@voltro/cli 0.39.0 → 0.40.0

package/dist/{serveCommand-B6TATyCj.js → serveCommand-Dqb9Ku1-.js}

@@ -3,44 +3,44 @@ import { t } from "./frameworkInspectState-CX2250XB.js";
 import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
-import { $ as s, $t as c, A as l, At as u, B as d, C as f, Ct as p, D as ee, Dt as te, E as ne, Et as m, F as re, Ft as h, G as g, Gt as ie, H as ae, I as oe, It as se, J as ce, Jt as _, K as le, Kt as v, L as ue, Lt as de, M as fe, Mt as y, N as pe, Nt as me, O as he, Ot as ge, P as _e, Pt as ve, Q as ye, Qt as be, R as xe, Rt as b, S as Se, Sn as Ce, St as we, T as Te, Tt as Ee, U as De, Ut as x, V as Oe, Vt as ke, W as Ae, Wt as je, X as Me, Xt as Ne, Y as Pe, Yt as Fe, Z as Ie, Zt as S, _ as Le, _n as Re, _t as C, an as ze, at as Be, b as Ve, bn as He, bt as Ue, c as We, cn as w, ct as Ge, dn as Ke, dt as qe, en as Je, et as Ye, f as Xe, fn as Ze, ft as Qe, g as $e, gn as et, gt as tt, h as nt, ht as rt, i as it, in as at, it as ot, j as st, jt as ct, k as lt, kt as ut, ln as T, lt as dt, m as ft, mn as pt, mt as E, nn as D, nt as mt, o as O, on as ht, ot as gt, p as _t, pn as vt, pt as yt, q as bt, qt as xt, r as St, rn as Ct, rt as wt, sn as Tt, st as Et, t as Dt, tn as Ot, tt as kt, u as At, un as jt, ut as Mt, v as Nt, vn as k, vt as A, w as j, wt as Pt, x as Ft, xn as It, xt as Lt, y as Rt, yn as zt, yt as Bt, zt as Vt } from "./dev-gqpnzVhI.js";
-import { n as Ht } from "./cliArgs-D4p8n7EE.js";
-import { r as Ut } from "./appPort-B_HpJ_ck.js";
-import { at as Wt, st as M } from "./webDev-CTpSY-e_.js";
-import { r as N } from "./dialectDriver-czCHYpeH.js";
-import { i as Gt, n as Kt } from "./connectionConfig-Bk9IC7D0.js";
-import { c as qt, n as Jt, o as Yt } from "./seedRunner-IdHEprqf.js";
-import { C as P, S as Xt, _ as Zt, d as Qt, g as $t, l as en, m as tn, r as nn, u as rn, v as an } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { S as on, c as sn, n as cn, p as ln, s as un, x as dn } from "./fileConventions-Cof68_BL.js";
-import { h as fn, o as pn } from "./inspect-B7U7Cl_Z.js";
-import { n as mn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as hn, n as gn, r as _n, t as vn } from "./webhookDiscovery-CphsQe59.js";
-import { t as yn } from "./inspectMetrics-CfdKLh6t.js";
-import { r as bn, u as xn } from "./apiBuild-DGalUk9v.js";
-import { t as Sn } from "./bootTiming-BdyP9nYw.js";
-import { t as Cn } from "./dataProfile-dW-PsfLB.js";
-import { basename as wn, join as Tn } from "node:path";
-import { existsSync as En } from "node:fs";
-import { pathToFileURL as Dn } from "node:url";
-import { createLogger as F } from "@voltro/logger";
-import { AuthMiddleware as On, ConnectionInfoMiddleware as kn, actionToRpc as I, anonymousSubject as An, isWireReachable as jn, mutationToRpc as L, queryToRpc as R, streamToRpc as Mn, workflowCancelDescriptor as Nn, workflowDomainEventsQueryDescriptor as Pn, workflowEventDeliveriesQueryDescriptor as z, workflowResumeDescriptor as Fn, workflowRunEventsQueryDescriptor as B, workflowRunQueryDescriptor as V, workflowRunStepsQueryDescriptor as H, workflowRunsQueryDescriptor as In, workflowSignalDescriptor as Ln, workflowUpdateDescriptor as Rn } from "@voltro/protocol";
-import { Cause as zn, Effect as U, Layer as W, ManagedRuntime as Bn } from "effect";
+import { $ as s, $t as c, A as l, At as u, B as d, C as f, Ct as p, D as ee, Dt as te, E as ne, Et as m, F as re, Ft as h, G as g, Gt as ie, H as _, I as ae, It as oe, J as se, Jt as v, K as ce, Kt as y, L as le, Lt as ue, M as de, Mt as b, N as fe, Nt as pe, O as me, Ot as he, P as ge, Pt as _e, Q as ve, Qt as ye, R as be, Rt as x, S as xe, Sn as Se, St as Ce, T as we, Tt as Te, U as Ee, Ut as S, V as De, Vt as Oe, W as ke, Wt as Ae, X as je, Xt as Me, Y as Ne, Yt as Pe, Z as Fe, Zt as C, _ as Ie, _n as Le, _t as w, an as Re, at as ze, b as Be, bn as Ve, bt as He, c as Ue, cn as T, ct as We, dn as Ge, dt as Ke, en as qe, et as Je, f as Ye, fn as E, ft as Xe, g as Ze, gn as Qe, gt as $e, h as et, ht as tt, i as nt, in as rt, it, j as at, jt as ot, k as st, kt as ct, ln as D, lt, m as ut, mn as dt, mt as O, nn as k, nt as ft, o as A, on as pt, ot as mt, p as ht, pn as gt, pt as _t, q as vt, qt as yt, r as bt, rn as xt, rt as St, sn as Ct, st as wt, t as Tt, tn as Et, tt as Dt, u as Ot, un as kt, ut as At, v as jt, vn as j, vt as M, w as N, wt as Mt, x as Nt, xn as Pt, xt as Ft, y as It, yn as Lt, yt as Rt, zt } from "./dev-Dh1NuYx1.js";
+import { n as Bt } from "./cliArgs-D4p8n7EE.js";
+import { r as Vt } from "./appPort-B_HpJ_ck.js";
+import { dt as Ht, lt as P } from "./webDev-bybjZA0o.js";
+import { r as F } from "./dialectDriver-czCHYpeH.js";
+import { i as Ut, n as Wt } from "./connectionConfig-Bk9IC7D0.js";
+import { c as Gt, n as Kt, o as qt } from "./seedRunner-IdHEprqf.js";
+import { C as I, S as Jt, _ as Yt, d as Xt, g as Zt, l as Qt, m as $t, r as en, u as tn, v as nn } from "./frameworkTableAssembly-oMPBKqlE.js";
+import { S as rn, c as an, n as on, p as sn, s as cn, x as ln } from "./fileConventions-Cof68_BL.js";
+import { h as un, o as dn } from "./inspect-B7U7Cl_Z.js";
+import { n as fn } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as pn, n as mn, r as hn, t as gn } from "./webhookDiscovery-CphsQe59.js";
+import { t as _n } from "./inspectMetrics-CfdKLh6t.js";
+import { r as vn, u as yn } from "./apiBuild-C8xBEYbL.js";
+import { t as bn } from "./bootTiming-BdyP9nYw.js";
+import { t as xn } from "./dataProfile-dW-PsfLB.js";
+import { basename as Sn, join as Cn } from "node:path";
+import { existsSync as wn } from "node:fs";
+import { pathToFileURL as Tn } from "node:url";
+import { createLogger as L } from "@voltro/logger";
+import { AuthMiddleware as En, ConnectionInfoMiddleware as Dn, actionToRpc as R, anonymousSubject as On, isWireReachable as kn, mutationToRpc as z, queryToRpc as B, streamToRpc as An, wireErrorUnion as jn, workflowCancelDescriptor as Mn, workflowDomainEventsQueryDescriptor as V, workflowEventDeliveriesQueryDescriptor as Nn, workflowResumeDescriptor as Pn, workflowRunEventsQueryDescriptor as H, workflowRunQueryDescriptor as U, workflowRunStepsQueryDescriptor as Fn, workflowRunsQueryDescriptor as In, workflowSignalDescriptor as Ln, workflowUpdateDescriptor as Rn } from "@voltro/protocol";
+import { Cause as zn, Effect as W, Layer as G, ManagedRuntime as Bn } from "effect";
 import { SqlClient as Vn } from "@effect/sql";
 import { declaredSnapshot as Hn, describeOutcome as Un, pendingFileMigrationIds as Wn, runPlannedMigrations as Gn } from "@voltro/database/sql";
 import { RpcGroup as Kn } from "@effect/rpc";
-import { allRegisteredTables as qn, and as Jn, connectionIdentity as Yn, ensureTableRegistered as Xn, eq as G, or as K } from "@voltro/database";
-import { AggregateRegistry as Zn, CostRegistry as Qn, DORMANCY_WAKEUP_TENANT as $n, Dispatcher as er, ExpectationRegistry as tr, ExperimentRegistry as q, apiKeyManagementRoutes as nr, attachAnalyticsMirror as rr, attachExpectations as ir, attachExperiments as ar, attachFinops as or, awaitServerListening as sr, bindMutation as J, bindStream as cr, bindSubscription as Y, buildTracingLayer as lr, cancelWakeup as ur, compileCron as dr, dataStoreApiKeyStore as fr, formatServerOnlyLeaks as pr, formatUnresolvedSources as mr, frameworkApiKeyStrategy as hr, getResourcePolicy as gr, installPolicyGuardResolver as _r, loadResourceTuples as vr, makeActionRunner as yr, makeAdvisoryLockCoordinator as br, makeApiKeyService as xr, makeApiKeyUsageBuffer as Sr, makeApiKeyUsageFlusher as Cr, makeAsyncKv as wr, makeAuthMiddlewareLayers as Tr, makeCoordinatedScheduler as Er, makeEffectStoreLayer as Dr, makeLazyWorkflowFacade as Or, makeMutationOutputCodec as kr, makeMutationRunner as Ar, makeOneShotQueryRunner as jr, makeQueryDescriptorProducer as Mr, makeQueryFinalizer as Nr, makeQueryReauthorizer as Pr, makeQuerySubscriber as Fr, makeSchemaRegistry as Ir, makeWorkflowFacade as Lr, makeWorkflowFacadeWithCallerContext as Rr, makeWorkflowLayers as X, noopKv as zr, onProcessShutdown as Br, recordSubscriptionDelivery as Vr, recordWorkflowRun as Hr, registerWakeup as Ur, resolveSecretsBackend as Wr, runProvidedEffect as Gr, setSecretsBackend as Kr, setSystemStoreHandle as qr, setTupleSource as Jr, shutdownGraceMsFromEnv as Z, singleCoordinator as Yr, startRpcServer as Xr, startScheduler as Zr, stripForbiddenForWire as Qr, undoCaptureEnabled as $r, unresolvedSources as ei, withScopedRequest as ti, workflowToRpc as ni, wrapStoreWithBootCodec as ri } from "@voltro/runtime";
-import { appStorageProvider as ii, fromNodeReadable as ai, getObjectStream as oi, putObjectStream as si, toNodeReadable as ci } from "@voltro/plugin-storage";
-import { isEnvContract as li } from "@voltro/env";
-import { assertProductionSessionSecret as ui } from "@voltro/protocol/session";
-import { createHash as di, timingSafeEqual as fi } from "node:crypto";
-import { buildDeliverWebhookExecute as pi, buildWebhooksService as mi, defaultIncomingPath as hi, deliverWebhookWorkflow as gi, makeDeferredEmitHandler as _i, mountIncomingWebhook as vi } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as yi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as bi } from "@voltro/plugin-mail";
-import { channelFor as xi, getBroadcastPlugin as Si } from "@voltro/plugin-broadcast";
-import { packBundle as Ci, runExport as wi, runImport as Ti, storageBlobSink as Ei, storageRefsBlobSource as Di, unpackBundle as Oi, unpackBundleToDir as ki } from "@voltro/data-transfer";
+import { allRegisteredTables as qn, and as Jn, connectionIdentity as Yn, ensureTableRegistered as Xn, eq as K, or as Zn } from "@voltro/database";
+import { AggregateRegistry as Qn, CostRegistry as $n, DORMANCY_WAKEUP_TENANT as er, Dispatcher as tr, ExpectationRegistry as q, ExperimentRegistry as nr, apiKeyManagementRoutes as rr, attachAnalyticsMirror as ir, attachExpectations as ar, attachExperiments as or, attachFinops as sr, awaitServerListening as cr, bindMutation as J, bindStream as lr, bindSubscription as Y, buildTracingLayer as ur, cancelWakeup as dr, compileCron as fr, dataStoreApiKeyStore as pr, formatServerOnlyLeaks as mr, formatUnresolvedSources as hr, frameworkApiKeyStrategy as gr, getResourcePolicy as _r, installPolicyGuardResolver as vr, loadResourceTuples as yr, makeActionRunner as br, makeAdvisoryLockCoordinator as xr, makeApiKeyService as Sr, makeApiKeyUsageBuffer as Cr, makeApiKeyUsageFlusher as wr, makeAsyncKv as Tr, makeAuthMiddlewareLayers as Er, makeCoordinatedScheduler as Dr, makeEffectStoreLayer as Or, makeLazyWorkflowFacade as kr, makeMutationOutputCodec as Ar, makeMutationRunner as jr, makeOneShotQueryRunner as Mr, makeQueryDescriptorProducer as Nr, makeQueryFinalizer as Pr, makeQueryReauthorizer as Fr, makeQuerySubscriber as Ir, makeSchemaRegistry as Lr, makeWorkflowFacade as Rr, makeWorkflowFacadeWithCallerContext as X, makeWorkflowLayers as zr, noopKv as Br, onProcessShutdown as Vr, recordSubscriptionDelivery as Hr, recordWorkflowRun as Ur, registerDefaultTupleSource as Wr, registerWakeup as Gr, resolveSecretsBackend as Kr, runProvidedEffect as qr, setSecretsBackend as Jr, setSystemStoreHandle as Z, shutdownGraceMsFromEnv as Yr, singleCoordinator as Xr, startRpcServer as Zr, startScheduler as Qr, stripForbiddenForWire as $r, undoCaptureEnabled as ei, unresolvedSources as ti, withScopedRequest as ni, workflowToRpc as ri, wrapStoreWithBootCodec as ii } from "@voltro/runtime";
+import { appStorageProvider as ai, fromNodeReadable as oi, getObjectStream as si, putObjectStream as ci, toNodeReadable as li } from "@voltro/plugin-storage";
+import { isEnvContract as ui } from "@voltro/env";
+import { assertProductionSessionSecret as di } from "@voltro/protocol/session";
+import { createHash as fi, timingSafeEqual as pi } from "node:crypto";
+import { buildDeliverWebhookExecute as mi, buildWebhooksService as hi, defaultIncomingPath as gi, deliverWebhookWorkflow as _i, makeDeferredEmitHandler as vi, mountIncomingWebhook as yi } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as bi } from "@voltro/plugin-auth";
+import { registerEmailTemplates as xi } from "@voltro/plugin-mail";
+import { channelFor as Si, getBroadcastPlugin as Ci } from "@voltro/plugin-broadcast";
+import { packBundle as wi, runExport as Ti, runImport as Ei, storageBlobSink as Di, storageRefsBlobSource as Oi, unpackBundle as ki, unpackBundleToDir as Ai } from "@voltro/data-transfer";
 //#region src/serveDrain.ts
-var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t) => setTimeout(t, e)), Mi = (e) => {
+var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t) => setTimeout(t, e)), Ni = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -54,14 +54,14 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? Ai();
+		let n = t.budgetMs ?? ji();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await ji(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await Mi(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -78,7 +78,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await ji(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await Mi(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -90,25 +90,25 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			await a(e), await o();
 		}
 	};
-}, Ni = "/_voltro/admin/import", Pi = "/_voltro/admin/export", Q = (e, t) => ({
+}, Pi = "/_voltro/admin/import", Fi = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Fi = (e) => {
+}), Ii = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, Ii = (e, t) => fi(di("sha256").update(e).digest(), di("sha256").update(t).digest()), Li = (e, t) => {
+}, Li = (e, t) => pi(fi("sha256").update(e).digest(), fi("sha256").update(t).digest()), Ri = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = Fi(e.headers);
-	return !n || !Ii(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, Ri = F({ scope: "voltro:admin-import" }), zi = "VBUNDLE2", Bi = async function* (e) {
+	let n = Ii(e.headers);
+	return !n || !Li(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, zi = L({ scope: "voltro:admin-import" }), Bi = "VBUNDLE2", Vi = async function* (e) {
 	yield e;
-}, Vi = (e) => async (t) => {
-	let n = Li(t, e.secret);
+}, Hi = (e) => async (t) => {
+	let n = Ri(t, e.secret);
 	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === zi, c, l;
-	if (s) c = Bi(t.rawBody), l = "upload";
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Bi, c, l;
+	if (s) c = Vi(t.rawBody), l = "upload";
 	else {
 		let n;
 		try {
@@ -122,11 +122,11 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 	}
 	let u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await Oi(c, {
+		e.assetSink ? await ki(c, {
 			dir: p,
 			blobs: e.assetSink
-		}) : await ki(c, p);
-		let t = await U.runPromiseExit(Ti({
+		}) : await Ai(c, p);
+		let t = await W.runPromiseExit(Ei({
 			store: e.store,
 			bundleDir: p,
 			...r ? { mode: r } : {},
@@ -134,14 +134,14 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			...a ? { atomic: a } : {},
 			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
 			force: o,
-			onWarn: (e) => Ri.warn("admin.import", { message: e }),
+			onWarn: (e) => zi.warn("admin.import", { message: e }),
 			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
 		}));
 		if (t._tag === "Failure") {
 			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
 			if (e && e._tag === "SchemaDriftError") {
 				let t = e;
-				return Ri.warn("admin.import refused (schema drift)", {
+				return zi.warn("admin.import refused (schema drift)", {
 					transport: l,
 					bundle: t.bundleFingerprint.slice(0, 16),
 					target: t.targetFingerprint.slice(0, 16)
@@ -156,7 +156,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			throw Error(String(e?.message ?? e ?? "import failed"));
 		}
 		let n = t.value, s = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return Ri.info("admin.import", {
+		return zi.info("admin.import", {
 			transport: l,
 			tables: n.tables.length,
 			rows: s,
@@ -168,7 +168,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			transport: l
 		});
 	} catch (e) {
-		return Ri.warn("admin.import failed", {
+		return zi.warn("admin.import failed", {
 			transport: l,
 			error: e?.message ?? String(e)
 		}), Q(500, {
@@ -181,18 +181,18 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			force: !0
 		});
 	}
-}, Hi = F({ scope: "voltro:admin-export" }), Ui = async (e) => {
+}, Ui = L({ scope: "voltro:admin-export" }), Wi = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
-}, Wi = (e) => typeof e.tenant == "string" && e.tenant ? {
+}, Gi = (e) => typeof e.tenant == "string" && e.tenant ? {
 	kind: "tenant",
 	tenantId: e.tenant
 } : Array.isArray(e.tables) && e.tables.length ? {
 	kind: "tables",
 	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, Gi = (e) => async (t) => {
-	let n = Li(t, e.secret);
+} : { kind: "all" }, Ki = (e) => async (t) => {
+	let n = Ri(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -212,9 +212,9 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Wi(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Gi(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), f = await import("node:path"), p = await d.mkdtemp(f.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await U.runPromise(wi({
+		let t = await W.runPromise(Ti({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -230,10 +230,10 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 		if (c) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => Ci({
+			return await e.putArchive(i, () => wi({
 				dir: p,
 				...l
-			})), Hi.info("admin.export", {
+			})), Ui.info("admin.export", {
 				transport: "storage",
 				tables: t.tables.length,
 				rows: n,
@@ -247,11 +247,11 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				transport: "storage"
 			});
 		}
-		let d = await Ui(Ci({
+		let d = await Wi(wi({
 			dir: p,
 			...l
 		}));
-		return Hi.info("admin.export", {
+		return Ui.info("admin.export", {
 			transport: "download",
 			tables: t.tables.length,
 			rows: n,
@@ -268,7 +268,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			}
 		};
 	} catch (e) {
-		return Hi.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+		return Ui.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
 			error: "export failed",
 			message: e?.message ?? String(e)
 		});
@@ -278,8 +278,8 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			force: !0
 		});
 	}
-}, Ki = (e, t, n = {}) => (async function* () {
-	let r = await U.runPromise(oi(e, t).pipe(U.timeout(n.openTimeout ?? "30 seconds"))), i = await ci(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, qi = (e, t, n = {}) => (async function* () {
+	let r = await W.runPromise(si(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await li(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -288,7 +288,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), qi = {
+})(), Ji = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -297,64 +297,64 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, Ji = async (e) => {
-	Vt(e.appProcedures ?? e.discovered, {
+}, Yi = async (e) => {
+	zt(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), qr({
+	}), Z({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new er({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new tr({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		...e.reactive === void 0 ? {} : { reactive: e.reactive },
 		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => Vr({
+		recordDelivery: (e) => Hr({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? qi, a = e.kv ?? zr, o, c = () => void 0, l, f, p, ee, te, ne, se, ce = ie({
+	}), i = e.cache ?? Ji, a = e.kv ?? Br, o, c = () => void 0, l, f, p, ee, te, ne, oe, se = ie({
 		store: e.store,
 		warn: (e, t) => {
 			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
 		}
-	}), le = ce.remember, ue = ce.resolve, de = v({
+	}), ce = se.remember, le = se.resolve, ue = y({
 		authority: e.authority,
 		getStore: () => e.store
-	}), y = (e.discovered.workflows?.length ?? 0) > 0 ? Or(() => o) : void 0, me = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, he = me || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ge = e.tenantIsolation === "namespace", _e = (e.log ?? F({ scope: "voltro:serve" })).child("webhooks"), be, xe, b = e.discovered.webhooks;
-	if (b && b.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+	}), b = (e.discovered.workflows?.length ?? 0) > 0 ? kr(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, me = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", he = e.tenantIsolation === "namespace", ge = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), ye, be, x = e.discovered.webhooks;
+	if (x && x.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
-		let t = w({
+		let t = T({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: i,
 			kv: a
-		}), n = b.outgoing.map((e) => e.descriptor);
-		xe = gi.toLayer(pi(t, { events: n })), be = mi(t, async (e) => {
+		}), n = x.outgoing.map((e) => e.descriptor);
+		be = _i.toLayer(mi(t, { events: n })), ye = hi(t, async (e) => {
 			let t = p;
 			if (t === void 0) {
-				_e.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+				ge.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				});
 				return;
 			}
-			t.runPromise(gi.execute(e)).catch((t) => {
-				_e.error("deliverWebhook workflow crashed", {
+			t.runPromise(_i.execute(e)).catch((t) => {
+				ge.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				}, t);
 			});
 		}, { events: n });
 	}
-	let Se = /* @__PURE__ */ new Map();
-	if (b) for (let e of b.incoming) {
-		let t = e.descriptor.path ?? hi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = vi(e.descriptor, {
+	let xe = /* @__PURE__ */ new Map();
+	if (x) for (let e of x.incoming) {
+		let t = e.descriptor.path ?? gi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = yi(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => y === void 0 ? void 0 : Rr(y, {
+			resolveWorkflows: () => b === void 0 ? void 0 : X(b, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -366,34 +366,34 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 					idempotency: e.idempotency,
 					durationMs: e.durationMs
 				};
-				e.status >= 500 ? _e.error("incoming delivery failed", t) : e.status >= 400 ? _e.warn("incoming delivery rejected", t) : _e.info("incoming delivery handled", t);
+				e.status >= 500 ? ge.error("incoming delivery failed", t) : e.status >= 400 ? ge.warn("incoming delivery rejected", t) : ge.info("incoming delivery handled", t);
 			}
 		});
-		Se.set(t, { handle: r });
+		xe.set(t, { handle: r });
 	}
-	_r(), Jr((t) => vr(e.store, t.subjectId, t.resourceType, t.resourceId));
-	let Ce = [], we = [...e.discovered.outboxHandlers ?? [], ...gn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
+	vr(), Wr((t) => yr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	let Se = [], Ce = [...e.discovered.outboxHandlers ?? [], ...mn((x?.outgoing.length ?? 0) + (x?.incoming.length ?? 0) + (x?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: _i(() => be)
-	}] : []], Te = we.length > 0 ? Ne({
-		handlers: we,
+		definition: vi(() => ye)
+	}] : []], we = Ce.length > 0 ? Me({
+		handlers: Ce,
 		store: e.store,
-		log: (e.log ?? F({ scope: "voltro:serve" })).child("outbox"),
+		log: (e.log ?? L({ scope: "voltro:serve" })).child("outbox"),
 		onChange: (t) => e.store.onChange((e) => t({
 			table: e.table,
 			op: e.op
 		})),
 		onShutdown: (e) => {
-			Ce.push(e);
+			Se.push(e);
 		}
-	}) : void 0, x = _({
+	}) : void 0, S = v({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: xt(e.port ?? 4e3),
-		log: (e.log ?? F({ scope: "voltro:serve" })).child("connections")
+		publicUrl: yt(e.port ?? 4e3),
+		log: (e.log ?? L({ scope: "voltro:serve" })).child("connections")
 	});
-	st({
+	at({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -402,198 +402,198 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let ke = (e.log ?? F({ scope: "voltro:serve" })).child("events"), je = e.broadcastNamespace ?? $e(e.plugins, void 0), Pe = Le(e.plugins, je, ke), Fe = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Re = e.membership ?? Nt(e.plugins, {
-		instanceId: Fe,
-		namespace: je,
+	let Oe = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Ae = e.broadcastNamespace ?? Ze(e.plugins, void 0), Ne = Ie(e.plugins, Ae, Oe), Pe = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Le = e.membership ?? jt(e.plugins, {
+		instanceId: Pe,
+		namespace: Ae,
 		meta: { mode: "serve" },
-		logger: ke
-	}), C = fe({
+		logger: Oe
+	}), w = de({
 		events: e.discovered.events ?? [],
-		origin: Fe,
-		...Pe.publishRemote === void 0 ? {} : { publishRemote: Pe.publishRemote }
-	}), ze = (e.discovered.events ?? []).length > 0 ? await Pe.attach(C.bus) : null, Be = Tt({
+		origin: Pe,
+		...Ne.publishRemote === void 0 ? {} : { publishRemote: Ne.publishRemote }
+	}), Re = (e.discovered.events ?? []).length > 0 ? await Ne.attach(w.bus) : null, ze = Ct({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
 		kv: a,
-		...be === void 0 ? {} : { webhooksService: be },
-		...y === void 0 ? {} : { workflowsProxy: y },
+		...ye === void 0 ? {} : { webhooksService: ye },
+		...b === void 0 ? {} : { workflowsProxy: b },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: ge,
+		namespaceIsolationOn: he,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...Te === void 0 ? {} : { outbox: { nudge: Te.nudge } },
-		...x.active ? { connections: { registry: x.registry } } : {},
-		eventBus: C.bus
-	}), Ve = W.succeed(Zn, m), He = W.succeed(tr, Ue), We = W.succeed(Qn, Bt), Ke = W.succeed(q, Lt), Je = (t, n) => {
-		let r = t.pipe(U.provide(Dr(n)));
-		return (e.baseLayer ? r.pipe(U.provide(e.baseLayer)) : r).pipe(U.provide(Ve)).pipe(U.provide(He)).pipe(U.provide(We)).pipe(U.provide(Ke));
-	}, Ye = (e, t) => {
-		let n = Je(e, t);
-		return Gr(n);
-	}, Xe = yn(), Ze = bt(e.plugins ?? [], Xe), Qe = d({
+		...we === void 0 ? {} : { outbox: { nudge: we.nudge } },
+		...S.active ? { connections: { registry: S.registry } } : {},
+		eventBus: w.bus
+	}), Be = G.succeed(Qn, m), Ve = G.succeed(q, He), Ue = G.succeed($n, Rt), Ge = G.succeed(nr, Ft), qe = (t, n) => {
+		let r = t.pipe(W.provide(Or(n)));
+		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Be)).pipe(W.provide(Ve)).pipe(W.provide(Ue)).pipe(W.provide(Ge));
+	}, Je = (e, t) => {
+		let n = qe(e, t);
+		return qr(n);
+	}, Ye = _n(), E = vt(e.plugins ?? [], Ye), Xe = d({
 		plugins: e.plugins ?? [],
-		metrics: Xe,
-		log: e.log ?? F({ scope: "voltro:serve" })
-	}), et = g(e.plugins ?? [], Xe), tt = e.security?.defaultDeny ?? !0, nt = Ar({
+		metrics: Ye,
+		log: e.log ?? L({ scope: "voltro:serve" })
+	}), Qe = g(e.plugins ?? [], Ye), $e = e.security?.defaultDeny ?? !0, et = jr({
 		store: e.store,
-		defaultDeny: tt,
+		defaultDeny: $e,
 		recordMetric: (e) => {
-			Xe.record(e);
+			Ye.record(e);
 		},
-		...Ze.mutation === void 0 ? {} : { interceptor: Ze.mutation },
-		buildContext: (e, t, n) => Be(e, t, n),
-		runEffect: Ye,
-		undoCapture: ye()
-	}), it = Ie();
+		...E.mutation === void 0 ? {} : { interceptor: E.mutation },
+		buildContext: (e, t, n) => ze(e, t, n),
+		runEffect: Je,
+		undoCapture: ve()
+	}), nt = Fe();
 	{
 		let t = s();
-		t !== void 0 && (e.log ?? F({ scope: "voltro:serve" })).info(t);
+		t !== void 0 && (e.log ?? L({ scope: "voltro:serve" })).info(t);
 	}
-	let at = Me({
+	let rt = je({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), ot = yr({
-		defaultDeny: tt,
-		buildContext: (e) => Be(e),
-		runEffect: Ye,
+	}), it = br({
+		defaultDeny: $e,
+		buildContext: (e) => ze(e),
+		runEffect: Je,
 		recordMetric: (e) => {
-			Xe.record(e);
+			Ye.record(e);
 		},
-		...Ze.action === void 0 ? {} : { interceptor: Ze.action }
-	}), lt = Nr({
+		...E.action === void 0 ? {} : { interceptor: E.action }
+	}), st = Pr({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
-	}), ut = {
-		defaultDeny: tt,
-		buildContext: (e) => Be(e),
-		finalize: (e, t) => lt(e, t.subject),
-		provideEffect: Je,
-		...Ze.query === void 0 ? {} : { interceptor: Ze.query }
-	}, T = Mr(ut), ft = jr({
-		...ut,
-		queryRows: (t, n) => e.store.query(t).then((e) => Qr(t.table, e, n.subject))
-	}), pt = Fr({
-		...ut,
+	}), ct = {
+		defaultDeny: $e,
+		buildContext: (e) => ze(e),
+		finalize: (e, t) => st(e, t.subject),
+		provideEffect: qe,
+		...E.query === void 0 ? {} : { interceptor: E.query }
+	}, D = Nr(ct), ut = Mr({
+		...ct,
+		queryRows: (t, n) => e.store.query(t).then((e) => $r(t.table, e, n.subject))
+	}), dt = Ir({
+		...ct,
 		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => jn(e.descriptor)), D = {};
+	}), O = (e) => e.filter((e) => kn(e.descriptor)), k = {};
 	for (let t of [
-		...E(e.discovered.queries),
-		...it.queries,
-		...at.queries,
-		...x.queries
-	]) D[t.descriptor.name] = (e) => Y(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Pr(t, e));
+		...O(e.discovered.queries),
+		...nt.queries,
+		...rt.queries,
+		...S.queries
+	]) k[t.descriptor.name] = (e) => Y(D(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Fr(t, e));
 	for (let t of [
-		...E(e.discovered.mutations),
-		...it.mutations,
-		...at.mutations,
-		...x.mutations
+		...O(e.discovered.mutations),
+		...nt.mutations,
+		...rt.mutations,
+		...S.mutations
 	]) {
-		let n = kr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => J(async (e, n) => nt(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+		let n = Ar(t.descriptor.output);
+		k[t.descriptor.name] = (r) => J(async (e, n) => et(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, jn(t.descriptor, "mutation"));
 	}
-	for (let t of [...E(e.discovered.actions), ...x.actions]) {
-		let n = kr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => J(async (e, n) => ot(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, t.descriptor.error);
+	for (let t of [...O(e.discovered.actions), ...S.actions]) {
+		let n = Ar(t.descriptor.output);
+		k[t.descriptor.name] = (r) => J(async (e, n) => it(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, jn(t.descriptor, "action"));
 	}
-	let mt = () => `public-${Math.random().toString(36).slice(2, 10)}`, O = [
+	let ft = () => `public-${Math.random().toString(36).slice(2, 10)}`, A = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ft(e, t, {
+			invoke: (t, n) => ut(e, t, {
 				subject: n.subject,
-				traceId: mt()
+				traceId: ft()
 			}),
-			subscribe: (t, n, r) => pt(e, t, {
+			subscribe: (t, n, r) => dt(e, t, {
 				subject: n.subject,
-				traceId: mt()
+				traceId: ft()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => nt(e, t, {
+			invoke: (t, n) => et(e, t, {
 				subject: n.subject,
-				traceId: mt()
+				traceId: ft()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ot(e, t, {
+			invoke: (t, n) => it(e, t, {
 				subject: n.subject,
-				traceId: mt()
+				traceId: ft()
 			})
 		}))
-	], gt = {
+	], mt = {
 		candidates: h({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
 			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(ft(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(nt(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(ot(e, t, n))
+			runQuery: (e, t, n) => Promise.resolve(ut(e, t, n)),
+			runMutation: (e, t, n) => Promise.resolve(et(e, t, n)),
+			runAction: (e, t, n) => Promise.resolve(it(e, t, n))
 		}),
 		policy: e.agents?.tools ?? {},
 		mcpEnabled: e.agents?.mcp === !0,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
-	}, _t = Ot({
+	}, ht = Et({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: O,
+		publicApiEntries: A,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? F({ scope: "voltro:serve" })
-	}), vt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, yt = vt && vt.length >= 16 ? [{
+		log: e.log ?? L({ scope: "voltro:serve" })
+	}), gt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, _t = gt && gt.length >= 16 ? [{
 		method: "POST",
-		path: Ni,
-		handle: Vi({
-			secret: vt,
+		path: Pi,
+		handle: Hi({
+			secret: gt,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Ei(ii()),
-			openArchive: (e) => Ki(ii(), e)
+			assetSink: Di(ai()),
+			openArchive: (e) => qi(ai(), e)
 		})
 	}, {
 		method: "POST",
-		path: Pi,
-		handle: Gi({
-			secret: vt,
+		path: Fi,
+		handle: Ki({
+			secret: gt,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
-			loadProfile: Cn,
-			assetSource: Di(ii(), e.store),
+			loadProfile: xn,
+			assetSource: Oi(ai(), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = ii(), i = ai("storage", () => n.from(t()));
-				await U.runPromise(si(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = ai(), i = oi("storage", () => n.from(t()));
+				await W.runPromise(ci(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], St = [
+	}] : [], bt = [
 		...e.httpRoutes ?? [],
-		..._t.httpRoutes,
-		...yt,
-		...x.httpRoutes
+		...ht.httpRoutes,
+		..._t,
+		...S.httpRoutes
 	];
-	Object.assign(D, C.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => cr((r) => ti(r, (r) => {
-		let i = Be(r), a = t.executor(n, i);
-		if (U.isEffect(a)) {
-			let t = a.pipe(U.provide(Dr(i.store)));
-			return (e.baseLayer ? t.pipe(U.provide(e.baseLayer)) : t).pipe(U.provide(Ve)).pipe(U.provide(He)).pipe(U.provide(We)).pipe(U.provide(Ke));
+	Object.assign(k, w.handlers);
+	for (let t of O(e.discovered.streams ?? [])) k[t.descriptor.name] = (n) => lr((r) => ni(r, (r) => {
+		let i = ze(r), a = t.executor(n, i);
+		if (W.isEffect(a)) {
+			let t = a.pipe(W.provide(Or(i.store)));
+			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Be)).pipe(W.provide(Ve)).pipe(W.provide(Ue)).pipe(W.provide(Ge));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? U.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? W.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => J(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) k[t.definition.name] = (e) => J(async (e, n) => {
 		let r = n;
-		return Rr(y, {
+		return X(b, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	me && (D[V.name] = (e) => Y(T({
-		descriptor: V,
+	pe && (k[U.name] = (e) => Y(D({
+		descriptor: U,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -602,16 +602,16 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: K(G("id", t), G("executionId", t)),
+				predicate: Zn(K("id", t), K("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${V.name}`), D[In.name] = (e) => Y(T({
+	}, e), r, `subscription.${U.name}`), k[In.name] = (e) => Y(D({
 		descriptor: In,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [G("tag", t.tag)], ...t.status === void 0 ? [] : [G("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [K("tag", t.tag)], ...t.status === void 0 ? [] : [K("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
@@ -624,8 +624,8 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${In.name}`), D[H.name] = (e) => Y(T({
-		descriptor: H,
+	}, e), r, `subscription.${In.name}`), k[Fn.name] = (e) => Y(D({
+		descriptor: Fn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -634,14 +634,14 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: G("runId", t),
+				predicate: K("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${H.name}`), D[B.name] = (e) => Y(T({
-		descriptor: B,
+	}, e), r, `subscription.${Fn.name}`), k[H.name] = (e) => Y(D({
+		descriptor: H,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -650,14 +650,14 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: G("runId", t),
+				predicate: K("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${B.name}`), D[Pn.name] = (e) => Y(T({
-		descriptor: Pn,
+	}, e), r, `subscription.${H.name}`), k[V.name] = (e) => Y(D({
+		descriptor: V,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -666,14 +666,14 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : G("name", t.name),
+				predicate: t.name === void 0 ? void 0 : K("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Pn.name}`), D[z.name] = (e) => Y(T({
-		descriptor: z,
+	}, e), r, `subscription.${V.name}`), k[Nn.name] = (e) => Y(D({
+		descriptor: Nn,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -682,73 +682,73 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: G("eventId", t),
+				predicate: K("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${z.name}`), D[Nn.name] = (t) => J(async (t, n) => {
+	}, e), r, `subscription.${Nn.name}`), k[Mn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await ht(e.store, n.subject, { executionId: r.executionId }), await y.cancel(r.workflowName, r.executionId), await Ft(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Nn.name}`), D[Fn.name] = (t) => J(async (t, n) => {
+		return await pt(e.store, n.subject, { executionId: r.executionId }), await b.cancel(r.workflowName, r.executionId), await Nt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Mn.name}`), k[Pn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await ht(e.store, n.subject, { executionId: r.executionId }), await y.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Fn.name}`), D[Ln.name] = (t) => J(async (t, n) => {
+		return await pt(e.store, n.subject, { executionId: r.executionId }), await b.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${Pn.name}`), k[Ln.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await ht(e.store, n.subject, { id: r.id }), y.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Ln.name}`), D[Rn.name] = (t) => J(async (t, n) => {
+		return await pt(e.store, n.subject, { id: r.id }), b.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${Ln.name}`), k[Rn.name] = (t) => J(async (t, n) => {
 		let r = t;
-		return await ht(e.store, n.subject, { id: r.id }), y.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+		return await pt(e.store, n.subject, { id: r.id }), b.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
 	}, t, `action.${Rn.name}`));
-	let wt = [
-		...E(e.discovered.queries).map((e) => R(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => L(e.descriptor)),
-		...E(e.discovered.actions).map((e) => I(e.descriptor)),
-		...it.queries.map((e) => R(e.descriptor)),
-		...it.mutations.map((e) => L(e.descriptor)),
-		...at.queries.map((e) => R(e.descriptor)),
-		...at.mutations.map((e) => L(e.descriptor)),
-		...x.queries.map((e) => R(e.descriptor)),
-		...x.mutations.map((e) => L(e.descriptor)),
-		...x.actions.map((e) => I(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => Mn(e.descriptor)),
-		...C.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => ni(e.definition)),
-		...me ? [
-			R(V),
-			R(In),
-			R(H),
-			R(B),
+	let St = [
+		...O(e.discovered.queries).map((e) => B(e.descriptor)),
+		...O(e.discovered.mutations).map((e) => z(e.descriptor)),
+		...O(e.discovered.actions).map((e) => R(e.descriptor)),
+		...nt.queries.map((e) => B(e.descriptor)),
+		...nt.mutations.map((e) => z(e.descriptor)),
+		...rt.queries.map((e) => B(e.descriptor)),
+		...rt.mutations.map((e) => z(e.descriptor)),
+		...S.queries.map((e) => B(e.descriptor)),
+		...S.mutations.map((e) => z(e.descriptor)),
+		...S.actions.map((e) => R(e.descriptor)),
+		...O(e.discovered.streams ?? []).map((e) => An(e.descriptor)),
+		...w.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => ri(e.definition)),
+		...pe ? [
+			B(U),
+			B(In),
+			B(Fn),
+			B(H),
+			B(V),
+			B(Nn),
+			R(Mn),
 			R(Pn),
-			R(z),
-			I(Nn),
-			I(Fn),
-			I(Ln),
-			I(Rn)
+			R(Ln),
+			R(Rn)
 		] : []
-	], Dt = Kn.make(...wt).middleware(On).middleware(kn), kt = Tr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), At = e.dormancyTenantId ?? $n, jt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => Ur(e.store, {
-			tenantId: r ?? At,
+	], Tt = Kn.make(...St).middleware(En).middleware(Dn), Dt = Er({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Ot = e.dormancyTenantId ?? er, kt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => Gr(e.store, {
+			tenantId: r ?? Ot,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => ur(e.store, {
-			tenantId: n ?? At,
+		cancel: (t, n) => dr(e.store, {
+			tenantId: n ?? Ot,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, A = he ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
+	} : void 0, M = me ? await import("@voltro/workflow") : void 0, N = M?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...jt === void 0 ? {} : { wakeups: jt }
-	}), Pt = async (t, n) => {
-		await A.closeWorkflowChildrenForParent({
+		...kt === void 0 ? {} : { wakeups: kt }
+	}), Mt = async (t, n) => {
+		await M.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: j,
+			recorder: N,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -759,11 +759,11 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				await p.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Ft = async (t, n, r) => {
+	}, Nt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: G("executionId", n),
+			predicate: K("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -774,7 +774,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await j.recordEvent({
+		a && await N.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -783,18 +783,18 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Pt(n, "cancelled");
-	}, It = [
-		...X(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? Be({
+		}), a && await Mt(n, "cancelled");
+	}, Pt = [
+		...zr(e.discovered.workflows ?? [], {
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? ze({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: ue,
-			...de === void 0 ? {} : { resolveAuthority: de }
+			resolveStartContext: le,
+			...ue === void 0 ? {} : { resolveAuthority: ue }
 		}, (t, n, r) => {
-			let i = A.getWorkflowVersionMetadata(t.definition);
-			return A.wrapWorkflowExecuteWithRunRecording({
+			let i = M.getWorkflowVersionMetadata(t.definition);
+			return M.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -805,27 +805,27 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Pt(e, t),
-				...Ge(t.definition),
+				onParentClose: ({ executionId: e, status: t }) => Mt(e, t),
+				...We(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await f?.gate.release(e);
 				},
-				recorder: j,
-				pluginWorkflowStepLayer: et,
-				recordRun: Hr
+				recorder: N,
+				pluginWorkflowStepLayer: Qe,
+				recordRun: Ur
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
-		...xe === void 0 ? [] : [xe]
-	], Rt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...xe === void 0 ? [] : ["voltro.deliverWebhook"]], zt = It.length > 0 ? W.mergeAll(...It) : W.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || xe !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = zt.pipe(W.provideMerge(e.workflowEngineLayer));
-		p = Bn.make(e.baseLayer === void 0 ? t : t.pipe(W.provideMerge(e.baseLayer))), await p.runPromise(U.void), (e.log ?? F({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Rt.length} entity type(s) registered`, { entities: Rt });
+		...be === void 0 ? [] : [be]
+	], It = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...be === void 0 ? [] : ["voltro.deliverWebhook"]], Lt = Pt.length > 0 ? G.mergeAll(...Pt) : G.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || be !== void 0) && e.workflowEngineLayer !== void 0) {
+		let t = Lt.pipe(G.provideMerge(e.workflowEngineLayer));
+		p = Bn.make(e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))), await p.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${It.length} entity type(s) registered`, { entities: It });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => p.runPromise(n.redriveFailedRun(e)), i = (e) => p.runPromise(n.resumeRunFromStep(e));
-		ne = await k({
-			provider: Si(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Si(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: je,
+		ne = await j({
+			provider: Ci(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: Ci(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Ae,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => p.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -833,14 +833,14 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				op: e.op,
 				...e.origin === void 0 ? {} : { origin: e.origin }
 			})),
-			log: (e.log ?? F({ scope: "voltro:serve" })).child("workflow")
+			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
 		}), ee = async (t) => {
-			let n = await ae({
+			let n = await _({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await j.recordEvent({
+			return n.statusReset && await N.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -853,12 +853,12 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				reason: n.outcome.reason
 			};
 		}, te = async (t) => {
-			let n = await De({
+			let n = await Ee({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await j.recordEvent({
+			return n.statusReset && await N.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -873,7 +873,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Yr, s = Er({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? xr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Xr, s = Dr({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
 		}), u = {
@@ -888,17 +888,17 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			}
 		}, d, m = () => {
 			if (d !== void 0) return d;
-			if (o !== void 0 && j !== void 0) return d = re({
+			if (o !== void 0 && N !== void 0) return d = re({
 				store: e.store,
-				log: P,
+				log: I,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
 				workflowRuntime: p,
-				workflowRunRecorder: j,
-				closeChildrenForParent: Pt
+				workflowRunRecorder: N,
+				closeChildrenForParent: Mt
 			}), d;
 		};
-		c = m, f = rt({
+		c = m, f = tt({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -913,12 +913,12 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			workflows: e.discovered.workflows ?? [],
 			facade: () => o,
 			cancelRunWithReason: m,
-			recordRunEvent: () => j?.recordEvent,
+			recordRunEvent: () => N?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
 			scheduleCoordinated: s,
 			onAbandoned: async (t) => {
-				await Et({
+				await wt({
 					workflows: e.discovered.workflows ?? [],
 					facade: () => o,
 					log: u,
@@ -928,7 +928,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			log: u
 		});
 		let h = f;
-		h !== void 0 && Br(() => h.stop()), l = qe({
+		h !== void 0 && Vr(() => h.stop()), l = Ke({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -939,10 +939,10 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => p === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await p.runPromise(A.completeSuspendingSignal({
+			resumeSignal: () => p === void 0 || M === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await p.runPromise(M.completeSuspendingSignal({
 					store: e.store,
-					target: Mt(t, n),
+					target: At(t, n),
 					signalName: r,
 					payload: i
 				}));
@@ -952,7 +952,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			log: u
 		});
 		let g = l;
-		g !== void 0 && Br(() => g.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Lr({
+		g !== void 0 && Vr(() => g.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Rr({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => p.runPromise(e),
 			onEnqueue: () => ne?.publishWake(),
@@ -961,71 +961,71 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				startPayloadSchema: h.gate.startPayloadSchema,
 				parkDelayedStart: h.gate.parkDelayed
 			},
-			rememberStartContext: le,
+			rememberStartContext: ce,
 			signal: async (t, n, r) => {
-				let i = await A.sendWorkflowSignal({
+				let i = await M.sendWorkflowSignal({
 					store: e.store,
-					recorder: j,
+					recorder: N,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await p.runPromise(A.completeSuspendingSignal({
+				return await p.runPromise(M.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => A.sendWorkflowUpdate({
+			update: (t, n, r, i) => M.sendWorkflowUpdate({
 				store: e.store,
-				recorder: j,
+				recorder: N,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => Oe(e.store, t),
-			retry: (t, n) => Ae({
+			listRuns: (t) => De(e.store, t),
+			retry: (t, n) => ke({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => p.runPromise(e)
 			}, t, n),
-			redrive: (t) => ae({
+			redrive: (t) => _({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Ht = W.mergeAll(Dt.toLayer(D), kt), Ut = Ct(D, e.discovered.queries.map((e) => e.descriptor.name), me), Wt = W.mergeAll(Dt.toLayer(Ut), kt), M = e.observability, N = await lr({
+	let Bt = G.mergeAll(Tt.toLayer(k), Dt), Vt = xt(k, e.discovered.queries.map((e) => e.descriptor.name), pe), Ht = G.mergeAll(Tt.toLayer(Vt), Dt), P = e.observability, F = await ur({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...M && M.spanProcessors.length > 0 ? { extraSpanProcessors: M.spanProcessors } : {},
-		...M && M.metricReaders.length > 0 ? { extraMetricReaders: M.metricReaders } : {},
-		...M && Object.keys(M.resourceAttributes).length > 0 ? { resourceAttributes: M.resourceAttributes } : {},
-		...M && M.sampler !== void 0 ? { sampler: M.sampler } : {}
-	}), Gt = !1, Kt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: qt, shutdown: Jt } = Xr({
-		group: Dt,
-		handlersLayer: Ht,
-		httpHandlersLayer: Wt,
+		...P && P.spanProcessors.length > 0 ? { extraSpanProcessors: P.spanProcessors } : {},
+		...P && P.metricReaders.length > 0 ? { extraMetricReaders: P.metricReaders } : {},
+		...P && Object.keys(P.resourceAttributes).length > 0 ? { resourceAttributes: P.resourceAttributes } : {},
+		...P && P.sampler !== void 0 ? { sampler: P.sampler } : {}
+	}), Ut = !1, Wt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Gt, shutdown: Kt } = Zr({
+		group: Tt,
+		handlersLayer: Bt,
+		httpHandlersLayer: Ht,
 		port: e.port ?? 4e3,
 		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: N.layer,
-		security: ve(e),
-		...Qe,
+		tracerLayer: F.layer,
+		security: _e(e),
+		...Xe,
 		healthCheck: {
-			isReady: () => Gt,
-			...Kt ? { ping: Kt } : {}
+			isReady: () => Ut,
+			...Wt ? { ping: Wt } : {}
 		},
-		...St.length > 0 ? { httpRoutes: St } : {},
+		...bt.length > 0 ? { httpRoutes: bt } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...Se.size > 0 ? { webhookRoutes: Se } : {},
+		...xe.size > 0 ? { webhookRoutes: xe } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), Yt = Mi(qt);
-	if (await sr(qt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Yr;
-		se = await Zr(e.discovered.schedules ?? [], {
+	}), qt = Ni(Gt);
+	if (await cr(Gt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? xr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Xr;
+		oe = await Qr(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1033,7 +1033,7 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			armSelf: e.scheduleArmSelf ?? !0,
 			dormancy: e.dormancy ?? "always-on",
 			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => Be({
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => ze({
 				subject: r,
 				traceId: t
 			}, e.store, void 0, `schedule:${n}`),
@@ -1051,428 +1051,428 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(se);
+		}), e.onSchedulerReady?.(oe);
 	}
-	let P = e.log ?? F({ scope: "voltro:serve" }), Xt, Zt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Xt = S(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, C.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = P.child("reaction"), n = async (n, r) => {
+	let I = e.log ?? L({ scope: "voltro:serve" }), Jt, Yt;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Jt = C(e.discovered.subscribers ?? [], e.store, I.child("subscribe"), e.schemaRegistry, w.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = I.child("reaction"), n = async (n, r) => {
 			if (n.kind === "workflow") {
-				if (y === void 0) {
+				if (b === void 0) {
 					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
 					return;
 				}
 				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await Rr(y, {
+				await X(b, {
 					traceId: `reaction:${n.workflow}`,
 					source: `reaction:${n.workflow}`
 				}).start(n.workflow, e);
 				return;
 			}
-			await ct(n.agent, r, {
+			await ot(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(ot(e, t, n)),
-				makeSubject: (e) => An(e),
+				runAction: (e, t, n) => Promise.resolve(it(e, t, n)),
+				makeSubject: (e) => On(e),
 				now: () => Date.now(),
 				log: t
 			});
 		}, r = async (n, r) => {
 			try {
 				let { requireAiBudget: t } = await import("@voltro/ai");
-				return (await U.runPromise(U.either(t(e.store, {
+				return (await W.runPromise(W.either(t(e.store, {
 					tenantId: n,
 					limitUsd: r
 				}))))._tag === "Right";
 			} catch (e) {
 				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
 			}
-		}, i = dt(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		Zt = u(e.discovered.reactions ?? [], e.store, {
+		}, i = lt(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		Yt = u(e.discovered.reactions ?? [], e.store, {
 			runAct: n,
 			checkBudget: r,
 			claimRateSlot: (e) => i.claim(e)
 		}, t);
 	}
-	let Qt;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (Qt = await Ee({
+	let Xt;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (Xt = await Te({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: P.child("aggregate"),
+		log: I.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ve = W.succeed(Zn, Qt.registry));
-	let $t;
-	(e.discovered.expectations?.length ?? 0) > 0 && ($t = ir({
+	}), Be = G.succeed(Qn, Xt.registry));
+	let Zt;
+	(e.discovered.expectations?.length ?? 0) > 0 && (Zt = ar({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
-		log: P.child("expectation")
-	}), He = W.succeed(tr, $t.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = or({
+		log: I.child("expectation")
+	}), Ve = G.succeed(q, Zt.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = sr({
 		discovered: e.discovered.budgets ?? [],
-		log: P.child("finops")
-	}), We = W.succeed(Qn, n.registry));
-	let en;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (en = ar({
+		log: I.child("finops")
+	}), Ue = G.succeed($n, n.registry));
+	let Qt;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (Qt = or({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
-		log: P.child("experiment")
-	}), Ke = W.succeed(q, en.registry)), Gt = !0, e.bootTiming?.mark("ready"), {
+		log: I.child("experiment")
+	}), Ge = G.succeed(nr, Qt.registry)), Ut = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: qt,
-		scheduler: se,
-		eventsSnapshot: pe(C.bus, C.declared),
+		server: Gt,
+		scheduler: oe,
+		eventsSnapshot: fe(w.bus, w.declared),
 		membersSnapshot: () => ({
-			members: Re.membership.list(),
+			members: Le.membership.list(),
 			capturedAt: Date.now()
 		}),
-		agentTools: () => gt,
-		rpcMetrics: () => Xe,
-		webhooksService: () => be,
+		agentTools: () => mt,
+		rpcMetrics: () => Ye,
+		webhooksService: () => ye,
 		runCanceller: () => c(),
 		flowControlHealth: () => f?.cancelHealth(),
 		inferenceHealth: () => l?.health(),
-		workflowWriteActions: () => y === void 0 || j === void 0 ? void 0 : oe({
+		workflowWriteActions: () => b === void 0 || N === void 0 ? void 0 : ae({
 			store: e.store,
-			log: P,
+			log: I,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
 			workflowRuntime: p,
-			workflowRunRecorder: j,
-			closeChildrenForParent: Pt
+			workflowRunRecorder: N,
+			closeChildrenForParent: Mt
 		}),
 		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
 		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
-			Gt = !1, await Yt.drainRequests();
-			for (let e of Ce) try {
+			Ut = !1, await qt.drainRequests();
+			for (let e of Se) try {
 				await e();
 			} catch (e) {
-				P.warn("serve: teardown step failed", {}, e);
+				I.warn("serve: teardown step failed", {}, e);
 			}
-			await ze?.detach(), await Re.detach(), Qt?.detach(), $t?.detach(), n?.detach(), en?.detach(), Zt?.(), Xt?.(), await se?.shutdown(), r.close(), await ne?.detach(), await p?.dispose(), await Jt(), await Yt.finish();
+			await Re?.detach(), await Le.detach(), Xt?.detach(), Zt?.detach(), n?.detach(), Qt?.detach(), Yt?.(), Jt?.(), await oe?.shutdown(), r.close(), await ne?.detach(), await p?.dispose(), await Kt(), await qt.finish();
 		}
 	};
-}, $ = F({ scope: "voltro:serve" }), Yi = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Xi = Ht, Zi = async (e) => {
-	let t = xn(process.cwd());
-	if (En(t)) {
+}, $ = L({ scope: "voltro:serve" }), Xi = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Zi = Bt, Qi = async (e) => {
+	let t = yn(process.cwd());
+	if (wn(t)) {
 		let n;
 		try {
-			let e = await import(Dn(t).href);
+			let e = await import(Tn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return Qi(e);
-}, Qi = async (s) => {
-	let u = Sn();
+	return $i(e);
+}, $i = async (s) => {
+	let u = bn();
 	e("serve");
 	try {
-		ui();
+		di();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let d = process.cwd(), m = await We(d), re = Ut({
+	let d = process.cwd(), m = await Ue(d), re = Vt({
 		kind: "api",
 		configPort: m?.port,
 		env: process.env,
-		flagPort: Xi(s, "--port")
+		flagPort: Zi(s, "--port")
 	});
 	for (let e of re.warnings) $.warn(e);
 	let h = re.port;
-	Kr(Wr(m?.secrets)), await M({
+	Jr(Kr(m?.secrets)), await Ht({
 		rawEnv: m?.env,
 		appType: "api",
 		root: d,
 		log: $,
 		generateTypes: !1
 	}), u.mark("config");
-	let g = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), ie = (g === "mariadb" || g === "postgres" || g === "mssql") && (process.env.CDC ?? "1") !== "0", ae = g === "mariadb" ? "mariadb" : g === "mssql" ? "mssql" : void 0, oe = bn(d);
-	if (!r() && En(oe)) try {
-		let e = await import(Dn(oe).href);
+	let g = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), ie = (g === "mariadb" || g === "postgres" || g === "mssql") && (process.env.CDC ?? "1") !== "0", _ = g === "mariadb" ? "mariadb" : g === "mssql" ? "mssql" : void 0, ae = vn(d);
+	if (!r() && wn(ae)) try {
+		let e = await import(Tn(ae).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Tn(d, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Cn(d, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let _ = await Xe(d), v = await At(_, { cdc: ie && ae !== void 0 }), fe = b(v);
+	let v = await Ye(d), y = await Ot(v, { cdc: ie && _ !== void 0 }), de = x(y);
 	{
 		let e = /* @__PURE__ */ new Set([
-			...v.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...v.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...v.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
+			...y.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			...y.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			...y.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
 		]);
-		Xt(P(m?.plugins ?? []), [
-			...v.queries.map((e) => e.descriptor.name),
-			...v.mutations.map((e) => e.descriptor.name),
-			...v.actions.map((e) => e.descriptor.name),
-			...v.streams.map((e) => e.descriptor.name)
+		Jt(I(m?.plugins ?? []), [
+			...y.queries.map((e) => e.descriptor.name),
+			...y.mutations.map((e) => e.descriptor.name),
+			...y.actions.map((e) => e.descriptor.name),
+			...y.streams.map((e) => e.descriptor.name)
 		], e);
-		let t = je(v.serverOnlyLeaks, x(process.env, "strict"), pr, "`voltro serve`");
+		let t = Ae(y.serverOnlyLeaks, S(process.env, "strict"), mr, "`voltro serve`");
 		if (t.action === "fail") throw i(t.message ?? "");
 		t.action === "warn" && $.warn(t.message ?? "");
 	}
-	let pe = _.filter((e) => vn.test(e)), ye = pe.length > 0 ? await _n(pe, $.child("webhooks")) : {
+	let fe = v.filter((e) => gn.test(e)), ve = fe.length > 0 ? await hn(fe, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, Ee = hn(v.events), De = ye.outgoing.length + ye.incoming.length + ye.providers.length + Ee.length === 0 ? void 0 : {
-		...ye,
-		outgoing: [...ye.outgoing, ...Ee]
-	}, Oe = rn({
+	}, Te = pn(y.events), Ee = ve.outgoing.length + ve.incoming.length + ve.providers.length + Te.length === 0 ? void 0 : {
+		...ve,
+		outgoing: [...ve.outgoing, ...Te]
+	}, De = tn({
 		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: ae,
+		cdcDialect: _,
 		declared: m?.schema
-	}), Ae = Qt({
-		gates: Oe,
+	}), ke = Xt({
+		gates: De,
 		runtime: {
-			traces: _e(),
-			undo: $r()
+			traces: ge(),
+			undo: ei()
 		}
 	});
-	if (Ae !== void 0) throw i(`serve: ${Ae}`);
-	let Me = nn({
-		mix: v.featureMix,
+	if (ke !== void 0) throw i(`serve: ${ke}`);
+	let je = en({
+		mix: y.featureMix,
 		plugins: m?.plugins ?? [],
-		gates: Oe,
-		...ae ? { cdcDialect: ae } : {}
-	}), Ne = m?.analytics !== void 0 && m.analytics.kind !== "noop" && g !== "memory" ? (await N(g)).makeSqlLayer(O()) : void 0, Ie = await c({
+		gates: De,
+		..._ ? { cdcDialect: _ } : {}
+	}), Me = m?.analytics !== void 0 && m.analytics.kind !== "noop" && g !== "memory" ? (await F(g)).makeSqlLayer(A()) : void 0, Fe = await c({
 		spec: m?.analytics,
-		sqlLayer: Ne,
+		sqlLayer: Me,
 		log: $
-	}), S = (() => {
-		let e = new Set(v.tables.map((e) => e.tableName)), t = [...v.tables];
-		for (let n of [...Me, ...Ie.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+	}), C = (() => {
+		let e = new Set(y.tables.map((e) => e.tableName)), t = [...y.tables];
+		for (let n of [...je, ...Fe.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of S) Xn(e);
+	for (let e of C) Xn(e);
 	{
-		let e = mr(ei(v.queries.map((e) => ({
+		let e = hr(ti(y.queries.map((e) => ({
 			name: e.descriptor.name,
 			source: e.descriptor.source
-		})), new Set(S.flatMap((e) => {
+		})), new Set(C.flatMap((e) => {
 			let t = e.tableName;
 			return t === void 0 ? [] : [t];
 		}))));
 		e !== void 0 && $.warn(e);
 	}
-	let Le = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Yi(Le, g, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await N(g)).makeSqlLayer(O()), t = await U.runPromise(Vn.SqlClient.pipe(U.flatMap((e) => Wn(e, d)), U.provide(e), U.catchAll(() => U.succeed([]))));
+	let Ie = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (Xi(Ie, g, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await F(g)).makeSqlLayer(A()), t = await W.runPromise(Vn.SqlClient.pipe(W.flatMap((e) => Wn(e, d)), W.provide(e), W.catchAll(() => W.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await U.runPromise(Vn.SqlClient.pipe(U.flatMap((e) => Gn(e, S, {
-			appliedBy: `serve:${Le}`,
+		let n = await W.runPromise(Vn.SqlClient.pipe(W.flatMap((e) => Gn(e, C, {
+			appliedBy: `serve:${Ie}`,
 			environment: "prod",
 			dialectId: g
-		})), U.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(Un(n, g)), $.error(en({
-			gates: Oe,
+		})), W.provide(e)));
+		n.kind === "prod-mismatch" && ($.error(Un(n, g)), $.error(Qt({
+			gates: De,
 			nodeEnv: process.env.NODE_ENV,
-			cdcDialect: ae,
+			cdcDialect: _,
 			declared: m?.schema
 		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Un(n, g));
 	}
-	await Yt({
+	await qt({
 		dialectId: g,
-		tables: S,
-		mode: qt(m?.reactiveTriggers),
-		lockSchema: O().schema,
-		makeLayer: async () => (await N(g)).makeSqlLayer(O()),
+		tables: C,
+		mode: Gt(m?.reactiveTriggers),
+		lockSchema: A().schema,
+		makeLayer: async () => (await F(g)).makeSqlLayer(A()),
 		log: {
 			info: (e, t) => $.info(e, t ?? {}),
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let Ue = Ir(S);
+	let He = Lr(C);
 	u.mark("discover");
-	let w = await it(m, void 0), Ge = ri(w, g);
-	for (let e of pt({
+	let T = await nt(m, void 0), We = ii(T, g);
+	for (let e of dt({
 		dialect: String(m?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Si(m?.plugins ?? [])?.broadcast.crossReplica === !0,
-		tables: v.tables.map((e) => ({
+		crossReplicaBus: Ci(m?.plugins ?? [])?.broadcast.crossReplica === !0,
+		tables: y.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
 		})),
-		querySources: v.queries.flatMap((e) => {
+		querySources: y.queries.flatMap((e) => {
 			let t = e.descriptor.source;
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = Ze({
+		let e = E({
 			tables: qn().map((e) => ({ tableName: e.tableName })),
-			queries: v.queries.map((e) => ({
+			queries: y.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
-		}), t = vt(e);
+		}), t = gt(e);
 		t !== void 0 && $.warn(t);
 	}
 	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: qe, invalidationBus: rt, snapshotCache: st, cache: ct, semantic: dt, evictSource: ht, backend: bt, stats: xt, dispose: Ct } = await Ke({
+	let { service: Ke, invalidationBus: tt, snapshotCache: at, cache: ot, semantic: lt, evictSource: pt, backend: vt, stats: yt, dispose: xt } = await Ge({
 		env: process.env,
 		semantic: m?.cacheSemantic ?? !1
 	});
-	dt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${bt}` + (bt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
-		if (U.runFork(rt.publish(e.table)), ht !== void 0) {
+	lt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${vt}` + (vt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), T.onChange((e) => {
+		if (W.runFork(tt.publish(e.table)), pt !== void 0) {
 			let t = (e.new ?? e.old)?.id;
-			ht({
+			pt({
 				table: e.table,
 				op: e.op,
 				...t === void 0 ? {} : { id: t }
 			});
 		}
 	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: Tt, service: Et } = await wr({ store: w });
-	He({
+	let { kv: Ct, service: wt } = await Tr({ store: T });
+	Ve({
 		log: $,
-		max: Kt(),
-		outOfPool: zt(g, (process.env.CDC ?? "1") !== "0"),
+		max: Wt(),
+		outOfPool: Lt(g, (process.env.CDC ?? "1") !== "0"),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
 	}), u.mark("store");
-	let Ot = rr({
-		store: w,
-		sink: Ie.sink,
+	let Et = ir({
+		store: T,
+		sink: Fe.sink,
 		log: $
-	}), Mt = jt({
-		store: w,
+	}), At = kt({
+		store: T,
 		dialect: g,
 		log: { info: (e) => $.info(e) }
-	}), k = m?.plugins ?? [], Lt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Bt, Vt;
-	g !== "memory" && (Bt = Bn.make((await N(g)).makeSqlLayer(O())), Vt = await Bt.runPromise(Vn.SqlClient));
-	let Ht = [
+	}), j = m?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Rt, zt;
+	g !== "memory" && (Rt = Bn.make((await F(g)).makeSqlLayer(A())), zt = await Rt.runPromise(Vn.SqlClient));
+	let Bt = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(g) ? br(w, Lt, $) : Yr, gn = C(m?.scheduling), xn = Er({
-		maxIdleIntervalMs: gn.pollCeilingMs,
-		coordinator: Ht,
-		replicaId: Lt,
+	].includes(g) ? xr(T, Ft, $) : Xr, mn = w(m?.scheduling), yn = Dr({
+		maxIdleIntervalMs: mn.pollCeilingMs,
+		coordinator: Bt,
+		replicaId: Ft,
 		log: $
-	}), Cn = [], F = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, On = Si(m?.plugins ?? [])?.broadcast?.provider, kn = $e(m?.plugins, m?.name ?? wn(d));
+	}), xn = [], L = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, En = Ci(m?.plugins ?? [])?.broadcast?.provider, Dn = Ze(m?.plugins, m?.name ?? Sn(d));
 	{
-		let e = nt(m?.plugins, m?.name ?? wn(d));
+		let e = et(m?.plugins, m?.name ?? Sn(d));
 		e !== void 0 && $.warn(e);
 	}
-	let I = Nt(m?.plugins, {
-		instanceId: F,
-		namespace: kn,
+	let R = jt(m?.plugins, {
+		instanceId: L,
+		namespace: Dn,
 		meta: { mode: "serve" },
 		logger: $
-	}), An = {
-		...Vt ? { sql: Vt } : {},
-		instanceId: F,
-		membership: I.membership,
-		...On === void 0 ? {} : { broadcast: On },
-		broadcastChannels: { presence: xi(kn, "presence") },
+	}), On = {
+		...zt ? { sql: zt } : {},
+		instanceId: L,
+		membership: R.membership,
+		...En === void 0 ? {} : { broadcast: En },
+		broadcastChannels: { presence: Si(Dn, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = xn(e, t, n);
-			return Cn.push(r), r;
+			let r = yn(e, t, n);
+			return xn.push(r), r;
 		}
 	};
-	for (let e of k) e.bindDataStore?.(Ge, An);
+	for (let e of j) e.bindDataStore?.(We, On);
 	l({
-		store: w,
-		...lt(),
+		store: T,
+		...st(),
 		log: $
 	});
-	let jn = k.filter((e) => typeof e.onChangeEvent == "function");
-	if (jn.length > 0) {
-		let e = w.changeScope ?? "local";
-		w.onChange((t) => {
-			let n = me(t, e);
-			for (let e of jn) U.runFork(e.onChangeEvent(n).pipe(U.catchAllCause((t) => U.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: zn.pretty(t) })))));
+	let kn = j.filter((e) => typeof e.onChangeEvent == "function");
+	if (kn.length > 0) {
+		let e = T.changeScope ?? "local";
+		T.onChange((t) => {
+			let n = pe(t, e);
+			for (let e of kn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: zn.pretty(t) })))));
 		});
 	}
-	let L = ce({
-		plugins: k,
+	let z = se({
+		plugins: j,
 		appName: m?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	k.length && await L.activate(), u.mark("plugins");
-	let R = await L.gatherObservability(), Mn = {
+	j.length && await z.activate(), u.mark("plugins");
+	let B = await z.gatherObservability(), An = {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}, Nn, Pn = await _t(w, m, g, kn, Mn, (e, t) => {
-		Nn?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), z = m?.apiKeys, Fn = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", B = z ? fr(w) : void 0, V = B ? Sr({ flush: Cr(B) }) : void 0;
-	V && Br(() => V.shutdown());
-	let H = B ? xr(B, {
-		prefix: Fn,
-		...V ? { usage: V } : {}
-	}) : void 0, In = H ? [hr(H, { prefix: Fn })] : [], Ln = St([...m?.auth?.strategies ?? [], ...In], yi(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => Ge), Rn = [...m?.restRoutes ?? [], ...H ? nr(H, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], Kn = D(m?.idempotency, w), Jn = k.map((e) => e.services).filter((e) => e !== void 0), G = W.mergeAll(ze({
-		analyticsLayer: Ie.layer,
-		cacheService: qe,
-		kvService: Et,
-		...dt === void 0 ? {} : { semanticCache: dt },
-		pluginServices: Jn,
+	}, jn, Mn = await ht(T, m, g, Dn, An, (e, t) => {
+		jn?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), V = m?.apiKeys, Nn = (typeof V == "object" ? V.prefix : void 0) ?? "voltro_", Pn = V ? pr(T) : void 0, H = Pn ? Cr({ flush: wr(Pn) }) : void 0;
+	H && Vr(() => H.shutdown());
+	let U = Pn ? Sr(Pn, {
+		prefix: Nn,
+		...H ? { usage: H } : {}
+	}) : void 0, Fn = U ? [gr(U, { prefix: Nn })] : [], In = bt([...m?.auth?.strategies ?? [], ...Fn], bi(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => We), Ln = [...m?.restRoutes ?? [], ...U ? rr(U, (typeof V == "object" ? V.managementPath : void 0) ?? "/v1/api-keys") : []], Rn = k(m?.idempotency, T), Kn = j.map((e) => e.services).filter((e) => e !== void 0), Jn = G.mergeAll(Re({
+		analyticsLayer: Fe.layer,
+		cacheService: Ke,
+		kvService: wt,
+		...lt === void 0 ? {} : { semanticCache: lt },
+		pluginServices: Kn,
 		userLayers: m?.layers ?? []
-	}), at(m?.http ?? {})), K = await ot({
-		files: _,
-		store: w,
+	}), rt(m?.http ?? {})), K = await it({
+		files: v,
+		store: T,
 		log: $,
 		seedPolicy: "report",
-		seedPattern: dn,
-		loadSeedFiles: Jt,
-		startupPattern: on,
+		seedPattern: ln,
+		loadSeedFiles: Kt,
+		startupPattern: rn,
 		loadStartupFiles: a,
 		runStartups: o,
-		emailPattern: Be,
-		loadEmailFiles: gt,
-		registerEmailTemplates: bi
+		emailPattern: ze,
+		loadEmailFiles: mt,
+		registerEmailTemplates: xi
 	});
 	(K.startupCount > 0 || K.emailCount > 0) && $.info("boot lifecycle", {
 		startups: K.startupCount,
 		emailTemplates: K.emailCount
-	}), K.startups !== void 0 && Br(async () => {
+	}), K.startups !== void 0 && Vr(async () => {
 		await K.startups.stop();
-	}), se({
-		demands: de(fe),
-		isRegistered: (e) => gr(e) !== void 0
+	}), oe({
+		demands: ue(de),
+		isRegistered: (e) => _r(e) !== void 0
 	});
-	let Zn = mt({
-		schedules: wt({
-			schedules: v.schedules,
+	let Zn = ft({
+		schedules: St({
+			schedules: y.schedules,
 			seeds: K.seeds,
-			store: w,
+			store: T,
 			log: $.child("seeds")
 		}),
-		workflows: v.workflows ?? [],
+		workflows: y.workflows ?? [],
 		log: $.child("workflow-schedules")
 	}), Qn = m?.scheduling ?? {}, $n = Qn.trigger ?? "self", er = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), tr = Qn.coordination ?? (er.has(g) ? "advisoryLock" : "single"), q = tr === "cluster" && er.has(g), ir = q ? "cluster" : tr === "advisoryLock" && er.has(g) ? "advisoryLock" : "single";
+	]), tr = Qn.coordination ?? (er.has(g) ? "advisoryLock" : "single"), q = tr === "cluster" && er.has(g), nr = q ? "cluster" : tr === "advisoryLock" && er.has(g) ? "advisoryLock" : "single";
 	tr === "cluster" && !q && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), tr === "advisoryLock" && !er.has(g) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let ar, or = v.workflows.length > 0 || v.workflowWorkers.length > 0 || v.eventTriggers.length > 0 || (De?.outgoing.length ?? 0) > 0 || q, sr;
+	let ar, or = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (Ee?.outgoing.length ?? 0) > 0 || q, sr;
 	if (or) {
 		if (g === "mssql") {
-			let e = await mn(process.cwd());
+			let e = await fn(process.cwd());
 			e && $.warn(e);
 		}
 		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = q ? Zn.filter((e) => (e.trigger ?? $n) === "self").map((e) => t({
 			name: e.name,
-			cron: dr(e),
+			cron: fr(e),
 			execute: async () => {
 				await ar?.fireFromCluster(e.name);
 			}
 		})) : [];
 		sr = g === "memory" ? e.layerMemory : await (async () => {
-			let e = await N(g), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+			let e = await F(g), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(O()),
+				sqlClientLayer: e.makeSqlLayer(A()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -1481,19 +1481,19 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			});
 		})();
 	}
-	let J = le(k, yn()), cr = _.filter((e) => /\.subscribe\.tsx?$/.test(e)), Y = cr.length > 0 ? await be(cr, $) : [], lr = _.filter((e) => /\.reaction\.tsx?$/.test(e)), ur = lr.length > 0 ? await y(lr, $) : [], _r = _.filter((e) => ln.test(e)), vr = _r.length > 0 ? await Fe(_r, $) : [], yr = _.filter((e) => /\.aggregate\.tsx?$/.test(e)), Tr = yr.length > 0 ? await te(yr, $) : [], Dr = ge();
-	if (Tr.length > 0 && g !== "memory") try {
-		let e = (await N(g)).makeSqlLayer(O());
-		Dr = ut(e);
+	let cr = ce(j, _n()), J = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), lr = J.length > 0 ? await ye(J, $) : [], Y = v.filter((e) => /\.reaction\.tsx?$/.test(e)), ur = Y.length > 0 ? await b(Y, $) : [], dr = v.filter((e) => sn.test(e)), vr = dr.length > 0 ? await Pe(dr, $) : [], yr = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), br = yr.length > 0 ? await te(yr, $) : [], Er = he();
+	if (br.length > 0 && g !== "memory") try {
+		let e = (await F(g)).makeSqlLayer(A());
+		Er = ct(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Or = g === "memory" ? Yr : br(w, `aggregate@${process.pid}`, $), kr = _.filter((e) => un.test(e)), Ar = kr.length > 0 ? await p(kr, $) : [], jr = _.filter((e) => cn.test(e)), Mr = jr.length > 0 ? await we(jr, $) : [], Nr = _.filter((e) => sn.test(e)), Pr = Nr.length > 0 ? await Pt(Nr, $) : [], Fr = [], Lr = [], Rr = _.filter((e) => tn.test(e));
+	let Or = g === "memory" ? Xr : xr(T, `aggregate@${process.pid}`, $), kr = v.filter((e) => cn.test(e)), Ar = kr.length > 0 ? await p(kr, $) : [], jr = v.filter((e) => on.test(e)), Mr = jr.length > 0 ? await Ce(jr, $) : [], Nr = v.filter((e) => an.test(e)), Pr = Nr.length > 0 ? await Mt(Nr, $) : [], Fr = [], Ir = [], Rr = v.filter((e) => $t.test(e));
 	if (Rr.length > 0) {
-		let e = $.child("agent"), t = _.filter((e) => $t.test(e));
-		t.length > 0 && await an(t, e);
-		let n = await Zt(Rr, e);
-		for (let e of n.agents) for (let t of Ye(e)) (t.kind === "action" ? Fr : Lr).push({
+		let e = $.child("agent"), t = v.filter((e) => Zt.test(e));
+		t.length > 0 && await nn(t, e);
+		let n = await Yt(Rr, e);
+		for (let e of n.agents) for (let t of Je(e)) (t.kind === "action" ? Fr : Ir).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -1507,32 +1507,32 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 		return e;
 	}, zr = Yn({
 		dialect: g,
-		...O()
-	}), Vr = g === "memory" ? void 0 : (await N(g)).makeSqlLayer(O()), Hr = async () => kt({
-		sqlLayer: Vr,
-		declared: S,
+		...A()
+	}), Br = g === "memory" ? void 0 : (await F(g)).makeSqlLayer(A()), Hr = async () => Dt({
+		sqlLayer: Br,
+		declared: C,
 		log: $
 	}), Ur = {
 		kind: "api",
 		meta: {
 			name: m?.name ?? "voltro-api",
-			voltroVersion: Dt,
+			voltroVersion: Tt,
 			port: h,
 			mode: "start",
 			store: g,
 			cdc: ie ? "on" : "off",
 			...zr === void 0 ? {} : { databaseId: zr }
 		},
-		rpc: et(v, d),
-		workflows: Re(v, d),
+		rpc: Qe(y, d),
+		workflows: Le(y, d),
 		migrations: Hr,
 		events: () => Z.eventsSnapshot(),
 		agentTools: () => Z.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
-			accessGate: fe,
+			accessGate: de,
 			config: m,
-			serverOnlyLeaks: v.serverOnlyLeaks,
+			serverOnlyLeaks: y.serverOnlyLeaks,
 			migrations: Hr
 		}),
 		members: () => Z.membersSnapshot(),
@@ -1544,48 +1544,48 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			getHandle: () => ar,
 			getSchedules: () => Zn
 		}),
-		...De === void 0 ? {} : { webhooks: () => he({
-			store: w,
-			discoveredWebhooks: De
+		...Ee === void 0 ? {} : { webhooks: () => me({
+			store: T,
+			discoveredWebhooks: Ee
 		}) },
 		plugins: () => ({
-			plugins: L.snapshot(),
+			plugins: z.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => Wt(m?.name ?? wn(d), {
-			...m?.env !== void 0 && li(m.env) ? { contract: m.env } : {},
+		env: () => P(m?.name ?? Sn(d), {
+			...m?.env !== void 0 && ui(m.env) ? { contract: m.env } : {},
 			plugins: m?.plugins ?? []
 		}),
-		dataCache: () => Ve({
-			stats: xt,
-			backendKind: bt
+		dataCache: () => Be({
+			stats: yt,
+			backendKind: vt
 		}),
-		subscriptions: () => Ft(() => Nn),
-		inspectTables: () => ue(v.tables),
-		inspectRows: xe({
-			store: w,
-			tables: v.tables,
+		subscriptions: () => Nt(() => jn),
+		inspectTables: () => le(y.tables),
+		inspectRows: be({
+			store: T,
+			tables: y.tables,
 			mask: !0
 		}),
 		metrics: (e) => Z.rpcMetrics().snapshot(e),
-		cluster: () => Rt({
-			store: w,
+		cluster: () => It({
+			store: T,
 			dialect: g,
 			useClusterCron: q,
 			scheduleCoordChoice: tr
 		}),
-		inspectSchedules: () => Te({
+		inspectSchedules: () => we({
 			schedules: Zn,
 			defaultTrigger: $n,
-			coordination: ir
+			coordination: nr
 		}),
-		inspectScheduleRuns: (e) => j(w, e),
-		...f(w, {
-			controls: E(v.workflows ?? []),
-			active: (v.workflows?.length ?? 0) > 0,
+		inspectScheduleRuns: (e) => N(T, e),
+		...f(T, {
+			controls: O(y.workflows ?? []),
+			active: (y.workflows?.length ?? 0) > 0,
 			cancellation: () => Z.flowControlHealth()
 		}),
-		webhookActions: Se(() => Z.webhooksService()),
+		webhookActions: xe(() => Z.webhooksService()),
 		inspectStartWorkflow: (e) => X().inspectStartWorkflow(e),
 		inspectCancelWorkflowRun: (e) => X().inspectCancelWorkflowRun(e),
 		inspectSuspendWorkflowRun: (e) => X().inspectSuspendWorkflowRun(e),
@@ -1594,13 +1594,13 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 		inspectRetryWorkflowRun: (e) => X().inspectRetryWorkflowRun(e),
 		inspectSignalWorkflowRun: (e) => X().inspectSignalWorkflowRun(e),
 		inspectUpdateWorkflowRun: (e) => X().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => Qe({
-			store: w,
-			active: (v.workflows?.length ?? 0) > 0,
+		inspectInferences: (e) => Xe({
+			store: T,
+			active: (y.workflows?.length ?? 0) > 0,
 			dispatcher: () => Z.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...yt({
-			store: w,
+		..._t({
+			store: T,
 			cancelRun: async (e) => await Z.runCanceller()?.(e) ?? !1,
 			retryRun: async (e) => X().inspectRetryWorkflowRun({ runId: e }),
 			redriveRun: async (e) => Z.redriveWorkflowRun({ runId: e }),
@@ -1608,11 +1608,11 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 		}),
 		inspectRedriveWorkflowRun: (e) => Z.redriveWorkflowRun(e),
 		inspectResumeWorkflowRunFromStep: (e) => Z.resumeWorkflowRunFromStep(e)
-	}, Gr = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", qr = Gr && g !== "memory" ? await (async () => {
-		let e = await N(g);
-		return T({
-			tables: S,
-			sqlLayer: e.makeSqlLayer(O()),
+	}, Wr = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", Gr = Wr && g !== "memory" ? await (async () => {
+		let e = await F(g);
+		return D({
+			tables: C,
+			sqlLayer: e.makeSqlLayer(A()),
 			dialect: g,
 			options: { retryFilter: e.retryFilter },
 			log: {
@@ -1620,110 +1620,110 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 				error: (e, t, n) => $.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, Jr = await ft({
+	})() : void 0, qr = await ut({
 		input: m?.tenancy?.residency,
-		namespaceIsolationOn: Gr,
-		makeStoreForUrl: (e, t) => it(m, void 0, Gt(O(), t)),
+		namespaceIsolationOn: Wr,
+		makeStoreForUrl: (e, t) => nt(m, void 0, Ut(A(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	Jr !== void 0 && Br(async () => {
-		await Jr.close();
+	qr !== void 0 && Vr(async () => {
+		await qr.close();
 	});
-	let Z = await Ji({
+	let Z = await Yi({
 		bootTiming: u,
-		broadcastNamespace: kn,
+		broadcastNamespace: Dn,
 		scheduling: (() => {
-			let e = gn;
+			let e = mn;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
 				cancelSweepMs: e.cancelSweepMs,
 				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: tt({
-					changeScope: w.changeScope,
-					broadcastAttached: Pn !== void 0
+				disarmWhenIdle: $e({
+					changeScope: T.changeScope,
+					broadcastAttached: Mn !== void 0
 				})
 			};
 		})(),
 		...m?.workflows?.staleness === void 0 ? {} : { workflowStaleness: m.workflows.staleness },
 		...m?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: m.workflows.suspendSignalHintMs },
-		workflowRecording: A(m?.workflows?.recording),
+		workflowRecording: M(m?.workflows?.recording),
 		membership: {
-			...I,
-			instanceId: F
+			...R,
+			instanceId: L
 		},
 		security: {
-			defaultDeny: ke(m),
-			...ve(m)
+			defaultDeny: Oe(m),
+			..._e(m)
 		},
-		approvals: { defaultExpiryMs: Pe(m) },
+		approvals: { defaultExpiryMs: Ne(m) },
 		...m?.plugins === void 0 ? {} : { plugins: m.plugins },
-		...Kn ? { idempotency: Kn } : {},
-		restRoutes: Rn,
-		appProcedures: fe,
+		...Rn ? { idempotency: Rn } : {},
+		restRoutes: Ln,
+		appProcedures: de,
 		discovered: {
-			queries: [...v.queries, ...Lr],
-			mutations: v.mutations,
-			actions: [...v.actions, ...Fr],
-			streams: v.streams,
-			events: v.events,
-			workflows: v.workflows,
-			workflowWorkers: v.workflowWorkers,
-			eventTriggers: v.eventTriggers,
+			queries: [...y.queries, ...Ir],
+			mutations: y.mutations,
+			actions: [...y.actions, ...Fr],
+			streams: y.streams,
+			events: y.events,
+			workflows: y.workflows,
+			workflowWorkers: y.workflowWorkers,
+			eventTriggers: y.eventTriggers,
 			schedules: Zn,
-			subscribers: Y,
+			subscribers: lr,
 			outboxHandlers: vr,
-			connections: v.connections,
+			connections: y.connections,
 			reactions: ur,
-			aggregates: Tr,
+			aggregates: br,
 			expectations: Ar,
 			budgets: Mr,
 			experiments: Pr,
-			...De === void 0 ? {} : { webhooks: De }
+			...Ee === void 0 ? {} : { webhooks: Ee }
 		},
 		log: $,
-		analytics: Ie.sink,
-		aggregateStorage: Dr,
+		analytics: Fe.sink,
+		aggregateStorage: Er,
 		aggregateCoordinator: Or,
-		store: w,
-		kv: Tt,
-		cache: ct,
-		snapshotCache: st,
+		store: T,
+		kv: Ct,
+		cache: ot,
+		snapshotCache: at,
 		...m?.reactive === void 0 ? {} : { reactive: m.reactive },
-		schemaRegistry: Ue,
-		tenantScopedTables: v.tenantScopedTables,
-		softDeleteScopedTables: v.softDeleteScopedTables,
-		dataTransferSnapshot: Hn(S),
+		schemaRegistry: He,
+		tenantScopedTables: y.tenantScopedTables,
+		softDeleteScopedTables: y.softDeleteScopedTables,
+		dataTransferSnapshot: Hn(C),
 		dataTransferDialect: g,
-		...qr === void 0 ? {} : { ensureTenantProvisioned: qr.ensure },
-		...Jr === void 0 ? {} : { resolveResidentStore: Jr.resolveStore },
+		...Gr === void 0 ? {} : { ensureTenantProvisioned: Gr.ensure },
+		...qr === void 0 ? {} : { resolveResidentStore: qr.resolveStore },
 		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Ln({
+		resolveSubject: (e, t) => In({
 			headers: e,
 			clientId: t
 		}),
 		...m?.auth === void 0 ? {} : { authority: m.auth },
 		...m?.agents === void 0 ? {} : { agents: m.agents },
-		httpRoutes: k.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => Ge,
-		...G ? { baseLayer: G } : {},
+		httpRoutes: j.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => We,
+		...Jn ? { baseLayer: Jn } : {},
 		...sr === void 0 ? {} : { workflowEngineLayer: sr },
 		scheduleDefaultTrigger: $n,
-		scheduleCoordination: ir,
+		scheduleCoordination: nr,
 		scheduleArmSelf: !q,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...J === void 0 ? {} : { scheduleFireInterceptor: J },
+		...cr === void 0 ? {} : { scheduleFireInterceptor: cr },
 		onSchedulerReady: (e) => {
 			ar = e;
 		},
 		inspectRoute: { handle: async (e, t, n, r) => await ee(e, Ur, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await pn(e, Ur, t, { method: n }) : null) ?? fn(e, Ur, t, {
+		}) || ((n === "GET" ? await dn(e, Ur, t, { method: n }) : null) ?? un(e, Ur, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) ?? {
@@ -1732,39 +1732,39 @@ var Ai = () => Math.max(500, Math.floor(Z() * .6)), ji = (e) => new Promise((t)
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
 		...m?.name === void 0 ? {} : { appName: m.name },
-		observability: R,
+		observability: B,
 		port: h,
 		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {}
 	});
-	return Nn = Z.dispatcher, Ce(It([
-		v.queries,
-		v.mutations,
-		v.actions,
-		v.streams
+	return jn = Z.dispatcher, Se(Pt([
+		y.queries,
+		y.mutations,
+		y.actions,
+		y.streams
 	]), (e) => {
 		$.warn(e);
 	}), $.info(`API listening on :${h}`, {
 		dialect: g,
-		queries: v.queries.length,
-		mutations: v.mutations.length,
-		actions: v.actions.length,
-		streams: v.streams.length,
-		workflows: v.workflows.length,
-		workflowWorkers: v.workflowWorkers.length,
+		queries: y.queries.length,
+		mutations: y.mutations.length,
+		actions: y.actions.length,
+		streams: y.streams.length,
+		workflows: y.workflows.length,
+		workflowWorkers: y.workflowWorkers.length,
 		schedules: Zn.length,
-		scheduleCoordination: ir
-	}), u.finish($), Br(async () => {
-		for (let e of Cn) e.stop();
-		Mt.stop();
+		scheduleCoordination: nr
+	}), u.finish($), Vr(async () => {
+		for (let e of xn) e.stop();
+		At.stop();
 		try {
-			await Z.close(), Ct(), Bt?.dispose(), await L.deactivate(), await Pn?.close(), await Je({
-				mirror: Ot,
+			await Z.close(), xt(), Rt?.dispose(), await z.deactivate(), await Mn?.close(), await qe({
+				mirror: Et,
 				log: $
-			}), await Ie.dispose(), await w.close?.();
+			}), await Fe.dispose(), await T.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { Zi as n, Yi as r, Qi as t };
+export { Qi as n, Xi as r, $i as t };