@voltro/cli 0.36.0 → 0.38.0

package/dist/{dev-Dc4cpmRl.js → dev-E7Eo5GHc.js}

@@ -1,21 +1,22 @@
 import { n as e } from "./loadEnv-D9nEOClM.js";
 import { t } from "./frameworkInspectState-CX2250XB.js";
 import { n } from "./appModuleLoader-C9r9mxZt.js";
-import { n as r, t as i } from "./startupRunner-DPGFchOa.js";
-import { r as a } from "./appPort-B_HpJ_ck.js";
-import { B as o, H as s, I as c, N as l, P as u, R as d, U as f, V as p, at as m, et as h, g, it as _, nt as v, rt as y, st as ee, tt as b, z as x } from "./webDev-Dybxew86.js";
-import { n as S, r as C } from "./dialectDriver-CgXnDfec.js";
-import { a as w, i as te, t as ne } from "./connectionConfig-UFlIEiys.js";
-import { a as re, c as ie, i as ae, n as oe, o as se, r as ce, t as le } from "./seedRunner-ZmLSqNe2.js";
-import { r as ue } from "./devActivity-Dx_3nnGv.js";
-import { C as de, E as T, S as fe, T as pe, _ as me, b as he, d as ge, f as _e, g as ve, h as ye, m as be, o as xe, p as E, r as Se, u as Ce, v as we, w as Te, x as Ee } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { A as De, D as Oe, M as ke, P as Ae, S as je, _ as Me, a as D, b as O, c as Ne, g as k, k as Pe, n as Fe, o as Ie, p as Le, s as Re, t as ze, v as Be, w as Ve, x as He, y as Ue } from "./fileConventions-Cof68_BL.js";
+import { t as r } from "./bootRefusal-pgvDxlrU.js";
+import { n as i, r as a } from "./startupRunner-CEqQq7ax.js";
+import { r as o } from "./appPort-B_HpJ_ck.js";
+import { B as s, H as c, I as l, N as u, P as d, R as f, U as p, V as m, et as h, g, it as _, nt as v, ot as ee, rt as y, tt as te, z as b } from "./webDev-BKdD7c_a.js";
+import { n as x, r as S } from "./dialectDriver-CgXnDfec.js";
+import { a as C, i as ne, t as re } from "./connectionConfig-UFlIEiys.js";
+import { a as ie, c as ae, i as oe, n as se, o as ce, r as le, t as ue } from "./seedRunner-ZmLSqNe2.js";
+import { r as de } from "./devActivity-Dx_3nnGv.js";
+import { C as fe, E as w, S as pe, T as me, _ as he, b as ge, d as _e, f as ve, g as ye, h as be, m as xe, o as Se, p as T, r as Ce, u as we, v as Te, w as Ee, x as De } from "./frameworkTableAssembly-oMPBKqlE.js";
+import { A as Oe, D as ke, M as Ae, P as je, S as Me, _ as Ne, a as E, b as D, c as Pe, g as O, k as Fe, n as Ie, o as Le, p as Re, s as ze, t as Be, v as Ve, w as He, x as Ue, y as k } from "./fileConventions-Cof68_BL.js";
 import { A as We, C as Ge, D as A, E as j, N as Ke, O as qe, S as Je, T as Ye, _ as Xe, a as Ze, b as Qe, c as $e, d as et, f as tt, g as nt, h as rt, i as it, l as at, m as ot, o as st, p as ct, r as lt, s as ut, t as dt, u as ft, v as pt, w as M, x as mt, y as ht } from "./inspect-CjTYzAs_.js";
 import { t as gt } from "./manifestBuild-hpPLaGxV.js";
 import { n as _t } from "./cliRuntime-Dh7UDinH.js";
 import { n as vt, t as yt } from "./tsxLoader-EuXmSJ1K.js";
 import { n as bt } from "./agentsMd-mhQMF1bx.js";
-import { a as xt, c as St, o as Ct, r as wt, s as Tt } from "./codegen-CYM3Zqrf.js";
+import { a as xt, c as St, o as Ct, r as wt, s as Tt } from "./codegen-GYYcdpCg.js";
 import { n as Et } from "./mssqlClusterPatch-_4cE_nun.js";
 import { p as Dt } from "./renderModeScan-D7J1B7Kw.js";
 import { i as Ot, n as kt, r as At } from "./webhookDiscovery-D7VaeMlz.js";
@@ -681,13 +682,13 @@ var Xs = (e) => {
 		return e.ensureTenantProvisioned === void 0 ? i : Nc(i, r, e.ensureTenantProvisioned);
 	}, m = (n, r) => e.resolveResidentStore === void 0 || n !== t ? n : e.resolveResidentStore(r);
 	return (e, c = t, h, g = "app-context", _) => {
-		let v = p(m(c, e.subject), e.subject), y = o === void 0 ? void 0 : Oo(o, {
+		let v = p(m(c, e.subject), e.subject), ee = o === void 0 ? void 0 : Oo(o, {
 			subject: e.subject,
 			traceId: e.traceId,
 			source: g,
 			..._?.parentExecutionId === void 0 ? {} : { parentExecutionId: _.parentExecutionId },
 			..._?.parentClosePolicy === void 0 ? {} : { parentClosePolicy: _.parentClosePolicy }
-		}), ee = s.length === 0 || o === void 0 ? void 0 : uo({
+		}), y = s.length === 0 || o === void 0 ? void 0 : uo({
 			triggers: s,
 			store: p(t, e.subject),
 			source: g,
@@ -696,7 +697,7 @@ var Xs = (e) => {
 			...l === void 0 ? {} : { emit: l },
 			..._?.parentExecutionId === void 0 ? {} : { parentExecutionId: _.parentExecutionId },
 			startWorkflow: (e, t, n) => Oo(o, n).start(e, t)
-		}), b = f === void 0 ? void 0 : lo({
+		}), te = f === void 0 ? void 0 : lo({
 			bus: f,
 			tenantId: e.subject.tenantId ?? null,
 			...h === void 0 ? {} : { deferToCommit: (e) => {
@@ -705,28 +706,28 @@ var Xs = (e) => {
 				});
 			} },
 			onPublished: (e, t, n) => {
-				ee !== void 0 && ee.emit(e, t).catch(() => {}), n.webhook !== void 0 && a !== void 0 && a.emit(n, t).catch(() => {});
+				y !== void 0 && y.emit(e, t).catch(() => {}), n.webhook !== void 0 && a !== void 0 && a.emit(n, t).catch(() => {});
 			}
-		}), x = u === void 0 ? void 0 : _o({
+		}), b = u === void 0 ? void 0 : _o({
 			store: v,
 			subject: e.subject,
 			traceId: e.traceId,
 			nudge: u.nudge,
 			...h === void 0 ? {} : { afterCommit: h.afterCommit }
-		}), S = d === void 0 ? void 0 : io({
+		}), x = d === void 0 ? void 0 : io({
 			store: v,
 			registry: d.registry,
 			subject: e.subject
-		}), C = oo({ store: v });
-		H(C);
-		let w = e.rowFilter === void 0 ? {} : { rowFilter: e.rowFilter };
+		}), S = oo({ store: v });
+		H(S);
+		let C = e.rowFilter === void 0 ? {} : { rowFilter: e.rowFilter };
 		return {
 			storeForTenant: (t) => {
 				let r = jn(e.subject, t);
 				return fs(p(m(c, r), r), {
 					subject: r,
 					schemaRegistry: n,
-					...w
+					...C
 				});
 			},
 			store: fs(v, {
@@ -734,8 +735,8 @@ var Xs = (e) => {
 				schemaRegistry: n,
 				...e.rowFilter === void 0 ? {} : { rowFilter: e.rowFilter }
 			}),
-			load: C.load,
-			loadMany: C.loadMany,
+			load: S.load,
+			loadMany: S.loadMany,
 			request: e,
 			access: Za(e.subject),
 			cache: r,
@@ -743,12 +744,12 @@ var Xs = (e) => {
 			...a === void 0 ? {} : { webhooks: Ac(a, {
 				tenantId: e.subject.tenantId ?? null,
 				...h === void 0 ? {} : { afterCommit: h.afterCommit },
-				...x === void 0 ? {} : { enqueue: (e, t) => x.enqueue(e, t) }
+				...b === void 0 ? {} : { enqueue: (e, t) => b.enqueue(e, t) }
 			}) },
-			...b === void 0 ? {} : { events: b },
-			...x === void 0 ? {} : { outbox: x },
-			...S === void 0 ? {} : { connections: S },
-			...y === void 0 ? {} : { workflows: h ? vo(y, h.afterCommit) : y }
+			...te === void 0 ? {} : { events: te },
+			...b === void 0 ? {} : { outbox: b },
+			...x === void 0 ? {} : { connections: x },
+			...ee === void 0 ? {} : { workflows: h ? vo(ee, h.afterCommit) : ee }
 		};
 	};
 }, Ic = async (e, t, n) => {
@@ -914,7 +915,7 @@ var Xs = (e) => {
 		hint: "it still holds the port; the next boot will fail to bind. kill -9 it by hand"
 	});
 })), I.asVoid)), nl = (e) => e.exitCode === 0 ? "stop" : e.keepAlive === "1" ? "wait-for-fix" : e.keepAlive === "0" ? "stop" : e.interactive ? "wait-for-fix" : "stop", rl = (e) => I.gen(function* () {
-	let t = yield* I.promise(() => _(e.root));
+	let t = yield* I.promise(() => y(e.root));
 	X.info("supervisor active — watching project root", {
 		root: e.root,
 		patterns: ["**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs,json} (excl. *.generated.*)"],
@@ -1165,25 +1166,25 @@ var Xs = (e) => {
 		} finally {
 			a = !1, o && !s ? (o = !1, h()) : g(t);
 		}
-	}, y = e.onChange?.((e) => {
+	}, ee = e.onChange?.((e) => {
 		e.table === Yi && e.op !== "delete" && (s || h());
 	});
 	g(0), t.length > 0 && r.info("outbox: delivery worker started", {
 		effects: t.map((e) => e.definition.effect),
 		pollMs: u
 	});
-	let ee = async () => {
+	let y = async () => {
 		if (s) {
 			await m.catch(() => {});
 			return;
 		}
-		s = !0, y?.(), d !== void 0 && clearTimeout(d), d = void 0, await m.catch(() => {});
+		s = !0, ee?.(), d !== void 0 && clearTimeout(d), d = void 0, await m.catch(() => {});
 	};
-	return e.onShutdown(ee), {
+	return e.onShutdown(y), {
 		nudge: () => {
 			s || h();
 		},
-		stop: ee,
+		stop: y,
 		drainOnce: v,
 		isArmed: () => !s && !f
 	};
@@ -1469,7 +1470,7 @@ var Xs = (e) => {
 	};
 }, Fl = (e, t) => {
 	let n = Pl(e, t);
-	if (n.action === "fail") throw v(n.message ?? "");
+	if (n.action === "fail") throw r(n.message ?? "");
 }, Il = "x-voltro-agent-authorization", Ll = () => {
 	let e = globalThis.crypto?.randomUUID?.();
 	return e === void 0 ? `${Date.now().toString(16)}${Math.random().toString(16).slice(2)}`.padEnd(32, "0").slice(0, 32) : e.replace(/-/g, "");
@@ -1591,26 +1592,26 @@ var Xs = (e) => {
 		tool: _.tool,
 		reason: "no tool with that tag is exposed by this app; call GET /_voltro/inspect/agent/tools for the set"
 	});
-	let y = Rl(v.descriptor, p.policy);
-	if (!y.admitted) return u(403, {
+	let ee = Rl(v.descriptor, p.policy);
+	if (!ee.admitted) return u(403, {
 		error: "refused by this app's agent-tool policy",
 		tool: _.tool,
-		reason: y.reason
+		reason: ee.reason
 	});
-	let ee = Hl(n);
-	if (ee === null) return u(401, {
+	let y = Hl(n);
+	if (y === null) return u(401, {
 		error: "no app credential",
 		reason: `an agent tool call must carry the app credential it acts as, in the \`${Il}\` header (e.g. \`Bearer <api key>\`). The inspect token authorises the TRANSPORT; it is not an app identity, and running as the anonymous subject instead would execute under a principal nobody chose.`
 	});
-	let b = await p.resolveSubject(ee), x = Ll();
+	let te = await p.resolveSubject(y), b = Ll();
 	try {
 		return u(200, {
 			ok: !0,
 			result: await v.run(_.input, {
-				subject: b,
-				traceId: x
+				subject: te,
+				traceId: b
 			}),
-			traceId: x
+			traceId: b
 		});
 	} catch (e) {
 		return u(200, {
@@ -1619,7 +1620,7 @@ var Xs = (e) => {
 				message: e.message,
 				name: e.name
 			} : String(e),
-			traceId: x
+			traceId: b
 		});
 	}
 }, Wl = (e) => {
@@ -3201,7 +3202,7 @@ var Xs = (e) => {
 }), Pd = (e, t) => {
 	if (!t) return;
 	let n = ja();
-	if (n === void 0) throw v(`workflow '${e}' declares encryptSteps: true, but no field-encryption cipher is configured.\n\nAdd it to your governance plugin:\n\n    governancePlugin({ fieldEncryption: { secret: 'VOLTRO_FIELD_ENCRYPTION_KEY' } })\n\nThis refuses to boot rather than falling back to plaintext, deliberately: a fallback would leave the declaration reading as protection while every step input sat readable in _voltro_workflow_run_steps, and nobody would look again.`);
+	if (n === void 0) throw r(`workflow '${e}' declares encryptSteps: true, but no field-encryption cipher is configured.\n\nAdd it to your governance plugin:\n\n    governancePlugin({ fieldEncryption: { secret: 'VOLTRO_FIELD_ENCRYPTION_KEY' } })\n\nThis refuses to boot rather than falling back to plaintext, deliberately: a fallback would leave the declaration reading as protection while every step input sat readable in _voltro_workflow_run_steps, and nobody would look again.`);
 	return (e) => {
 		if (e == null) return e;
 		let t = JSON.stringify(e);
@@ -3292,7 +3293,7 @@ var Xs = (e) => {
 		let t = r.child("seeds"), s = await e.loadSeedFiles(i, t);
 		if (a = s.length, o = s, s.length > 0) {
 			for (let t of s) e.onSeedDiscovered?.(t);
-			if (le(s, n, t), e.seedPolicy === "run" && e.runBootSeeds !== void 0) {
+			if (ue(s, n, t), e.seedPolicy === "run" && e.runBootSeeds !== void 0) {
 				t.info("discovered seeds", { ids: s.map((e) => e.definition.id) });
 				let r = await e.runBootSeeds(s, n, t);
 				for (let t of r) e.onSeedResult?.(t);
@@ -3329,7 +3330,7 @@ var Xs = (e) => {
 		seeds: o
 	});
 }, Hd = (e) => {
-	let t = re(e.seeds, e.store, e.log);
+	let t = ie(e.seeds, e.store, e.log);
 	return t.length === 0 ? e.schedules : (e.log.info(`${t.length} cron-lifecycle seed(s) scheduled on the coordinated cron scheduler`, { schedules: t.map((e) => e.name) }), [...e.schedules, ...t]);
 }, Ud = (e) => `workflow:${e}`, Wd = {
 	skip: "skip",
@@ -3805,7 +3806,7 @@ var Xs = (e) => {
 }, Ef = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = [];
 	for (let r of e) {
-		let e = r.inspectEndpoints ?? [], i = T(r.name);
+		let e = r.inspectEndpoints ?? [], i = w(r.name);
 		for (let a of e) {
 			let e = `${Sf}${i}${Cf(a.path)}`, o = `${a.method} ${e}`, s = t.get(o);
 			if (s !== void 0) throw Error(`plugin inspect endpoint collision: "${a.method} ${e}" declared by plugin "${r.name}" but already claimed by ${s}`);
@@ -4190,7 +4191,7 @@ var Xs = (e) => {
 	for (let n of e) {
 		let e = n.dashboard ?? [];
 		if (e.length === 0) continue;
-		let r = pe(n.name), i = /* @__PURE__ */ new Set();
+		let r = me(n.name), i = /* @__PURE__ */ new Set();
 		for (let a of e) {
 			if (i.has(a.id)) throw Error(`plugin "${n.name}" declares duplicate dashboard mount id "${a.id}"`);
 			i.add(a.id), t.push({
@@ -4228,7 +4229,7 @@ var Xs = (e) => {
 		for (let i of r) {
 			if (Kf.has(i.name)) continue;
 			let r = P(e, i.name);
-			i.isDirectory() ? await n(r) : i.isFile() && (Wf.test(i.name) && !Gf.test(i.name) || De.test(i.name)) && t.push(r);
+			i.isDirectory() ? await n(r) : i.isFile() && (Wf.test(i.name) && !Gf.test(i.name) || Oe.test(i.name)) && t.push(r);
 		}
 	};
 	return await n(e), t;
@@ -4244,7 +4245,7 @@ var Xs = (e) => {
 					tag: e.name
 				});
 			}
-			if (r && typeof r == "object" && De.test(e) && "name" in r) {
+			if (r && typeof r == "object" && Oe.test(e) && "name" in r) {
 				let e = r;
 				typeof e.name == "string" && n.push({
 					kind: "workflow",
@@ -4263,7 +4264,7 @@ var Xs = (e) => {
 	if (r.length === 0) return [];
 	let i = await Jf(n);
 	return r.map((e) => {
-		let n = pe(e.name), r = {
+		let n = me(e.name), r = {
 			pluginName: e.name,
 			pluginAlias: n,
 			apiName: t,
@@ -4279,7 +4280,7 @@ var Xs = (e) => {
 	pluginContributions: await Yf(e, t, n),
 	pluginErrorImports: e.flatMap((e) => (e.errorSchemas ?? []).map((e) => e.import)),
 	pluginRpcImports: e.flatMap((e) => (e.rpcClientDescriptors ?? []).map((t) => ({
-		tag: Te(e, t.tag),
+		tag: Ee(e, t.tag),
 		kind: t.kind,
 		module: t.import.module,
 		name: t.import.name
@@ -6359,7 +6360,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		for (let i of r) {
 			if (bh.has(i.name)) continue;
 			let r = P(e, i.name);
-			i.isDirectory() ? await n(r) : i.isFile() && (k.test(i.name) && !Me.test(i.name) || Me.test(i.name) || De.test(i.name) || ke.test(i.name) || Oe.test(i.name) || O.test(i.name) || Ue.test(i.name) || He.test(i.name) || je.test(i.name) || D.test(i.name) || Pe.test(i.name) || zd.test(i.name) || be.test(i.name) || ye.test(i.name) || Ve.test(i.name) || Le.test(i.name) || Be.test(i.name) || ze.test(i.name) || Re.test(i.name) || Fe.test(i.name) || Ne.test(i.name) || Ie.test(i.name)) && t.push(r);
+			i.isDirectory() ? await n(r) : i.isFile() && (O.test(i.name) && !Ne.test(i.name) || Ne.test(i.name) || Oe.test(i.name) || Ae.test(i.name) || ke.test(i.name) || D.test(i.name) || k.test(i.name) || Ue.test(i.name) || Me.test(i.name) || E.test(i.name) || Fe.test(i.name) || zd.test(i.name) || xe.test(i.name) || be.test(i.name) || He.test(i.name) || Re.test(i.name) || Ve.test(i.name) || Be.test(i.name) || ze.test(i.name) || Ie.test(i.name) || Pe.test(i.name) || Le.test(i.name)) && t.push(r);
 		}
 	};
 	return await n(e), t;
@@ -6428,13 +6429,13 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	let r = [], i = [], a = [], o = [], s = [], c = [], l = [], u = [], d = [], f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Set(), m = /* @__PURE__ */ new Map(), h = [], g = [], _ = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = N(t);
-		if (O.test(e)) {
-			let e = await n(t);
-			for (let t of Object.values(e)) Oh(t) && (m.set(t.tableName, t), jh(t) && f.add(t.tableName), Nh(t) && p.add(t.tableName));
-			Ti(e);
+		if (D.test(e)) {
+			let e = new Set(ri().map((e) => e.tableName)), r = await n(t), i = [...Object.values(r).filter((e) => Oh(e)), ...ri().filter((t) => !e.has(t.tableName))];
+			for (let e of i) m.set(e.tableName, e), jh(e) && f.add(e.tableName), Nh(e) && p.add(e.tableName);
+			Ti(r);
 			continue;
 		}
-		if (Ue.test(e)) {
+		if (k.test(e)) {
 			let e = await n(t);
 			if (Ti(e) === 0) {
 				let n = Object.entries(e).filter(([, e]) => hi(e)).map(([e]) => e);
@@ -6445,14 +6446,14 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			}
 			continue;
 		}
-		if (Ae(e)) {
+		if (je(e)) {
 			Z.warn("skipping workflow — a workflow module must be `.workflow.tsx` (JSX steps); rename it", {
 				file: t,
 				expected: e.replace(/\.workflow\.ts$/, ".workflow.tsx")
 			});
 			continue;
 		}
-		if (De.test(e)) {
+		if (Oe.test(e)) {
 			let e = await n(t), r = Object.values(e).find(Dh);
 			if (!r) {
 				Z.warn("skipping workflow — no workflow(...) export", { file: t });
@@ -6481,7 +6482,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			for (let t of [...Object.values(e), ...Object.values(a)]) Ar(t) && l.push(t);
 			continue;
 		}
-		if (Oe.test(e)) {
+		if (ke.test(e)) {
 			let r = await n(t), i = r.default ?? Object.values(r).find(Ha);
 			if (!Ha(i)) {
 				Z.warn("skipping trigger — default export is not triggerWorkflow(...)", { file: t });
@@ -6498,7 +6499,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			});
 			continue;
 		}
-		if (D.test(e)) {
+		if (E.test(e)) {
 			let e = (await n(t)).default;
 			if (!Va(e)) {
 				Z.warn("skipping cron — default export is not defineSchedule(...)", { file: t });
@@ -6514,16 +6515,16 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			d.push(e);
 			continue;
 		}
-		if (Me.test(e)) {
+		if (Ne.test(e)) {
 			let n = t.slice(0, -e.length), r = e.replace(/\.server\.ts$/, ".ts");
 			_.set(n + r, t);
 			continue;
 		}
-		if (k.test(e)) {
+		if (O.test(e)) {
 			h.push(t);
 			continue;
 		}
-		if (Ie.test(e)) {
+		if (Le.test(e)) {
 			g.push(t);
 			continue;
 		}
@@ -6578,28 +6579,28 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		let n = Oi(t);
 		n.length > 0 && v.set(e, n);
 	}
-	let y = v.size === 0 ? [] : r.flatMap((e) => Jo({
+	let ee = v.size === 0 ? [] : r.flatMap((e) => Jo({
 		name: e.descriptor.name,
 		output: e.descriptor.output,
 		source: e.descriptor.source
-	}, v)), ee = f.size === 0 ? [] : r.flatMap((e) => ma({
+	}, v)), y = f.size === 0 ? [] : r.flatMap((e) => ma({
 		name: e.descriptor.name,
 		output: e.descriptor.output,
 		source: e.descriptor.source,
 		...e.descriptor.cache === void 0 ? {} : { cache: e.descriptor.cache }
 	}, f));
 	m.has("actors") || m.set("actors", ni);
-	let b = m.get("actors"), x = m.get("tenants");
-	(b !== void 0 || x !== void 0) && wi({
-		...b === void 0 ? {} : { actors: () => b },
-		...x === void 0 ? {} : { tenants: () => x }
+	let te = m.get("actors"), b = m.get("tenants");
+	(te !== void 0 || b !== void 0) && wi({
+		...te === void 0 ? {} : { actors: () => te },
+		...b === void 0 ? {} : { tenants: () => b }
 	});
-	let S = e.filter((e) => _e.test(N(e))), C = S.length > 0 ? await E(S, Z.child("connections")) : [], w = {
+	let x = e.filter((e) => ve.test(N(e))), S = x.length > 0 ? await T(x, Z.child("connections")) : [], C = {
 		workflows: c.length > 0 || u.length > 0,
-		schedules: d.length > 0 || e.some((e) => xe(N(e))),
-		webhooks: e.some((e) => Pe.test(N(e))),
-		agents: e.some((e) => be.test(N(e))),
-		connections: S.length > 0
+		schedules: d.length > 0 || e.some((e) => Se(N(e))),
+		webhooks: e.some((e) => Fe.test(N(e))),
+		agents: e.some((e) => xe.test(N(e))),
+		connections: x.length > 0
 	};
 	return ji(), {
 		queries: r,
@@ -6611,13 +6612,13 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		workflowWorkers: l,
 		eventTriggers: u,
 		schedules: d,
-		connections: C,
+		connections: S,
 		tables: [...m.values()],
-		featureMix: w,
+		featureMix: C,
 		tenantScopedTables: f,
 		softDeleteScopedTables: p,
-		serverOnlyLeaks: y,
-		cacheScopeLeaks: ee
+		serverOnlyLeaks: ee,
+		cacheScopeLeaks: y
 	};
 }, Lh = async (e) => {
 	let t = P(e, "app.config.ts"), r = Vt(t);
@@ -6637,8 +6638,8 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			...r ? { error: e } : {}
 		};
 	}
-}, Rh = async (e) => (await Lh(e)).config, Q = () => w("runtime"), zh = (e) => {
-	let t = ne();
+}, Rh = async (e) => (await Lh(e)).config, Q = () => C("runtime"), zh = (e) => {
+	let t = re();
 	if ("url" in e && e.url) try {
 		let n = new URL(e.url), r = n.username ? `${n.username}@` : "", i = n.port ? `:${n.port}` : "";
 		return {
@@ -6666,13 +6667,13 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 }, $ = (e) => (process.env.DB_DIALECT ?? e?.store ?? "memory").toLowerCase(), Hh = async (e, n, r) => {
 	let i = $(e);
 	if (i === "memory") return Z.info("sql dialect resolved: memory — in-process store, no persistence"), new Ki({});
-	let a = (process.env.CDC ?? "1") !== "0", o = await C(i), s = o.id === "postgres" ? "LISTEN/NOTIFY" : yi(o.id) ? "in-process bus" : o.id === "mariadb" ? "binlog CDC (ROW)" : o.id === "mssql" ? "Change Tracking (polled)" : o.id === "mysql" ? "binlog CDC (ROW)" : "inline only", c = o.id === "postgres" ? "native" : o.id === "mysql" ? "INSERT/UPDATE/DELETE then SELECT (no RETURNING)" : o.id === "mariadb" ? "native (INSERT/DELETE); UPDATE then SELECT" : o.id === "mssql" ? "OUTPUT INSERTED/DELETED" : yi(o.id) ? "native" : "unknown";
+	let a = (process.env.CDC ?? "1") !== "0", o = await S(i), s = o.id === "postgres" ? "LISTEN/NOTIFY" : yi(o.id) ? "in-process bus" : o.id === "mariadb" ? "binlog CDC (ROW)" : o.id === "mssql" ? "Change Tracking (polled)" : o.id === "mysql" ? "binlog CDC (ROW)" : "inline only", c = o.id === "postgres" ? "native" : o.id === "mysql" ? "INSERT/UPDATE/DELETE then SELECT (no RETURNING)" : o.id === "mariadb" ? "native (INSERT/DELETE); UPDATE then SELECT" : o.id === "mssql" ? "OUTPUT INSERTED/DELETED" : yi(o.id) ? "native" : "unknown";
 	Z.info(`sql dialect resolved: ${o.id} — CDC: ${a ? s : "inline emit (CDC=0)"}, RETURNING: ${c}`);
 	let l = r ?? Q(), { summary: u, fromEnv: d } = zh(l);
 	Z.info(`db connection: ${u}${d ? "" : " (DEFAULT FALLBACK — no DB_URL / PG_HOST set)"}`), d || Z.warn("db connection: falling back to localhost:5432/app — no DB_URL or PG_HOST env var set.\n  If this app should run against its OWN postgres (e.g. its docker-compose), set DB_URL.\n  Copy `.env.example` to `.env` in the app dir, or set DB_URL in the shell.\n  Otherwise this app is silently using whatever DB is at localhost:5432/app — which is\n  voltro-starter's docker default + may carry foreign tables that confuse the planner.");
 	let f;
 	if (a && (o.id === "mysql" || o.id === "mariadb")) {
-		let { connectionFromConfig: e } = await S("@voltro/sql-mysql"), t = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, n = ri().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
+		let { connectionFromConfig: e } = await x("@voltro/sql-mysql"), t = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, n = ri().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
 		f = {
 			serverId: Vh(t),
 			replicaId: t,
@@ -6684,7 +6685,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			tables: n.length
 		});
 	} else if (a && o.id === "mssql") {
-		let { connectionFromConfig: e } = await S("@voltro/sql-mssql"), t = e(l), n = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, r = ri().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
+		let { connectionFromConfig: e } = await x("@voltro/sql-mssql"), t = e(l), n = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, r = ri().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
 		f = {
 			serverId: 0,
 			replicaId: n,
@@ -6732,45 +6733,45 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	let g = [];
 	for (let e of m) {
 		let t = await o.makeStore({
-			sqlLayer: o.makeSqlLayer(te(l, e)),
+			sqlLayer: o.makeSqlLayer(ne(l, e)),
 			...n ? { tracerLayer: n } : {},
 			changeStrategy: "inline"
 		});
 		g.push(t);
 	}
-	let _ = process.env.RYW_POLICY ?? "fallback", v = (process.env.RYW_STORE ?? "memory").toLowerCase(), y, ee = "memory";
+	let _ = process.env.RYW_POLICY ?? "fallback", v = (process.env.RYW_STORE ?? "memory").toLowerCase(), ee, y = "memory";
 	if (v === "redis") {
 		let e = process.env.REDIS_URL;
 		if (!e) Z.warn("RYW_STORE=redis set but REDIS_URL is empty — falling back to memory store");
 		else try {
 			let { default: t } = await import("ioredis"), n = new t(e);
-			y = Bo({
+			ee = Bo({
 				client: n,
 				subscriber: n.duplicate()
-			}), ee = "redis", Z.info(`read replicas: ryw store = redis @ ${Wh(e)}`);
+			}), y = "redis", Z.info(`read replicas: ryw store = redis @ ${Wh(e)}`);
 		} catch (e) {
 			Z.warn("RYW_STORE=redis but ioredis import / connect failed — falling back to memory store", { err: e });
 		}
 	}
-	y ||= Ao();
-	let b = Gh(m.length), x = Uo(), w = x && b.length > 0 ? Ga({
-		currentRegion: x,
-		replicaRegions: Kh(g, b),
+	ee ||= Ao();
+	let te = Gh(m.length), b = Uo(), C = b && te.length > 0 ? Ga({
+		currentRegion: b,
+		replicaRegions: Kh(g, te),
 		inner: Io()
 	}) : Io();
-	return Z.info(`read replicas: ${g.length} configured, ryw policy '${_}', dialect=${o.id}, region=${x ?? "unknown"}` + (b.length > 0 ? ", replica-locality=on" : "")), t.recordReplication({
+	return Z.info(`read replicas: ${g.length} configured, ryw policy '${_}', dialect=${o.id}, region=${b ?? "unknown"}` + (te.length > 0 ? ", replica-locality=on" : "")), t.recordReplication({
 		replicaCount: g.length,
 		rywPolicy: _,
-		rywStore: ee,
-		region: x ?? null,
-		localityEnabled: b.length > 0 && x !== void 0
+		rywStore: y,
+		region: b ?? null,
+		localityEnabled: te.length > 0 && b !== void 0
 	}), new Zi({
 		primary: p,
 		replicas: g,
 		replicationAdapter: h,
 		rywPolicy: _,
-		rywStore: y,
-		replicaSelector: w
+		rywStore: ee,
+		replicaSelector: C
 	});
 }, Uh = async (e, t, n, r, i, a) => {
 	let o = Ks(t?.plugins ?? []), s = n === "postgres" || n === "mysql" || n === "mariadb", c = n === "postgres" ? "LISTEN/NOTIFY" : "binlog CDC";
@@ -6802,48 +6803,48 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	return n;
 }, qh = async (e) => {
 	switch (e) {
-		case "postgres": return (await S("@voltro/sql-postgres")).postgresReplicationAdapter();
+		case "postgres": return (await x("@voltro/sql-postgres")).postgresReplicationAdapter();
 		case "mysql":
-		case "mariadb": return (await S("@voltro/sql-mysql")).mysqlReplicationAdapter();
-		case "mssql": return (await S("@voltro/sql-mssql")).mssqlReplicationAdapter();
+		case "mariadb": return (await x("@voltro/sql-mysql")).mysqlReplicationAdapter();
+		case "mssql": return (await x("@voltro/sql-mssql")).mssqlReplicationAdapter();
 		default: return null;
 	}
 }, Jh = async (e) => {
 	let t = Rt(e.find((e) => !e.startsWith("-")) ?? process.cwd()), n = await g(t);
 	return n.ran ? n.exitCode : process.env.FRAMEWORK_DEV_INNER !== "1" && process.env.WATCH !== "0" ? (_t(rl({ root: t }), { scope: "voltro:dev" }), new Promise(() => {})) : Yh(t);
 }, Yh = async (n) => {
-	let g = Date.now(), _ = await Rh(n), S = a({
+	let g = Date.now(), y = await Rh(n), x = o({
 		kind: "api",
-		configPort: _?.port,
+		configPort: y?.port,
 		env: process.env
 	});
-	for (let e of S.warnings) Z.warn(e);
-	let w = S.port, ne = _?.name ?? N(n), re = Nt("api", ne, w), le = Pt(ne);
+	for (let e of x.warnings) Z.warn(e);
+	let C = x.port, re = y?.name ?? N(n), ie = Nt("api", re, C), ue = Pt(re);
 	await jt({
-		id: re,
-		name: ne,
+		id: ie,
+		name: re,
 		kind: "api",
-		url: `http://localhost:${w}`,
+		url: `http://localhost:${C}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: le.path
+		logFile: ue.path
 	}).catch(() => {});
-	let T = s();
-	x(T), Z.info("booting voltro dev", {
+	let w = c();
+	b(w), Z.info("booting voltro dev", {
 		root: n,
 		version: fh,
-		logFile: le.path
+		logFile: ue.path
 	}), h(n, Z);
-	let pe = await ue({
+	let me = await de({
 		project: N(n),
 		cliVersion: fh
 	});
-	if (pe.kind === "not-personal") return Z.error(`voltro dev needs a personal login — the stored credential belongs to no user.
-  ${pe.message}`), 1;
-	pe.kind === "reported" && pe.seat === "claimed" && Z.info("cloud: this machine now counts toward your organisation's seats (voltro cloud whoami)");
-	let _e = process.env.VOLTRO_DEV_HEALTH_PORT, ye = _e === void 0 ? w + 1 : Number(_e), xe;
-	ye > 0 && Number.isFinite(ye) && (xe = await Xp({
-		port: ye,
+	if (me.kind === "not-personal") return Z.error(`voltro dev needs a personal login — the stored credential belongs to no user.
+  ${me.message}`), 1;
+	me.kind === "reported" && me.seat === "claimed" && Z.info("cloud: this machine now counts toward your organisation's seats (voltro cloud whoami)");
+	let ve = process.env.VOLTRO_DEV_HEALTH_PORT, be = ve === void 0 ? C + 1 : Number(ve), Se;
+	be > 0 && Number.isFinite(be) && (Se = await Xp({
+		port: be,
 		log: {
 			info: (e, t) => Z.debug(e, t),
 			warn: (e, t) => Z.warn(e, t)
@@ -6856,24 +6857,24 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	}).catch((e) => {
 		Z.warn("agent-instructions seed failed (non-fatal)", {}, e);
 	});
-	let E = await xh(n);
-	Z.info(`discovered ${E.length} files`, { count: E.length });
-	let { pluginContributions: Te, pluginErrorImports: De, pluginRpcImports: Oe } = await Xf(_?.plugins ?? [], _?.name ?? N(n), n), ke = await wt({
+	let T = await xh(n);
+	Z.info(`discovered ${T.length} files`, { count: T.length });
+	let { pluginContributions: Ee, pluginErrorImports: Oe, pluginRpcImports: ke } = await Xf(y?.plugins ?? [], y?.name ?? N(n), n), Ae = await wt({
 		root: n,
-		...Te.length > 0 ? { pluginContributions: Te } : {},
-		...De.length > 0 ? { pluginErrorImports: De } : {},
-		...Oe.length > 0 ? { pluginRpcImports: Oe } : {},
-		..._?.name === void 0 ? {} : { apiName: _.name }
+		...Ee.length > 0 ? { pluginContributions: Ee } : {},
+		...Oe.length > 0 ? { pluginErrorImports: Oe } : {},
+		...ke.length > 0 ? { pluginRpcImports: ke } : {},
+		...y?.name === void 0 ? {} : { apiName: y.name }
 	});
-	if (ke ? (Z.info("codegen wrote rpcGroup", { path: Lt(n, ke) }), await xt(ke)) : Z.debug("codegen skipped — no descriptors discovered"), process.env.VOLTRO_BROWSER_SAFETY !== "off") {
-		let e = await St(n, E);
+	if (Ae ? (Z.info("codegen wrote rpcGroup", { path: Lt(n, Ae) }), await xt(Ae)) : Z.debug("codegen skipped — no descriptors discovered"), process.env.VOLTRO_BROWSER_SAFETY !== "off") {
+		let e = await St(n, T);
 		if (e.length > 0) throw Error(e.map(Ct).join("\n\n"));
 	}
-	let Ae = $(_ ?? null), Me = Ae === "mariadb" ? "mariadb" : Ae === "mssql" ? "mssql" : void 0, { queries: D, mutations: O, actions: k, streams: Ue, events: Ge, workflows: j, workflowWorkers: Je, eventTriggers: Ye, schedules: Xe, connections: Qe, tables: et, featureMix: nt, tenantScopedTables: it, softDeleteScopedTables: at, serverOnlyLeaks: ot, cacheScopeLeaks: ut } = await Ih(E, { cdc: Me !== void 0 && (process.env.CDC ?? "1") !== "0" }), dt = Nl({
-		queries: D,
-		mutations: O,
-		actions: k,
-		streams: Ue,
+	let je = $(y ?? null), Ne = je === "mariadb" ? "mariadb" : je === "mssql" ? "mssql" : void 0, { queries: E, mutations: D, actions: O, streams: k, events: Ge, workflows: j, workflowWorkers: Je, eventTriggers: Ye, schedules: Xe, connections: Qe, tables: et, featureMix: nt, tenantScopedTables: it, softDeleteScopedTables: at, serverOnlyLeaks: ot, cacheScopeLeaks: ut } = await Ih(T, { cdc: Ne !== void 0 && (process.env.CDC ?? "1") !== "0" }), dt = Nl({
+		queries: E,
+		mutations: D,
+		actions: O,
+		streams: k,
 		events: Ge
 	});
 	{
@@ -6887,7 +6888,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		e.action === "warn" && Z.warn(e.message ?? "");
 	}
 	Fl(dt, {
-		defaultDeny: jl(_),
+		defaultDeny: jl(y),
 		commandHint: "`voltro dev`"
 	});
 	let pt = j.length > 0 || Ye.length > 0, M = await Rh(n), mt = Lc(M?.http ?? {});
@@ -6912,23 +6913,23 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			"apikeys:issue:other"
 		].some((t) => e.has(t)) && !e.has("admin:full") && Z.warn("apiKeys is enabled but no role declares any of apikeys:issue:self / :org / :other. The management routes are mounted and every issue request will fail its guard — the capability is on and reachable by nobody. Grant the right one in your role map (`:self` lets a user mint their own key, `:org` a shared one, `:other` on behalf of a colleague).");
 	}
-	let vt = (typeof _t == "object" ? _t.prefix : void 0) ?? "voltro_", yt, Tt = _t ? [Aa({ resolveByHash: (e, t) => yt ? yt.resolveByHash(e, t) : Promise.resolve(null) }, { prefix: vt })] : [], It = hh([...M?.auth?.strategies ?? [], ...Tt], Ns(M?.plugins ?? []), M?.auth?.anonymousTenantRequired ?? !1, M?.auth, () => gt.current), Rt = eo({ resolveSubject: It }), zt = Ce({
+	let vt = (typeof _t == "object" ? _t.prefix : void 0) ?? "voltro_", yt, Tt = _t ? [Aa({ resolveByHash: (e, t) => yt ? yt.resolveByHash(e, t) : Promise.resolve(null) }, { prefix: vt })] : [], It = hh([...M?.auth?.strategies ?? [], ...Tt], Ns(M?.plugins ?? []), M?.auth?.anonymousTenantRequired ?? !1, M?.auth, () => gt.current), Rt = eo({ resolveSubject: It }), zt = we({
 		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: Me,
+		cdcDialect: Ne,
 		declared: M?.schema
-	}), Bt = ge({
+	}), Bt = _e({
 		gates: zt,
 		runtime: {
 			traces: Wp(),
 			undo: os()
 		}
 	});
-	if (Bt !== void 0) throw v(`dev: ${Bt}`);
-	let Vt = Se({
+	if (Bt !== void 0) throw r(`dev: ${Bt}`);
+	let Vt = Ce({
 		mix: nt,
 		plugins: M?.plugins ?? [],
 		gates: zt,
-		...Me ? { cdcDialect: Me } : {}
+		...Ne ? { cdcDialect: Ne } : {}
 	}), Ut = M?.analytics?.tables ?? [], F = (() => {
 		let e = new Set(et.map((e) => e.tableName)), t = [...et];
 		for (let n of [...Vt, ...Ut]) {
@@ -6939,7 +6940,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	})();
 	for (let e of F) di(e);
 	{
-		let e = ka(ls(D.map((e) => ({
+		let e = ka(ls(E.map((e) => ({
 			name: e.descriptor.name,
 			source: e.descriptor.source
 		})), new Set(F.flatMap((e) => {
@@ -6966,30 +6967,30 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		count: qt.length,
 		mounts: qt.map((e) => `${e.fullId} (${e.slot})`)
 	});
-	let Jt = Ee(M?.plugins ?? []);
+	let Jt = De(M?.plugins ?? []);
 	Jt.length > 0 && Z.info("plugin schema contributions", { plugins: Jt.map((e) => `${e.pluginName}: ${e.tables}t/${e.migrations}m`) });
-	let $t = de(M?.plugins ?? []);
+	let $t = fe(M?.plugins ?? []);
 	if ($t.length > 0) {
 		let e = [
+			...E.map((e) => e.descriptor.name),
 			...D.map((e) => e.descriptor.name),
 			...O.map((e) => e.descriptor.name),
-			...k.map((e) => e.descriptor.name),
-			...Ue.map((e) => e.descriptor.name)
+			...k.map((e) => e.descriptor.name)
 		], t = /* @__PURE__ */ new Set([
+			...E.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
 			...D.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...O.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...k.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
-		]), n = fe($t, e, t);
+			...O.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
+		]), n = pe($t, e, t);
 		$t.length - n.length > 0 && Z.info(`plugin routes overridden by app procedures: ${[...t].join(", ")}`);
-		for (let e of n) e.kind === "query" ? D.push({
+		for (let e of n) e.kind === "query" ? E.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : e.kind === "mutation" ? O.push({
+		}) : e.kind === "mutation" ? D.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : k.push({
+		}) : O.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
@@ -6999,20 +7000,20 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			routes: $t.map((e) => `${e.plugin.name}:${e.descriptor.name} (${e.kind})`)
 		});
 	}
-	let en = Z.child("agent"), rn = E.filter((e) => ve.test(N(e)));
+	let en = Z.child("agent"), rn = T.filter((e) => ye.test(N(e)));
 	if (rn.length > 0) {
-		let e = await we(rn, en);
+		let e = await Te(rn, en);
 		e > 0 && en.info("wired tool handlers", { tools: e });
 	}
-	let on = E.filter((e) => be.test(N(e))), sn = [];
+	let on = T.filter((e) => xe.test(N(e))), sn = [];
 	if (on.length > 0) {
-		let e = await me(on, en);
+		let e = await he(on, en);
 		sn = e.agents.map((e) => e.descriptor.name);
-		for (let t of e.agents) for (let e of Yd(t)) e.kind === "action" ? k.push({
+		for (let t of e.agents) for (let e of Yd(t)) e.kind === "action" ? O.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : D.push({
+		}) : E.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
@@ -7027,26 +7028,26 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		let e = Qd();
 		e !== void 0 && Z.info(e);
 	}
-	(cn.queries.length > 0 || cn.mutations.length > 0) && (D.push(...cn.queries), O.push(...cn.mutations), Z.info("undo built-ins registered", { routes: [
+	(cn.queries.length > 0 || cn.mutations.length > 0) && (E.push(...cn.queries), D.push(...cn.mutations), Z.info("undo built-ins registered", { routes: [
 		"__voltro.undo.log",
 		"__voltro.undo.apply",
 		"__voltro.undo.redo"
 	] }));
-	let ln = Z.child("aggregate"), un = E.filter((e) => ze.test(e)), dn = un.length > 0 ? await au(un, ln) : [], fn = dn.map((e) => e.definition.name), pn = Z.child("expectation"), mn = E.filter((e) => Re.test(e)), hn = mn.length > 0 ? await Tu(mn, pn) : [], gn = Z.child("finops"), _n = E.filter((e) => Fe.test(e)), vn = _n.length > 0 ? await Eu(_n, gn) : [], yn = Z.child("experiment"), bn = E.filter((e) => Ne.test(e)), xn = bn.length > 0 ? await Du(bn, yn) : [];
+	let ln = Z.child("aggregate"), un = T.filter((e) => Be.test(e)), dn = un.length > 0 ? await au(un, ln) : [], fn = dn.map((e) => e.definition.name), pn = Z.child("expectation"), mn = T.filter((e) => ze.test(e)), hn = mn.length > 0 ? await Tu(mn, pn) : [], gn = Z.child("finops"), _n = T.filter((e) => Ie.test(e)), vn = _n.length > 0 ? await Eu(_n, gn) : [], yn = Z.child("experiment"), bn = T.filter((e) => Pe.test(e)), xn = bn.length > 0 ? await Du(bn, yn) : [];
 	for (let e of li()) Z.warn(`identifier length · ${e}`);
-	let Sn = M?.restRoutes ?? [], Cn = E.filter((e) => Ve.test(e)).length, En = E.filter((e) => je.test(e)).length, On = E.filter((e) => /\.seed\.ts$/.test(e)).length, An = E.filter((e) => Pe.test(e)).length, jn = E.filter((e) => zd.test(e)).length;
+	let Sn = M?.restRoutes ?? [], Cn = T.filter((e) => He.test(e)).length, En = T.filter((e) => Me.test(e)).length, On = T.filter((e) => /\.seed\.ts$/.test(e)).length, An = T.filter((e) => Fe.test(e)).length, jn = T.filter((e) => zd.test(e)).length;
 	Zs(Xs([
+		E,
 		D,
 		O,
-		k,
-		Ue
+		k
 	]), (e) => {
 		Z.warn(e);
 	}), Z.info("app surface", {
-		queryCount: D.length,
-		mutationCount: O.length,
-		actionCount: k.length,
-		streamCount: Ue.length,
+		queryCount: E.length,
+		mutationCount: D.length,
+		actionCount: O.length,
+		streamCount: k.length,
 		restRouteCount: Sn.length,
 		workflowCount: j.length,
 		workflowWorkerCount: Je.length,
@@ -7065,10 +7066,10 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		tenantTables: [...it]
 	}), Yt({
 		appName: M?.name ?? N(n),
-		queries: D.map((e) => e.descriptor.name),
-		mutations: O.map((e) => e.descriptor.name),
-		actions: k.map((e) => e.descriptor.name),
-		streams: Ue.map((e) => e.descriptor.name),
+		queries: E.map((e) => e.descriptor.name),
+		mutations: D.map((e) => e.descriptor.name),
+		actions: O.map((e) => e.descriptor.name),
+		streams: k.map((e) => e.descriptor.name),
 		restRoutes: Sn.map((e) => `${e.method} ${e.path}`),
 		workflows: j.map((e) => e.definition.name),
 		triggers: Ye.map((e) => `${e.event}→${e.workflow}`),
@@ -7089,7 +7090,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		let t = e.attributes, n = String(t["url.path"] ?? t["http.route"] ?? t["http.target"] ?? "");
 		return n.startsWith("/_voltro/") || n === "/ws" || n.startsWith("/ws/") || n.startsWith("/ws?");
 	}, Jn = (e) => {
-		qn(e) || kp(e) || e.name.startsWith("RpcServer.") || (Mn.append(e), (Pn || e.status === "error") && T.emit("trace", e), Kn(e));
+		qn(e) || kp(e) || e.name.startsWith("RpcServer.") || (Mn.append(e), (Pn || e.status === "error") && w.emit("trace", e), Kn(e));
 	}, Yn = Nn ? void 0 : to(Jn), R = await pa({
 		serviceName: process.env.OTEL_SERVICE_NAME ?? M?.name ?? "voltro-api",
 		...Yn ? { traceSink: Yn } : {},
@@ -7105,8 +7106,8 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		store: z,
 		defaultExpiryMs: tf(M)
 	});
-	D.push(...er.queries), O.push(...er.mutations);
-	let nr = [...O.map((e) => e.descriptor), ...k.map((e) => e.descriptor)];
+	E.push(...er.queries), D.push(...er.mutations);
+	let nr = [...D.map((e) => e.descriptor), ...O.map((e) => e.descriptor)];
 	nf(nr) && Z.info("approvals: `requiresApproval` declared — the second-human gate is active", { procedures: nr.filter((e) => e.requiresApproval != null).map((e) => e.name ?? "?") });
 	for (let e of gc({
 		dialect: $(M ?? null),
@@ -7117,7 +7118,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
 		})),
-		querySources: D.flatMap((e) => {
+		querySources: E.flatMap((e) => {
 			let t = e.descriptor.source;
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
@@ -7125,7 +7126,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	{
 		let e = bc(yc({
 			tables: ri().map((e) => ({ tableName: e.tableName })),
-			queries: D.map((e) => ({
+			queries: E.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
@@ -7142,13 +7143,13 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	let rr = gl({
 		definitions: Qe.map((e) => e.definition),
 		store: z,
-		publicUrl: vl(w),
+		publicUrl: vl(C),
 		log: Z.child("connections")
 	});
-	D.push(...rr.queries), O.push(...rr.mutations), k.push(...rr.actions);
+	E.push(...rr.queries), D.push(...rr.mutations), O.push(...rr.actions);
 	let ar = $(M), or = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, pr, mr;
 	if (ar !== "memory") {
-		let e = await C(ar);
+		let e = await S(ar);
 		pr = Xn.make(e.makeSqlLayer(Q())), mr = await pr.runPromise($n.SqlClient);
 	}
 	let hr = [
@@ -7197,7 +7198,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	Lr !== void 0 && Z.info("semantic cache enabled — reactive eviction on live writes"), Z.info(`cache backend resolved: ${Hr}` + (Hr === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), M?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = M.kv), M?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = M.kvRedisUrl), M?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = M.kvKeyPrefix);
 	let { kv: Yr, service: $r, backend: ei } = await $a({ store: z });
 	Z.info(`kv backend resolved: ${ei}` + (ei === "database" ? " (durable, _voltro_kv)" : ei === "memory" ? " — in-process, non-durable" : ` (driver ${process.env.KV_REDIS_DRIVER ?? "resp"}, non-durable)`));
-	let ti = $(M), ni = M?.analytics !== void 0 && M.analytics.kind !== "noop" && ti !== "memory" ? (await C(ti)).makeSqlLayer(Q()) : void 0, oi = await il({
+	let ti = $(M), ni = M?.analytics !== void 0 && M.analytics.kind !== "noop" && ti !== "memory" ? (await S(ti)).makeSqlLayer(Q()) : void 0, oi = await il({
 		spec: M?.analytics,
 		sqlLayer: ni,
 		log: Z
@@ -7226,12 +7227,12 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			dialect: hi,
 			env: t,
 			tables: F.length
-		}), xe?.set({
+		}), Se?.set({
 			phase: "migrating",
 			tablesTotal: F.length
 		});
 		try {
-			let r = await C(hi), i = r.makeSqlLayer(Q());
+			let r = await S(hi), i = r.makeSqlLayer(Q());
 			gi = i, await cr(kh(F.filter((e) => e.tableName.startsWith("_voltro_") || e.tableName === "voltro_isr_cache"), F), i, r.id, { retryFilter: r.retryFilter });
 			let a = Tc({
 				conn: Q(),
@@ -7253,18 +7254,18 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			if (s.kind === "refused-blocked" || s.kind === "prod-mismatch") throw Z.error(tr(s, r.id)), Error("auto-migrate refused — see error above");
 			Z.info(tr(s, r.id), { durationMs: Date.now() - e });
 		} catch (e) {
-			throw Z.error("auto-migrate failed — aborting boot", { err: e }), xe?.set({
+			throw Z.error("auto-migrate failed — aborting boot", { err: e }), Se?.set({
 				phase: "error",
 				error: e instanceof Error ? e.message : String(e)
 			}), e;
 		}
 	} else hi !== "memory" && Z.info("auto-migrate: skipped (VOLTRO_AUTO_MIGRATE=0)");
-	await se({
+	await ce({
 		dialectId: hi,
 		tables: F,
-		mode: ie(M?.reactiveTriggers),
+		mode: ae(M?.reactiveTriggers),
 		lockSchema: Q().schema,
-		makeLayer: async () => (await C(hi)).makeSqlLayer(Q()),
+		makeLayer: async () => (await S(hi)).makeSqlLayer(Q()),
 		log: {
 			info: (e, t) => Z.info(e, t ?? {}),
 			warn: (e, t) => Z.warn(e, t ?? {})
@@ -7272,9 +7273,9 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	});
 	let _i = $(M);
 	if ((M?.plugins ?? []).some((e) => (e.extendSchema?.migrations?.length ?? 0) > 0) && _i !== "memory") {
-		let e = (await C(_i)).makeSqlLayer(Q());
+		let e = (await S(_i)).makeSqlLayer(Q());
 		try {
-			let t = await I.runPromise(he(M.plugins).pipe(I.provide(e))), n = t.filter((e) => e.status === "applied"), r = t.filter((e) => e.status === "skipped");
+			let t = await I.runPromise(ge(M.plugins).pipe(I.provide(e))), n = t.filter((e) => e.status === "applied"), r = t.filter((e) => e.status === "skipped");
 			Z.info("plugin migrations complete", {
 				applied: n.map((e) => `${e.pluginName}:${e.migrationId} (${e.durationMs}ms)`),
 				skippedCount: r.length
@@ -7283,7 +7284,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			throw Z.error("plugin migrations failed — aborting boot", { err: e }), e;
 		}
 	}
-	let vi = wp(z, T);
+	let vi = wp(z, w);
 	W(() => {
 		vi();
 	});
@@ -7293,22 +7294,22 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		schemaRegistry: bi
 	});
 	let xi = Z.child("seeds"), Si = await Vd({
-		files: E,
+		files: T,
 		store: z,
 		log: Z,
 		seedPolicy: "run",
-		seedPattern: He,
-		loadSeedFiles: oe,
-		runBootSeeds: ce,
+		seedPattern: Ue,
+		loadSeedFiles: se,
+		runBootSeeds: le,
 		onSeedDiscovered: (e) => {
 			t.registerSeed(e);
 		},
 		onSeedResult: (e) => {
 			t.recordSeedResult(e);
 		},
-		startupPattern: je,
+		startupPattern: Me,
 		loadStartupFiles: i,
-		runStartups: r,
+		runStartups: a,
 		emailPattern: zd,
 		loadEmailFiles: Bd,
 		registerEmailTemplates: Vs
@@ -7323,14 +7324,14 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		log: Z
 	}), Ti = Si.startups;
 	Ti && W(() => Ti.shutdown());
-	let Ei = Z.child("subscribe"), Oi = E.filter((e) => Ve.test(e)), ki = Oi.length > 0 ? await cl(Oi, Ei) : [], Ai;
+	let Ei = Z.child("subscribe"), Oi = T.filter((e) => He.test(e)), ki = Oi.length > 0 ? await cl(Oi, Ei) : [], Ai;
 	$p({
 		events: Ge,
 		rpcTags: [
+			...E.map((e) => e.descriptor.name),
 			...D.map((e) => e.descriptor.name),
 			...O.map((e) => e.descriptor.name),
-			...k.map((e) => e.descriptor.name),
-			...Ue.map((e) => e.descriptor.name)
+			...k.map((e) => e.descriptor.name)
 		]
 	});
 	let ji = em({
@@ -7340,7 +7341,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	});
 	if (Ge.length > 0 && await Cr.attach(ji.bus), Ge.length > 0) {
 		let e = Fm(Ge);
-		for (let [, t] of Ym(E.filter((e) => !Ie.test(e)))) if (e.offer(t), e.settled) break;
+		for (let [, t] of Ym(T.filter((e) => !Le.test(e)))) if (e.offer(t), e.settled) break;
 		e.settled || Zm(n, {
 			onFile: (t, n) => (e.offer(n), e.settled ? "stop" : "continue"),
 			onTruncated: (e, t) => Z.warn(`event audit: stopped after ${t} sibling files (saw ${e}) — a \`no-consumer\` line below may mean "we stopped looking", not "nothing consumes it"`)
@@ -7353,7 +7354,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	ki.length > 0 && (Ei.info("discovered subscribers", { subscribers: ki.map((e) => `${e.id}@${e.definition.table}`) }), Ai = ll(ki, z, Ei, bi, ji.bus)), Ai && W(() => {
 		Ai();
 	}), Pa(), Zo((e) => Wa(z, e.subjectId, e.resourceType, e.resourceId));
-	let Ni, Pi = Z.child("outbox"), Fi = E.filter((e) => Le.test(e)), Li = Fi.length > 0 ? await dl(Fi, Pi) : [], Ri = kt(E.filter((e) => Pe.test(e)).length, Ge) ? [...Li, {
+	let Ni, Pi = Z.child("outbox"), Fi = T.filter((e) => Re.test(e)), Li = Fi.length > 0 ? await dl(Fi, Pi) : [], Ri = kt(T.filter((e) => Fe.test(e)).length, Ge) ? [...Li, {
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
 		definition: ks(() => Ni)
@@ -7368,7 +7369,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		onShutdown: W
 	}) : void 0, Ui = Ql(), Ki = $(M);
 	if (dn.length > 0 && Ki !== "memory") try {
-		Ui = ru((await C(Ki)).makeSqlLayer(Q()));
+		Ui = ru((await S(Ki)).makeSqlLayer(Q()));
 	} catch (e) {
 		ln.warn("aggregate: SQL storage init failed — falling back to in-process", { err: e });
 	}
@@ -7432,7 +7433,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		}
 	})) : [], ga = "in-memory", va = await (async () => {
 		if (V === "memory") return fr.layerMemory;
-		let e = await C(V), t = e.makeSqlLayer(Q()), n = Xr({ sqliteFamily: yi(e.id) });
+		let e = await S(V), t = e.makeSqlLayer(Q()), n = Xr({ sqliteFamily: yi(e.id) });
 		if (ga = `cluster-${n}`, Z.info(`workflow engine: cluster-${n}, dialect=${e.id}` + (n === "memory" ? " — single-process durable replay, no horizontal scaling" + (yi(e.id) ? "" : " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)") : "")), e.id === "mssql") {
 			let e = await Et(process.cwd());
 			e && Z.warn(e);
@@ -7452,7 +7453,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	}), Sa = xa.remember, Ca = xa.resolve, wa = bl({
 		authority: M?.auth,
 		getStore: () => gt.current
-	}), H = j.length > 0 ? fo(() => ya) : void 0, Ea = Z.child("webhooks"), ja = E.filter((e) => Pe.test(e)), Na = ja.length > 0 ? await At(ja, Ea) : {
+	}), H = j.length > 0 ? fo(() => ya) : void 0, Ea = Z.child("webhooks"), ja = T.filter((e) => Fe.test(e)), Na = ja.length > 0 ? await At(ja, Ea) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
@@ -7490,7 +7491,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			secretEnvKey: n
 		});
 	}
-	let Ra = Z.child("reaction"), za = E.filter((e) => Be.test(e)), Va = za.length > 0 ? await ql(za, Ra) : [], Ha;
+	let Ra = Z.child("reaction"), za = T.filter((e) => Ve.test(e)), Va = za.length > 0 ? await ql(za, Ra) : [], Ha;
 	if (Va.length > 0) {
 		Ra.info("discovered reactions", { reactions: Va.map((e) => `${e.definition.name}@${e.definition.watch.table}`) });
 		let e = Nd(z, { onError: (e) => Ra.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
@@ -7509,7 +7510,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 					return;
 				}
 				await Jl(e.agent, t, {
-					findAgentSend: (e) => k.find((t) => t.descriptor.name === `${e}.send`),
+					findAgentSend: (e) => O.find((t) => t.descriptor.name === `${e}.send`),
 					runAction: (e, t, n) => Promise.resolve(Cs(e, t, n)),
 					makeSubject: (e) => an(e),
 					now: () => Date.now(),
@@ -7563,7 +7564,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	});
 	kr = U;
 	let Ga = () => {
-		T.emit("subscriptions", Am(() => U));
+		w.emit("subscriptions", Am(() => U));
 	};
 	U.onSubscriptionsChange(Ga), Ga();
 	let Za = Z.child("store"), Qa = (M?.plugins ?? []).filter((e) => typeof e.onChangeEvent == "function"), no = z.changeScope ?? "local";
@@ -7614,7 +7615,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		nn(Rn),
 		nn(Un),
 		nn(Wn)
-	] : [], oo = (M?.plugins ?? []).flatMap((e) => (e.errorSchemas ?? []).map((e) => e.schema)), so = oo.length > 0 ? oo : void 0, lo = (e) => e.filter((e) => wn(e.descriptor)), uo = lo(D), po = lo(O), _o = lo(k), vo = lo(Ue), wo = [
+	] : [], oo = (M?.plugins ?? []).flatMap((e) => (e.errorSchemas ?? []).map((e) => e.schema)), so = oo.length > 0 ? oo : void 0, lo = (e) => e.filter((e) => wn(e.descriptor)), uo = lo(E), po = lo(D), _o = lo(O), vo = lo(k), wo = [
 		...uo.map((e) => Dn(e.descriptor, so)),
 		...po.map((e) => Tn(e.descriptor, so)),
 		..._o.map((e) => nn(e.descriptor, so)),
@@ -7662,7 +7663,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	let G = (process.env.VOLTRO_TENANT_ISOLATION ?? M?.tenancy?.isolation) === "namespace";
 	G && Z.info("multi-tenancy: PHYSICAL namespace isolation ON — each request runs against its tenant's own namespace (schema/database/attached file). Requests without a resolvable tenant fail closed.");
 	let Uo = $(M), K = G && Uo !== "memory" ? await (async () => {
-		let e = await C(Uo);
+		let e = await S(Uo);
 		return jc({
 			tables: ri(),
 			sqlLayer: e.makeSqlLayer(Q()),
@@ -7676,7 +7677,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	})() : void 0, Ko = await uh({
 		input: M?.tenancy?.residency,
 		namespaceIsolationOn: G,
-		makeStoreForUrl: (e, t) => Hh(M, Zn, te(Q(), t)),
+		makeStoreForUrl: (e, t) => Hh(M, Zn, ne(Q(), t)),
 		log: {
 			info: (e, t) => Z.info(e, t),
 			warn: (e, t) => Z.warn(e, t)
@@ -7696,7 +7697,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		eventTriggers: Ye,
 		namespaceIsolationOn: G,
 		...K === void 0 ? {} : { ensureTenantProvisioned: K.ensure },
-		onEventEmit: (e, t) => T.emit(e, t),
+		onEventEmit: (e, t) => w.emit(e, t),
 		...Bi === void 0 ? {} : { outbox: { nudge: Bi.nudge } },
 		...rr.active ? { connections: { registry: rr.registry } } : {},
 		eventBus: ji.bus
@@ -7725,7 +7726,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 				error: (e, t) => Z.error(e, t ?? {}),
 				debug: (e, t) => Z.debug(e, t ?? {})
 			},
-			onRunEvent: (e, t) => T.emit("scheduleRuns", {
+			onRunEvent: (e, t) => w.emit("scheduleRuns", {
 				op: e,
 				row: t
 			}),
@@ -7778,7 +7779,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			scope: n.scope,
 			baseKey: `q:${e.name}:${ms(t)}`
 		};
-	}, gs = Ft(), _s = xf(M?.plugins ?? [], gs), vs = _s.mutation, ys = _s.action, bs = _s.query, xs = jl(_), Ss = ho({
+	}, gs = Ft(), _s = xf(M?.plugins ?? [], gs), vs = _s.mutation, ys = _s.action, bs = _s.query, xs = jl(y), Ss = ho({
 		store: z,
 		defaultDeny: xs,
 		buildContext: (e, t, n) => qo(e, t, n),
@@ -7953,7 +7954,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	let Ls = (e, t) => qo({
 		subject: e.subject,
 		traceId: e.traceId
-	}, z, void 0, `workflow:${t.workflowName}`, { parentExecutionId: t.executionId }), Rs = Af(M?.plugins ?? [], gs), zs = Br, Bs = (e, t) => T.emit(e, t), Hs = M?.dormancy === "sleep" ? {
+	}, z, void 0, `workflow:${t.workflowName}`, { parentExecutionId: t.executionId }), Rs = Af(M?.plugins ?? [], gs), zs = Br, Bs = (e, t) => w.emit(e, t), Hs = M?.dormancy === "sleep" ? {
 		register: (e, t, n) => Ho(z, {
 			tenantId: n ?? Vi,
 			kind: "workflow",
@@ -8005,7 +8006,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		});
-		i && T.emit("workflowRuns", {
+		i && w.emit("workflowRuns", {
 			op: "update",
 			row: zs(i)
 		});
@@ -8080,7 +8081,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			workflowRuntime: J,
 			workflowRunRecorder: Ws,
 			closeChildrenForParent: Gs,
-			onRunUpdated: (e) => T.emit("workflowRuns", {
+			onRunUpdated: (e) => w.emit("workflowRuns", {
 				op: "update",
 				row: zs(e)
 			})
@@ -8179,7 +8180,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			runRedrive: (e) => J.runPromise(Jr(e))
 		}, e).then((e) => e.outcome)
 	}) : void 0;
-	let lc = L.mergeAll(To.toLayer(q), Rt), uc = Bc(q, D.map((e) => e.descriptor.name), pt), dc = L.mergeAll(To.toLayer(uc), Rt), Y = V, pc = (Y === "postgres" || Y === "mysql" || Y === "mariadb" || Y === "mssql") && (process.env.CDC ?? "1") !== "0";
+	let lc = L.mergeAll(To.toLayer(q), Rt), uc = Bc(q, E.map((e) => e.descriptor.name), pt), dc = L.mergeAll(To.toLayer(uc), Rt), Y = V, pc = (Y === "postgres" || Y === "mysql" || Y === "mariadb" || Y === "mssql") && (process.env.CDC ?? "1") !== "0";
 	if (Y === "postgres" && Wp()) {
 		let e = Yp({
 			store: z,
@@ -8196,16 +8197,16 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		mc.stop();
 	});
 	let hc = tc({
-		queries: D,
-		mutations: O,
-		actions: k,
-		streams: Ue,
+		queries: E,
+		mutations: D,
+		actions: O,
+		streams: k,
 		workflows: j
 	}, n), _c = nc({
-		queries: D,
-		mutations: O,
-		actions: k,
-		streams: Ue,
+		queries: E,
+		mutations: D,
+		actions: O,
+		streams: k,
 		workflows: j
 	}, n);
 	Ht.writeFile(P(n, "app.manifest.generated.json"), `${JSON.stringify(lt(hc, _c, [], M?.plugins ?? []), null, 2)}\n`, "utf8").catch(() => {}), (async () => {
@@ -8353,7 +8354,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			skip: void 0,
 			take: 1
 		});
-		t[0] && T.emit("workflowRuns", {
+		t[0] && w.emit("workflowRuns", {
 			op: "update",
 			row: zs(t[0])
 		});
@@ -8388,7 +8389,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		meta: {
 			name: M?.name ?? N(n),
 			voltroVersion: fh,
-			port: w,
+			port: C,
 			mode: "dev",
 			store: Y,
 			cdc: pc ? "on" : "off",
@@ -8407,7 +8408,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			mode: "dev",
 			accessGate: dt,
 			config: M,
-			...ke ? { rpcGroupFile: ke } : {},
+			...Ae ? { rpcGroupFile: Ae } : {},
 			serverOnlyLeaks: ot,
 			migrations: Ac
 		}),
@@ -8415,7 +8416,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			plugins: Wt.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => m(M?.name ?? N(n), {
+		env: () => _(M?.name ?? N(n), {
 			contract: ps(M?.env) ? M.env : void 0,
 			plugins: M?.plugins ?? []
 		}),
@@ -8494,7 +8495,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 				workflowRuntime: J,
 				workflowRunRecorder: Ws,
 				closeChildrenForParent: Gs,
-				onRunUpdated: (e) => T.emit("workflowRuns", {
+				onRunUpdated: (e) => w.emit("workflowRuns", {
 					op: "update",
 					row: zs(e)
 				})
@@ -8563,7 +8564,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			scheduleCoordChoice: ra
 		}),
 		runSeed: async (e) => {
-			let n = await ae(Si.seeds, e, z, xi);
+			let n = await oe(Si.seeds, e, z, xi);
 			return t.recordSeedResult(n), kc();
 		},
 		rollbackMigration: async (e) => (xi.warn("rollbackMigration called but only memory store is wired — no-op"), kc()),
@@ -8577,7 +8578,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		metrics: gs,
 		log: Z
 	}), Wc = (M?.plugins ?? []).flatMap((e) => e.httpRoutes ?? []), Gc = typeof _t == "object" ? _t.managementPath : void 0, Kc = () => `public-${Math.random().toString(36).slice(2, 10)}`, qc = [
-		...D.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+		...E.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => Ps(e, t, {
 				subject: n.subject,
@@ -8588,14 +8589,14 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 				traceId: Kc()
 			}, r)
 		})),
-		...O.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+		...D.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => Ss(e, t, {
 				subject: n.subject,
 				traceId: Kc()
 			})
 		})),
-		...k.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+		...O.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => Cs(e, t, {
 				subject: n.subject,
@@ -8618,7 +8619,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		...rr.httpRoutes
 	];
 	try {
-		await b(w, "voltro dev (api)");
+		await te(C, "voltro dev (api)");
 	} catch (e) {
 		Z.error(String(e.message ?? e)), process.exit(1);
 	}
@@ -8626,7 +8627,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 		group: To,
 		handlersLayer: lc,
 		httpHandlersLayer: dc,
-		port: w,
+		port: C,
 		path: M?.transport?.wsPath ?? "/ws",
 		security: Wl(M),
 		...Uc,
@@ -8673,11 +8674,11 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 				if (e === "/_voltro/inspect/seeds/run" || e === "/_voltro/inspect/migrations/rollback") return i;
 			}
 			if (n === "POST" && e === "/_voltro/inspect/clientLog") return {
-				...d(r ?? "", T),
+				...f(r ?? "", w),
 				headers: A(t.origin)
 			};
 			if (n === "GET" && (e === "/_voltro/inspect/logs" || e.startsWith("/_voltro/inspect/logs?"))) return {
-				...c(e, o(), t),
+				...l(e, s(), t),
 				headers: A(t.origin)
 			};
 			if (n === "GET" && (e === "/_voltro/inspect/traces" || e.startsWith("/_voltro/inspect/traces?"))) {
@@ -8738,10 +8739,10 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 				reason: "forbidden host (DNS-rebinding guard)"
 			},
 			isDisabled: () => We(),
-			replay: () => T.buffered().map(p),
-			subscribe: (e) => T.subscribe((t) => e(p(t))),
+			replay: () => w.buffered().map(m),
+			subscribe: (e) => w.subscribe((t) => e(m(t))),
 			corsHeaders: (e) => A(e),
-			keepAlive: () => f()
+			keepAlive: () => p()
 		},
 		webhookRoutes: new Map(Array.from(Ia.entries()).map(([e, t]) => [e, { handle: t }])),
 		...Zn ? { tracerLayer: Zn } : {}
@@ -8749,43 +8750,43 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	try {
 		await ca(Xc);
 	} catch (e) {
-		Z.error(`rpc server failed to bind on port ${w} — aborting boot`, { port: w }, e), process.exit(1);
+		Z.error(`rpc server failed to bind on port ${C} — aborting boot`, { port: C }, e), process.exit(1);
 	}
-	Z.info(`listening on http://localhost:${w}`, {
-		port: w,
-		ws: `ws://localhost:${w}/ws`,
+	Z.info(`listening on http://localhost:${C}`, {
+		port: C,
+		ws: `ws://localhost:${C}/ws`,
 		store: Y
-	}), xe?.set({ phase: "ready" }), process.send?.({ type: el }), process.channel?.unref(), Y === "postgres" && Z.info("postgres change-data-capture", { enabled: (process.env.CDC ?? "1") !== "0" }), await Jo();
+	}), Se?.set({ phase: "ready" }), process.send?.({ type: el }), process.channel?.unref(), Y === "postgres" && Z.info("postgres change-data-capture", { enabled: (process.env.CDC ?? "1") !== "0" }), await Jo();
 	try {
 		await jt({
-			id: re,
-			name: ne,
+			id: ie,
+			name: re,
 			kind: "api",
-			url: `http://localhost:${w}`,
+			url: `http://localhost:${C}`,
 			pid: process.pid,
 			status: "live",
-			logFile: le.path
+			logFile: ue.path
 		});
-		let e = u(n);
+		let e = d(n);
 		if (e) {
-			let t = await l({ dashboardAppPath: e });
+			let t = await u({ dashboardAppPath: e });
 			t.status === "launched" ? Z.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && Z.debug(`dashboard already running on :${t.port}`, { port: t.port });
 		}
 		setInterval(() => {
 			jt({
-				id: re,
-				name: ne,
+				id: ie,
+				name: re,
 				kind: "api",
-				url: `http://localhost:${w}`,
+				url: `http://localhost:${C}`,
 				pid: process.pid,
 				status: "live",
-				logFile: le.path
+				logFile: ue.path
 			}).catch(() => {});
 		}, 1e4).unref();
 		let t = async () => {
 			Wt.deactivate();
 			for (let e of vr) e.stop();
-			pr?.dispose(), Mt(re), le.dispose(), Kr(), Ar?.close(), await mi();
+			pr?.dispose(), Mt(ie), ue.dispose(), Kr(), Ar?.close(), await mi();
 		};
 		W(t);
 		let r = process.ppid;
@@ -8798,7 +8799,7 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 	} catch (e) {
 		Z.warn("runtime-registry write failed", {}, e);
 	}
-	return y(e, Z, {
+	return v(e, Z, {
 		root: n,
 		onBeforeRestart: () => {
 			try {
@@ -8807,12 +8808,12 @@ ${r.join("\n")}\n  A consumer with no producer waits forever and looks exactly l
 			Xc.close();
 		}
 	}), Xt({
-		app: ne,
+		app: re,
 		kind: "api",
-		url: `http://localhost:${w}`,
+		url: `http://localhost:${C}`,
 		extras: [{
 			label: "WS",
-			url: `ws://localhost:${w}/ws`
+			url: `ws://localhost:${C}/ws`
 		}],
 		bootMs: Date.now() - g
 	}), new Promise(() => {});