@voltro/cli 0.36.0 → 0.38.0

package/dist/{serveCommand-VVGcIMIw.js → serveCommand-DnY4VS3D.js}

@@ -1,34 +1,35 @@
 import { t as e } from "./nodeEnvironment-cGFAj1J8.js";
 import { t } from "./frameworkInspectState-CX2250XB.js";
 import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
-import { n as i, t as a } from "./startupRunner-DPGFchOa.js";
-import { $ as o, $t as s, A as c, At as l, B as u, C as d, Ct as ee, D as f, Dt as p, E as te, Et as ne, F as re, Ft as m, G as ie, Gt as ae, H as oe, Ht as se, I as h, It as ce, J as le, Jt as g, K as ue, Kt as de, L as fe, Lt as pe, M as me, Mt as he, N as ge, Nt as _e, O as _, Ot as ve, P as ye, Pt as be, Q as xe, Qt as Se, R as Ce, S as we, St as Te, T as v, Tt as Ee, U as De, Ut as Oe, V as ke, Vt as Ae, W as je, Wt as y, X as Me, Xt as Ne, Y as Pe, Yt as Fe, Z as b, Zt as Ie, _ as Le, _n as x, _t as Re, an as ze, at as Be, b as Ve, bt as He, c as Ue, cn as We, ct as Ge, dn as S, dt as Ke, en as qe, et as Je, f as Ye, fn as Xe, ft as Ze, g as Qe, gn as $e, gt as et, h as tt, hn as nt, ht as rt, i as C, in as it, it as at, j as ot, jt as st, k as ct, kt as lt, ln as ut, lt as dt, m as ft, mn as pt, mt, nn as ht, nt as gt, o as w, on as _t, ot as T, p as vt, pt as yt, q as bt, qt as E, r as D, rn as xt, rt as St, sn as Ct, st as wt, t as Tt, tn as O, tt as Et, u as Dt, un as Ot, ut as kt, v as At, vn as jt, vt as Mt, w as Nt, wt as Pt, x as Ft, xt as It, y as k, yt as Lt, zt as A } from "./dev-Dc4cpmRl.js";
+import { t as i } from "./bootRefusal-pgvDxlrU.js";
+import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
+import { $ as s, $t as c, A as l, At as u, B as d, C as ee, Ct as f, D as p, Dt as te, E as ne, Et as re, F as ie, Ft as m, G as ae, Gt as oe, H as se, Ht as ce, I as h, It as le, J as ue, Jt as g, K as de, Kt as fe, L as pe, Lt as me, M as he, Mt as ge, N as _e, Nt as _, O as ve, Ot as ye, P as be, Pt as xe, Q as Se, Qt as Ce, R as we, S as Te, St as v, T as Ee, Tt as De, U as Oe, Ut as ke, V as Ae, Vt as je, W as Me, Wt as y, X as Ne, Xt as Pe, Y as Fe, Yt as Ie, Z as b, Zt as x, _ as Le, _n as Re, _t as ze, an as Be, at as Ve, b as He, bt as Ue, c as We, cn as S, ct as Ge, dn as Ke, dt as qe, en as C, et as Je, f as Ye, fn as Xe, ft as Ze, g as Qe, gn as $e, gt as et, h as tt, hn as w, ht as nt, i as T, in as rt, it, j as at, jt as ot, k as st, kt as ct, ln as lt, lt as ut, m as dt, mn as ft, mt as pt, nn as mt, nt as ht, o as E, on as gt, ot as _t, p as vt, pt as D, q as yt, qt as O, r as bt, rn as xt, rt as St, sn as Ct, st as wt, t as Tt, tn as k, tt as Et, u as Dt, un as Ot, ut as kt, v as At, vn as jt, vt as Mt, w as Nt, wt as Pt, x as A, xt as Ft, y as j, yt as It, zt as Lt } from "./dev-E7Eo5GHc.js";
 import { n as Rt } from "./cliArgs-D4p8n7EE.js";
 import { r as zt } from "./appPort-B_HpJ_ck.js";
-import { at as Bt, nt as Vt, st as Ht } from "./webDev-Dybxew86.js";
-import { r as j } from "./dialectDriver-CgXnDfec.js";
-import { i as Ut, n as Wt } from "./connectionConfig-UFlIEiys.js";
-import { c as M, n as Gt, o as Kt } from "./seedRunner-ZmLSqNe2.js";
-import { C as qt, S as Jt, _ as Yt, d as Xt, g as N, l as Zt, m as Qt, r as $t, u as en, v as tn } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { S as nn, c as rn, n as an, p as on, s as sn, x as cn } from "./fileConventions-Cof68_BL.js";
-import { h as ln, o as un } from "./inspect-CjTYzAs_.js";
-import { n as dn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as fn, n as pn, r as mn, t as hn } from "./webhookDiscovery-D7VaeMlz.js";
-import { t as gn } from "./inspectMetrics-CfdKLh6t.js";
-import { r as _n, u as vn } from "./apiBuild-DiE9zcj6.js";
-import { t as yn } from "./bootTiming-BdyP9nYw.js";
-import { t as bn } from "./dataProfile-dW-PsfLB.js";
-import { basename as xn, join as Sn } from "node:path";
-import { existsSync as Cn } from "node:fs";
-import { pathToFileURL as wn } from "node:url";
-import { createLogger as P } from "@voltro/logger";
-import { AuthMiddleware as Tn, ConnectionInfoMiddleware as En, actionToRpc as F, anonymousSubject as Dn, isWireReachable as On, mutationToRpc as I, queryToRpc as L, streamToRpc as kn, workflowCancelDescriptor as An, workflowDomainEventsQueryDescriptor as jn, workflowEventDeliveriesQueryDescriptor as R, workflowResumeDescriptor as Mn, workflowRunEventsQueryDescriptor as z, workflowRunQueryDescriptor as B, workflowRunStepsQueryDescriptor as V, workflowRunsQueryDescriptor as Nn, workflowSignalDescriptor as Pn, workflowUpdateDescriptor as Fn } from "@voltro/protocol";
-import { Cause as In, Effect as H, Layer as U, ManagedRuntime as Ln } from "effect";
-import { SqlClient as Rn } from "@effect/sql";
-import { declaredSnapshot as zn, describeOutcome as Bn, pendingFileMigrationIds as Vn, runPlannedMigrations as Hn } from "@voltro/database/sql";
-import { RpcGroup as Un } from "@effect/rpc";
-import { allRegisteredTables as Wn, and as Gn, connectionIdentity as Kn, ensureTableRegistered as qn, eq as W, or as G } from "@voltro/database";
-import { AggregateRegistry as Jn, CostRegistry as Yn, DORMANCY_WAKEUP_TENANT as Xn, Dispatcher as Zn, ExpectationRegistry as K, ExperimentRegistry as q, apiKeyManagementRoutes as Qn, attachAnalyticsMirror as $n, attachExpectations as er, attachExperiments as tr, attachFinops as nr, awaitServerListening as rr, bindMutation as J, bindStream as ir, bindSubscription as Y, buildTracingLayer as ar, cancelWakeup as or, compileCron as sr, dataStoreApiKeyStore as cr, formatServerOnlyLeaks as lr, formatUnresolvedSources as ur, frameworkApiKeyStrategy as dr, installPolicyGuardResolver as fr, loadResourceTuples as pr, makeActionRunner as mr, makeAdvisoryLockCoordinator as hr, makeApiKeyService as gr, makeApiKeyUsageBuffer as _r, makeApiKeyUsageFlusher as vr, makeAsyncKv as yr, makeAuthMiddlewareLayers as br, makeCoordinatedScheduler as xr, makeEffectStoreLayer as Sr, makeLazyWorkflowFacade as Cr, makeMutationOutputCodec as wr, makeMutationRunner as Tr, makeOneShotQueryRunner as Er, makeQueryDescriptorProducer as Dr, makeQueryFinalizer as Or, makeQueryReauthorizer as kr, makeQuerySubscriber as Ar, makeSchemaRegistry as jr, makeWorkflowFacade as Mr, makeWorkflowFacadeWithCallerContext as Nr, makeWorkflowLayers as X, noopKv as Pr, onProcessShutdown as Fr, recordSubscriptionDelivery as Ir, recordWorkflowRun as Lr, registerWakeup as Rr, resolveSecretsBackend as zr, runProvidedEffect as Br, setSecretsBackend as Vr, setSystemStoreHandle as Hr, setTupleSource as Ur, shutdownGraceMsFromEnv as Z, singleCoordinator as Wr, startRpcServer as Gr, startScheduler as Kr, stripForbiddenForWire as qr, undoCaptureEnabled as Jr, unresolvedSources as Yr, withScopedRequest as Xr, workflowToRpc as Zr, wrapStoreWithBootCodec as Qr } from "@voltro/runtime";
+import { it as Bt, ot as Vt } from "./webDev-BKdD7c_a.js";
+import { r as M } from "./dialectDriver-CgXnDfec.js";
+import { i as Ht, n as Ut } from "./connectionConfig-UFlIEiys.js";
+import { c as N, n as Wt, o as Gt } from "./seedRunner-ZmLSqNe2.js";
+import { C as Kt, S as qt, _ as Jt, d as Yt, g as P, l as Xt, m as Zt, r as Qt, u as $t, v as en } from "./frameworkTableAssembly-oMPBKqlE.js";
+import { S as tn, c as nn, n as rn, p as an, s as on, x as sn } from "./fileConventions-Cof68_BL.js";
+import { h as cn, o as ln } from "./inspect-CjTYzAs_.js";
+import { n as un } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as dn, n as fn, r as pn, t as mn } from "./webhookDiscovery-D7VaeMlz.js";
+import { t as hn } from "./inspectMetrics-CfdKLh6t.js";
+import { r as gn, u as _n } from "./apiBuild-CvacV4zA.js";
+import { t as vn } from "./bootTiming-BdyP9nYw.js";
+import { t as yn } from "./dataProfile-dW-PsfLB.js";
+import { basename as bn, join as xn } from "node:path";
+import { existsSync as Sn } from "node:fs";
+import { pathToFileURL as Cn } from "node:url";
+import { createLogger as F } from "@voltro/logger";
+import { AuthMiddleware as wn, ConnectionInfoMiddleware as Tn, actionToRpc as I, anonymousSubject as En, isWireReachable as Dn, mutationToRpc as L, queryToRpc as R, streamToRpc as On, workflowCancelDescriptor as kn, workflowDomainEventsQueryDescriptor as An, workflowEventDeliveriesQueryDescriptor as z, workflowResumeDescriptor as jn, workflowRunEventsQueryDescriptor as B, workflowRunQueryDescriptor as V, workflowRunStepsQueryDescriptor as H, workflowRunsQueryDescriptor as Mn, workflowSignalDescriptor as Nn, workflowUpdateDescriptor as Pn } from "@voltro/protocol";
+import { Cause as Fn, Effect as U, Layer as W, ManagedRuntime as In } from "effect";
+import { SqlClient as Ln } from "@effect/sql";
+import { declaredSnapshot as Rn, describeOutcome as zn, pendingFileMigrationIds as Bn, runPlannedMigrations as Vn } from "@voltro/database/sql";
+import { RpcGroup as Hn } from "@effect/rpc";
+import { allRegisteredTables as Un, and as Wn, connectionIdentity as Gn, ensureTableRegistered as Kn, eq as G, or as K } from "@voltro/database";
+import { AggregateRegistry as qn, CostRegistry as Jn, DORMANCY_WAKEUP_TENANT as Yn, Dispatcher as Xn, ExpectationRegistry as Zn, ExperimentRegistry as q, apiKeyManagementRoutes as Qn, attachAnalyticsMirror as $n, attachExpectations as er, attachExperiments as tr, attachFinops as nr, awaitServerListening as rr, bindMutation as J, bindStream as ir, bindSubscription as Y, buildTracingLayer as ar, cancelWakeup as or, compileCron as sr, dataStoreApiKeyStore as cr, formatServerOnlyLeaks as lr, formatUnresolvedSources as ur, frameworkApiKeyStrategy as dr, installPolicyGuardResolver as fr, loadResourceTuples as pr, makeActionRunner as mr, makeAdvisoryLockCoordinator as hr, makeApiKeyService as gr, makeApiKeyUsageBuffer as _r, makeApiKeyUsageFlusher as vr, makeAsyncKv as yr, makeAuthMiddlewareLayers as br, makeCoordinatedScheduler as xr, makeEffectStoreLayer as Sr, makeLazyWorkflowFacade as Cr, makeMutationOutputCodec as wr, makeMutationRunner as Tr, makeOneShotQueryRunner as Er, makeQueryDescriptorProducer as Dr, makeQueryFinalizer as Or, makeQueryReauthorizer as kr, makeQuerySubscriber as Ar, makeSchemaRegistry as jr, makeWorkflowFacade as Mr, makeWorkflowFacadeWithCallerContext as Nr, makeWorkflowLayers as X, noopKv as Pr, onProcessShutdown as Fr, recordSubscriptionDelivery as Ir, recordWorkflowRun as Lr, registerWakeup as Rr, resolveSecretsBackend as zr, runProvidedEffect as Br, setSecretsBackend as Vr, setSystemStoreHandle as Hr, setTupleSource as Ur, shutdownGraceMsFromEnv as Z, singleCoordinator as Wr, startRpcServer as Gr, startScheduler as Kr, stripForbiddenForWire as qr, undoCaptureEnabled as Jr, unresolvedSources as Yr, withScopedRequest as Xr, workflowToRpc as Zr, wrapStoreWithBootCodec as Qr } from "@voltro/runtime";
 import { appStorageProvider as $r, fromNodeReadable as ei, getObjectStream as ti, putObjectStream as ni, toNodeReadable as ri } from "@voltro/plugin-storage";
 import { isEnvContract as ii } from "@voltro/env";
 import { assertProductionSessionSecret as ai } from "@voltro/protocol/session";
@@ -111,7 +112,7 @@ var Ti = (e, t, n = [], r = 0) => {
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
 	let n = Ni(e.headers);
 	return !n || !Pi(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, Ii = P({ scope: "voltro:admin-import" }), Li = "VBUNDLE2", Ri = async function* (e) {
+}, Ii = F({ scope: "voltro:admin-import" }), Li = "VBUNDLE2", Ri = async function* (e) {
 	yield e;
 }, zi = (e) => async (t) => {
 	let n = Fi(t, e.secret);
@@ -135,7 +136,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			dir: f,
 			blobs: e.assetSink
 		}) : await wi(c, f);
-		let t = await H.runPromiseExit(bi({
+		let t = await U.runPromiseExit(bi({
 			store: e.store,
 			bundleDir: f,
 			...r ? { mode: r } : {},
@@ -190,7 +191,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			force: !0
 		});
 	}
-}, Bi = P({ scope: "voltro:admin-export" }), Vi = async (e) => {
+}, Bi = F({ scope: "voltro:admin-export" }), Vi = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
@@ -223,7 +224,7 @@ var Ti = (e, t, n = [], r = 0) => {
 	}
 	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Hi(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await H.runPromise(yi({
+		let t = await U.runPromise(yi({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -288,7 +289,7 @@ var Ti = (e, t, n = [], r = 0) => {
 		});
 	}
 }, Wi = (e, t, n = {}) => (async function* () {
-	let r = await ri((await H.runPromise(ti(e, t).pipe(H.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
+	let r = await ri((await U.runPromise(ti(e, t).pipe(U.timeout(n.openTimeout ?? "30 seconds")))).stream), i = n.stallMs ?? 12e4, a, o = () => {
 		a && clearTimeout(a), a = setTimeout(() => r.destroy(/* @__PURE__ */ Error(`storage read stalled for ${i}ms reading '${t}'`)), i);
 	};
 	try {
@@ -307,14 +308,14 @@ var Ti = (e, t, n = [], r = 0) => {
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
 }, Ki = async (e) => {
-	pe(e.appProcedures ?? e.discovered, {
+	me(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
 	}), Hr({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new Zn({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new Xn({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		...e.reactive === void 0 ? {} : { reactive: e.reactive },
@@ -325,18 +326,18 @@ var Ti = (e, t, n = [], r = 0) => {
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? Gi, a = e.kv ?? Pr, c, d = () => void 0, ee, f, p, te, se, ce, le, ue = Oe({
+	}), i = e.cache ?? Gi, a = e.kv ?? Pr, o, l = () => void 0, ee, f, p, te, ne, ce, le, ue = ke({
 		store: e.store,
 		warn: (e, t) => {
 			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
 		}
-	}), fe = ue.remember, he = ue.resolve, _e = y({
+	}), de = ue.remember, pe = ue.resolve, ge = y({
 		authority: e.authority,
 		getStore: () => e.store
-	}), _ = (e.discovered.workflows?.length ?? 0) > 0 ? Cr(() => c) : void 0, ve = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ye = ve || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", Se = e.tenantIsolation === "namespace", Ce = (e.log ?? P({ scope: "voltro:serve" })).child("webhooks"), we, Te, v = e.discovered.webhooks;
+	}), _ = (e.discovered.workflows?.length ?? 0) > 0 ? Cr(() => o) : void 0, ve = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ye = ve || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", be = e.tenantIsolation === "namespace", Ce = (e.log ?? F({ scope: "voltro:serve" })).child("webhooks"), we, Te, v = e.discovered.webhooks;
 	if (v && v.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
-		let t = _t({
+		let t = gt({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: i,
@@ -359,7 +360,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			});
 		}, { events: n });
 	}
-	let Ae = /* @__PURE__ */ new Map();
+	let Ee = /* @__PURE__ */ new Map();
 	if (v) for (let e of v.incoming) {
 		let t = e.descriptor.path ?? ui(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = pi(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
@@ -378,31 +379,31 @@ var Ti = (e, t, n = [], r = 0) => {
 				e.status >= 500 ? Ce.error("incoming delivery failed", t) : e.status >= 400 ? Ce.warn("incoming delivery rejected", t) : Ce.info("incoming delivery handled", t);
 			}
 		});
-		Ae.set(t, { handle: r });
+		Ee.set(t, { handle: r });
 	}
 	fr(), Ur((t) => pr(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let Ne = [], Pe = [...e.discovered.outboxHandlers ?? [], ...pn((v?.outgoing.length ?? 0) + (v?.incoming.length ?? 0) + (v?.providers.length ?? 0), []) ? [{
+	let je = [], Pe = [...e.discovered.outboxHandlers ?? [], ...fn((v?.outgoing.length ?? 0) + (v?.incoming.length ?? 0) + (v?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
 		definition: fi(() => we)
-	}] : []], Ie = Pe.length > 0 ? g({
+	}] : []], Fe = Pe.length > 0 ? g({
 		handlers: Pe,
 		store: e.store,
-		log: (e.log ?? P({ scope: "voltro:serve" })).child("outbox"),
+		log: (e.log ?? F({ scope: "voltro:serve" })).child("outbox"),
 		onChange: (t) => e.store.onChange((e) => t({
 			table: e.table,
 			op: e.op
 		})),
 		onShutdown: (e) => {
-			Ne.push(e);
+			je.push(e);
 		}
-	}) : void 0, x = de({
+	}) : void 0, x = fe({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: ae(e.port ?? 4e3),
-		log: (e.log ?? P({ scope: "voltro:serve" })).child("connections")
+		publicUrl: oe(e.port ?? 4e3),
+		log: (e.log ?? F({ scope: "voltro:serve" })).child("connections")
 	});
-	ot({
+	at({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -411,16 +412,16 @@ var Ti = (e, t, n = [], r = 0) => {
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let Re = (e.log ?? P({ scope: "voltro:serve" })).child("events"), Be = e.broadcastNamespace ?? Qe(e.plugins, void 0), Ve = Le(e.plugins, Be, Re), Ue = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, We = e.membership ?? At(e.plugins, {
-		instanceId: Ue,
-		namespace: Be,
+	let Re = (e.log ?? F({ scope: "voltro:serve" })).child("events"), ze = e.broadcastNamespace ?? Qe(e.plugins, void 0), Ve = Le(e.plugins, ze, Re), He = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, We = e.membership ?? At(e.plugins, {
+		instanceId: He,
+		namespace: ze,
 		meta: { mode: "serve" },
 		logger: Re
-	}), S = me({
+	}), S = he({
 		events: e.discovered.events ?? [],
-		origin: Ue,
+		origin: He,
 		...Ve.publishRemote === void 0 ? {} : { publishRemote: Ve.publishRemote }
-	}), qe = (e.discovered.events ?? []).length > 0 ? await Ve.attach(S.bus) : null, Je = ze({
+	}), Ke = (e.discovered.events ?? []).length > 0 ? await Ve.attach(S.bus) : null, C = Be({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
@@ -428,132 +429,132 @@ var Ti = (e, t, n = [], r = 0) => {
 		...we === void 0 ? {} : { webhooksService: we },
 		..._ === void 0 ? {} : { workflowsProxy: _ },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: Se,
+		namespaceIsolationOn: be,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...Ie === void 0 ? {} : { outbox: { nudge: Ie.nudge } },
+		...Fe === void 0 ? {} : { outbox: { nudge: Fe.nudge } },
 		...x.active ? { connections: { registry: x.registry } } : {},
 		eventBus: S.bus
-	}), Ye = U.succeed(Jn, ne), Xe = U.succeed(K, He), Ze = U.succeed(Yn, Lt), et = U.succeed(q, It), tt = (t, n) => {
-		let r = t.pipe(H.provide(Sr(n)));
-		return (e.baseLayer ? r.pipe(H.provide(e.baseLayer)) : r).pipe(H.provide(Ye)).pipe(H.provide(Xe)).pipe(H.provide(Ze)).pipe(H.provide(et));
-	}, nt = (e, t) => Br(tt(e, t)), C = gn(), at = bt(e.plugins ?? [], C), ct = u({
+	}), Je = W.succeed(qn, re), Ye = W.succeed(Zn, Ue), Xe = W.succeed(Jn, It), Ze = W.succeed(q, Ft), et = (t, n) => {
+		let r = t.pipe(U.provide(Sr(n)));
+		return (e.baseLayer ? r.pipe(U.provide(e.baseLayer)) : r).pipe(U.provide(Je)).pipe(U.provide(Ye)).pipe(U.provide(Xe)).pipe(U.provide(Ze));
+	}, tt = (e, t) => Br(et(e, t)), w = hn(), T = yt(e.plugins ?? [], w), it = d({
 		plugins: e.plugins ?? [],
-		metrics: C,
-		log: e.log ?? P({ scope: "voltro:serve" })
-	}), lt = ie(e.plugins ?? [], C), ut = e.security?.defaultDeny ?? !0, ft = Tr({
+		metrics: w,
+		log: e.log ?? F({ scope: "voltro:serve" })
+	}), st = ae(e.plugins ?? [], w), ct = e.security?.defaultDeny ?? !0, lt = Tr({
 		store: e.store,
-		defaultDeny: ut,
+		defaultDeny: ct,
 		recordMetric: (e) => {
-			C.record(e);
+			w.record(e);
 		},
-		...at.mutation === void 0 ? {} : { interceptor: at.mutation },
-		buildContext: (e, t, n) => Je(e, t, n),
-		runEffect: nt,
-		undoCapture: xe()
-	}), pt = b();
+		...T.mutation === void 0 ? {} : { interceptor: T.mutation },
+		buildContext: (e, t, n) => C(e, t, n),
+		runEffect: tt,
+		undoCapture: Se()
+	}), dt = b();
 	{
-		let t = o();
-		t !== void 0 && (e.log ?? P({ scope: "voltro:serve" })).info(t);
+		let t = s();
+		t !== void 0 && (e.log ?? F({ scope: "voltro:serve" })).info(t);
 	}
-	let mt = Me({
+	let ft = Ne({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), ht = mr({
-		defaultDeny: ut,
-		buildContext: (e) => Je(e),
-		runEffect: nt,
+	}), pt = mr({
+		defaultDeny: ct,
+		buildContext: (e) => C(e),
+		runEffect: tt,
 		recordMetric: (e) => {
-			C.record(e);
+			w.record(e);
 		},
-		...at.action === void 0 ? {} : { interceptor: at.action }
-	}), gt = Or({
+		...T.action === void 0 ? {} : { interceptor: T.action }
+	}), mt = Or({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
-	}), w = {
-		defaultDeny: ut,
-		buildContext: (e) => Je(e),
-		finalize: (e, t) => gt(e, t.subject),
-		provideEffect: tt,
-		...at.query === void 0 ? {} : { interceptor: at.query }
-	}, T = Dr(w), vt = Er({
-		...w,
+	}), ht = {
+		defaultDeny: ct,
+		buildContext: (e) => C(e),
+		finalize: (e, t) => mt(e, t.subject),
+		provideEffect: et,
+		...T.query === void 0 ? {} : { interceptor: T.query }
+	}, E = Dr(ht), _t = Er({
+		...ht,
 		queryRows: (t, n) => e.store.query(t).then((e) => qr(t.table, e, n.subject))
-	}), yt = Ar({
-		...w,
+	}), vt = Ar({
+		...ht,
 		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => On(e.descriptor)), D = {};
+	}), D = (e) => e.filter((e) => Dn(e.descriptor)), O = {};
 	for (let t of [
-		...E(e.discovered.queries),
-		...pt.queries,
-		...mt.queries,
+		...D(e.discovered.queries),
+		...dt.queries,
+		...ft.queries,
 		...x.queries
-	]) D[t.descriptor.name] = (e) => Y(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, kr(t, e));
+	]) O[t.descriptor.name] = (e) => Y(E(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, kr(t, e));
 	for (let t of [
-		...E(e.discovered.mutations),
-		...pt.mutations,
-		...mt.mutations,
+		...D(e.discovered.mutations),
+		...dt.mutations,
+		...ft.mutations,
 		...x.mutations
 	]) {
 		let n = wr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => J(async (e, n) => ft(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+		O[t.descriptor.name] = (r) => J(async (e, n) => lt(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
 	}
-	for (let t of [...E(e.discovered.actions), ...x.actions]) {
+	for (let t of [...D(e.discovered.actions), ...x.actions]) {
 		let n = wr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => J(async (e, n) => ht(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+		O[t.descriptor.name] = (r) => J(async (e, n) => pt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
 	}
-	let xt = () => `public-${Math.random().toString(36).slice(2, 10)}`, St = [
+	let bt = () => `public-${Math.random().toString(36).slice(2, 10)}`, xt = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => vt(e, t, {
+			invoke: (t, n) => _t(e, t, {
 				subject: n.subject,
-				traceId: xt()
+				traceId: bt()
 			}),
-			subscribe: (t, n, r) => yt(e, t, {
+			subscribe: (t, n, r) => vt(e, t, {
 				subject: n.subject,
-				traceId: xt()
+				traceId: bt()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ft(e, t, {
+			invoke: (t, n) => lt(e, t, {
 				subject: n.subject,
-				traceId: xt()
+				traceId: bt()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ht(e, t, {
+			invoke: (t, n) => pt(e, t, {
 				subject: n.subject,
-				traceId: xt()
+				traceId: bt()
 			})
 		}))
-	], Ct = {
+	], St = {
 		candidates: m({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
 			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(vt(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(ft(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(ht(e, t, n))
+			runQuery: (e, t, n) => Promise.resolve(_t(e, t, n)),
+			runMutation: (e, t, n) => Promise.resolve(lt(e, t, n)),
+			runAction: (e, t, n) => Promise.resolve(pt(e, t, n))
 		}),
 		policy: e.agents?.tools ?? {},
 		mcpEnabled: e.agents?.mcp === !0,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
-	}, Tt = s({
+	}, Ct = c({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: St,
+		publicApiEntries: xt,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? P({ scope: "voltro:serve" })
-	}), Et = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Dt = Et && Et.length >= 16 ? [{
+		log: e.log ?? F({ scope: "voltro:serve" })
+	}), Tt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Et = Tt && Tt.length >= 16 ? [{
 		method: "POST",
 		path: ji,
 		handle: zi({
-			secret: Et,
+			secret: Tt,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 			assetSink: xi($r()),
@@ -563,34 +564,34 @@ var Ti = (e, t, n = [], r = 0) => {
 		method: "POST",
 		path: Mi,
 		handle: Ui({
-			secret: Et,
+			secret: Tt,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
-			loadProfile: bn,
+			loadProfile: yn,
 			assetSource: Si($r(), e.store),
 			putArchive: async (e, t) => {
 				let { Readable: n } = await import("node:stream"), r = $r(), i = ei("storage", () => n.from(t()));
-				await H.runPromise(ni(r, e, i, { contentType: "application/octet-stream" }));
+				await U.runPromise(ni(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], Ot = [
+	}] : [], Dt = [
 		...e.httpRoutes ?? [],
-		...Tt.httpRoutes,
-		...Dt,
+		...Ct.httpRoutes,
+		...Et,
 		...x.httpRoutes
 	];
-	Object.assign(D, S.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => ir((r) => Xr(r, (r) => {
-		let i = Je(r), a = t.executor(n, i);
-		if (H.isEffect(a)) {
-			let t = a.pipe(H.provide(Sr(i.store)));
-			return (e.baseLayer ? t.pipe(H.provide(e.baseLayer)) : t).pipe(H.provide(Ye)).pipe(H.provide(Xe)).pipe(H.provide(Ze)).pipe(H.provide(et));
+	Object.assign(O, S.handlers);
+	for (let t of D(e.discovered.streams ?? [])) O[t.descriptor.name] = (n) => ir((r) => Xr(r, (r) => {
+		let i = C(r), a = t.executor(n, i);
+		if (U.isEffect(a)) {
+			let t = a.pipe(U.provide(Sr(i.store)));
+			return (e.baseLayer ? t.pipe(U.provide(e.baseLayer)) : t).pipe(U.provide(Je)).pipe(U.provide(Ye)).pipe(U.provide(Xe)).pipe(U.provide(Ze));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? H.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? U.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => J(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) O[t.definition.name] = (e) => J(async (e, n) => {
 		let r = n;
 		return Nr(_, {
 			subject: r.subject,
@@ -598,8 +599,8 @@ var Ti = (e, t, n = [], r = 0) => {
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	ve && (D[B.name] = (e) => Y(T({
-		descriptor: B,
+	ve && (O[V.name] = (e) => Y(E({
+		descriptor: V,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -608,30 +609,30 @@ var Ti = (e, t, n = [], r = 0) => {
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: G(W("id", t), W("executionId", t)),
+				predicate: K(G("id", t), G("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${B.name}`), D[Nn.name] = (e) => Y(T({
-		descriptor: Nn,
+	}, e), r, `subscription.${V.name}`), O[Mn.name] = (e) => Y(E({
+		descriptor: Mn,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [W("tag", t.tag)], ...t.status === void 0 ? [] : [W("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [G("tag", t.tag)], ...t.status === void 0 ? [] : [G("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Gn(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Wn(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Nn.name}`), D[V.name] = (e) => Y(T({
-		descriptor: V,
+	}, e), r, `subscription.${Mn.name}`), O[H.name] = (e) => Y(E({
+		descriptor: H,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -640,14 +641,14 @@ var Ti = (e, t, n = [], r = 0) => {
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: W("runId", t),
+				predicate: G("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${V.name}`), D[z.name] = (e) => Y(T({
-		descriptor: z,
+	}, e), r, `subscription.${H.name}`), O[B.name] = (e) => Y(E({
+		descriptor: B,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -656,14 +657,14 @@ var Ti = (e, t, n = [], r = 0) => {
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: W("runId", t),
+				predicate: G("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${z.name}`), D[jn.name] = (e) => Y(T({
-		descriptor: jn,
+	}, e), r, `subscription.${B.name}`), O[An.name] = (e) => Y(E({
+		descriptor: An,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -672,14 +673,14 @@ var Ti = (e, t, n = [], r = 0) => {
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : W("name", t.name),
+				predicate: t.name === void 0 ? void 0 : G("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${jn.name}`), D[R.name] = (e) => Y(T({
-		descriptor: R,
+	}, e), r, `subscription.${An.name}`), O[z.name] = (e) => Y(E({
+		descriptor: z,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -688,73 +689,73 @@ var Ti = (e, t, n = [], r = 0) => {
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: W("eventId", t),
+				predicate: G("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${R.name}`), D[An.name] = (t) => J(async (t, n) => {
+	}, e), r, `subscription.${z.name}`), O[kn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await it(e.store, n.subject, { executionId: r.executionId }), await _.cancel(r.workflowName, r.executionId), await zt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${An.name}`), D[Mn.name] = (t) => J(async (t, n) => {
+		return await rt(e.store, n.subject, { executionId: r.executionId }), await _.cancel(r.workflowName, r.executionId), await Rt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${kn.name}`), O[jn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await it(e.store, n.subject, { executionId: r.executionId }), await _.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Mn.name}`), D[Pn.name] = (t) => J(async (t, n) => {
+		return await rt(e.store, n.subject, { executionId: r.executionId }), await _.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${jn.name}`), O[Nn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await it(e.store, n.subject, { id: r.id }), _.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Pn.name}`), D[Fn.name] = (t) => J(async (t, n) => {
+		return await rt(e.store, n.subject, { id: r.id }), _.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${Nn.name}`), O[Pn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await it(e.store, n.subject, { id: r.id }), _.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Fn.name}`));
-	let jt = [
-		...E(e.discovered.queries).map((e) => L(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => I(e.descriptor)),
-		...E(e.discovered.actions).map((e) => F(e.descriptor)),
-		...pt.queries.map((e) => L(e.descriptor)),
-		...pt.mutations.map((e) => I(e.descriptor)),
-		...mt.queries.map((e) => L(e.descriptor)),
-		...mt.mutations.map((e) => I(e.descriptor)),
-		...x.queries.map((e) => L(e.descriptor)),
-		...x.mutations.map((e) => I(e.descriptor)),
-		...x.actions.map((e) => F(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => kn(e.descriptor)),
+		return await rt(e.store, n.subject, { id: r.id }), _.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${Pn.name}`));
+	let Ot = [
+		...D(e.discovered.queries).map((e) => R(e.descriptor)),
+		...D(e.discovered.mutations).map((e) => L(e.descriptor)),
+		...D(e.discovered.actions).map((e) => I(e.descriptor)),
+		...dt.queries.map((e) => R(e.descriptor)),
+		...dt.mutations.map((e) => L(e.descriptor)),
+		...ft.queries.map((e) => R(e.descriptor)),
+		...ft.mutations.map((e) => L(e.descriptor)),
+		...x.queries.map((e) => R(e.descriptor)),
+		...x.mutations.map((e) => L(e.descriptor)),
+		...x.actions.map((e) => I(e.descriptor)),
+		...D(e.discovered.streams ?? []).map((e) => On(e.descriptor)),
 		...S.rpcs,
 		...(e.discovered.workflows ?? []).map((e) => Zr(e.definition)),
 		...ve ? [
-			L(B),
-			L(Nn),
-			L(V),
-			L(z),
-			L(jn),
-			L(R),
-			F(An),
-			F(Mn),
-			F(Pn),
-			F(Fn)
+			R(V),
+			R(Mn),
+			R(H),
+			R(B),
+			R(An),
+			R(z),
+			I(kn),
+			I(jn),
+			I(Nn),
+			I(Pn)
 		] : []
-	], Mt = Un.make(...jt).middleware(Tn).middleware(En), Nt = br({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Pt = e.dormancyTenantId ?? Xn, Ft = e.dormancy === "sleep" ? {
+	], jt = Hn.make(...Ot).middleware(wn).middleware(Tn), Mt = br({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Nt = e.dormancyTenantId ?? Yn, Pt = e.dormancy === "sleep" ? {
 		register: (t, n, r) => Rr(e.store, {
-			tenantId: r ?? Pt,
+			tenantId: r ?? Nt,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
 		cancel: (t, n) => or(e.store, {
-			tenantId: n ?? Pt,
+			tenantId: n ?? Nt,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, k = ye ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
+	} : void 0, A = ye ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...Ft === void 0 ? {} : { wakeups: Ft }
-	}), Rt = async (t, n) => {
-		await k.closeWorkflowChildrenForParent({
+		...Pt === void 0 ? {} : { wakeups: Pt }
+	}), Lt = async (t, n) => {
+		await A.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: A,
+			recorder: j,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -765,11 +766,11 @@ var Ti = (e, t, n = [], r = 0) => {
 				await p.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, zt = async (t, n, r) => {
+	}, Rt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: W("executionId", n),
+			predicate: G("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -780,7 +781,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await A.recordEvent({
+		a && await j.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -789,18 +790,18 @@ var Ti = (e, t, n = [], r = 0) => {
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Rt(n, "cancelled");
-	}, Bt = [
+		}), a && await Lt(n, "cancelled");
+	}, zt = [
 		...X(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? Je({
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? C({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: he,
-			..._e === void 0 ? {} : { resolveAuthority: _e }
+			resolveStartContext: pe,
+			...ge === void 0 ? {} : { resolveAuthority: ge }
 		}, (t, n, r) => {
-			let i = k.getWorkflowVersionMetadata(t.definition);
-			return k.wrapWorkflowExecuteWithRunRecording({
+			let i = A.getWorkflowVersionMetadata(t.definition);
+			return A.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -811,27 +812,27 @@ var Ti = (e, t, n = [], r = 0) => {
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Rt(e, t),
+				onParentClose: ({ executionId: e, status: t }) => Lt(e, t),
 				...Ge(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await f?.gate.release(e);
 				},
-				recorder: A,
-				pluginWorkflowStepLayer: lt,
+				recorder: j,
+				pluginWorkflowStepLayer: st,
 				recordRun: Lr
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
 		...Te === void 0 ? [] : [Te]
-	], Vt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Te === void 0 ? [] : ["voltro.deliverWebhook"]], Ht = Bt.length > 0 ? U.mergeAll(...Bt) : U.empty;
+	], Bt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Te === void 0 ? [] : ["voltro.deliverWebhook"]], Vt = zt.length > 0 ? W.mergeAll(...zt) : W.empty;
 	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Te !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Ht.pipe(U.provideMerge(e.workflowEngineLayer));
-		p = Ln.make(e.baseLayer === void 0 ? t : t.pipe(U.provideMerge(e.baseLayer))), await p.runPromise(H.void), (e.log ?? P({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Vt.length} entity type(s) registered`, { entities: Vt });
+		let t = Vt.pipe(W.provideMerge(e.workflowEngineLayer));
+		p = In.make(e.baseLayer === void 0 ? t : t.pipe(W.provideMerge(e.baseLayer))), await p.runPromise(U.void), (e.log ?? F({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Bt.length} entity type(s) registered`, { entities: Bt });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => p.runPromise(n.redriveFailedRun(e)), i = (e) => p.runPromise(n.resumeRunFromStep(e));
 		ce = await $e({
 			provider: _i(e.plugins ?? [])?.broadcast?.provider,
 			crossReplica: _i(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Be,
+			namespace: ze,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => p.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -839,14 +840,14 @@ var Ti = (e, t, n = [], r = 0) => {
 				op: e.op,
 				...e.origin === void 0 ? {} : { origin: e.origin }
 			})),
-			log: (e.log ?? P({ scope: "voltro:serve" })).child("workflow")
+			log: (e.log ?? F({ scope: "voltro:serve" })).child("workflow")
 		}), te = async (t) => {
-			let n = await oe({
+			let n = await se({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await A.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -858,13 +859,13 @@ var Ti = (e, t, n = [], r = 0) => {
 				activitiesReset: n.outcome.activitiesReset,
 				reason: n.outcome.reason
 			};
-		}, se = async (t) => {
-			let n = await De({
+		}, ne = async (t) => {
+			let n = await Oe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await A.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -882,7 +883,7 @@ var Ti = (e, t, n = [], r = 0) => {
 		let a = xr({
 			coordinator: (e.scheduleCoordination ?? "single") === "advisoryLock" ? hr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Wr,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), o = {
+		}), s = {
 			info: (e, t) => {
 				process.stdout.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			},
@@ -892,19 +893,19 @@ var Ti = (e, t, n = [], r = 0) => {
 			error: (e, t) => {
 				process.stderr.write(`[flow-control] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			}
-		}, s, l = () => {
-			if (s !== void 0) return s;
-			if (!(c === void 0 || A === void 0)) return s = re({
+		}, c, u = () => {
+			if (c !== void 0) return c;
+			if (!(o === void 0 || j === void 0)) return c = ie({
 				store: e.store,
-				log: N,
+				log: P,
 				workflows: e.discovered.workflows ?? [],
-				workflowsProxy: c,
+				workflowsProxy: o,
 				workflowRuntime: p,
-				workflowRunRecorder: A,
-				closeChildrenForParent: Rt
-			}), s;
+				workflowRunRecorder: j,
+				closeChildrenForParent: Lt
+			}), c;
 		};
-		d = l, f = rt({
+		l = u, f = nt({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -917,24 +918,24 @@ var Ti = (e, t, n = [], r = 0) => {
 				stalenessSweepIntervalMs: e.scheduling.stalenessSweepMs
 			},
 			workflows: e.discovered.workflows ?? [],
-			facade: () => c,
-			cancelRunWithReason: l,
-			recordRunEvent: () => A?.recordEvent,
+			facade: () => o,
+			cancelRunWithReason: u,
+			recordRunEvent: () => j?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
 			scheduleCoordinated: a,
 			onAbandoned: async (t) => {
 				await wt({
 					workflows: e.discovered.workflows ?? [],
-					facade: () => c,
-					log: o,
+					facade: () => o,
+					log: s,
 					...t
 				});
 			},
-			log: o
+			log: s
 		});
-		let u = f;
-		u !== void 0 && Fr(() => u.stop()), ee = Ke({
+		let d = f;
+		d !== void 0 && Fr(() => d.stop()), ee = qe({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -945,8 +946,8 @@ var Ti = (e, t, n = [], r = 0) => {
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => p === void 0 || k === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await p.runPromise(k.completeSuspendingSignal({
+			resumeSignal: () => p === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await p.runPromise(A.completeSuspendingSignal({
 					store: e.store,
 					target: kt(t, n),
 					signalName: r,
@@ -955,81 +956,81 @@ var Ti = (e, t, n = [], r = 0) => {
 			},
 			runEffect: (e) => p.runPromise(e),
 			scheduleCoordinated: a,
-			log: o
+			log: s
 		});
-		let ne = ee;
-		ne !== void 0 && Fr(() => ne.stop()), c = (e.discovered.workflows?.length ?? 0) > 0 ? Mr({
+		let re = ee;
+		re !== void 0 && Fr(() => re.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Mr({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => p.runPromise(e),
 			onEnqueue: () => ce?.publishWake(),
-			...u === void 0 ? {} : {
-				admitStart: u.gate.admitStart,
-				startPayloadSchema: u.gate.startPayloadSchema,
-				parkDelayedStart: u.gate.parkDelayed
+			...d === void 0 ? {} : {
+				admitStart: d.gate.admitStart,
+				startPayloadSchema: d.gate.startPayloadSchema,
+				parkDelayedStart: d.gate.parkDelayed
 			},
-			rememberStartContext: fe,
+			rememberStartContext: de,
 			signal: async (t, n, r) => {
-				let i = await k.sendWorkflowSignal({
+				let i = await A.sendWorkflowSignal({
 					store: e.store,
-					recorder: A,
+					recorder: j,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await p.runPromise(k.completeSuspendingSignal({
+				return await p.runPromise(A.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => k.sendWorkflowUpdate({
+			update: (t, n, r, i) => A.sendWorkflowUpdate({
 				store: e.store,
-				recorder: A,
+				recorder: j,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => ke(e.store, t),
-			retry: (t, n) => je({
+			listRuns: (t) => Ae(e.store, t),
+			retry: (t, n) => Me({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => p.runPromise(e)
 			}, t, n),
-			redrive: (t) => oe({
+			redrive: (t) => se({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let j = U.mergeAll(Mt.toLayer(D), Nt), Ut = O(D, e.discovered.queries.map((e) => e.descriptor.name), ve), Wt = U.mergeAll(Mt.toLayer(Ut), Nt), M = e.observability, Gt = await ar({
+	let M = W.mergeAll(jt.toLayer(O), Mt), Ht = k(O, e.discovered.queries.map((e) => e.descriptor.name), ve), Ut = W.mergeAll(jt.toLayer(Ht), Mt), N = e.observability, Wt = await ar({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...M && M.spanProcessors.length > 0 ? { extraSpanProcessors: M.spanProcessors } : {},
-		...M && M.metricReaders.length > 0 ? { extraMetricReaders: M.metricReaders } : {},
-		...M && Object.keys(M.resourceAttributes).length > 0 ? { resourceAttributes: M.resourceAttributes } : {},
-		...M && M.sampler !== void 0 ? { sampler: M.sampler } : {}
-	}), Kt = !1, qt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Jt, shutdown: Yt } = Gr({
-		group: Mt,
-		handlersLayer: j,
-		httpHandlersLayer: Wt,
+		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
+		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
+		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
+		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
+	}), Gt = !1, Kt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: qt, shutdown: Jt } = Gr({
+		group: jt,
+		handlersLayer: M,
+		httpHandlersLayer: Ut,
 		port: e.port ?? 4e3,
 		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: Gt.layer,
-		security: be(e),
-		...ct,
+		tracerLayer: Wt.layer,
+		security: xe(e),
+		...it,
 		healthCheck: {
-			isReady: () => Kt,
-			...qt ? { ping: qt } : {}
+			isReady: () => Gt,
+			...Kt ? { ping: Kt } : {}
 		},
-		...Ot.length > 0 ? { httpRoutes: Ot } : {},
+		...Dt.length > 0 ? { httpRoutes: Dt } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...Ae.size > 0 ? { webhookRoutes: Ae } : {},
+		...Ee.size > 0 ? { webhookRoutes: Ee } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), Xt = Ai(Jt);
-	if (await rr(Jt), (e.discovered.schedules?.length ?? 0) > 0) {
+	}), Yt = Ai(qt);
+	if (await rr(qt), (e.discovered.schedules?.length ?? 0) > 0) {
 		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? hr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Wr;
 		le = await Kr(e.discovered.schedules ?? [], {
 			store: e.store,
@@ -1039,7 +1040,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			armSelf: e.scheduleArmSelf ?? !0,
 			dormancy: e.dormancy ?? "always-on",
 			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => Je({
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => C({
 				subject: r,
 				traceId: t
 			}, e.store, void 0, `schedule:${n}`),
@@ -1059,9 +1060,9 @@ var Ti = (e, t, n = [], r = 0) => {
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
 		}), e.onSchedulerReady?.(le);
 	}
-	let N = e.log ?? P({ scope: "voltro:serve" }), Zt, Qt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Zt = Fe(e.discovered.subscribers ?? [], e.store, N.child("subscribe"), e.schemaRegistry, S.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = N.child("reaction"), n = async (n, r) => {
+	let P = e.log ?? F({ scope: "voltro:serve" }), Xt, Zt;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Xt = Ie(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, S.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = P.child("reaction"), n = async (n, r) => {
 			if (n.kind === "workflow") {
 				if (_ === void 0) {
 					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
@@ -1074,95 +1075,95 @@ var Ti = (e, t, n = [], r = 0) => {
 				}).start(n.workflow, e);
 				return;
 			}
-			await st(n.agent, r, {
+			await ot(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(ht(e, t, n)),
-				makeSubject: (e) => Dn(e),
+				runAction: (e, t, n) => Promise.resolve(pt(e, t, n)),
+				makeSubject: (e) => En(e),
 				now: () => Date.now(),
 				log: t
 			});
 		}, r = async (n, r) => {
 			try {
 				let { requireAiBudget: t } = await import("@voltro/ai");
-				return (await H.runPromise(H.either(t(e.store, {
+				return (await U.runPromise(U.either(t(e.store, {
 					tenantId: n,
 					limitUsd: r
 				}))))._tag === "Right";
 			} catch (e) {
 				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
 			}
-		}, i = dt(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		Qt = l(e.discovered.reactions ?? [], e.store, {
+		}, i = ut(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		Zt = u(e.discovered.reactions ?? [], e.store, {
 			runAct: n,
 			checkBudget: r,
 			claimRateSlot: (e) => i.claim(e)
 		}, t);
 	}
-	let $t;
-	(e.discovered.aggregates?.length ?? 0) > 0 && ($t = await Ee({
+	let Qt;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (Qt = await De({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: N.child("aggregate"),
+		log: P.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ye = U.succeed(Jn, $t.registry));
-	let en;
-	(e.discovered.expectations?.length ?? 0) > 0 && (en = er({
+	}), Je = W.succeed(qn, Qt.registry));
+	let $t;
+	(e.discovered.expectations?.length ?? 0) > 0 && ($t = er({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
-		log: N.child("expectation")
-	}), Xe = U.succeed(K, en.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = nr({
+		log: P.child("expectation")
+	}), Ye = W.succeed(Zn, $t.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = nr({
 		discovered: e.discovered.budgets ?? [],
-		log: N.child("finops")
-	}), Ze = U.succeed(Yn, n.registry));
-	let tn;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (tn = tr({
+		log: P.child("finops")
+	}), Xe = W.succeed(Jn, n.registry));
+	let en;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (en = tr({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
-		log: N.child("experiment")
-	}), et = U.succeed(q, tn.registry)), Kt = !0, e.bootTiming?.mark("ready"), {
+		log: P.child("experiment")
+	}), Ze = W.succeed(q, en.registry)), Gt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: Jt,
+		server: qt,
 		scheduler: le,
-		eventsSnapshot: ge(S.bus, S.declared),
+		eventsSnapshot: _e(S.bus, S.declared),
 		membersSnapshot: () => ({
 			members: We.membership.list(),
 			capturedAt: Date.now()
 		}),
-		agentTools: () => Ct,
-		rpcMetrics: () => C,
+		agentTools: () => St,
+		rpcMetrics: () => w,
 		webhooksService: () => we,
-		runCanceller: () => d(),
+		runCanceller: () => l(),
 		flowControlHealth: () => f?.cancelHealth(),
 		inferenceHealth: () => ee?.health(),
-		workflowWriteActions: () => _ === void 0 || A === void 0 ? void 0 : h({
+		workflowWriteActions: () => _ === void 0 || j === void 0 ? void 0 : h({
 			store: e.store,
-			log: N,
+			log: P,
 			workflows: e.discovered.workflows ?? [],
-			workflowsProxy: c,
+			workflowsProxy: o,
 			workflowRuntime: p,
-			workflowRunRecorder: A,
-			closeChildrenForParent: Rt
+			workflowRunRecorder: j,
+			closeChildrenForParent: Lt
 		}),
 		redriveWorkflowRun: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
-		resumeWorkflowRunFromStep: (e) => se ? se(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
+		resumeWorkflowRunFromStep: (e) => ne ? ne(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
-			Kt = !1, await Xt.drainRequests();
-			for (let e of Ne) try {
+			Gt = !1, await Yt.drainRequests();
+			for (let e of je) try {
 				await e();
 			} catch (e) {
-				N.warn("serve: teardown step failed", {}, e);
+				P.warn("serve: teardown step failed", {}, e);
 			}
-			await qe?.detach(), await We.detach(), $t?.detach(), en?.detach(), n?.detach(), tn?.detach(), Qt?.(), Zt?.(), await le?.shutdown(), r.close(), await ce?.detach(), await p?.dispose(), await Yt(), await Xt.finish();
+			await Ke?.detach(), await We.detach(), Qt?.detach(), $t?.detach(), n?.detach(), en?.detach(), Zt?.(), Xt?.(), await le?.shutdown(), r.close(), await ce?.detach(), await p?.dispose(), await Jt(), await Yt.finish();
 		}
 	};
-}, $ = P({ scope: "voltro:serve" }), qi = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Ji = Rt, Yi = async (e) => {
-	let t = vn(process.cwd());
-	if (Cn(t)) {
+}, $ = F({ scope: "voltro:serve" }), qi = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Ji = Rt, Yi = async (e) => {
+	let t = _n(process.cwd());
+	if (Sn(t)) {
 		let n;
 		try {
-			let e = await import(wn(t).href);
+			let e = await import(Cn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
@@ -1170,91 +1171,91 @@ var Ti = (e, t, n = [], r = 0) => {
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
 	return Xi(e);
-}, Xi = async (o) => {
-	let s = yn();
+}, Xi = async (s) => {
+	let c = vn();
 	e("serve");
 	try {
 		ai();
 	} catch (e) {
-		throw Vt(e instanceof Error ? e.message : String(e));
+		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let l = process.cwd(), u = await Ue(l), ne = zt({
+	let u = process.cwd(), d = await We(u), re = zt({
 		kind: "api",
-		configPort: u?.port,
+		configPort: d?.port,
 		env: process.env,
-		flagPort: Ji(o, "--port")
+		flagPort: Ji(s, "--port")
 	});
-	for (let e of ne.warnings) $.warn(e);
-	let re = ne.port;
-	Vr(zr(u?.secrets)), await Ht({
-		rawEnv: u?.env,
+	for (let e of re.warnings) $.warn(e);
+	let ie = re.port;
+	Vr(zr(d?.secrets)), await Vt({
+		rawEnv: d?.env,
 		appType: "api",
-		root: l,
+		root: u,
 		log: $,
 		generateTypes: !1
-	}), s.mark("config");
-	let m = (process.env.DB_DIALECT ?? u?.store ?? "memory").toLowerCase(), ie = (m === "mariadb" || m === "postgres" || m === "mssql") && (process.env.CDC ?? "1") !== "0", ae = m === "mariadb" ? "mariadb" : m === "mssql" ? "mssql" : void 0, oe = _n(l);
-	if (!r() && Cn(oe)) try {
-		let e = await import(wn(oe).href);
+	}), c.mark("config");
+	let m = (process.env.DB_DIALECT ?? d?.store ?? "memory").toLowerCase(), ae = (m === "mariadb" || m === "postgres" || m === "mssql") && (process.env.CDC ?? "1") !== "0", oe = m === "mariadb" ? "mariadb" : m === "mssql" ? "mssql" : void 0, se = gn(u);
+	if (!r() && Sn(se)) try {
+		let e = await import(Cn(se).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Sn(l, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[xn(u, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let h = await Ye(l), g = await Dt(h, { cdc: ie && ae !== void 0 }), de = ce(g);
+	let h = await Ye(u), g = await Dt(h, { cdc: ae && oe !== void 0 }), fe = le(g);
 	{
 		let e = /* @__PURE__ */ new Set([
 			...g.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
 			...g.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
 			...g.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
 		]);
-		Jt(qt(u?.plugins ?? []), [
+		qt(Kt(d?.plugins ?? []), [
 			...g.queries.map((e) => e.descriptor.name),
 			...g.mutations.map((e) => e.descriptor.name),
 			...g.actions.map((e) => e.descriptor.name),
 			...g.streams.map((e) => e.descriptor.name)
 		], e);
-		let t = se(g.serverOnlyLeaks, Ae(process.env, "strict"), lr, "`voltro serve`");
-		if (t.action === "fail") throw Vt(t.message ?? "");
+		let t = ce(g.serverOnlyLeaks, je(process.env, "strict"), lr, "`voltro serve`");
+		if (t.action === "fail") throw i(t.message ?? "");
 		t.action === "warn" && $.warn(t.message ?? "");
 	}
-	let pe = h.filter((e) => hn.test(e)), me = pe.length > 0 ? await mn(pe, $.child("webhooks")) : {
+	let me = h.filter((e) => mn.test(e)), he = me.length > 0 ? await pn(me, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, ge = fn(g.events), xe = me.outgoing.length + me.incoming.length + me.providers.length + ge.length === 0 ? void 0 : {
-		...me,
-		outgoing: [...me.outgoing, ...ge]
-	}, Ee = en({
+	}, _e = dn(g.events), Se = he.outgoing.length + he.incoming.length + he.providers.length + _e.length === 0 ? void 0 : {
+		...he,
+		outgoing: [...he.outgoing, ..._e]
+	}, De = $t({
 		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: ae,
-		declared: u?.schema
-	}), De = Xt({
-		gates: Ee,
+		cdcDialect: oe,
+		declared: d?.schema
+	}), Oe = Yt({
+		gates: De,
 		runtime: {
-			traces: ye(),
+			traces: be(),
 			undo: Jr()
 		}
 	});
-	if (De !== void 0) throw Vt(`serve: ${De}`);
-	let Oe = $t({
+	if (Oe !== void 0) throw i(`serve: ${Oe}`);
+	let ke = Qt({
 		mix: g.featureMix,
-		plugins: u?.plugins ?? [],
-		gates: Ee,
-		...ae ? { cdcDialect: ae } : {}
-	}), ke = u?.analytics !== void 0 && u.analytics.kind !== "noop" && m !== "memory" ? (await j(m)).makeSqlLayer(w()) : void 0, je = await Ie({
-		spec: u?.analytics,
-		sqlLayer: ke,
+		plugins: d?.plugins ?? [],
+		gates: De,
+		...oe ? { cdcDialect: oe } : {}
+	}), Ae = d?.analytics !== void 0 && d.analytics.kind !== "noop" && m !== "memory" ? (await M(m)).makeSqlLayer(E()) : void 0, Me = await x({
+		spec: d?.analytics,
+		sqlLayer: Ae,
 		log: $
 	}), y = (() => {
 		let e = new Set(g.tables.map((e) => e.tableName)), t = [...g.tables];
-		for (let n of [...Oe, ...je.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		for (let n of [...ke, ...Me.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of y) qn(e);
+	for (let e of y) Kn(e);
 	{
 		let e = ur(Yr(g.queries.map((e) => ({
 			name: e.descriptor.name,
@@ -1265,41 +1266,41 @@ var Ti = (e, t, n = [], r = 0) => {
 		}))));
 		e !== void 0 && $.warn(e);
 	}
-	let Me = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (qi(Me, m, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await j(m)).makeSqlLayer(w()), t = await H.runPromise(Rn.SqlClient.pipe(H.flatMap((e) => Vn(e, l)), H.provide(e), H.catchAll(() => H.succeed([]))));
+	let Ne = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (qi(Ne, m, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await M(m)).makeSqlLayer(E()), t = await U.runPromise(Ln.SqlClient.pipe(U.flatMap((e) => Bn(e, u)), U.provide(e), U.catchAll(() => U.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await H.runPromise(Rn.SqlClient.pipe(H.flatMap((e) => Hn(e, y, {
-			appliedBy: `serve:${Me}`,
+		let n = await U.runPromise(Ln.SqlClient.pipe(U.flatMap((e) => Vn(e, y, {
+			appliedBy: `serve:${Ne}`,
 			environment: "prod",
 			dialectId: m
-		})), H.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(Bn(n, m)), $.error(Zt({
-			gates: Ee,
+		})), U.provide(e)));
+		n.kind === "prod-mismatch" && ($.error(zn(n, m)), $.error(Xt({
+			gates: De,
 			nodeEnv: process.env.NODE_ENV,
-			cdcDialect: ae,
-			declared: u?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Bn(n, m));
+			cdcDialect: oe,
+			declared: d?.schema
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(zn(n, m));
 	}
-	await Kt({
+	await Gt({
 		dialectId: m,
 		tables: y,
-		mode: M(u?.reactiveTriggers),
-		lockSchema: w().schema,
-		makeLayer: async () => (await j(m)).makeSqlLayer(w()),
+		mode: N(d?.reactiveTriggers),
+		lockSchema: E().schema,
+		makeLayer: async () => (await M(m)).makeSqlLayer(E()),
 		log: {
 			info: (e, t) => $.info(e, t ?? {}),
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let Fe = jr(y);
-	s.mark("discover");
-	let b = await C(u, void 0), Le = Qr(b, m);
+	let Ie = jr(y);
+	c.mark("discover");
+	let b = await T(d, void 0), Le = Qr(b, m);
 	for (let e of Xe({
-		dialect: String(u?.store ?? process.env.DB_DIALECT ?? "postgres"),
+		dialect: String(d?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: _i(u?.plugins ?? [])?.broadcast.crossReplica === !0,
+		crossReplicaBus: _i(d?.plugins ?? [])?.broadcast.crossReplica === !0,
 		tables: g.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
@@ -1310,8 +1311,8 @@ var Ti = (e, t, n = [], r = 0) => {
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = S(Ot({
-			tables: Wn().map((e) => ({ tableName: e.tableName })),
+		let e = Ke(Ot({
+			tables: Un().map((e) => ({ tableName: e.tableName })),
 			queries: g.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
@@ -1319,147 +1320,147 @@ var Ti = (e, t, n = [], r = 0) => {
 		}));
 		e !== void 0 && $.warn(e);
 	}
-	u?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = u.cache), u?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = u.cacheRedisUrl), u?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = u.cacheRedisDriver), u?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = u.cacheKeyPrefix);
-	let { service: ze, invalidationBus: He, snapshotCache: Ge, cache: Ke, semantic: $e, evictSource: rt, backend: it, stats: ot, dispose: st } = await ut({
+	d?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = d.cache), d?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = d.cacheRedisUrl), d?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = d.cacheRedisDriver), d?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = d.cacheKeyPrefix);
+	let { service: Be, invalidationBus: Ue, snapshotCache: Ge, cache: qe, semantic: $e, evictSource: nt, backend: rt, stats: at, dispose: ot } = await lt({
 		env: process.env,
-		semantic: u?.cacheSemantic ?? !1
+		semantic: d?.cacheSemantic ?? !1
 	});
-	$e !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${it}` + (it === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), b.onChange((e) => {
-		if (H.runFork(He.publish(e.table)), rt !== void 0) {
+	$e !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${rt}` + (rt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), b.onChange((e) => {
+		if (U.runFork(Ue.publish(e.table)), nt !== void 0) {
 			let t = (e.new ?? e.old)?.id;
-			rt({
+			nt({
 				table: e.table,
 				op: e.op,
 				...t === void 0 ? {} : { id: t }
 			});
 		}
-	}), u?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = u.kv), u?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = u.kvRedisUrl), u?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = u.kvKeyPrefix);
-	let { kv: dt, service: _t } = await yr({ store: b });
-	$.info(Ti(Wt(), Di(), m === "postgres" && (process.env.CDC ?? "1") !== "0" ? [{ reason: "CDC LISTEN consumer" }] : [], t.replicationSnapshot()?.replicaCount ?? 0)), s.mark("store");
-	let bt = $n({
+	}), d?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = d.kv), d?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = d.kvRedisUrl), d?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = d.kvKeyPrefix);
+	let { kv: ut, service: gt } = await yr({ store: b });
+	$.info(Ti(Ut(), Di(), m === "postgres" && (process.env.CDC ?? "1") !== "0" ? [{ reason: "CDC LISTEN consumer" }] : [], t.replicationSnapshot()?.replicaCount ?? 0)), c.mark("store");
+	let yt = $n({
 		store: b,
-		sink: je.sink,
+		sink: Me.sink,
 		log: $
-	}), wt = We({
+	}), wt = S({
 		store: b,
 		dialect: m,
 		log: { info: (e) => $.info(e) }
-	}), O = u?.plugins ?? [], kt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, It, Lt;
-	m !== "memory" && (It = Ln.make((await j(m)).makeSqlLayer(w())), Lt = await It.runPromise(Rn.SqlClient));
+	}), k = d?.plugins ?? [], kt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ft, It;
+	m !== "memory" && (Ft = In.make((await M(m)).makeSqlLayer(E())), It = await Ft.runPromise(Ln.SqlClient));
 	let Rt = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(m) ? hr(b, kt, $) : Wr, pn = Re(u?.scheduling), vn = xr({
-		maxIdleIntervalMs: pn.pollCeilingMs,
+	].includes(m) ? hr(b, kt, $) : Wr, fn = ze(d?.scheduling), _n = xr({
+		maxIdleIntervalMs: fn.pollCeilingMs,
 		coordinator: Rt,
 		replicaId: kt,
 		log: $
-	}), bn = [], P = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Tn = _i(u?.plugins ?? [])?.broadcast?.provider, En = Qe(u?.plugins, u?.name ?? xn(l));
+	}), yn = [], F = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, wn = _i(d?.plugins ?? [])?.broadcast?.provider, Tn = Qe(d?.plugins, d?.name ?? bn(u));
 	{
-		let e = tt(u?.plugins, u?.name ?? xn(l));
+		let e = tt(d?.plugins, d?.name ?? bn(u));
 		e !== void 0 && $.warn(e);
 	}
-	let F = At(u?.plugins, {
-		instanceId: P,
-		namespace: En,
+	let I = At(d?.plugins, {
+		instanceId: F,
+		namespace: Tn,
 		meta: { mode: "serve" },
 		logger: $
-	}), Dn = {
-		...Lt ? { sql: Lt } : {},
-		instanceId: P,
-		membership: F.membership,
-		...Tn === void 0 ? {} : { broadcast: Tn },
-		broadcastChannels: { presence: gi(En, "presence") },
+	}), En = {
+		...It ? { sql: It } : {},
+		instanceId: F,
+		membership: I.membership,
+		...wn === void 0 ? {} : { broadcast: wn },
+		broadcastChannels: { presence: gi(Tn, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = vn(e, t, n);
-			return bn.push(r), r;
+			let r = _n(e, t, n);
+			return yn.push(r), r;
 		}
 	};
-	for (let e of O) e.bindDataStore?.(Le, Dn);
-	c({
+	for (let e of k) e.bindDataStore?.(Le, En);
+	l({
 		store: b,
-		...ct(),
+		...st(),
 		log: $
 	});
-	let On = O.filter((e) => typeof e.onChangeEvent == "function");
-	if (On.length > 0) {
+	let Dn = k.filter((e) => typeof e.onChangeEvent == "function");
+	if (Dn.length > 0) {
 		let e = b.changeScope ?? "local";
 		b.onChange((t) => {
-			let n = _e(t, e);
-			for (let e of On) H.runFork(e.onChangeEvent(n).pipe(H.catchAllCause((t) => H.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: In.pretty(t) })))));
+			let n = _(t, e);
+			for (let e of Dn) U.runFork(e.onChangeEvent(n).pipe(U.catchAllCause((t) => U.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Fn.pretty(t) })))));
 		});
 	}
-	let I = le({
-		plugins: O,
-		appName: u?.name ?? "voltro-api",
+	let L = ue({
+		plugins: k,
+		appName: d?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	O.length && await I.activate(), s.mark("plugins");
-	let L = await I.gatherObservability(), kn = {
+	k.length && await L.activate(), c.mark("plugins");
+	let R = await L.gatherObservability(), On = {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}, An, jn = await vt(b, u, m, En, kn, (e, t) => {
-		An?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), R = u?.apiKeys, Mn = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", z = R ? cr(b) : void 0, B = z ? _r({ flush: vr(z) }) : void 0;
-	B && Fr(() => B.shutdown());
-	let V = z ? gr(z, {
-		prefix: Mn,
-		...B ? { usage: B } : {}
-	}) : void 0, Nn = V ? [dr(V, { prefix: Mn })] : [], Pn = D([...u?.auth?.strategies ?? [], ...Nn], mi(u?.plugins ?? []), u?.auth?.anonymousTenantRequired ?? !1, u?.auth, () => Le), Fn = [...u?.restRoutes ?? [], ...V ? Qn(V, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], Un = qe(u?.idempotency, b), Gn = O.map((e) => e.services).filter((e) => e !== void 0), W = U.mergeAll(xt({
-		analyticsLayer: je.layer,
-		cacheService: ze,
-		kvService: _t,
+	}, kn, An = await vt(b, d, m, Tn, On, (e, t) => {
+		kn?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), z = d?.apiKeys, jn = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", B = z ? cr(b) : void 0, V = B ? _r({ flush: vr(B) }) : void 0;
+	V && Fr(() => V.shutdown());
+	let H = B ? gr(B, {
+		prefix: jn,
+		...V ? { usage: V } : {}
+	}) : void 0, Mn = H ? [dr(H, { prefix: jn })] : [], Nn = bt([...d?.auth?.strategies ?? [], ...Mn], mi(d?.plugins ?? []), d?.auth?.anonymousTenantRequired ?? !1, d?.auth, () => Le), Pn = [...d?.restRoutes ?? [], ...H ? Qn(H, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], Hn = C(d?.idempotency, b), Wn = k.map((e) => e.services).filter((e) => e !== void 0), G = W.mergeAll(xt({
+		analyticsLayer: Me.layer,
+		cacheService: Be,
+		kvService: gt,
 		...$e === void 0 ? {} : { semanticCache: $e },
-		pluginServices: Gn,
-		userLayers: u?.layers ?? []
-	}), ht(u?.http ?? {})), G = await at({
+		pluginServices: Wn,
+		userLayers: d?.layers ?? []
+	}), mt(d?.http ?? {})), K = await it({
 		files: h,
 		store: b,
 		log: $,
 		seedPolicy: "report",
-		seedPattern: cn,
-		loadSeedFiles: Gt,
-		startupPattern: nn,
+		seedPattern: sn,
+		loadSeedFiles: Wt,
+		startupPattern: tn,
 		loadStartupFiles: a,
-		runStartups: i,
-		emailPattern: Be,
-		loadEmailFiles: T,
+		runStartups: o,
+		emailPattern: Ve,
+		loadEmailFiles: _t,
 		registerEmailTemplates: hi
 	});
-	(G.startupCount > 0 || G.emailCount > 0) && $.info("boot lifecycle", {
-		startups: G.startupCount,
-		emailTemplates: G.emailCount
-	}), G.startups !== void 0 && Fr(async () => {
-		await G.startups.stop();
+	(K.startupCount > 0 || K.emailCount > 0) && $.info("boot lifecycle", {
+		startups: K.startupCount,
+		emailTemplates: K.emailCount
+	}), K.startups !== void 0 && Fr(async () => {
+		await K.startups.stop();
 	});
-	let Jn = gt({
+	let qn = ht({
 		schedules: St({
 			schedules: g.schedules,
-			seeds: G.seeds,
+			seeds: K.seeds,
 			store: b,
 			log: $.child("seeds")
 		}),
 		workflows: g.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), Yn = u?.scheduling ?? {}, Xn = Yn.trigger ?? "self", Zn = /* @__PURE__ */ new Set([
+	}), Jn = d?.scheduling ?? {}, Yn = Jn.trigger ?? "self", Xn = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), K = Yn.coordination ?? (Zn.has(m) ? "advisoryLock" : "single"), q = K === "cluster" && Zn.has(m), er = q ? "cluster" : K === "advisoryLock" && Zn.has(m) ? "advisoryLock" : "single";
-	K === "cluster" && !q && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), K === "advisoryLock" && !Zn.has(m) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let tr, nr = g.workflows.length > 0 || g.workflowWorkers.length > 0 || g.eventTriggers.length > 0 || (xe?.outgoing.length ?? 0) > 0 || q, rr;
+	]), Zn = Jn.coordination ?? (Xn.has(m) ? "advisoryLock" : "single"), q = Zn === "cluster" && Xn.has(m), er = q ? "cluster" : Zn === "advisoryLock" && Xn.has(m) ? "advisoryLock" : "single";
+	Zn === "cluster" && !q && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Zn === "advisoryLock" && !Xn.has(m) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let tr, nr = g.workflows.length > 0 || g.workflowWorkers.length > 0 || g.eventTriggers.length > 0 || (Se?.outgoing.length ?? 0) > 0 || q, rr;
 	if (nr) {
 		if (m === "mssql") {
-			let e = await dn(process.cwd());
+			let e = await un(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = q ? Jn.filter((e) => (e.trigger ?? Xn) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = q ? qn.filter((e) => (e.trigger ?? Yn) === "self").map((e) => t({
 			name: e.name,
 			cron: sr(e),
 			execute: async () => {
@@ -1467,9 +1468,9 @@ var Ti = (e, t, n = [], r = 0) => {
 			}
 		})) : [];
 		rr = m === "memory" ? e.layerMemory : await (async () => {
-			let e = await j(m), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+			let e = await M(m), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(w()),
+				sqlClientLayer: e.makeSqlLayer(E()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -1478,17 +1479,17 @@ var Ti = (e, t, n = [], r = 0) => {
 			});
 		})();
 	}
-	let J = ue(O, gn()), ir = h.filter((e) => /\.subscribe\.tsx?$/.test(e)), Y = ir.length > 0 ? await Ne(ir, $) : [], ar = h.filter((e) => /\.reaction\.tsx?$/.test(e)), or = ar.length > 0 ? await he(ar, $) : [], fr = h.filter((e) => on.test(e)), pr = fr.length > 0 ? await E(fr, $) : [], mr = h.filter((e) => /\.aggregate\.tsx?$/.test(e)), br = mr.length > 0 ? await p(mr, $) : [], Sr = ve();
+	let J = de(k, hn()), ir = h.filter((e) => /\.subscribe\.tsx?$/.test(e)), Y = ir.length > 0 ? await Pe(ir, $) : [], ar = h.filter((e) => /\.reaction\.tsx?$/.test(e)), or = ar.length > 0 ? await ge(ar, $) : [], fr = h.filter((e) => an.test(e)), pr = fr.length > 0 ? await O(fr, $) : [], mr = h.filter((e) => /\.aggregate\.tsx?$/.test(e)), br = mr.length > 0 ? await te(mr, $) : [], Sr = ye();
 	if (br.length > 0 && m !== "memory") try {
-		Sr = lt((await j(m)).makeSqlLayer(w()));
+		Sr = ct((await M(m)).makeSqlLayer(E()));
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Cr = m === "memory" ? Wr : hr(b, `aggregate@${process.pid}`, $), wr = h.filter((e) => sn.test(e)), Tr = wr.length > 0 ? await ee(wr, $) : [], Er = h.filter((e) => an.test(e)), Dr = Er.length > 0 ? await Te(Er, $) : [], Or = h.filter((e) => rn.test(e)), kr = Or.length > 0 ? await Pt(Or, $) : [], Ar = [], Mr = [], Nr = h.filter((e) => Qt.test(e));
+	let Cr = m === "memory" ? Wr : hr(b, `aggregate@${process.pid}`, $), wr = h.filter((e) => on.test(e)), Tr = wr.length > 0 ? await f(wr, $) : [], Er = h.filter((e) => rn.test(e)), Dr = Er.length > 0 ? await v(Er, $) : [], Or = h.filter((e) => nn.test(e)), kr = Or.length > 0 ? await Pt(Or, $) : [], Ar = [], Mr = [], Nr = h.filter((e) => Zt.test(e));
 	if (Nr.length > 0) {
-		let e = $.child("agent"), t = h.filter((e) => N.test(e));
-		t.length > 0 && await tn(t, e);
-		let n = await Yt(Nr, e);
+		let e = $.child("agent"), t = h.filter((e) => P.test(e));
+		t.length > 0 && await en(t, e);
+		let n = await Jt(Nr, e);
 		for (let e of n.agents) for (let t of Je(e)) (t.kind === "action" ? Ar : Mr).push({
 			file: t.file,
 			descriptor: t.descriptor,
@@ -1496,38 +1497,38 @@ var Ti = (e, t, n = [], r = 0) => {
 		});
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
-	s.mark("workflow");
+	c.mark("workflow");
 	let X = () => {
 		let e = Z.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, Pr = Kn({
+	}, Pr = Gn({
 		dialect: m,
-		...w()
-	}), Ir = m === "memory" ? void 0 : (await j(m)).makeSqlLayer(w()), Lr = async () => Et({
+		...E()
+	}), Ir = m === "memory" ? void 0 : (await M(m)).makeSqlLayer(E()), Lr = async () => Et({
 		sqlLayer: Ir,
 		declared: y,
 		log: $
 	}), Rr = {
 		kind: "api",
 		meta: {
-			name: u?.name ?? "voltro-api",
+			name: d?.name ?? "voltro-api",
 			voltroVersion: Tt,
-			port: re,
+			port: ie,
 			mode: "start",
 			store: m,
-			cdc: ie ? "on" : "off",
+			cdc: ae ? "on" : "off",
 			...Pr === void 0 ? {} : { databaseId: Pr }
 		},
-		rpc: pt(g, l),
-		workflows: nt(g, l),
+		rpc: ft(g, u),
+		workflows: w(g, u),
 		migrations: Lr,
 		events: () => Z.eventsSnapshot(),
 		agentTools: () => Z.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
-			accessGate: de,
-			config: u,
+			accessGate: fe,
+			config: d,
 			serverOnlyLeaks: g.serverOnlyLeaks,
 			migrations: Lr
 		}),
@@ -1536,52 +1537,52 @@ var Ti = (e, t, n = [], r = 0) => {
 			if (!tr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
 			return { runId: await tr.fireNow(e, t) ?? null };
 		},
-		inspectBackfillSchedule: te({
+		inspectBackfillSchedule: ne({
 			getHandle: () => tr,
-			getSchedules: () => Jn
+			getSchedules: () => qn
 		}),
-		...xe === void 0 ? {} : { webhooks: () => _({
+		...Se === void 0 ? {} : { webhooks: () => ve({
 			store: b,
-			discoveredWebhooks: xe
+			discoveredWebhooks: Se
 		}) },
 		plugins: () => ({
-			plugins: I.snapshot(),
+			plugins: L.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => Bt(u?.name ?? xn(l), {
-			...u?.env !== void 0 && ii(u.env) ? { contract: u.env } : {},
-			plugins: u?.plugins ?? []
+		env: () => Bt(d?.name ?? bn(u), {
+			...d?.env !== void 0 && ii(d.env) ? { contract: d.env } : {},
+			plugins: d?.plugins ?? []
 		}),
-		dataCache: () => Ve({
-			stats: ot,
-			backendKind: it
+		dataCache: () => He({
+			stats: at,
+			backendKind: rt
 		}),
-		subscriptions: () => Ft(() => An),
-		inspectTables: () => fe(g.tables),
-		inspectRows: Ce({
+		subscriptions: () => A(() => kn),
+		inspectTables: () => pe(g.tables),
+		inspectRows: we({
 			store: b,
 			tables: g.tables,
 			mask: !0
 		}),
 		metrics: (e) => Z.rpcMetrics().snapshot(e),
-		cluster: () => k({
+		cluster: () => j({
 			store: b,
 			dialect: m,
 			useClusterCron: q,
-			scheduleCoordChoice: K
+			scheduleCoordChoice: Zn
 		}),
-		inspectSchedules: () => v({
-			schedules: Jn,
-			defaultTrigger: Xn,
+		inspectSchedules: () => Ee({
+			schedules: qn,
+			defaultTrigger: Yn,
 			coordination: er
 		}),
 		inspectScheduleRuns: (e) => Nt(b, e),
-		...d(b, {
-			controls: mt(g.workflows ?? []),
+		...ee(b, {
+			controls: pt(g.workflows ?? []),
 			active: (g.workflows?.length ?? 0) > 0,
 			cancellation: () => Z.flowControlHealth()
 		}),
-		webhookActions: we(() => Z.webhooksService()),
+		webhookActions: Te(() => Z.webhooksService()),
 		inspectStartWorkflow: (e) => X().inspectStartWorkflow(e),
 		inspectCancelWorkflowRun: (e) => X().inspectCancelWorkflowRun(e),
 		inspectSuspendWorkflowRun: (e) => X().inspectSuspendWorkflowRun(e),
@@ -1595,7 +1596,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			active: (g.workflows?.length ?? 0) > 0,
 			dispatcher: () => Z.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...yt({
+		...D({
 			store: b,
 			cancelRun: async (e) => await Z.runCanceller()?.(e) ?? !1,
 			retryRun: async (e) => X().inspectRetryWorkflowRun({ runId: e }),
@@ -1604,11 +1605,11 @@ var Ti = (e, t, n = [], r = 0) => {
 		}),
 		inspectRedriveWorkflowRun: (e) => Z.redriveWorkflowRun(e),
 		inspectResumeWorkflowRunFromStep: (e) => Z.resumeWorkflowRunFromStep(e)
-	}, Br = (process.env.VOLTRO_TENANT_ISOLATION ?? u?.tenancy?.isolation) === "namespace", Hr = Br && m !== "memory" ? await (async () => {
-		let e = await j(m);
+	}, Br = (process.env.VOLTRO_TENANT_ISOLATION ?? d?.tenancy?.isolation) === "namespace", Hr = Br && m !== "memory" ? await (async () => {
+		let e = await M(m);
 		return Ct({
 			tables: y,
-			sqlLayer: e.makeSqlLayer(w()),
+			sqlLayer: e.makeSqlLayer(E()),
 			dialect: m,
 			options: { retryFilter: e.retryFilter },
 			log: {
@@ -1616,10 +1617,10 @@ var Ti = (e, t, n = [], r = 0) => {
 				error: (e, t, n) => $.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, Ur = await ft({
-		input: u?.tenancy?.residency,
+	})() : void 0, Ur = await dt({
+		input: d?.tenancy?.residency,
 		namespaceIsolationOn: Br,
-		makeStoreForUrl: (e, t) => C(u, void 0, Ut(w(), t)),
+		makeStoreForUrl: (e, t) => T(d, void 0, Ht(E(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
@@ -1629,10 +1630,10 @@ var Ti = (e, t, n = [], r = 0) => {
 		await Ur.close();
 	});
 	let Z = await Ki({
-		bootTiming: s,
-		broadcastNamespace: En,
+		bootTiming: c,
+		broadcastNamespace: Tn,
 		scheduling: (() => {
-			let e = pn;
+			let e = fn;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
@@ -1640,26 +1641,26 @@ var Ti = (e, t, n = [], r = 0) => {
 				stalenessSweepMs: e.stalenessSweepMs,
 				disarmWhenIdle: et({
 					changeScope: b.changeScope,
-					broadcastAttached: jn !== void 0
+					broadcastAttached: An !== void 0
 				})
 			};
 		})(),
-		...u?.workflows?.staleness === void 0 ? {} : { workflowStaleness: u.workflows.staleness },
-		...u?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: u.workflows.suspendSignalHintMs },
-		workflowRecording: Mt(u?.workflows?.recording),
+		...d?.workflows?.staleness === void 0 ? {} : { workflowStaleness: d.workflows.staleness },
+		...d?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: d.workflows.suspendSignalHintMs },
+		workflowRecording: Mt(d?.workflows?.recording),
 		membership: {
-			...F,
-			instanceId: P
+			...I,
+			instanceId: F
 		},
 		security: {
-			defaultDeny: A(u),
-			...be(u)
+			defaultDeny: Lt(d),
+			...xe(d)
 		},
-		approvals: { defaultExpiryMs: Pe(u) },
-		...u?.plugins === void 0 ? {} : { plugins: u.plugins },
-		...Un ? { idempotency: Un } : {},
-		restRoutes: Fn,
-		appProcedures: de,
+		approvals: { defaultExpiryMs: Fe(d) },
+		...d?.plugins === void 0 ? {} : { plugins: d.plugins },
+		...Hn ? { idempotency: Hn } : {},
+		restRoutes: Pn,
+		appProcedures: fe,
 		discovered: {
 			queries: [...g.queries, ...Mr],
 			mutations: g.mutations,
@@ -1669,7 +1670,7 @@ var Ti = (e, t, n = [], r = 0) => {
 			workflows: g.workflows,
 			workflowWorkers: g.workflowWorkers,
 			eventTriggers: g.eventTriggers,
-			schedules: Jn,
+			schedules: qn,
 			subscribers: Y,
 			outboxHandlers: pr,
 			connections: g.connections,
@@ -1678,48 +1679,48 @@ var Ti = (e, t, n = [], r = 0) => {
 			expectations: Tr,
 			budgets: Dr,
 			experiments: kr,
-			...xe === void 0 ? {} : { webhooks: xe }
+			...Se === void 0 ? {} : { webhooks: Se }
 		},
 		log: $,
-		analytics: je.sink,
+		analytics: Me.sink,
 		aggregateStorage: Sr,
 		aggregateCoordinator: Cr,
 		store: b,
-		kv: dt,
-		cache: Ke,
+		kv: ut,
+		cache: qe,
 		snapshotCache: Ge,
-		...u?.reactive === void 0 ? {} : { reactive: u.reactive },
-		schemaRegistry: Fe,
+		...d?.reactive === void 0 ? {} : { reactive: d.reactive },
+		schemaRegistry: Ie,
 		tenantScopedTables: g.tenantScopedTables,
 		softDeleteScopedTables: g.softDeleteScopedTables,
-		dataTransferSnapshot: zn(y),
+		dataTransferSnapshot: Rn(y),
 		dataTransferDialect: m,
 		...Hr === void 0 ? {} : { ensureTenantProvisioned: Hr.ensure },
 		...Ur === void 0 ? {} : { resolveResidentStore: Ur.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? u?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Pn({
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? d?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: (e, t) => Nn({
 			headers: e,
 			clientId: t
 		}),
-		...u?.auth === void 0 ? {} : { authority: u.auth },
-		...u?.agents === void 0 ? {} : { agents: u.agents },
-		httpRoutes: O.flatMap((e) => e.httpRoutes ?? []),
+		...d?.auth === void 0 ? {} : { authority: d.auth },
+		...d?.agents === void 0 ? {} : { agents: d.agents },
+		httpRoutes: k.flatMap((e) => e.httpRoutes ?? []),
 		getStore: () => Le,
-		...W ? { baseLayer: W } : {},
+		...G ? { baseLayer: G } : {},
 		...rr === void 0 ? {} : { workflowEngineLayer: rr },
-		scheduleDefaultTrigger: Xn,
+		scheduleDefaultTrigger: Yn,
 		scheduleCoordination: er,
 		scheduleArmSelf: !q,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : u?.dormancy ?? "always-on",
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : d?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
 		...J === void 0 ? {} : { scheduleFireInterceptor: J },
 		onSchedulerReady: (e) => {
 			tr = e;
 		},
-		inspectRoute: { handle: async (e, t, n, r) => await f(e, Rr, t, {
+		inspectRoute: { handle: async (e, t, n, r) => await p(e, Rr, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await un(e, Rr, t, { method: n }) : null) ?? ln(e, Rr, t, {
+		}) || ((n === "GET" ? await ln(e, Rr, t, { method: n }) : null) ?? cn(e, Rr, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) ?? {
@@ -1727,19 +1728,19 @@ var Ti = (e, t, n = [], r = 0) => {
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
-		...u?.name === void 0 ? {} : { appName: u.name },
-		observability: L,
-		port: re,
-		...u?.transport?.wsPath ? { path: u.transport.wsPath } : {}
+		...d?.name === void 0 ? {} : { appName: d.name },
+		observability: R,
+		port: ie,
+		...d?.transport?.wsPath ? { path: d.transport.wsPath } : {}
 	});
-	return An = Z.dispatcher, jt(x([
+	return kn = Z.dispatcher, jt(Re([
 		g.queries,
 		g.mutations,
 		g.actions,
 		g.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${re}`, {
+	}), $.info(`API listening on :${ie}`, {
 		dialect: m,
 		queries: g.queries.length,
 		mutations: g.mutations.length,
@@ -1747,16 +1748,16 @@ var Ti = (e, t, n = [], r = 0) => {
 		streams: g.streams.length,
 		workflows: g.workflows.length,
 		workflowWorkers: g.workflowWorkers.length,
-		schedules: Jn.length,
+		schedules: qn.length,
 		scheduleCoordination: er
-	}), s.finish($), Fr(async () => {
-		for (let e of bn) e.stop();
+	}), c.finish($), Fr(async () => {
+		for (let e of yn) e.stop();
 		wt.stop();
 		try {
-			await Z.close(), st(), It?.dispose(), await I.deactivate(), await jn?.close(), await Se({
-				mirror: bt,
+			await Z.close(), ot(), Ft?.dispose(), await L.deactivate(), await An?.close(), await Ce({
+				mirror: yt,
 				log: $
-			}), await je.dispose(), await b.close?.();
+			}), await Me.dispose(), await b.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}