@voltro/cli 0.43.1 → 0.43.2

package/dist/{serveCommand-C8xzYCwa.js → serveCommand-CgK7Kj6j.js}

@@ -3,7 +3,7 @@ import { t } from "./frameworkInspectState-CX2250XB.js";
 import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
-import { $ as s, $t as ee, A as c, At as l, B as u, C as te, Ct as d, D as ne, Dt as f, E as re, Et as p, F as ie, Ft as m, G as h, Gt as ae, H as oe, I as se, It as ce, J as le, Jt as g, K as ue, Kt as _, L as de, Lt as fe, M as pe, Mt as v, N as me, Nt as he, O as ge, Ot as _e, P as ve, Pt as ye, Q as be, Qt as xe, R as Se, Rt as y, S as Ce, Sn as we, St as Te, T as Ee, Tt as De, U as Oe, Ut as b, V as ke, Vt as Ae, W as je, Wt as Me, X as Ne, Xt as Pe, Y as Fe, Yt as Ie, Z as Le, Zt as x, _ as Re, _n as ze, _t as S, an as Be, at as C, b as Ve, bn as He, bt as Ue, c as We, cn as w, ct as Ge, dn as Ke, dt as qe, en as Je, et as Ye, f as T, fn as E, ft as Xe, g as Ze, gn as Qe, gt as $e, h as et, ht as tt, i as nt, in as rt, it, j as at, jt as ot, k as st, kt as ct, ln as D, lt, m as ut, mn as dt, mt as O, nn as k, nt as ft, o as A, on as pt, ot as mt, p as ht, pn as gt, pt as _t, q as vt, qt as yt, r as bt, rn as xt, rt as St, sn as Ct, st as wt, t as Tt, tn as Et, tt as Dt, u as Ot, un as kt, ut as At, v as jt, vn as j, vt as M, w as N, wt as Mt, x as Nt, xn as Pt, xt as Ft, y as It, yn as Lt, yt as Rt, zt } from "./dev-B2rZfqxw.js";
+import { $ as s, $t as ee, A as c, At as l, B as u, C as d, Ct as f, D as te, Dt as ne, E as re, Et as p, F as ie, Ft as m, G as h, Gt as ae, H as oe, I as se, It as ce, J as le, Jt as g, K as ue, Kt as _, L as de, Lt as fe, M as pe, Mt as v, N as me, Nt as he, O as ge, Ot as _e, P as ve, Pt as ye, Q as be, Qt as xe, R as Se, Rt as y, S as Ce, Sn as we, St as Te, T as Ee, Tt as De, U as Oe, Ut as b, V as ke, Vt as Ae, W as je, Wt as Me, X as Ne, Xt as Pe, Y as Fe, Yt as Ie, Z as Le, Zt as x, _ as Re, _n as ze, _t as S, an as Be, at as C, b as Ve, bn as He, bt as Ue, c as We, cn as w, ct as Ge, dn as Ke, dt as qe, en as Je, et as Ye, f as T, fn as E, ft as Xe, g as Ze, gn as Qe, gt as $e, h as et, ht as tt, i as nt, in as rt, it, j as at, jt as ot, k as st, kt as ct, ln as D, lt, m as ut, mn as dt, mt as O, nn as k, nt as ft, o as A, on as pt, ot as mt, p as ht, pn as gt, pt as _t, q as vt, qt as yt, r as bt, rn as xt, rt as St, sn as Ct, st as wt, t as Tt, tn as Et, tt as Dt, u as Ot, un as kt, ut as At, v as jt, vn as j, vt as M, w as N, wt as Mt, x as Nt, xn as Pt, xt as Ft, y as It, yn as Lt, yt as Rt, zt } from "./dev-wumUfDm1.js";
 import { n as Bt } from "./cliArgs-D4p8n7EE.js";
 import { r as Vt } from "./appPort-B_HpJ_ck.js";
 import { ht as Ht, pt as P } from "./webDev-101csg6Q.js";
@@ -16,31 +16,33 @@ import { h as un, o as dn } from "./inspect-B7U7Cl_Z.js";
 import { n as fn } from "./mssqlClusterPatch-_4cE_nun.js";
 import { i as pn, n as mn, r as hn, t as gn } from "./webhookDiscovery-CphsQe59.js";
 import { t as _n } from "./inspectMetrics-CfdKLh6t.js";
-import { r as vn, u as yn } from "./apiBuild-DF0f69Gf.js";
+import { r as vn, u as yn } from "./apiBuild-BWuw8ZXS.js";
 import { t as bn } from "./bootTiming-BdyP9nYw.js";
 import { t as xn } from "./dataProfile-Cm0YVKSy.js";
-import { basename as Sn, join as Cn } from "node:path";
-import { existsSync as wn } from "node:fs";
-import { pathToFileURL as Tn } from "node:url";
+import Sn, { basename as Cn, join as wn } from "node:path";
+import { createWriteStream as Tn, existsSync as En } from "node:fs";
+import { pathToFileURL as Dn } from "node:url";
 import { createLogger as L } from "@voltro/logger";
-import { AuthMiddleware as En, ConnectionInfoMiddleware as Dn, actionToRpc as R, anonymousSubject as On, isWireReachable as kn, mutationToRpc as z, queryToRpc as B, streamToRpc as An, wireErrorUnion as jn, workflowCancelDescriptor as Mn, workflowDomainEventsQueryDescriptor as V, workflowEventDeliveriesQueryDescriptor as Nn, workflowResumeDescriptor as Pn, workflowRunEventsQueryDescriptor as H, workflowRunQueryDescriptor as U, workflowRunStepsQueryDescriptor as Fn, workflowRunsQueryDescriptor as In, workflowSignalDescriptor as Ln, workflowUpdateDescriptor as Rn } from "@voltro/protocol";
-import { Cause as zn, Effect as W, Layer as G, ManagedRuntime as Bn } from "effect";
-import { SqlClient as Vn } from "@effect/sql";
-import { declaredSnapshot as Hn, describeOutcome as Un, pendingFileMigrationIds as Wn, runPlannedMigrations as Gn } from "@voltro/database/sql";
-import { RpcGroup as Kn } from "@effect/rpc";
-import { allRegisteredTables as qn, and as Jn, connectionIdentity as Yn, ensureTableRegistered as Xn, eq as K, or as Zn } from "@voltro/database";
-import { AggregateRegistry as Qn, CostRegistry as $n, DORMANCY_WAKEUP_TENANT as er, Dispatcher as tr, ExpectationRegistry as q, ExperimentRegistry as nr, apiKeyManagementRoutes as rr, attachAnalyticsMirror as ir, attachExpectations as ar, attachExperiments as or, attachFinops as sr, awaitServerListening as cr, bindMutation as J, bindStream as lr, bindSubscription as Y, buildTracingLayer as ur, cancelWakeup as dr, compileCron as fr, dataStoreApiKeyStore as pr, formatServerOnlyLeaks as mr, formatUnresolvedSources as hr, frameworkApiKeyStrategy as gr, getResourcePolicy as _r, installPolicyGuardResolver as vr, loadResourceTuples as yr, makeActionRunner as br, makeAdvisoryLockCoordinator as xr, makeApiKeyService as Sr, makeApiKeyUsageBuffer as Cr, makeApiKeyUsageFlusher as wr, makeAsyncKv as Tr, makeAuthMiddlewareLayers as Er, makeCoordinatedScheduler as Dr, makeEffectStoreLayer as Or, makeLazyWorkflowFacade as kr, makeMutationOutputCodec as Ar, makeMutationRunner as jr, makeOneShotQueryRunner as Mr, makeQueryDescriptorProducer as Nr, makeQueryFinalizer as Pr, makeQueryReauthorizer as Fr, makeQuerySubscriber as Ir, makeSchemaRegistry as Lr, makeWorkflowFacade as Rr, makeWorkflowFacadeWithCallerContext as X, makeWorkflowLayers as zr, noopKv as Br, onProcessShutdown as Vr, recordSubscriptionDelivery as Hr, recordWorkflowRun as Ur, registerDefaultTupleSource as Wr, registerWakeup as Gr, resolveSecretsBackend as Kr, runProvidedEffect as qr, setSecretsBackend as Jr, setSystemStoreHandle as Z, shutdownGraceMsFromEnv as Yr, singleCoordinator as Xr, startRpcServer as Zr, startScheduler as Qr, stripForbiddenForWire as $r, undoCaptureEnabled as ei, unresolvedSources as ti, withScopedRequest as ni, workflowToRpc as ri, wrapStoreWithBootCodec as ii } from "@voltro/runtime";
-import { appStorageProvider as ai, fromNodeReadable as oi, getObjectStream as si, putObjectStream as ci, toNodeReadable as li } from "@voltro/plugin-storage";
-import { isEnvContract as ui } from "@voltro/env";
-import { assertProductionSessionSecret as di } from "@voltro/protocol/session";
-import { createHash as fi, timingSafeEqual as pi } from "node:crypto";
-import { buildDeliverWebhookExecute as mi, buildWebhooksService as hi, defaultIncomingPath as gi, deliverWebhookWorkflow as _i, makeDeferredEmitHandler as vi, mountIncomingWebhook as yi } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as bi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as xi } from "@voltro/plugin-mail";
-import { channelFor as Si, getBroadcastPlugin as Ci } from "@voltro/plugin-broadcast";
-import { packBundle as wi, runExport as Ti, runImport as Ei, storageBlobSink as Di, storageRefsBlobSource as Oi, unpackBundle as ki, unpackBundleToDir as Ai } from "@voltro/data-transfer";
+import { AuthMiddleware as On, ConnectionInfoMiddleware as kn, actionToRpc as R, anonymousSubject as An, isWireReachable as jn, mutationToRpc as Mn, queryToRpc as z, streamToRpc as Nn, wireErrorUnion as Pn, workflowCancelDescriptor as Fn, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as In, workflowRunEventsQueryDescriptor as Ln, workflowRunQueryDescriptor as Rn, workflowRunStepsQueryDescriptor as zn, workflowRunsQueryDescriptor as Bn, workflowSignalDescriptor as Vn, workflowUpdateDescriptor as Hn } from "@voltro/protocol";
+import { Cause as Un, Effect as H, Layer as U, ManagedRuntime as Wn } from "effect";
+import { SqlClient as Gn } from "@effect/sql";
+import { declaredSnapshot as Kn, describeOutcome as qn, pendingFileMigrationIds as Jn, runPlannedMigrations as Yn } from "@voltro/database/sql";
+import W from "node:os";
+import { RpcGroup as Xn } from "@effect/rpc";
+import { allRegisteredTables as Zn, and as Qn, connectionIdentity as $n, ensureTableRegistered as er, eq as G, or as tr } from "@voltro/database";
+import { AggregateRegistry as nr, CostRegistry as K, DORMANCY_WAKEUP_TENANT as rr, Dispatcher as ir, ExpectationRegistry as ar, ExperimentRegistry as or, apiKeyManagementRoutes as sr, attachAnalyticsMirror as cr, attachExpectations as lr, attachExperiments as ur, attachFinops as dr, awaitServerListening as fr, bindMutation as q, bindStream as pr, bindSubscription as J, buildTracingLayer as mr, cancelWakeup as hr, compileCron as gr, dataStoreApiKeyStore as _r, formatServerOnlyLeaks as vr, formatUnresolvedSources as yr, frameworkApiKeyStrategy as br, getResourcePolicy as xr, installPolicyGuardResolver as Sr, loadResourceTuples as Cr, makeActionRunner as wr, makeAdvisoryLockCoordinator as Tr, makeApiKeyService as Er, makeApiKeyUsageBuffer as Dr, makeApiKeyUsageFlusher as Or, makeAsyncKv as kr, makeAuthMiddlewareLayers as Ar, makeCoordinatedScheduler as jr, makeEffectStoreLayer as Mr, makeLazyWorkflowFacade as Nr, makeMutationOutputCodec as Pr, makeMutationRunner as Fr, makeOneShotQueryRunner as Ir, makeQueryDescriptorProducer as Lr, makeQueryFinalizer as Rr, makeQueryReauthorizer as Y, makeQuerySubscriber as zr, makeSchemaRegistry as Br, makeWorkflowFacade as Vr, makeWorkflowFacadeWithCallerContext as Hr, makeWorkflowLayers as Ur, noopKv as Wr, onProcessShutdown as Gr, recordSubscriptionDelivery as Kr, recordWorkflowRun as qr, registerDefaultTupleSource as X, registerWakeup as Jr, resolveSecretsBackend as Yr, runProvidedEffect as Xr, setSecretsBackend as Zr, setSystemStoreHandle as Qr, shutdownGraceMsFromEnv as $r, singleCoordinator as ei, startRpcServer as ti, startScheduler as ni, stripForbiddenForWire as ri, undoCaptureEnabled as ii, unresolvedSources as ai, withScopedRequest as oi, workflowToRpc as si, wrapStoreWithBootCodec as ci } from "@voltro/runtime";
+import { appStorageProvider as li, fromNodeReadable as ui, getObjectStream as di, putObjectStream as fi, toNodeReadable as pi } from "@voltro/plugin-storage";
+import { isEnvContract as mi } from "@voltro/env";
+import { assertProductionSessionSecret as hi } from "@voltro/protocol/session";
+import Z from "node:fs/promises";
+import { createHash as gi, timingSafeEqual as _i } from "node:crypto";
+import { buildDeliverWebhookExecute as vi, buildWebhooksService as yi, defaultIncomingPath as bi, deliverWebhookWorkflow as xi, makeDeferredEmitHandler as Si, mountIncomingWebhook as Ci } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as wi } from "@voltro/plugin-auth";
+import { registerEmailTemplates as Ti } from "@voltro/plugin-mail";
+import { channelFor as Ei, getBroadcastPlugin as Di } from "@voltro/plugin-broadcast";
+import { packBundle as Oi, runExport as ki, runImport as Ai, storageBlobSink as ji, storageRefsBlobSource as Mi, unpackBundle as Ni, unpackBundleToDir as Pi } from "@voltro/data-transfer";
 //#region src/serveDrain.ts
-var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t) => setTimeout(t, e)), Ni = (e) => {
+var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t) => setTimeout(t, e)), Li = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -54,14 +56,14 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? ji();
+		let n = t.budgetMs ?? Fi();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await Mi(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await Ii(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -78,7 +80,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await Mi(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await Ii(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -90,25 +92,115 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			await a(e), await o();
 		}
 	};
-}, Pi = "/_voltro/admin/import", Fi = "/_voltro/admin/export", Q = (e, t) => ({
+}, Ri = "/_voltro/admin/import", zi = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Ii = (e) => {
+}), Bi = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, Li = (e, t) => pi(fi("sha256").update(e).digest(), fi("sha256").update(t).digest()), Ri = (e, t) => {
+}, Vi = (e, t) => _i(gi("sha256").update(e).digest(), gi("sha256").update(t).digest()), Hi = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = Ii(e.headers);
-	return !n || !Li(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, zi = L({ scope: "voltro:admin-import" }), Bi = "VBUNDLE2", Vi = async function* (e) {
+	let n = Bi(e.headers);
+	return !n || !Vi(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, Ui = /^[A-Za-z0-9_-]{8,64}$/, Wi = (e) => Ui.test(e), Gi = () => Sn.join(W.tmpdir(), "voltro-import-uploads"), Ki = (e) => Sn.join(Gi(), e), qi = (e) => Sn.join(Ki(e), "archive.bin"), Ji = (e) => Sn.join(Ki(e), "meta.json"), Yi = async (e = Date.now()) => {
+	let t = 0;
+	try {
+		for (let n of await Z.readdir(Gi())) {
+			let r = await Z.stat(Ki(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await Z.rm(Ki(n), {
+				recursive: !0,
+				force: !0
+			}).catch(() => void 0), t++));
+		}
+	} catch {}
+	return t;
+}, Xi = async (e) => {
+	if (!Wi(e)) return {
+		bytes: 0,
+		key: null
+	};
+	let t = await Z.stat(qi(e)).catch(() => null);
+	if (t === null) return {
+		bytes: 0,
+		key: null
+	};
+	let n = await Z.readFile(Ji(e), "utf8").then((e) => JSON.parse(e), () => ({}));
+	return {
+		bytes: t.size,
+		key: n.key ?? null
+	};
+}, Zi = async (e) => {
+	if (!Wi(e.id)) return {
+		reason: "bad-id",
+		message: `upload id must match ${String(Ui)}`
+	};
+	let t = await Xi(e.id);
+	return t.key !== null && t.key !== e.key ? {
+		reason: "key-mismatch",
+		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
+	} : e.offset === t.bytes ? (await Z.mkdir(Ki(e.id), { recursive: !0 }), t.key === null && await Z.writeFile(Ji(e.id), JSON.stringify({
+		key: e.key,
+		startedAt: (/* @__PURE__ */ new Date()).toISOString()
+	})), await new Promise((t, n) => {
+		let r = Tn(qi(e.id), { flags: "a" });
+		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
+	}), { total: t.bytes + e.bytes.byteLength }) : {
+		reason: "offset-mismatch",
+		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
+		expectedOffset: t.bytes
+	};
+}, Qi = async (e) => {
+	let t = await Z.stat(qi(e));
+	return {
+		path: qi(e),
+		bytes: t.size
+	};
+}, $i = async (e) => {
+	Wi(e) && await Z.rm(Ki(e), {
+		recursive: !0,
+		force: !0
+	}).catch(() => void 0);
+}, ea = L({ scope: "voltro:admin-import" }), ta = "VBUNDLE2", na = async function* (e) {
 	yield e;
-}, Hi = (e) => async (t) => {
-	let n = Ri(t, e.secret);
+}, ra = (e) => async (t) => {
+	let n = Hi(t, e.secret);
 	if (n) return n;
-	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.headers["x-import-dry-run"] === "1" || t.headers["x-import-dry-run"] === "true", ee = (t.headers["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean), c = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Bi, l, u;
-	if (c) l = Vi(t.rawBody), u = "upload";
+	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"] === "1" || t.headers["x-import-atomic"] === "true", o = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", s = t.headers["x-import-dry-run"] === "1" || t.headers["x-import-dry-run"] === "true", ee = (t.headers["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean), c = t.headers["x-import-upload-id"], l;
+	if (c !== void 0 && c !== "") {
+		if (Yi(), t.headers["x-import-probe"] === "1") return Q(200, {
+			uploadId: c,
+			bytes: (await Xi(c)).bytes
+		});
+		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
+		if (e === "" || !Number.isFinite(n) || n < 0) return Q(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
+		let r = await Zi({
+			id: c,
+			key: e,
+			offset: n,
+			bytes: t.rawBody
+		});
+		if ("reason" in r) return ea.warn("admin.import chunk refused", {
+			uploadId: c,
+			reason: r.reason
+		}), Q(409, {
+			error: "chunk refused",
+			reason: r.reason,
+			message: r.message,
+			...r.expectedOffset === void 0 ? {} : { expectedOffset: r.expectedOffset }
+		});
+		if (t.headers["x-import-chunk-final"] !== "1") return Q(202, {
+			uploadId: c,
+			bytes: r.total
+		});
+		l = (await Qi(c)).path;
+	}
+	let u = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === ta, d, f;
+	if (l !== void 0) {
+		let { createReadStream: e } = await import("node:fs");
+		d = e(l), f = "chunked";
+	} else if (u) d = na(t.rawBody), f = "upload";
 	else {
 		let n;
 		try {
@@ -118,17 +210,17 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		}
 		if (typeof n.bundleKey != "string" || !n.bundleKey) return Q(400, { error: "body.bundleKey (string) is required for the storage transport" });
 		if (!e.openArchive) return Q(501, { error: "storage transport not configured on this instance" });
-		l = e.openArchive(n.bundleKey), u = "storage";
+		d = e.openArchive(n.bundleKey), f = "storage";
 	}
-	let te = await import("node:os"), d = await import("node:fs/promises"), ne = await import("node:path"), f = await d.mkdtemp(ne.join(te.tmpdir(), "voltro-admin-import-"));
+	let te = await import("node:os"), ne = await import("node:fs/promises"), re = await import("node:path"), p = await ne.mkdtemp(re.join(te.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await ki(l, {
-			dir: f,
+		e.assetSink ? await Ni(d, {
+			dir: p,
 			blobs: e.assetSink
-		}) : await Ai(l, f);
-		let t = await W.runPromiseExit(Ei({
+		}) : await Pi(d, p);
+		let t = await H.runPromiseExit(Ai({
 			store: e.store,
-			bundleDir: f,
+			bundleDir: p,
 			...r ? { mode: r } : {},
 			...i ? { onConflict: i } : {},
 			...a ? { atomic: a } : {},
@@ -136,15 +228,15 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			...ee.length > 0 ? { tables: ee } : {},
 			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
 			force: o,
-			onWarn: (e) => zi.warn("admin.import", { message: e }),
+			onWarn: (e) => ea.warn("admin.import", { message: e }),
 			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
 		}));
 		if (t._tag === "Failure") {
 			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
 			if (e && e._tag === "SchemaDriftError") {
 				let t = e;
-				return zi.warn("admin.import refused (schema drift)", {
-					transport: u,
+				return ea.warn("admin.import refused (schema drift)", {
+					transport: f,
 					bundle: t.bundleFingerprint.slice(0, 16),
 					target: t.targetFingerprint.slice(0, 16)
 				}), Q(409, {
@@ -155,50 +247,59 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					hint: "each line above would break the load: a table or column the bundle carries that the target cannot take, or a column the target requires that the bundle has no value for. Fix the target schema, re-export against it, or resend with x-import-force: 1 to write anyway."
 				});
 			}
-			throw Error(String(e?.message ?? e ?? "import failed"));
+			let n = typeof e?.reason == "string" ? e.reason : void 0;
+			if (n !== void 0 && e._tag === "ImportModeError") return ea.warn("admin.import refused (mode)", {
+				transport: f,
+				mode: e.mode
+			}), Q(409, {
+				error: "import mode refused",
+				mode: e.mode,
+				message: n
+			});
+			throw Error(n ?? String(e?.message ?? e ?? "import failed"));
 		}
 		let n = t.value, c = n.tables.reduce((e, t) => e + t.rowCount, 0);
-		return zi.info(s ? "admin.import (dry run — nothing written)" : "admin.import", {
-			transport: u,
+		return ea.info(s ? "admin.import (dry run — nothing written)" : "admin.import", {
+			transport: f,
 			tables: n.tables.length,
 			rows: c,
 			mode: r ?? "upsert",
 			atomic: a
-		}), Q(200, {
+		}), s || e.refreshSubscriptions?.(`data import: ${n.tables.length} table(s), mode ${r ?? "upsert"}`), Q(200, {
 			tables: n.tables.length,
 			rows: c,
-			transport: u,
+			transport: f,
 			...s ? {
 				dryRun: !0,
 				wrote: !1
 			} : {}
 		});
 	} catch (e) {
-		return zi.warn("admin.import failed", {
-			transport: u,
+		return ea.warn("admin.import failed", {
+			transport: f,
 			error: e?.message ?? String(e)
 		}), Q(500, {
 			error: "import failed",
 			message: e?.message ?? String(e)
 		});
 	} finally {
-		await d.rm(f, {
+		await ne.rm(p, {
 			recursive: !0,
 			force: !0
-		});
+		}), c !== void 0 && c !== "" && l !== void 0 && await $i(c);
 	}
-}, Ui = L({ scope: "voltro:admin-export" }), Wi = async (e) => {
+}, ia = L({ scope: "voltro:admin-export" }), aa = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
-}, Gi = (e) => typeof e.tenant == "string" && e.tenant ? {
+}, oa = (e) => typeof e.tenant == "string" && e.tenant ? {
 	kind: "tenant",
 	tenantId: e.tenant
 } : Array.isArray(e.tables) && e.tables.length ? {
 	kind: "tables",
 	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, Ki = (e) => async (t) => {
-	let n = Ri(t, e.secret);
+} : { kind: "all" }, sa = (e) => async (t) => {
+	let n = Hi(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -218,13 +319,13 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? Gi(r), ee = typeof r.bundleKey == "string" && r.bundleKey.length > 0, c = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, l = await import("node:os"), u = await import("node:fs/promises"), te = await import("node:path"), d = await u.mkdtemp(te.join(l.tmpdir(), "voltro-admin-export-"));
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? oa(r), ee = typeof r.bundleKey == "string" && r.bundleKey.length > 0, c = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, l = await import("node:os"), u = await import("node:fs/promises"), d = await import("node:path"), f = await u.mkdtemp(d.join(l.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await W.runPromise(Ti({
+		let t = await H.runPromise(ki({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
-			outDir: d,
+			outDir: f,
 			...i.subset ? { subset: i.subset } : {
 				scope: s,
 				...e.tenantTables && e.tenantTables.length > 0 ? { tenantTables: e.tenantTables } : {}
@@ -236,10 +337,10 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		if (ee) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => wi({
-				dir: d,
+			return await e.putArchive(i, () => Oi({
+				dir: f,
 				...c
-			})), Ui.info("admin.export", {
+			})), ia.info("admin.export", {
 				transport: "storage",
 				tables: t.tables.length,
 				rows: n,
@@ -253,11 +354,11 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				transport: "storage"
 			});
 		}
-		let u = await Wi(wi({
-			dir: d,
+		let u = await aa(Oi({
+			dir: f,
 			...c
 		}));
-		return Ui.info("admin.export", {
+		return ia.info("admin.export", {
 			transport: "download",
 			tables: t.tables.length,
 			rows: n,
@@ -274,18 +375,18 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			}
 		};
 	} catch (e) {
-		return Ui.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+		return ia.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
 			error: "export failed",
 			message: e?.message ?? String(e)
 		});
 	} finally {
-		await u.rm(d, {
+		await u.rm(f, {
 			recursive: !0,
 			force: !0
 		});
 	}
-}, qi = (e, t, n = {}) => (async function* () {
-	let r = await W.runPromise(si(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await li(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, ca = (e, t, n = {}) => (async function* () {
+	let r = await H.runPromise(di(e, t).pipe(H.timeout(n.openTimeout ?? "30 seconds"))), i = await pi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -294,7 +395,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), Ji = {
+})(), la = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -303,26 +404,26 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, Yi = async (e) => {
+}, ua = async (e) => {
 	zt(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), Z({
+	}), Qr({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new tr({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new ir({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		...e.reactive === void 0 ? {} : { reactive: e.reactive },
 		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => Hr({
+		recordDelivery: (e) => Kr({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? Ji, a = e.kv ?? Br, o, ee = () => void 0, c, te, d, ne, f, re, ce, le = ae({
+	}), i = e.cache ?? la, a = e.kv ?? Wr, o, ee = () => void 0, c, d, f, te, ne, re, ce, le = ae({
 		store: e.store,
 		warn: (e, t) => {
 			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
@@ -330,7 +431,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	}), ue = le.remember, de = le.resolve, fe = _({
 		authority: e.authority,
 		getStore: () => e.store
-	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? kr(() => o) : void 0, he = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = he || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", _e = e.tenantIsolation === "namespace", ve = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), xe, Se, y = e.discovered.webhooks;
+	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? Nr(() => o) : void 0, he = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = he || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", _e = e.tenantIsolation === "namespace", ve = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), xe, Se, y = e.discovered.webhooks;
 	if (y && y.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
 		let t = w({
@@ -339,8 +440,8 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			cache: i,
 			kv: a
 		}), n = y.outgoing.map((e) => e.descriptor);
-		Se = _i.toLayer(mi(t, { events: n })), xe = hi(t, async (e) => {
-			let t = d;
+		Se = xi.toLayer(vi(t, { events: n })), xe = yi(t, async (e) => {
+			let t = f;
 			if (t === void 0) {
 				ve.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
 					deliveryId: e.deliveryId,
@@ -348,7 +449,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				});
 				return;
 			}
-			t.runPromise(_i.execute(e)).catch((t) => {
+			t.runPromise(xi.execute(e)).catch((t) => {
 				ve.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -358,9 +459,9 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	}
 	let Ce = /* @__PURE__ */ new Map();
 	if (y) for (let e of y.incoming) {
-		let t = e.descriptor.path ?? gi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = yi(e.descriptor, {
+		let t = e.descriptor.path ?? bi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ci(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => v === void 0 ? void 0 : X(v, {
+			resolveWorkflows: () => v === void 0 ? void 0 : Hr(v, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -377,11 +478,11 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		});
 		Ce.set(t, { handle: r });
 	}
-	vr(), Wr((t) => yr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	Sr(), X((t) => Cr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
 	let we = [], Te = [...e.discovered.outboxHandlers ?? [], ...mn((y?.outgoing.length ?? 0) + (y?.incoming.length ?? 0) + (y?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: vi(() => xe)
+		definition: Si(() => xe)
 	}] : []], Ee = Te.length > 0 ? Pe({
 		handlers: Te,
 		store: e.store,
@@ -431,17 +532,17 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		...Ee === void 0 ? {} : { outbox: { nudge: Ee.nudge } },
 		...b.active ? { connections: { registry: b.registry } } : {},
 		eventBus: S.bus
-	}), Ve = G.succeed(Qn, p), He = G.succeed(q, Ue), We = G.succeed($n, Rt), Ke = G.succeed(nr, Ft), Je = (t, n) => {
-		let r = t.pipe(W.provide(Or(n)));
-		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Ve)).pipe(W.provide(He)).pipe(W.provide(We)).pipe(W.provide(Ke));
+	}), Ve = U.succeed(nr, p), He = U.succeed(ar, Ue), We = U.succeed(K, Rt), Ke = U.succeed(or, Ft), Je = (t, n) => {
+		let r = t.pipe(H.provide(Mr(n)));
+		return (e.baseLayer ? r.pipe(H.provide(e.baseLayer)) : r).pipe(H.provide(Ve)).pipe(H.provide(He)).pipe(H.provide(We)).pipe(H.provide(Ke));
 	}, Ye = (e, t) => {
 		let n = Je(e, t);
-		return qr(n);
+		return Xr(n);
 	}, T = _n(), E = vt(e.plugins ?? [], T), Xe = u({
 		plugins: e.plugins ?? [],
 		metrics: T,
 		log: e.log ?? L({ scope: "voltro:serve" })
-	}), Qe = h(e.plugins ?? [], T), $e = e.security?.defaultDeny ?? !0, et = jr({
+	}), Qe = h(e.plugins ?? [], T), $e = e.security?.defaultDeny ?? !0, et = Fr({
 		store: e.store,
 		defaultDeny: $e,
 		recordMetric: (e) => {
@@ -459,7 +560,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	let rt = Ne({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), it = br({
+	}), it = wr({
 		defaultDeny: $e,
 		buildContext: (e) => C(e),
 		runEffect: Ye,
@@ -467,7 +568,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			T.record(e);
 		},
 		...E.action === void 0 ? {} : { interceptor: E.action }
-	}), st = Pr({
+	}), st = Rr({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
 	}), ct = {
@@ -476,32 +577,32 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		finalize: (e, t) => st(e, t.subject),
 		provideEffect: Je,
 		...E.query === void 0 ? {} : { interceptor: E.query }
-	}, D = Nr(ct), ut = Mr({
+	}, D = Lr(ct), ut = Ir({
 		...ct,
-		queryRows: (t, n) => e.store.query(t).then((e) => $r(t.table, e, n.subject))
-	}), dt = Ir({
+		queryRows: (t, n) => e.store.query(t).then((e) => ri(t.table, e, n.subject))
+	}), dt = zr({
 		...ct,
 		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), O = (e) => e.filter((e) => kn(e.descriptor)), k = {};
+	}), O = (e) => e.filter((e) => jn(e.descriptor)), k = {};
 	for (let t of [
 		...O(e.discovered.queries),
 		...nt.queries,
 		...rt.queries,
 		...b.queries
-	]) k[t.descriptor.name] = (e) => Y(D(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Fr(t, e));
+	]) k[t.descriptor.name] = (e) => J(D(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Y(t, e));
 	for (let t of [
 		...O(e.discovered.mutations),
 		...nt.mutations,
 		...rt.mutations,
 		...b.mutations
 	]) {
-		let n = Ar(t.descriptor.output);
-		k[t.descriptor.name] = (r) => J(async (e, n) => et(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, jn(t.descriptor, "mutation"));
+		let n = Pr(t.descriptor.output);
+		k[t.descriptor.name] = (r) => q(async (e, n) => et(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Pn(t.descriptor, "mutation"));
 	}
 	for (let t of [...O(e.discovered.actions), ...b.actions]) {
-		let n = Ar(t.descriptor.output);
-		k[t.descriptor.name] = (r) => J(async (e, n) => it(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, jn(t.descriptor, "action"));
+		let n = Pr(t.descriptor.output);
+		k[t.descriptor.name] = (r) => q(async (e, n) => it(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Pn(t.descriptor, "action"));
 	}
 	let ft = () => `public-${Math.random().toString(36).slice(2, 10)}`, A = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
@@ -551,28 +652,31 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		log: e.log ?? L({ scope: "voltro:serve" })
 	}), gt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, _t = gt && gt.length >= 16 ? [{
 		method: "POST",
-		path: Pi,
-		handle: Hi({
+		path: Ri,
+		handle: ra({
 			secret: gt,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: Di(ai()),
-			openArchive: (e) => qi(ai(), e)
+			assetSink: ji(li()),
+			openArchive: (e) => ca(li(), e),
+			refreshSubscriptions: (e) => {
+				r.refreshAll(e);
+			}
 		})
 	}, {
 		method: "POST",
-		path: Fi,
-		handle: Ki({
+		path: zi,
+		handle: sa({
 			secret: gt,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
 			loadProfile: xn,
-			assetSource: Oi(ai(), e.store),
+			assetSource: Mi(li(), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = ai(), i = oi("storage", () => n.from(t()));
-				await W.runPromise(ci(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = li(), i = ui("storage", () => n.from(t()));
+				await H.runPromise(fi(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
 	}] : [], bt = [
@@ -582,24 +686,24 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		...b.httpRoutes
 	];
 	Object.assign(k, S.handlers);
-	for (let t of O(e.discovered.streams ?? [])) k[t.descriptor.name] = (n) => lr((r) => ni(r, (r) => {
+	for (let t of O(e.discovered.streams ?? [])) k[t.descriptor.name] = (n) => pr((r) => oi(r, (r) => {
 		let i = C(r), a = t.executor(n, i);
-		if (W.isEffect(a)) {
-			let t = a.pipe(W.provide(Or(i.store)));
-			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Ve)).pipe(W.provide(He)).pipe(W.provide(We)).pipe(W.provide(Ke));
+		if (H.isEffect(a)) {
+			let t = a.pipe(H.provide(Mr(i.store)));
+			return (e.baseLayer ? t.pipe(H.provide(e.baseLayer)) : t).pipe(H.provide(Ve)).pipe(H.provide(He)).pipe(H.provide(We)).pipe(H.provide(Ke));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? W.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? H.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) k[t.definition.name] = (e) => J(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) k[t.definition.name] = (e) => q(async (e, n) => {
 		let r = n;
-		return X(v, {
+		return Hr(v, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	he && (k[U.name] = (e) => Y(D({
-		descriptor: U,
+	he && (k[Rn.name] = (e) => J(D({
+		descriptor: Rn,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -608,30 +712,30 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: Zn(K("id", t), K("executionId", t)),
+				predicate: tr(G("id", t), G("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${U.name}`), k[In.name] = (e) => Y(D({
-		descriptor: In,
+	}, e), r, `subscription.${Rn.name}`), k[Bn.name] = (e) => J(D({
+		descriptor: Bn,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [K("tag", t.tag)], ...t.status === void 0 ? [] : [K("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [G("tag", t.tag)], ...t.status === void 0 ? [] : [G("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Jn(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Qn(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${In.name}`), k[Fn.name] = (e) => Y(D({
-		descriptor: Fn,
+	}, e), r, `subscription.${Bn.name}`), k[zn.name] = (e) => J(D({
+		descriptor: zn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -640,14 +744,14 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: K("runId", t),
+				predicate: G("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Fn.name}`), k[H.name] = (e) => Y(D({
-		descriptor: H,
+	}, e), r, `subscription.${zn.name}`), k[Ln.name] = (e) => J(D({
+		descriptor: Ln,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -656,14 +760,14 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: K("runId", t),
+				predicate: G("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${H.name}`), k[V.name] = (e) => Y(D({
-		descriptor: V,
+	}, e), r, `subscription.${Ln.name}`), k[B.name] = (e) => J(D({
+		descriptor: B,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -672,14 +776,14 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : K("name", t.name),
+				predicate: t.name === void 0 ? void 0 : G("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${V.name}`), k[Nn.name] = (e) => Y(D({
-		descriptor: Nn,
+	}, e), r, `subscription.${B.name}`), k[V.name] = (e) => J(D({
+		descriptor: V,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -688,59 +792,59 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: K("eventId", t),
+				predicate: G("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Nn.name}`), k[Mn.name] = (t) => J(async (t, n) => {
+	}, e), r, `subscription.${V.name}`), k[Fn.name] = (t) => q(async (t, n) => {
 		let r = t;
 		return await pt(e.store, n.subject, { executionId: r.executionId }), await v.cancel(r.workflowName, r.executionId), await Nt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Mn.name}`), k[Pn.name] = (t) => J(async (t, n) => {
+	}, t, `action.${Fn.name}`), k[In.name] = (t) => q(async (t, n) => {
 		let r = t;
 		return await pt(e.store, n.subject, { executionId: r.executionId }), await v.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Pn.name}`), k[Ln.name] = (t) => J(async (t, n) => {
+	}, t, `action.${In.name}`), k[Vn.name] = (t) => q(async (t, n) => {
 		let r = t;
 		return await pt(e.store, n.subject, { id: r.id }), v.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Ln.name}`), k[Rn.name] = (t) => J(async (t, n) => {
+	}, t, `action.${Vn.name}`), k[Hn.name] = (t) => q(async (t, n) => {
 		let r = t;
 		return await pt(e.store, n.subject, { id: r.id }), v.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Rn.name}`));
+	}, t, `action.${Hn.name}`));
 	let St = [
-		...O(e.discovered.queries).map((e) => B(e.descriptor)),
-		...O(e.discovered.mutations).map((e) => z(e.descriptor)),
+		...O(e.discovered.queries).map((e) => z(e.descriptor)),
+		...O(e.discovered.mutations).map((e) => Mn(e.descriptor)),
 		...O(e.discovered.actions).map((e) => R(e.descriptor)),
-		...nt.queries.map((e) => B(e.descriptor)),
-		...nt.mutations.map((e) => z(e.descriptor)),
-		...rt.queries.map((e) => B(e.descriptor)),
-		...rt.mutations.map((e) => z(e.descriptor)),
-		...b.queries.map((e) => B(e.descriptor)),
-		...b.mutations.map((e) => z(e.descriptor)),
+		...nt.queries.map((e) => z(e.descriptor)),
+		...nt.mutations.map((e) => Mn(e.descriptor)),
+		...rt.queries.map((e) => z(e.descriptor)),
+		...rt.mutations.map((e) => Mn(e.descriptor)),
+		...b.queries.map((e) => z(e.descriptor)),
+		...b.mutations.map((e) => Mn(e.descriptor)),
 		...b.actions.map((e) => R(e.descriptor)),
-		...O(e.discovered.streams ?? []).map((e) => An(e.descriptor)),
+		...O(e.discovered.streams ?? []).map((e) => Nn(e.descriptor)),
 		...S.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => ri(e.definition)),
+		...(e.discovered.workflows ?? []).map((e) => si(e.definition)),
 		...he ? [
-			B(U),
-			B(In),
-			B(Fn),
-			B(H),
-			B(V),
-			B(Nn),
-			R(Mn),
-			R(Pn),
-			R(Ln),
-			R(Rn)
+			z(Rn),
+			z(Bn),
+			z(zn),
+			z(Ln),
+			z(B),
+			z(V),
+			R(Fn),
+			R(In),
+			R(Vn),
+			R(Hn)
 		] : []
-	], Tt = Kn.make(...St).middleware(En).middleware(Dn), Dt = Er({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Ot = e.dormancyTenantId ?? er, kt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => Gr(e.store, {
+	], Tt = Xn.make(...St).middleware(On).middleware(kn), Dt = Ar({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Ot = e.dormancyTenantId ?? rr, kt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => Jr(e.store, {
 			tenantId: r ?? Ot,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => dr(e.store, {
+		cancel: (t, n) => hr(e.store, {
 			tenantId: n ?? Ot,
 			kind: "workflow",
 			refId: t
@@ -761,15 +865,15 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			interruptChild: async (t, n) => {
 				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
 				if (!r) throw Error(`Unknown child workflow: ${t}`);
-				if (!d) throw Error("Workflow runtime is not ready");
-				await d.runPromise(r.definition.interrupt(n));
+				if (!f) throw Error("Workflow runtime is not ready");
+				await f.runPromise(r.definition.interrupt(n));
 			}
 		});
 	}, Nt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: K("executionId", n),
+			predicate: G("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -791,7 +895,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			}
 		}), a && await Mt(n, "cancelled");
 	}, Pt = [
-		...zr(e.discovered.workflows ?? [], {
+		...Ur(e.discovered.workflows ?? [], {
 			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? C({
 				subject: t.subject,
 				traceId: t.traceId
@@ -814,33 +918,33 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				onParentClose: ({ executionId: e, status: t }) => Mt(e, t),
 				...Ge(t.definition),
 				onTerminal: async ({ executionId: e }) => {
-					await te?.gate.release(e);
+					await d?.gate.release(e);
 				},
 				recorder: N,
 				pluginWorkflowStepLayer: Qe,
-				recordRun: Ur
+				recordRun: qr
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
 		...Se === void 0 ? [] : [Se]
-	], It = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Se === void 0 ? [] : ["voltro.deliverWebhook"]], Lt = Pt.length > 0 ? G.mergeAll(...Pt) : G.empty;
+	], It = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Se === void 0 ? [] : ["voltro.deliverWebhook"]], Lt = Pt.length > 0 ? U.mergeAll(...Pt) : U.empty;
 	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Se !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Lt.pipe(G.provideMerge(e.workflowEngineLayer));
-		d = Bn.make(e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))), await d.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${It.length} entity type(s) registered`, { entities: It });
-		let n = await import("@voltro/workflow/cluster"), r = (e) => d.runPromise(n.redriveFailedRun(e)), i = (e) => d.runPromise(n.resumeRunFromStep(e));
+		let t = Lt.pipe(U.provideMerge(e.workflowEngineLayer));
+		f = Wn.make(e.baseLayer === void 0 ? t : t.pipe(U.provideMerge(e.baseLayer))), await f.runPromise(H.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${It.length} entity type(s) registered`, { entities: It });
+		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
 		re = await j({
-			provider: Ci(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Ci(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			provider: Di(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: Di(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
 			namespace: Me,
 			replicaId: crypto.randomUUID(),
-			pollStorage: () => d.runPromise(n.pollWorkflowStorage),
+			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
 				op: e.op,
 				...e.origin === void 0 ? {} : { origin: e.origin }
 			})),
 			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
-		}), ne = async (t) => {
+		}), te = async (t) => {
 			let n = await oe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
@@ -858,7 +962,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				activitiesReset: n.outcome.activitiesReset,
 				reason: n.outcome.reason
 			};
-		}, f = async (t) => {
+		}, ne = async (t) => {
 			let n = await Oe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
@@ -879,7 +983,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? xr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Xr, s = Dr({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Tr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ei, s = jr({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
 		}), l = {
@@ -899,12 +1003,12 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				log: I,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
-				workflowRuntime: d,
+				workflowRuntime: f,
 				workflowRunRecorder: N,
 				closeChildrenForParent: Mt
 			}), u;
 		};
-		ee = p, te = tt({
+		ee = p, d = tt({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -933,8 +1037,8 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			},
 			log: l
 		});
-		let m = te;
-		m !== void 0 && Vr(() => m.stop()), c = qe({
+		let m = d;
+		m !== void 0 && Gr(() => m.stop()), c = qe({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -945,22 +1049,22 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => d === void 0 || M === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await d.runPromise(M.completeSuspendingSignal({
+			resumeSignal: () => f === void 0 || M === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(M.completeSuspendingSignal({
 					store: e.store,
 					target: At(t, n),
 					signalName: r,
 					payload: i
 				}));
 			},
-			runEffect: (e) => d.runPromise(e),
+			runEffect: (e) => f.runPromise(e),
 			scheduleCoordinated: s,
 			log: l
 		});
 		let h = c;
-		h !== void 0 && Vr(() => h.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Rr({
+		h !== void 0 && Gr(() => h.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Vr({
 			workflows: e.discovered.workflows ?? [],
-			runEffect: (e) => d.runPromise(e),
+			runEffect: (e) => f.runPromise(e),
 			onEnqueue: () => re?.publishWake(),
 			...m === void 0 ? {} : {
 				admitStart: m.gate.admitStart,
@@ -976,7 +1080,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					signalName: n,
 					payload: r
 				});
-				return await d.runPromise(M.completeSuspendingSignal({
+				return await f.runPromise(M.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
@@ -995,7 +1099,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			retry: (t, n) => je({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
-				runPromise: (e) => d.runPromise(e)
+				runPromise: (e) => f.runPromise(e)
 			}, t, n),
 			redrive: (t) => oe({
 				store: e.store,
@@ -1004,13 +1108,13 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Bt = G.mergeAll(Tt.toLayer(k), Dt), Vt = xt(k, e.discovered.queries.map((e) => e.descriptor.name), he), Ht = G.mergeAll(Tt.toLayer(Vt), Dt), P = e.observability, F = await ur({
+	let Bt = U.mergeAll(Tt.toLayer(k), Dt), Vt = xt(k, e.discovered.queries.map((e) => e.descriptor.name), he), Ht = U.mergeAll(Tt.toLayer(Vt), Dt), P = e.observability, F = await mr({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
 		...P && P.spanProcessors.length > 0 ? { extraSpanProcessors: P.spanProcessors } : {},
 		...P && P.metricReaders.length > 0 ? { extraMetricReaders: P.metricReaders } : {},
 		...P && Object.keys(P.resourceAttributes).length > 0 ? { resourceAttributes: P.resourceAttributes } : {},
 		...P && P.sampler !== void 0 ? { sampler: P.sampler } : {}
-	}), Ut = !1, Wt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Gt, shutdown: Kt } = Zr({
+	}), Ut = !1, Wt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Gt, shutdown: Kt } = ti({
 		group: Tt,
 		handlersLayer: Bt,
 		httpHandlersLayer: Ht,
@@ -1028,10 +1132,10 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
 		...Ce.size > 0 ? { webhookRoutes: Ce } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), qt = Ni(Gt);
-	if (await cr(Gt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? xr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Xr;
-		ce = await Qr(e.discovered.schedules ?? [], {
+	}), qt = Li(Gt);
+	if (await fr(Gt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Tr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ei;
+		ce = await ni(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1068,7 +1172,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 					return;
 				}
 				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await X(v, {
+				await Hr(v, {
 					traceId: `reaction:${n.workflow}`,
 					source: `reaction:${n.workflow}`
 				}).start(n.workflow, e);
@@ -1077,14 +1181,14 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			await ot(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
 				runAction: (e, t, n) => Promise.resolve(it(e, t, n)),
-				makeSubject: (e) => On(e),
+				makeSubject: (e) => An(e),
 				now: () => Date.now(),
 				log: t
 			});
 		}, r = async (n, r) => {
 			try {
 				let { requireAiBudget: t } = await import("@voltro/ai");
-				return (await W.runPromise(W.either(t(e.store, {
+				return (await H.runPromise(H.either(t(e.store, {
 					tenantId: n,
 					limitUsd: r
 				}))))._tag === "Right";
@@ -1106,22 +1210,22 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ve = G.succeed(Qn, Xt.registry));
+	}), Ve = U.succeed(nr, Xt.registry));
 	let Zt;
-	(e.discovered.expectations?.length ?? 0) > 0 && (Zt = ar({
+	(e.discovered.expectations?.length ?? 0) > 0 && (Zt = lr({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
 		log: I.child("expectation")
-	}), He = G.succeed(q, Zt.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = sr({
+	}), He = U.succeed(ar, Zt.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = dr({
 		discovered: e.discovered.budgets ?? [],
 		log: I.child("finops")
-	}), We = G.succeed($n, n.registry));
+	}), We = U.succeed(K, n.registry));
 	let Qt;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (Qt = or({
+	return (e.discovered.experiments?.length ?? 0) > 0 && (Qt = ur({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
 		log: I.child("experiment")
-	}), Ke = G.succeed(nr, Qt.registry)), Ut = !0, e.bootTiming?.mark("ready"), {
+	}), Ke = U.succeed(or, Qt.registry)), Ut = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
 		server: Gt,
 		scheduler: ce,
@@ -1134,19 +1238,19 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		rpcMetrics: () => T,
 		webhooksService: () => xe,
 		runCanceller: () => ee(),
-		flowControlHealth: () => te?.cancelHealth(),
+		flowControlHealth: () => d?.cancelHealth(),
 		inferenceHealth: () => c?.health(),
 		workflowWriteActions: () => v === void 0 || N === void 0 ? void 0 : se({
 			store: e.store,
 			log: I,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
-			workflowRuntime: d,
+			workflowRuntime: f,
 			workflowRunRecorder: N,
 			closeChildrenForParent: Mt
 		}),
-		redriveWorkflowRun: (e) => ne ? ne(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
-		resumeWorkflowRunFromStep: (e) => f ? f(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
+		redriveWorkflowRun: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
+		resumeWorkflowRunFromStep: (e) => ne ? ne(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
 			Ut = !1, await qt.drainRequests();
 			for (let e of we) try {
@@ -1154,27 +1258,27 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			} catch (e) {
 				I.warn("serve: teardown step failed", {}, e);
 			}
-			await Be?.detach(), await ze.detach(), Xt?.detach(), Zt?.detach(), n?.detach(), Qt?.detach(), Yt?.(), Jt?.(), await ce?.shutdown(), r.close(), await re?.detach(), await d?.dispose(), await Kt(), await qt.finish();
+			await Be?.detach(), await ze.detach(), Xt?.detach(), Zt?.detach(), n?.detach(), Qt?.detach(), Yt?.(), Jt?.(), await ce?.shutdown(), r.close(), await re?.detach(), await f?.dispose(), await Kt(), await qt.finish();
 		}
 	};
-}, $ = L({ scope: "voltro:serve" }), Xi = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Zi = Bt, Qi = async (e) => {
+}, $ = L({ scope: "voltro:serve" }), da = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", fa = Bt, pa = async (e) => {
 	let t = yn(process.cwd());
-	if (wn(t)) {
+	if (En(t)) {
 		let n;
 		try {
-			let e = await import(Tn(t).href);
+			let e = await import(Dn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return $i(e);
-}, $i = async (s) => {
+	return ma(e);
+}, ma = async (s) => {
 	let l = bn();
 	e("serve");
 	try {
-		di();
+		hi();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
@@ -1182,11 +1286,11 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		kind: "api",
 		configPort: p?.port,
 		env: process.env,
-		flagPort: Zi(s, "--port")
+		flagPort: fa(s, "--port")
 	});
 	for (let e of ie.warnings) $.warn(e);
 	let m = ie.port;
-	Jr(Kr(p?.secrets)), await Ht({
+	Zr(Yr(p?.secrets)), await Ht({
 		rawEnv: p?.env,
 		appType: "api",
 		root: u,
@@ -1194,11 +1298,11 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		generateTypes: !1
 	}), l.mark("config");
 	let h = (process.env.DB_DIALECT ?? p?.store ?? "memory").toLowerCase(), ae = (h === "mariadb" || h === "postgres" || h === "mssql") && (process.env.CDC ?? "1") !== "0", oe = h === "mariadb" ? "mariadb" : h === "mssql" ? "mssql" : void 0, se = vn(u);
-	if (!r() && wn(se)) try {
-		let e = await import(Tn(se).href);
+	if (!r() && En(se)) try {
+		let e = await import(Dn(se).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Cn(u, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[wn(u, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
@@ -1217,7 +1321,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			..._.actions.map((e) => e.descriptor.name),
 			..._.streams.map((e) => e.descriptor.name)
 		], e);
-		let t = Me(_.serverOnlyLeaks, b(process.env, "strict"), mr, "`voltro serve`");
+		let t = Me(_.serverOnlyLeaks, b(process.env, "strict"), vr, "`voltro serve`");
 		if (t.action === "fail") throw i(t.message ?? "");
 		t.action === "warn" && $.warn(t.message ?? "");
 	}
@@ -1236,7 +1340,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		gates: ke,
 		runtime: {
 			traces: ve(),
-			undo: ei()
+			undo: ii()
 		}
 	});
 	if (je !== void 0) throw i(`serve: ${je}`);
@@ -1254,9 +1358,9 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		for (let n of [...Ne, ...Le.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of x) Xn(e);
+	for (let e of x) er(e);
 	{
-		let e = hr(ti(_.queries.map((e) => ({
+		let e = yr(ai(_.queries.map((e) => ({
 			name: e.descriptor.name,
 			source: e.descriptor.source
 		})), new Set(x.flatMap((e) => {
@@ -1266,20 +1370,20 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		e !== void 0 && $.warn(e);
 	}
 	let Re = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (Xi(Re, h, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await F(h)).makeSqlLayer(A()), t = await W.runPromise(Vn.SqlClient.pipe(W.flatMap((e) => Wn(e, u)), W.provide(e), W.catchAll(() => W.succeed([]))));
+	if (da(Re, h, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await F(h)).makeSqlLayer(A()), t = await H.runPromise(Gn.SqlClient.pipe(H.flatMap((e) => Jn(e, u)), H.provide(e), H.catchAll(() => H.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await W.runPromise(Vn.SqlClient.pipe(W.flatMap((e) => Gn(e, x, {
+		let n = await H.runPromise(Gn.SqlClient.pipe(H.flatMap((e) => Yn(e, x, {
 			appliedBy: `serve:${Re}`,
 			environment: "prod",
 			dialectId: h
-		})), W.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(Un(n, h)), $.error(Qt({
+		})), H.provide(e)));
+		n.kind === "prod-mismatch" && ($.error(qn(n, h)), $.error(Qt({
 			gates: ke,
 			nodeEnv: process.env.NODE_ENV,
 			cdcDialect: oe,
 			declared: p?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Un(n, h));
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(qn(n, h));
 	}
 	await qt({
 		dialectId: h,
@@ -1292,14 +1396,14 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let Ue = Lr(x);
+	let Ue = Br(x);
 	l.mark("discover");
-	let w = await nt(p, void 0), Ge = ii(w, h);
+	let w = await nt(p, void 0), Ge = ci(w, h);
 	for (let e of dt({
 		dialect: String(p?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Ci(p?.plugins ?? [])?.broadcast.crossReplica === !0,
+		crossReplicaBus: Di(p?.plugins ?? [])?.broadcast.crossReplica === !0,
 		tables: _.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
@@ -1311,7 +1415,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
 		let e = E({
-			tables: qn().map((e) => ({ tableName: e.tableName })),
+			tables: Zn().map((e) => ({ tableName: e.tableName })),
 			queries: _.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
@@ -1325,7 +1429,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		semantic: p?.cacheSemantic ?? !1
 	});
 	lt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${vt}` + (vt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
-		if (W.runFork(tt.publish(e.table)), pt !== void 0) {
+		if (H.runFork(tt.publish(e.table)), pt !== void 0) {
 			let t = (e.new ?? e.old)?.id;
 			pt({
 				table: e.table,
@@ -1334,7 +1438,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			});
 		}
 	}), p?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = p.kv), p?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = p.kvRedisUrl), p?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = p.kvKeyPrefix);
-	let { kv: Ct, service: wt } = await Tr({ store: w });
+	let { kv: Ct, service: wt } = await kr({ store: w });
 	He({
 		log: $,
 		max: Wt(),
@@ -1342,7 +1446,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
 	}), l.mark("store");
-	let Et = ir({
+	let Et = cr({
 		store: w,
 		sink: Le.sink,
 		log: $
@@ -1351,79 +1455,79 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		dialect: h,
 		log: { info: (e) => $.info(e) }
 	}), j = p?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Rt, zt;
-	h !== "memory" && (Rt = Bn.make((await F(h)).makeSqlLayer(A())), zt = await Rt.runPromise(Vn.SqlClient));
+	h !== "memory" && (Rt = Wn.make((await F(h)).makeSqlLayer(A())), zt = await Rt.runPromise(Gn.SqlClient));
 	let Bt = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(h) ? xr(w, Ft, $) : Xr, mn = S(p?.scheduling), yn = Dr({
+	].includes(h) ? Tr(w, Ft, $) : ei, mn = S(p?.scheduling), yn = jr({
 		maxIdleIntervalMs: mn.pollCeilingMs,
 		coordinator: Bt,
 		replicaId: Ft,
 		log: $
-	}), xn = [], L = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, En = Ci(p?.plugins ?? [])?.broadcast?.provider, Dn = Ze(p?.plugins, p?.name ?? Sn(u));
+	}), xn = [], Sn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Tn = Di(p?.plugins ?? [])?.broadcast?.provider, L = Ze(p?.plugins, p?.name ?? Cn(u));
 	{
-		let e = et(p?.plugins, p?.name ?? Sn(u));
+		let e = et(p?.plugins, p?.name ?? Cn(u));
 		e !== void 0 && $.warn(e);
 	}
-	let R = jt(p?.plugins, {
-		instanceId: L,
-		namespace: Dn,
+	let On = jt(p?.plugins, {
+		instanceId: Sn,
+		namespace: L,
 		meta: { mode: "serve" },
 		logger: $
-	}), On = {
+	}), kn = {
 		...zt ? { sql: zt } : {},
-		instanceId: L,
-		membership: R.membership,
-		...En === void 0 ? {} : { broadcast: En },
-		broadcastChannels: { presence: Si(Dn, "presence") },
+		instanceId: Sn,
+		membership: On.membership,
+		...Tn === void 0 ? {} : { broadcast: Tn },
+		broadcastChannels: { presence: Ei(L, "presence") },
 		scheduleCoordinated: (e, t, n) => {
 			let r = yn(e, t, n);
 			return xn.push(r), r;
 		}
 	};
-	for (let e of j) e.bindDataStore?.(Ge, On);
+	for (let e of j) e.bindDataStore?.(Ge, kn);
 	c({
 		store: w,
 		...st(),
 		log: $
 	});
-	let kn = j.filter((e) => typeof e.onChangeEvent == "function");
-	if (kn.length > 0) {
+	let R = j.filter((e) => typeof e.onChangeEvent == "function");
+	if (R.length > 0) {
 		let e = w.changeScope ?? "local";
 		w.onChange((t) => {
 			let n = he(t, e);
-			for (let e of kn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: zn.pretty(t) })))));
+			for (let e of R) H.runFork(e.onChangeEvent(n).pipe(H.catchAllCause((t) => H.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Un.pretty(t) })))));
 		});
 	}
-	let z = le({
+	let An = le({
 		plugins: j,
 		appName: p?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	j.length && await z.activate(), l.mark("plugins");
-	let B = await z.gatherObservability(), An = {
+	j.length && await An.activate(), l.mark("plugins");
+	let jn = await An.gatherObservability(), Mn = {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}, jn, Mn = await ht(w, p, h, Dn, An, (e, t) => {
-		jn?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), V = p?.apiKeys, Nn = (typeof V == "object" ? V.prefix : void 0) ?? "voltro_", Pn = V ? pr(w) : void 0, H = Pn ? Cr({ flush: wr(Pn) }) : void 0;
-	H && Vr(() => H.shutdown());
-	let U = Pn ? Sr(Pn, {
-		prefix: Nn,
-		...H ? { usage: H } : {}
-	}) : void 0, Fn = U ? [gr(U, { prefix: Nn })] : [], In = bt([...p?.auth?.strategies ?? [], ...Fn], bi(p?.plugins ?? []), p?.auth?.anonymousTenantRequired ?? !1, p?.auth, () => Ge), Ln = [...p?.restRoutes ?? [], ...U ? rr(U, (typeof V == "object" ? V.managementPath : void 0) ?? "/v1/api-keys") : []], Rn = k(p?.idempotency, w), Kn = j.map((e) => e.services).filter((e) => e !== void 0), Jn = G.mergeAll(Be({
+	}, z, Nn = await ht(w, p, h, L, Mn, (e, t) => {
+		z?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), Pn = p?.apiKeys, Fn = (typeof Pn == "object" ? Pn.prefix : void 0) ?? "voltro_", B = Pn ? _r(w) : void 0, V = B ? Dr({ flush: Or(B) }) : void 0;
+	V && Gr(() => V.shutdown());
+	let In = B ? Er(B, {
+		prefix: Fn,
+		...V ? { usage: V } : {}
+	}) : void 0, Ln = In ? [br(In, { prefix: Fn })] : [], Rn = bt([...p?.auth?.strategies ?? [], ...Ln], wi(p?.plugins ?? []), p?.auth?.anonymousTenantRequired ?? !1, p?.auth, () => Ge), zn = [...p?.restRoutes ?? [], ...In ? sr(In, (typeof Pn == "object" ? Pn.managementPath : void 0) ?? "/v1/api-keys") : []], Bn = k(p?.idempotency, w), Vn = j.map((e) => e.services).filter((e) => e !== void 0), Hn = U.mergeAll(Be({
 		analyticsLayer: Le.layer,
 		cacheService: qe,
 		kvService: wt,
 		...lt === void 0 ? {} : { semanticCache: lt },
-		pluginServices: Kn,
+		pluginServices: Vn,
 		userLayers: p?.layers ?? []
-	}), rt(p?.http ?? {})), K = await it({
+	}), rt(p?.http ?? {})), W = await it({
 		files: g,
 		store: w,
 		log: $,
@@ -1435,47 +1539,47 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		runStartups: o,
 		emailPattern: C,
 		loadEmailFiles: mt,
-		registerEmailTemplates: xi
+		registerEmailTemplates: Ti
 	});
-	(K.startupCount > 0 || K.emailCount > 0) && $.info("boot lifecycle", {
-		startups: K.startupCount,
-		emailTemplates: K.emailCount
-	}), K.startups !== void 0 && Vr(async () => {
-		await K.startups.stop();
+	(W.startupCount > 0 || W.emailCount > 0) && $.info("boot lifecycle", {
+		startups: W.startupCount,
+		emailTemplates: W.emailCount
+	}), W.startups !== void 0 && Gr(async () => {
+		await W.startups.stop();
 	}), ce({
 		demands: fe(pe),
-		isRegistered: (e) => _r(e) !== void 0
+		isRegistered: (e) => xr(e) !== void 0
 	});
-	let Zn = ft({
+	let Xn = ft({
 		schedules: St({
 			schedules: _.schedules,
-			seeds: K.seeds,
+			seeds: W.seeds,
 			store: w,
 			log: $.child("seeds")
 		}),
 		workflows: _.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), Qn = p?.scheduling ?? {}, $n = Qn.trigger ?? "self", er = /* @__PURE__ */ new Set([
+	}), Qn = p?.scheduling ?? {}, G = Qn.trigger ?? "self", tr = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), tr = Qn.coordination ?? (er.has(h) ? "advisoryLock" : "single"), q = tr === "cluster" && er.has(h), nr = q ? "cluster" : tr === "advisoryLock" && er.has(h) ? "advisoryLock" : "single";
-	tr === "cluster" && !q && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), tr === "advisoryLock" && !er.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let ar, or = _.workflows.length > 0 || _.workflowWorkers.length > 0 || _.eventTriggers.length > 0 || (Oe?.outgoing.length ?? 0) > 0 || q, sr;
-	if (or) {
+	]), nr = Qn.coordination ?? (tr.has(h) ? "advisoryLock" : "single"), K = nr === "cluster" && tr.has(h), rr = K ? "cluster" : nr === "advisoryLock" && tr.has(h) ? "advisoryLock" : "single";
+	nr === "cluster" && !K && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), nr === "advisoryLock" && !tr.has(h) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let ir, ar = _.workflows.length > 0 || _.workflowWorkers.length > 0 || _.eventTriggers.length > 0 || (Oe?.outgoing.length ?? 0) > 0 || K, or;
+	if (ar) {
 		if (h === "mssql") {
 			let e = await fn(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = q ? Zn.filter((e) => (e.trigger ?? $n) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = K ? Xn.filter((e) => (e.trigger ?? G) === "self").map((e) => t({
 			name: e.name,
-			cron: fr(e),
+			cron: gr(e),
 			execute: async () => {
-				await ar?.fireFromCluster(e.name);
+				await ir?.fireFromCluster(e.name);
 			}
 		})) : [];
-		sr = h === "memory" ? e.layerMemory : await (async () => {
+		or = h === "memory" ? e.layerMemory : await (async () => {
 			let e = await F(h), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
 				sqlClientLayer: e.makeSqlLayer(A()),
@@ -1487,19 +1591,19 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			});
 		})();
 	}
-	let cr = ue(j, _n()), J = g.filter((e) => /\.subscribe\.tsx?$/.test(e)), lr = J.length > 0 ? await xe(J, $) : [], Y = g.filter((e) => /\.reaction\.tsx?$/.test(e)), ur = Y.length > 0 ? await v(Y, $) : [], dr = g.filter((e) => sn.test(e)), vr = dr.length > 0 ? await Ie(dr, $) : [], yr = g.filter((e) => /\.aggregate\.tsx?$/.test(e)), br = yr.length > 0 ? await f(yr, $) : [], Er = _e();
-	if (br.length > 0 && h !== "memory") try {
+	let lr = ue(j, _n()), ur = g.filter((e) => /\.subscribe\.tsx?$/.test(e)), dr = ur.length > 0 ? await xe(ur, $) : [], fr = g.filter((e) => /\.reaction\.tsx?$/.test(e)), q = fr.length > 0 ? await v(fr, $) : [], pr = g.filter((e) => sn.test(e)), J = pr.length > 0 ? await Ie(pr, $) : [], mr = g.filter((e) => /\.aggregate\.tsx?$/.test(e)), hr = mr.length > 0 ? await ne(mr, $) : [], Sr = _e();
+	if (hr.length > 0 && h !== "memory") try {
 		let e = (await F(h)).makeSqlLayer(A());
-		Er = ct(e);
+		Sr = ct(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Or = h === "memory" ? Xr : xr(w, `aggregate@${process.pid}`, $), kr = g.filter((e) => cn.test(e)), Ar = kr.length > 0 ? await d(kr, $) : [], jr = g.filter((e) => on.test(e)), Mr = jr.length > 0 ? await Te(jr, $) : [], Nr = g.filter((e) => an.test(e)), Pr = Nr.length > 0 ? await Mt(Nr, $) : [], Fr = [], Ir = [], Rr = g.filter((e) => $t.test(e));
+	let Cr = h === "memory" ? ei : Tr(w, `aggregate@${process.pid}`, $), wr = g.filter((e) => cn.test(e)), Ar = wr.length > 0 ? await f(wr, $) : [], Mr = g.filter((e) => on.test(e)), Nr = Mr.length > 0 ? await Te(Mr, $) : [], Pr = g.filter((e) => an.test(e)), Fr = Pr.length > 0 ? await Mt(Pr, $) : [], Ir = [], Lr = [], Rr = g.filter((e) => $t.test(e));
 	if (Rr.length > 0) {
 		let e = $.child("agent"), t = g.filter((e) => Zt.test(e));
 		t.length > 0 && await nn(t, e);
 		let n = await Yt(Rr, e);
-		for (let e of n.agents) for (let t of Ye(e)) (t.kind === "action" ? Fr : Ir).push({
+		for (let e of n.agents) for (let t of Ye(e)) (t.kind === "action" ? Ir : Lr).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -1507,15 +1611,15 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
 	l.mark("workflow");
-	let X = () => {
-		let e = Z.workflowWriteActions();
+	let Y = () => {
+		let e = X.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, zr = Yn({
+	}, zr = $n({
 		dialect: h,
 		...A()
-	}), Br = h === "memory" ? void 0 : (await F(h)).makeSqlLayer(A()), Hr = async () => Dt({
-		sqlLayer: Br,
+	}), Vr = h === "memory" ? void 0 : (await F(h)).makeSqlLayer(A()), Hr = async () => Dt({
+		sqlLayer: Vr,
 		declared: x,
 		log: $
 	}), Ur = {
@@ -1532,8 +1636,8 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		rpc: Qe(_, u),
 		workflows: ze(_, u),
 		migrations: Hr,
-		events: () => Z.eventsSnapshot(),
-		agentTools: () => Z.agentTools(),
+		events: () => X.eventsSnapshot(),
+		agentTools: () => X.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
 			accessGate: pe,
@@ -1541,80 +1645,80 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			serverOnlyLeaks: _.serverOnlyLeaks,
 			migrations: Hr
 		}),
-		members: () => Z.membersSnapshot(),
+		members: () => X.membersSnapshot(),
 		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!ar) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await ar.fireNow(e, t) ?? null };
+			if (!ir) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await ir.fireNow(e, t) ?? null };
 		},
 		inspectBackfillSchedule: re({
-			getHandle: () => ar,
-			getSchedules: () => Zn
+			getHandle: () => ir,
+			getSchedules: () => Xn
 		}),
 		...Oe === void 0 ? {} : { webhooks: () => ge({
 			store: w,
 			discoveredWebhooks: Oe
 		}) },
 		plugins: () => ({
-			plugins: z.snapshot(),
+			plugins: An.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => P(p?.name ?? Sn(u), {
-			...p?.env !== void 0 && ui(p.env) ? { contract: p.env } : {},
+		env: () => P(p?.name ?? Cn(u), {
+			...p?.env !== void 0 && mi(p.env) ? { contract: p.env } : {},
 			plugins: p?.plugins ?? []
 		}),
 		dataCache: () => Ve({
 			stats: yt,
 			backendKind: vt
 		}),
-		subscriptions: () => Nt(() => jn),
+		subscriptions: () => Nt(() => z),
 		inspectTables: () => de(_.tables),
 		inspectRows: Se({
 			store: w,
 			tables: _.tables,
 			mask: !0
 		}),
-		metrics: (e) => Z.rpcMetrics().snapshot(e),
+		metrics: (e) => X.rpcMetrics().snapshot(e),
 		cluster: () => It({
 			store: w,
 			dialect: h,
-			useClusterCron: q,
-			scheduleCoordChoice: tr
+			useClusterCron: K,
+			scheduleCoordChoice: nr
 		}),
 		inspectSchedules: () => Ee({
-			schedules: Zn,
-			defaultTrigger: $n,
-			coordination: nr
+			schedules: Xn,
+			defaultTrigger: G,
+			coordination: rr
 		}),
 		inspectScheduleRuns: (e) => N(w, e),
-		...te(w, {
+		...d(w, {
 			controls: O(_.workflows ?? []),
 			active: (_.workflows?.length ?? 0) > 0,
-			cancellation: () => Z.flowControlHealth()
+			cancellation: () => X.flowControlHealth()
 		}),
-		webhookActions: Ce(() => Z.webhooksService()),
-		inspectStartWorkflow: (e) => X().inspectStartWorkflow(e),
-		inspectCancelWorkflowRun: (e) => X().inspectCancelWorkflowRun(e),
-		inspectSuspendWorkflowRun: (e) => X().inspectSuspendWorkflowRun(e),
-		inspectResumeWorkflowRun: (e) => X().inspectResumeWorkflowRun(e),
-		inspectDiscardWorkflowRun: (e) => X().inspectDiscardWorkflowRun(e),
-		inspectRetryWorkflowRun: (e) => X().inspectRetryWorkflowRun(e),
-		inspectSignalWorkflowRun: (e) => X().inspectSignalWorkflowRun(e),
-		inspectUpdateWorkflowRun: (e) => X().inspectUpdateWorkflowRun(e),
+		webhookActions: Ce(() => X.webhooksService()),
+		inspectStartWorkflow: (e) => Y().inspectStartWorkflow(e),
+		inspectCancelWorkflowRun: (e) => Y().inspectCancelWorkflowRun(e),
+		inspectSuspendWorkflowRun: (e) => Y().inspectSuspendWorkflowRun(e),
+		inspectResumeWorkflowRun: (e) => Y().inspectResumeWorkflowRun(e),
+		inspectDiscardWorkflowRun: (e) => Y().inspectDiscardWorkflowRun(e),
+		inspectRetryWorkflowRun: (e) => Y().inspectRetryWorkflowRun(e),
+		inspectSignalWorkflowRun: (e) => Y().inspectSignalWorkflowRun(e),
+		inspectUpdateWorkflowRun: (e) => Y().inspectUpdateWorkflowRun(e),
 		inspectInferences: (e) => Xe({
 			store: w,
 			active: (_.workflows?.length ?? 0) > 0,
-			dispatcher: () => Z.inferenceHealth()
+			dispatcher: () => X.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
 		..._t({
 			store: w,
-			cancelRun: async (e) => await Z.runCanceller()?.(e) ?? !1,
-			retryRun: async (e) => X().inspectRetryWorkflowRun({ runId: e }),
-			redriveRun: async (e) => Z.redriveWorkflowRun({ runId: e }),
+			cancelRun: async (e) => await X.runCanceller()?.(e) ?? !1,
+			retryRun: async (e) => Y().inspectRetryWorkflowRun({ runId: e }),
+			redriveRun: async (e) => X.redriveWorkflowRun({ runId: e }),
 			log: $
 		}),
-		inspectRedriveWorkflowRun: (e) => Z.redriveWorkflowRun(e),
-		inspectResumeWorkflowRunFromStep: (e) => Z.resumeWorkflowRunFromStep(e)
-	}, Wr = (process.env.VOLTRO_TENANT_ISOLATION ?? p?.tenancy?.isolation) === "namespace", Gr = Wr && h !== "memory" ? await (async () => {
+		inspectRedriveWorkflowRun: (e) => X.redriveWorkflowRun(e),
+		inspectResumeWorkflowRunFromStep: (e) => X.resumeWorkflowRunFromStep(e)
+	}, Wr = (process.env.VOLTRO_TENANT_ISOLATION ?? p?.tenancy?.isolation) === "namespace", Kr = Wr && h !== "memory" ? await (async () => {
 		let e = await F(h);
 		return D({
 			tables: x,
@@ -1635,12 +1739,12 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	qr !== void 0 && Vr(async () => {
+	qr !== void 0 && Gr(async () => {
 		await qr.close();
 	});
-	let Z = await Yi({
+	let X = await ua({
 		bootTiming: l,
-		broadcastNamespace: Dn,
+		broadcastNamespace: L,
 		scheduling: (() => {
 			let e = mn;
 			return {
@@ -1650,7 +1754,7 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 				stalenessSweepMs: e.stalenessSweepMs,
 				disarmWhenIdle: $e({
 					changeScope: w.changeScope,
-					broadcastAttached: Mn !== void 0
+					broadcastAttached: Nn !== void 0
 				})
 			};
 		})(),
@@ -1658,8 +1762,8 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		...p?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: p.workflows.suspendSignalHintMs },
 		workflowRecording: M(p?.workflows?.recording),
 		membership: {
-			...R,
-			instanceId: L
+			...On,
+			instanceId: Sn
 		},
 		security: {
 			defaultDeny: Ae(p),
@@ -1667,33 +1771,33 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		},
 		approvals: { defaultExpiryMs: Fe(p) },
 		...p?.plugins === void 0 ? {} : { plugins: p.plugins },
-		...Rn ? { idempotency: Rn } : {},
-		restRoutes: Ln,
+		...Bn ? { idempotency: Bn } : {},
+		restRoutes: zn,
 		appProcedures: pe,
 		discovered: {
-			queries: [..._.queries, ...Ir],
+			queries: [..._.queries, ...Lr],
 			mutations: _.mutations,
-			actions: [..._.actions, ...Fr],
+			actions: [..._.actions, ...Ir],
 			streams: _.streams,
 			events: _.events,
 			workflows: _.workflows,
 			workflowWorkers: _.workflowWorkers,
 			eventTriggers: _.eventTriggers,
-			schedules: Zn,
-			subscribers: lr,
-			outboxHandlers: vr,
+			schedules: Xn,
+			subscribers: dr,
+			outboxHandlers: J,
 			connections: _.connections,
-			reactions: ur,
-			aggregates: br,
+			reactions: q,
+			aggregates: hr,
 			expectations: Ar,
-			budgets: Mr,
-			experiments: Pr,
+			budgets: Nr,
+			experiments: Fr,
 			...Oe === void 0 ? {} : { webhooks: Oe }
 		},
 		log: $,
 		analytics: Le.sink,
-		aggregateStorage: Er,
-		aggregateCoordinator: Or,
+		aggregateStorage: Sr,
+		aggregateCoordinator: Cr,
 		store: w,
 		kv: Ct,
 		cache: ot,
@@ -1702,12 +1806,12 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		schemaRegistry: Ue,
 		tenantScopedTables: _.tenantScopedTables,
 		softDeleteScopedTables: _.softDeleteScopedTables,
-		dataTransferSnapshot: Hn(x, h),
+		dataTransferSnapshot: Kn(x, h),
 		dataTransferDialect: h,
-		...Gr === void 0 ? {} : { ensureTenantProvisioned: Gr.ensure },
+		...Kr === void 0 ? {} : { ensureTenantProvisioned: Kr.ensure },
 		...qr === void 0 ? {} : { resolveResidentStore: qr.resolveStore },
 		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? p?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => In({
+		resolveSubject: (e, t) => Rn({
 			headers: e,
 			clientId: t
 		}),
@@ -1715,18 +1819,18 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		...p?.agents === void 0 ? {} : { agents: p.agents },
 		httpRoutes: j.flatMap((e) => e.httpRoutes ?? []),
 		getStore: () => Ge,
-		...Jn ? { baseLayer: Jn } : {},
-		...sr === void 0 ? {} : { workflowEngineLayer: sr },
-		scheduleDefaultTrigger: $n,
-		scheduleCoordination: nr,
-		scheduleArmSelf: !q,
+		...Hn ? { baseLayer: Hn } : {},
+		...or === void 0 ? {} : { workflowEngineLayer: or },
+		scheduleDefaultTrigger: G,
+		scheduleCoordination: rr,
+		scheduleArmSelf: !K,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : p?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...cr === void 0 ? {} : { scheduleFireInterceptor: cr },
+		...lr === void 0 ? {} : { scheduleFireInterceptor: lr },
 		onSchedulerReady: (e) => {
-			ar = e;
+			ir = e;
 		},
-		inspectRoute: { handle: async (e, t, n, r) => await ne(e, Ur, t, {
+		inspectRoute: { handle: async (e, t, n, r) => await te(e, Ur, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) || ((n === "GET" ? await dn(e, Ur, t, { method: n }) : null) ?? un(e, Ur, t, {
@@ -1738,11 +1842,11 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
 		...p?.name === void 0 ? {} : { appName: p.name },
-		observability: B,
+		observability: jn,
 		port: m,
 		...p?.transport?.wsPath ? { path: p.transport.wsPath } : {}
 	});
-	return jn = Z.dispatcher, we(Pt([
+	return z = X.dispatcher, we(Pt([
 		_.queries,
 		_.mutations,
 		_.actions,
@@ -1757,13 +1861,13 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 		streams: _.streams.length,
 		workflows: _.workflows.length,
 		workflowWorkers: _.workflowWorkers.length,
-		schedules: Zn.length,
-		scheduleCoordination: nr
-	}), l.finish($), Vr(async () => {
+		schedules: Xn.length,
+		scheduleCoordination: rr
+	}), l.finish($), Gr(async () => {
 		for (let e of xn) e.stop();
 		At.stop();
 		try {
-			await Z.close(), xt(), Rt?.dispose(), await z.deactivate(), await Mn?.close(), await Je({
+			await X.close(), xt(), Rt?.dispose(), await An.deactivate(), await Nn?.close(), await Je({
 				mirror: Et,
 				log: $
 			}), await Le.dispose(), await w.close?.();
@@ -1773,4 +1877,4 @@ var ji = () => Math.max(500, Math.floor(Yr() * .6)), Mi = (e) => new Promise((t)
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { Qi as n, Xi as r, $i as t };
+export { pa as n, da as r, ma as t };