : "single";
+	]), It = H.coordination ?? (Ft.has(_) ? "advisoryLock" : "single"), U = It === "cluster" && Ft.has(_), Lt = U ? "cluster" : It === "advisoryLock" && Ft.has(_) ? "advisoryLock" : "single";
 	It === "cluster" && !U && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), It === "advisoryLock" && !Ft.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let G, K = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (w?.outgoing.length ?? 0) > 0 || U, Lt;
-	if (K) {
+	let W, G = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (w?.outgoing.length ?? 0) > 0 || U, Rt;
+	if (G) {
 		if (_ === "mssql") {
 			let e = await fe(process.cwd());
 			e && $.warn(e);
 		}
 		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = U ? S.schedules.filter((e) => (e.trigger ?? Pt) === "self").map((e) => t({
 			name: e.name,
-			cron: Je(e),
+			cron: L(e),
 			execute: async () => {
-				await G?.fireFromCluster(e.name);
+				await W?.fireFromCluster(e.name);
 			}
 		})) : [];
-		Lt = _ === "memory" ? e.layerMemory : await (async () => {
+		Rt = _ === "memory" ? e.layerMemory : await (async () => {
 			let e = await n(_), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), r({
 				sqlClientLayer: e.makeSqlLayer(T()),
@@ -1034,13 +1035,13 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			});
 		})();
 	}
-	let Rt = je(L, t()), zt = b.filter((e) => /\.subscribe\.tsx?$/.test(e)), q = zt.length > 0 ? await ae(zt, $) : [], Bt = b.filter((e) => /\.reaction\.tsx?$/.test(e)), Vt = Bt.length > 0 ? await se(Bt, $) : [], J = b.filter((e) => u.test(e)), Ht = J.length > 0 ? await Me(J, $) : [], Ut = b.filter((e) => /\.aggregate\.tsx?$/.test(e)), Y = Ut.length > 0 ? await v(Ut, $) : [], X = ye();
+	let zt = je(R, t()), Bt = b.filter((e) => /\.subscribe\.tsx?$/.test(e)), K = Bt.length > 0 ? await ae(Bt, $) : [], Vt = b.filter((e) => /\.reaction\.tsx?$/.test(e)), Ht = Vt.length > 0 ? await se(Vt, $) : [], q = b.filter((e) => u.test(e)), Ut = q.length > 0 ? await Me(q, $) : [], J = b.filter((e) => /\.aggregate\.tsx?$/.test(e)), Y = J.length > 0 ? await v(J, $) : [], X = ye();
 	if (Y.length > 0 && _ !== "memory") try {
 		X = f((await n(_)).makeSqlLayer(T()));
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Wt = _ === "memory" ? Tt : tt(N, `aggregate@${process.pid}`, $), Z = [], Gt = [], Kt = b.filter((e) => l.test(e));
+	let Wt = _ === "memory" ? Tt : et(P, `aggregate@${process.pid}`, $), Z = [], Gt = [], Kt = b.filter((e) => l.test(e));
 	if (Kt.length > 0) {
 		let e = $.child("agent"), t = b.filter((e) => a.test(e));
 		t.length > 0 && await o(t, e);
@@ -1064,10 +1065,10 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			workflowWorkers: S.workflowWorkers,
 			eventTriggers: S.eventTriggers,
 			schedules: S.schedules,
-			subscribers: q,
-			outboxHandlers: Ht,
+			subscribers: K,
+			outboxHandlers: Ut,
 			connections: S.connections,
-			reactions: Vt,
+			reactions: Ht,
 			aggregates: Y,
 			...w === void 0 ? {} : { webhooks: w }
 		},
@@ -1075,11 +1076,11 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		analytics: D.sink,
 		aggregateStorage: X,
 		aggregateCoordinator: Wt,
-		store: N,
+		store: P,
 		kv: Ke,
 		cache: F,
 		snapshotCache: We,
-		schemaRegistry: M,
+		schemaRegistry: N,
 		tenantScopedTables: S.tenantScopedTables,
 		softDeleteScopedTables: S.softDeleteScopedTables,
 		dataTransferSnapshot: Xt(O),
@@ -1089,18 +1090,18 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			headers: e,
 			clientId: t
 		}),
-		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...jt],
-		getStore: () => Be,
+		httpRoutes: [...R.flatMap((e) => e.httpRoutes ?? []), ...jt],
+		getStore: () => ze,
 		...Nt ? { baseLayer: Nt } : {},
-		...Lt === void 0 ? {} : { workflowEngineLayer: Lt },
+		...Rt === void 0 ? {} : { workflowEngineLayer: Rt },
 		scheduleDefaultTrigger: Pt,
-		scheduleCoordination: W,
+		scheduleCoordination: Lt,
 		scheduleArmSelf: !U,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : g?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Rt === void 0 ? {} : { scheduleFireInterceptor: Rt },
+		...zt === void 0 ? {} : { scheduleFireInterceptor: zt },
 		onSchedulerReady: (e) => {
-			G = e;
+			W = e;
 		},
 		inspectRoute: { handle: (e, t, n, r) => d(e, {
 			kind: "api",
@@ -1112,11 +1113,11 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				store: _,
 				cdc: ce ? "on" : "off"
 			},
-			rpc: C(S, m),
+			rpc: be(S, m),
 			workflows: Oe(S, m),
 			inspectFireSchedule: async ({ name: e, trigger: t }) => {
-				if (!G) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-				return { runId: await G.fireNow(e, t) ?? null };
+				if (!W) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+				return { runId: await W.fireNow(e, t) ?? null };
 			}
 		}, t, {
 			method: n,
@@ -1126,11 +1127,11 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		} },
-		observability: gt,
+		observability: ht,
 		port: ne,
 		...g?.transport?.wsPath ? { path: g.transport.wsPath } : {}
 	});
-	return E(oe([
+	return Se(oe([
 		S.queries,
 		S.mutations,
 		S.actions,
@@ -1146,12 +1147,12 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		workflows: S.workflows.length,
 		workflowWorkers: S.workflowWorkers.length,
 		schedules: S.schedules.length,
-		scheduleCoordination: W
-	}), p.finish($), vt(async () => {
-		for (let e of dt) e.stop();
-		$e.detach(), et.stop(), I(), ct?.dispose();
+		scheduleCoordination: Lt
+	}), p.finish($), _t(async () => {
+		for (let e of ut) e.stop();
+		Qe.detach(), $e.stop(), I(), st?.dispose();
 		try {
-			await ht.deactivate(), await _t?.close(), await D.dispose(), await Jt.close(), await N.close?.();
+			await mt.deactivate(), await gt?.close(), await D.dispose(), await Jt.close(), await P.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}