@voltro/cli 0.22.1 → 0.24.0

package/dist/{serveCommand-DXJOARkO.js → serveCommand-C4gzDZzc.js}

@@ -1,54 +1,54 @@
-import { at as e, t } from "./inspectMetrics-9ZSuDeqD.js";
+import { ot as e, t } from "./inspectMetrics-dcC7gnxu.js";
 import { s as n } from "./seedRunner-D6eu-u5U.js";
 import { r, t as i } from "./appModuleLoader-C9r9mxZt.js";
 import { f as a, m as o, n as s, p as c, u as l } from "./frameworkTableAssembly-sg41s14F.js";
 import { l as u } from "./fileConventions-CBNPZVOV.js";
 import { p as d } from "./inspect-_ldwsAwH.js";
-import { $ as ee, A as f, B as p, C as te, D as m, E as ne, F as re, G as ie, H as ae, I as h, K as oe, L as g, M as _, N as se, O as v, P as y, R as ce, S as le, T as ue, V as de, W as fe, _ as b, at as pe, b as me, c as he, et as ge, h as _e, i as x, it as S, j as ve, k as ye, lt as be, m as C, nt as w, o as T, ot as xe, q as Se, r as Ce, rt as we, st as Te, t as Ee, tt as De, u as Oe, ut as ke, v as Ae, w as je, x as E, y as Me, z as Ne } from "./dev-BRiPgbKw.js";
-import { l as D, r as O } from "./apiBuild-DiWxVz-M.js";
-import { t as k } from "./bootTiming-BdyP9nYw.js";
-import { n as Pe } from "./cliArgs-qdZSElM3.js";
-import { join as Fe } from "node:path";
-import { pathToFileURL as Ie } from "node:url";
-import { Cause as Le, Effect as A, Layer as j, ManagedRuntime as Re } from "effect";
-import { createLogger as M } from "@voltro/logger";
-import { existsSync as ze } from "node:fs";
-import { AggregateRegistry as N, Dispatcher as Be, apiKeyManagementRoutes as Ve, applySoftDeleteScope as He, applyTenantScope as Ue, attachAnalyticsMirror as We, awaitServerListening as Ge, bindMutation as P, bindStream as Ke, bindSubscription as F, buildTracingLayer as qe, cancelWakeup as Je, compileCron as I, dataStoreApiKeyStore as Ye, dataStoreIdempotencyStore as Xe, formatServerOnlyLeaks as Ze, frameworkApiKeyStrategy as Qe, installPolicyGuardResolver as $e, loadResourceTuples as et, makeActionRunner as L, makeAdvisoryLockCoordinator as tt, makeApiKeyService as nt, makeApiKeyUsageBuffer as rt, makeApiKeyUsageFlusher as it, makeAsyncKv as at, makeCoordinatedScheduler as ot, makeEffectStoreLayer as st, makeLazyWorkflowFacade as ct, makeMutationRunner as lt, makeOneShotQueryRunner as ut, makeQueryDescriptorProducer as dt, makeQueryReauthorizer as ft, makeQuerySubscriber as pt, makeSchemaRegistry as mt, makeWorkflowFacade as ht, makeWorkflowFacadeWithCallerContext as gt, makeWorkflowLayers as _t, noopKv as R, onProcessShutdown as vt, recordSubscriptionDelivery as yt, registerWakeup as z, resolveSecretsBackend as bt, runProvidedEffect as B, setSecretsBackend as xt, setSystemStoreHandle as St, setTupleSource as Ct, singleCoordinator as wt, startRpcServer as Tt, startScheduler as Et, workflowToRpc as V, wrapStoreWithBootCodec as Dt } from "@voltro/runtime";
-import { RpcGroup as Ot } from "@effect/rpc";
-import { SqlClient as kt } from "@effect/sql";
-import { and as At, ensureTableRegistered as jt, eq as H, or as Mt } from "@voltro/database";
-import { appStorageProvider as U, fromNodeReadable as Nt, getObjectStream as Pt, putObjectStream as Ft, toNodeReadable as W } from "@voltro/plugin-storage";
-import { AuthMiddleware as It, ConnectionInfoMiddleware as G, actionToRpc as K, anonymousSubject as Lt, isWireReachable as Rt, mutationToRpc as zt, queryToRpc as q, streamToRpc as Bt, workflowCancelDescriptor as Vt, workflowDomainEventsQueryDescriptor as J, workflowEventDeliveriesQueryDescriptor as Ht, workflowResumeDescriptor as Ut, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as X, workflowRunStepsQueryDescriptor as Wt, workflowRunsQueryDescriptor as Z, workflowSignalDescriptor as Gt, workflowUpdateDescriptor as Kt } from "@voltro/protocol";
-import { assertProductionSessionSecret as qt } from "@voltro/protocol/session";
-import { createHash as Jt, timingSafeEqual as Yt } from "node:crypto";
-import { declaredSnapshot as Xt, describeOutcome as Zt, runPlannedMigrations as Qt } from "@voltro/database/sql";
-import { getAuthSessionStrategy as $t } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as en, restRoutesToHttpRoutes as tn } from "@voltro/protocol/rest";
-import { buildDeliverWebhookExecute as nn, buildWebhooksService as rn, defaultIncomingPath as an, deliverWebhookWorkflow as on, mountIncomingWebhook as sn } from "@voltro/plugin-webhooks";
-import { packBundle as cn, runExport as ln, runImport as un, storageBlobSink as dn, storageRefsBlobSource as fn, unpackBundle as pn, unpackBundleToDir as mn } from "@voltro/data-transfer";
+import { A as f, B as p, C as ee, D as m, E as te, F as ne, G as re, H as h, I as g, J as ie, K as ae, L as _, M as oe, N as v, O as y, P as b, R as se, S as ce, T as le, U as ue, V as de, at as x, b as fe, c as pe, ct as me, dt as he, et as S, g as ge, h as C, i as _e, it as ve, j as ye, k as w, nt as T, o as E, ot as be, q as xe, r as Se, rt as D, st as Ce, t as we, tt as Te, u as Ee, ut as De, v as Oe, w as ke, x as Ae, y as je, z as O } from "./dev-NCuEhNxs.js";
+import { r as Me, u as k } from "./apiBuild-B2m4XK_8.js";
+import { t as A } from "./bootTiming-BdyP9nYw.js";
+import { n as Ne } from "./cliArgs-qdZSElM3.js";
+import { join as Pe } from "node:path";
+import { pathToFileURL as Fe } from "node:url";
+import { Cause as Ie, Effect as j, Layer as M, ManagedRuntime as Le } from "effect";
+import { createLogger as N } from "@voltro/logger";
+import { existsSync as Re } from "node:fs";
+import { AggregateRegistry as P, Dispatcher as ze, apiKeyManagementRoutes as Be, applySoftDeleteScope as Ve, applyTenantScope as He, attachAnalyticsMirror as Ue, awaitServerListening as We, bindMutation as F, bindStream as Ge, bindSubscription as I, buildTracingLayer as Ke, cancelWakeup as qe, compileCron as L, dataStoreApiKeyStore as Je, dataStoreIdempotencyStore as Ye, formatServerOnlyLeaks as Xe, frameworkApiKeyStrategy as Ze, installPolicyGuardResolver as Qe, loadResourceTuples as $e, makeActionRunner as R, makeAdvisoryLockCoordinator as et, makeApiKeyService as tt, makeApiKeyUsageBuffer as nt, makeApiKeyUsageFlusher as rt, makeAsyncKv as it, makeCoordinatedScheduler as at, makeEffectStoreLayer as ot, makeLazyWorkflowFacade as st, makeMutationOutputCodec as ct, makeMutationRunner as lt, makeOneShotQueryRunner as ut, makeQueryDescriptorProducer as dt, makeQueryReauthorizer as ft, makeQuerySubscriber as pt, makeSchemaRegistry as mt, makeWorkflowFacade as ht, makeWorkflowFacadeWithCallerContext as gt, makeWorkflowLayers as z, noopKv as _t, onProcessShutdown as vt, recordSubscriptionDelivery as yt, registerWakeup as bt, resolveSecretsBackend as xt, runProvidedEffect as St, setSecretsBackend as Ct, setSystemStoreHandle as wt, setTupleSource as Tt, singleCoordinator as Et, startRpcServer as Dt, startScheduler as B, workflowToRpc as V, wrapStoreWithBootCodec as Ot } from "@voltro/runtime";
+import { RpcGroup as kt } from "@effect/rpc";
+import { SqlClient as At } from "@effect/sql";
+import { and as jt, ensureTableRegistered as Mt, eq as H, or as Nt } from "@voltro/database";
+import { appStorageProvider as U, fromNodeReadable as Pt, getObjectStream as Ft, putObjectStream as W, toNodeReadable as It } from "@voltro/plugin-storage";
+import { AuthMiddleware as G, ConnectionInfoMiddleware as Lt, actionToRpc as K, anonymousSubject as Rt, isWireReachable as zt, mutationToRpc as Bt, queryToRpc as q, streamToRpc as Vt, workflowCancelDescriptor as Ht, workflowDomainEventsQueryDescriptor as Ut, workflowEventDeliveriesQueryDescriptor as J, workflowResumeDescriptor as Wt, workflowRunEventsQueryDescriptor as Y, workflowRunQueryDescriptor as Gt, workflowRunStepsQueryDescriptor as X, workflowRunsQueryDescriptor as Z, workflowSignalDescriptor as Kt, workflowUpdateDescriptor as qt } from "@voltro/protocol";
+import { assertProductionSessionSecret as Jt } from "@voltro/protocol/session";
+import { createHash as Yt, timingSafeEqual as Xt } from "node:crypto";
+import { declaredSnapshot as Zt, describeOutcome as Qt, runPlannedMigrations as $t } from "@voltro/database/sql";
+import { getAuthSessionStrategy as en } from "@voltro/plugin-auth";
+import { collectPublicApiRoutes as tn, restRoutesToHttpRoutes as nn } from "@voltro/protocol/rest";
+import { buildDeliverWebhookExecute as rn, buildWebhooksService as an, defaultIncomingPath as on, deliverWebhookWorkflow as sn, mountIncomingWebhook as cn } from "@voltro/plugin-webhooks";
+import { packBundle as ln, runExport as un, runImport as dn, storageBlobSink as fn, storageRefsBlobSource as pn, unpackBundle as mn, unpackBundleToDir as hn } from "@voltro/data-transfer";
 //#region src/bootRefusal.ts
-var hn = "VoltroBootRefusal", gn = (e) => {
+var gn = "VoltroBootRefusal", _n = (e) => {
 	let t = Error(e);
-	return t.name = hn, t;
-}, _n = "/_voltro/admin/import", vn = "/_voltro/admin/export", Q = (e, t) => ({
+	return t.name = gn, t;
+}, vn = "/_voltro/admin/import", yn = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), yn = (e) => {
+}), bn = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, bn = (e, t) => Yt(Jt("sha256").update(e).digest(), Jt("sha256").update(t).digest()), xn = (e, t) => {
+}, xn = (e, t) => Xt(Yt("sha256").update(e).digest(), Yt("sha256").update(t).digest()), Sn = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = yn(e.headers);
-	return !n || !bn(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, Sn = M({ scope: "voltro:admin-import" }), Cn = "VBUNDLE2", wn = async function* (e) {
+	let n = bn(e.headers);
+	return !n || !xn(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, Cn = N({ scope: "voltro:admin-import" }), wn = "VBUNDLE2", Tn = async function* (e) {
 	yield e;
-}, Tn = (e) => async (t) => {
-	let n = xn(t, e.secret);
+}, En = (e) => async (t) => {
+	let n = Sn(t, e.secret);
 	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Cn, c, l;
-	if (s) c = wn(t.rawBody), l = "upload";
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === wn, c, l;
+	if (s) c = Tn(t.rawBody), l = "upload";
 	else {
 		let n;
 		try {
@@ -60,28 +60,28 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
 		c = e.openArchive(n.bundleKey), l = "storage";
 	}
-	let u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-import-"));
+	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await pn(c, {
-			dir: f,
+		e.assetSink ? await mn(c, {
+			dir: p,
 			blobs: e.assetSink
-		}) : await mn(c, f);
-		let t = await A.runPromiseExit(un({
+		}) : await hn(c, p);
+		let t = await j.runPromiseExit(dn({
 			store: e.store,
-			bundleDir: f,
+			bundleDir: p,
 			...r ? { mode: r } : {},
 			...i ? { onConflict: i } : {},
 			...a ? { atomic: a } : {},
 			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
 			force: o,
-			onWarn: (e) => Sn.warn("admin.import", { message: e }),
+			onWarn: (e) => Cn.warn("admin.import", { message: e }),
 			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
 		}));
 		if (t._tag === "Failure") {
 			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
 			if (e && e._tag === "SchemaDriftError") {
 				let t = e;
-				return Sn.warn("admin.import refused (schema drift)", {
+				return Cn.warn("admin.import refused (schema drift)", {
 					transport: l,
 					bundle: t.bundleFingerprint.slice(0, 16),
 					target: t.targetFingerprint.slice(0, 16)
@@ -96,7 +96,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			throw Error(String(e?.message ?? e ?? "import failed"));
 		}
 		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return Sn.info("admin.import", {
+		return Cn.info("admin.import", {
 			transport: l,
 			tables: n.tables.length,
 			rows: s,
@@ -108,7 +108,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			transport: l
 		});
 	} catch (e) {
-		return Sn.warn("admin.import failed", {
+		return Cn.warn("admin.import failed", {
 			transport: l,
 			error: e?.message ?? String(e)
 		}), Q(500, {
@@ -116,23 +116,23 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			message: e?.message ?? String(e)
 		});
 	} finally {
-		await d.rm(f, {
+		await d.rm(p, {
 			recursive: !0,
 			force: !0
 		});
 	}
-}, En = M({ scope: "voltro:admin-export" }), Dn = async (e) => {
+}, Dn = N({ scope: "voltro:admin-export" }), On = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
-}, On = (e) => typeof e.tenant == "string" && e.tenant ? {
+}, kn = (e) => typeof e.tenant == "string" && e.tenant ? {
 	kind: "tenant",
 	tenantId: e.tenant
 } : Array.isArray(e.tables) && e.tables.length ? {
 	kind: "tables",
 	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, kn = (e) => async (t) => {
-	let n = xn(t, e.secret);
+} : { kind: "all" }, An = (e) => async (t) => {
+	let n = Sn(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -152,13 +152,13 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? On(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? kn(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await A.runPromise(ln({
+		let t = await j.runPromise(un({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
-			outDir: f,
+			outDir: p,
 			...i.subset ? { subset: i.subset } : {
 				scope: s,
 				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
@@ -170,10 +170,10 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		if (c) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => cn({
-				dir: f,
+			return await e.putArchive(i, () => ln({
+				dir: p,
 				...l
-			})), En.info("admin.export", {
+			})), Dn.info("admin.export", {
 				transport: "storage",
 				tables: t.tables.length,
 				rows: n,
@@ -187,11 +187,11 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				transport: "storage"
 			});
 		}
-		let d = await Dn(cn({
-			dir: f,
+		let d = await On(ln({
+			dir: p,
 			...l
 		}));
-		return En.info("admin.export", {
+		return Dn.info("admin.export", {
 			transport: "download",
 			tables: t.tables.length,
 			rows: n,
@@ -208,17 +208,17 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			}
 		};
 	} catch (e) {
-		return En.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+		return Dn.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
 			error: "export failed",
 			message: e?.message ?? String(e)
 		});
 	} finally {
-		await d.rm(f, {
+		await d.rm(p, {
 			recursive: !0,
 			force: !0
 		});
 	}
-}, An = async (e) => {
+}, jn = async (e) => {
 	let { resolve: t } = await import("node:path"), { existsSync: n } = await import("node:fs"), r = [
 		e,
 		`${e}.profile.ts`,
@@ -229,8 +229,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	let a = await import(i), o = a.default ?? a.profile;
 	if (!o) throw Error(`data profile '${i}' has no default export`);
 	return o;
-}, jn = (e, t, n = {}) => (async function* () {
-	let r = await W((await A.runPromise(Pt(e, t).pipe(A.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
+}, Mn = (e, t, n = {}) => (async function* () {
+	let r = await It((await j.runPromise(Ft(e, t).pipe(j.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
 		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
 	};
 	try {
@@ -239,7 +239,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	} finally {
 		a && clearTimeout(a), r.destroy();
 	}
-})(), Mn = {
+})(), Nn = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -248,12 +248,12 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, Nn = async (e) => {
-	St({
+}, Pn = async (e) => {
+	wt({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = new Be({
+	let t = new ze({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		recordDelivery: (e) => yt({
@@ -262,7 +262,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), n = e.cache ?? Mn, r = e.kv ?? R, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
+	}), n = e.cache ?? Nn, r = e.kv ?? _t, i, a, o, s = /* @__PURE__ */ new Map(), c = () => `wfctx_${globalThis.crypto?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`}`, l = async (t, n, r) => {
 		let i = {
 			...r,
 			source: r.source ?? `workflow:${t}`
@@ -318,27 +318,27 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			process.stderr.write(`[workflow] failed to load start context for ${n}: ${e?.message ?? String(e)}\n`);
 			return;
 		}
-	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? ct(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, te = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", re = e.tenantIsolation === "namespace", ie = (e.log ?? M({ scope: "voltro:serve" })).child("webhooks"), ae, h = e.discovered.webhooks;
-	if (h && h.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
-		let t = e.workflowEngineLayer, i = S({
+	}, d = (e.discovered.workflows?.length ?? 0) > 0 ? st(() => i) : void 0, f = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, p = f || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", te = e.tenantIsolation === "namespace", ne = (e.log ?? N({ scope: "voltro:serve" })).child("webhooks"), re, g = e.discovered.webhooks;
+	if (g && g.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+		let t = e.workflowEngineLayer, i = x({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: n,
 			kv: r
-		}), a = h.outgoing.map((e) => e.descriptor);
-		ae = rn(i, async (e) => {
-			let n = on.execute(e).pipe(A.provide(on.toLayer(nn(i, { events: a })).pipe(j.provideMerge(t))));
-			A.runPromise(n).catch((t) => {
-				ie.error("deliverWebhook workflow crashed", {
+		}), a = g.outgoing.map((e) => e.descriptor);
+		re = an(i, async (e) => {
+			let n = sn.execute(e).pipe(j.provide(sn.toLayer(rn(i, { events: a })).pipe(M.provideMerge(t))));
+			j.runPromise(n).catch((t) => {
+				ne.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				}, t);
 			});
 		}, { events: a });
 	}
-	let oe = /* @__PURE__ */ new Map();
-	if (h) for (let e of h.incoming) {
-		let t = e.descriptor.path ?? an(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = sn(e.descriptor, {
+	let ie = /* @__PURE__ */ new Map();
+	if (g) for (let e of g.incoming) {
+		let t = e.descriptor.path ?? on(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = cn(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
 			resolveWorkflows: () => d === void 0 ? void 0 : gt(d, {
 				traceId: `incoming:${e.descriptor.id}`,
@@ -352,136 +352,142 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 					idempotency: e.idempotency,
 					durationMs: e.durationMs
 				};
-				e.status >= 500 ? ie.error("incoming delivery failed", t) : e.status >= 400 ? ie.warn("incoming delivery rejected", t) : ie.info("incoming delivery handled", t);
+				e.status >= 500 ? ne.error("incoming delivery failed", t) : e.status >= 400 ? ne.warn("incoming delivery rejected", t) : ne.info("incoming delivery handled", t);
 			}
 		});
-		oe.set(t, { handle: r });
+		ie.set(t, { handle: r });
 	}
-	$e(), Ct((t) => et(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let se = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? p({
+	Qe(), Tt((t) => $e(e.store, t.subjectId, t.resourceType, t.resourceId));
+	let ae = (e.discovered.outboxHandlers?.length ?? 0) > 0 ? de({
 		handlers: e.discovered.outboxHandlers ?? [],
 		store: e.store,
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("outbox")
-	}) : void 0, v = ce({
+		log: (e.log ?? N({ scope: "voltro:serve" })).child("outbox")
+	}) : void 0, _ = O({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: g(e.port ?? 4e3),
-		log: (e.log ?? M({ scope: "voltro:serve" })).child("connections")
-	}), y = we({
+		publicUrl: se(e.port ?? 4e3),
+		log: (e.log ?? N({ scope: "voltro:serve" })).child("connections")
+	}), b = ve({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: n,
 		kv: r,
-		...ae === void 0 ? {} : { webhooksService: ae },
+		...re === void 0 ? {} : { webhooksService: re },
 		...d === void 0 ? {} : { workflowsProxy: d },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: re,
-		...se === void 0 ? {} : { outbox: { nudge: se.nudge } },
-		...v.active ? { connections: { registry: v.registry } } : {}
-	}), ue = j.succeed(N, m), fe = (t, n) => {
-		let r = t.pipe(A.provide(st(n)));
-		return (e.baseLayer ? r.pipe(A.provide(e.baseLayer)) : r).pipe(A.provide(ue));
-	}, pe = (e, t) => B(fe(e, t)), me = lt({
+		namespaceIsolationOn: te,
+		...ae === void 0 ? {} : { outbox: { nudge: ae.nudge } },
+		..._.active ? { connections: { registry: _.registry } } : {}
+	}), le = M.succeed(P, y), ue = (t, n) => {
+		let r = t.pipe(j.provide(ot(n)));
+		return (e.baseLayer ? r.pipe(j.provide(e.baseLayer)) : r).pipe(j.provide(le));
+	}, fe = (e, t) => St(ue(e, t)), pe = lt({
 		store: e.store,
-		buildContext: (e, t, n) => y(e, t, n),
-		runEffect: pe,
-		undoCapture: le()
-	}), he = E(), ge = L({
-		buildContext: (e) => y(e),
-		runEffect: pe
-	}), _e = {
-		buildContext: (e) => y(e),
-		finalize: (t, n) => He(Ue(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
-		provideEffect: fe
-	}, x = dt(_e), ye = ut({
-		..._e,
+		buildContext: (e, t, n) => b(e, t, n),
+		runEffect: fe,
+		undoCapture: ee()
+	}), me = ce(), he = R({
+		buildContext: (e) => b(e),
+		runEffect: fe
+	}), ge = {
+		buildContext: (e) => b(e),
+		finalize: (t, n) => Ve(He(t, e.tenantScopedTables, n.subject.tenantId), e.softDeleteScopedTables),
+		provideEffect: ue
+	}, C = dt(ge), _e = ut({
+		...ge,
 		queryRows: (t) => e.store.query(t)
-	}), be = pt({
-		..._e,
+	}), ye = pt({
+		...ge,
 		subscribeDescriptor: (e, n, r) => t.subscribe(e, n, r),
 		subscribeComputed: (e, n, r) => t.subscribeComputed(e, n, r)
-	}), C = {};
+	}), w = (e) => e.filter((e) => zt(e.descriptor)), T = {};
 	for (let n of [
-		...e.discovered.queries,
-		...he.queries,
-		...v.queries
-	]) C[n.descriptor.name] = (e) => F(x(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, ft(n, e));
+		...w(e.discovered.queries),
+		...me.queries,
+		..._.queries
+	]) T[n.descriptor.name] = (e) => I(C(n, e), t, `subscription.${n.descriptor.name}`, void 0, void 0, ft(n, e));
 	for (let t of [
-		...e.discovered.mutations,
-		...he.mutations,
-		...v.mutations
-	]) C[t.descriptor.name] = (e) => P(async (e, n) => me(t, e, n), e, `mutation.${t.descriptor.name}`);
-	for (let t of [...e.discovered.actions, ...v.actions]) C[t.descriptor.name] = (e) => P(async (e, n) => ge(t, e, n), e, `action.${t.descriptor.name}`);
-	let T = () => `public-${Math.random().toString(36).slice(2, 10)}`, xe = [
+		...w(e.discovered.mutations),
+		...me.mutations,
+		..._.mutations
+	]) {
+		let n = ct(t.descriptor.output);
+		T[t.descriptor.name] = (r) => F(async (e, n) => pe(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency);
+	}
+	for (let t of [...w(e.discovered.actions), ..._.actions]) {
+		let n = ct(t.descriptor.output);
+		T[t.descriptor.name] = (r) => F(async (e, n) => he(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency);
+	}
+	let E = () => `public-${Math.random().toString(36).slice(2, 10)}`, be = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ye(e, t, {
+			invoke: (t, n) => _e(e, t, {
 				subject: n.subject,
-				traceId: T()
+				traceId: E()
 			}),
-			subscribe: (t, n, r) => be(e, t, {
+			subscribe: (t, n, r) => ye(e, t, {
 				subject: n.subject,
-				traceId: T()
+				traceId: E()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => me(e, t, {
+			invoke: (t, n) => pe(e, t, {
 				subject: n.subject,
-				traceId: T()
+				traceId: E()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ge(e, t, {
+			invoke: (t, n) => he(e, t, {
 				subject: n.subject,
-				traceId: T()
+				traceId: E()
 			})
 		}))
-	], Se = xe.length > 0 ? tn(en(xe), {
+	], xe = be.length > 0 ? nn(tn(be), {
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1)
-	}) : [], Ce = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Te = Ce && Ce.length >= 16 ? [{
+	}) : [], Se = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Ce = Se && Se.length >= 16 ? [{
 		method: "POST",
-		path: _n,
-		handle: Tn({
-			secret: Ce,
+		path: vn,
+		handle: En({
+			secret: Se,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: dn(U()),
-			openArchive: (e) => jn(U(), e)
+			assetSink: fn(U()),
+			openArchive: (e) => Mn(U(), e)
 		})
 	}, {
 		method: "POST",
-		path: vn,
-		handle: kn({
-			secret: Ce,
+		path: yn,
+		handle: An({
+			secret: Se,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
-			loadProfile: An,
-			assetSource: fn(U(), e.store),
+			loadProfile: jn,
+			assetSource: pn(U(), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = U(), i = Nt("storage", () => n.from(t()));
-				await A.runPromise(Ft(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = U(), i = Pt("storage", () => n.from(t()));
+				await j.runPromise(W(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], Ee = [
+	}] : [], we = [
 		...e.httpRoutes ?? [],
-		...Se,
-		...Te,
-		...v.httpRoutes
+		...xe,
+		...Ce,
+		..._.httpRoutes
 	];
-	for (let t of e.discovered.streams ?? []) C[t.descriptor.name] = (n) => Ke((r) => {
-		let i = y(r), a = t.executor(n, i);
-		if (A.isEffect(a)) {
-			let t = a.pipe(A.provide(st(i.store)));
-			return (e.baseLayer ? t.pipe(A.provide(e.baseLayer)) : t).pipe(A.provide(ue));
+	for (let t of w(e.discovered.streams ?? [])) T[t.descriptor.name] = (n) => Ge((r) => {
+		let i = b(r), a = t.executor(n, i);
+		if (j.isEffect(a)) {
+			let t = a.pipe(j.provide(ot(i.store)));
+			return (e.baseLayer ? t.pipe(j.provide(e.baseLayer)) : t).pipe(j.provide(le));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? A.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? j.promise(() => a) : a;
 	}, `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) C[t.definition.name] = (e) => P(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) T[t.definition.name] = (e) => F(async (e, n) => {
 		let r = n;
 		return gt(d, {
 			subject: r.subject,
@@ -489,8 +495,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	f && (C[X.name] = (e) => F(x({
-		descriptor: X,
+	f && (T[Gt.name] = (e) => I(C({
+		descriptor: Gt,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -499,13 +505,13 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: Mt(H("id", t), H("executionId", t)),
+				predicate: Nt(H("id", t), H("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${X.name}`), C[Z.name] = (e) => F(x({
+	}, e), t, `subscription.${Gt.name}`), T[Z.name] = (e) => I(C({
 		descriptor: Z,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
@@ -515,14 +521,14 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : At(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : jt(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Z.name}`), C[Wt.name] = (e) => F(x({
-		descriptor: Wt,
+	}, e), t, `subscription.${Z.name}`), T[X.name] = (e) => I(C({
+		descriptor: X,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -537,7 +543,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Wt.name}`), C[Y.name] = (e) => F(x({
+	}, e), t, `subscription.${X.name}`), T[Y.name] = (e) => I(C({
 		descriptor: Y,
 		executor: (e) => {
 			let t = e.runId;
@@ -553,8 +559,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Y.name}`), C[J.name] = (e) => F(x({
-		descriptor: J,
+	}, e), t, `subscription.${Y.name}`), T[Ut.name] = (e) => I(C({
+		descriptor: Ut,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -569,8 +575,8 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${J.name}`), C[Ht.name] = (e) => F(x({
-		descriptor: Ht,
+	}, e), t, `subscription.${Ut.name}`), T[J.name] = (e) => I(C({
+		descriptor: J,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -585,63 +591,66 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				projection: void 0
 			};
 		}
-	}, e), t, `subscription.${Ht.name}`), C[Vt.name] = (t) => P(async (t, n) => {
+	}, e), t, `subscription.${J.name}`), T[Ht.name] = (t) => F(async (t, n) => {
 		let r = t;
-		return await w(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Fe(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Vt.name}`), C[Ut.name] = (t) => P(async (t, n) => {
+		return await D(e.store, n.subject, { executionId: r.executionId }), await d.cancel(r.workflowName, r.executionId), await Pe(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Ht.name}`), T[Wt.name] = (t) => F(async (t, n) => {
 		let r = t;
-		return await w(e.store, n.subject, { executionId: r.executionId }), await d.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Ut.name}`), C[Gt.name] = (t) => P(async (t, n) => {
+		return await D(e.store, n.subject, { executionId: r.executionId }), await d.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${Wt.name}`), T[Kt.name] = (t) => F(async (t, n) => {
 		let r = t;
-		return await w(e.store, n.subject, { id: r.id }), d.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Gt.name}`), C[Kt.name] = (t) => P(async (t, n) => {
+		return await D(e.store, n.subject, { id: r.id }), d.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${Kt.name}`), T[qt.name] = (t) => F(async (t, n) => {
 		let r = t;
-		return await w(e.store, n.subject, { id: r.id }), d.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Kt.name}`));
-	let De = (e) => e.filter((e) => Rt(e.descriptor)), Oe = [
-		...De(e.discovered.queries).map((e) => q(e.descriptor)),
-		...De(e.discovered.mutations).map((e) => zt(e.descriptor)),
-		...De(e.discovered.actions).map((e) => K(e.descriptor)),
-		...he.queries.map((e) => q(e.descriptor)),
-		...he.mutations.map((e) => zt(e.descriptor)),
-		...v.queries.map((e) => q(e.descriptor)),
-		...v.mutations.map((e) => zt(e.descriptor)),
-		...v.actions.map((e) => K(e.descriptor)),
-		...(e.discovered.streams ?? []).map((e) => Bt(e.descriptor)),
+		return await D(e.store, n.subject, { id: r.id }), d.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${qt.name}`));
+	let Te = [
+		...w(e.discovered.queries).map((e) => q(e.descriptor)),
+		...w(e.discovered.mutations).map((e) => Bt(e.descriptor)),
+		...w(e.discovered.actions).map((e) => K(e.descriptor)),
+		...me.queries.map((e) => q(e.descriptor)),
+		...me.mutations.map((e) => Bt(e.descriptor)),
+		..._.queries.map((e) => q(e.descriptor)),
+		..._.mutations.map((e) => Bt(e.descriptor)),
+		..._.actions.map((e) => K(e.descriptor)),
+		...w(e.discovered.streams ?? []).map((e) => Vt(e.descriptor)),
 		...(e.discovered.workflows ?? []).map((e) => V(e.definition)),
 		...f ? [
-			q(X),
+			q(Gt),
 			q(Z),
-			q(Wt),
+			q(X),
 			q(Y),
+			q(Ut),
 			q(J),
-			q(Ht),
-			K(Vt),
-			K(Ut),
-			K(Gt),
-			K(Kt)
+			K(Ht),
+			K(Wt),
+			K(Kt),
+			K(qt)
 		] : []
-	], ke = Ot.make(...Oe).middleware(It).middleware(G), je = j.succeed(It, It.of(({ headers: t, clientId: n }) => A.promise(() => e.resolveSubject(t, n)))), Me = j.succeed(G, G.of(({ clientId: e }) => A.succeed({ clientId: e }))), Ne = e.dormancyTenantId ?? "default", D = e.dormancy === "sleep" ? {
-		register: (t, n, r) => z(e.store, {
-			tenantId: r ?? Ne,
+	], Ee = kt.make(...Te).middleware(G).middleware(Lt), De = M.succeed(G, G.of(({ headers: t, clientId: n }) => j.promise(() => e.resolveSubject(t, n)))), ke = M.succeed(Lt, Lt.of(({ headers: e, clientId: t }) => j.succeed({
+		clientId: t,
+		...e["idempotency-key"] ? { idempotencyKey: e["idempotency-key"] } : {}
+	}))), Ae = e.dormancyTenantId ?? "default", Me = e.dormancy === "sleep" ? {
+		register: (t, n, r) => bt(e.store, {
+			tenantId: r ?? Ae,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => Je(e.store, {
-			tenantId: n ?? Ne,
+		cancel: (t, n) => qe(e.store, {
+			tenantId: n ?? Ae,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, O = te ? await import("@voltro/workflow") : void 0, k = O?.makeWorkflowRunRecorder({
+	} : void 0, k = p ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
 		store: e.store,
-		...D === void 0 ? {} : { wakeups: D }
-	}), Pe = async (t, n) => {
-		await O.closeWorkflowChildrenForParent({
+		...Me === void 0 ? {} : { wakeups: Me }
+	}), Ne = async (t, n) => {
+		await k.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: k,
+			recorder: A,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -652,7 +661,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				await a.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Fe = async (t, n, r) => {
+	}, Pe = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -667,7 +676,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await k.recordEvent({
+		a && await A.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -676,16 +685,16 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Pe(n, "cancelled");
-	}, Ie = [..._t(e.discovered.workflows ?? [], {
-		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? y({
+		}), a && await Ne(n, "cancelled");
+	}, Fe = [...z(e.discovered.workflows ?? [], {
+		buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? b({
 			subject: t.subject,
 			traceId: t.traceId
 		}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
 		resolveStartContext: u
 	}, (t, n, r) => {
-		let i = O.getWorkflowVersionMetadata(t.definition);
-		return O.wrapWorkflowExecuteWithRunRecording({
+		let i = k.getWorkflowVersionMetadata(t.definition);
+		return k.wrapWorkflowExecuteWithRunRecording({
 			name: t.definition.name,
 			store: e.store,
 			subject: r.subject,
@@ -696,71 +705,72 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			workflowPatches: i.patches,
 			parentExecutionId: r?.parentExecutionId ?? null,
 			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Pe(e, t),
-			recorder: k
+			onParentClose: ({ executionId: e, status: t }) => Ne(e, t),
+			recorder: A
 		}, n);
-	}), ...e.discovered.workflowWorkers ?? []], Le = Ie.length > 0 ? j.mergeAll(...Ie) : j.empty;
+	}), ...e.discovered.workflowWorkers ?? []], Ie = Fe.length > 0 ? M.mergeAll(...Fe) : M.empty;
 	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster") && e.workflowEngineLayer !== void 0) {
-		let t = Le.pipe(j.provideMerge(e.workflowEngineLayer));
-		a = Re.make(e.baseLayer === void 0 ? t : t.pipe(j.provideMerge(e.baseLayer))), await a.runPromise(A.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ht({
+		let t = Ie.pipe(M.provideMerge(e.workflowEngineLayer));
+		a = Le.make(e.baseLayer === void 0 ? t : t.pipe(M.provideMerge(e.baseLayer))), await a.runPromise(j.void), i = (e.discovered.workflows?.length ?? 0) > 0 ? ht({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => a.runPromise(e),
 			rememberStartContext: l,
 			signal: async (t, n, r) => {
-				let i = await O.sendWorkflowSignal({
+				let i = await k.sendWorkflowSignal({
 					store: e.store,
-					recorder: k,
+					recorder: A,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await a.runPromise(O.completeSuspendingSignal({
+				return await a.runPromise(k.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => O.sendWorkflowUpdate({
+			update: (t, n, r, i) => k.sendWorkflowUpdate({
 				store: e.store,
-				recorder: k,
+				recorder: A,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => b(e.store, t),
-			retry: (t, n) => Ae({
+			listRuns: (t) => Oe(e.store, t),
+			retry: (t, n) => je({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => a.runPromise(e)
 			}, t, n)
 		}) : void 0;
 	}
-	let ze = j.mergeAll(ke.toLayer(C), je, Me), Ve = ee(C, e.discovered.queries.map((e) => e.descriptor.name), f), We = j.mergeAll(ke.toLayer(Ve), je, Me), I = e.observability, Ye = await qe({
-		...I && I.spanProcessors.length > 0 ? { extraSpanProcessors: I.spanProcessors } : {},
-		...I && I.metricReaders.length > 0 ? { extraMetricReaders: I.metricReaders } : {},
-		...I && Object.keys(I.resourceAttributes).length > 0 ? { resourceAttributes: I.resourceAttributes } : {},
-		...I && I.sampler !== void 0 ? { sampler: I.sampler } : {}
-	}), Xe = !1, Ze = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Qe, shutdown: nt } = Tt({
-		group: ke,
-		handlersLayer: ze,
-		httpHandlersLayer: We,
+	let Re = M.mergeAll(Ee.toLayer(T), De, ke), Be = S(T, e.discovered.queries.map((e) => e.descriptor.name), f), Ue = M.mergeAll(Ee.toLayer(Be), De, ke), L = e.observability, Je = await Ke({
+		...L && L.spanProcessors.length > 0 ? { extraSpanProcessors: L.spanProcessors } : {},
+		...L && L.metricReaders.length > 0 ? { extraMetricReaders: L.metricReaders } : {},
+		...L && Object.keys(L.resourceAttributes).length > 0 ? { resourceAttributes: L.resourceAttributes } : {},
+		...L && L.sampler !== void 0 ? { sampler: L.sampler } : {}
+	}), Ye = !1, Xe = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Ze, shutdown: tt } = Dt({
+		group: Ee,
+		handlersLayer: Re,
+		httpHandlersLayer: Ue,
 		port: e.port ?? 4e3,
+		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: Ye.layer,
+		tracerLayer: Je.layer,
 		healthCheck: {
-			isReady: () => Xe,
-			...Ze ? { ping: Ze } : {}
+			isReady: () => Ye,
+			...Xe ? { ping: Xe } : {}
 		},
-		...Ee.length > 0 ? { httpRoutes: Ee } : {},
+		...we.length > 0 ? { httpRoutes: we } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...oe.size > 0 ? { webhookRoutes: oe } : {},
+		...ie.size > 0 ? { webhookRoutes: ie } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
 	});
-	if (await Ge(Qe), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? tt(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : wt;
-		o = await Et(e.discovered.schedules ?? [], {
+	if (await We(Ze), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? et(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Et;
+		o = await B(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -768,7 +778,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			armSelf: e.scheduleArmSelf ?? !0,
 			dormancy: e.dormancy ?? "always-on",
 			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => y({
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => b({
 				subject: r,
 				traceId: t
 			}, e.store, void 0, `schedule:${n}`),
@@ -788,10 +798,10 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
 		}), e.onSchedulerReady?.(o);
 	}
-	let rt = e.log ?? M({ scope: "voltro:serve" }), it, at;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (it = de(e.discovered.subscribers ?? [], e.store, rt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = rt.child("reaction");
-		at = ve(e.discovered.reactions ?? [], e.store, {
+	let nt = e.log ?? N({ scope: "voltro:serve" }), rt, it;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (rt = h(e.discovered.subscribers ?? [], e.store, nt.child("subscribe"), e.schemaRegistry)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = nt.child("reaction");
+		it = oe(e.discovered.reactions ?? [], e.store, {
 			runAct: async (n, r) => {
 				if (n.kind === "workflow") {
 					if (d === void 0) {
@@ -805,10 +815,10 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 					}).start(n.workflow, e);
 					return;
 				}
-				await _(n.agent, r, {
+				await v(n.agent, r, {
 					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-					runAction: (e, t, n) => Promise.resolve(ge(e, t, n)),
-					makeSubject: (e) => Lt(e),
+					runAction: (e, t, n) => Promise.resolve(he(e, t, n)),
+					makeSubject: (e) => Rt(e),
 					now: () => Date.now(),
 					log: t
 				});
@@ -816,7 +826,7 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			checkBudget: async (n, r) => {
 				try {
 					let { requireAiBudget: t } = await import("@voltro/ai");
-					return (await A.runPromise(A.either(t(e.store, {
+					return (await j.runPromise(j.either(t(e.store, {
 						tenantId: n,
 						limitUsd: r
 					}))))._tag === "Right";
@@ -826,97 +836,97 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			}
 		}, t);
 	}
-	let ot;
-	return (e.discovered.aggregates?.length ?? 0) > 0 && (ot = await ne({
+	let at;
+	return (e.discovered.aggregates?.length ?? 0) > 0 && (at = await m({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: rt.child("aggregate"),
+		log: nt.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), ue = j.succeed(N, ot.registry)), Xe = !0, e.bootTiming?.mark("ready"), {
+	}), le = M.succeed(P, at.registry)), Ye = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: t,
-		server: Qe,
+		server: Ze,
 		scheduler: o,
 		close: async () => {
-			Xe = !1, ot?.detach(), at?.(), it?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Qe.close(() => e())), await nt();
+			Ye = !1, at?.detach(), it?.(), rt?.(), await o?.shutdown(), t.close(), await a?.dispose(), await new Promise((e) => Ze.close(() => e())), await tt();
 		}
 	};
-}, $ = M({ scope: "voltro:serve" }), Pn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Fn = Pe, In = async (e) => {
-	let t = D(process.cwd());
-	if (ze(t)) {
+}, $ = N({ scope: "voltro:serve" }), Fn = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", In = Ne, Ln = async (e) => {
+	let t = k(process.cwd());
+	if (Re(t)) {
 		let n;
 		try {
-			let e = await import(Ie(t).href);
+			let e = await import(Fe(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return Ln(e);
-}, Ln = async (ee) => {
-	let p = k();
+	return Rn(e);
+}, Rn = async (ee) => {
+	let m = A();
 	process.env.NODE_ENV || (process.env.NODE_ENV = "production");
 	try {
-		qt();
+		Jt();
 	} catch (e) {
-		throw gn(e instanceof Error ? e.message : String(e));
+		throw _n(e instanceof Error ? e.message : String(e));
 	}
-	let m = process.cwd(), ne = Number(process.env.PORT ?? Fn(ee, "--port") ?? 4e3), g = await he(m);
-	xt(bt(g?.secrets)), await e({
-		rawEnv: g?.env,
+	let h = process.cwd(), oe = Number(process.env.PORT ?? In(ee, "--port") ?? 4e3), v = await pe(h);
+	Ct(xt(v?.secrets)), await e({
+		rawEnv: v?.env,
 		appType: "api",
-		root: m,
+		root: h,
 		log: $,
 		generateTypes: !1
-	}), p.mark("config");
-	let _ = (process.env.DB_DIALECT ?? g?.store ?? "memory").toLowerCase(), ce = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", le = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, de = O(m);
-	if (!i() && ze(de)) try {
-		let e = await import(Ie(de).href);
+	}), m.mark("config");
+	let y = (process.env.DB_DIALECT ?? v?.store ?? "memory").toLowerCase(), se = (y === "mariadb" || y === "postgres" || y === "mssql") && (process.env.CDC ?? "1") !== "0", ce = y === "mariadb" ? "mariadb" : y === "mssql" ? "mssql" : void 0, de = Me(h);
+	if (!i() && Re(de)) try {
+		let e = await import(Fe(de).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Fe(m, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Pe(h, n)] = r;
 			r(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let b = await C(m), S = await Oe(b, { cdc: ce && le !== void 0 });
+	let x = await C(h), S = await Ee(x, { cdc: se && ce !== void 0 });
 	{
-		let e = h(S.serverOnlyLeaks, re(process.env, "strict"), Ze, "`voltro serve`");
-		if (e.action === "fail") throw gn(e.message ?? "");
+		let e = _(S.serverOnlyLeaks, g(process.env, "strict"), Xe, "`voltro serve`");
+		if (e.action === "fail") throw _n(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
-	let ve = b.filter((e) => je.test(e)), w = ve.length > 0 ? await ue(ve, $.child("webhooks")) : void 0, we = s({
+	let ve = x.filter((e) => le.test(e)), D = ve.length > 0 ? await te(ve, $.child("webhooks")) : void 0, Oe = s({
 		mix: S.featureMix,
-		plugins: g?.plugins ?? [],
-		cdc: ce && le !== void 0,
-		...le ? { cdcDialect: le } : {}
-	}), Ae = g?.analytics !== void 0 && g.analytics.kind !== "noop" && _ !== "memory" ? (await n(_)).makeSqlLayer(T()) : void 0, E = await ie({
-		spec: g?.analytics,
-		sqlLayer: Ae,
+		plugins: v?.plugins ?? [],
+		cdc: se && ce !== void 0,
+		...ce ? { cdcDialect: ce } : {}
+	}), je = v?.analytics !== void 0 && v.analytics.kind !== "noop" && y !== "memory" ? (await n(y)).makeSqlLayer(E()) : void 0, O = await ae({
+		spec: v?.analytics,
+		sqlLayer: je,
 		log: $
-	}), D = (() => {
+	}), k = (() => {
 		let e = new Set(S.tables.map((e) => e.tableName)), t = [...S.tables];
-		for (let n of [...we, ...E.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		for (let n of [...Oe, ...O.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of D) jt(e);
-	let Pe = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Pn(Pe, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await n(_)).makeSqlLayer(T()), t = await A.runPromise(kt.SqlClient.pipe(A.flatMap((e) => Qt(e, D, {
-			appliedBy: `serve:${Pe}`,
+	for (let e of k) Mt(e);
+	let Ne = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (Fn(Ne, y, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await n(y)).makeSqlLayer(E()), t = await j.runPromise(At.SqlClient.pipe(j.flatMap((e) => $t(e, k, {
+			appliedBy: `serve:${Ne}`,
 			environment: "prod",
-			dialectId: _
-		})), A.provide(e)));
-		t.kind === "prod-mismatch" && ($.error(Zt(t, _)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Zt(t, _));
+			dialectId: y
+		})), j.provide(e)));
+		t.kind === "prod-mismatch" && ($.error(Qt(t, y)), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Qt(t, y));
 	}
-	let M = mt(D);
-	p.mark("discover");
-	let N = await x(g, void 0), Be = Dt(N, _);
-	for (let e of Te({
-		dialect: String(g?.store ?? process.env.DB_DIALECT ?? "postgres"),
+	let N = mt(k);
+	m.mark("discover");
+	let P = await _e(v, void 0), ze = Ot(P, y);
+	for (let e of me({
+		dialect: String(v?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
 		tables: S.tables.map((e) => ({
@@ -928,105 +938,105 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
-	g?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = g.cache), g?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = g.cacheRedisUrl), g?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = g.cacheRedisDriver), g?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = g.cacheKeyPrefix);
-	let { service: He, invalidationBus: Ue, snapshotCache: Ge, cache: P, backend: Ke, dispose: F } = await xe({ env: process.env });
-	$.info(`cache backend resolved: ${Ke}` + (Ke === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), N.onChange((e) => {
-		A.runFork(Ue.publish(e.table));
-	}), g?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = g.kv), g?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = g.kvRedisUrl), g?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = g.kvKeyPrefix);
-	let { kv: qe, service: Je } = await at({ store: N });
-	p.mark("store");
-	let $e = We({
-		store: N,
-		sink: E.sink,
+	v?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = v.cache), v?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = v.cacheRedisUrl), v?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = v.cacheRedisDriver), v?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = v.cacheKeyPrefix);
+	let { service: Ve, invalidationBus: He, snapshotCache: We, cache: F, backend: Ge, dispose: I } = await Ce({ env: process.env });
+	$.info(`cache backend resolved: ${Ge}` + (Ge === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), P.onChange((e) => {
+		j.runFork(He.publish(e.table));
+	}), v?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = v.kv), v?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = v.kvRedisUrl), v?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = v.kvKeyPrefix);
+	let { kv: Ke, service: qe } = await it({ store: P });
+	m.mark("store");
+	let Qe = Ue({
+		store: P,
+		sink: O.sink,
 		log: $
-	}), et = pe({
-		store: N,
-		dialect: _
-	}), L = g?.plugins ?? [], st = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, ct, lt;
-	_ !== "memory" && (ct = Re.make((await n(_)).makeSqlLayer(T())), lt = await ct.runPromise(kt.SqlClient));
-	let ut = ot({
+	}), $e = be({
+		store: P,
+		dialect: y
+	}), R = v?.plugins ?? [], ot = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, st, ct;
+	y !== "memory" && (st = Le.make((await n(y)).makeSqlLayer(E())), ct = await st.runPromise(At.SqlClient));
+	let lt = at({
 		coordinator: [
 			"postgres",
 			"mariadb",
 			"mysql",
 			"mssql"
-		].includes(_) ? tt(N, st, $) : wt,
-		replicaId: st,
+		].includes(y) ? et(P, ot, $) : Et,
+		replicaId: ot,
 		log: $
-	}), dt = [], ft = {
-		...lt ? { sql: lt } : {},
+	}), ut = [], dt = {
+		...ct ? { sql: ct } : {},
 		scheduleCoordinated: (e, t, n) => {
-			let r = ut(e, t, n);
-			return dt.push(r), r;
+			let r = lt(e, t, n);
+			return ut.push(r), r;
 		}
 	};
-	for (let e of L) e.bindDataStore?.(N, ft);
-	let pt = L.filter((e) => typeof e.onChangeEvent == "function");
-	if (pt.length > 0) {
-		let e = N.changeScope ?? "local";
-		N.onChange((t) => {
-			let n = y(t, e);
-			for (let e of pt) A.runFork(e.onChangeEvent(n).pipe(A.catchAllCause((t) => A.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Le.pretty(t) })))));
+	for (let e of R) e.bindDataStore?.(P, dt);
+	let ft = R.filter((e) => typeof e.onChangeEvent == "function");
+	if (ft.length > 0) {
+		let e = P.changeScope ?? "local";
+		P.onChange((t) => {
+			let n = ne(t, e);
+			for (let e of ft) j.runFork(e.onChangeEvent(n).pipe(j.catchAllCause((t) => j.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Ie.pretty(t) })))));
 		});
 	}
-	let ht = me({
-		plugins: L,
-		appName: g?.name ?? "voltro-api",
+	let pt = Ae({
+		plugins: R,
+		appName: v?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	L.length && await ht.activate(), p.mark("plugins");
-	let gt = await ht.gatherObservability(), _t = await _e(N, g, _, {
+	R.length && await pt.activate(), m.mark("plugins");
+	let ht = await pt.gatherObservability(), gt = await ge(P, v, y, {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}), R = g?.apiKeys, yt = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", z = R ? Ye(N) : void 0, B = z ? rt({ flush: it(z) }) : void 0;
-	B && vt(() => B.shutdown());
-	let St = z ? nt(z, {
-		prefix: yt,
-		...B ? { usage: B } : {}
-	}) : void 0, Ct = St ? [Qe(St, { prefix: yt })] : [], Tt = Ce([...g?.auth?.strategies ?? [], ...Ct], $t(g?.plugins ?? []), g?.auth?.anonymousTenantRequired ?? !1, g?.auth?.resolveScopes, () => Be), Et = [...g?.restRoutes ?? [], ...St ? Ve(St, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], V = g?.idempotency, Ot = V ? {
-		store: Xe(N),
-		header: (typeof V == "object" ? V.header : void 0) ?? "Idempotency-Key",
-		ttlMs: (typeof V == "object" ? V.ttlMs : void 0) ?? 864e5
-	} : void 0, At = Et.length > 0 ? tn(Et, {
-		store: N,
+	}), z = v?.apiKeys, _t = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", yt = z ? Je(P) : void 0, bt = yt ? nt({ flush: rt(yt) }) : void 0;
+	bt && vt(() => bt.shutdown());
+	let St = yt ? tt(yt, {
+		prefix: _t,
+		...bt ? { usage: bt } : {}
+	}) : void 0, wt = St ? [Ze(St, { prefix: _t })] : [], Tt = Se([...v?.auth?.strategies ?? [], ...wt], en(v?.plugins ?? []), v?.auth?.anonymousTenantRequired ?? !1, v?.auth?.resolveScopes, () => ze), Dt = [...v?.restRoutes ?? [], ...St ? Be(St, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], B = v?.idempotency, V = B ? {
+		store: Ye(P),
+		header: (typeof B == "object" ? B.header : void 0) ?? "Idempotency-Key",
+		ttlMs: (typeof B == "object" ? B.ttlMs : void 0) ?? 864e5
+	} : void 0, kt = Dt.length > 0 ? nn(Dt, {
+		store: P,
 		resolveSubject: (e) => Tt({
 			headers: e,
 			clientId: -1
 		}),
-		...Ot ? { idempotency: Ot } : {}
-	}) : [], H = L.map((e) => e.services).filter((e) => e !== void 0), Mt = j.mergeAll(De({
-		analyticsLayer: E.layer,
-		cacheService: He,
-		kvService: Je,
-		pluginServices: H,
-		userLayers: g?.layers ?? []
-	}), ge(g?.http ?? {})), U = g?.scheduling ?? {}, Nt = U.trigger ?? "self", Pt = /* @__PURE__ */ new Set([
+		...V ? { idempotency: V } : {}
+	}) : [], jt = R.map((e) => e.services).filter((e) => e !== void 0), H = M.mergeAll(T({
+		analyticsLayer: O.layer,
+		cacheService: Ve,
+		kvService: qe,
+		pluginServices: jt,
+		userLayers: v?.layers ?? []
+	}), Te(v?.http ?? {})), Nt = v?.scheduling ?? {}, U = Nt.trigger ?? "self", Pt = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), Ft = U.coordination ?? (Pt.has(_) ? "advisoryLock" : "single"), W = Ft === "cluster" && Pt.has(_), It = W ? "cluster" : Ft === "advisoryLock" && Pt.has(_) ? "advisoryLock" : "single";
-	Ft === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Ft === "advisoryLock" && !Pt.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let G, K = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (w?.outgoing.length ?? 0) > 0 || W, Lt;
-	if (K) {
-		if (_ === "mssql") {
-			let e = await fe(process.cwd());
+	]), Ft = Nt.coordination ?? (Pt.has(y) ? "advisoryLock" : "single"), W = Ft === "cluster" && Pt.has(y), It = W ? "cluster" : Ft === "advisoryLock" && Pt.has(y) ? "advisoryLock" : "single";
+	Ft === "cluster" && !W && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Ft === "advisoryLock" && !Pt.has(y) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let G, Lt = S.workflows.length > 0 || S.workflowWorkers.length > 0 || S.eventTriggers.length > 0 || (D?.outgoing.length ?? 0) > 0 || W, K;
+	if (Lt) {
+		if (y === "mssql") {
+			let e = await re(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = W ? S.schedules.filter((e) => (e.trigger ?? Nt) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: r, resolveRunnerStorage: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = W ? S.schedules.filter((e) => (e.trigger ?? U) === "self").map((e) => t({
 			name: e.name,
-			cron: I(e),
+			cron: L(e),
 			execute: async () => {
 				await G?.fireFromCluster(e.name);
 			}
 		})) : [];
-		Lt = _ === "memory" ? e.layerMemory : await (async () => {
-			let e = await n(_), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+		K = y === "memory" ? e.layerMemory : await (async () => {
+			let e = await n(y), t = i({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), r({
-				sqlClientLayer: e.makeSqlLayer(T()),
+				sqlClientLayer: e.makeSqlLayer(E()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -1034,69 +1044,73 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			});
 		})();
 	}
-	let Rt = Me(L, t()), zt = b.filter((e) => /\.subscribe\.tsx?$/.test(e)), q = zt.length > 0 ? await ae(zt, $) : [], Bt = b.filter((e) => /\.reaction\.tsx?$/.test(e)), Vt = Bt.length > 0 ? await se(Bt, $) : [], J = b.filter((e) => u.test(e)), Ht = J.length > 0 ? await Ne(J, $) : [], Ut = b.filter((e) => /\.aggregate\.tsx?$/.test(e)), Y = Ut.length > 0 ? await v(Ut, $) : [], X = ye();
-	if (Y.length > 0 && _ !== "memory") try {
-		X = f((await n(_)).makeSqlLayer(T()));
+	let Rt = fe(R, t()), zt = x.filter((e) => /\.subscribe\.tsx?$/.test(e)), Bt = zt.length > 0 ? await ue(zt, $) : [], q = x.filter((e) => /\.reaction\.tsx?$/.test(e)), Vt = q.length > 0 ? await b(q, $) : [], Ht = x.filter((e) => u.test(e)), Ut = Ht.length > 0 ? await p(Ht, $) : [], J = x.filter((e) => /\.aggregate\.tsx?$/.test(e)), Wt = J.length > 0 ? await w(J, $) : [], Y = f();
+	if (Wt.length > 0 && y !== "memory") try {
+		Y = ye((await n(y)).makeSqlLayer(E()));
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Wt = _ === "memory" ? wt : tt(N, `aggregate@${process.pid}`, $), Z = [], Gt = [], Kt = b.filter((e) => l.test(e));
+	let Gt = y === "memory" ? Et : et(P, `aggregate@${process.pid}`, $), X = [], Z = [], Kt = x.filter((e) => l.test(e));
 	if (Kt.length > 0) {
-		let e = $.child("agent"), t = b.filter((e) => a.test(e));
+		let e = $.child("agent"), t = x.filter((e) => a.test(e));
 		t.length > 0 && await o(t, e);
 		let n = await c(Kt, e);
-		for (let e of n.agents) for (let t of te(e)) (t.kind === "action" ? Z : Gt).push({
+		for (let e of n.agents) for (let t of ke(e)) (t.kind === "action" ? X : Z).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
 		});
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
-	p.mark("workflow");
-	let Jt = await Nn({
-		bootTiming: p,
+	m.mark("workflow");
+	let qt = await Pn({
+		bootTiming: m,
+		...V ? { idempotency: {
+			store: V.store,
+			ttlMs: V.ttlMs
+		} } : {},
 		discovered: {
-			queries: [...S.queries, ...Gt],
+			queries: [...S.queries, ...Z],
 			mutations: S.mutations,
-			actions: [...S.actions, ...Z],
+			actions: [...S.actions, ...X],
 			streams: S.streams,
 			workflows: S.workflows,
 			workflowWorkers: S.workflowWorkers,
 			eventTriggers: S.eventTriggers,
 			schedules: S.schedules,
-			subscribers: q,
-			outboxHandlers: Ht,
+			subscribers: Bt,
+			outboxHandlers: Ut,
 			connections: S.connections,
 			reactions: Vt,
-			aggregates: Y,
-			...w === void 0 ? {} : { webhooks: w }
+			aggregates: Wt,
+			...D === void 0 ? {} : { webhooks: D }
 		},
 		log: $,
-		analytics: E.sink,
-		aggregateStorage: X,
-		aggregateCoordinator: Wt,
-		store: N,
-		kv: qe,
-		cache: P,
-		snapshotCache: Ge,
-		schemaRegistry: M,
+		analytics: O.sink,
+		aggregateStorage: Y,
+		aggregateCoordinator: Gt,
+		store: P,
+		kv: Ke,
+		cache: F,
+		snapshotCache: We,
+		schemaRegistry: N,
 		tenantScopedTables: S.tenantScopedTables,
 		softDeleteScopedTables: S.softDeleteScopedTables,
-		dataTransferSnapshot: Xt(D),
-		dataTransferDialect: _,
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? g?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		dataTransferSnapshot: Zt(k),
+		dataTransferDialect: y,
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? v?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
 		resolveSubject: (e, t) => Tt({
 			headers: e,
 			clientId: t
 		}),
-		httpRoutes: [...L.flatMap((e) => e.httpRoutes ?? []), ...At],
-		getStore: () => Be,
-		...Mt ? { baseLayer: Mt } : {},
-		...Lt === void 0 ? {} : { workflowEngineLayer: Lt },
-		scheduleDefaultTrigger: Nt,
+		httpRoutes: [...R.flatMap((e) => e.httpRoutes ?? []), ...kt],
+		getStore: () => ze,
+		...H ? { baseLayer: H } : {},
+		...K === void 0 ? {} : { workflowEngineLayer: K },
+		scheduleDefaultTrigger: U,
 		scheduleCoordination: It,
 		scheduleArmSelf: !W,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : g?.dormancy ?? "always-on",
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : v?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
 		...Rt === void 0 ? {} : { scheduleFireInterceptor: Rt },
 		onSchedulerReady: (e) => {
@@ -1105,15 +1119,15 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		inspectRoute: { handle: (e, t, n, r) => d(e, {
 			kind: "api",
 			meta: {
-				name: g?.name ?? "voltro-api",
-				voltroVersion: Ee,
-				port: ne,
+				name: v?.name ?? "voltro-api",
+				voltroVersion: we,
+				port: oe,
 				mode: "start",
-				store: _,
-				cdc: ce ? "on" : "off"
+				store: y,
+				cdc: se ? "on" : "off"
 			},
-			rpc: be(S, m),
-			workflows: ke(S, m),
+			rpc: De(S, h),
+			workflows: he(S, h),
 			inspectFireSchedule: async ({ name: e, trigger: t }) => {
 				if (!G) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
 				return { runId: await G.fireNow(e, t) ?? null };
@@ -1126,19 +1140,19 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		} },
-		observability: gt,
-		port: ne,
-		...g?.transport?.wsPath ? { path: g.transport.wsPath } : {}
+		observability: ht,
+		port: oe,
+		...v?.transport?.wsPath ? { path: v.transport.wsPath } : {}
 	});
-	return Se(oe([
+	return ie(xe([
 		S.queries,
 		S.mutations,
 		S.actions,
 		S.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${ne}`, {
-		dialect: _,
+	}), $.info(`API listening on :${oe}`, {
+		dialect: y,
 		queries: S.queries.length,
 		mutations: S.mutations.length,
 		actions: S.actions.length,
@@ -1147,15 +1161,15 @@ var hn = "VoltroBootRefusal", gn = (e) => {
 		workflowWorkers: S.workflowWorkers.length,
 		schedules: S.schedules.length,
 		scheduleCoordination: It
-	}), p.finish($), vt(async () => {
-		for (let e of dt) e.stop();
-		$e.detach(), et.stop(), F(), ct?.dispose();
+	}), m.finish($), vt(async () => {
+		for (let e of ut) e.stop();
+		Qe.detach(), $e.stop(), I(), st?.dispose();
 		try {
-			await ht.deactivate(), await _t?.close(), await E.dispose(), await Jt.close(), await N.close?.();
+			await pt.deactivate(), await gt?.close(), await O.dispose(), await qt.close(), await P.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { In as n, An as r, Ln as t };
+export { Ln as n, jn as r, Rn as t };