@voltro/cli 0.43.1 → 0.44.0

package/dist/{dev-B2rZfqxw.js → dev-D-JZ6CGQ.js}

@@ -4,14 +4,14 @@ import { n } from "./appModuleLoader-C9r9mxZt.js";
 import { t as r } from "./bootRefusal-pgvDxlrU.js";
 import { n as i, r as a } from "./startupRunner-CEqQq7ax.js";
 import { r as o } from "./appPort-B_HpJ_ck.js";
-import { H as s, J as c, K as l, V as u, W as d, X as f, Y as p, Z as m, ct as h, ft as g, g as _, ht as v, lt as ee, pt as te, q as y, ut as b } from "./webDev-101csg6Q.js";
-import { n as x, r as S } from "./dialectDriver-czCHYpeH.js";
-import { a as C, i as ne, n as re, t as ie } from "./connectionConfig-Bk9IC7D0.js";
-import { a as ae, c as oe, i as se, n as ce, o as le, r as ue, t as de } from "./seedRunner-IdHEprqf.js";
-import { r as fe } from "./devActivity-Dx_3nnGv.js";
-import { C as pe, E as w, S as me, T as he, _ as ge, b as _e, d as ve, f as ye, g as be, h as xe, m as Se, o as Ce, p as T, r as we, u as Te, v as Ee, w as De, x as Oe } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { A as ke, D as Ae, M as je, P as Me, S as Ne, _ as Pe, a as E, b as D, c as Fe, g as O, k as Ie, n as Le, o as Re, p as ze, s as Be, t as Ve, v as He, w as Ue, x as We, y as Ge } from "./fileConventions-Cof68_BL.js";
-import { A as Ke, C as qe, D as k, E as A, N as Je, O as Ye, S as Xe, T as Ze, _ as Qe, a as $e, b as et, c as tt, d as nt, f as rt, g as it, h as at, i as ot, l as st, m as ct, o as lt, p as ut, r as dt, s as ft, t as pt, u as mt, v as ht, w as j, x as gt, y as _t } from "./inspect-B7U7Cl_Z.js";
+import { H as s, J as c, K as l, V as u, W as d, X as f, Y as p, Z as m, ct as h, ft as g, g as _, ht as v, lt as ee, pt as te, q as ne, ut as y } from "./webDev-101csg6Q.js";
+import { n as b, r as x } from "./dialectDriver-czCHYpeH.js";
+import { a as S, i as re, n as ie, t as ae } from "./connectionConfig-Bk9IC7D0.js";
+import { a as oe, c as se, i as ce, n as le, o as ue, r as de, t as fe } from "./seedRunner-IdHEprqf.js";
+import { r as pe } from "./devActivity-Dx_3nnGv.js";
+import { C as me, E as C, S as he, T as ge, _ as _e, b as ve, d as ye, f as be, g as xe, h as Se, m as Ce, o as we, p as w, r as Te, u as Ee, v as De, w as Oe, x as ke } from "./frameworkTableAssembly-oMPBKqlE.js";
+import { A as Ae, D as je, M as Me, P as Ne, S as Pe, _ as Fe, a as T, b as E, c as Ie, g as D, k as Le, n as Re, o as ze, p as Be, s as Ve, t as He, v as Ue, w as We, x as Ge, y as Ke } from "./fileConventions-Cof68_BL.js";
+import { A as qe, C as Je, D as O, E as k, N as Ye, O as Xe, S as Ze, T as Qe, _ as $e, a as et, b as tt, c as nt, d as rt, f as it, g as at, h as ot, i as st, l as ct, m as lt, o as ut, p as dt, r as ft, s as pt, t as mt, u as ht, v as gt, w as A, x as _t, y as j } from "./inspect-B7U7Cl_Z.js";
 import { t as vt } from "./manifestBuild-BK42hu0k.js";
 import { n as yt } from "./cliRuntime-Dh7UDinH.js";
 import { n as bt, t as xt } from "./tsxLoader-EuXmSJ1K.js";
@@ -37,26 +37,26 @@ import { ADMISSIONS_TABLE as gr, EVENTS_TABLE as _r, PAUSES_TABLE as vr, Workflo
 import { makeClusterCronLayer as Jr, parseShardLockMode as Yr, pollWorkflowStorage as Xr, redriveFailedRun as Zr, resolveRunnerIdentity as Qr, resolveRunnerStorage as $r, resumeRunFromStep as ei, workflowEngineLayer as ti } from "@voltro/workflow/cluster";
 import { appToolDecision as ni, loadAgentMessages as ri, runAgentTurn as ii } from "@voltro/ai";
 import { actorsTable as ai, allRegisteredTables as oi, and as si, auditAllTableIndexes as ci, bindResidentStore as li, connectionIdentity as ui, contains as di, drainIdentifierWarnings as fi, encryptedColumnsOf as pi, ensureTableRegistered as mi, eq as z, formatIndexAuditIssue as hi, gte as gi, inSet as _i, isEmptyRelationsSpec as vi, isEncrypted as yi, isNotNull as bi, isNull as xi, isSqliteFamily as Si, lt as Ci, lte as wi, notInSubquery as Ti, or as Ei, registerCoreTables as Di, registerDiscoveredRelations as Oi, resolveTenantNamespace as ki, runWithWriteAttribution as Ai, serverOnlyColumns as ji, setResidencyConfig as Mi, startsWith as Ni, validateRegisteredRelations as Pi, walkLeaves as Fi } from "@voltro/database";
-import { AggregateError as Ii, AggregateMaintainer as Li, AggregateNotFound as Ri, AggregateRegistry as zi, AggregateStale as Bi, AnalyticsSink as Vi, CostRegistry as Hi, DEFAULT_APPROVAL_EXPIRY_MS as Ui, DORMANCY_WAKEUP_TENANT as Wi, Dispatcher as Gi, EventBus as Ki, ExpectationRegistry as qi, ExperimentRegistry as Ji, InMemoryDataStore as Yi, InstanceMembership as Xi, NO_ROW_FILTER as Zi, OUTBOX_TABLE as Qi, ReactionRateLimiter as $i, ReplicatedDataStore as ea, SYSTEM_SUBJECT as B, actingUserId as ta, apiKeyManagementRoutes as na, applyPluginRefRules as ra, applyUndoInvocation as ia, approvalsPendingExecutor as aa, assertConnectionCipherConfigured as oa, attachAnalyticsMirror as sa, attachExpectations as ca, attachExperiments as la, attachFinops as ua, awaitServerListening as da, bindEvent as fa, bindMutation as pa, bindStream as ma, bindSubscription as ha, buildTracingLayer as ga, cacheScopeLeaks as _a, cancelWakeup as va, collectPluginRefRules as ya, compileCron as ba, completeOAuthConnect as xa, cronOccurrences as Sa, dataStoreApiKeyStore as Ca, dataStoreIdempotencyStore as wa, decideApprovalInvocation as Ta, defineSchedule as Ea, drainOutbox as Da, enableGraphObservation as Oa, enterRequestLoader as V, extractDbCause as ka, formatCacheScopeLeaks as Aa, formatServerOnlyLeaks as ja, formatUnresolvedSources as Ma, frameworkApiKeyStrategy as Na, getFieldCipher as Pa, getResourcePolicy as Fa, getTimelineRecorder as Ia, installApprovalGate as La, installPolicyGuardResolver as Ra, isAggregateDefinition as za, isCostBudgetDefinition as Ba, isEmptyTenantScopedRead as Va, isExpectationDefinition as Ha, isExperimentDefinition as Ua, isOrglessUserSubject as Wa, isScheduleDefinition as Ga, isWorkflowEventTriggerDefinition as Ka, listRetentionConflicts as qa, listRetentions as H, loadResourceTuples as Ja, localityAwareSelector as Ya, makeActionRunner as Xa, makeAdvisoryLockCoordinator as Za, makeApiKeyService as Qa, makeApiKeyUsageBuffer as $a, makeApiKeyUsageFlusher as eo, makeAppAccess as to, makeApprovalGate as no, makeAsyncKv as ro, makeAuthMiddlewareLayers as io, makeBufferingSpanProcessor as ao, makeConnectionRegistry as oo, makeConnectionResolver as so, makeConnectionsFacade as co, makeCoordinatedScheduler as lo, makeDataLoader as uo, makeDisconnectConnectionExecutor as fo, makeEffectStoreLayer as po, makeEventPublisher as mo, makeEventsFacade as ho, makeLazyWorkflowFacade as go, makeListConnectionsExecutor as _o, makeMutationOutputCodec as vo, makeMutationRunner as yo, makeOneShotQueryRunner as bo, makeOutboxFacade as xo, makePostCommitWorkflowFacade as So, makeQueryDescriptorProducer as Co, makeQueryFinalizer as wo, makeQueryReauthorizer as To, makeQuerySubscriber as Eo, makeSchemaRegistry as Do, makeStartConnectionExecutor as Oo, makeSubmitTokenExecutor as ko, makeUndoCapture as Ao, makeWorkflowFacade as jo, makeWorkflowFacadeWithCallerContext as Mo, makeWorkflowLayers as No, memoryRywPositionStore as Po, nextFiring as Fo, noopAnalytics as Io, noopAnalyticsSpec as Lo, observedGraph as Ro, onProcessShutdown as U, parseApprovalInterval as zo, powerOfTwoSelector as Bo, recordSubscriptionDelivery as Vo, recordTimelineEvent as Ho, recordWorkflowRun as Uo, redisRywPositionStore as Wo, redoUndoInvocation as Go, registerDefaultTupleSource as Ko, registerRetention as W, registerWakeup as qo, resolveCurrentRegion as Jo, resolveSecretsBackend as Yo, retentionTtlMsFromEnv as G, runProvidedEffect as Xo, runReaction as Zo, sanitizeRedirectTo as Qo, serverOnlyLeaks as $o, setConnectionResolver as K, setSecretsBackend as es, setSystemStoreHandle as ts, settleHandlerBody as ns, singleCoordinator as rs, ssrfGuardHttpClientLayer as is, startRpcServer as as, startScheduler as os, stripForbiddenForWire as ss, sweepRetention as cs, tracingHttpClientLayer as ls, undoCaptureEnabled as us, undoLogExecutor as ds, undoSurfaceEnabled as fs, unresolvedSources as ps, withScopedRequest as ms, wrapStoreWithBootCodec as hs, wrapStoreWithMixinBehaviour as gs } from "@voltro/runtime";
-import { isEnvContract as _s } from "@voltro/env";
-import { SESSION_COOKIE_NAME as vs, readCookie as ys, resolveOptionalSessionSecrets as bs, verifySessionKeyed as xs } from "@voltro/protocol/session";
-import { randomBytes as Ss, randomUUID as Cs } from "node:crypto";
-import { Cache as ws, CacheLayer as Ts, InvalidationBus as Es, SemanticCache as Ds } from "@voltro/cache";
-import { WEBHOOK_EMIT_EFFECT as Os, buildDeliverWebhookExecute as ks, buildWebhooksService as As, defaultIncomingPath as js, deliverWebhookWorkflow as Ms, makeDeferredEmitHandler as Ns, mountIncomingWebhook as Ps } from "@voltro/plugin-webhooks";
-import { Kv as Fs } from "@voltro/kv";
-import { FetchHttpClient as Is } from "@effect/platform";
-import { getAuthSessionStrategy as Ls } from "@voltro/plugin-auth";
-import { collectPublicApiRoutes as Rs, restRoutesToHttpRoutes as zs } from "@voltro/protocol/rest";
-import { spawn as Bs } from "node:child_process";
-import { watch as Vs } from "chokidar";
-import { agentRouteDescriptors as Hs } from "@voltro/ai/agent";
-import { ArrayFormatter as Us } from "effect/ParseResult";
-import { isEmailTemplate as Ws, registerEmailTemplates as Gs } from "@voltro/plugin-mail";
-import { attachBroadcastBus as Ks, channelFor as qs, describeNamespaceResolution as Js, eventChannelFor as Ys, getBroadcastPlugin as Xs, resolveBroadcastNamespace as Zs } from "@voltro/plugin-broadcast";
-import { runImport as Qs } from "@voltro/data-transfer";
-import { createServer as $s } from "node:http";
+import { AggregateError as Ii, AggregateMaintainer as Li, AggregateNotFound as Ri, AggregateRegistry as zi, AggregateStale as Bi, AnalyticsSink as Vi, CostRegistry as Hi, DEFAULT_APPROVAL_EXPIRY_MS as Ui, DORMANCY_WAKEUP_TENANT as Wi, Dispatcher as Gi, EventBus as Ki, ExpectationRegistry as qi, ExperimentRegistry as Ji, InMemoryDataStore as Yi, InstanceMembership as Xi, NO_ROW_FILTER as Zi, OUTBOX_TABLE as Qi, ReactionRateLimiter as $i, ReplicatedDataStore as ea, SYSTEM_SUBJECT as B, actingUserId as ta, apiKeyManagementRoutes as na, applyPluginRefRules as ra, applyUndoInvocation as ia, approvalsPendingExecutor as aa, assertConnectionCipherConfigured as oa, attachAnalyticsMirror as sa, attachExpectations as ca, attachExperiments as la, attachFinops as ua, awaitServerListening as da, bindEvent as fa, bindMutation as pa, bindStream as ma, bindSubscription as ha, buildTracingLayer as ga, cacheScopeLeaks as _a, cancelWakeup as va, collectPluginRefRules as ya, compileCron as ba, completeOAuthConnect as xa, cronOccurrences as Sa, dataStoreApiKeyStore as Ca, dataStoreIdempotencyStore as wa, decideApprovalInvocation as Ta, defineSchedule as Ea, drainOutbox as Da, enableGraphObservation as Oa, enterRequestLoader as V, extractDbCause as ka, formatCacheScopeLeaks as Aa, formatServerOnlyLeaks as ja, formatUnresolvedSources as Ma, frameworkApiKeyStrategy as Na, getFieldCipher as Pa, getResourcePolicy as Fa, getTimelineRecorder as Ia, installApprovalGate as La, installPolicyGuardResolver as Ra, isAggregateDefinition as H, isCostBudgetDefinition as za, isEmptyTenantScopedRead as Ba, isExpectationDefinition as Va, isExperimentDefinition as Ha, isOrglessUserSubject as Ua, isScheduleDefinition as Wa, isWorkflowEventTriggerDefinition as Ga, listRetentionConflicts as Ka, listRetentions as U, loadResourceTuples as qa, localityAwareSelector as Ja, makeActionRunner as Ya, makeAdvisoryLockCoordinator as Xa, makeApiKeyService as Za, makeApiKeyUsageBuffer as Qa, makeApiKeyUsageFlusher as $a, makeAppAccess as eo, makeApprovalGate as to, makeAsyncKv as no, makeAuthMiddlewareLayers as ro, makeBufferingSpanProcessor as io, makeConnectionRegistry as ao, makeConnectionResolver as oo, makeConnectionsFacade as so, makeCoordinatedScheduler as co, makeDataLoader as lo, makeDisconnectConnectionExecutor as uo, makeEffectStoreLayer as fo, makeEventPublisher as po, makeEventsFacade as mo, makeLazyWorkflowFacade as ho, makeListConnectionsExecutor as go, makeMutationOutputCodec as _o, makeMutationRunner as vo, makeOneShotQueryRunner as yo, makeOutboxFacade as bo, makePostCommitWorkflowFacade as xo, makeQueryDescriptorProducer as So, makeQueryFinalizer as Co, makeQueryReauthorizer as wo, makeQuerySubscriber as To, makeSchemaRegistry as Eo, makeStartConnectionExecutor as Do, makeSubmitTokenExecutor as Oo, makeUndoCapture as ko, makeWorkflowFacade as Ao, makeWorkflowFacadeWithCallerContext as jo, makeWorkflowLayers as Mo, memoryRywPositionStore as No, nextFiring as Po, noopAnalytics as Fo, noopAnalyticsSpec as Io, observedGraph as Lo, onProcessShutdown as W, parseApprovalInterval as Ro, powerOfTwoSelector as zo, recordSubscriptionDelivery as Bo, recordTimelineEvent as Vo, recordWorkflowRun as Ho, redisRywPositionStore as Uo, redoUndoInvocation as Wo, registerDefaultTupleSource as Go, registerRetention as G, registerWakeup as Ko, resolveCurrentRegion as qo, resolveSecretsBackend as Jo, retentionTtlMsFromEnv as K, runProvidedEffect as Yo, runReaction as Xo, sanitizeRedirectTo as Zo, serverOnlyLeaks as Qo, setConnectionResolver as q, setSecretsBackend as $o, setSystemStoreHandle as es, settleHandlerBody as ts, singleCoordinator as ns, ssrfGuardHttpClientLayer as rs, startRpcServer as is, startScheduler as as, stripForbiddenForWire as os, sweepRetention as ss, tracingHttpClientLayer as cs, undoCaptureEnabled as ls, undoLogExecutor as us, undoSurfaceEnabled as ds, unresolvedSources as fs, withScopedRequest as ps, wrapStoreWithBootCodec as ms, wrapStoreWithMixinBehaviour as hs } from "@voltro/runtime";
+import { isEnvContract as gs } from "@voltro/env";
+import { SESSION_COOKIE_NAME as _s, readCookie as vs, resolveOptionalSessionSecrets as ys, verifySessionKeyed as bs } from "@voltro/protocol/session";
+import { randomBytes as xs, randomUUID as Ss } from "node:crypto";
+import { Cache as Cs, CacheLayer as ws, InvalidationBus as Ts, SemanticCache as Es } from "@voltro/cache";
+import { WEBHOOK_EMIT_EFFECT as Ds, buildDeliverWebhookExecute as Os, buildWebhooksService as ks, defaultIncomingPath as As, deliverWebhookWorkflow as js, makeDeferredEmitHandler as Ms, mountIncomingWebhook as Ns } from "@voltro/plugin-webhooks";
+import { Kv as Ps } from "@voltro/kv";
+import { FetchHttpClient as Fs } from "@effect/platform";
+import { getAuthSessionStrategy as Is } from "@voltro/plugin-auth";
+import { collectPublicApiRoutes as Ls, restRoutesToHttpRoutes as Rs } from "@voltro/protocol/rest";
+import { spawn as zs } from "node:child_process";
+import { watch as Bs } from "chokidar";
+import { agentRouteDescriptors as Vs } from "@voltro/ai/agent";
+import { ArrayFormatter as Hs } from "effect/ParseResult";
+import { isEmailTemplate as Us, registerEmailTemplates as Ws } from "@voltro/plugin-mail";
+import { attachBroadcastBus as Gs, channelFor as Ks, describeNamespaceResolution as qs, eventChannelFor as Js, getBroadcastPlugin as Ys, resolveBroadcastNamespace as Xs } from "@voltro/plugin-broadcast";
+import { runImport as Zs } from "@voltro/data-transfer";
+import { createServer as Qs } from "node:http";
 //#region src/advisoryGuardAudit.ts
-var ec = (e) => {
+var $s = (e) => {
 	let t = [];
 	for (let n of e) for (let e of n) {
 		let n = e.descriptor?.tag;
@@ -68,34 +68,34 @@ var ec = (e) => {
 		} : { tag: n });
 	}
 	return t;
-}, tc = (e, t) => {
+}, ec = (e, t) => {
 	let n = bn(e);
 	return n.length === 0 ? 0 : (t(on(n)), n.length);
-}, nc = (e, t, n = [], r = 0) => {
+}, tc = (e, t, n = [], r = 0) => {
 	let i = n.length, a = 1 + Math.max(0, r), o = e === void 0 ? void 0 : e * a + i, s = o !== void 0 && t !== void 0 ? o * t : void 0, c = i === 0 ? " No connections outside the pool in this process." : ` PLUS ${i} outside the pool (${n.map((e) => e.reason).join("; ")}) — those do not come out of the pool budget, they come out of the DATABASE's.`, l = r > 0 ? ` This process opens ${a} pools of that size — 1 primary + ${r} read replica(s) (DB_REPLICA_URLS), each with its own DB_MAX_CONNECTIONS.` : "";
-	if (e === void 0) return "db pool: max per replica UNSET (DB_MAX_CONNECTIONS) — each replica opens the driver's default pool, so the fleet total is that default × replicas. Set DB_MAX_CONNECTIONS so the total stays under your database's connection limit; the pool scales with replicaCount and the database does not." + l + c + rc;
+	if (e === void 0) return "db pool: max per replica UNSET (DB_MAX_CONNECTIONS) — each replica opens the driver's default pool, so the fleet total is that default × replicas. Set DB_MAX_CONNECTIONS so the total stays under your database's connection limit; the pool scales with replicaCount and the database does not." + l + c + nc;
 	let u = (r > 0 ? `max × ${a}` : "max") + (i === 0 ? "" : ` + ${i}`), d = r === 0 ? i === 0 ? "" : ` + ${i} = ${o}` : ` → ${u} = ${o} per pod`, f = r === 0 && i === 0 ? "max" : `(${u})`;
-	return `db pool: max=${e} per replica (DB_MAX_CONNECTIONS)` + d + (s === void 0 ? ` — the fleet opens up to ${f} × replicas connections. Check that against your database's limit before raising replicaCount.` : ` × ${t} replicas = up to ${s} connections. Check that against your database's limit.`) + l + c + rc;
-}, rc = " A rolling update runs BOTH generations at once, so budget for (replicas + surge), not replicas — a surge pod that cannot get a connection crashloops, and a rollout that never completes cannot free the connections it is waiting for.", q = (e = process.env) => {
+	return `db pool: max=${e} per replica (DB_MAX_CONNECTIONS)` + d + (s === void 0 ? ` — the fleet opens up to ${f} × replicas connections. Check that against your database's limit before raising replicaCount.` : ` × ${t} replicas = up to ${s} connections. Check that against your database's limit.`) + l + c + nc;
+}, nc = " A rolling update runs BOTH generations at once, so budget for (replicas + surge), not replicas — a surge pod that cannot get a connection crashloops, and a rollout that never completes cannot free the connections it is waiting for.", J = (e = process.env) => {
 	let t = e.REPLICA_COUNT;
 	if (t === void 0 || t === "") return;
 	let n = Number(t);
 	return Number.isInteger(n) && n > 0 ? n : void 0;
-}, ic = (e, t) => t ? e === "postgres" ? [{ reason: "CDC LISTEN consumer" }] : e === "mysql" || e === "mariadb" ? [{ reason: "binlog CDC reader (replication connection)" }] : [] : [], ac = (e = process.env) => q(e) !== void 0 || (e.DB_MAX_CONNECTIONS ?? "") !== "" || (e.PG_MAX_CONNECTIONS ?? "") !== "" || (e.DB_REPLICA_URLS ?? "") !== "", oc = (e) => {
+}, rc = (e, t) => t ? e === "postgres" ? [{ reason: "CDC LISTEN consumer" }] : e === "mysql" || e === "mariadb" ? [{ reason: "binlog CDC reader (replication connection)" }] : [] : [], ic = (e = process.env) => J(e) !== void 0 || (e.DB_MAX_CONNECTIONS ?? "") !== "" || (e.PG_MAX_CONNECTIONS ?? "") !== "" || (e.DB_REPLICA_URLS ?? "") !== "", ac = (e) => {
 	let t = e.env ?? process.env;
-	return !e.always && !ac(t) ? !1 : (e.log.info(nc(e.max, q(t), e.outOfPool, e.readPools ?? 0)), !0);
-}, sc = /* @__PURE__ */ new Set([
+	return !e.always && !ic(t) ? !1 : (e.log.info(tc(e.max, J(t), e.outOfPool, e.readPools ?? 0)), !0);
+}, oc = /* @__PURE__ */ new Set([
 	"_voltro_workflow_runs",
 	"_voltro_workflow_run_events",
 	"_voltro_workflow_start_contexts"
-]), cc = {
+]), sc = {
 	publishWake: () => {},
 	active: !1,
 	cdcActive: !1,
 	detach: async () => {}
-}, lc = async (e) => {
+}, cc = async (e) => {
 	let t = e.provider !== void 0 && e.crossReplica;
-	if (!t && e.onChange === void 0) return cc;
+	if (!t && e.onChange === void 0) return sc;
 	let n = (t) => {
 		let n = !1;
 		return () => {
@@ -122,15 +122,15 @@ var ec = (e) => {
 	let c;
 	if (e.onChange !== void 0) try {
 		c = e.onChange((e) => {
-			e.origin === "injected" && sc.has(e.table) && e.op !== "delete" && i();
+			e.origin === "injected" && oc.has(e.table) && e.op !== "delete" && i();
 		}), e.log.info("workflow wake: change-stream wake enabled", {
-			tables: [...sc],
+			tables: [...oc],
 			coalesceMs: 200
 		});
 	} catch (t) {
 		e.log.warn("workflow wake: change-stream subscribe failed — falling back to the poll interval", { reason: t?.message ?? String(t) });
 	}
-	return !s && c === void 0 ? cc : {
+	return !s && c === void 0 ? sc : {
 		publishWake: o,
 		active: s,
 		cdcActive: c !== void 0,
@@ -143,7 +143,7 @@ var ec = (e) => {
 			} catch {}
 		}
 	};
-}, uc = (e) => {
+}, lc = (e) => {
 	let t = e;
 	return {
 		name: t.name,
@@ -151,15 +151,15 @@ var ec = (e) => {
 		output: t.element,
 		error: t.error
 	};
-}, dc = (e, t) => [
+}, uc = (e, t) => [
 	...e.queries.map((e) => vt(e.descriptor, "query", zt(t, e.file))),
 	...e.mutations.map((e) => vt(e.descriptor, "mutation", zt(t, e.file))),
 	...e.actions.map((e) => vt(e.descriptor, "action", zt(t, e.file))),
-	...(e.streams ?? []).map((e) => vt(uc(e.descriptor), "stream", zt(t, e.file)))
-], fc = (e, t) => e.workflows.map((e) => ({
+	...(e.streams ?? []).map((e) => vt(lc(e.descriptor), "stream", zt(t, e.file)))
+], dc = (e, t) => e.workflows.map((e) => ({
 	tag: String(e.definition.name),
 	file: zt(t, e.file)
-})), pc = (e, t) => {
+})), fc = (e, t) => {
 	if (typeof process.getuid != "function") return;
 	let n;
 	try {
@@ -174,21 +174,21 @@ var ec = (e) => {
 	} catch (t) {
 		return `${e} was written as uid ${r} but the workspace is owned by uid ${n.uid}, and it could not be handed over (${t.message}). The file is mode 0600, so tools running as uid ${n.uid} — your tests, your editor, \`voltro doctor\` — will fail to read it with EACCES. Run this container as the workspace owner (docker \`--user ${n.uid}:${n.gid}\`), or set the variable(s) yourself so nothing needs minting.`;
 	}
-}, mc = ".env.local", hc = (e) => {
+}, pc = ".env.local", mc = (e) => {
 	let t = N(e, ".gitignore"), n = "";
 	try {
 		Ut(t) && (n = Gt(t, "utf8"));
 	} catch {
 		return !1;
 	}
-	if (n.split(/\r?\n/).map((e) => e.trim()).some((e) => e === mc || e === `/${mc}` || e === ".env*" || e === ".env.*" || e === ".env.local*")) return !0;
+	if (n.split(/\r?\n/).map((e) => e.trim()).some((e) => e === pc || e === `/${pc}` || e === ".env*" || e === ".env.*" || e === ".env.local*")) return !0;
 	try {
 		let e = n === "" || n.endsWith("\n") ? "" : "\n";
-		return Vt(t, `${e}\n# Local secrets minted by \`voltro dev\` — machine-specific, never commit.\n${mc}\n`, "utf8"), !0;
+		return Vt(t, `${e}\n# Local secrets minted by \`voltro dev\` — machine-specific, never commit.\n${pc}\n`, "utf8"), !0;
 	} catch {
 		return !1;
 	}
-}, gc = (e) => Ss(32).toString(e), J = [{
+}, hc = (e) => xs(32).toString(e), Y = [{
 	key: "VOLTRO_INSPECT_TOKEN",
 	encoding: "base64url",
 	description: "Bearer token for /_voltro/inspect/* — minted so the dev inspect surface is not open to the network."
@@ -196,13 +196,13 @@ var ec = (e) => {
 	key: "VOLTRO_INSPECT_WRITE_TOKEN",
 	encoding: "base64url",
 	description: "Second factor for MUTATING /_voltro/inspect/* endpoints (GDPR erase/export, storage share/revoke)."
-}], _c = (e, t, n = process.env) => {
+}], gc = (e, t, n = process.env) => {
 	let r = [];
-	for (let e of J) {
+	for (let e of Y) {
 		let t = n[e.key];
 		(t === void 0 || t.trim() === "") && r.push({
 			key: e.key,
-			value: gc(e.encoding),
+			value: hc(e.encoding),
 			description: e.description
 		});
 	}
@@ -211,13 +211,13 @@ var ec = (e) => {
 		let e = n[t];
 		(e === void 0 || e.trim() === "") && r.push({
 			key: t,
-			value: gc(i.generate),
+			value: hc(i.generate),
 			description: i.description
 		});
 	}
 	if (r.length === 0) return { minted: [] };
-	if (!hc(t)) throw Error(`cannot mint ${r.map((e) => e.key).join(", ")}: failed to add "${mc}" to ${N(t, ".gitignore")}. Refusing to write a secret to a path that might be committed — add the entry by hand, or set the variable(s) yourself (\`voltro secret generate\`).`);
-	let i = N(t, mc), a = r.map((e) => `${e.description ? `# ${e.description}\n` : ""}${e.key}=${e.value}`).join("\n"), o;
+	if (!mc(t)) throw Error(`cannot mint ${r.map((e) => e.key).join(", ")}: failed to add "${pc}" to ${N(t, ".gitignore")}. Refusing to write a secret to a path that might be committed — add the entry by hand, or set the variable(s) yourself (\`voltro secret generate\`).`);
+	let i = N(t, pc), a = r.map((e) => `${e.description ? `# ${e.description}\n` : ""}${e.key}=${e.value}`).join("\n"), o;
 	try {
 		if (Ut(i)) {
 			let e = Gt(i, "utf8"), t = e === "" || e.endsWith("\n") ? "" : "\n";
@@ -228,7 +228,7 @@ var ec = (e) => {
 \n${a}\n`, {
 			encoding: "utf8",
 			mode: 384
-		}), o = pc(i, t);
+		}), o = fc(i, t);
 	} catch (e) {
 		throw Error(`cannot mint ${r.map((e) => e.key).join(", ")}: failed to write ${i} — ${e.message}`);
 	}
@@ -238,7 +238,7 @@ var ec = (e) => {
 		file: i,
 		...o ? { ownershipWarning: o } : {}
 	};
-}, vc = [".framework", ".env.local"], yc = /\.generated\./i, bc = (e) => {
+}, _c = [".framework", ".env.local"], vc = /\.generated\./i, yc = (e) => {
 	try {
 		let t = Kt(e);
 		return {
@@ -248,7 +248,7 @@ var ec = (e) => {
 	} catch {
 		return;
 	}
-}, xc = (e, t, n) => {
+}, bc = (e, t, n) => {
 	let r = !0;
 	try {
 		Ht(e, t, n);
@@ -262,28 +262,28 @@ var ec = (e) => {
 	} catch {
 		return r;
 	}
-	for (let a of i) xc(N(e, a), t, n) || (r = !1);
+	for (let a of i) bc(N(e, a), t, n) || (r = !1);
 	return r;
-}, Sc = (e) => {
+}, xc = (e) => {
 	if (typeof process.getuid != "function") return { adopted: [] };
-	let t = bc(e);
+	let t = yc(e);
 	if (t === void 0) return { adopted: [] };
 	let n = process.getuid();
 	if (t.uid === n) return { adopted: [] };
-	let r = [...vc];
+	let r = [..._c];
 	try {
-		for (let t of P(e)) yc.test(t) && r.push(t);
+		for (let t of P(e)) vc.test(t) && r.push(t);
 	} catch {}
 	let i = [], a = !1;
 	for (let n of r) {
 		let r = N(e, n);
-		bc(r) !== void 0 && (xc(r, t.uid, t.gid) ? i.push(n) : a = !0);
+		yc(r) !== void 0 && (bc(r, t.uid, t.gid) ? i.push(n) : a = !0);
 	}
 	return a ? {
 		adopted: i,
 		warning: `generated files under ${e} are owned by uid ${n} but the workspace is owned by uid ${t.uid}, and they could not be handed over. On the host, tools running as uid ${t.uid} will fail with EACCES — \`voltro build\` cannot read \`.framework\`, and \`vitest\` cannot read \`.env.local\`. Run this container as the workspace owner (docker \`--user ${t.uid}:${t.gid}\`).`
 	} : { adopted: i };
-}, Cc = (e) => {
+}, Sc = (e) => {
 	let t = Number(e.REPLICA_COUNT);
 	if (Number.isFinite(t) && t >= 1) return t > 1 ? `REPLICA_COUNT=${t}` : null;
 	for (let [t, n] of [
@@ -299,27 +299,27 @@ var ec = (e) => {
 		["RENDER_INSTANCE_ID", "Render"]
 	]) if ((e[t] ?? "") !== "") return `${t} is set (${n})`;
 	return null;
-}, wc = (e) => e.startsWith("_voltro_"), Tc = (e) => e === void 0 || e === "" || !/^file:/i.test(e) || (process.env.TURSO_SYNC_URL ?? "") !== "", Ec = (e) => {
-	if (e.dialect === "turso" && Tc(e.dbUrl)) return [{
+}, Cc = (e) => e.startsWith("_voltro_"), wc = (e) => e === void 0 || e === "" || !/^file:/i.test(e) || (process.env.TURSO_SYNC_URL ?? "") !== "", Tc = (e) => {
+	if (e.dialect === "turso" && wc(e.dbUrl)) return [{
 		level: "warn",
 		message: "turso is configured against a shared primary, but this dialect has no NATIVE cross-instance change capture: it reuses the SQLite store, which emits inline only. Subscribers see writes made by THEIR OWN instance and never another's — for every table, regardless of .nonReactive(). Add @voltro/plugin-broadcast (Redis / NATS) to fan changes out between instances, or run a single instance."
 	}];
 	if (e.dialect === "sqlite" || e.dialect === "memory") {
-		let t = e.crossReplicaBus ? null : Cc(e.env ?? process.env);
+		let t = e.crossReplicaBus ? null : Sc(e.env ?? process.env);
 		if (t !== null) return [{
 			level: "warn",
 			message: `this app runs on '${e.dialect}' — a ${e.dialect === "memory" ? "process-local store" : "local database file"} — but ${t}, which means several replicas. Neither dialect has ANY cross-instance change capture: a client connected to replica A never sees a write made on replica B, for every table, and each replica is also reading its OWN data. Nothing here will error — the app looks healthy and serves stale views. Use postgres (LISTEN/NOTIFY) or mysql/mariadb (binlog CDC) for a shared, reactive database; or run a SINGLE replica and set REPLICA_COUNT=1 to silence this. Adding @voltro/plugin-broadcast fans CHANGES out but does not give the replicas one database, so it silences this warning only because a bus means you have already thought about it.`
 		}];
 	}
 	if (e.changeStrategy !== "cdc" || e.dialect === "sqlite" || e.dialect === "turso") return [];
-	let t = new Set(e.querySources.filter((e) => !wc(e))), n = e.tables.filter((e) => !wc(e.tableName)).filter((e) => e.isReactive === !1 && t.has(e.tableName)).map((e) => e.tableName).sort();
+	let t = new Set(e.querySources.filter((e) => !Cc(e))), n = e.tables.filter((e) => !Cc(e.tableName)).filter((e) => e.isReactive === !1 && t.has(e.tableName)).map((e) => e.tableName).sort();
 	if (n.length === 0) return [];
 	let r = n.slice(0, 8).join(", "), i = n.length > 8 ? `, … (+${n.length - 8})` : "";
 	return [{
 		level: "warn",
 		message: `${n.length} table(s) are .nonReactive() but a query declares them as a source — ${r}${i}. Those subscriptions will NEVER fire: a non-reactive table emits no change events at all, in this process or any other, so the query returns its first snapshot and then goes quiet forever. Either drop .nonReactive() from the table, or stop subscribing to it.`
 	}];
-}, Dc = (e, t) => {
+}, Ec = (e, t) => {
 	let n = e.length + 1, r = t.length + 1, i = Array.from({ length: r }, (e, t) => t);
 	for (let a = 1; a < n; a += 1) {
 		let n = [a, ...Array.from({ length: r - 1 }, () => 0)];
@@ -327,16 +327,16 @@ var ec = (e) => {
 		i = n;
 	}
 	return i[r - 1];
-}, Oc = (e, t) => {
+}, Dc = (e, t) => {
 	let n = t.find((t) => t.endsWith(`_${e}`) || t === `_voltro_${e}`);
 	if (n !== void 0) return n;
 	let r, i = Infinity;
 	for (let n of t) {
-		let t = Dc(e, n);
+		let t = Ec(e, n);
 		t < i && (i = t, r = n);
 	}
 	return r !== void 0 && i <= Math.max(2, Math.floor(e.length / 3)) ? r : void 0;
-}, kc = (e) => {
+}, Oc = (e) => {
 	let t = e.tables.map((e) => e.tableName), n = new Set(t), r = vn(), i = [];
 	for (let a of e.queries) for (let e of An(a.source)) {
 		if (e === "") continue;
@@ -350,7 +350,7 @@ var ec = (e) => {
 			continue;
 		}
 		if (n.has(e)) continue;
-		let o = Oc(e, t);
+		let o = Dc(e, t);
 		i.push({
 			query: a.name,
 			source: e,
@@ -358,14 +358,14 @@ var ec = (e) => {
 		});
 	}
 	return i;
-}, Ac = (e) => {
+}, kc = (e) => {
 	if (e.length === 0) return;
 	let t = e.map((e) => e.channel === !0 ? `  ${e.query}: source '${e.source}' is not a declared reactivity channel` : `  ${e.query}: source '${e.source}' is not a declared table` + (e.suggestion === void 0 ? "" : ` — did you mean '${e.suggestion}'?`)), n = e.some((e) => e.channel === !0) ? "\n  For the `channel:` entries: declare it with `reactivityChannel(<name>)` and pass the CHANNEL\n  as `source:` rather than its key as a string — the import edge is what makes a channel\n  source impossible to leave stale." : "";
 	return `${e.length} quer${e.length === 1 ? "y declares" : "ies declare"} a \`source\` that names no table:\n${t.join("\n")}\n  A \`source\` is matched BY NAME against change events, so one naming a table that does not\n  exist matches nothing: the query returns its first result and never updates again. That is\n  not an error at any layer — it is silence, and it looks exactly like "nothing has changed".` + n;
-}, jc = "VOLTRO_REMOTE_MIGRATIONS_OK", Mc = /^(10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.)/, Nc = (e) => {
+}, Ac = "VOLTRO_REMOTE_MIGRATIONS_OK", jc = /^(10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.)/, Mc = (e) => {
 	let t = e.toLowerCase().replace(/^\[|\]$/g, "");
-	return !!(t === "" || t === "localhost" || t === "ip6-localhost" || t === "::1" || t === "0.0.0.0" || t === "::" || t.startsWith("127.") || t === "host.docker.internal" || t === "gateway.docker.internal" || t.endsWith(".localhost") || t.endsWith(".local") || Mc.test(t) || !t.includes(".") && !t.includes(":"));
-}, Pc = (e) => {
+	return !!(t === "" || t === "localhost" || t === "ip6-localhost" || t === "::1" || t === "0.0.0.0" || t === "::" || t.startsWith("127.") || t === "host.docker.internal" || t === "gateway.docker.internal" || t.endsWith(".localhost") || t.endsWith(".local") || jc.test(t) || !t.includes(".") && !t.includes(":"));
+}, Nc = (e) => {
 	if (e.url !== void 0 && e.url !== "") {
 		if (/^(file|sqlite):/i.test(e.url)) return {
 			kind: "local",
@@ -374,7 +374,7 @@ var ec = (e) => {
 		try {
 			let t = new URL(e.url).hostname;
 			return {
-				kind: Nc(t) ? "local" : "remote",
+				kind: Mc(t) ? "local" : "remote",
 				host: t
 			};
 		} catch {
@@ -386,12 +386,12 @@ var ec = (e) => {
 	}
 	let t = e.host ?? "localhost";
 	return {
-		kind: Nc(t) ? "local" : "remote",
+		kind: Mc(t) ? "local" : "remote",
 		host: t
 	};
-}, Fc = (e) => {
+}, Pc = (e) => {
 	if (e.pendingIds.length === 0 || e.optIn) return { allowed: !0 };
-	let t = Pc(e.conn);
+	let t = Nc(e.conn);
 	if (t.kind === "local") return { allowed: !0 };
 	let n = e.pendingIds.map((e) => `    • ${e}`).join("\n");
 	return {
@@ -410,16 +410,16 @@ var ec = (e) => {
 			"  Choose one:",
 			"    • Point the app at a local database (DB_URL), which is what dev boot assumes.",
 			"    • Apply them deliberately, once:  voltro db files .",
-			`    • Accept it for this environment:  ${jc}=1`
+			`    • Accept it for this environment:  ${Ac}=1`
 		].join("\n")
 	};
-}, Ic = async ({ env: e = process.env, semantic: t = !1 } = {}) => {
+}, Fc = async ({ env: e = process.env, semantic: t = !1 } = {}) => {
 	let n, r;
 	if (t) {
-		let e = $n.make(I.mergeAll(ws.Default, Ds.Default, Es.Default).pipe(I.provide(Ts.storeLayer)));
-		r = await e.runPromise(Ds), n = e;
-	} else n = $n.make(I.mergeAll(Ts.layer, Es.Default)), r = void 0;
-	let i = await n.runPromise(ws), a = await n.runPromise(Es), o = r, s = o === void 0 ? void 0 : (e) => {
+		let e = $n.make(I.mergeAll(Cs.Default, Es.Default, Ts.Default).pipe(I.provide(ws.storeLayer)));
+		r = await e.runPromise(Es), n = e;
+	} else n = $n.make(I.mergeAll(ws.layer, Ts.Default)), r = void 0;
+	let i = await n.runPromise(Cs), a = await n.runPromise(Ts), o = r, s = o === void 0 ? void 0 : (e) => {
 		n.runFork(o.onSourceChange(e));
 	}, c = (e.CACHE_BACKEND ?? "memory").toLowerCase();
 	return await n.runPromise(a.addSink((e) => i.invalidateTag(e))), {
@@ -455,40 +455,40 @@ var ec = (e) => {
 		stats: () => n.runSync(i.stats()),
 		dispose: () => n.dispose()
 	};
-}, Lc = (e) => {
+}, Ic = (e) => {
 	let t = e / 36e5;
 	return t < 48 ? `${Math.round(t)}h` : `${Math.round(t / 24)}d`;
-}, Rc = ({ store: e, dialect: t, env: n = process.env, log: r }) => {
-	W({
+}, Lc = ({ store: e, dialect: t, env: n = process.env, log: r }) => {
+	G({
 		table: "_voltro_schedule_runs",
 		timeColumn: "scheduledAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_SCHEDULE_RUNS_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_SCHEDULE_RUNS_TTL_HOURS, 720),
 		envVar: "VOLTRO_SCHEDULE_RUNS_TTL_HOURS"
-	}), W({
+	}), G({
 		table: "_voltro_schedule_claims",
 		timeColumn: "claimedAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_SCHEDULE_CLAIMS_TTL_HOURS, 24),
+		ttlMs: K(n.VOLTRO_SCHEDULE_CLAIMS_TTL_HOURS, 24),
 		envVar: "VOLTRO_SCHEDULE_CLAIMS_TTL_HOURS"
-	}), W({
+	}), G({
 		source: "framework",
 		table: "_voltro_undo_log",
 		timeColumn: "createdAt",
-		ttlMs: G(n.VOLTRO_UNDO_LOG_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_UNDO_LOG_TTL_HOURS, 720),
 		envVar: "VOLTRO_UNDO_LOG_TTL_HOURS"
-	}), W({
+	}), G({
 		source: "framework",
 		table: "_voltro_workflow_admissions",
 		timeColumn: "admittedAt",
-		ttlMs: G(n.VOLTRO_WORKFLOW_ADMISSIONS_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_WORKFLOW_ADMISSIONS_TTL_HOURS, 720),
 		envVar: "VOLTRO_WORKFLOW_ADMISSIONS_TTL_HOURS",
 		where: bi("releasedAt")
-	}), W({
+	}), G({
 		source: "framework",
 		table: "_voltro_workflow_start_contexts",
 		timeColumn: "createdAt",
-		ttlMs: G(n.VOLTRO_WORKFLOW_START_CONTEXTS_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_WORKFLOW_START_CONTEXTS_TTL_HOURS, 720),
 		envVar: "VOLTRO_WORKFLOW_START_CONTEXTS_TTL_HOURS",
 		where: Ti("executionId", {
 			table: "_voltro_workflow_runs",
@@ -498,37 +498,37 @@ var ec = (e) => {
 			take: void 0,
 			skip: void 0
 		})
-	}), W({
+	}), G({
 		table: "_voltro_workflow_runs",
 		timeColumn: "completedAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_WORKFLOW_RUNS_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_WORKFLOW_RUNS_TTL_HOURS, 720),
 		envVar: "VOLTRO_WORKFLOW_RUNS_TTL_HOURS",
 		where: Ei(z("status", "succeeded"), z("status", "failed"), z("status", "cancelled"))
-	}), W({
+	}), G({
 		table: "_voltro_outbox_attempts",
 		timeColumn: "startedAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_OUTBOX_ATTEMPTS_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_OUTBOX_ATTEMPTS_TTL_HOURS, 720),
 		envVar: "VOLTRO_OUTBOX_ATTEMPTS_TTL_HOURS"
-	}), W({
+	}), G({
 		table: "_voltro_outbox",
 		timeColumn: "deliveredAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_OUTBOX_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_OUTBOX_TTL_HOURS, 720),
 		envVar: "VOLTRO_OUTBOX_TTL_HOURS",
 		where: z("status", "delivered")
-	}), W({
+	}), G({
 		table: "_voltro_workflow_events",
 		timeColumn: "occurredAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_WORKFLOW_EVENTS_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_WORKFLOW_EVENTS_TTL_HOURS, 720),
 		envVar: "VOLTRO_WORKFLOW_EVENTS_TTL_HOURS"
-	}), W({
+	}), G({
 		table: "_voltro_workflow_event_deliveries",
 		timeColumn: "createdAt",
 		source: "framework",
-		ttlMs: G(n.VOLTRO_WORKFLOW_EVENT_DELIVERIES_TTL_HOURS, 720),
+		ttlMs: K(n.VOLTRO_WORKFLOW_EVENT_DELIVERIES_TTL_HOURS, 720),
 		envVar: "VOLTRO_WORKFLOW_EVENT_DELIVERIES_TTL_HOURS"
 	});
 	let i = t === "postgres" ? e.raw?.bind(e) : void 0, a = (e) => {
@@ -564,17 +564,17 @@ var ec = (e) => {
 		}
 	}, s = async () => {
 		let e = Date.now();
-		for (let t of H()) try {
-			await cs(t, e, o, 2e4);
+		for (let t of U()) try {
+			await ss(t, e, o, 2e4);
 		} catch {}
-	}, c = H();
+	}, c = U();
 	if (c.length > 0) {
 		r?.info?.(`retention: ${c.length} policy(ies) armed — rows older than the TTL are DELETED`);
 		for (let e of [...c].sort((e, t) => e.table.localeCompare(t.table))) {
 			let t = e.where === void 0 ? "every row" : "matching rows only";
-			r?.info?.(`  · ${e.table}: ${t} older than ${Lc(e.ttlMs)} by ${e.timeColumn}${e.envVar === void 0 ? "" : ` (${e.envVar})`}`);
+			r?.info?.(`  · ${e.table}: ${t} older than ${Ic(e.ttlMs)} by ${e.timeColumn}${e.envVar === void 0 ? "" : ` (${e.envVar})`}`);
 		}
-		for (let e of qa()) r?.info?.(`  ! ${e.table}: two registrations — kept the ${e.kept.source}'s ${Lc(e.kept.ttlMs)}, dropped the ${e.dropped.source}'s ${Lc(e.dropped.ttlMs)}. An app registration wins over a plugin's, and a plugin's over a framework default.`);
+		for (let e of Ka()) r?.info?.(`  ! ${e.table}: two registrations — kept the ${e.kept.source}'s ${Ic(e.kept.ttlMs)}, dropped the ${e.dropped.source}'s ${Ic(e.dropped.ttlMs)}. An app registration wins over a plugin's, and a plugin's over a framework default.`);
 	}
 	let l = setTimeout(() => {
 		s();
@@ -586,12 +586,12 @@ var ec = (e) => {
 	return u.unref?.(), { stop: () => {
 		clearTimeout(l), clearInterval(u);
 	} };
-}, zc = (e) => {
+}, Rc = (e) => {
 	if (typeof e == "string") return e;
 	let t = e;
 	if (typeof t?.id == "string") return t.id;
 	if (typeof t?.name == "string") return t.name;
-}, Y = (e, t) => {
+}, zc = (e, t) => {
 	let n = { tenantId: t.tenantId ?? null }, r = t.afterCommit, i = t.enqueue;
 	return new Proxy(e, { get: (e, a, o) => a === "subscribe" ? (n) => typeof n != "object" || !n ? e.subscribe(n) : e.subscribe(n.tenantId === void 0 ? {
 		...n,
@@ -599,8 +599,8 @@ var ec = (e) => {
 	} : n) : a === "emit" ? (t, a, o) => {
 		let s = o?.tenantId === void 0 ? n : o;
 		if (o?.immediate === !0 || r === void 0) return e.emit(t, a, s);
-		let c = zc(t);
-		return i !== void 0 && c !== void 0 ? i(Os, {
+		let c = Rc(t);
+		return i !== void 0 && c !== void 0 ? i(Ds, {
 			event: c,
 			payload: a,
 			tenantId: s.tenantId ?? null
@@ -666,14 +666,14 @@ var ec = (e) => {
 		return r.set(i, c), c;
 	} });
 }, Uc = (e) => {
-	let t = uo({ store: e.store });
+	let t = lo({ store: e.store });
 	return V(t), {
-		storeForTenant: (t) => gs(e.store, {
+		storeForTenant: (t) => hs(e.store, {
 			subject: Nn(B, t),
 			schemaRegistry: e.schemaRegistry,
 			rowFilter: Zi
 		}),
-		store: gs(e.store, {
+		store: hs(e.store, {
 			subject: B,
 			schemaRegistry: e.schemaRegistry,
 			rowFilter: Zi
@@ -682,7 +682,7 @@ var ec = (e) => {
 			subject: B,
 			traceId: "webhooks:trigger"
 		},
-		access: to(B),
+		access: eo(B),
 		load: t.load,
 		loadMany: t.loadMany,
 		cache: e.cache,
@@ -696,13 +696,13 @@ var ec = (e) => {
 		return e.ensureTenantProvisioned === void 0 ? i : Hc(i, r, e.ensureTenantProvisioned);
 	}, m = (n, r) => e.resolveResidentStore === void 0 || n !== t ? n : e.resolveResidentStore(r);
 	return (e, c = t, h, g = "app-context", _) => {
-		let v = p(m(c, e.subject), e.subject), ee = o === void 0 ? void 0 : Mo(o, {
+		let v = p(m(c, e.subject), e.subject), ee = o === void 0 ? void 0 : jo(o, {
 			subject: e.subject,
 			traceId: e.traceId,
 			source: g,
 			..._?.parentExecutionId === void 0 ? {} : { parentExecutionId: _.parentExecutionId },
 			..._?.parentClosePolicy === void 0 ? {} : { parentClosePolicy: _.parentClosePolicy }
-		}), te = s.length === 0 || o === void 0 ? void 0 : ho({
+		}), te = s.length === 0 || o === void 0 ? void 0 : mo({
 			triggers: s,
 			store: p(t, e.subject),
 			source: g,
@@ -710,8 +710,8 @@ var ec = (e) => {
 			traceId: e.traceId,
 			...l === void 0 ? {} : { emit: l },
 			..._?.parentExecutionId === void 0 ? {} : { parentExecutionId: _.parentExecutionId },
-			startWorkflow: (e, t, n) => Mo(o, n).start(e, t)
-		}), y = f === void 0 ? void 0 : mo({
+			startWorkflow: (e, t, n) => jo(o, n).start(e, t)
+		}), ne = f === void 0 ? void 0 : po({
 			bus: f,
 			tenantId: e.subject.tenantId ?? null,
 			...h === void 0 ? {} : { deferToCommit: (e) => {
@@ -722,48 +722,48 @@ var ec = (e) => {
 			onPublished: (e, t, n) => {
 				te !== void 0 && te.emit(e, t).catch(() => {}), n.webhook !== void 0 && a !== void 0 && a.emit(n, t).catch(() => {});
 			}
-		}), b = u === void 0 ? void 0 : xo({
+		}), y = u === void 0 ? void 0 : bo({
 			store: v,
 			subject: e.subject,
 			traceId: e.traceId,
 			nudge: u.nudge,
 			...h === void 0 ? {} : { afterCommit: h.afterCommit }
-		}), x = d === void 0 ? void 0 : co({
+		}), b = d === void 0 ? void 0 : so({
 			store: v,
 			registry: d.registry,
 			subject: e.subject
-		}), S = uo({ store: v });
-		V(S);
-		let C = e.rowFilter === void 0 ? {} : { rowFilter: e.rowFilter };
+		}), x = lo({ store: v });
+		V(x);
+		let S = e.rowFilter === void 0 ? {} : { rowFilter: e.rowFilter };
 		return {
 			storeForTenant: (t) => {
 				let r = Nn(e.subject, t);
-				return gs(p(m(c, r), r), {
+				return hs(p(m(c, r), r), {
 					subject: r,
 					schemaRegistry: n,
-					...C
+					...S
 				});
 			},
-			store: gs(v, {
+			store: hs(v, {
 				subject: e.subject,
 				schemaRegistry: n,
 				...e.rowFilter === void 0 ? {} : { rowFilter: e.rowFilter }
 			}),
-			load: S.load,
-			loadMany: S.loadMany,
+			load: x.load,
+			loadMany: x.loadMany,
 			request: e,
-			access: to(e.subject),
+			access: eo(e.subject),
 			cache: r,
 			kv: i,
-			...a === void 0 ? {} : { webhooks: Y(a, {
+			...a === void 0 ? {} : { webhooks: zc(a, {
 				tenantId: e.subject.tenantId ?? null,
 				...h === void 0 ? {} : { afterCommit: h.afterCommit },
-				...b === void 0 ? {} : { enqueue: (e, t) => b.enqueue(e, t) }
+				...y === void 0 ? {} : { enqueue: (e, t) => y.enqueue(e, t) }
 			}) },
-			...y === void 0 ? {} : { events: y },
-			...b === void 0 ? {} : { outbox: b },
-			...x === void 0 ? {} : { connections: x },
-			...ee === void 0 ? {} : { workflows: h ? So(ee, h.afterCommit) : ee }
+			...ne === void 0 ? {} : { events: ne },
+			...y === void 0 ? {} : { outbox: y },
+			...b === void 0 ? {} : { connections: b },
+			...ee === void 0 ? {} : { workflows: h ? xo(ee, h.afterCommit) : ee }
 		};
 	};
 }, Gc = async (e, t, n) => {
@@ -777,8 +777,8 @@ var ec = (e) => {
 		take: 1
 	}))[0], a = i?.subject?.tenantId ?? null, o = t.tenantId ?? null;
 	if (i === void 0 || a !== o) throw new tn({ reason: "not authorized for this workflow run" });
-}, Kc = (e = {}) => ls.pipe(I.provide(is(e)), I.provide(Is.layer), I.provide(I.succeed(Is.RequestInit, { redirect: "manual" }))), qc = (e) => {
-	let t = I.succeed(ws, e.cacheService), n = I.succeed(Fs, e.kvService), r = e.semanticCache === void 0 ? [] : [I.succeed(Ds, e.semanticCache)], i = [
+}, Kc = (e = {}) => cs.pipe(I.provide(rs(e)), I.provide(Fs.layer), I.provide(I.succeed(Fs.RequestInit, { redirect: "manual" }))), qc = (e) => {
+	let t = I.succeed(Cs, e.cacheService), n = I.succeed(Ps, e.kvService), r = e.semanticCache === void 0 ? [] : [I.succeed(Es, e.semanticCache)], i = [
 		e.analyticsLayer,
 		t,
 		n,
@@ -809,12 +809,12 @@ var ec = (e) => {
 		ttlMs: n?.ttlMs ?? 864e5
 	};
 }, Zc = (e) => {
-	let t = Rs(e.publicApiEntries ?? []), n = [...e.restRoutes ?? [], ...t];
+	let t = Ls(e.publicApiEntries ?? []), n = [...e.restRoutes ?? [], ...t];
 	if (n.length === 0) return {
 		routes: [],
 		httpRoutes: []
 	};
-	let r = zs(n, {
+	let r = Rs(n, {
 		store: e.store,
 		resolveSubject: e.resolveSubject,
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency }
@@ -844,7 +844,7 @@ var ec = (e) => {
 	}, o = (e) => zt(a(e), e), s = (e) => {
 		let t = a(e);
 		return t === r ? o(e) : zt(Rt(Rt(t)), e);
-	}, c = Vs(i, {
+	}, c = Bs(i, {
 		persistent: !0,
 		ignoreInitial: !0,
 		atomic: !0,
@@ -900,7 +900,7 @@ var ec = (e) => {
 }), ll = "voltro:dev:ready", ul = (e, t = () => {}) => F.acquireUseRelease(F.sync(() => {
 	let n = process.argv[1] ?? "", r = xt(), i = bt(r);
 	i !== void 0 && X.warn(i);
-	let a = Bs(process.execPath, [
+	let a = zs(process.execPath, [
 		...r.execArgv,
 		n,
 		"dev",
@@ -966,14 +966,14 @@ var ec = (e) => {
 		process.exitCode = u;
 	});
 }), pl = async (e) => {
-	let t = e.spec ?? Lo, n;
+	let t = e.spec ?? Io, n;
 	return t.kind !== "noop" && e.sqlLayer !== void 0 ? n = await F.runPromise(F.gen(function* () {
 		let n = yield* nr.SqlClient, r = t.build(n);
 		return t.initialize && (yield* t.initialize(r).pipe(F.catchAll((t) => F.sync(() => e.log.warn("analytics sink initialize failed", {
 			provider: r.info.provider,
 			err: String(t)
 		}))))), r;
-	}).pipe(F.provide(e.sqlLayer))) : (t.kind !== "noop" && e.sqlLayer === void 0 && e.log.warn(`analytics sink '${t.kind}' requires a real SQL store — falling back to noop`), n = Io()), e.log.info("analytics sink", {
+	}).pipe(F.provide(e.sqlLayer))) : (t.kind !== "noop" && e.sqlLayer === void 0 && e.log.warn(`analytics sink '${t.kind}' requires a real SQL store — falling back to noop`), n = Fo()), e.log.info("analytics sink", {
 		provider: n.info.provider,
 		capabilities: n.info.capabilities,
 		...n.info.detail ?? {}
@@ -1039,11 +1039,11 @@ var ec = (e) => {
 	return r;
 }, vl = (e, t, n, r, i) => {
 	if (e.length === 0) return () => {};
-	let a = gs(t, {
+	let a = hs(t, {
 		subject: B,
 		schemaRegistry: r,
 		rowFilter: Zi
-	}), o = i === void 0 ? void 0 : mo({
+	}), o = i === void 0 ? void 0 : po({
 		bus: i,
 		tenantId: B.tenantId ?? null
 	}), s = [];
@@ -1057,7 +1057,7 @@ var ec = (e) => {
 				...o === void 0 ? {} : { publish: o.publish }
 			};
 			try {
-				let a = ns(c(t, n));
+				let a = ts(c(t, n));
 				a !== void 0 && a.catch((n) => {
 					e.warn("subscriber: handler rejected", {
 						table: i,
@@ -1203,7 +1203,7 @@ var ec = (e) => {
 		isArmed: () => !s && !f
 	};
 }, Cl = "<builtin:connections>", wl = {
-	registry: oo([]),
+	registry: ao([]),
 	queries: [],
 	mutations: [],
 	actions: [],
@@ -1213,15 +1213,15 @@ var ec = (e) => {
 	let { definitions: t, store: n, publicUrl: r, log: i } = e;
 	if (t.length === 0) return wl;
 	oa(t);
-	let a = oo(t), o = {
+	let a = ao(t), o = {
 		registry: a,
 		publicUrl: r
 	};
-	K(so({
+	q(oo({
 		store: n,
 		registry: a
 	}));
-	let s = _o(o), c = Oo(o), l = ko(o), u = fo(o), d = t.some((e) => e.kind === "oauth2"), f = d ? [{
+	let s = go(o), c = Do(o), l = Oo(o), u = uo(o), d = t.some((e) => e.kind === "oauth2"), f = d ? [{
 		method: "GET",
 		path: "/_voltro/connections",
 		handle: async (e) => {
@@ -1294,7 +1294,7 @@ var ec = (e) => {
 	};
 }, El = (e) => ({
 	status: 302,
-	headers: { location: Qo(e.startsWith("/") ? e : `/${e}`) },
+	headers: { location: Zo(e.startsWith("/") ? e : `/${e}`) },
 	body: ""
 }), Dl = (e) => process.env.VOLTRO_PUBLIC_URL?.replace(/\/+$/, "") ?? `http://localhost:${e}`, Ol = class extends Error {
 	constructor(e) {
@@ -1609,18 +1609,18 @@ var ec = (e) => {
 	}
 	return n.authorization = t, n;
 }, ru = async (e, t, n, r, i = {}) => {
-	let a = e.includes("?") ? e.slice(0, e.indexOf("?")) : e, o = `${pt}/agent/tools`, s = `${pt}/agent/call`;
+	let a = e.includes("?") ? e.slice(0, e.indexOf("?")) : e, o = `${mt}/agent/tools`, s = `${mt}/agent/call`;
 	if (a !== o && a !== s) return null;
-	let c = k(n.origin ?? n.Origin), l = (i.method ?? "GET").toUpperCase(), u = (e, t) => ({
+	let c = O(n.origin ?? n.Origin), l = (i.method ?? "GET").toUpperCase(), u = (e, t) => ({
 		status: e,
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify(t),
 		headers: c
 	});
-	if (Ke()) return u(503, { error: "inspect disabled (VOLTRO_INSPECT=off)" });
-	let d = ot(l, n, c);
+	if (qe()) return u(503, { error: "inspect disabled (VOLTRO_INSPECT=off)" });
+	let d = st(l, n, c);
 	if (d !== null) return d;
-	let f = (i.authResolver ?? $e)(n, l);
+	let f = (i.authResolver ?? et)(n, l);
 	if (!f.ok) return u(401, {
 		error: "unauthorized",
 		reason: f.reason
@@ -1666,15 +1666,15 @@ var ec = (e) => {
 		error: "no app credential",
 		reason: `an agent tool call must carry the app credential it acts as, in the \`${Xl}\` header (e.g. \`Bearer <api key>\`). The inspect token authorises the TRANSPORT; it is not an app identity, and running as the anonymous subject instead would execute under a principal nobody chose.`
 	});
-	let y = await p.resolveSubject(te), b = Zl();
+	let ne = await p.resolveSubject(te), y = Zl();
 	try {
 		return u(200, {
 			ok: !0,
 			result: await v.run(_.input, {
-				subject: y,
-				traceId: b
+				subject: ne,
+				traceId: y
 			}),
-			traceId: b
+			traceId: y
 		});
 	} catch (e) {
 		return u(200, {
@@ -1683,7 +1683,7 @@ var ec = (e) => {
 				message: e.message,
 				name: e.name
 			} : String(e),
-			traceId: b
+			traceId: y
 		});
 	}
 }, iu = (e) => {
@@ -1791,7 +1791,7 @@ var ec = (e) => {
 		...e
 	}), l = t.onChange((e) => {
 		let t = s.get(e.table);
-		if (t !== void 0) for (let { reaction: n, log: r } of t) Zo(n, e, c()).then((t) => {
+		if (t !== void 0) for (let { reaction: n, log: r } of t) Xo(n, e, c()).then((t) => {
 			t === "acted" && r.info("reaction: acted", {
 				table: e.table,
 				op: e.op
@@ -2046,7 +2046,7 @@ var ec = (e) => {
 			continue;
 		}
 		let o = e.default;
-		if (!za(o)) {
+		if (!H(o)) {
 			t.warn("aggregate: default export is not a defineAggregate() result", { file: a });
 			continue;
 		}
@@ -2098,7 +2098,7 @@ var ec = (e) => {
 	for (let e = 0; e < t.length; e++) {
 		let i = n(t[e]);
 		if (i._tag === "Left") {
-			let t = Us.formatErrorSync(i.left)[0], n = t?.path?.length ? t.path.join(".") : "<root>";
+			let t = Hs.formatErrorSync(i.left)[0], n = t?.path?.length ? t.path.join(".") : "<root>";
 			return {
 				ok: !1,
 				reason: `row[${e}] failed output-schema decode at ${n}: ${t?.message ?? "unknown"}`
@@ -2315,7 +2315,7 @@ var ec = (e) => {
 	}, h);
 	g.unref(), a.scheduleTimer = g;
 }, ju = async (e) => {
-	let t = e.storage ?? fu(), n = e.coordinator ?? rs, r = e.analytics ?? Io(), i = e.log;
+	let t = e.storage ?? fu(), n = e.coordinator ?? ns, r = e.analytics ?? Fo(), i = e.log;
 	await t.initialize();
 	let a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = {
 		refreshedAt: null,
@@ -2538,7 +2538,7 @@ var ec = (e) => {
 		});
 	}
 	return o;
-}, zu = (e, t) => Ru(e, t, Ha, "expectation", "defineExpectation"), Bu = (e, t) => Ru(e, t, Ba, "budget", "defineCostBudget"), Vu = (e, t) => Ru(e, t, Ua, "experiment", "defineExperiment"), Hu = {
+}, zu = (e, t) => Ru(e, t, Va, "expectation", "defineExpectation"), Bu = (e, t) => Ru(e, t, za, "budget", "defineCostBudget"), Vu = (e, t) => Ru(e, t, Ha, "experiment", "defineExperiment"), Hu = {
 	snapshot: () => [],
 	get: () => null,
 	violations: () => [],
@@ -3339,7 +3339,7 @@ var ec = (e) => {
 			t.warn("email: failed to import", { file: i }, e);
 			continue;
 		}
-		let a = Object.values(e).filter(Ws);
+		let a = Object.values(e).filter(Us);
 		if (a.length === 0) {
 			t.warn("email: no defineEmail export found", { file: i });
 			continue;
@@ -3356,7 +3356,7 @@ var ec = (e) => {
 		let t = r.child("seeds"), s = await e.loadSeedFiles(i, t);
 		if (a = s.length, o = s, s.length > 0) {
 			for (let t of s) e.onSeedDiscovered?.(t);
-			if (de(s, n, t), e.seedPolicy === "run" && e.runBootSeeds !== void 0) {
+			if (fe(s, n, t), e.seedPolicy === "run" && e.runBootSeeds !== void 0) {
 				t.info("discovered seeds", { ids: s.map((e) => e.definition.id) });
 				let r = await e.runBootSeeds(s, n, t);
 				for (let t of r) e.onSeedResult?.(t);
@@ -3393,7 +3393,7 @@ var ec = (e) => {
 		seeds: o
 	});
 }, nf = (e) => {
-	let t = ae(e.seeds, e.store, e.log);
+	let t = oe(e.seeds, e.store, e.log);
 	return t.length === 0 ? e.schedules : (e.log.info(`${t.length} cron-lifecycle seed(s) scheduled on the coordinated cron scheduler`, { schedules: t.map((e) => e.name) }), [...e.schedules, ...t]);
 }, rf = (e) => `workflow:${e}`, af = {
 	skip: "skip",
@@ -3504,7 +3504,7 @@ var ec = (e) => {
 		return e.log?.warn("inspect.migrations: snapshot build failed", { err: String(n) }), t;
 	}
 }, lf = (e) => F.map(e, (e) => ({ text: e })), uf = (e) => {
-	let { descriptor: t, executor: n, file: r } = e, { send: i, messages: a } = Hs(t);
+	let { descriptor: t, executor: n, file: r } = e, { send: i, messages: a } = Vs(t);
 	return [{
 		kind: "action",
 		file: r,
@@ -3529,16 +3529,16 @@ var ec = (e) => {
 		executor: (e, t) => ri(t.store, e.threadId)
 	}];
 }, df = "<builtin:undo>", ff = () => {
-	if (!fs()) return {
+	if (!ds()) return {
 		queries: [],
 		mutations: []
 	};
-	let e = us();
+	let e = ls();
 	return {
 		queries: [{
 			file: df,
 			descriptor: Fn,
-			executor: (t, n) => e ? ds(t, n) : Promise.resolve([])
+			executor: (t, n) => e ? us(t, n) : Promise.resolve([])
 		}],
 		mutations: [{
 			file: df,
@@ -3547,22 +3547,22 @@ var ec = (e) => {
 		}, {
 			file: df,
 			descriptor: In,
-			executor: (t, n) => e ? Go(t, n) : Promise.reject(new nn({ invocationId: t.invocationId }))
+			executor: (t, n) => e ? Wo(t, n) : Promise.reject(new nn({ invocationId: t.invocationId }))
 		}]
 	};
-}, pf = () => fs() && !us() ? "undo: the `__voltro.undo.*` procedures are served but capture is OFF for this environment, so the undo log will always be empty and apply/redo will answer UndoNotFound. Set VOLTRO_UNDO=on to capture (it costs a read-before-write per update/delete plus one log row per mutation), or VOLTRO_UNDO=off to remove the procedures from the client bundle as well." : void 0, mf = () => us() ? (e) => Ao(e) : (e) => ({
+}, pf = () => ds() && !ls() ? "undo: the `__voltro.undo.*` procedures are served but capture is OFF for this environment, so the undo log will always be empty and apply/redo will answer UndoNotFound. Set VOLTRO_UNDO=on to capture (it costs a read-before-write per update/delete plus one log row per mutation), or VOLTRO_UNDO=off to remove the procedures from the client bundle as well." : void 0, mf = () => ls() ? (e) => ko(e) : (e) => ({
 	tx: e,
 	persist: async () => {}
 }), hf = "<builtin:approvals>", gf = (e, t = process.env) => {
 	let n = e?.approvals?.expiresIn;
 	if (n !== void 0) {
-		let e = zo(n);
+		let e = Ro(n);
 		if (e === null) throw Error(`app.config.ts: \`approvals.expiresIn\` must be an interval like '4h' / '30m' (got ${JSON.stringify(n)})`);
 		return e;
 	}
 	let r = Number(t.VOLTRO_APPROVAL_EXPIRY_HOURS);
 	return Number.isFinite(r) && r > 0 ? r * 36e5 : Ui;
-}, _f = (e) => e.some((e) => e?.requiresApproval != null), vf = (e) => (La(no({
+}, _f = (e) => e.some((e) => e?.requiresApproval != null), vf = (e) => (La(to({
 	store: e.store,
 	defaultExpiryMs: e.defaultExpiryMs ?? Ui
 })), {
@@ -3853,7 +3853,7 @@ var ec = (e) => {
 	mutation: Pf(pn(Nf(e, "mutation", t))),
 	action: Pf(pn(Nf(e, "action", t))),
 	query: Pf(pn(Nf(e, "query", t)))
-}), If = `${pt}/plugins/`, Lf = (e) => e.startsWith("/") ? e : `/${e}`, Rf = (e) => {
+}), If = `${mt}/plugins/`, Lf = (e) => e.startsWith("/") ? e : `/${e}`, Rf = (e) => {
 	let t = e.indexOf("?");
 	return t >= 0 ? e.slice(0, t) : e;
 }, zf = (e, t) => e.kind === "json" ? {
@@ -3869,7 +3869,7 @@ var ec = (e) => {
 }, Bf = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = [];
 	for (let r of e) {
-		let e = r.inspectEndpoints ?? [], i = w(r.name);
+		let e = r.inspectEndpoints ?? [], i = C(r.name);
 		for (let a of e) {
 			let e = `${If}${i}${Lf(a.path)}`, o = `${a.method} ${e}`, s = t.get(o);
 			if (s !== void 0) throw Error(`plugin inspect endpoint collision: "${a.method} ${e}" declared by plugin "${r.name}" but already claimed by ${s}`);
@@ -3887,20 +3887,20 @@ var ec = (e) => {
 		async dispatch(e, t, r, i, a) {
 			let o = Rf(e);
 			if (!o.startsWith(If)) return null;
-			let s = k(r.origin ?? r.Origin), c = t.toUpperCase();
+			let s = O(r.origin ?? r.Origin), c = t.toUpperCase();
 			if (c === "OPTIONS") return {
 				status: 204,
 				contentType: "text/plain",
 				body: "",
 				headers: s
 			};
-			if (Ke()) return {
+			if (qe()) return {
 				status: 503,
 				contentType: "application/json; charset=utf-8",
 				body: JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }),
 				headers: s
 			};
-			let l = (a?.authResolver ?? $e)(r, t);
+			let l = (a?.authResolver ?? et)(r, t);
 			if (!l.ok) return {
 				status: 401,
 				contentType: "application/json; charset=utf-8",
@@ -4254,7 +4254,7 @@ var ec = (e) => {
 	for (let n of e) {
 		let e = n.dashboard ?? [];
 		if (e.length === 0) continue;
-		let r = he(n.name), i = /* @__PURE__ */ new Set();
+		let r = ge(n.name), i = /* @__PURE__ */ new Set();
 		for (let a of e) {
 			if (i.has(a.id)) throw Error(`plugin "${n.name}" declares duplicate dashboard mount id "${a.id}"`);
 			i.add(a.id), t.push({
@@ -4292,7 +4292,7 @@ var ec = (e) => {
 		for (let i of r) {
 			if (op.has(i.name)) continue;
 			let r = N(e, i.name);
-			i.isDirectory() ? await n(r) : i.isFile() && (ip.test(i.name) && !ap.test(i.name) || ke.test(i.name)) && t.push(r);
+			i.isDirectory() ? await n(r) : i.isFile() && (ip.test(i.name) && !ap.test(i.name) || Ae.test(i.name)) && t.push(r);
 		}
 	};
 	return await n(e), t;
@@ -4308,7 +4308,7 @@ var ec = (e) => {
 					tag: e.name
 				});
 			}
-			if (r && typeof r == "object" && ke.test(e) && "name" in r) {
+			if (r && typeof r == "object" && Ae.test(e) && "name" in r) {
 				let e = r;
 				typeof e.name == "string" && n.push({
 					kind: "workflow",
@@ -4327,7 +4327,7 @@ var ec = (e) => {
 	if (r.length === 0) return [];
 	let i = await cp(n);
 	return r.map((e) => {
-		let n = he(e.name), r = {
+		let n = ge(e.name), r = {
 			pluginName: e.name,
 			pluginAlias: n,
 			apiName: t,
@@ -4343,7 +4343,7 @@ var ec = (e) => {
 	pluginContributions: await lp(e, t, n),
 	pluginErrorImports: e.flatMap((e) => (e.errorSchemas ?? []).map((e) => e.import)),
 	pluginRpcImports: e.flatMap((e) => (e.rpcClientDescriptors ?? []).map((t) => ({
-		tag: De(e, t.tag),
+		tag: Oe(e, t.tag),
 		kind: t.kind,
 		module: t.import.module,
 		name: t.import.name
@@ -4612,7 +4612,7 @@ var ec = (e) => {
 	return {
 		inspectStartWorkflow: async (e) => {
 			if (i === void 0) throw Error("workflow runtime is not configured");
-			let t = await Mo(i, {
+			let t = await jo(i, {
 				traceId: `inspect-workflow-start-${Date.now()}`,
 				source: "inspect"
 			}).start(e.name, e.payload);
@@ -5011,7 +5011,7 @@ var ec = (e) => {
 	let t = e.now ?? Date.now, n = {
 		phase: "booting",
 		startedAt: t()
-	}, r = $s((e, r) => {
+	}, r = Qs((e, r) => {
 		let i = (e.url ?? "/").split("?")[0], a = n.phase === "ready";
 		if (i === "/internal/liveness") {
 			r.writeHead(200, {
@@ -5086,7 +5086,7 @@ var ec = (e) => {
   delivery. Rename one of them.`);
 }, mm = (e) => {
 	let t = new Map(e.events.map((e) => [e.descriptor.name, e.descriptor.delivery ?? "each"])), n = new Ki({
-		origin: e.origin ?? Cs(),
+		origin: e.origin ?? Ss(),
 		deliveryOf: (e) => t.get(e),
 		...e.publishRemote === void 0 ? {} : { publishRemote: e.publishRemote }
 	}), r = [], i = {};
@@ -5394,14 +5394,14 @@ var ec = (e) => {
 	if ((e.includes("?") ? e.slice(0, e.indexOf("?")) : e) !== "/_voltro/inspect/checks") return null;
 	let i = (r.method ?? "GET").toUpperCase();
 	if (i !== "GET") return null;
-	let a = k(n.origin ?? n.Origin), o = (e, t) => ({
+	let a = O(n.origin ?? n.Origin), o = (e, t) => ({
 		status: e,
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify(t),
 		headers: a
 	});
-	if (Ke()) return o(503, { error: "inspect disabled (VOLTRO_INSPECT=off)" });
-	let s = (r.authResolver ?? $e)(n, i);
+	if (qe()) return o(503, { error: "inspect disabled (VOLTRO_INSPECT=off)" });
+	let s = (r.authResolver ?? et)(n, i);
 	if (!s.ok) return o(401, {
 		error: "unauthorized",
 		reason: s.reason
@@ -5420,65 +5420,65 @@ var ec = (e) => {
 		if (r) return r;
 	}
 	if (e.startsWith("/_voltro/inspect/schedules")) {
-		let r = await it(e, t, n, {
+		let r = await at(e, t, n, {
 			method: i,
 			...a === void 0 ? {} : { body: a }
 		});
 		if (r) return r;
 	}
 	if (e === "/_voltro/inspect/cluster" || e.startsWith("/_voltro/inspect/cluster?")) {
-		let r = await ft(e, t, n, { method: i });
+		let r = await pt(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && (e === "/_voltro/inspect/data/rows" || e.startsWith("/_voltro/inspect/data/rows?"))) {
-		let r = await st(e, t, n, { method: i });
+		let r = await ct(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && e.startsWith("/_voltro/inspect/provenance")) {
-		let r = await ct(e, t, n, { method: i });
+		let r = await lt(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (e.startsWith("/_voltro/inspect/workflows/flow-control")) {
-		let r = await nt(e, t, n, a ?? "", { method: i });
+		let r = await rt(e, t, n, a ?? "", { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && (e === "/_voltro/inspect/workflows/runs" || e.startsWith("/_voltro/inspect/workflows/runs?"))) {
-		let r = await Ze(e, t, n, { method: i });
+		let r = await Qe(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && (e === "/_voltro/inspect/workflows/stats" || e.startsWith("/_voltro/inspect/workflows/stats?"))) {
-		let r = await qe(e, t, n, { method: i });
+		let r = await Je(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "POST" && e.startsWith("/_voltro/inspect/workflows/start/")) {
-		let r = await A(e, t, n, a ?? "", { method: i });
+		let r = await k(e, t, n, a ?? "", { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && e.startsWith("/_voltro/inspect/workflows/runs/") && e.endsWith("/steps")) {
-		let r = await j(e, t, n, { method: i });
+		let r = await A(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && e.startsWith("/_voltro/inspect/workflows/runs/") && e.endsWith("/events")) {
-		let r = await Xe(e, t, n, { method: i });
+		let r = await Ze(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && (e === "/_voltro/inspect/workflows/events" || e.startsWith("/_voltro/inspect/workflows/events?"))) {
-		let r = await et(t, e, n, { method: i });
+		let r = await tt(t, e, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && e.startsWith("/_voltro/inspect/workflows/events/") && e.endsWith("/deliveries")) {
-		let r = await gt(t, e, n, { method: i });
+		let r = await _t(t, e, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "GET" && (e === "/_voltro/inspect/workflows/children" || e.startsWith("/_voltro/inspect/workflows/children?"))) {
-		let r = await _t(e, t, n, { method: i });
+		let r = await j(e, t, n, { method: i });
 		if (r) return r;
 	}
 	if (i === "POST" && e.startsWith("/_voltro/inspect/workflows/runs/") && (e.endsWith("/cancel") || e.endsWith("/retry") || e.endsWith("/suspend") || e.endsWith("/resume") || e.endsWith("/signal"))) {
-		let r = await ht(e, t, n, a ?? "", { method: i });
+		let r = await gt(e, t, n, a ?? "", { method: i });
 		if (r) return r;
 	}
-	return i === "POST" && e.startsWith("/_voltro/inspect/webhooks/") ? Qe(e, t, n, a ?? "", { method: i }).then((e) => e ?? {
+	return i === "POST" && e.startsWith("/_voltro/inspect/webhooks/") ? $e(e, t, n, a ?? "", { method: i }).then((e) => e ?? {
 		status: 404,
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify({ error: "unknown webhook URL" })
@@ -5491,12 +5491,12 @@ var ec = (e) => {
 			targets: [],
 			deliveries: []
 		}),
-		headers: k(n.origin)
+		headers: O(n.origin)
 	} : t.webhooks().then((e) => ({
 		status: 200,
 		contentType: "application/json; charset=utf-8",
 		body: JSON.stringify(e),
-		headers: k(n.origin)
+		headers: O(n.origin)
 	})) : null;
 }, Am = (e) => ({
 	schedules: e.schedules.map((t) => ({
@@ -5508,7 +5508,7 @@ var ec = (e) => {
 		backfill: t.backfill ?? "skip",
 		maxRuntimeMs: t.maxRuntimeMs ?? 18e5,
 		...t.description === void 0 ? {} : { description: t.description },
-		nextFiringAt: Fo(t).toISOString()
+		nextFiringAt: Po(t).toISOString()
 	})),
 	coordination: e.coordination
 }), jm = 1e4, Mm = (e) => async (t) => {
@@ -6137,11 +6137,11 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	}
 	!l && c > n && t.onTruncated?.(c, n);
 }, fh = (e, t, n) => ({
-	option: Xs(e ?? [])?.broadcast?.namespace,
+	option: Ys(e ?? [])?.broadcast?.namespace,
 	env: n.VOLTRO_BROADCAST_NAMESPACE,
 	appName: t
-}), ph = (e, t, n = process.env) => Zs(fh(e, t, n)), mh = (e, t, n = process.env) => {
-	let r = Js(fh(e, t, n));
+}), ph = (e, t, n = process.env) => Xs(fh(e, t, n)), mh = (e, t, n = process.env) => {
+	let r = qs(fh(e, t, n));
 	if (r.changed) return `broadcast namespace "${r.configured}" was normalised to "${r.resolved}" — it becomes a broker subject, so whitespace, dots and wildcards are folded to "-".
   Two deployments configured differently can collapse onto ONE channel this way ("my app" and "my.app" both give "my-app"); if these are meant to be separate, make the resolved names differ.`;
 }, hh = (e) => typeof e == "object" && !!e && typeof e.route == "string" && typeof e.event == "string" && typeof e.origin == "string" && Number.isFinite(e.n) && Number.isFinite(e.emittedAt), gh = async (e) => {
@@ -6167,7 +6167,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		}
 	}, r = /* @__PURE__ */ new Set(), i = /* @__PURE__ */ new Map(), a = (a) => {
 		if (i.has(a)) return;
-		let o = Ys(e.namespace, a);
+		let o = Js(e.namespace, a);
 		F.runPromise(e.provider.subscribe(o, n(o))).then((e) => {
 			if (!r.has(a)) {
 				e();
@@ -6204,7 +6204,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 }, _h = (e, t, n) => {
 	let r = !1;
 	return (i) => {
-		let a = Ys(t, i.event);
+		let a = Js(t, i.event);
 		F.runPromise(e.publish(a, JSON.stringify(i))).then(() => {
 			r = !1;
 		}, (e) => {
@@ -6215,7 +6215,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		});
 	};
 }, vh = (e, t, n) => {
-	let r = Xs(e ?? [])?.broadcast?.provider;
+	let r = Ys(e ?? [])?.broadcast?.provider;
 	return r === void 0 ? {
 		publishRemote: void 0,
 		attach: async () => null
@@ -6230,12 +6230,12 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			});
 			return n?.info("events: cross-instance fan-out active", {
 				provider: r.name,
-				channelPrefix: `${qs(t, "events")}:`
+				channelPrefix: `${Ks(t, "events")}:`
 			}), i;
 		}
 	};
 }, yh = (e) => typeof e == "object" && !!e && typeof e.instanceId == "string" && Number.isFinite(e.startedAt), bh = (e, t) => {
-	let n = Xs(e ?? [])?.broadcast?.provider, r = t.logger;
+	let n = Ys(e ?? [])?.broadcast?.provider, r = t.logger;
 	if (n === void 0) {
 		let e = new Xi({
 			instanceId: t.instanceId,
@@ -6252,10 +6252,10 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		instanceId: t.instanceId,
 		...t.meta === void 0 ? {} : { meta: t.meta },
 		announce: (e) => {
-			F.runPromise(n.publish(qs(t.namespace, "members"), JSON.stringify(e))).catch(() => {});
+			F.runPromise(n.publish(Ks(t.namespace, "members"), JSON.stringify(e))).catch(() => {});
 		}
 	}), a;
-	return F.runPromise(n.subscribe(qs(t.namespace, "members"), (e) => {
+	return F.runPromise(n.subscribe(Ks(t.namespace, "members"), (e) => {
 		let t;
 		try {
 			t = JSON.parse(e);
@@ -6271,7 +6271,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		r?.info(`membership: instance ${e.kind}`, { instanceId: e.instanceId });
 	}), i.start(), r?.info("membership: announcing", {
 		instanceId: t.instanceId,
-		channel: qs(t.namespace, "members")
+		channel: Ks(t.namespace, "members")
 	}), {
 		membership: i,
 		detach: async () => {
@@ -6342,11 +6342,11 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 })(), Dh = process.env.TENANT ?? "acme", Oh = {
 	id: "voltro-password",
 	resolve: (e) => {
-		let t = e.headers.cookie ?? e.headers.Cookie, n = ys(t, vs);
+		let t = e.headers.cookie ?? e.headers.Cookie, n = vs(t, _s);
 		if (!n) return { kind: "skip" };
-		let r = bs();
+		let r = ys();
 		if (!r) return { kind: "skip" };
-		let i = xs(n, r);
+		let i = bs(n, r);
 		return i ? {
 			kind: "matched",
 			subject: i.subject
@@ -6425,7 +6425,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		for (let i of r) {
 			if (Ph.has(i.name)) continue;
 			let r = N(e, i.name);
-			i.isDirectory() ? await n(r) : i.isFile() && (O.test(i.name) && !Pe.test(i.name) || Pe.test(i.name) || ke.test(i.name) || je.test(i.name) || Ae.test(i.name) || D.test(i.name) || Ge.test(i.name) || We.test(i.name) || Ne.test(i.name) || E.test(i.name) || Ie.test(i.name) || $d.test(i.name) || Se.test(i.name) || xe.test(i.name) || Ue.test(i.name) || ze.test(i.name) || He.test(i.name) || Ve.test(i.name) || Be.test(i.name) || Le.test(i.name) || Fe.test(i.name) || Re.test(i.name)) && t.push(r);
+			i.isDirectory() ? await n(r) : i.isFile() && (D.test(i.name) && !Fe.test(i.name) || Fe.test(i.name) || Ae.test(i.name) || Me.test(i.name) || je.test(i.name) || E.test(i.name) || Ke.test(i.name) || Ge.test(i.name) || Pe.test(i.name) || T.test(i.name) || Le.test(i.name) || $d.test(i.name) || Ce.test(i.name) || Se.test(i.name) || We.test(i.name) || Be.test(i.name) || Ue.test(i.name) || He.test(i.name) || Ve.test(i.name) || Re.test(i.name) || Ie.test(i.name) || ze.test(i.name)) && t.push(r);
 		}
 	};
 	return await n(e), t;
@@ -6494,13 +6494,13 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	let r = [], i = [], a = [], o = [], s = [], c = [], l = [], u = [], d = [], f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Set(), m = /* @__PURE__ */ new Map(), h = [], g = [], _ = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = M(t);
-		if (D.test(e)) {
+		if (E.test(e)) {
 			let e = new Set(oi().map((e) => e.tableName)), r = await n(t), i = [...Object.values(r).filter((e) => Hh(e)), ...oi().filter((t) => !e.has(t.tableName))];
 			for (let e of i) m.set(e.tableName, e), Gh(e) && f.add(e.tableName), qh(e) && p.add(e.tableName);
 			Oi(r);
 			continue;
 		}
-		if (Ge.test(e)) {
+		if (Ke.test(e)) {
 			let e = await n(t);
 			if (Oi(e) === 0) {
 				let n = Object.entries(e).filter(([, e]) => vi(e)).map(([e]) => e);
@@ -6511,14 +6511,14 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			}
 			continue;
 		}
-		if (Me(e)) {
+		if (Ne(e)) {
 			Z.warn("skipping workflow — a workflow module must be `.workflow.tsx` (JSX steps); rename it", {
 				file: t,
 				expected: e.replace(/\.workflow\.ts$/, ".workflow.tsx")
 			});
 			continue;
 		}
-		if (ke.test(e)) {
+		if (Ae.test(e)) {
 			let e = await n(t), r = Object.values(e).find(Vh);
 			if (!r) {
 				Z.warn("skipping workflow — no workflow(...) export", { file: t });
@@ -6547,9 +6547,9 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			for (let t of [...Object.values(e), ...Object.values(a)]) Nr(t) && l.push(t);
 			continue;
 		}
-		if (Ae.test(e)) {
-			let r = await n(t), i = r.default ?? Object.values(r).find(Ka);
-			if (!Ka(i)) {
+		if (je.test(e)) {
+			let r = await n(t), i = r.default ?? Object.values(r).find(Ga);
+			if (!Ga(i)) {
 				Z.warn("skipping trigger — default export is not triggerWorkflow(...)", { file: t });
 				continue;
 			}
@@ -6564,9 +6564,9 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			});
 			continue;
 		}
-		if (E.test(e)) {
+		if (T.test(e)) {
 			let e = (await n(t)).default;
-			if (!Ga(e)) {
+			if (!Wa(e)) {
 				Z.warn("skipping cron — default export is not defineSchedule(...)", { file: t });
 				continue;
 			}
@@ -6580,16 +6580,16 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			d.push(e);
 			continue;
 		}
-		if (Pe.test(e)) {
+		if (Fe.test(e)) {
 			let n = t.slice(0, -e.length), r = e.replace(/\.server\.ts$/, ".ts");
 			_.set(n + r, t);
 			continue;
 		}
-		if (O.test(e)) {
+		if (D.test(e)) {
 			h.push(t);
 			continue;
 		}
-		if (Re.test(e)) {
+		if (ze.test(e)) {
 			g.push(t);
 			continue;
 		}
@@ -6644,7 +6644,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		let n = ji(t);
 		n.length > 0 && v.set(e, n);
 	}
-	let ee = v.size === 0 ? [] : r.flatMap((e) => $o({
+	let ee = v.size === 0 ? [] : r.flatMap((e) => Qo({
 		name: e.descriptor.name,
 		output: e.descriptor.output,
 		source: e.descriptor.source
@@ -6655,17 +6655,17 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		...e.descriptor.cache === void 0 ? {} : { cache: e.descriptor.cache }
 	}, f));
 	m.has("actors") || m.set("actors", ai);
-	let y = m.get("actors"), b = m.get("tenants");
-	(y !== void 0 || b !== void 0) && Di({
-		...y === void 0 ? {} : { actors: () => y },
-		...b === void 0 ? {} : { tenants: () => b }
+	let ne = m.get("actors"), y = m.get("tenants");
+	(ne !== void 0 || y !== void 0) && Di({
+		...ne === void 0 ? {} : { actors: () => ne },
+		...y === void 0 ? {} : { tenants: () => y }
 	});
-	let x = e.filter((e) => ye.test(M(e))), S = x.length > 0 ? await T(x, Z.child("connections")) : [], C = {
+	let b = e.filter((e) => be.test(M(e))), x = b.length > 0 ? await w(b, Z.child("connections")) : [], S = {
 		workflows: c.length > 0 || u.length > 0,
-		schedules: d.length > 0 || e.some((e) => Ce(M(e))),
-		webhooks: e.some((e) => Ie.test(M(e))),
-		agents: e.some((e) => Se.test(M(e))),
-		connections: x.length > 0
+		schedules: d.length > 0 || e.some((e) => we(M(e))),
+		webhooks: e.some((e) => Le.test(M(e))),
+		agents: e.some((e) => Ce.test(M(e))),
+		connections: b.length > 0
 	};
 	return Pi(), {
 		queries: r,
@@ -6677,9 +6677,9 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		workflowWorkers: l,
 		eventTriggers: u,
 		schedules: d,
-		connections: S,
+		connections: x,
 		tables: [...m.values()],
-		featureMix: C,
+		featureMix: S,
 		tenantScopedTables: f,
 		softDeleteScopedTables: p,
 		serverOnlyLeaks: ee,
@@ -6703,8 +6703,8 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			...r ? { error: e } : {}
 		};
 	}
-}, Qh = async (e) => (await Zh(e)).config, Q = () => C("runtime"), $h = (e) => {
-	let t = ie();
+}, Qh = async (e) => (await Zh(e)).config, Q = () => S("runtime"), $h = (e) => {
+	let t = ae();
 	if ("url" in e && e.url) try {
 		let n = new URL(e.url), r = n.username ? `${n.username}@` : "", i = n.port ? `:${n.port}` : "";
 		return {
@@ -6729,29 +6729,30 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	let t = 2166136261;
 	for (let n = 0; n < e.length; n++) t ^= e.charCodeAt(n), t = Math.imul(t, 16777619);
 	return 1e3 + (t >>> 0) % 2147482647;
-}, $ = (e) => (process.env.DB_DIALECT ?? e?.store ?? "memory").toLowerCase(), ng = async (e, n, r) => {
-	let i = $(e);
-	if (i === "memory") return Z.info("sql dialect resolved: memory — in-process store, no persistence"), new Yi({});
-	let a = (process.env.CDC ?? "1") !== "0", o = await S(i), s = o.id === "postgres" ? "LISTEN/NOTIFY" : Si(o.id) ? "in-process bus" : o.id === "mariadb" ? "binlog CDC (ROW)" : o.id === "mssql" ? "Change Tracking (polled)" : o.id === "mysql" ? "binlog CDC (ROW)" : "inline only", c = o.id === "postgres" ? "native" : o.id === "mysql" ? "INSERT/UPDATE/DELETE then SELECT (no RETURNING)" : o.id === "mariadb" ? "native (INSERT/DELETE); UPDATE then SELECT" : o.id === "mssql" ? "OUTPUT INSERTED/DELETED" : Si(o.id) ? "native" : "unknown";
-	Z.info(`sql dialect resolved: ${o.id} — CDC: ${a ? s : "inline emit (CDC=0)"}, RETURNING: ${c}`);
-	let l = r ?? Q(), { summary: u, fromEnv: d } = $h(l);
-	Z.info(`db connection: ${u}${d ? "" : " (DEFAULT FALLBACK — no DB_URL / PG_HOST set)"}`), d || Z.warn("db connection: falling back to localhost:5432/app — no DB_URL or PG_HOST env var set.\n  If this app should run against its OWN postgres (e.g. its docker-compose), set DB_URL.\n  Copy `.env.example` to `.env` in the app dir, or set DB_URL in the shell.\n  Otherwise this app is silently using whatever DB is at localhost:5432/app — which is\n  voltro-starter's docker default + may carry foreign tables that confuse the planner.");
-	let f;
-	if (a && (o.id === "mysql" || o.id === "mariadb")) {
-		let { connectionFromConfig: e } = await x("@voltro/sql-mysql"), t = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, n = oi().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
-		f = {
+}, $ = (e) => (process.env.DB_DIALECT ?? e?.store ?? "memory").toLowerCase(), ng = async (e, n, r, i) => {
+	let a = $(e);
+	if (a === "memory") return Z.info("sql dialect resolved: memory — in-process store, no persistence"), new Yi({});
+	let o = (process.env.CDC ?? "1") !== "0", s = await x(a), c = s.id === "postgres" ? "LISTEN/NOTIFY" : Si(s.id) ? "in-process bus" : s.id === "mariadb" ? "binlog CDC (ROW)" : s.id === "mssql" ? "Change Tracking (polled)" : s.id === "mysql" ? "binlog CDC (ROW)" : "inline only", l = s.id === "postgres" ? "native" : s.id === "mysql" ? "INSERT/UPDATE/DELETE then SELECT (no RETURNING)" : s.id === "mariadb" ? "native (INSERT/DELETE); UPDATE then SELECT" : s.id === "mssql" ? "OUTPUT INSERTED/DELETED" : Si(s.id) ? "native" : "unknown";
+	Z.info(`sql dialect resolved: ${s.id} — CDC: ${o ? c : "inline emit (CDC=0)"}, RETURNING: ${l}`);
+	let u = r ?? Q(), { summary: d, fromEnv: f } = $h(u);
+	Z.info(`db connection: ${d}${f ? "" : " (DEFAULT FALLBACK — no DB_URL / PG_HOST set)"}`), f || Z.warn("db connection: falling back to localhost:5432/app — no DB_URL or PG_HOST env var set.\n  If this app should run against its OWN postgres (e.g. its docker-compose), set DB_URL.\n  Copy `.env.example` to `.env` in the app dir, or set DB_URL in the shell.\n  Otherwise this app is silently using whatever DB is at localhost:5432/app — which is\n  voltro-starter's docker default + may carry foreign tables that confuse the planner.");
+	let p;
+	if (o && (s.id === "mysql" || s.id === "mariadb")) {
+		let { connectionFromConfig: e } = await b("@voltro/sql-mysql"), t = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, n = oi().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
+		p = {
 			serverId: tg(t),
 			replicaId: t,
-			connection: e(l),
-			includeTables: n
-		}, n.length === 0 ? (a = !1, f = void 0, Z.info(`${o.id} binlog CDC skipped — every app table is .nonReactive()`)) : Z.info(`${o.id} binlog CDC enabled`, {
+			connection: e(u),
+			includeTables: n,
+			...i?.schemaWorkFollows === !0 ? { exclusionRefreshFollows: !0 } : {}
+		}, n.length === 0 ? (o = !1, p = void 0, Z.info(`${s.id} binlog CDC skipped — every app table is .nonReactive()`)) : Z.info(`${s.id} binlog CDC enabled`, {
 			replicaId: t,
-			serverId: f.serverId,
+			serverId: p.serverId,
 			tables: n.length
 		});
-	} else if (a && o.id === "mssql") {
-		let { connectionFromConfig: e } = await x("@voltro/sql-mssql"), t = e(l), n = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, r = oi().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
-		f = {
+	} else if (o && s.id === "mssql") {
+		let { connectionFromConfig: e } = await b("@voltro/sql-mssql"), t = e(u), n = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, r = oi().filter((e) => e.isReactive !== !1).map((e) => e.tableName).filter((e) => !e.startsWith("_voltro_"));
+		p = {
 			serverId: 0,
 			replicaId: n,
 			connection: {
@@ -6762,91 +6763,91 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				database: t.database ?? "master"
 			},
 			includeTables: r
-		}, r.length === 0 ? (a = !1, f = void 0, Z.info("mssql Change Tracking CDC skipped — every app table is .nonReactive()")) : Z.info("mssql Change Tracking CDC enabled", {
+		}, r.length === 0 ? (o = !1, p = void 0, Z.info("mssql Change Tracking CDC skipped — every app table is .nonReactive()")) : Z.info("mssql Change Tracking CDC enabled", {
 			replicaId: n,
 			tables: r.length
 		});
 	}
-	let p = await o.makeStore({
-		sqlLayer: o.makeSqlLayer(l),
+	let m = await s.makeStore({
+		sqlLayer: s.makeSqlLayer(u),
 		...n ? { tracerLayer: n } : {},
-		changeStrategy: a ? "cdc" : "inline",
-		...f ? { cdcConfig: f } : {}
-	}), m = eg();
-	if (m.length === 0) return Z.info("read replicas: none configured (DB_REPLICA_URLS unset) — all queries → primary"), t.recordReplication({
+		changeStrategy: o ? "cdc" : "inline",
+		...p ? { cdcConfig: p } : {}
+	}), h = eg();
+	if (h.length === 0) return Z.info("read replicas: none configured (DB_REPLICA_URLS unset) — all queries → primary"), t.recordReplication({
 		replicaCount: 0,
 		rywPolicy: "off",
 		rywStore: "memory",
 		region: null,
 		localityEnabled: !1
-	}), p;
-	if (Si(o.id)) return Z.warn(`read replicas: not applicable (${o.id} is single-process); ignoring DB_REPLICA_URLS`), t.recordReplication({
+	}), m;
+	if (Si(s.id)) return Z.warn(`read replicas: not applicable (${s.id} is single-process); ignoring DB_REPLICA_URLS`), t.recordReplication({
 		replicaCount: 0,
 		rywPolicy: "off",
 		rywStore: "memory",
 		region: null,
 		localityEnabled: !1
-	}), p;
-	let h = await sg(o.id);
-	if (h === null) return Z.warn(`read replicas: no replication adapter for dialect ${o.id}; falling back to primary-only routing`), t.recordReplication({
+	}), m;
+	let g = await sg(s.id);
+	if (g === null) return Z.warn(`read replicas: no replication adapter for dialect ${s.id}; falling back to primary-only routing`), t.recordReplication({
 		replicaCount: 0,
 		rywPolicy: "off",
 		rywStore: "memory",
 		region: null,
 		localityEnabled: !1
-	}), p;
-	let g = [];
-	for (let e of m) {
-		let t = await o.makeStore({
-			sqlLayer: o.makeSqlLayer(ne(l, e)),
+	}), m;
+	let _ = [];
+	for (let e of h) {
+		let t = await s.makeStore({
+			sqlLayer: s.makeSqlLayer(re(u, e)),
 			...n ? { tracerLayer: n } : {},
 			changeStrategy: "inline"
 		});
-		g.push(t);
+		_.push(t);
 	}
-	let _ = process.env.RYW_POLICY ?? "fallback", v = (process.env.RYW_STORE ?? "memory").toLowerCase(), ee, te = "memory";
-	if (v === "redis") {
+	let v = process.env.RYW_POLICY ?? "fallback", ee = (process.env.RYW_STORE ?? "memory").toLowerCase(), te, ne = "memory";
+	if (ee === "redis") {
 		let e = process.env.REDIS_URL;
 		if (!e) Z.warn("RYW_STORE=redis set but REDIS_URL is empty — falling back to memory store");
 		else try {
 			let { default: t } = await import("ioredis"), n = new t(e), r = n.duplicate();
-			ee = Wo({
+			te = Uo({
 				client: n,
 				subscriber: r
-			}), te = "redis", Z.info(`read replicas: ryw store = redis @ ${ig(e)}`);
+			}), ne = "redis", Z.info(`read replicas: ryw store = redis @ ${ig(e)}`);
 		} catch (e) {
 			Z.warn("RYW_STORE=redis but ioredis import / connect failed — falling back to memory store", { err: e });
 		}
 	}
-	ee ||= Po();
-	let y = ag(m.length), b = Jo(), C = b && y.length > 0 ? Ya({
-		currentRegion: b,
-		replicaRegions: og(g, y),
-		inner: Bo()
-	}) : Bo();
-	return Z.info(`read replicas: ${g.length} configured, ryw policy '${_}', dialect=${o.id}, region=${b ?? "unknown"}` + (y.length > 0 ? ", replica-locality=on" : "")), t.recordReplication({
-		replicaCount: g.length,
-		rywPolicy: _,
-		rywStore: te,
-		region: b ?? null,
-		localityEnabled: y.length > 0 && b !== void 0
+	te ||= No();
+	let y = ag(h.length), S = qo(), ie = S && y.length > 0 ? Ja({
+		currentRegion: S,
+		replicaRegions: og(_, y),
+		inner: zo()
+	}) : zo();
+	return Z.info(`read replicas: ${_.length} configured, ryw policy '${v}', dialect=${s.id}, region=${S ?? "unknown"}` + (y.length > 0 ? ", replica-locality=on" : "")), t.recordReplication({
+		replicaCount: _.length,
+		rywPolicy: v,
+		rywStore: ne,
+		region: S ?? null,
+		localityEnabled: y.length > 0 && S !== void 0
 	}), new ea({
-		primary: p,
-		replicas: g,
-		replicationAdapter: h,
-		rywPolicy: _,
-		rywStore: ee,
-		replicaSelector: C
+		primary: m,
+		replicas: _,
+		replicationAdapter: g,
+		rywPolicy: v,
+		rywStore: te,
+		replicaSelector: ie
 	});
 }, rg = async (e, t, n, r, i, a) => {
-	let o = Xs(t?.plugins ?? []), s = n === "postgres" || n === "mysql" || n === "mariadb", c = n === "postgres" ? "LISTEN/NOTIFY" : "binlog CDC";
+	let o = Ys(t?.plugins ?? []), s = n === "postgres" || n === "mysql" || n === "mariadb", c = n === "postgres" ? "LISTEN/NOTIFY" : "binlog CDC";
 	if (!o) return n === "memory" || n === "sqlite" || n === "turso" ? i.info(`reactivity: single-instance (${n}) — no cross-replica fan-out needed`) : s ? i.info(`reactivity: cross-instance via native ${c} (${n})`) : i.warn(`reactivity: cross-instance fan-out is OFF for dialect '${n}'. A write on one replica will NOT reach clients on other replicas. Add @voltro/plugin-broadcast (Redis / NATS) to close the gap, or use postgres (LISTEN/NOTIFY) / mariadb (binlog CDC).`), null;
 	let l = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`;
-	return o.broadcast.crossReplica ? s ? i.info(`reactivity: native ${c} (${n}) + @voltro/plugin-broadcast (${o.broadcast.provider.name}) — both paths active (own-origin skip dedups)`) : i.info(`reactivity: cross-instance via @voltro/plugin-broadcast (${o.broadcast.provider.name}) for dialect '${n}'`) : i.warn("reactivity: @voltro/plugin-broadcast resolved to the in-process memory provider — NO real cross-replica fan-out. Set BROADCAST_URL (redis:// or nats://) for a real bus."), await Ks({
+	return o.broadcast.crossReplica ? s ? i.info(`reactivity: native ${c} (${n}) + @voltro/plugin-broadcast (${o.broadcast.provider.name}) — both paths active (own-origin skip dedups)`) : i.info(`reactivity: cross-instance via @voltro/plugin-broadcast (${o.broadcast.provider.name}) for dialect '${n}'`) : i.warn("reactivity: @voltro/plugin-broadcast resolved to the in-process memory provider — NO real cross-replica fan-out. Set BROADCAST_URL (redis:// or nats://) for a real bus."), await Gs({
 		store: e,
 		provider: o.broadcast.provider,
 		replicaId: l,
-		channel: qs(r, "changes"),
+		channel: Ks(r, "changes"),
 		logger: i,
 		...a === void 0 ? {} : { onGap: a }
 	});
@@ -6868,48 +6869,48 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	return n;
 }, sg = async (e) => {
 	switch (e) {
-		case "postgres": return (await x("@voltro/sql-postgres")).postgresReplicationAdapter();
+		case "postgres": return (await b("@voltro/sql-postgres")).postgresReplicationAdapter();
 		case "mysql":
-		case "mariadb": return (await x("@voltro/sql-mysql")).mysqlReplicationAdapter();
-		case "mssql": return (await x("@voltro/sql-mssql")).mssqlReplicationAdapter();
+		case "mariadb": return (await b("@voltro/sql-mysql")).mysqlReplicationAdapter();
+		case "mssql": return (await b("@voltro/sql-mssql")).mssqlReplicationAdapter();
 		default: return null;
 	}
 }, cg = async (e) => {
 	let t = e.find((e) => !e.startsWith("-")) ?? process.cwd(), n = Bt(t), r = await _(n);
 	return r.ran ? r.exitCode : process.env.FRAMEWORK_DEV_INNER !== "1" && process.env.WATCH !== "0" ? (yt(fl({ root: n }), { scope: "voltro:dev" }), new Promise(() => {})) : lg(n);
 }, lg = async (n) => {
-	let g = Date.now(), _ = await Qh(n), x = o({
+	let g = Date.now(), _ = await Qh(n), b = o({
 		kind: "api",
 		configPort: _?.port,
 		env: process.env
 	});
-	for (let e of x.warnings) Z.warn(e);
-	let C = x.port, ie = _?.name ?? M(n), ae = Ft("api", ie, C), de = It(ie);
+	for (let e of b.warnings) Z.warn(e);
+	let S = b.port, ae = _?.name ?? M(n), oe = Ft("api", ae, S), fe = It(ae);
 	await Nt({
-		id: ae,
-		name: ie,
+		id: oe,
+		name: ae,
 		kind: "api",
-		url: `http://localhost:${C}`,
+		url: `http://localhost:${S}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: de.path
+		logFile: fe.path
 	}).catch(() => {});
-	let w = f();
-	y(w), Z.info("booting voltro dev", {
+	let C = f();
+	ne(C), Z.info("booting voltro dev", {
 		root: n,
 		version: Eh,
-		logFile: de.path
+		logFile: fe.path
 	}), h(n, Z);
-	let he = await fe({
+	let ge = await pe({
 		project: M(n),
 		cliVersion: Eh
 	});
-	if (he.kind === "not-personal") return Z.error(`voltro dev needs a personal login — the stored credential belongs to no user.
-  ${he.message}`), 1;
-	he.kind === "reported" && he.seat === "claimed" && Z.info("cloud: this machine now counts toward your organisation's seats (voltro cloud whoami)");
-	let ye = process.env.VOLTRO_DEV_HEALTH_PORT, xe = ye === void 0 ? C + 1 : Number(ye), Ce;
-	xe > 0 && Number.isFinite(xe) && (Ce = await um({
-		port: xe,
+	if (ge.kind === "not-personal") return Z.error(`voltro dev needs a personal login — the stored credential belongs to no user.
+  ${ge.message}`), 1;
+	ge.kind === "reported" && ge.seat === "claimed" && Z.info("cloud: this machine now counts toward your organisation's seats (voltro cloud whoami)");
+	let be = process.env.VOLTRO_DEV_HEALTH_PORT, Se = be === void 0 ? S + 1 : Number(be), we;
+	Se > 0 && Number.isFinite(Se) && (we = await um({
+		port: Se,
 		log: {
 			info: (e, t) => Z.debug(e, t),
 			warn: (e, t) => Z.warn(e, t)
@@ -6922,81 +6923,81 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	}).catch((e) => {
 		Z.warn("agent-instructions seed failed (non-fatal)", {}, e);
 	});
-	let T = await Fh(n);
-	Z.info(`discovered ${T.length} files`, { count: T.length });
-	let { pluginContributions: De, pluginErrorImports: ke, pluginRpcImports: Ae } = await up(_?.plugins ?? [], _?.name ?? M(n), n), je = await Et({
+	let w = await Fh(n);
+	Z.info(`discovered ${w.length} files`, { count: w.length });
+	let { pluginContributions: Oe, pluginErrorImports: Ae, pluginRpcImports: je } = await up(_?.plugins ?? [], _?.name ?? M(n), n), Me = await Et({
 		root: n,
-		...De.length > 0 ? { pluginContributions: De } : {},
-		...ke.length > 0 ? { pluginErrorImports: ke } : {},
-		...Ae.length > 0 ? { pluginRpcImports: Ae } : {},
+		...Oe.length > 0 ? { pluginContributions: Oe } : {},
+		...Ae.length > 0 ? { pluginErrorImports: Ae } : {},
+		...je.length > 0 ? { pluginRpcImports: je } : {},
 		..._?.name === void 0 ? {} : { apiName: _.name }
 	});
-	if (je ? (Z.info("codegen wrote rpcGroup", { path: zt(n, je) }), await Ct(je)) : Z.debug("codegen skipped — no descriptors discovered"), process.env.VOLTRO_BROWSER_SAFETY !== "off") {
-		let e = await wt(n, T);
+	if (Me ? (Z.info("codegen wrote rpcGroup", { path: zt(n, Me) }), await Ct(Me)) : Z.debug("codegen skipped — no descriptors discovered"), process.env.VOLTRO_BROWSER_SAFETY !== "off") {
+		let e = await wt(n, w);
 		if (e.length > 0) throw Error(e.map(Tt).join("\n\n"));
 	}
-	let Me = $(_ ?? null), Pe = Me === "mariadb" ? "mariadb" : Me === "mssql" ? "mssql" : void 0, { queries: E, mutations: D, actions: O, streams: Ge, events: qe, workflows: A, workflowWorkers: Xe, eventTriggers: Ze, schedules: Qe, connections: et, tables: nt, featureMix: it, tenantScopedTables: ot, softDeleteScopedTables: st, serverOnlyLeaks: ct, cacheScopeLeaks: ft } = await Xh(T, { cdc: Pe !== void 0 && (process.env.CDC ?? "1") !== "0" }), pt = Hl({
-		queries: E,
-		mutations: D,
-		actions: O,
-		streams: Ge,
-		events: qe
+	let Ne = $(_ ?? null), Fe = Ne === "mariadb" ? "mariadb" : Ne === "mssql" ? "mssql" : void 0, { queries: T, mutations: E, actions: D, streams: Ke, events: Je, workflows: k, workflowWorkers: Ze, eventTriggers: Qe, schedules: $e, connections: tt, tables: rt, featureMix: at, tenantScopedTables: st, softDeleteScopedTables: ct, serverOnlyLeaks: lt, cacheScopeLeaks: pt } = await Xh(w, { cdc: Fe !== void 0 && (process.env.CDC ?? "1") !== "0" }), mt = Hl({
+		queries: T,
+		mutations: E,
+		actions: D,
+		streams: Ke,
+		events: Je
 	});
 	{
-		let e = Il(ct, Fl(process.env, "warn"), ja, "`voltro dev`");
+		let e = Il(lt, Fl(process.env, "warn"), ja, "`voltro dev`");
 		if (e.action === "fail") throw Error(e.message);
 		e.action === "warn" && Z.warn(e.message ?? "");
 	}
 	{
-		let e = Il(ft, Fl(process.env, "warn"), Aa, "`voltro dev`");
+		let e = Il(pt, Fl(process.env, "warn"), Aa, "`voltro dev`");
 		if (e.action === "fail") throw Error(e.message);
 		e.action === "warn" && Z.warn(e.message ?? "");
 	}
-	Wl(pt, {
+	Wl(mt, {
 		defaultDeny: Bl(_),
 		commandHint: "`voltro dev`"
 	});
-	let ht = A.length > 0 || Ze.length > 0, j = await Qh(n), gt = Kc(j?.http ?? {});
-	es(Yo(j?.secrets));
-	let _t = _c(_s(j?.env) ? j.env : void 0, n);
-	_t.minted.length > 0 && _t.file !== void 0 && (Z.warn(`minted ${_t.minted.length} project secret(s) into ${zt(n, _t.file)} — unique to this project, gitignored. Your DEPLOYMENT needs its own values (\`voltro secret generate\`).`, {
-		keys: _t.minted,
-		file: zt(n, _t.file)
-	}), e.includes(_t.file) || e.unshift(_t.file)), _t.ownershipWarning !== void 0 && Z.warn(_t.ownershipWarning), await v({
-		rawEnv: j?.env,
+	let gt = k.length > 0 || Qe.length > 0, A = await Qh(n), _t = Kc(A?.http ?? {});
+	$o(Jo(A?.secrets));
+	let j = gc(gs(A?.env) ? A.env : void 0, n);
+	j.minted.length > 0 && j.file !== void 0 && (Z.warn(`minted ${j.minted.length} project secret(s) into ${zt(n, j.file)} — unique to this project, gitignored. Your DEPLOYMENT needs its own values (\`voltro secret generate\`).`, {
+		keys: j.minted,
+		file: zt(n, j.file)
+	}), e.includes(j.file) || e.unshift(j.file)), j.ownershipWarning !== void 0 && Z.warn(j.ownershipWarning), await v({
+		rawEnv: A?.env,
 		appType: "api",
 		root: n,
 		log: Z,
 		generateTypes: !0
 	});
-	let vt = { current: void 0 }, yt = j?.apiKeys;
+	let vt = { current: void 0 }, yt = A?.apiKeys;
 	if (yt) {
-		let e = new Set((j?.plugins ?? []).flatMap((e) => e.declaredScopes ?? []));
+		let e = new Set((A?.plugins ?? []).flatMap((e) => e.declaredScopes ?? []));
 		e.size > 0 && ![
 			"apikeys:issue:self",
 			"apikeys:issue:org",
 			"apikeys:issue:other"
 		].some((t) => e.has(t)) && !e.has("admin:full") && Z.warn("apiKeys is enabled but no role declares any of apikeys:issue:self / :org / :other. The management routes are mounted and every issue request will fail its guard — the capability is on and reachable by nobody. Grant the right one in your role map (`:self` lets a user mint their own key, `:org` a shared one, `:other` on behalf of a colleague).");
 	}
-	let bt = (typeof yt == "object" ? yt.prefix : void 0) ?? "voltro_", xt, Dt = yt ? [Na({ resolveByHash: (e, t) => xt ? xt.resolveByHash(e, t) : Promise.resolve(null) }, { prefix: bt })] : [], Rt = kh([...j?.auth?.strategies ?? [], ...Dt], Ls(j?.plugins ?? []), j?.auth?.anonymousTenantRequired ?? !1, j?.auth, () => vt.current), Bt = io({ resolveSubject: Rt }), Vt = Te({
+	let bt = (typeof yt == "object" ? yt.prefix : void 0) ?? "voltro_", xt, Dt = yt ? [Na({ resolveByHash: (e, t) => xt ? xt.resolveByHash(e, t) : Promise.resolve(null) }, { prefix: bt })] : [], Rt = kh([...A?.auth?.strategies ?? [], ...Dt], Is(A?.plugins ?? []), A?.auth?.anonymousTenantRequired ?? !1, A?.auth, () => vt.current), Bt = ro({ resolveSubject: Rt }), Vt = Ee({
 		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: Pe,
-		declared: j?.schema
-	}), Ht = ve({
+		cdcDialect: Fe,
+		declared: A?.schema
+	}), Ht = ye({
 		gates: Vt,
 		runtime: {
 			traces: im(),
-			undo: us()
+			undo: ls()
 		}
 	});
 	if (Ht !== void 0) throw r(`dev: ${Ht}`);
-	let Ut = we({
-		mix: it,
-		plugins: j?.plugins ?? [],
+	let Ut = Te({
+		mix: at,
+		plugins: A?.plugins ?? [],
 		gates: Vt,
-		...Pe ? { cdcDialect: Pe } : {}
-	}), Gt = j?.analytics?.tables ?? [], P = (() => {
-		let e = new Set(nt.map((e) => e.tableName)), t = [...nt];
+		...Fe ? { cdcDialect: Fe } : {}
+	}), Gt = A?.analytics?.tables ?? [], P = (() => {
+		let e = new Set(rt.map((e) => e.tableName)), t = [...rt];
 		for (let n of [...Ut, ...Gt]) {
 			let r = n.tableName;
 			r === void 0 || e.has(r) || (e.add(r), t.push(n));
@@ -7005,7 +7006,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	})();
 	for (let e of P) mi(e);
 	{
-		let e = Ma(ps(E.map((e) => ({
+		let e = Ma(fs(T.map((e) => ({
 			name: e.descriptor.name,
 			source: e.descriptor.source
 		})), new Set(P.flatMap((e) => {
@@ -7015,47 +7016,47 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		e !== void 0 && Z.warn(e);
 	}
 	let Kt = Af({
-		plugins: j?.plugins ?? [],
-		appName: j?.name ?? M(n),
+		plugins: A?.plugins ?? [],
+		appName: A?.name ?? M(n),
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: Z
 	});
-	j?.plugins?.length && (Z.info("plugins loaded", { plugins: j.plugins.map((e) => e.name) }), await Kt.activate());
-	let qt = await Kt.gatherObservability(), Jt = Bf(j?.plugins ?? []);
+	A?.plugins?.length && (Z.info("plugins loaded", { plugins: A.plugins.map((e) => e.name) }), await Kt.activate());
+	let qt = await Kt.gatherObservability(), Jt = Bf(A?.plugins ?? []);
 	Jt.endpoints.length > 0 && Z.info("plugin inspect endpoints registered", {
 		count: Jt.endpoints.length,
 		endpoints: Jt.endpoints.map((e) => `${e.method} ${e.path}`)
 	});
-	let Yt = rp(j?.plugins ?? []);
+	let Yt = rp(A?.plugins ?? []);
 	Yt.length > 0 && Z.info("plugin dashboard mounts registered", {
 		count: Yt.length,
 		mounts: Yt.map((e) => `${e.fullId} (${e.slot})`)
 	});
-	let Xt = Oe(j?.plugins ?? []);
+	let Xt = ke(A?.plugins ?? []);
 	Xt.length > 0 && Z.info("plugin schema contributions", { plugins: Xt.map((e) => `${e.pluginName}: ${e.tables}t/${e.migrations}m`) });
-	let tn = pe(j?.plugins ?? []);
+	let tn = me(A?.plugins ?? []);
 	if (tn.length > 0) {
 		let e = [
+			...T.map((e) => e.descriptor.name),
 			...E.map((e) => e.descriptor.name),
 			...D.map((e) => e.descriptor.name),
-			...O.map((e) => e.descriptor.name),
-			...Ge.map((e) => e.descriptor.name)
+			...Ke.map((e) => e.descriptor.name)
 		], t = /* @__PURE__ */ new Set([
+			...T.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
 			...E.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...D.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...O.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
-		]), n = me(tn, e, t);
+			...D.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
+		]), n = he(tn, e, t);
 		tn.length - n.length > 0 && Z.info(`plugin routes overridden by app procedures: ${[...t].join(", ")}`);
-		for (let e of n) e.kind === "query" ? E.push({
+		for (let e of n) e.kind === "query" ? T.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : e.kind === "mutation" ? D.push({
+		}) : e.kind === "mutation" ? E.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : O.push({
+		}) : D.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
@@ -7065,20 +7066,20 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			routes: tn.map((e) => `${e.plugin.name}:${e.descriptor.name} (${e.kind})`)
 		});
 	}
-	let nn = Z.child("agent"), on = T.filter((e) => be.test(M(e)));
+	let nn = Z.child("agent"), on = w.filter((e) => xe.test(M(e)));
 	if (on.length > 0) {
-		let e = await Ee(on, nn);
+		let e = await De(on, nn);
 		e > 0 && nn.info("wired tool handlers", { tools: e });
 	}
-	let cn = T.filter((e) => Se.test(M(e))), ln = [];
+	let cn = w.filter((e) => Ce.test(M(e))), ln = [];
 	if (cn.length > 0) {
-		let e = await ge(cn, nn);
+		let e = await _e(cn, nn);
 		ln = e.agents.map((e) => e.descriptor.name);
-		for (let t of e.agents) for (let e of uf(t)) e.kind === "action" ? O.push({
+		for (let t of e.agents) for (let e of uf(t)) e.kind === "action" ? D.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : E.push({
+		}) : T.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
@@ -7093,31 +7094,31 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		let e = pf();
 		e !== void 0 && Z.info(e);
 	}
-	(un.queries.length > 0 || un.mutations.length > 0) && (E.push(...un.queries), D.push(...un.mutations), Z.info("undo built-ins registered", { routes: [
+	(un.queries.length > 0 || un.mutations.length > 0) && (T.push(...un.queries), E.push(...un.mutations), Z.info("undo built-ins registered", { routes: [
 		"__voltro.undo.log",
 		"__voltro.undo.apply",
 		"__voltro.undo.redo"
 	] }));
-	let dn = Z.child("aggregate"), fn = T.filter((e) => Ve.test(e)), pn = fn.length > 0 ? await yu(fn, dn) : [], mn = pn.map((e) => e.definition.name), hn = Z.child("expectation"), gn = T.filter((e) => Be.test(e)), _n = gn.length > 0 ? await zu(gn, hn) : [], vn = Z.child("finops"), yn = T.filter((e) => Le.test(e)), bn = yn.length > 0 ? await Bu(yn, vn) : [], xn = Z.child("experiment"), Sn = T.filter((e) => Fe.test(e)), Cn = Sn.length > 0 ? await Vu(Sn, xn) : [];
+	let dn = Z.child("aggregate"), fn = w.filter((e) => He.test(e)), pn = fn.length > 0 ? await yu(fn, dn) : [], mn = pn.map((e) => e.definition.name), hn = Z.child("expectation"), gn = w.filter((e) => Ve.test(e)), _n = gn.length > 0 ? await zu(gn, hn) : [], vn = Z.child("finops"), yn = w.filter((e) => Re.test(e)), bn = yn.length > 0 ? await Bu(yn, vn) : [], xn = Z.child("experiment"), Sn = w.filter((e) => Ie.test(e)), Cn = Sn.length > 0 ? await Vu(Sn, xn) : [];
 	for (let e of fi()) Z.warn(`identifier length · ${e}`);
-	let wn = j?.restRoutes ?? [], Tn = T.filter((e) => Ue.test(e)).length, On = T.filter((e) => Ne.test(e)).length, An = T.filter((e) => /\.seed\.ts$/.test(e)).length, Mn = T.filter((e) => Ie.test(e)).length, Nn = T.filter((e) => $d.test(e)).length;
-	tc(ec([
+	let wn = A?.restRoutes ?? [], Tn = w.filter((e) => We.test(e)).length, On = w.filter((e) => Pe.test(e)).length, An = w.filter((e) => /\.seed\.ts$/.test(e)).length, Mn = w.filter((e) => Le.test(e)).length, Nn = w.filter((e) => $d.test(e)).length;
+	ec($s([
+		T,
 		E,
 		D,
-		O,
-		Ge
+		Ke
 	]), (e) => {
 		Z.warn(e);
 	}), Z.info("app surface", {
-		queryCount: E.length,
-		mutationCount: D.length,
-		actionCount: O.length,
-		streamCount: Ge.length,
+		queryCount: T.length,
+		mutationCount: E.length,
+		actionCount: D.length,
+		streamCount: Ke.length,
 		restRouteCount: wn.length,
-		workflowCount: A.length,
-		workflowWorkerCount: Xe.length,
-		triggerCount: Ze.length,
-		scheduleCount: Qe.length,
+		workflowCount: k.length,
+		workflowWorkerCount: Ze.length,
+		triggerCount: Qe.length,
+		scheduleCount: $e.length,
 		agentCount: ln.length,
 		aggregateCount: mn.length,
 		expectationCount: _n.length,
@@ -7128,17 +7129,17 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		seedCount: An,
 		webhookCount: Mn,
 		emailCount: Nn,
-		tenantTables: [...ot]
+		tenantTables: [...st]
 	}), Zt({
-		appName: j?.name ?? M(n),
-		queries: E.map((e) => e.descriptor.name),
-		mutations: D.map((e) => e.descriptor.name),
-		actions: O.map((e) => e.descriptor.name),
-		streams: Ge.map((e) => e.descriptor.name),
+		appName: A?.name ?? M(n),
+		queries: T.map((e) => e.descriptor.name),
+		mutations: E.map((e) => e.descriptor.name),
+		actions: D.map((e) => e.descriptor.name),
+		streams: Ke.map((e) => e.descriptor.name),
 		restRoutes: wn.map((e) => `${e.method} ${e.path}`),
-		workflows: A.map((e) => e.definition.name),
-		triggers: Ze.map((e) => `${e.event}→${e.workflow}`),
-		schedules: Qe.map((e) => e.name),
+		workflows: k.map((e) => e.definition.name),
+		triggers: Qe.map((e) => `${e.event}→${e.workflow}`),
+		schedules: $e.map((e) => e.name),
 		agents: ln,
 		aggregates: mn,
 		lifecycle: {
@@ -7148,16 +7149,16 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			webhooks: Mn,
 			emails: Nn
 		},
-		tenantTables: [...ot]
+		tenantTables: [...st]
 	});
 	let Pn = Qp(), Fn = (process.env.VOLTRO_TRACING_BUFFER ?? "").toLowerCase() === "off", In = (process.env.VOLTRO_TRACING_STREAM ?? "").toLowerCase() === "all", Yn = () => {}, Xn = (e) => {
 		if (!e.name.startsWith("http.server")) return !1;
 		let t = e.attributes, n = String(t["url.path"] ?? t["http.route"] ?? t["http.target"] ?? "");
 		return n.startsWith("/_voltro/") || n === "/ws" || n.startsWith("/ws/") || n.startsWith("/ws?");
 	}, Zn = (e) => {
-		Xn(e) || Up(e) || e.name.startsWith("RpcServer.") || (Pn.append(e), (In || e.status === "error") && w.emit("trace", e), Yn(e));
-	}, Qn = Fn ? void 0 : ao(Zn), L = await ga({
-		serviceName: process.env.OTEL_SERVICE_NAME ?? j?.name ?? "voltro-api",
+		Xn(e) || Up(e) || e.name.startsWith("RpcServer.") || (Pn.append(e), (In || e.status === "error") && C.emit("trace", e), Yn(e));
+	}, Qn = Fn ? void 0 : io(Zn), L = await ga({
+		serviceName: process.env.OTEL_SERVICE_NAME ?? A?.name ?? "voltro-api",
 		...Qn ? { traceSink: Qn } : {},
 		...qt.spanProcessors.length > 0 ? { extraSpanProcessors: qt.spanProcessors } : {},
 		...qt.metricReaders.length > 0 ? { extraMetricReaders: qt.metricReaders } : {},
@@ -7165,33 +7166,33 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		...qt.sampler === void 0 ? {} : { sampler: qt.sampler }
 	});
 	L.mode === "off" ? L.bufferOnly || Z.info("tracing disabled", { reason: "buffer off" }) : Z.info("tracing enabled", { mode: L.mode });
-	let er = L.mode === "off" && L.bufferOnly === !1 ? void 0 : L.layer, R = await ng(j, er), tr = hs(R, $(j ?? null));
+	let er = L.mode === "off" && L.bufferOnly === !1 ? void 0 : L.layer, R = await ng(A, er, void 0, { schemaWorkFollows: !0 }), tr = ms(R, $(A ?? null));
 	vt.current = tr;
 	let rr = vf({
 		store: R,
-		defaultExpiryMs: gf(j)
+		defaultExpiryMs: gf(A)
 	});
-	E.push(...rr.queries), D.push(...rr.mutations);
-	let ar = [...D.map((e) => e.descriptor), ...O.map((e) => e.descriptor)];
+	T.push(...rr.queries), E.push(...rr.mutations);
+	let ar = [...E.map((e) => e.descriptor), ...D.map((e) => e.descriptor)];
 	_f(ar) && Z.info("approvals: `requiresApproval` declared — the second-human gate is active", { procedures: ar.filter((e) => e.requiresApproval != null).map((e) => e.name ?? "?") });
-	for (let e of Ec({
-		dialect: $(j ?? null),
+	for (let e of Tc({
+		dialect: $(A ?? null),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Xs(j?.plugins ?? [])?.broadcast.crossReplica === !0,
+		crossReplicaBus: Ys(A?.plugins ?? [])?.broadcast.crossReplica === !0,
 		tables: oi().map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
 		})),
-		querySources: E.flatMap((e) => {
+		querySources: T.flatMap((e) => {
 			let t = e.descriptor.source;
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
 	})) e.level === "warn" ? Z.warn(e.message) : Z.info(e.message);
 	{
-		let e = Ac(kc({
+		let e = kc(Oc({
 			tables: oi().map((e) => ({ tableName: e.tableName })),
-			queries: E.map((e) => ({
+			queries: T.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
@@ -7199,22 +7200,22 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		e !== void 0 && Z.warn(e);
 	}
 	if (yt) {
-		let e = Ca(R), t = $a({ flush: eo(e) });
-		U(() => t.shutdown()), xt = Qa(e, {
+		let e = Ca(R), t = Qa({ flush: $a(e) });
+		W(() => t.shutdown()), xt = Za(e, {
 			prefix: bt,
 			usage: t
 		}), Z.info("api keys active", { prefix: bt });
 	}
 	let or = Tl({
-		definitions: et.map((e) => e.definition),
+		definitions: tt.map((e) => e.definition),
 		store: R,
-		publicUrl: Dl(C),
+		publicUrl: Dl(S),
 		log: Z.child("connections")
 	});
-	E.push(...or.queries), D.push(...or.mutations), O.push(...or.actions);
-	let cr = $(j), lr = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, gr, _r;
+	T.push(...or.queries), E.push(...or.mutations), D.push(...or.actions);
+	let cr = $(A), lr = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, gr, _r;
 	if (cr !== "memory") {
-		let e = await S(cr);
+		let e = await x(cr);
 		gr = $n.make(e.makeSqlLayer(Q())), _r = await gr.runPromise(nr.SqlClient);
 	}
 	let vr = [
@@ -7222,17 +7223,17 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(cr) ? Za(R, lr, Z) : rs, yr = dd(j?.scheduling), br = lo({
+	].includes(cr) ? Xa(R, lr, Z) : ns, yr = dd(A?.scheduling), br = co({
 		coordinator: vr,
 		replicaId: lr,
 		log: Z,
 		maxIdleIntervalMs: yr.pollCeilingMs
-	}), xr = [], Sr = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, Tr = ph(j?.plugins, j?.name ?? M(n));
+	}), xr = [], Sr = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, Tr = ph(A?.plugins, A?.name ?? M(n));
 	{
-		let e = mh(j?.plugins, j?.name ?? M(n));
+		let e = mh(A?.plugins, A?.name ?? M(n));
 		e !== void 0 && Z.warn(e);
 	}
-	let Er = vh(j?.plugins, Tr, Z), Dr = Xs(j?.plugins ?? [])?.broadcast?.provider, Or = bh(j?.plugins, {
+	let Er = vh(A?.plugins, Tr, Z), Dr = Ys(A?.plugins ?? [])?.broadcast?.provider, Or = bh(A?.plugins, {
 		instanceId: Sr,
 		namespace: Tr,
 		meta: { mode: "dev" },
@@ -7242,29 +7243,29 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		instanceId: Sr,
 		membership: Or.membership,
 		...Dr === void 0 ? {} : { broadcast: Dr },
-		broadcastChannels: { presence: qs(Tr, "presence") },
+		broadcastChannels: { presence: Ks(Tr, "presence") },
 		scheduleCoordinated: (e, t, n) => {
 			let r = br(e, t, n);
 			return xr.push(r), r;
 		}
 	};
-	for (let e of j?.plugins ?? []) e.bindDataStore?.(tr, kr);
-	let jr = $(j), Mr, Nr = await rg(R, j, jr, Tr, Z, (e, t) => {
+	for (let e of A?.plugins ?? []) e.bindDataStore?.(tr, kr);
+	let jr = $(A), Mr, Nr = await rg(R, A, jr, Tr, Z, (e, t) => {
 		Mr?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
 	}), Pr = pd({
 		changeScope: R.changeScope,
 		broadcastAttached: Nr !== void 0
 	});
-	j?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = j.cache), j?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = j.cacheRedisUrl), j?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = j.cacheRedisDriver), j?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = j.cacheKeyPrefix);
-	let { service: Ir, invalidationBus: Lr, snapshotCache: Rr, cache: zr, semantic: Br, evictSource: Wr, backend: Gr, stats: Kr, dispose: Yr } = await Ic({
+	A?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = A.cache), A?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = A.cacheRedisUrl), A?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = A.cacheRedisDriver), A?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = A.cacheKeyPrefix);
+	let { service: Ir, invalidationBus: Lr, snapshotCache: Rr, cache: zr, semantic: Br, evictSource: Wr, backend: Gr, stats: Kr, dispose: Yr } = await Fc({
 		env: process.env,
-		semantic: j?.cacheSemantic ?? !1
+		semantic: A?.cacheSemantic ?? !1
 	});
-	Br !== void 0 && Z.info("semantic cache enabled — reactive eviction on live writes"), Z.info(`cache backend resolved: ${Gr}` + (Gr === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), j?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = j.kv), j?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = j.kvRedisUrl), j?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = j.kvKeyPrefix);
-	let { kv: Qr, service: ni, backend: ri } = await ro({ store: R });
+	Br !== void 0 && Z.info("semantic cache enabled — reactive eviction on live writes"), Z.info(`cache backend resolved: ${Gr}` + (Gr === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), A?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = A.kv), A?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = A.kvRedisUrl), A?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = A.kvKeyPrefix);
+	let { kv: Qr, service: ni, backend: ri } = await no({ store: R });
 	Z.info(`kv backend resolved: ${ri}` + (ri === "database" ? " (durable, _voltro_kv)" : ri === "memory" ? " — in-process, non-durable" : ` (driver ${process.env.KV_REDIS_DRIVER ?? "resp"}, non-durable)`));
-	let ii = $(j), ai = j?.analytics !== void 0 && j.analytics.kind !== "noop" && ii !== "memory" ? (await S(ii)).makeSqlLayer(Q()) : void 0, li = await pl({
-		spec: j?.analytics,
+	let ii = $(A), ai = A?.analytics !== void 0 && A.analytics.kind !== "noop" && ii !== "memory" ? (await x(ii)).makeSqlLayer(Q()) : void 0, li = await pl({
+		spec: A?.analytics,
 		sqlLayer: ai,
 		log: Z
 	});
@@ -7284,27 +7285,27 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			log: Z
 		}), await li.dispose();
 	})()), gi);
-	U(_i);
-	let vi = $(j), yi;
+	W(_i);
+	let vi = $(A), yi;
 	if (vi !== "memory" && process.env.VOLTRO_AUTO_MIGRATE !== "0") {
 		let e = Date.now(), t = (process.env.NODE_ENV ?? "").toLowerCase() === "production" ? "prod" : (process.env.NODE_ENV ?? "").toLowerCase() === "staging" ? "staging" : "dev";
 		Z.info("auto-migrate: planning schema", {
 			dialect: vi,
 			env: t,
 			tables: P.length
-		}), Ce?.set({
+		}), we?.set({
 			phase: "migrating",
 			tablesTotal: P.length
 		});
 		try {
-			let r = await S(vi), i = r.makeSqlLayer(Q());
+			let r = await x(vi), i = r.makeSqlLayer(Q());
 			yi = i;
 			let a = Uh(P.filter((e) => e.tableName.startsWith("_voltro_") || e.tableName === "voltro_isr_cache"), P);
 			await dr(a, i, r.id, { retryFilter: r.retryFilter });
-			let o = Fc({
+			let o = Pc({
 				conn: Q(),
 				pendingIds: await F.runPromise(nr.SqlClient.pipe(F.flatMap((e) => sr(e, n)), F.provide(i))),
-				optIn: process.env[jc] === "1"
+				optIn: process.env[Ac] === "1"
 			});
 			if (!o.allowed) throw Z.error(`file-based migrations: ${o.message}`), Error("file-based migrations refused — see error above");
 			let s = await F.runPromise(nr.SqlClient.pipe(F.flatMap((e) => ur(e, {
@@ -7321,28 +7322,28 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			if (c.kind === "refused-blocked" || c.kind === "prod-mismatch") throw Z.error(ir(c, r.id)), Error("auto-migrate refused — see error above");
 			Z.info(ir(c, r.id), { durationMs: Date.now() - e });
 		} catch (e) {
-			throw Z.error("auto-migrate failed — aborting boot", { err: e }), Ce?.set({
+			throw Z.error("auto-migrate failed — aborting boot", { err: e }), we?.set({
 				phase: "error",
 				error: e instanceof Error ? e.message : String(e)
 			}), e;
 		}
 	} else vi !== "memory" && Z.info("auto-migrate: skipped (VOLTRO_AUTO_MIGRATE=0)");
-	await le({
+	await ue({
 		dialectId: vi,
 		tables: P,
-		mode: oe(j?.reactiveTriggers),
+		mode: se(A?.reactiveTriggers),
 		lockSchema: Q().schema,
-		makeLayer: async () => (await S(vi)).makeSqlLayer(Q()),
+		makeLayer: async () => (await x(vi)).makeSqlLayer(Q()),
 		log: {
 			info: (e, t) => Z.info(e, t ?? {}),
 			warn: (e, t) => Z.warn(e, t ?? {})
 		}
 	});
-	let bi = $(j);
-	if ((j?.plugins ?? []).some((e) => (e.extendSchema?.migrations?.length ?? 0) > 0) && bi !== "memory") {
-		let e = (await S(bi)).makeSqlLayer(Q());
+	let bi = $(A);
+	if ((A?.plugins ?? []).some((e) => (e.extendSchema?.migrations?.length ?? 0) > 0) && bi !== "memory") {
+		let e = (await x(bi)).makeSqlLayer(Q());
 		try {
-			let t = await F.runPromise(_e(j.plugins).pipe(F.provide(e))), n = t.filter((e) => e.status === "applied"), r = t.filter((e) => e.status === "skipped");
+			let t = await F.runPromise(ve(A.plugins).pipe(F.provide(e))), n = t.filter((e) => e.status === "applied"), r = t.filter((e) => e.status === "skipped");
 			Z.info("plugin migrations complete", {
 				applied: n.map((e) => `${e.pluginName}:${e.migrationId} (${e.durationMs}ms)`),
 				skippedCount: r.length
@@ -7351,67 +7352,76 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			throw Z.error("plugin migrations failed — aborting boot", { err: e }), e;
 		}
 	}
-	let xi = Rp(R, w);
-	U(() => {
+	if (R.refreshChangeCaptureExclusions) try {
+		let e = await R.refreshChangeCaptureExclusions();
+		(e.readmitted.length > 0 || e.newlyExcluded.length > 0) && Z.info("cdc: exclusion set re-checked after schema work", {
+			readmitted: e.readmitted,
+			newlyExcluded: e.newlyExcluded
+		});
+	} catch (e) {
+		Z.warn("cdc: could not re-check the exclusion set after schema work", {}, e);
+	}
+	let xi = Rp(R, C);
+	W(() => {
 		xi();
 	});
-	let Ci = Do(P);
-	ts({
+	let Ci = Eo(P);
+	es({
 		dataStore: R,
 		schemaRegistry: Ci
 	});
 	let wi = Z.child("seeds"), Ti = await tf({
-		files: T,
+		files: w,
 		store: R,
 		log: Z,
 		seedPolicy: "run",
-		seedPattern: We,
-		loadSeedFiles: ce,
-		runBootSeeds: ue,
+		seedPattern: Ge,
+		loadSeedFiles: le,
+		runBootSeeds: de,
 		onSeedDiscovered: (e) => {
 			t.registerSeed(e);
 		},
 		onSeedResult: (e) => {
 			t.recordSeedResult(e);
 		},
-		startupPattern: Ne,
+		startupPattern: Pe,
 		loadStartupFiles: i,
 		runStartups: a,
 		emailPattern: $d,
 		loadEmailFiles: ef,
-		registerEmailTemplates: Gs
+		registerEmailTemplates: Ws
 	}), Di = of({
 		schedules: nf({
-			schedules: Qe,
+			schedules: $e,
 			seeds: Ti.seeds,
 			store: R,
 			log: wi
 		}),
-		workflows: A,
+		workflows: k,
 		log: Z
 	}), Oi = Ti.startups;
-	Oi && U(() => Oi.shutdown()), Yl({
-		demands: Kl(pt),
+	Oi && W(() => Oi.shutdown()), Yl({
+		demands: Kl(mt),
 		isRegistered: (e) => Fa(e) !== void 0
 	});
-	let ki = Z.child("subscribe"), ji = T.filter((e) => Ue.test(e)), Mi = ji.length > 0 ? await _l(ji, ki) : [], Ni;
+	let ki = Z.child("subscribe"), ji = w.filter((e) => We.test(e)), Mi = ji.length > 0 ? await _l(ji, ki) : [], Ni;
 	pm({
-		events: qe,
+		events: Je,
 		rpcTags: [
+			...T.map((e) => e.descriptor.name),
 			...E.map((e) => e.descriptor.name),
 			...D.map((e) => e.descriptor.name),
-			...O.map((e) => e.descriptor.name),
-			...Ge.map((e) => e.descriptor.name)
+			...Ke.map((e) => e.descriptor.name)
 		]
 	});
 	let Pi = mm({
-		events: qe,
+		events: Je,
 		origin: Sr,
 		...Er.publishRemote === void 0 ? {} : { publishRemote: Er.publishRemote }
 	});
-	if (qe.length > 0 && await Er.attach(Pi.bus), qe.length > 0) {
-		let e = Ym(qe);
-		for (let [, t] of lh(T.filter((e) => !Re.test(e)))) if (e.offer(t), e.settled) break;
+	if (Je.length > 0 && await Er.attach(Pi.bus), Je.length > 0) {
+		let e = Ym(Je);
+		for (let [, t] of lh(w.filter((e) => !ze.test(e)))) if (e.offer(t), e.settled) break;
 		e.settled || dh(n, {
 			onFile: (t, n) => (e.offer(n), e.settled ? "stop" : "continue"),
 			onTruncated: (e, t) => Z.warn(`event audit: stopped after ${t} sibling files (saw ${e}) — a \`no-consumer\` line below may mean "we stopped looking", not "nothing consumes it"`)
@@ -7421,13 +7431,13 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		let r = e.abstained();
 		r > 0 && Z.info(`events: ${r} webhook event(s) NOT verified — this app emits through a shared helper that takes the descriptor as a value, so a source scan cannot tell a published event from a dead one. Not a warning, and not a pass either.`);
 	}
-	Mi.length > 0 && (ki.info("discovered subscribers", { subscribers: Mi.map((e) => `${e.id}@${e.definition.table}`) }), Ni = vl(Mi, R, ki, Ci, Pi.bus)), Ni && U(() => {
+	Mi.length > 0 && (ki.info("discovered subscribers", { subscribers: Mi.map((e) => `${e.id}@${e.definition.table}`) }), Ni = vl(Mi, R, ki, Ci, Pi.bus)), Ni && W(() => {
 		Ni();
-	}), Ra(), Ko((e) => Ja(R, e.subjectId, e.resourceType, e.resourceId)) || Z.info("policy guards: using the app-registered tuple source");
-	let Ii, Li = Z.child("outbox"), Ri = T.filter((e) => ze.test(e)), Bi = Ri.length > 0 ? await bl(Ri, Li) : [], Vi = jt(T.filter((e) => Ie.test(e)).length, qe) ? [...Bi, {
+	}), Ra(), Go((e) => qa(R, e.subjectId, e.resourceType, e.resourceId)) || Z.info("policy guards: using the app-registered tuple source");
+	let Ii, Li = Z.child("outbox"), Ri = w.filter((e) => Be.test(e)), Bi = Ri.length > 0 ? await bl(Ri, Li) : [], Vi = jt(w.filter((e) => Le.test(e)).length, Je) ? [...Bi, {
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: Ns(() => Ii)
+		definition: Ms(() => Ii)
 	}] : Bi, Ui = Vi.length > 0 ? Sl({
 		handlers: Vi,
 		store: R,
@@ -7436,14 +7446,14 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			table: t.table,
 			op: t.op
 		})),
-		onShutdown: U
-	}) : void 0, Ki = fu(), Yi = $(j);
+		onShutdown: W
+	}) : void 0, Ki = fu(), Yi = $(A);
 	if (pn.length > 0 && Yi !== "memory") try {
-		Ki = _u((await S(Yi)).makeSqlLayer(Q()));
+		Ki = _u((await x(Yi)).makeSqlLayer(Q()));
 	} catch (e) {
 		dn.warn("aggregate: SQL storage init failed — falling back to in-process", { err: e });
 	}
-	let Xi = Yi === "memory" ? rs : Za(R, `aggregate@${process.pid}`, dn), Zi = pn.length > 0 ? await ju({
+	let Xi = Yi === "memory" ? ns : Xa(R, `aggregate@${process.pid}`, dn), Zi = pn.length > 0 ? await ju({
 		discovered: pn,
 		store: R,
 		analytics: di,
@@ -7459,7 +7469,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		names: Zi.registered,
 		storage: Yi === "memory" ? "in-process" : "sql-backed",
 		coordination: Xi.kind
-	}), U(() => {
+	}), W(() => {
 		Zi.detach();
 	});
 	let Qi = _n.length > 0 ? ca({
@@ -7467,14 +7477,14 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		store: R,
 		log: hn
 	}) : void 0;
-	Qi !== void 0 && (hn.info("expectations registered", { names: Qi.registered }), U(() => {
+	Qi !== void 0 && (hn.info("expectations registered", { names: Qi.registered }), W(() => {
 		Qi.detach();
 	}));
 	let $i = bn.length > 0 ? ua({
 		discovered: bn,
 		log: vn
 	}) : void 0;
-	$i !== void 0 && (vn.info("cost budgets registered", { names: $i.registered }), U(() => {
+	$i !== void 0 && (vn.info("cost budgets registered", { names: $i.registered }), W(() => {
 		$i.detach();
 	}));
 	let ea = Cn.length > 0 ? la({
@@ -7482,10 +7492,10 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		store: R,
 		log: xn
 	}) : void 0;
-	ea !== void 0 && (xn.info("experiments registered", { names: ea.registered }), U(() => {
+	ea !== void 0 && (xn.info("experiments registered", { names: ea.registered }), W(() => {
 		ea.detach();
 	}));
-	let B = $(j), ra, ia = j?.scheduling ?? {}, aa = ia.trigger ?? "self", oa = ia.coordination ?? ([
+	let B = $(A), ra, ia = A?.scheduling ?? {}, aa = ia.trigger ?? "self", oa = ia.coordination ?? ([
 		"postgres",
 		"mariadb",
 		"mysql",
@@ -7503,7 +7513,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		}
 	})) : [], ya = "in-memory", xa = await (async () => {
 		if (B === "memory") return hr.layerMemory;
-		let e = await S(B), t = e.makeSqlLayer(Q()), n = $r({ sqliteFamily: Si(e.id) });
+		let e = await x(B), t = e.makeSqlLayer(Q()), n = $r({ sqliteFamily: Si(e.id) });
 		if (ya = `cluster-${n}`, Z.info(`workflow engine: cluster-${n}, dialect=${e.id}` + (n === "memory" ? " — single-process durable replay, no horizontal scaling" + (Si(e.id) ? "" : " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)") : "")), e.id === "mssql") {
 			let e = await Ot(process.cwd());
 			e && Z.warn(e);
@@ -7521,26 +7531,26 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		store: R,
 		warn: (e, t) => Z.warn(e, t)
 	}), Ta = wa.remember, Ea = wa.resolve, Da = kl({
-		authority: j?.auth,
+		authority: A?.auth,
 		getStore: () => vt.current
-	}), V = A.length > 0 ? go(() => Sa) : void 0, ka = Z.child("webhooks"), Pa = T.filter((e) => Ie.test(e)), La = Pa.length > 0 ? await Mt(Pa, ka) : {
+	}), V = k.length > 0 ? ho(() => Sa) : void 0, ka = Z.child("webhooks"), Pa = w.filter((e) => Le.test(e)), La = Pa.length > 0 ? await Mt(Pa, ka) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, za = {
+	}, H = {
 		...La,
-		outgoing: [...La.outgoing, ...At(qe)]
+		outgoing: [...La.outgoing, ...At(Je)]
 	};
-	za.outgoing.length + za.incoming.length + za.providers.length > 0 && ka.info("discovered webhooks", {
-		outgoing: za.outgoing.map((e) => e.descriptor.id),
-		incoming: za.incoming.map((e) => e.descriptor.id),
-		providers: za.providers.map((e) => e.descriptor.id)
+	H.outgoing.length + H.incoming.length + H.providers.length > 0 && ka.info("discovered webhooks", {
+		outgoing: H.outgoing.map((e) => e.descriptor.id),
+		incoming: H.incoming.map((e) => e.descriptor.id),
+		providers: H.providers.map((e) => e.descriptor.id)
 	});
-	let Ba = /* @__PURE__ */ new Map();
-	for (let e of za.incoming) {
-		let t = e.descriptor.path ?? js(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ps(e.descriptor, {
+	let za = /* @__PURE__ */ new Map();
+	for (let e of H.incoming) {
+		let t = e.descriptor.path ?? As(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ns(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => V === void 0 ? void 0 : Mo(V, {
+			resolveWorkflows: () => V === void 0 ? void 0 : jo(V, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -7555,36 +7565,36 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				e.status >= 500 ? ka.error("incoming delivery failed", t) : e.status >= 400 ? ka.warn("incoming delivery rejected", t) : ka.info("incoming delivery handled", t);
 			}
 		});
-		Ba.set(t, r), ka.info("mounted incoming webhook", {
+		za.set(t, r), ka.info("mounted incoming webhook", {
 			id: e.descriptor.id,
 			path: t,
 			secretEnvKey: n
 		});
 	}
-	let Ha = Z.child("reaction"), Ua = T.filter((e) => He.test(e)), Ga = Ua.length > 0 ? await su(Ua, Ha) : [], Ka;
-	if (Ga.length > 0) {
-		Ha.info("discovered reactions", { reactions: Ga.map((e) => `${e.definition.name}@${e.definition.watch.table}`) });
-		let e = qd(R, { onError: (e) => Ha.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		Ka = lu(Ga, R, {
+	let Va = Z.child("reaction"), Ha = w.filter((e) => Ue.test(e)), Wa = Ha.length > 0 ? await su(Ha, Va) : [], Ga;
+	if (Wa.length > 0) {
+		Va.info("discovered reactions", { reactions: Wa.map((e) => `${e.definition.name}@${e.definition.watch.table}`) });
+		let e = qd(R, { onError: (e) => Va.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		Ga = lu(Wa, R, {
 			runAct: async (e, t) => {
 				if (e.kind === "workflow") {
 					if (V === void 0) {
-						Ha.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: e.workflow });
+						Va.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: e.workflow });
 						return;
 					}
 					let n = e.payload === void 0 ? t.new ?? t.old ?? {} : e.payload(t);
-					await Mo(V, {
+					await jo(V, {
 						traceId: `reaction:${e.workflow}`,
 						source: `reaction:${e.workflow}`
 					}).start(e.workflow, n);
 					return;
 				}
 				await cu(e.agent, t, {
-					findAgentSend: (e) => O.find((t) => t.descriptor.name === `${e}.send`),
-					runAction: (e, t, n) => Promise.resolve(Ds(e, t, n)),
+					findAgentSend: (e) => D.find((t) => t.descriptor.name === `${e}.send`),
+					runAction: (e, t, n) => Promise.resolve(Es(e, t, n)),
 					makeSubject: (e) => sn(e),
 					now: () => Date.now(),
-					log: Ha
+					log: Va
 				});
 			},
 			checkBudget: async (e, t) => {
@@ -7595,29 +7605,29 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 						limitUsd: t
 					}))))._tag === "Right";
 				} catch (t) {
-					return Ha.warn("reaction budget check failed — refusing the act", { tenantId: e }, t), !1;
+					return Va.warn("reaction budget check failed — refusing the act", { tenantId: e }, t), !1;
 				}
 			},
 			claimRateSlot: (t) => e.claim(t)
-		}, Ha);
+		}, Va);
 	}
-	Ka && U(() => {
-		Ka();
+	Ga && W(() => {
+		Ga();
 	});
-	let qa = 0, H = new Gi({
+	let Ka = 0, U = new Gi({
 		store: R,
 		cache: Rr,
-		...j?.reactive === void 0 ? {} : { reactive: j.reactive },
+		...A?.reactive === void 0 ? {} : { reactive: A.reactive },
 		...$i === void 0 ? {} : { recordCost: $i.record },
 		recordDelivery: (e) => {
-			Vo({
+			Bo({
 				label: e.label,
 				kind: e.kind,
 				durationMs: e.durationMs,
 				rowCount: e.rowCount
 			}), Zn({
 				traceId: e.traceId,
-				spanId: (qa++).toString(16).padStart(16, "0"),
+				spanId: (Ka++).toString(16).padStart(16, "0"),
 				parentSpanId: e.parentSpanId ?? null,
 				name: `${e.label}.${e.kind}`,
 				kind: "internal",
@@ -7632,21 +7642,21 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			});
 		}
 	});
-	Mr = H;
-	let Ya = () => {
-		w.emit("subscriptions", Wm(() => H));
+	Mr = U;
+	let Ja = () => {
+		C.emit("subscriptions", Wm(() => U));
 	};
-	H.onSubscriptionsChange(Ya), Ya();
-	let to = Z.child("store"), no = (j?.plugins ?? []).filter((e) => typeof e.onChangeEvent == "function"), oo = R.changeScope ?? "local";
+	U.onSubscriptionsChange(Ja), Ja();
+	let eo = Z.child("store"), to = (A?.plugins ?? []).filter((e) => typeof e.onChangeEvent == "function"), ao = R.changeScope ?? "local";
 	vm({
 		store: R,
 		..._m(),
 		log: Z
 	}), R.onChange((e) => {
-		if (to.debug(`${e.op} on ${e.table}`, {
+		if (eo.debug(`${e.op} on ${e.table}`, {
 			op: e.op,
 			table: e.table
-		}), Ho({
+		}), Vo({
 			table: e.table,
 			op: e.op,
 			old: e.old ?? null,
@@ -7659,10 +7669,10 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				...t === void 0 ? {} : { id: t }
 			});
 		}
-		if (no.length > 0) {
-			let t = au(e, oo);
-			for (let n of no) {
-				let r = to.child(`plugin:${n.name}`);
+		if (to.length > 0) {
+			let t = au(e, ao);
+			for (let n of to) {
+				let r = eo.child(`plugin:${n.name}`);
 				F.runFork(n.onChangeEvent(t).pipe(F.catchAllCause((t) => F.sync(() => r.warn("onChangeEvent failed", {
 					table: e.table,
 					op: e.op
@@ -7670,11 +7680,11 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			}
 		}
 	});
-	let so = A.map((e) => pr.make(e.definition.name, {
+	let oo = k.map((e) => pr.make(e.definition.name, {
 		payload: e.definition.payloadSchema,
 		success: rn,
 		error: e.definition.errorSchema
-	})), co = ht ? [
+	})), so = gt ? [
 		kn(Un),
 		kn(Gn),
 		kn(Wn),
@@ -7685,27 +7695,27 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		an(Vn),
 		an(Kn),
 		an(qn)
-	] : [], uo = (j?.plugins ?? []).flatMap((e) => (e.errorSchemas ?? []).map((e) => e.schema)), fo = uo.length > 0 ? uo : void 0, mo = (e) => e.filter((e) => En(e.descriptor)), ho = mo(E), _o = mo(D), xo = mo(O), So = mo(Ge), Oo = [
-		...ho.map((e) => kn(e.descriptor, fo)),
-		..._o.map((e) => Dn(e.descriptor, fo)),
-		...xo.map((e) => an(e.descriptor, fo)),
-		...So.map((e) => jn(e.descriptor, fo)),
+	] : [], lo = (A?.plugins ?? []).flatMap((e) => (e.errorSchemas ?? []).map((e) => e.schema)), uo = lo.length > 0 ? lo : void 0, po = (e) => e.filter((e) => En(e.descriptor)), mo = po(T), go = po(E), bo = po(D), xo = po(Ke), Do = [
+		...mo.map((e) => kn(e.descriptor, uo)),
+		...go.map((e) => Dn(e.descriptor, uo)),
+		...bo.map((e) => an(e.descriptor, uo)),
+		...xo.map((e) => jn(e.descriptor, uo)),
 		...Pi.rpcs,
-		...so,
-		...co
-	], ko = mr.make(...Oo).middleware($t).middleware(en), Ao = j?.layers ?? [], Po = (j?.plugins ?? []).map((e) => e.services).filter((e) => e !== void 0), Fo = I.succeed(zi, Zi.registry), Io = I.succeed(qi, Qi?.registry ?? Hu), Lo = I.succeed(Hi, $i?.registry ?? Uu), zo = I.succeed(Ji, ea?.registry ?? Wu), Bo = I.mergeAll(qc({
+		...oo,
+		...so
+	], Oo = mr.make(...Do).middleware($t).middleware(en), ko = A?.layers ?? [], No = (A?.plugins ?? []).map((e) => e.services).filter((e) => e !== void 0), Po = I.succeed(zi, Zi.registry), Fo = I.succeed(qi, Qi?.registry ?? Hu), Io = I.succeed(Hi, $i?.registry ?? Uu), Ro = I.succeed(Ji, ea?.registry ?? Wu), zo = I.mergeAll(qc({
 		analyticsLayer: li.layer,
 		cacheService: Ir,
 		kvService: ni,
 		...Br === void 0 ? {} : { semanticCache: Br },
-		pluginServices: Po,
-		userLayers: Ao
-	}), Fo, Io, Lo, zo);
-	(Ao.length > 0 || Po.length > 0) && Z.info("layers loaded", {
-		userLayers: Ao.length,
-		pluginLayers: Po.length
+		pluginServices: No,
+		userLayers: ko
+	}), Po, Fo, Io, Ro);
+	(ko.length > 0 || No.length > 0) && Z.info("layers loaded", {
+		userLayers: ko.length,
+		pluginLayers: No.length
 	});
-	let Wo = (e, t) => Xo(e.pipe(F.provide(po(t)), F.provide(Bo), F.provide(gt)));
+	let Uo = (e, t) => Yo(e.pipe(F.provide(fo(t)), F.provide(zo), F.provide(_t)));
 	if ((process.env.VOLTRO_INDEX_AUDIT ?? "on") !== "off") {
 		let e = ci(P), t = process.stdout.isTTY === !0 && (process.env.NO_COLOR ?? "") === "";
 		for (let n of e) Z.warn("\n" + hi(n, {
@@ -7713,16 +7723,16 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			indent: "  "
 		}));
 	}
-	let Go;
-	if (za.outgoing.length > 0) {
+	let Wo;
+	if (H.outgoing.length > 0) {
 		let e = Uc({
 			store: R,
 			schemaRegistry: Ci,
 			cache: zr,
 			kv: Qr
-		}), t = za.outgoing.map((e) => e.descriptor);
-		Go = Ms.toLayer(ks(e, { events: t })), Ii = As(e, async (e) => {
-			q.runPromise(Ms.execute(e)).catch((t) => {
+		}), t = H.outgoing.map((e) => e.descriptor);
+		Wo = js.toLayer(Os(e, { events: t })), Ii = ks(e, async (e) => {
+			J.runPromise(js.execute(e)).catch((t) => {
 				ka.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -7730,63 +7740,63 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			});
 		}, { events: t });
 	}
-	let W = (process.env.VOLTRO_TENANT_ISOLATION ?? j?.tenancy?.isolation) === "namespace";
-	W && Z.info("multi-tenancy: PHYSICAL namespace isolation ON — each request runs against its tenant's own namespace (schema/database/attached file). Requests without a resolvable tenant fail closed.");
-	let Jo = $(j), G = W && Jo !== "memory" ? await (async () => {
-		let e = await S(Jo);
+	let G = (process.env.VOLTRO_TENANT_ISOLATION ?? A?.tenancy?.isolation) === "namespace";
+	G && Z.info("multi-tenancy: PHYSICAL namespace isolation ON — each request runs against its tenant's own namespace (schema/database/attached file). Requests without a resolvable tenant fail closed.");
+	let qo = $(A), K = G && qo !== "memory" ? await (async () => {
+		let e = await x(qo);
 		return Bc({
 			tables: oi(),
 			sqlLayer: e.makeSqlLayer(Q()),
-			dialect: Jo,
+			dialect: qo,
 			options: { retryFilter: e.retryFilter },
 			log: {
 				info: (e, t) => Z.info(e, t),
 				error: (e, t, n) => Z.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, Zo = await wh({
-		input: j?.tenancy?.residency,
-		namespaceIsolationOn: W,
-		makeStoreForUrl: (e, t) => ng(j, er, ne(Q(), t)),
+	})() : void 0, Xo = await wh({
+		input: A?.tenancy?.residency,
+		namespaceIsolationOn: G,
+		makeStoreForUrl: (e, t) => ng(A, er, re(Q(), t)),
 		log: {
 			info: (e, t) => Z.info(e, t),
 			warn: (e, t) => Z.warn(e, t)
 		}
 	});
-	Zo !== void 0 && U(async () => {
-		await Zo.close();
+	Xo !== void 0 && W(async () => {
+		await Xo.close();
 	});
-	let Qo = Wc({
+	let Zo = Wc({
 		store: R,
 		schemaRegistry: Ci,
 		cache: zr,
 		kv: Qr,
-		...Zo === void 0 ? {} : { resolveResidentStore: Zo.resolveStore },
+		...Xo === void 0 ? {} : { resolveResidentStore: Xo.resolveStore },
 		...Ii === void 0 ? {} : { webhooksService: Ii },
 		...V === void 0 ? {} : { workflowsProxy: V },
-		eventTriggers: Ze,
-		namespaceIsolationOn: W,
-		...G === void 0 ? {} : { ensureTenantProvisioned: G.ensure },
-		onEventEmit: (e, t) => w.emit(e, t),
+		eventTriggers: Qe,
+		namespaceIsolationOn: G,
+		...K === void 0 ? {} : { ensureTenantProvisioned: K.ensure },
+		onEventEmit: (e, t) => C.emit(e, t),
 		...Ui === void 0 ? {} : { outbox: { nudge: Ui.nudge } },
 		...or.active ? { connections: { registry: or.registry } } : {},
 		eventBus: Pi.bus
-	}), $o = async () => {
+	}), Qo = async () => {
 		if (Di.length === 0) return;
 		let e = process.env.HOSTNAME ?? `pid-${process.pid}`, t;
-		fa ? t = rs : oa === "cluster" ? (Z.warn("scheduling.coordination=cluster needs store=postgres — falling back to single (dev/memory)"), t = rs) : oa === "advisoryLock" ? B === "memory" ? (Z.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single (memory)"), t = rs) : t = Za(R, e, {
+		fa ? t = ns : oa === "cluster" ? (Z.warn("scheduling.coordination=cluster needs store=postgres — falling back to single (dev/memory)"), t = ns) : oa === "advisoryLock" ? B === "memory" ? (Z.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single (memory)"), t = ns) : t = Xa(R, e, {
 			info: (e, t) => Z.info(e, t ?? {}),
 			warn: (e, t) => Z.warn(e, t ?? {})
-		}) : t = rs;
-		let n = Hf(j?.plugins ?? [], bs);
-		ra = await os(Di, {
+		}) : t = ns;
+		let n = Hf(A?.plugins ?? [], ys);
+		ra = await as(Di, {
 			store: R,
 			coordinator: t,
 			defaultTrigger: aa,
 			replicaId: e,
 			armSelf: !fa,
-			dormancy: j?.dormancy ?? "always-on",
-			buildContext: ({ traceId: e, scheduleName: t, subject: n }) => Qo({
+			dormancy: A?.dormancy ?? "always-on",
+			buildContext: ({ traceId: e, scheduleName: t, subject: n }) => Zo({
 				subject: n,
 				traceId: e
 			}, R, void 0, `schedule:${t}`),
@@ -7796,7 +7806,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				error: (e, t) => Z.error(e, t ?? {}),
 				debug: (e, t) => Z.debug(e, t ?? {})
 			},
-			onRunEvent: (e, t) => w.emit("scheduleRuns", {
+			onRunEvent: (e, t) => C.emit("scheduleRuns", {
 				op: e,
 				row: t
 			}),
@@ -7805,32 +7815,32 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			schedules: Di.length,
 			coordination: fa ? "cluster" : t.kind,
 			clusterCrons: _a.length
-		}), U(() => ra?.shutdown());
-	}, K = {}, ns = /* @__PURE__ */ new Set(), is = (e, t) => {
-		Va(e, ot, t) && (ns.has(e.table) || (ns.add(e.table), Z.warn("tenant-scoped read with an EMPTY tenant — every row is filtered out", {
+		}), W(() => ra?.shutdown());
+	}, q = {}, ts = /* @__PURE__ */ new Set(), rs = (e, t) => {
+		Ba(e, st, t) && (ts.has(e.table) || (ts.add(e.table), Z.warn("tenant-scoped read with an EMPTY tenant — every row is filtered out", {
 			table: e.table,
 			tenantId: "",
 			cause: "the subject authenticated but has no resolved org (tenantId=''), so the auto-merged `eq('tenantId', '')` matches no real row — this is NOT 'no such row'",
 			fix: "resolve the subject to an active org before the read, or mark the query `.unscoped()` if it is deliberately cross-tenant"
 		})));
-	}, cs = !1, ls = (e) => {
-		cs || !Wa(e) || (cs = !0, Z.warn("authenticated subject has NO active org (tenantId='') — every tenant-scoped read will be empty", {
+	}, ss = !1, cs = (e) => {
+		ss || !Ua(e) || (ss = !0, Z.warn("authenticated subject has NO active org (tenantId='') — every tenant-scoped read will be empty", {
 			subjectType: "user",
 			cause: "the session resolved a user but no organization/tenant; the empty-string sentinel fails closed",
 			fix: "resolve the user to an active org during auth, or route org-less users to an onboarding flow"
 		}));
-	}, ds = /* @__PURE__ */ new Set(), fs = (e) => {
+	}, us = /* @__PURE__ */ new Set(), ds = (e) => {
 		if (e.usingIndex !== void 0 || e.predicate === void 0) return;
 		let t = /* @__PURE__ */ new Set();
 		for (let n of Fi(e.predicate)) n.conjunctive && t.add(n.column);
 		if (t.size === 0 || Ci.anyFieldIndexed(e.table, t)) return;
 		let n = `${e.table}::${[...t].sort().join(",")}`;
-		ds.has(n) || (ds.add(n), Z.warn("non-indexed predicate — slow at scale", {
+		us.has(n) || (us.add(n), Z.warn("non-indexed predicate — slow at scale", {
 			table: e.table,
 			fields: [...t],
 			hint: "declare `.index()` on a column, add `.index(name, [...fields])` to the table, or annotate the query with `.using('indexName')` if a covering index exists"
 		}));
-	}, gs = (e) => {
+	}, hs = (e) => {
 		if (e.usingIndex === void 0) return;
 		let t = Ci.tables.get(e.table);
 		if (!t) return;
@@ -7839,7 +7849,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			name: n.name,
 			fields: n.fields
 		};
-	}, vs = (e) => JSON.stringify(e, (e, t) => typeof t == "object" && t && !Array.isArray(t) ? Object.fromEntries(Object.entries(t).sort(([e], [t]) => e.localeCompare(t))) : t), ys = (e, t) => {
+	}, _s = (e) => JSON.stringify(e, (e, t) => typeof t == "object" && t && !Array.isArray(t) ? Object.fromEntries(Object.entries(t).sort(([e], [t]) => e.localeCompare(t))) : t), vs = (e, t) => {
 		let n = e.cache;
 		if (n === void 0) return;
 		let r = kt(n.ttl);
@@ -7847,64 +7857,64 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			ttlMs: r,
 			swrMs: n.swr === void 0 ? void 0 : kt(n.swr) ?? void 0,
 			scope: n.scope,
-			baseKey: `q:${e.name}:${vs(t)}`
+			baseKey: `q:${e.name}:${_s(t)}`
 		};
-	}, bs = Lt(), xs = Ff(j?.plugins ?? [], bs), Ss = xs.mutation, Cs = xs.action, ws = xs.query, Ts = Bl(_), Es = yo({
+	}, ys = Lt(), bs = Ff(A?.plugins ?? [], ys), xs = bs.mutation, Ss = bs.action, Cs = bs.query, ws = Bl(_), Ts = vo({
 		store: R,
-		defaultDeny: Ts,
-		buildContext: (e, t, n) => Qo(e, t, n),
-		runEffect: (e, t) => Wo(e, t),
-		...Ss ? { interceptor: Ss } : {},
-		recordMetric: (e) => bs.record(e),
+		defaultDeny: ws,
+		buildContext: (e, t, n) => Zo(e, t, n),
+		runEffect: (e, t) => Uo(e, t),
+		...xs ? { interceptor: xs } : {},
+		recordMetric: (e) => ys.record(e),
 		undoCapture: mf()
-	}), Ds = Xa({
-		defaultDeny: Ts,
-		buildContext: (e) => Qo(e),
-		runEffect: (e, t) => Wo(e, t),
-		...Cs ? { interceptor: Cs } : {},
-		recordMetric: (e) => bs.record(e)
-	}), Os = wo({
-		tenantScopedTables: ot,
-		softDeleteScopedTables: st,
+	}), Es = Ya({
+		defaultDeny: ws,
+		buildContext: (e) => Zo(e),
+		runEffect: (e, t) => Uo(e, t),
+		...Ss ? { interceptor: Ss } : {},
+		recordMetric: (e) => ys.record(e)
+	}), Ds = Co({
+		tenantScopedTables: st,
+		softDeleteScopedTables: ct,
 		observe: {
 			beforeScope: (e, t) => {
-				ls(t), is(e, t.tenantId);
+				cs(t), rs(e, t.tenantId);
 			},
-			afterScope: fs
-		}
-	}), Fs = {
-		defaultDeny: Ts,
-		buildContext: (e) => Qo(e),
-		finalize: (e, t) => Os(e, t.subject),
-		provideEffect: (e, t) => e.pipe(F.provide(po(t)), F.provide(Bo), F.provide(gt)),
-		...ws ? { interceptor: ws } : {}
-	}, Is = Co(Fs), Rs = bo({
-		...Fs,
-		queryRows: (e, t) => R.query(e).then((n) => ss(e.table, n, t.subject))
-	}), zs = Eo({
-		...Fs,
-		subscribeDescriptor: (e, t, n) => H.subscribe(e, t, n),
-		subscribeComputed: (e, t, n) => H.subscribeComputed(e, t, n)
+			afterScope: ds
+		}
+	}), Ps = {
+		defaultDeny: ws,
+		buildContext: (e) => Zo(e),
+		finalize: (e, t) => Ds(e, t.subject),
+		provideEffect: (e, t) => e.pipe(F.provide(fo(t)), F.provide(zo), F.provide(_t)),
+		...Cs ? { interceptor: Cs } : {}
+	}, Fs = So(Ps), Ls = yo({
+		...Ps,
+		queryRows: (e, t) => R.query(e).then((n) => os(e.table, n, t.subject))
+	}), Rs = To({
+		...Ps,
+		subscribeDescriptor: (e, t, n) => U.subscribe(e, t, n),
+		subscribeComputed: (e, t, n) => U.subscribeComputed(e, t, n)
 	});
-	for (let e of ho) K[e.descriptor.name] = (t) => ha(Is(e, t), H, `subscription.${e.descriptor.name}`, gs, ys(e.descriptor, t), To(e, t));
-	let Bs = Xc(j?.idempotency, R);
-	for (let e of _o) {
-		let t = `mutation.${e.descriptor.name}`, n = vo(e.descriptor.output);
-		K[e.descriptor.name] = (r) => pa(async (t, n) => Es(e, t, n), r, t, n, Bs, Ln(e.descriptor, "mutation"));
+	for (let e of mo) q[e.descriptor.name] = (t) => ha(Fs(e, t), U, `subscription.${e.descriptor.name}`, hs, vs(e.descriptor, t), wo(e, t));
+	let zs = Xc(A?.idempotency, R);
+	for (let e of go) {
+		let t = `mutation.${e.descriptor.name}`, n = _o(e.descriptor.output);
+		q[e.descriptor.name] = (r) => pa(async (t, n) => Ts(e, t, n), r, t, n, zs, Ln(e.descriptor, "mutation"));
 	}
-	for (let e of xo) {
-		let t = `action.${e.descriptor.name}`, n = vo(e.descriptor.output);
-		K[e.descriptor.name] = (r) => pa(async (t, n) => Ds(e, t, n), r, t, n, Bs, e.descriptor.error);
+	for (let e of bo) {
+		let t = `action.${e.descriptor.name}`, n = _o(e.descriptor.output);
+		q[e.descriptor.name] = (r) => pa(async (t, n) => Es(e, t, n), r, t, n, zs, e.descriptor.error);
 	}
-	Object.assign(K, Pi.handlers);
-	for (let e of So) {
+	Object.assign(q, Pi.handlers);
+	for (let e of xo) {
 		let t = `stream.${e.descriptor.name}`;
-		K[e.descriptor.name] = (n) => ma((t) => ms(t, (t) => {
-			let r = Qo(t), i = e.executor(n, r);
-			return F.isEffect(i) ? i.pipe(F.provide(po(r.store)), F.provide(Bo), F.provide(gt)) : typeof i == "object" && i && typeof i.then == "function" ? F.promise(() => i) : i;
+		q[e.descriptor.name] = (n) => ma((t) => ps(t, (t) => {
+			let r = Zo(t), i = e.executor(n, r);
+			return F.isEffect(i) ? i.pipe(F.provide(fo(r.store)), F.provide(zo), F.provide(_t)) : typeof i == "object" && i && typeof i.then == "function" ? F.promise(() => i) : i;
 		}), t);
 	}
-	ht && (K[Un.name] = (e) => ha(Is({
+	gt && (q[Un.name] = (e) => ha(Fs({
 		descriptor: Un,
 		executor: (e) => {
 			let t = e.id;
@@ -7920,7 +7930,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				projection: void 0
 			};
 		}
-	}, e), H, `subscription.${Un.name}`), K[Gn.name] = (e) => ha(Is({
+	}, e), U, `subscription.${Un.name}`), q[Gn.name] = (e) => ha(Fs({
 		descriptor: Gn,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [z("tag", t.tag)], ...t.status === void 0 ? [] : [z("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
@@ -7936,7 +7946,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				projection: void 0
 			};
 		}
-	}, e), H, `subscription.${Gn.name}`), K[Wn.name] = (e) => ha(Is({
+	}, e), U, `subscription.${Gn.name}`), q[Wn.name] = (e) => ha(Fs({
 		descriptor: Wn,
 		executor: (e) => {
 			let t = e.runId;
@@ -7952,7 +7962,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				projection: void 0
 			};
 		}
-	}, e), H, `subscription.${Wn.name}`), K[Hn.name] = (e) => ha(Is({
+	}, e), U, `subscription.${Wn.name}`), q[Hn.name] = (e) => ha(Fs({
 		descriptor: Hn,
 		executor: (e) => {
 			let t = e.runId;
@@ -7968,7 +7978,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				projection: void 0
 			};
 		}
-	}, e), H, `subscription.${Hn.name}`), K[zn.name] = (e) => ha(Is({
+	}, e), U, `subscription.${Hn.name}`), q[zn.name] = (e) => ha(Fs({
 		descriptor: zn,
 		executor: (e) => {
 			let t = e;
@@ -7984,7 +7994,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				projection: void 0
 			};
 		}
-	}, e), H, `subscription.${zn.name}`), K[Bn.name] = (e) => ha(Is({
+	}, e), U, `subscription.${zn.name}`), q[Bn.name] = (e) => ha(Fs({
 		descriptor: Bn,
 		executor: (e) => {
 			let t = e.eventId;
@@ -8000,32 +8010,32 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				projection: void 0
 			};
 		}
-	}, e), H, `subscription.${Bn.name}`), K[Rn.name] = (e) => pa(async (e, t) => {
+	}, e), U, `subscription.${Bn.name}`), q[Rn.name] = (e) => pa(async (e, t) => {
 		let n = e;
-		return await Gc(R, t.subject, { executionId: n.executionId }), await V.cancel(n.workflowName, n.executionId), await Zs(n.workflowName, n.executionId, "workflow.cancel"), { ok: !0 };
-	}, e, `action.${Rn.name}`), K[Vn.name] = (e) => pa(async (e, t) => {
+		return await Gc(R, t.subject, { executionId: n.executionId }), await V.cancel(n.workflowName, n.executionId), await Xs(n.workflowName, n.executionId, "workflow.cancel"), { ok: !0 };
+	}, e, `action.${Rn.name}`), q[Vn.name] = (e) => pa(async (e, t) => {
 		let n = e;
 		return await Gc(R, t.subject, { executionId: n.executionId }), await V.resume(n.workflowName, n.executionId), { ok: !0 };
-	}, e, `action.${Vn.name}`), K[Kn.name] = (e) => pa(async (e, t) => {
+	}, e, `action.${Vn.name}`), q[Kn.name] = (e) => pa(async (e, t) => {
 		let n = e;
 		return await Gc(R, t.subject, { id: n.id }), V.signal({ id: n.id }, n.signalName, n.payload);
-	}, e, `action.${Kn.name}`), K[qn.name] = (e) => pa(async (e, t) => {
+	}, e, `action.${Kn.name}`), q[qn.name] = (e) => pa(async (e, t) => {
 		let n = e;
 		return await Gc(R, t.subject, { id: n.id }), V.update({ id: n.id }, n.updateName, n.payload, n.timeoutMs === void 0 ? void 0 : { timeoutMs: n.timeoutMs });
 	}, e, `action.${qn.name}`));
-	for (let e of A) K[e.definition.name] = (t) => pa(async (t, n) => {
+	for (let e of k) q[e.definition.name] = (t) => pa(async (t, n) => {
 		let r = n;
-		return Mo(V, {
+		return jo(V, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(e.definition.name, t);
 	}, t, `workflow.${e.definition.name}`);
-	let Vs = (e, t) => Qo({
+	let Bs = (e, t) => Zo({
 		subject: e.subject,
 		traceId: e.traceId
-	}, R, void 0, `workflow:${t.workflowName}`, { parentExecutionId: t.executionId }), Hs = Wf(j?.plugins ?? [], bs), Us = Ur, Ws = (e, t) => w.emit(e, t), Ks = j?.dormancy === "sleep" ? {
-		register: (e, t, n) => qo(R, {
+	}, R, void 0, `workflow:${t.workflowName}`, { parentExecutionId: t.executionId }), Vs = Wf(A?.plugins ?? [], ys), Hs = Ur, Us = (e, t) => C.emit(e, t), Gs = A?.dormancy === "sleep" ? {
+		register: (e, t, n) => Ko(R, {
 			tenantId: n ?? Wi,
 			kind: "workflow",
 			refId: e,
@@ -8036,24 +8046,24 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			kind: "workflow",
 			refId: e
 		}).then(() => {})
-	} : void 0, Js = Fr({
+	} : void 0, qs = Fr({
 		store: R,
-		emit: Ws,
+		emit: Us,
 		log: Z,
-		recording: fd(j?.workflows?.recording),
-		...Ks === void 0 ? {} : { wakeups: Ks }
-	}), Ys = async (e, t) => {
+		recording: fd(A?.workflows?.recording),
+		...Gs === void 0 ? {} : { wakeups: Gs }
+	}), Js = async (e, t) => {
 		await Cr({
 			store: R,
 			parentExecutionId: e,
 			parentStatus: t,
-			recorder: Js,
-			emit: Ws,
+			recorder: qs,
+			emit: Us,
 			log: Z,
 			interruptChild: async (t, n, r) => {
-				let i = A.find((e) => e.definition.name === t);
+				let i = k.find((e) => e.definition.name === t);
 				if (!i) throw Error(`Unknown child workflow: ${t}`);
-				await q.runPromise(i.definition.interrupt(n)), Z.info("workflow.parentClose.childInterrupted", {
+				await J.runPromise(i.definition.interrupt(n)), Z.info("workflow.parentClose.childInterrupted", {
 					parentExecutionId: e,
 					childWorkflowName: t,
 					childExecutionId: n,
@@ -8061,7 +8071,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				});
 			}
 		});
-	}, Zs = async (e, t, n) => {
+	}, Xs = async (e, t, n) => {
 		let r = (await R.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -8076,12 +8086,12 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		});
-		i && w.emit("workflowRuns", {
+		i && C.emit("workflowRuns", {
 			op: "update",
-			row: Us(i)
+			row: Hs(i)
 		});
 		let a = r.subject?.tenantId ?? void 0;
-		i && await Js.recordEvent({
+		i && await qs.recordEvent({
 			runId: r.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -8090,8 +8100,8 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 				executionId: t,
 				...a == null ? {} : { tenantId: a }
 			}
-		}), i && await Ys(t, "cancelled");
-	}, $s = (e, t, n, r) => {
+		}), i && await Js(t, "cancelled");
+	}, Qs = (e, t, n, r) => {
 		let i = Ar(t);
 		return qr({
 			name: e,
@@ -8104,35 +8114,35 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			workflowPatches: i.patches,
 			parentExecutionId: r?.parentExecutionId ?? null,
 			parentClosePolicy: r?.parentClosePolicy ?? null,
-			onParentClose: ({ executionId: e, status: t }) => Ys(e, t),
+			onParentClose: ({ executionId: e, status: t }) => Js(e, t),
 			...Yd(t),
 			onTerminal: async ({ executionId: e }) => {
-				await uc?.gate.release(e);
+				await lc?.gate.release(e);
 			},
-			recorder: Js,
-			pluginWorkflowStepLayer: Hs,
-			emit: Ws,
-			recordRun: Uo,
+			recorder: qs,
+			pluginWorkflowStepLayer: Vs,
+			emit: Us,
+			recordRun: Ho,
 			log: Z
 		}, n);
-	}, nc = [
-		...No(A, {
-			buildContext: Vs,
+	}, tc = [
+		...Mo(k, {
+			buildContext: Bs,
 			resolveStartContext: Ea,
 			...Da === void 0 ? {} : { resolveAuthority: Da }
-		}, (e, t, n) => $s(e.definition.name, e.definition, t, n)),
-		...Xe,
-		...Go === void 0 ? [] : [Go]
-	], rc = nc.length > 0 ? I.mergeAll(...nc) : I.empty;
-	Z.child("workflow").info(`workflow runtime ready — ${nc.length} entity type(s) registered`, { entities: [...A.map((e) => e.definition.name).filter(Boolean), ...Go === void 0 ? [] : ["voltro.deliverWebhook"]] });
-	let q = $n.make(rc.pipe(I.provideMerge(xa), I.provideMerge(Bo), I.provideMerge(gt)));
-	U(() => q.dispose());
-	let ac = await lc({
+		}, (e, t, n) => Qs(e.definition.name, e.definition, t, n)),
+		...Ze,
+		...Wo === void 0 ? [] : [Wo]
+	], nc = tc.length > 0 ? I.mergeAll(...tc) : I.empty;
+	Z.child("workflow").info(`workflow runtime ready — ${tc.length} entity type(s) registered`, { entities: [...k.map((e) => e.definition.name).filter(Boolean), ...Wo === void 0 ? [] : ["voltro.deliverWebhook"]] });
+	let J = $n.make(nc.pipe(I.provideMerge(xa), I.provideMerge(zo), I.provideMerge(_t)));
+	W(() => J.dispose());
+	let ic = await cc({
 		provider: Dr,
-		crossReplica: Xs(j?.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+		crossReplica: Ys(A?.plugins ?? [])?.broadcast?.crossReplica ?? !1,
 		namespace: Tr,
 		replicaId: crypto.randomUUID(),
-		pollStorage: () => q.runPromise(Xr),
+		pollStorage: () => J.runPromise(Xr),
 		onChange: (e) => R.onChange((t) => e({
 			table: t.table,
 			op: t.op,
@@ -8140,23 +8150,23 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		})),
 		log: Z
 	});
-	U(() => ac.detach());
-	let sc, cc = () => {
-		if (sc !== void 0) return sc;
-		if (V !== void 0) return sc = Mp({
+	W(() => ic.detach());
+	let oc, sc = () => {
+		if (oc !== void 0) return oc;
+		if (V !== void 0) return oc = Mp({
 			store: R,
 			log: Z,
-			workflows: A,
+			workflows: k,
 			workflowsProxy: V,
-			workflowRuntime: q,
-			workflowRunRecorder: Js,
-			closeChildrenForParent: Ys,
-			onRunUpdated: (e) => w.emit("workflowRuns", {
+			workflowRuntime: J,
+			workflowRunRecorder: qs,
+			closeChildrenForParent: Js,
+			onRunUpdated: (e) => C.emit("workflowRuns", {
 				op: "update",
-				row: Us(e)
+				row: Hs(e)
 			})
-		}), sc;
-	}, uc = bd({
+		}), oc;
+	}, lc = bd({
 		store: R,
 		onChange: (e) => R.onChange((t) => e({
 			table: t.table,
@@ -8166,16 +8176,16 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		drainIntervalMs: yr.admissionDrainMs,
 		cancelSweepIntervalMs: yr.cancelSweepMs,
 		stalenessSweepIntervalMs: yr.stalenessSweepMs,
-		workflows: A,
+		workflows: k,
 		facade: () => Sa,
-		cancelRunWithReason: cc,
-		recordRunEvent: () => Js.recordEvent,
-		...j?.workflows?.staleness === void 0 ? {} : { staleness: j.workflows.staleness },
-		...j?.workflows?.suspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: j.workflows.suspendSignalHintMs },
+		cancelRunWithReason: sc,
+		recordRunEvent: () => qs.recordEvent,
+		...A?.workflows?.staleness === void 0 ? {} : { staleness: A.workflows.staleness },
+		...A?.workflows?.suspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: A.workflows.suspendSignalHintMs },
 		scheduleCoordinated: br,
 		onAbandoned: async (e) => {
 			await Zd({
-				workflows: A,
+				workflows: k,
 				facade: () => Sa,
 				log: Z,
 				...e
@@ -8183,8 +8193,8 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		},
 		log: Z
 	});
-	uc !== void 0 && U(() => uc.stop());
-	let pc = Wd({
+	lc !== void 0 && W(() => lc.stop());
+	let fc = Wd({
 		store: R,
 		onChange: (e) => R.onChange((t) => e({
 			table: t.table,
@@ -8192,38 +8202,38 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		})),
 		disarmWhenIdle: Pr,
 		tickIntervalMs: yr.inferenceTickMs,
-		enabled: A.length > 0,
+		enabled: k.length > 0,
 		resumeSignal: () => async ({ executionId: e, workflowName: t, signalName: n, payload: r }) => {
-			await q.runPromise(wr({
+			await J.runPromise(wr({
 				store: R,
 				target: Hd(e, t),
 				signalName: n,
 				payload: r
 			}));
 		},
-		runEffect: (e) => q.runPromise(e),
+		runEffect: (e) => J.runPromise(e),
 		scheduleCoordinated: br,
 		log: Z
 	});
-	pc !== void 0 && U(() => pc.stop()), Sa = A.length > 0 ? jo({
-		workflows: A,
-		runEffect: (e) => q.runPromise(e),
-		onEnqueue: () => ac.publishWake(),
-		...uc === void 0 ? {} : {
-			admitStart: uc.gate.admitStart,
-			startPayloadSchema: uc.gate.startPayloadSchema,
-			parkDelayedStart: uc.gate.parkDelayed
+	fc !== void 0 && W(() => fc.stop()), Sa = k.length > 0 ? Ao({
+		workflows: k,
+		runEffect: (e) => J.runPromise(e),
+		onEnqueue: () => ic.publishWake(),
+		...lc === void 0 ? {} : {
+			admitStart: lc.gate.admitStart,
+			startPayloadSchema: lc.gate.startPayloadSchema,
+			parkDelayedStart: lc.gate.parkDelayed
 		},
 		rememberStartContext: Ta,
 		signal: async (e, t, n) => {
 			let r = await Vr({
 				store: R,
-				recorder: Js,
+				recorder: qs,
 				target: e,
 				signalName: t,
 				payload: n
 			});
-			return await q.runPromise(wr({
+			return await J.runPromise(wr({
 				store: R,
 				target: e,
 				signalName: t,
@@ -8232,7 +8242,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		},
 		update: (e, t, n, r) => Hr({
 			store: R,
-			recorder: Js,
+			recorder: qs,
 			target: e,
 			updateName: t,
 			payload: n,
@@ -8241,51 +8251,51 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		listRuns: (e) => Xf(R, e),
 		retry: (e, t) => Zf({
 			store: R,
-			workflows: A,
-			runPromise: (e) => q.runPromise(e)
+			workflows: k,
+			runPromise: (e) => J.runPromise(e)
 		}, e, t),
 		redrive: (e) => $f({
 			store: R,
-			workflows: A,
-			runRedrive: (e) => q.runPromise(Zr(e))
+			workflows: k,
+			runRedrive: (e) => J.runPromise(Zr(e))
 		}, e).then((e) => e.outcome)
 	}) : void 0;
-	let mc = I.mergeAll(ko.toLayer(K), Bt), hc = Yc(K, E.map((e) => e.descriptor.name), ht), gc = I.mergeAll(ko.toLayer(hc), Bt), J = B, vc = (J === "postgres" || J === "mysql" || J === "mariadb" || J === "mssql") && (process.env.CDC ?? "1") !== "0";
-	if (J === "postgres" && im()) {
+	let pc = I.mergeAll(Oo.toLayer(q), Bt), mc = Yc(q, T.map((e) => e.descriptor.name), gt), hc = I.mergeAll(Oo.toLayer(mc), Bt), Y = B, _c = (Y === "postgres" || Y === "mysql" || Y === "mariadb" || Y === "mssql") && (process.env.CDC ?? "1") !== "0";
+	if (Y === "postgres" && im()) {
 		let e = lm({
 			store: R,
 			log: Z
 		});
-		Yn = e.persistTraceSpan, U(e.stop);
+		Yn = e.persistTraceSpan, W(e.stop);
 	}
-	let yc = Rc({
+	let vc = Lc({
 		store: R,
-		dialect: J,
+		dialect: Y,
 		log: { info: (e) => Z.info(e) }
 	});
-	U(() => {
-		yc.stop();
-	}), oc({
+	W(() => {
+		vc.stop();
+	}), ac({
 		log: Z,
-		max: re(),
-		outOfPool: ic(J, vc),
+		max: ie(),
+		outOfPool: rc(Y, _c),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !1
 	});
-	let bc = dc({
-		queries: E,
-		mutations: D,
-		actions: O,
-		streams: Ge,
-		workflows: A
-	}, n), xc = fc({
-		queries: E,
-		mutations: D,
-		actions: O,
-		streams: Ge,
-		workflows: A
+	let yc = uc({
+		queries: T,
+		mutations: E,
+		actions: D,
+		streams: Ke,
+		workflows: k
+	}, n), bc = dc({
+		queries: T,
+		mutations: E,
+		actions: D,
+		streams: Ke,
+		workflows: k
 	}, n);
-	Wt.writeFile(N(n, "app.manifest.generated.json"), `${JSON.stringify(dt(bc, xc, [], j?.plugins ?? []), null, 2)}\n`, "utf8").catch(() => {}), (async () => {
+	Wt.writeFile(N(n, "app.manifest.generated.json"), `${JSON.stringify(ft(yc, bc, [], A?.plugins ?? []), null, 2)}\n`, "utf8").catch(() => {}), (async () => {
 		let e = N(n, ".gitignore"), t = "";
 		try {
 			t = await Wt.readFile(e, "utf8");
@@ -8293,18 +8303,18 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		let r = t.split("\n").filter((e) => e.trim() !== "");
 		r.includes("app.manifest.generated.json") || (r.push("app.manifest.generated.json"), await Wt.writeFile(e, `${r.join("\n")}\n`, "utf8"));
 	})().catch(() => {}), Oa();
-	let Cc = N(n, "app.graph.observed.generated.json");
+	let Sc = N(n, "app.graph.observed.generated.json");
 	Wt.rm(N(n, "app.graph.observed.json"), { force: !0 }).catch(() => {});
-	let wc = Sc(n);
-	wc.warning === void 0 ? wc.adopted.length > 0 && Z.debug("handed generated output to the workspace owner", { paths: wc.adopted.join(", ") }) : Z.warn(wc.warning);
-	let Tc = async () => {
+	let Cc = xc(n);
+	Cc.warning === void 0 ? Cc.adopted.length > 0 && Z.debug("handed generated output to the workspace owner", { paths: Cc.adopted.join(", ") }) : Z.warn(Cc.warning);
+	let wc = async () => {
 		try {
-			await Wt.writeFile(Cc, `${JSON.stringify(Ro(), null, 2)}\n`, "utf8");
+			await Wt.writeFile(Sc, `${JSON.stringify(Lo(), null, 2)}\n`, "utf8");
 		} catch {}
 	};
 	setInterval(() => {
-		Tc();
-	}, 1e4).unref(), U(() => Tc()), (async () => {
+		wc();
+	}, 1e4).unref(), W(() => wc()), (async () => {
 		let e = N(n, ".gitignore"), t = "";
 		try {
 			t = await Wt.readFile(e, "utf8");
@@ -8312,8 +8322,8 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		let r = t.split("\n").filter((e) => e.trim() !== "");
 		r.includes("app.graph.observed.generated.json") || (r.push("app.graph.observed.generated.json"), await Wt.writeFile(e, `${r.join("\n")}\n`, "utf8"));
 	})().catch(() => {});
-	let Dc = /* @__PURE__ */ new Map();
-	for (let e of _o) Dc.set(e.descriptor.name, async (t, n) => {
+	let Ec = /* @__PURE__ */ new Map();
+	for (let e of go) Ec.set(e.descriptor.name, async (t, n) => {
 		let r = {
 			subject: (await Rt({
 				headers: n,
@@ -8328,7 +8338,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 					traceId: r.traceId,
 					subjectId: ta(r.subject),
 					procedure: e.descriptor.name
-				}, () => Es(e, t, r))
+				}, () => Ts(e, t, r))
 			};
 		} catch (t) {
 			let n = Nh(t);
@@ -8341,7 +8351,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			};
 		}
 	});
-	for (let e of xo) Dc.set(e.descriptor.name, async (t, n) => {
+	for (let e of bo) Ec.set(e.descriptor.name, async (t, n) => {
 		let r = {
 			subject: (await Rt({
 				headers: n,
@@ -8356,7 +8366,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 					traceId: r.traceId,
 					subjectId: ta(r.subject),
 					procedure: e.descriptor.name
-				}, () => Ds(e, t, r))
+				}, () => Es(e, t, r))
 			};
 		} catch (t) {
 			let n = Nh(t);
@@ -8369,23 +8379,23 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			};
 		}
 	});
-	let Oc = {
+	let Dc = {
 		candidates: eu({
-			queries: ho,
-			mutations: _o,
-			actions: xo,
+			queries: mo,
+			mutations: go,
+			actions: bo,
 			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(Rs(e, t, n)),
-			runMutation: (e, t, n) => Es(e, t, n),
-			runAction: (e, t, n) => Ds(e, t, n)
+			runQuery: (e, t, n) => Promise.resolve(Ls(e, t, n)),
+			runMutation: (e, t, n) => Ts(e, t, n),
+			runAction: (e, t, n) => Es(e, t, n)
 		}),
-		policy: j?.agents?.tools ?? {},
-		mcpEnabled: j?.agents?.mcp === !0,
+		policy: A?.agents?.tools ?? {},
+		mcpEnabled: A?.agents?.mcp === !0,
 		resolveSubject: async (e) => (await Rt({
 			headers: e,
 			clientId: -1
 		})).subject
-	}, Mc = () => ({
+	}, jc = () => ({
 		dialect: B,
 		replication: t.replicationSnapshot() ?? {
 			replicaCount: 0,
@@ -8417,11 +8427,11 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			...e.lastRunRowsTouched === void 0 ? {} : { lastRunRowsTouched: e.lastRunRowsTouched },
 			...e.lastError ? { lastError: e.lastError } : {}
 		}))
-	}), Nc = async () => cf({
+	}), Mc = async () => cf({
 		sqlLayer: yi,
 		declared: P,
 		log: Z
-	}), Pc = async (e) => {
+	}), Nc = async (e) => {
 		let t = await R.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -8430,17 +8440,17 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			skip: void 0,
 			take: 1
 		});
-		t[0] && w.emit("workflowRuns", {
+		t[0] && C.emit("workflowRuns", {
 			op: "update",
-			row: Us(t[0])
+			row: Hs(t[0])
 		});
-	}, Lc = async (e) => {
+	}, Ic = async (e) => {
 		let t = await $f({
 			store: R,
-			workflows: A,
-			runRedrive: (e) => q.runPromise(Zr(e))
+			workflows: k,
+			runRedrive: (e) => J.runPromise(Zr(e))
 		}, e.runId);
-		return t.statusReset && (await Pc(e.runId), await Js.recordEvent({
+		return t.statusReset && (await Nc(e.runId), await qs.recordEvent({
 			runId: e.runId,
 			eventType: "run-redriven",
 			payload: {
@@ -8457,53 +8467,53 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			activitiesReset: t.outcome.activitiesReset,
 			reason: t.outcome.reason
 		};
-	}, zc = ui({
-		dialect: J,
+	}, Rc = ui({
+		dialect: Y,
 		...Q()
-	}), Y = {
+	}), zc = {
 		kind: "api",
 		meta: {
-			name: j?.name ?? M(n),
+			name: A?.name ?? M(n),
 			voltroVersion: Eh,
-			port: C,
+			port: S,
 			mode: "dev",
-			store: J,
-			cdc: vc ? "on" : "off",
-			...zc === void 0 ? {} : { databaseId: zc }
+			store: Y,
+			cdc: _c ? "on" : "off",
+			...Rc === void 0 ? {} : { databaseId: Rc }
 		},
-		rpc: bc,
-		workflows: xc,
-		metrics: (e) => bs.snapshot(e),
+		rpc: yc,
+		workflows: bc,
+		metrics: (e) => ys.snapshot(e),
 		dataCache: () => Um({
 			stats: Kr,
 			backendKind: Gr
 		}),
-		invokers: Dc,
-		agentTools: () => Oc,
+		invokers: Ec,
+		agentTools: () => Dc,
 		invariantChecks: () => ({
 			mode: "dev",
-			accessGate: pt,
-			config: j,
-			...je ? { rpcGroupFile: je } : {},
-			serverOnlyLeaks: ct,
-			migrations: Nc
+			accessGate: mt,
+			config: A,
+			...Me ? { rpcGroupFile: Me } : {},
+			serverOnlyLeaks: lt,
+			migrations: Mc
 		}),
 		plugins: () => ({
 			plugins: Kt.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => te(j?.name ?? M(n), {
-			contract: _s(j?.env) ? j.env : void 0,
-			plugins: j?.plugins ?? []
+		env: () => te(A?.name ?? M(n), {
+			contract: gs(A?.env) ? A.env : void 0,
+			plugins: A?.plugins ?? []
 		}),
-		subscriptions: () => Wm(() => H),
+		subscriptions: () => Wm(() => U),
 		events: hm(Pi.bus, Pi.declared),
 		members: () => ({
 			members: Or.membership.list(),
 			capturedAt: Date.now()
 		}),
-		database: Mc,
-		migrations: async () => Nc(),
+		database: jc,
+		migrations: async () => Mc(),
 		inspectTables: () => kp(P),
 		inspectRows: Ap({
 			store: R,
@@ -8540,62 +8550,66 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			}), { deleted: t };
 		},
 		inspectImport: async (e) => {
-			let t = await F.runPromise(Qs({
+			let t = await F.runPromise(Zs({
 				store: R,
 				bundleDir: e.bundleDir,
 				...e.mode ? { mode: e.mode } : {},
 				...e.onConflict ? { onConflict: e.onConflict } : {},
 				...e.atomic === void 0 ? {} : { atomic: e.atomic }
-			})), n = t.tables.reduce((e, t) => e + t.rowCount, 0);
+			})), n = t.rowsWritten;
 			return Z.info("inspect.data.import", {
 				bundleDir: e.bundleDir,
-				tables: t.tables.length,
+				tables: t.tablesWritten,
 				rows: n,
-				mode: e.mode ?? "upsert"
+				mode: e.mode ?? "upsert",
+				...t.tablesSkipped > 0 ? {
+					skippedTables: t.tablesSkipped,
+					skippedRows: t.rowsSkipped
+				} : {}
 			}), {
-				tables: t.tables.length,
+				tables: t.tablesWritten,
 				rows: n
 			};
 		},
-		...ht ? {
+		...gt ? {
 			...Hm(R, {
-				controls: _d(A),
-				active: A.length > 0,
-				cancellation: () => uc?.cancelHealth()
+				controls: _d(k),
+				active: k.length > 0,
+				cancellation: () => lc?.cancelHealth()
 			}),
 			...Np({
 				store: R,
 				log: Z,
-				workflows: A,
+				workflows: k,
 				workflowsProxy: V,
-				workflowRuntime: q,
-				workflowRunRecorder: Js,
-				closeChildrenForParent: Ys,
-				onRunUpdated: (e) => w.emit("workflowRuns", {
+				workflowRuntime: J,
+				workflowRunRecorder: qs,
+				closeChildrenForParent: Js,
+				onRunUpdated: (e) => C.emit("workflowRuns", {
 					op: "update",
-					row: Us(e)
+					row: Hs(e)
 				})
 			}),
 			inspectInferences: async (e) => Bd({
 				store: R,
-				active: A.length > 0,
-				dispatcher: () => pc?.health()
+				active: k.length > 0,
+				dispatcher: () => fc?.health()
 			}, e.limit === void 0 ? {} : { limit: e.limit }),
 			...Pd({
 				store: R,
-				cancelRun: async (e) => await cc()?.(e) ?? !1,
+				cancelRun: async (e) => await sc()?.(e) ?? !1,
 				retryRun: async (e) => V?.retry(e),
-				redriveRun: async (e) => Lc({ runId: e }),
+				redriveRun: async (e) => Ic({ runId: e }),
 				log: Z
 			}),
-			inspectRedriveWorkflowRun: Lc,
+			inspectRedriveWorkflowRun: Ic,
 			inspectResumeWorkflowRunFromStep: async (e) => {
 				let t = await ep({
 					store: R,
-					workflows: A,
-					runResume: (e) => q.runPromise(ei(e))
+					workflows: k,
+					runResume: (e) => J.runPromise(ei(e))
 				}, e.runId, e.step);
-				return t.statusReset && (await Pc(e.runId), await Js.recordEvent({
+				return t.statusReset && (await Nc(e.runId), await qs.recordEvent({
 					runId: e.runId,
 					eventType: "run-redriven",
 					payload: {
@@ -8640,54 +8654,54 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			scheduleCoordChoice: oa
 		}),
 		runSeed: async (e) => {
-			let n = await se(Ti.seeds, e, R, wi);
-			return t.recordSeedResult(n), Mc();
+			let n = await ce(Ti.seeds, e, R, wi);
+			return t.recordSeedResult(n), jc();
 		},
-		rollbackMigration: async (e) => (wi.warn("rollbackMigration called but only memory store is wired — no-op"), Mc()),
+		rollbackMigration: async (e) => (wi.warn("rollbackMigration called but only memory store is wired — no-op"), jc()),
 		webhooks: () => xm({
 			store: R,
-			discoveredWebhooks: za
+			discoveredWebhooks: H
 		}),
 		...Ii === void 0 ? {} : { webhookActions: Gm(() => Ii) }
 	}, Vc = np({
-		plugins: j?.plugins ?? [],
-		metrics: bs,
+		plugins: A?.plugins ?? [],
+		metrics: ys,
 		log: Z
-	}), Hc = (j?.plugins ?? []).flatMap((e) => e.httpRoutes ?? []), Jc = typeof yt == "object" ? yt.managementPath : void 0, X = () => `public-${Math.random().toString(36).slice(2, 10)}`, Qc = [
-		...E.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+	}), Hc = (A?.plugins ?? []).flatMap((e) => e.httpRoutes ?? []), Jc = typeof yt == "object" ? yt.managementPath : void 0, X = () => `public-${Math.random().toString(36).slice(2, 10)}`, Qc = [
+		...T.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => Rs(e, t, {
+			invoke: (t, n) => Ls(e, t, {
 				subject: n.subject,
 				traceId: X()
 			}),
-			subscribe: (t, n, r) => zs(e, t, {
+			subscribe: (t, n, r) => Rs(e, t, {
 				subject: n.subject,
 				traceId: X()
 			}, r)
 		})),
-		...D.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+		...E.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => Es(e, t, {
+			invoke: (t, n) => Ts(e, t, {
 				subject: n.subject,
 				traceId: X()
 			})
 		})),
-		...O.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+		...D.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => Ds(e, t, {
+			invoke: (t, n) => Es(e, t, {
 				subject: n.subject,
 				traceId: X()
 			})
 		}))
 	], $c = Zc({
-		restRoutes: [...j?.restRoutes ?? [], ...xt ? na(xt, Jc ?? "/v1/api-keys") : []],
+		restRoutes: [...A?.restRoutes ?? [], ...xt ? na(xt, Jc ?? "/v1/api-keys") : []],
 		publicApiEntries: Qc,
 		store: R,
 		resolveSubject: async (e) => (await Rt({
 			headers: e,
 			clientId: -1
 		})).subject,
-		...Bs === void 0 ? {} : { idempotency: Bs },
+		...zs === void 0 ? {} : { idempotency: zs },
 		log: Z
 	}).httpRoutes, el = [
 		...Hc,
@@ -8695,31 +8709,31 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		...or.httpRoutes
 	];
 	try {
-		await ee(C, "voltro dev (api)");
+		await ee(S, "voltro dev (api)");
 	} catch (e) {
 		Z.error(String(e.message ?? e)), process.exit(1);
 	}
-	let { server: tl } = as({
-		group: ko,
-		handlersLayer: mc,
-		httpHandlersLayer: gc,
-		port: C,
-		path: j?.transport?.wsPath ?? "/ws",
-		security: iu(j),
+	let { server: tl } = is({
+		group: Oo,
+		handlersLayer: pc,
+		httpHandlersLayer: hc,
+		port: S,
+		path: A?.transport?.wsPath ?? "/ws",
+		security: iu(A),
 		...Vc,
 		...el.length > 0 ? { httpRoutes: el } : {},
 		getStore: () => vt.current,
 		inspectRoute: { handle: async (e, t, n, r) => {
-			let i = Je(t.host, k(t.origin));
+			let i = Ye(t.host, O(t.origin));
 			if (i) return i;
 			if (n !== "OPTIONS") {
-				if (Ke()) return {
+				if (qe()) return {
 					status: 503,
 					contentType: "application/json",
 					body: JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }),
-					headers: k(t.origin)
+					headers: O(t.origin)
 				};
-				let e = $e(t, n);
+				let e = et(t, n);
 				if (!e.ok) return {
 					status: 401,
 					contentType: "application/json",
@@ -8727,7 +8741,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 						error: "unauthorized",
 						reason: e.reason
 					}),
-					headers: k(t.origin)
+					headers: O(t.origin)
 				};
 			}
 			if (n === "GET" && e === "/_voltro/inspect/plugins/dashboard-mounts") return {
@@ -8737,43 +8751,43 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 					mounts: Yt,
 					capturedAt: Date.now()
 				}),
-				headers: k(t.origin)
+				headers: O(t.origin)
 			};
-			if (n === "POST" && (e === "/_voltro/inspect/invoke" || e.startsWith("/_voltro/inspect/invoke?"))) return ut(Y, t, r ?? "", { method: n });
-			let a = await km(e, Y, t, {
+			if (n === "POST" && (e === "/_voltro/inspect/invoke" || e.startsWith("/_voltro/inspect/invoke?"))) return dt(zc, t, r ?? "", { method: n });
+			let a = await km(e, zc, t, {
 				method: n,
 				...r === void 0 ? {} : { body: r }
 			});
 			if (a) return a;
 			if (n === "POST" && e.startsWith("/_voltro/inspect/")) {
-				let i = rt(e, Y, t, r ?? "", { method: n });
+				let i = it(e, zc, t, r ?? "", { method: n });
 				if (e === "/_voltro/inspect/seeds/run" || e === "/_voltro/inspect/migrations/rollback") return i;
 			}
 			if (n === "POST" && e === "/_voltro/inspect/clientLog") return {
-				...l(r ?? "", w),
-				headers: k(t.origin)
+				...l(r ?? "", C),
+				headers: O(t.origin)
 			};
 			if (n === "GET" && (e === "/_voltro/inspect/logs" || e.startsWith("/_voltro/inspect/logs?"))) return {
 				...d(e, c(), t),
-				headers: k(t.origin)
+				headers: O(t.origin)
 			};
 			if (n === "GET" && (e === "/_voltro/inspect/traces" || e.startsWith("/_voltro/inspect/traces?"))) {
 				let n = Qp();
 				return {
-					...Bp(e, J === "postgres" && im() ? await Yh(e, n, R) : n),
-					headers: k(t.origin)
+					...Bp(e, Y === "postgres" && im() ? await Yh(e, n, R) : n),
+					headers: O(t.origin)
 				};
 			}
 			if ((n === "POST" || n === "PATCH" || n === "DELETE") && e.startsWith("/_voltro/inspect/data/rows")) {
-				let i = await mt(e, Y, t, r ?? "", { method: n });
+				let i = await ht(e, zc, t, r ?? "", { method: n });
 				if (i) return i;
 			}
 			if (n === "POST" && e.startsWith("/_voltro/inspect/data/import")) {
-				let i = await tt(e, Y, t, r ?? "", { method: n });
+				let i = await nt(e, zc, t, r ?? "", { method: n });
 				if (i) return i;
 			}
 			if (e.startsWith("/_voltro/inspect/aggregates")) {
-				let r = await Lu(e, n, Zi.registry, k(t.origin));
+				let r = await Lu(e, n, Zi.registry, O(t.origin));
 				if (r) return r;
 			}
 			if (e.startsWith("/_voltro/inspect/expectations") || e.startsWith("/_voltro/inspect/budgets") || e.startsWith("/_voltro/inspect/experiments")) {
@@ -8781,67 +8795,67 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 					expectations: Qi?.registry ?? Hu,
 					cost: $i?.registry ?? Uu,
 					experiments: ea?.registry ?? Wu
-				}, k(t.origin));
+				}, O(t.origin));
 				if (r) return r;
 			}
 			if (e.startsWith("/_voltro/inspect/timeline")) {
 				let r = await od(e, n, {
 					recorder: Ia(),
-					readCurrentRows: async (e) => Y.inspectRows === void 0 ? [] : (await Y.inspectRows({
+					readCurrentRows: async (e) => zc.inspectRows === void 0 ? [] : (await zc.inspectRows({
 						table: e,
 						offset: 0,
 						limit: 500,
 						count: "none"
 					})).rows
-				}, k(t.origin));
+				}, O(t.origin));
 				if (r) return r;
 			}
 			if (e.startsWith("/_voltro/inspect/analytics")) {
 				let r = ed(e, n, {
 					sink: di,
-					metricsCollector: bs
-				}, k(t.origin));
+					metricsCollector: ys
+				}, O(t.origin));
 				if (r) return r;
 			}
 			if (e.startsWith("/_voltro/inspect/plugins/")) {
 				let i = await Jt.dispatch(e, n, t, r ?? "");
 				if (i) return i;
 			}
-			return n === "GET" ? lt(e, Y, t, { method: n }).then((r) => r ?? at(e, Y, t, { method: n })) : at(e, Y, t, { method: n });
+			return n === "GET" ? ut(e, zc, t, { method: n }).then((r) => r ?? ot(e, zc, t, { method: n })) : ot(e, zc, t, { method: n });
 		} },
 		inspectStream: {
-			authorize: (e) => Ye(e.host) ? $e(e, "GET") : {
+			authorize: (e) => Xe(e.host) ? et(e, "GET") : {
 				ok: !1,
 				reason: "forbidden host (DNS-rebinding guard)"
 			},
-			isDisabled: () => Ke(),
-			replay: () => w.buffered().map(p),
-			subscribe: (e) => w.subscribe((t) => e(p(t))),
-			corsHeaders: (e) => k(e),
+			isDisabled: () => qe(),
+			replay: () => C.buffered().map(p),
+			subscribe: (e) => C.subscribe((t) => e(p(t))),
+			corsHeaders: (e) => O(e),
 			keepAlive: () => m()
 		},
-		webhookRoutes: new Map(Array.from(Ba.entries()).map(([e, t]) => [e, { handle: t }])),
+		webhookRoutes: new Map(Array.from(za.entries()).map(([e, t]) => [e, { handle: t }])),
 		...er ? { tracerLayer: er } : {}
 	});
 	try {
 		await da(tl);
 	} catch (e) {
-		Z.error(`rpc server failed to bind on port ${C} — aborting boot`, { port: C }, e), process.exit(1);
+		Z.error(`rpc server failed to bind on port ${S} — aborting boot`, { port: S }, e), process.exit(1);
 	}
-	Z.info(`listening on http://localhost:${C}`, {
-		port: C,
-		ws: `ws://localhost:${C}/ws`,
-		store: J
-	}), Ce?.set({ phase: "ready" }), process.send?.({ type: ll }), process.channel?.unref(), J === "postgres" && Z.info("postgres change-data-capture", { enabled: (process.env.CDC ?? "1") !== "0" }), await $o();
+	Z.info(`listening on http://localhost:${S}`, {
+		port: S,
+		ws: `ws://localhost:${S}/ws`,
+		store: Y
+	}), we?.set({ phase: "ready" }), process.send?.({ type: ll }), process.channel?.unref(), Y === "postgres" && Z.info("postgres change-data-capture", { enabled: (process.env.CDC ?? "1") !== "0" }), await Qo();
 	try {
 		await Nt({
-			id: ae,
-			name: ie,
+			id: oe,
+			name: ae,
 			kind: "api",
-			url: `http://localhost:${C}`,
+			url: `http://localhost:${S}`,
 			pid: process.pid,
 			status: "live",
-			logFile: de.path
+			logFile: fe.path
 		});
 		let e = s(n);
 		if (e) {
@@ -8850,21 +8864,21 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 		}
 		setInterval(() => {
 			Nt({
-				id: ae,
-				name: ie,
+				id: oe,
+				name: ae,
 				kind: "api",
-				url: `http://localhost:${C}`,
+				url: `http://localhost:${S}`,
 				pid: process.pid,
 				status: "live",
-				logFile: de.path
+				logFile: fe.path
 			}).catch(() => {});
 		}, 1e4).unref();
 		let t = async () => {
 			Kt.deactivate();
 			for (let e of xr) e.stop();
-			gr?.dispose(), Pt(ae), de.dispose(), Yr(), Nr?.close(), await _i();
+			gr?.dispose(), Pt(oe), fe.dispose(), Yr(), Nr?.close(), await _i();
 		};
-		U(t);
+		W(t);
 		let r = process.ppid;
 		if (r > 1) {
 			let e = setInterval(() => {
@@ -8875,7 +8889,7 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 	} catch (e) {
 		Z.warn("runtime-registry write failed", {}, e);
 	}
-	return b(e, Z, {
+	return y(e, Z, {
 		root: n,
 		onBeforeRestart: () => {
 			try {
@@ -8884,15 +8898,15 @@ ${r.join("\n")}\n  A deployment with no producer waits forever and looks exactly
 			tl.close();
 		}
 	}), Qt({
-		app: ie,
+		app: ae,
 		kind: "api",
-		url: `http://localhost:${C}`,
+		url: `http://localhost:${S}`,
 		extras: [{
 			label: "WS",
-			url: `ws://localhost:${C}/ws`
+			url: `ws://localhost:${S}/ws`
 		}],
 		bootMs: Date.now() - g
 	}), new Promise(() => {});
 };
 //#endregion
-export { pf as $, pl as $t, vm as A, lu as At, np as B, zl as Bt, Hm as C, zu as Ct, km as D, yu as Dt, Mm as E, Mu as Et, Mp as F, eu as Ft, Wf as G, Nl as Gt, $f as H, Rl as Ht, Np as I, Yl as It, Af as J, Tl as Jt, Hf as K, kl as Kt, kp as L, Kl as Lt, mm as M, su as Mt, hm as N, au as Nt, xm as O, fu as Ot, im as P, iu as Pt, mf as Q, _l as Qt, Ap as R, Hl as Rt, Gm as S, tc as Sn, Bu as St, Am as T, ju as Tt, ep as U, Fl as Ut, Xf as V, Bl as Vt, Zf as W, Il as Wt, vf as X, Sl as Xt, gf as Y, bl as Yt, ff as Z, vl as Zt, vh as _, fc as _n, dd as _t, Uh as a, qc as an, $d as at, Um as b, oc as bn, Hu as bt, Qh as c, Uc as cn, Yd as ct, cg as d, Ic as dn, Wd as dt, hl as en, uf as et, Fh as f, kc as fn, Bd as ft, ph as g, dc as gn, pd as gt, mh as h, Sc as hn, bd as ht, ng as i, Kc as in, tf as it, pm as j, cu as jt, _m as k, _u as kt, Zh as l, Bc as ln, qd as lt, wh as m, Ec as mn, _d as mt, Ah as n, Xc as nn, of as nt, Q as o, Gc as on, ef as ot, rg as p, Ac as pn, Pd as pt, Ff as q, Dl as qt, kh as r, Yc as rn, nf as rt, Nh as s, Wc as sn, Zd as st, Eh as t, Zc as tn, cf as tt, Xh as u, Rc as un, Hd as ut, bh as v, lc as vn, fd as vt, Nm as w, Vu as wt, Wm as x, ec as xn, Wu as xt, qm as y, ic as yn, Uu as yt, up as z, Wl as zt };
+export { pf as $, pl as $t, vm as A, lu as At, np as B, zl as Bt, Hm as C, zu as Ct, km as D, yu as Dt, Mm as E, Mu as Et, Mp as F, eu as Ft, Wf as G, Nl as Gt, $f as H, Rl as Ht, Np as I, Yl as It, Af as J, Tl as Jt, Hf as K, kl as Kt, kp as L, Kl as Lt, mm as M, su as Mt, hm as N, au as Nt, xm as O, fu as Ot, im as P, iu as Pt, mf as Q, _l as Qt, Ap as R, Hl as Rt, Gm as S, ec as Sn, Bu as St, Am as T, ju as Tt, ep as U, Fl as Ut, Xf as V, Bl as Vt, Zf as W, Il as Wt, vf as X, Sl as Xt, gf as Y, bl as Yt, ff as Z, vl as Zt, vh as _, dc as _n, dd as _t, Uh as a, qc as an, $d as at, Um as b, ac as bn, Hu as bt, Qh as c, Uc as cn, Yd as ct, cg as d, Fc as dn, Wd as dt, hl as en, uf as et, Fh as f, Oc as fn, Bd as ft, ph as g, uc as gn, pd as gt, mh as h, xc as hn, bd as ht, ng as i, Kc as in, tf as it, pm as j, cu as jt, _m as k, _u as kt, Zh as l, Bc as ln, qd as lt, wh as m, Tc as mn, _d as mt, Ah as n, Xc as nn, of as nt, Q as o, Gc as on, ef as ot, rg as p, kc as pn, Pd as pt, Ff as q, Dl as qt, kh as r, Yc as rn, nf as rt, Nh as s, Wc as sn, Zd as st, Eh as t, Zc as tn, cf as tt, Xh as u, Lc as un, Hd as ut, bh as v, cc as vn, fd as vt, Nm as w, Vu as wt, Wm as x, $s as xn, Wu as xt, qm as y, rc as yn, Uu as yt, up as z, Wl as zt };