@voltro/cli 0.44.1 → 0.45.0

package/dist/{serveCommand-BlnAlNQg.js → serveCommand-BBhT2U94.js}

@@ -3,46 +3,46 @@ import { t } from "./frameworkInspectState-CX2250XB.js";
 import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
-import { $ as s, $t as c, A as l, At as u, B as d, C as ee, Ct as f, D as p, Dt as te, E as ne, Et as m, F as h, Ft as g, G as _, Gt as re, H as ie, I as ae, It as oe, J as se, Jt as v, K as ce, Kt as y, L as le, Lt as ue, M as de, Mt as b, N as fe, Nt as pe, O as me, Ot as he, P as ge, Pt as _e, Q as ve, Qt as ye, R as be, Rt as x, S as xe, Sn as Se, St as Ce, T as we, Tt as Te, U as Ee, Ut as S, V as De, Vt as Oe, W as ke, Wt as Ae, X as je, Xt as Me, Y as Ne, Yt as Pe, Z as Fe, Zt as C, _ as Ie, _n as Le, _t as w, an as Re, at as ze, b as Be, bn as Ve, bt as He, c as Ue, cn as T, ct as We, dn as Ge, dt as Ke, en as qe, et as Je, f as Ye, fn as Xe, ft as Ze, g as Qe, gn as $e, gt as et, h as tt, ht as nt, i as rt, in as it, it as at, j as ot, jt as st, k as ct, kt as lt, ln as E, lt as ut, m as dt, mn as ft, mt as D, nn as O, nt as pt, o as k, on as mt, ot as ht, p as gt, pn as _t, pt as vt, q as yt, qt as bt, r as xt, rn as St, rt as Ct, sn as wt, st as Tt, t as Et, tn as Dt, tt as Ot, u as kt, un as At, ut as jt, v as Mt, vn as A, vt as j, w as M, wt as Nt, x as Pt, xn as Ft, xt as It, y as Lt, yn as Rt, yt as zt, zt as Bt } from "./dev-D-JZ6CGQ.js";
-import { n as Vt } from "./cliArgs-D4p8n7EE.js";
-import { r as Ht } from "./appPort-B_HpJ_ck.js";
-import { ht as Ut, pt as N } from "./webDev-101csg6Q.js";
-import { r as P } from "./dialectDriver-czCHYpeH.js";
-import { i as Wt, n as Gt } from "./connectionConfig-Bk9IC7D0.js";
-import { c as Kt, n as qt, o as Jt } from "./seedRunner-IdHEprqf.js";
-import { C as F, S as Yt, _ as Xt, d as Zt, g as Qt, l as $t, m as en, r as tn, u as nn, v as rn } from "./frameworkTableAssembly-oMPBKqlE.js";
-import { S as an, c as on, n as sn, p as cn, s as ln, x as un } from "./fileConventions-Cof68_BL.js";
-import { h as dn, o as fn } from "./inspect-B7U7Cl_Z.js";
-import { n as pn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as mn, n as hn, r as gn, t as _n } from "./webhookDiscovery-CphsQe59.js";
-import { t as vn } from "./inspectMetrics-CfdKLh6t.js";
-import { r as yn, u as bn } from "./apiBuild-DvWreIQP.js";
-import { t as xn } from "./bootTiming-BdyP9nYw.js";
-import { t as Sn } from "./dataProfile-Cm0YVKSy.js";
-import I, { basename as Cn, join as wn } from "node:path";
-import { createWriteStream as Tn, existsSync as En } from "node:fs";
-import { pathToFileURL as Dn } from "node:url";
-import { createLogger as L } from "@voltro/logger";
-import { AuthMiddleware as On, ConnectionInfoMiddleware as kn, actionToRpc as R, anonymousSubject as An, isWireReachable as jn, mutationToRpc as Mn, queryToRpc as z, streamToRpc as Nn, wireErrorUnion as Pn, workflowCancelDescriptor as Fn, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as In, workflowRunEventsQueryDescriptor as Ln, workflowRunQueryDescriptor as Rn, workflowRunStepsQueryDescriptor as zn, workflowRunsQueryDescriptor as Bn, workflowSignalDescriptor as Vn, workflowUpdateDescriptor as Hn } from "@voltro/protocol";
-import { Cause as Un, Effect as H, Layer as U, ManagedRuntime as Wn } from "effect";
-import { SqlClient as Gn } from "@effect/sql";
-import { declaredSnapshot as Kn, describeOutcome as qn, pendingFileMigrationIds as Jn, runPlannedMigrations as Yn } from "@voltro/database/sql";
+import { $ as s, $t as c, A as l, At as u, B as d, C as ee, Cn as f, Ct as p, D as te, Dt as ne, E as m, Et as h, F as re, Ft as ie, G as g, Gt as ae, H as oe, I as se, It as ce, J as le, Jt as _, K as ue, Kt as v, L as de, Lt as y, M as fe, Mt as pe, N as me, Nt as he, O as ge, Ot as _e, P as ve, Pt as ye, Q as be, Qt as xe, R as b, Rt as Se, S as Ce, Sn as we, St as Te, T as x, Tn as Ee, Tt as De, U as Oe, Ut as ke, V as Ae, Vt as je, W as Me, Wt as Ne, X as Pe, Xt as Fe, Y as Ie, Yt as S, Z as Le, Zt as C, _ as Re, _n as ze, _t as Be, an as Ve, at as He, b as Ue, bn as We, bt as Ge, c as Ke, cn as w, ct as qe, dn as Je, dt as Ye, en as Xe, et as Ze, f as Qe, fn as $e, ft as et, g as tt, gn as nt, gt as rt, h as it, ht as at, i as ot, in as st, it as ct, j as lt, jt as ut, k as T, kt as dt, ln as ft, lt as pt, m as E, mn as D, mt, nn as ht, nt as gt, o as O, on as _t, ot as vt, p as yt, pn as bt, pt as xt, q as St, qt as Ct, r as wt, rn as Tt, rt as Et, sn as Dt, st as Ot, t as kt, tn as At, tt as jt, u as k, un as A, ut as Mt, v as Nt, vn as j, vt as Pt, w as Ft, wn as It, wt as Lt, x as Rt, xt as zt, y as Bt, yn as Vt, yt as Ht, zt as Ut } from "./dev-DAM5CnAa.js";
+import { n as Wt } from "./cliArgs-D4p8n7EE.js";
+import { r as M } from "./appPort-B_HpJ_ck.js";
+import { ht as Gt, pt as Kt } from "./webDev-101csg6Q.js";
+import { r as N } from "./dialectDriver-czCHYpeH.js";
+import { i as qt, n as Jt } from "./connectionConfig-Bk9IC7D0.js";
+import { c as Yt, n as P, o as Xt } from "./seedRunner-IdHEprqf.js";
+import { C as Zt, S as Qt, _ as $t, d as en, g as tn, l as nn, m as rn, r as an, u as on, v as sn } from "./frameworkTableAssembly-oMPBKqlE.js";
+import { S as cn, c as ln, n as un, p as dn, s as fn, x as pn } from "./fileConventions-Cof68_BL.js";
+import { h as mn, o as hn } from "./inspect-B7U7Cl_Z.js";
+import { n as gn } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as _n, n as vn, r as yn, t as bn } from "./webhookDiscovery-CphsQe59.js";
+import { t as xn } from "./inspectMetrics-CfdKLh6t.js";
+import { r as Sn, u as Cn } from "./apiBuild-CDQBNRDx.js";
+import { t as wn } from "./bootTiming-BdyP9nYw.js";
+import { t as Tn } from "./dataProfile-Cm0YVKSy.js";
+import F, { basename as En, join as Dn } from "node:path";
+import { createWriteStream as On, existsSync as kn } from "node:fs";
+import { pathToFileURL as An } from "node:url";
+import { createLogger as I } from "@voltro/logger";
+import { AuthMiddleware as jn, ConnectionInfoMiddleware as Mn, actionToRpc as L, anonymousSubject as Nn, isWireReachable as Pn, mutationToRpc as Fn, queryToRpc as R, streamToRpc as In, wireErrorUnion as z, workflowCancelDescriptor as Ln, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as Rn, workflowRunEventsQueryDescriptor as zn, workflowRunQueryDescriptor as Bn, workflowRunStepsQueryDescriptor as Vn, workflowRunsQueryDescriptor as Hn, workflowSignalDescriptor as Un, workflowUpdateDescriptor as Wn } from "@voltro/protocol";
+import { Cause as Gn, Effect as H, Layer as U, ManagedRuntime as Kn } from "effect";
+import { SqlClient as qn } from "@effect/sql";
+import { declaredSnapshot as Jn, describeOutcome as Yn, pendingFileMigrationIds as Xn, runPlannedMigrations as Zn } from "@voltro/database/sql";
 import W from "node:os";
-import { RpcGroup as Xn } from "@effect/rpc";
-import { allRegisteredTables as Zn, and as Qn, connectionIdentity as $n, ensureTableRegistered as er, eq as G, or as tr } from "@voltro/database";
-import { AggregateRegistry as nr, CostRegistry as K, DORMANCY_WAKEUP_TENANT as rr, Dispatcher as ir, ExpectationRegistry as ar, ExperimentRegistry as or, apiKeyManagementRoutes as sr, attachAnalyticsMirror as cr, attachExpectations as lr, attachExperiments as ur, attachFinops as dr, awaitServerListening as fr, bindMutation as q, bindStream as pr, bindSubscription as J, buildTracingLayer as mr, cancelWakeup as hr, compileCron as gr, dataStoreApiKeyStore as _r, formatServerOnlyLeaks as vr, formatUnresolvedSources as yr, frameworkApiKeyStrategy as br, getResourcePolicy as xr, installPolicyGuardResolver as Sr, loadResourceTuples as Cr, makeActionRunner as wr, makeAdvisoryLockCoordinator as Tr, makeApiKeyService as Er, makeApiKeyUsageBuffer as Dr, makeApiKeyUsageFlusher as Or, makeAsyncKv as kr, makeAuthMiddlewareLayers as Ar, makeCoordinatedScheduler as jr, makeEffectStoreLayer as Mr, makeLazyWorkflowFacade as Nr, makeMutationOutputCodec as Pr, makeMutationRunner as Fr, makeOneShotQueryRunner as Ir, makeQueryDescriptorProducer as Lr, makeQueryFinalizer as Rr, makeQueryReauthorizer as Y, makeQuerySubscriber as zr, makeSchemaRegistry as Br, makeWorkflowFacade as Vr, makeWorkflowFacadeWithCallerContext as Hr, makeWorkflowLayers as Ur, noopKv as Wr, onProcessShutdown as Gr, recordSubscriptionDelivery as Kr, recordWorkflowRun as qr, registerDefaultTupleSource as X, registerWakeup as Jr, resolveSecretsBackend as Yr, runProvidedEffect as Xr, setSecretsBackend as Zr, setSystemStoreHandle as Qr, shutdownGraceMsFromEnv as $r, singleCoordinator as ei, startRpcServer as ti, startScheduler as ni, stripForbiddenForWire as ri, undoCaptureEnabled as ii, unresolvedSources as ai, withScopedRequest as oi, workflowToRpc as si, wrapStoreWithBootCodec as ci } from "@voltro/runtime";
-import { appStorageProvider as li, fromNodeReadable as ui, getObjectStream as di, putObjectStream as fi, toNodeReadable as pi } from "@voltro/plugin-storage";
-import { isEnvContract as mi } from "@voltro/env";
-import { assertProductionSessionSecret as hi } from "@voltro/protocol/session";
+import { RpcGroup as Qn } from "@effect/rpc";
+import { allRegisteredTables as $n, and as er, connectionIdentity as tr, ensureTableRegistered as nr, eq as G, or as rr } from "@voltro/database";
+import { AggregateRegistry as ir, CostRegistry as K, DORMANCY_WAKEUP_TENANT as ar, Dispatcher as or, ExpectationRegistry as sr, ExperimentRegistry as cr, apiKeyManagementRoutes as lr, attachAnalyticsMirror as ur, attachExpectations as dr, attachExperiments as fr, attachFinops as pr, awaitServerListening as mr, bindMutation as q, bindStream as hr, bindSubscription as J, buildTracingLayer as gr, cancelWakeup as _r, compileCron as vr, dataStoreApiKeyStore as yr, formatServerOnlyLeaks as br, formatUnresolvedSources as xr, frameworkApiKeyStrategy as Sr, getResourcePolicy as Cr, installPolicyGuardResolver as wr, loadResourceTuples as Tr, makeActionRunner as Er, makeAdvisoryLockCoordinator as Dr, makeApiKeyService as Or, makeApiKeyUsageBuffer as kr, makeApiKeyUsageFlusher as Ar, makeAsyncKv as jr, makeAuthMiddlewareLayers as Mr, makeCoordinatedScheduler as Nr, makeEffectStoreLayer as Pr, makeLazyWorkflowFacade as Fr, makeMutationOutputCodec as Ir, makeMutationRunner as Lr, makeOneShotQueryRunner as Rr, makeQueryDescriptorProducer as zr, makeQueryFinalizer as Br, makeQueryReauthorizer as Y, makeQuerySubscriber as Vr, makeSchemaRegistry as Hr, makeWorkflowFacade as Ur, makeWorkflowFacadeWithCallerContext as Wr, makeWorkflowLayers as Gr, noopKv as Kr, onProcessShutdown as qr, recordSubscriptionDelivery as Jr, recordWorkflowRun as Yr, registerDefaultTupleSource as X, registerWakeup as Xr, resolveSecretsBackend as Zr, runProvidedEffect as Qr, setSecretsBackend as $r, setSystemStoreHandle as ei, shutdownGraceMsFromEnv as ti, singleCoordinator as ni, startRpcServer as ri, startScheduler as ii, stripForbiddenForWire as ai, undoCaptureEnabled as oi, unresolvedSources as si, withScopedRequest as ci, workflowToRpc as li, wrapStoreWithBootCodec as ui } from "@voltro/runtime";
+import { appStorageProvider as di, fromNodeReadable as fi, getObjectStream as pi, putObjectStream as mi, toNodeReadable as hi } from "@voltro/plugin-storage";
+import { isEnvContract as gi } from "@voltro/env";
+import { assertProductionSessionSecret as _i } from "@voltro/protocol/session";
 import Z from "node:fs/promises";
-import { createHash as gi, timingSafeEqual as _i } from "node:crypto";
-import { buildDeliverWebhookExecute as vi, buildWebhooksService as yi, defaultIncomingPath as bi, deliverWebhookWorkflow as xi, makeDeferredEmitHandler as Si, mountIncomingWebhook as Ci } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as wi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as Ti } from "@voltro/plugin-mail";
-import { channelFor as Ei, getBroadcastPlugin as Di } from "@voltro/plugin-broadcast";
-import { packBundle as Oi, runExport as ki, runImport as Ai, storageBlobSink as ji, storageRefsBlobSource as Mi, unpackBundle as Ni, unpackBundleToDir as Pi } from "@voltro/data-transfer";
+import { createHash as vi, timingSafeEqual as yi } from "node:crypto";
+import { buildDeliverWebhookExecute as bi, buildWebhooksService as xi, defaultIncomingPath as Si, deliverWebhookWorkflow as Ci, makeDeferredEmitHandler as wi, mountIncomingWebhook as Ti } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as Ei } from "@voltro/plugin-auth";
+import { registerEmailTemplates as Di } from "@voltro/plugin-mail";
+import { channelFor as Oi, getBroadcastPlugin as ki } from "@voltro/plugin-broadcast";
+import { packBundle as Ai, runExport as ji, runImport as Mi, storageBlobSink as Ni, storageRefsBlobSource as Pi, unpackBundle as Fi, unpackBundleToDir as Ii } from "@voltro/data-transfer";
 //#region src/serveDrain.ts
-var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t) => setTimeout(t, e)), Li = (e) => {
+var Li = () => Math.max(500, Math.floor(ti() * .6)), Ri = (e) => new Promise((t) => setTimeout(t, e)), zi = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -56,14 +56,14 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? Fi();
+		let n = t.budgetMs ?? Li();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await Ii(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await Ri(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -80,7 +80,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await Ii(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await Ri(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -92,96 +92,96 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			await a(e), await o();
 		}
 	};
-}, Ri = "/_voltro/admin/import", zi = "/_voltro/admin/export", Q = (e, t) => ({
+}, Bi = "/_voltro/admin/import", Vi = "/_voltro/admin/export", Q = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), Bi = (e) => {
+}), Hi = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, Vi = (e, t) => _i(gi("sha256").update(e).digest(), gi("sha256").update(t).digest()), Hi = (e, t) => {
+}, Ui = (e, t) => yi(vi("sha256").update(e).digest(), vi("sha256").update(t).digest()), Wi = (e, t) => {
 	if (e.method.toUpperCase() !== "POST") return Q(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Q(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let n = Bi(e.headers);
-	return !n || !Vi(n, t) ? Q(401, { error: "unauthorized" }) : null;
-}, Ui = /^[A-Za-z0-9_-]{8,64}$/, Wi = (e) => Ui.test(e), Gi = () => I.join(W.tmpdir(), "voltro-import-uploads"), Ki = (e) => I.join(Gi(), e), qi = (e) => I.join(Ki(e), "archive.bin"), Ji = (e) => I.join(Ki(e), "meta.json"), Yi = async (e = Date.now()) => {
+	let n = Hi(e.headers);
+	return !n || !Ui(n, t) ? Q(401, { error: "unauthorized" }) : null;
+}, Gi = /^[A-Za-z0-9_-]{8,64}$/, Ki = (e) => Gi.test(e), qi = () => F.join(W.tmpdir(), "voltro-import-uploads"), Ji = (e) => F.join(qi(), e), Yi = (e) => F.join(Ji(e), "archive.bin"), Xi = (e) => F.join(Ji(e), "meta.json"), Zi = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await Z.readdir(Gi())) {
-			let r = await Z.stat(Ki(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await Z.rm(Ki(n), {
+		for (let n of await Z.readdir(qi())) {
+			let r = await Z.stat(Ji(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await Z.rm(Ji(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, Xi = async (e) => {
-	if (!Wi(e)) return {
+}, Qi = async (e) => {
+	if (!Ki(e)) return {
 		bytes: 0,
 		key: null
 	};
-	let t = await Z.stat(qi(e)).catch(() => null);
+	let t = await Z.stat(Yi(e)).catch(() => null);
 	if (t === null) return {
 		bytes: 0,
 		key: null
 	};
-	let n = await Z.readFile(Ji(e), "utf8").then((e) => JSON.parse(e), () => ({}));
+	let n = await Z.readFile(Xi(e), "utf8").then((e) => JSON.parse(e), () => ({}));
 	return {
 		bytes: t.size,
 		key: n.key ?? null
 	};
-}, Zi = async (e) => {
-	if (!Wi(e.id)) return {
+}, $i = async (e) => {
+	if (!Ki(e.id)) return {
 		reason: "bad-id",
-		message: `upload id must match ${String(Ui)}`
+		message: `upload id must match ${String(Gi)}`
 	};
-	let t = await Xi(e.id);
+	let t = await Qi(e.id);
 	return t.key !== null && t.key !== e.key ? {
 		reason: "key-mismatch",
 		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
-	} : e.offset === t.bytes ? (await Z.mkdir(Ki(e.id), { recursive: !0 }), t.key === null && await Z.writeFile(Ji(e.id), JSON.stringify({
+	} : e.offset === t.bytes ? (await Z.mkdir(Ji(e.id), { recursive: !0 }), t.key === null && await Z.writeFile(Xi(e.id), JSON.stringify({
 		key: e.key,
 		startedAt: (/* @__PURE__ */ new Date()).toISOString()
 	})), await new Promise((t, n) => {
-		let r = Tn(qi(e.id), { flags: "a" });
+		let r = On(Yi(e.id), { flags: "a" });
 		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
 	}), { total: t.bytes + e.bytes.byteLength }) : {
 		reason: "offset-mismatch",
 		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
 		expectedOffset: t.bytes
 	};
-}, Qi = async (e) => {
-	let t = await Z.stat(qi(e));
+}, ea = async (e) => {
+	let t = await Z.stat(Yi(e));
 	return {
-		path: qi(e),
+		path: Yi(e),
 		bytes: t.size
 	};
-}, $i = async (e) => {
-	Wi(e) && await Z.rm(Ki(e), {
+}, ta = async (e) => {
+	Ki(e) && await Z.rm(Ji(e), {
 		recursive: !0,
 		force: !0
 	}).catch(() => void 0);
-}, ea = L({ scope: "voltro:admin-import" }), ta = "VBUNDLE2", na = async function* (e) {
+}, na = I({ scope: "voltro:admin-import" }), ra = "VBUNDLE2", ia = async function* (e) {
 	yield e;
-}, ra = (e) => async (t) => {
-	let n = Hi(t, e.secret);
+}, aa = (e) => async (t) => {
+	let n = Wi(t, e.secret);
 	if (n) return n;
 	let r = t.headers["x-import-mode"], i = t.headers["x-import-on-conflict"], a = t.headers["x-import-atomic"], o = a === "0" || a === "false" ? !1 : a === "1" || a === "true" || r === "replace", s = t.headers["x-import-force"] === "1" || t.headers["x-import-force"] === "true", c = t.headers["x-import-dry-run"] === "1" || t.headers["x-import-dry-run"] === "true", l = (t.headers["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean), u = t.headers["x-import-upload-id"], d;
 	if (u !== void 0 && u !== "") {
-		if (Yi(), t.headers["x-import-probe"] === "1") return Q(200, {
+		if (Zi(), t.headers["x-import-probe"] === "1") return Q(200, {
 			uploadId: u,
-			bytes: (await Xi(u)).bytes
+			bytes: (await Qi(u)).bytes
 		});
 		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
 		if (e === "" || !Number.isFinite(n) || n < 0) return Q(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
-		let r = await Zi({
+		let r = await $i({
 			id: u,
 			key: e,
 			offset: n,
 			bytes: t.rawBody
 		});
-		if ("reason" in r) return ea.warn("admin.import chunk refused", {
+		if ("reason" in r) return na.warn("admin.import chunk refused", {
 			uploadId: u,
 			reason: r.reason
 		}), Q(409, {
@@ -194,13 +194,13 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			uploadId: u,
 			bytes: r.total
 		});
-		d = (await Qi(u)).path;
+		d = (await ea(u)).path;
 	}
-	let ee = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === ta, f, p;
+	let ee = t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === ra, f, p;
 	if (d !== void 0) {
 		let { createReadStream: e } = await import("node:fs");
 		f = e(d), p = "chunked";
-	} else if (ee) f = na(t.rawBody), p = "upload";
+	} else if (ee) f = ia(t.rawBody), p = "upload";
 	else {
 		let n;
 		try {
@@ -214,11 +214,11 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 	}
 	let te = await import("node:os"), ne = await import("node:fs/promises"), m = await import("node:path"), h = await ne.mkdtemp(m.join(te.tmpdir(), "voltro-admin-import-"));
 	try {
-		e.assetSink ? await Ni(f, {
+		e.assetSink ? await Fi(f, {
 			dir: h,
 			blobs: e.assetSink
-		}) : await Pi(f, h);
-		let t = await H.runPromiseExit(Ai({
+		}) : await Ii(f, h);
+		let t = await H.runPromiseExit(Mi({
 			store: e.store,
 			bundleDir: h,
 			...r ? { mode: r } : {},
@@ -228,14 +228,14 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			...l.length > 0 ? { tables: l } : {},
 			...e.snapshot ? { targetSnapshot: e.snapshot } : {},
 			force: s,
-			onWarn: (e) => ea.warn("admin.import", { message: e }),
+			onWarn: (e) => na.warn("admin.import", { message: e }),
 			...e.assetSink ? { assetsAlreadyRestored: !0 } : {}
 		}));
 		if (t._tag === "Failure") {
 			let e = t.cause._tag === "Fail" ? t.cause.error : void 0;
 			if (e && e._tag === "SchemaDriftError") {
 				let t = e;
-				return ea.warn("admin.import refused (schema drift)", {
+				return na.warn("admin.import refused (schema drift)", {
 					transport: p,
 					bundle: t.bundleFingerprint.slice(0, 16),
 					target: t.targetFingerprint.slice(0, 16)
@@ -248,7 +248,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				});
 			}
 			let n = typeof e?.reason == "string" ? e.reason : void 0;
-			if (n !== void 0 && e._tag === "ImportModeError") return ea.warn("admin.import refused (mode)", {
+			if (n !== void 0 && e._tag === "ImportModeError") return na.warn("admin.import refused (mode)", {
 				transport: p,
 				mode: e.mode
 			}), Q(409, {
@@ -259,7 +259,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			throw Error(n ?? String(e?.message ?? e ?? "import failed"));
 		}
 		let n = t.value, a = n.manifest.tables.reduce((e, t) => e + t.rowCount, 0), u = n.rowsWritten;
-		return ea.info(c ? "admin.import (dry run — nothing written)" : "admin.import", {
+		return na.info(c ? "admin.import (dry run — nothing written)" : "admin.import", {
 			transport: p,
 			tables: n.tablesWritten,
 			rows: u,
@@ -286,7 +286,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			} : {}
 		});
 	} catch (e) {
-		return ea.warn("admin.import failed", {
+		return na.warn("admin.import failed", {
 			transport: p,
 			error: e?.message ?? String(e)
 		}), Q(500, {
@@ -297,20 +297,20 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 		await ne.rm(h, {
 			recursive: !0,
 			force: !0
-		}), u !== void 0 && u !== "" && d !== void 0 && await $i(u);
+		}), u !== void 0 && u !== "" && d !== void 0 && await ta(u);
 	}
-}, ia = L({ scope: "voltro:admin-export" }), aa = async (e) => {
+}, oa = I({ scope: "voltro:admin-export" }), sa = async (e) => {
 	let t = [];
 	for await (let n of e) t.push(Buffer.from(n));
 	return new Uint8Array(Buffer.concat(t));
-}, oa = (e) => typeof e.tenant == "string" && e.tenant ? {
+}, ca = (e) => typeof e.tenant == "string" && e.tenant ? {
 	kind: "tenant",
 	tenantId: e.tenant
 } : Array.isArray(e.tables) && e.tables.length ? {
 	kind: "tables",
 	tables: e.tables.filter((e) => typeof e == "string")
-} : { kind: "all" }, sa = (e) => async (t) => {
-	let n = Hi(t, e.secret);
+} : { kind: "all" }, la = (e) => async (t) => {
+	let n = Wi(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -330,9 +330,9 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? oa(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? ca(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = await import("node:os"), d = await import("node:fs/promises"), ee = await import("node:path"), f = await d.mkdtemp(ee.join(u.tmpdir(), "voltro-admin-export-"));
 	try {
-		let t = await H.runPromise(ki({
+		let t = await H.runPromise(ji({
 			store: e.store,
 			snapshot: e.snapshot,
 			dialect: e.dialect,
@@ -348,10 +348,10 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 		if (c) {
 			if (!e.putArchive) return Q(501, { error: "storage transport not configured on this instance" });
 			let i = r.bundleKey;
-			return await e.putArchive(i, () => Oi({
+			return await e.putArchive(i, () => Ai({
 				dir: f,
 				...l
-			})), ia.info("admin.export", {
+			})), oa.info("admin.export", {
 				transport: "storage",
 				tables: t.tables.length,
 				rows: n,
@@ -365,11 +365,11 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				transport: "storage"
 			});
 		}
-		let d = await aa(Oi({
+		let d = await sa(Ai({
 			dir: f,
 			...l
 		}));
-		return ia.info("admin.export", {
+		return oa.info("admin.export", {
 			transport: "download",
 			tables: t.tables.length,
 			rows: n,
@@ -386,7 +386,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			}
 		};
 	} catch (e) {
-		return ia.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
+		return oa.warn("admin.export failed", { error: e?.message ?? String(e) }), Q(500, {
 			error: "export failed",
 			message: e?.message ?? String(e)
 		});
@@ -396,8 +396,8 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			force: !0
 		});
 	}
-}, ca = (e, t, n = {}) => (async function* () {
-	let r = await H.runPromise(di(e, t).pipe(H.timeout(n.openTimeout ?? "30 seconds"))), i = await pi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, ua = (e, t, n = {}) => (async function* () {
+	let r = await H.runPromise(pi(e, t).pipe(H.timeout(n.openTimeout ?? "30 seconds"))), i = await hi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -406,7 +406,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), la = {
+})(), da = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -415,64 +415,64 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, ua = async (e) => {
-	Bt(e.appProcedures ?? e.discovered, {
+}, fa = async (e) => {
+	Ut(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), Qr({
+	}), ei({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new ir({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new or({
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		...e.reactive === void 0 ? {} : { reactive: e.reactive },
 		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => Kr({
+		recordDelivery: (e) => Jr({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? la, a = e.kv ?? Wr, o, c = () => void 0, l, ee, f, p, te, ne, oe, se = re({
+	}), i = e.cache ?? da, a = e.kv ?? Kr, o, c = () => void 0, l, ee, f, p, te, ne, m, ce = ae({
 		store: e.store,
 		warn: (e, t) => {
 			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
 		}
-	}), ce = se.remember, le = se.resolve, ue = y({
+	}), le = ce.remember, ue = ce.resolve, de = v({
 		authority: e.authority,
 		getStore: () => e.store
-	}), b = (e.discovered.workflows?.length ?? 0) > 0 ? Nr(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, me = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", he = e.tenantIsolation === "namespace", ge = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), ye, be, x = e.discovered.webhooks;
-	if (x && x.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+	}), y = (e.discovered.workflows?.length ?? 0) > 0 ? Fr(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, he = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ge = e.tenantIsolation === "namespace", _e = (e.log ?? I({ scope: "voltro:serve" })).child("webhooks"), ve, xe, b = e.discovered.webhooks;
+	if (b && b.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
-		let t = T({
+		let t = w({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: i,
 			kv: a
-		}), n = x.outgoing.map((e) => e.descriptor);
-		be = xi.toLayer(vi(t, { events: n })), ye = yi(t, async (e) => {
+		}), n = b.outgoing.map((e) => e.descriptor);
+		xe = Ci.toLayer(bi(t, { events: n })), ve = xi(t, async (e) => {
 			let t = f;
 			if (t === void 0) {
-				ge.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+				_e.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				});
 				return;
 			}
-			t.runPromise(xi.execute(e)).catch((t) => {
-				ge.error("deliverWebhook workflow crashed", {
+			t.runPromise(Ci.execute(e)).catch((t) => {
+				_e.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				}, t);
 			});
 		}, { events: n });
 	}
-	let xe = /* @__PURE__ */ new Map();
-	if (x) for (let e of x.incoming) {
-		let t = e.descriptor.path ?? bi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ci(e.descriptor, {
+	let Se = /* @__PURE__ */ new Map();
+	if (b) for (let e of b.incoming) {
+		let t = e.descriptor.path ?? Si(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ti(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => b === void 0 ? void 0 : Hr(b, {
+			resolveWorkflows: () => y === void 0 ? void 0 : Wr(y, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -484,34 +484,34 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 					idempotency: e.idempotency,
 					durationMs: e.durationMs
 				};
-				e.status >= 500 ? ge.error("incoming delivery failed", t) : e.status >= 400 ? ge.warn("incoming delivery rejected", t) : ge.info("incoming delivery handled", t);
+				e.status >= 500 ? _e.error("incoming delivery failed", t) : e.status >= 400 ? _e.warn("incoming delivery rejected", t) : _e.info("incoming delivery handled", t);
 			}
 		});
-		xe.set(t, { handle: r });
+		Se.set(t, { handle: r });
 	}
-	Sr(), X((t) => Cr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let Se = [], Ce = [...e.discovered.outboxHandlers ?? [], ...hn((x?.outgoing.length ?? 0) + (x?.incoming.length ?? 0) + (x?.providers.length ?? 0), []) ? [{
+	wr(), X((t) => Tr(e.store, t.subjectId, t.resourceType, t.resourceId)) || I({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	let Ce = [], we = [...e.discovered.outboxHandlers ?? [], ...vn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: Si(() => ye)
-	}] : []], we = Ce.length > 0 ? Me({
-		handlers: Ce,
+		definition: wi(() => ve)
+	}] : []], Te = we.length > 0 ? Fe({
+		handlers: we,
 		store: e.store,
-		log: (e.log ?? L({ scope: "voltro:serve" })).child("outbox"),
+		log: (e.log ?? I({ scope: "voltro:serve" })).child("outbox"),
 		onChange: (t) => e.store.onChange((e) => t({
 			table: e.table,
 			op: e.op
 		})),
 		onShutdown: (e) => {
-			Se.push(e);
+			Ce.push(e);
 		}
-	}) : void 0, S = v({
+	}) : void 0, x = _({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: bt(e.port ?? 4e3),
-		log: (e.log ?? L({ scope: "voltro:serve" })).child("connections")
+		publicUrl: Ct(e.port ?? 4e3),
+		log: (e.log ?? I({ scope: "voltro:serve" })).child("connections")
 	});
-	ot({
+	lt({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -520,201 +520,201 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let Oe = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Ae = e.broadcastNamespace ?? Qe(e.plugins, void 0), Ne = Ie(e.plugins, Ae, Oe), Pe = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Le = e.membership ?? Mt(e.plugins, {
-		instanceId: Pe,
-		namespace: Ae,
+	let Ee = (e.log ?? I({ scope: "voltro:serve" })).child("events"), ke = e.broadcastNamespace ?? tt(e.plugins, void 0), je = Re(e.plugins, ke, Ee), Ne = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ie = e.membership ?? Nt(e.plugins, {
+		instanceId: Ne,
+		namespace: ke,
 		meta: { mode: "serve" },
-		logger: Oe
-	}), w = de({
+		logger: Ee
+	}), S = fe({
 		events: e.discovered.events ?? [],
-		origin: Pe,
-		...Ne.publishRemote === void 0 ? {} : { publishRemote: Ne.publishRemote }
-	}), Re = (e.discovered.events ?? []).length > 0 ? await Ne.attach(w.bus) : null, ze = wt({
+		origin: Ne,
+		...je.publishRemote === void 0 ? {} : { publishRemote: je.publishRemote }
+	}), ze = (e.discovered.events ?? []).length > 0 ? await je.attach(S.bus) : null, Be = Dt({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
 		kv: a,
-		...ye === void 0 ? {} : { webhooksService: ye },
-		...b === void 0 ? {} : { workflowsProxy: b },
+		...ve === void 0 ? {} : { webhooksService: ve },
+		...y === void 0 ? {} : { workflowsProxy: y },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: he,
+		namespaceIsolationOn: ge,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...we === void 0 ? {} : { outbox: { nudge: we.nudge } },
-		...S.active ? { connections: { registry: S.registry } } : {},
-		eventBus: w.bus
-	}), Be = U.succeed(nr, m), Ve = U.succeed(ar, He), Ue = U.succeed(K, zt), Ge = U.succeed(or, It), qe = (t, n) => {
-		let r = t.pipe(H.provide(Mr(n)));
-		return (e.baseLayer ? r.pipe(H.provide(e.baseLayer)) : r).pipe(H.provide(Be)).pipe(H.provide(Ve)).pipe(H.provide(Ue)).pipe(H.provide(Ge));
+		...Te === void 0 ? {} : { outbox: { nudge: Te.nudge } },
+		...x.active ? { connections: { registry: x.registry } } : {},
+		eventBus: S.bus
+	}), Ve = U.succeed(ir, h), He = U.succeed(sr, Ge), Ue = U.succeed(K, Ht), We = U.succeed(cr, zt), Ke = (t, n) => {
+		let r = t.pipe(H.provide(Pr(n)));
+		return (e.baseLayer ? r.pipe(H.provide(e.baseLayer)) : r).pipe(H.provide(Ve)).pipe(H.provide(He)).pipe(H.provide(Ue)).pipe(H.provide(We));
 	}, Je = (e, t) => {
-		let n = qe(e, t);
-		return Xr(n);
-	}, Ye = vn(), Xe = yt(e.plugins ?? [], Ye), Ze = d({
+		let n = Ke(e, t);
+		return Qr(n);
+	}, Xe = xn(), Ze = St(e.plugins ?? [], Xe), Qe = d({
 		plugins: e.plugins ?? [],
-		metrics: Ye,
-		log: e.log ?? L({ scope: "voltro:serve" })
-	}), $e = _(e.plugins ?? [], Ye), et = e.security?.defaultDeny ?? !0, tt = Fr({
+		metrics: Xe,
+		log: e.log ?? I({ scope: "voltro:serve" })
+	}), $e = g(e.plugins ?? [], Xe), et = e.security?.defaultDeny ?? !0, nt = Lr({
 		store: e.store,
 		defaultDeny: et,
 		recordMetric: (e) => {
-			Ye.record(e);
+			Xe.record(e);
 		},
-		...Xe.mutation === void 0 ? {} : { interceptor: Xe.mutation },
-		buildContext: (e, t, n) => ze(e, t, n),
+		...Ze.mutation === void 0 ? {} : { interceptor: Ze.mutation },
+		buildContext: (e, t, n) => Be(e, t, n),
 		runEffect: Je,
-		undoCapture: ve()
-	}), rt = Fe();
+		undoCapture: be()
+	}), rt = Le();
 	{
 		let t = s();
-		t !== void 0 && (e.log ?? L({ scope: "voltro:serve" })).info(t);
+		t !== void 0 && (e.log ?? I({ scope: "voltro:serve" })).info(t);
 	}
-	let it = je({
+	let it = Pe({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), at = wr({
+	}), ot = Er({
 		defaultDeny: et,
-		buildContext: (e) => ze(e),
+		buildContext: (e) => Be(e),
 		runEffect: Je,
 		recordMetric: (e) => {
-			Ye.record(e);
+			Xe.record(e);
 		},
-		...Xe.action === void 0 ? {} : { interceptor: Xe.action }
-	}), ct = Rr({
+		...Ze.action === void 0 ? {} : { interceptor: Ze.action }
+	}), st = Br({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
-	}), lt = {
+	}), ct = {
 		defaultDeny: et,
-		buildContext: (e) => ze(e),
-		finalize: (e, t) => ct(e, t.subject),
-		provideEffect: qe,
-		...Xe.query === void 0 ? {} : { interceptor: Xe.query }
-	}, E = Lr(lt), dt = Ir({
-		...lt,
-		queryRows: (t, n) => e.store.query(t).then((e) => ri(t.table, e, n.subject))
-	}), ft = zr({
-		...lt,
+		buildContext: (e) => Be(e),
+		finalize: (e, t) => st(e, t.subject),
+		provideEffect: Ke,
+		...Ze.query === void 0 ? {} : { interceptor: Ze.query }
+	}, T = zr(ct), dt = Rr({
+		...ct,
+		queryRows: (t, n) => e.store.query(t).then((e) => ai(t.table, e, n.subject))
+	}), ft = Vr({
+		...ct,
 		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), D = (e) => e.filter((e) => jn(e.descriptor)), O = {};
+	}), E = (e) => e.filter((e) => Pn(e.descriptor)), D = {};
 	for (let t of [
-		...D(e.discovered.queries),
+		...E(e.discovered.queries),
 		...rt.queries,
 		...it.queries,
-		...S.queries
-	]) O[t.descriptor.name] = (e) => J(E(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Y(t, e));
+		...x.queries
+	]) D[t.descriptor.name] = (e) => J(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, Y(t, e));
 	for (let t of [
-		...D(e.discovered.mutations),
+		...E(e.discovered.mutations),
 		...rt.mutations,
 		...it.mutations,
-		...S.mutations
+		...x.mutations
 	]) {
-		let n = Pr(t.descriptor.output);
-		O[t.descriptor.name] = (r) => q(async (e, n) => tt(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Pn(t.descriptor, "mutation"));
+		let n = Ir(t.descriptor.output);
+		D[t.descriptor.name] = (r) => q(async (e, n) => nt(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, z(t.descriptor, "mutation"));
 	}
-	for (let t of [...D(e.discovered.actions), ...S.actions]) {
-		let n = Pr(t.descriptor.output);
-		O[t.descriptor.name] = (r) => q(async (e, n) => at(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Pn(t.descriptor, "action"));
+	for (let t of [...E(e.discovered.actions), ...x.actions]) {
+		let n = Ir(t.descriptor.output);
+		D[t.descriptor.name] = (r) => q(async (e, n) => ot(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, z(t.descriptor, "action"));
 	}
-	let pt = () => `public-${Math.random().toString(36).slice(2, 10)}`, k = [
+	let mt = () => `public-${Math.random().toString(36).slice(2, 10)}`, ht = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => dt(e, t, {
 				subject: n.subject,
-				traceId: pt()
+				traceId: mt()
 			}),
 			subscribe: (t, n, r) => ft(e, t, {
 				subject: n.subject,
-				traceId: pt()
+				traceId: mt()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => tt(e, t, {
+			invoke: (t, n) => nt(e, t, {
 				subject: n.subject,
-				traceId: pt()
+				traceId: mt()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => at(e, t, {
+			invoke: (t, n) => ot(e, t, {
 				subject: n.subject,
-				traceId: pt()
+				traceId: mt()
 			})
 		}))
-	], ht = {
-		candidates: g({
+	], gt = {
+		candidates: ie({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
 			descriptorOf: (e) => e.descriptor,
 			runQuery: (e, t, n) => Promise.resolve(dt(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(tt(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(at(e, t, n))
+			runMutation: (e, t, n) => Promise.resolve(nt(e, t, n)),
+			runAction: (e, t, n) => Promise.resolve(ot(e, t, n))
 		}),
 		policy: e.agents?.tools ?? {},
 		mcpEnabled: e.agents?.mcp === !0,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
-	}, gt = Dt({
+	}, O = At({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: k,
+		publicApiEntries: ht,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? L({ scope: "voltro:serve" })
-	}), _t = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, vt = _t && _t.length >= 16 ? [{
+		log: e.log ?? I({ scope: "voltro:serve" })
+	}), vt = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, yt = vt && vt.length >= 16 ? [{
 		method: "POST",
-		path: Ri,
-		handle: ra({
-			secret: _t,
+		path: Bi,
+		handle: aa({
+			secret: vt,
 			store: e.store,
 			...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
-			assetSink: ji(li()),
-			openArchive: (e) => ca(li(), e),
+			assetSink: Ni(di()),
+			openArchive: (e) => ua(di(), e),
 			refreshSubscriptions: (e) => {
 				r.refreshAll(e);
 			}
 		})
 	}, {
 		method: "POST",
-		path: zi,
-		handle: sa({
-			secret: _t,
+		path: Vi,
+		handle: la({
+			secret: vt,
 			store: e.store,
 			snapshot: e.dataTransferSnapshot ?? { tables: [] },
 			dialect: e.dataTransferDialect ?? "memory",
 			tenantTables: [...e.tenantScopedTables],
-			loadProfile: Sn,
-			assetSource: Mi(li(), e.store),
+			loadProfile: Tn,
+			assetSource: Pi(di(), e.store),
 			putArchive: async (e, t) => {
-				let { Readable: n } = await import("node:stream"), r = li(), i = ui("storage", () => n.from(t()));
-				await H.runPromise(fi(r, e, i, { contentType: "application/octet-stream" }));
+				let { Readable: n } = await import("node:stream"), r = di(), i = fi("storage", () => n.from(t()));
+				await H.runPromise(mi(r, e, i, { contentType: "application/octet-stream" }));
 			}
 		})
-	}] : [], xt = [
+	}] : [], bt = [
 		...e.httpRoutes ?? [],
-		...gt.httpRoutes,
-		...vt,
-		...S.httpRoutes
+		...O.httpRoutes,
+		...yt,
+		...x.httpRoutes
 	];
-	Object.assign(O, w.handlers);
-	for (let t of D(e.discovered.streams ?? [])) O[t.descriptor.name] = (n) => pr((r) => oi(r, (r) => {
-		let i = ze(r), a = t.executor(n, i);
+	Object.assign(D, S.handlers);
+	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => hr((r) => ci(r, (r) => {
+		let i = Be(r), a = t.executor(n, i);
 		if (H.isEffect(a)) {
-			let t = a.pipe(H.provide(Mr(i.store)));
-			return (e.baseLayer ? t.pipe(H.provide(e.baseLayer)) : t).pipe(H.provide(Be)).pipe(H.provide(Ve)).pipe(H.provide(Ue)).pipe(H.provide(Ge));
+			let t = a.pipe(H.provide(Pr(i.store)));
+			return (e.baseLayer ? t.pipe(H.provide(e.baseLayer)) : t).pipe(H.provide(Ve)).pipe(H.provide(He)).pipe(H.provide(Ue)).pipe(H.provide(We));
 		}
 		return typeof a == "object" && a && typeof a.then == "function" ? H.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) O[t.definition.name] = (e) => q(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => q(async (e, n) => {
 		let r = n;
-		return Hr(b, {
+		return Wr(y, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	pe && (O[Rn.name] = (e) => J(E({
-		descriptor: Rn,
+	pe && (D[Bn.name] = (e) => J(T({
+		descriptor: Bn,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -723,14 +723,14 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: tr(G("id", t), G("executionId", t)),
+				predicate: rr(G("id", t), G("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Rn.name}`), O[Bn.name] = (e) => J(E({
-		descriptor: Bn,
+	}, e), r, `subscription.${Bn.name}`), D[Hn.name] = (e) => J(T({
+		descriptor: Hn,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [G("tag", t.tag)], ...t.status === void 0 ? [] : [G("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
@@ -739,14 +739,14 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Qn(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : er(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Bn.name}`), O[zn.name] = (e) => J(E({
-		descriptor: zn,
+	}, e), r, `subscription.${Hn.name}`), D[Vn.name] = (e) => J(T({
+		descriptor: Vn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -761,8 +761,8 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${zn.name}`), O[Ln.name] = (e) => J(E({
-		descriptor: Ln,
+	}, e), r, `subscription.${Vn.name}`), D[zn.name] = (e) => J(T({
+		descriptor: zn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -777,7 +777,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Ln.name}`), O[B.name] = (e) => J(E({
+	}, e), r, `subscription.${zn.name}`), D[B.name] = (e) => J(T({
 		descriptor: B,
 		executor: (e) => {
 			let t = e;
@@ -793,7 +793,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${B.name}`), O[V.name] = (e) => J(E({
+	}, e), r, `subscription.${B.name}`), D[V.name] = (e) => J(T({
 		descriptor: V,
 		executor: (e) => {
 			let t = e.eventId;
@@ -809,67 +809,67 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${V.name}`), O[Fn.name] = (t) => q(async (t, n) => {
+	}, e), r, `subscription.${V.name}`), D[Ln.name] = (t) => q(async (t, n) => {
 		let r = t;
-		return await mt(e.store, n.subject, { executionId: r.executionId }), await b.cancel(r.workflowName, r.executionId), await Pt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Fn.name}`), O[In.name] = (t) => q(async (t, n) => {
+		return await _t(e.store, n.subject, { executionId: r.executionId }), await y.cancel(r.workflowName, r.executionId), await Ft(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Ln.name}`), D[Rn.name] = (t) => q(async (t, n) => {
 		let r = t;
-		return await mt(e.store, n.subject, { executionId: r.executionId }), await b.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${In.name}`), O[Vn.name] = (t) => q(async (t, n) => {
+		return await _t(e.store, n.subject, { executionId: r.executionId }), await y.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${Rn.name}`), D[Un.name] = (t) => q(async (t, n) => {
 		let r = t;
-		return await mt(e.store, n.subject, { id: r.id }), b.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Vn.name}`), O[Hn.name] = (t) => q(async (t, n) => {
+		return await _t(e.store, n.subject, { id: r.id }), y.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${Un.name}`), D[Wn.name] = (t) => q(async (t, n) => {
 		let r = t;
-		return await mt(e.store, n.subject, { id: r.id }), b.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${Hn.name}`));
-	let Ct = [
-		...D(e.discovered.queries).map((e) => z(e.descriptor)),
-		...D(e.discovered.mutations).map((e) => Mn(e.descriptor)),
-		...D(e.discovered.actions).map((e) => R(e.descriptor)),
-		...rt.queries.map((e) => z(e.descriptor)),
-		...rt.mutations.map((e) => Mn(e.descriptor)),
-		...it.queries.map((e) => z(e.descriptor)),
-		...it.mutations.map((e) => Mn(e.descriptor)),
-		...S.queries.map((e) => z(e.descriptor)),
-		...S.mutations.map((e) => Mn(e.descriptor)),
-		...S.actions.map((e) => R(e.descriptor)),
-		...D(e.discovered.streams ?? []).map((e) => Nn(e.descriptor)),
-		...w.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => si(e.definition)),
+		return await _t(e.store, n.subject, { id: r.id }), y.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${Wn.name}`));
+	let xt = [
+		...E(e.discovered.queries).map((e) => R(e.descriptor)),
+		...E(e.discovered.mutations).map((e) => Fn(e.descriptor)),
+		...E(e.discovered.actions).map((e) => L(e.descriptor)),
+		...rt.queries.map((e) => R(e.descriptor)),
+		...rt.mutations.map((e) => Fn(e.descriptor)),
+		...it.queries.map((e) => R(e.descriptor)),
+		...it.mutations.map((e) => Fn(e.descriptor)),
+		...x.queries.map((e) => R(e.descriptor)),
+		...x.mutations.map((e) => Fn(e.descriptor)),
+		...x.actions.map((e) => L(e.descriptor)),
+		...E(e.discovered.streams ?? []).map((e) => In(e.descriptor)),
+		...S.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => li(e.definition)),
 		...pe ? [
-			z(Rn),
-			z(Bn),
-			z(zn),
-			z(Ln),
-			z(B),
-			z(V),
-			R(Fn),
-			R(In),
+			R(Bn),
+			R(Hn),
 			R(Vn),
-			R(Hn)
+			R(zn),
+			R(B),
+			R(V),
+			L(Ln),
+			L(Rn),
+			L(Un),
+			L(Wn)
 		] : []
-	], Et = Xn.make(...Ct).middleware(On).middleware(kn), Ot = Ar({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), kt = e.dormancyTenantId ?? rr, At = e.dormancy === "sleep" ? {
-		register: (t, n, r) => Jr(e.store, {
+	], wt = Qn.make(...xt).middleware(jn).middleware(Mn), Et = Mr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), kt = e.dormancyTenantId ?? ar, jt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => Xr(e.store, {
 			tenantId: r ?? kt,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => hr(e.store, {
+		cancel: (t, n) => _r(e.store, {
 			tenantId: n ?? kt,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, j = me ? await import("@voltro/workflow") : void 0, M = j?.makeWorkflowRunRecorder({
+	} : void 0, k = he ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...At === void 0 ? {} : { wakeups: At }
-	}), Nt = async (t, n) => {
-		await j.closeWorkflowChildrenForParent({
+		...jt === void 0 ? {} : { wakeups: jt }
+	}), Pt = async (t, n) => {
+		await k.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: M,
+			recorder: A,
 			log: { warn: (e, t) => {
 				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
 			} },
@@ -880,7 +880,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				await f.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Pt = async (t, n, r) => {
+	}, Ft = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -895,7 +895,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await M.recordEvent({
+		a && await A.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -904,18 +904,18 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Nt(n, "cancelled");
-	}, Ft = [
-		...Ur(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? ze({
+		}), a && await Pt(n, "cancelled");
+	}, It = [
+		...Gr(e.discovered.workflows ?? [], {
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? Be({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: le,
-			...ue === void 0 ? {} : { resolveAuthority: ue }
+			resolveStartContext: ue,
+			...de === void 0 ? {} : { resolveAuthority: de }
 		}, (t, n, r) => {
-			let i = j.getWorkflowVersionMetadata(t.definition);
-			return j.wrapWorkflowExecuteWithRunRecording({
+			let i = k.getWorkflowVersionMetadata(t.definition);
+			return k.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -926,27 +926,27 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Nt(e, t),
-				...We(t.definition),
+				onParentClose: ({ executionId: e, status: t }) => Pt(e, t),
+				...qe(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await ee?.gate.release(e);
 				},
-				recorder: M,
+				recorder: A,
 				pluginWorkflowStepLayer: $e,
-				recordRun: qr
+				recordRun: Yr
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
-		...be === void 0 ? [] : [be]
-	], Lt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...be === void 0 ? [] : ["voltro.deliverWebhook"]], Rt = Ft.length > 0 ? U.mergeAll(...Ft) : U.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || be !== void 0) && e.workflowEngineLayer !== void 0) {
+		...xe === void 0 ? [] : [xe]
+	], Lt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...xe === void 0 ? [] : ["voltro.deliverWebhook"]], Rt = It.length > 0 ? U.mergeAll(...It) : U.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || xe !== void 0) && e.workflowEngineLayer !== void 0) {
 		let t = Rt.pipe(U.provideMerge(e.workflowEngineLayer));
-		f = Wn.make(e.baseLayer === void 0 ? t : t.pipe(U.provideMerge(e.baseLayer))), await f.runPromise(H.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Lt.length} entity type(s) registered`, { entities: Lt });
+		f = Kn.make(e.baseLayer === void 0 ? t : t.pipe(U.provideMerge(e.baseLayer))), await f.runPromise(H.void), (e.log ?? I({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Lt.length} entity type(s) registered`, { entities: Lt });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
-		ne = await A({
-			provider: Di(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Di(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Ae,
+		ne = await j({
+			provider: ki(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: ki(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: ke,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -954,14 +954,14 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				op: e.op,
 				...e.origin === void 0 ? {} : { origin: e.origin }
 			})),
-			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
+			log: (e.log ?? I({ scope: "voltro:serve" })).child("workflow")
 		}), p = async (t) => {
-			let n = await ie({
+			let n = await oe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await M.recordEvent({
+			return n.statusReset && await A.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -974,12 +974,12 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				reason: n.outcome.reason
 			};
 		}, te = async (t) => {
-			let n = await Ee({
+			let n = await Oe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await M.recordEvent({
+			return n.statusReset && await A.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -994,7 +994,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Tr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ei, s = jr({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Dr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ni, s = Nr({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
 		}), u = {
@@ -1009,17 +1009,17 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			}
 		}, d, m = () => {
 			if (d !== void 0) return d;
-			if (o !== void 0 && M !== void 0) return d = h({
+			if (o !== void 0 && A !== void 0) return d = re({
 				store: e.store,
-				log: F,
+				log: P,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
 				workflowRuntime: f,
-				workflowRunRecorder: M,
-				closeChildrenForParent: Nt
+				workflowRunRecorder: A,
+				closeChildrenForParent: Pt
 			}), d;
 		};
-		c = m, ee = nt({
+		c = m, ee = at({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1034,12 +1034,12 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			workflows: e.discovered.workflows ?? [],
 			facade: () => o,
 			cancelRunWithReason: m,
-			recordRunEvent: () => M?.recordEvent,
+			recordRunEvent: () => A?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
 			scheduleCoordinated: s,
 			onAbandoned: async (t) => {
-				await Tt({
+				await Ot({
 					workflows: e.discovered.workflows ?? [],
 					facade: () => o,
 					log: u,
@@ -1048,8 +1048,8 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			},
 			log: u
 		});
-		let g = ee;
-		g !== void 0 && Gr(() => g.stop()), l = Ke({
+		let h = ee;
+		h !== void 0 && qr(() => h.stop()), l = Ye({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1060,10 +1060,10 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => f === void 0 || j === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await f.runPromise(j.completeSuspendingSignal({
+			resumeSignal: () => f === void 0 || k === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(k.completeSuspendingSignal({
 					store: e.store,
-					target: jt(t, n),
+					target: Mt(t, n),
 					signalName: r,
 					payload: i
 				}));
@@ -1072,81 +1072,81 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			scheduleCoordinated: s,
 			log: u
 		});
-		let _ = l;
-		_ !== void 0 && Gr(() => _.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Vr({
+		let ie = l;
+		ie !== void 0 && qr(() => ie.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Ur({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => f.runPromise(e),
 			onEnqueue: () => ne?.publishWake(),
-			...g === void 0 ? {} : {
-				admitStart: g.gate.admitStart,
-				startPayloadSchema: g.gate.startPayloadSchema,
-				parkDelayedStart: g.gate.parkDelayed
+			...h === void 0 ? {} : {
+				admitStart: h.gate.admitStart,
+				startPayloadSchema: h.gate.startPayloadSchema,
+				parkDelayedStart: h.gate.parkDelayed
 			},
-			rememberStartContext: ce,
+			rememberStartContext: le,
 			signal: async (t, n, r) => {
-				let i = await j.sendWorkflowSignal({
+				let i = await k.sendWorkflowSignal({
 					store: e.store,
-					recorder: M,
+					recorder: A,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await f.runPromise(j.completeSuspendingSignal({
+				return await f.runPromise(k.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => j.sendWorkflowUpdate({
+			update: (t, n, r, i) => k.sendWorkflowUpdate({
 				store: e.store,
-				recorder: M,
+				recorder: A,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => De(e.store, t),
-			retry: (t, n) => ke({
+			listRuns: (t) => Ae(e.store, t),
+			retry: (t, n) => Me({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => f.runPromise(e)
 			}, t, n),
-			redrive: (t) => ie({
+			redrive: (t) => oe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Vt = U.mergeAll(Et.toLayer(O), Ot), Ht = St(O, e.discovered.queries.map((e) => e.descriptor.name), pe), Ut = U.mergeAll(Et.toLayer(Ht), Ot), N = e.observability, P = await mr({
+	let Bt = U.mergeAll(wt.toLayer(D), Et), Vt = Tt(D, e.discovered.queries.map((e) => e.descriptor.name), pe), Wt = U.mergeAll(wt.toLayer(Vt), Et), M = e.observability, Gt = await gr({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
-		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
-		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
-		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
-	}), Wt = !1, Gt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Kt, shutdown: qt } = ti({
-		group: Et,
-		handlersLayer: Vt,
-		httpHandlersLayer: Ut,
+		...M && M.spanProcessors.length > 0 ? { extraSpanProcessors: M.spanProcessors } : {},
+		...M && M.metricReaders.length > 0 ? { extraMetricReaders: M.metricReaders } : {},
+		...M && Object.keys(M.resourceAttributes).length > 0 ? { resourceAttributes: M.resourceAttributes } : {},
+		...M && M.sampler !== void 0 ? { sampler: M.sampler } : {}
+	}), Kt = !1, N = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: qt, shutdown: Jt } = ri({
+		group: wt,
+		handlersLayer: Bt,
+		httpHandlersLayer: Wt,
 		port: e.port ?? 4e3,
 		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: P.layer,
-		security: _e(e),
-		...Ze,
+		tracerLayer: Gt.layer,
+		security: ye(e),
+		...Qe,
 		healthCheck: {
-			isReady: () => Wt,
-			...Gt ? { ping: Gt } : {}
+			isReady: () => Kt,
+			...N ? { ping: N } : {}
 		},
-		...xt.length > 0 ? { httpRoutes: xt } : {},
+		...bt.length > 0 ? { httpRoutes: bt } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...xe.size > 0 ? { webhookRoutes: xe } : {},
+		...Se.size > 0 ? { webhookRoutes: Se } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), Jt = Li(Kt);
-	if (await fr(Kt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Tr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ei;
-		oe = await ni(e.discovered.schedules ?? [], {
+	}), Yt = zi(qt);
+	if (await mr(qt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Dr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : ni;
+		m = await ii(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1154,7 +1154,7 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			armSelf: e.scheduleArmSelf ?? !0,
 			dormancy: e.dormancy ?? "always-on",
 			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => ze({
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => Be({
 				subject: r,
 				traceId: t
 			}, e.store, void 0, `schedule:${n}`),
@@ -1172,27 +1172,27 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(oe);
+		}), e.onSchedulerReady?.(m);
 	}
-	let F = e.log ?? L({ scope: "voltro:serve" }), Yt, Xt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Yt = C(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, w.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = F.child("reaction"), n = async (n, r) => {
+	let P = e.log ?? I({ scope: "voltro:serve" }), Xt, Zt;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Xt = C(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, S.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = P.child("reaction"), n = async (n, r) => {
 			if (n.kind === "workflow") {
-				if (b === void 0) {
+				if (y === void 0) {
 					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
 					return;
 				}
 				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await Hr(b, {
+				await Wr(y, {
 					traceId: `reaction:${n.workflow}`,
 					source: `reaction:${n.workflow}`
 				}).start(n.workflow, e);
 				return;
 			}
-			await st(n.agent, r, {
+			await ut(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(at(e, t, n)),
-				makeSubject: (e) => An(e),
+				runAction: (e, t, n) => Promise.resolve(ot(e, t, n)),
+				makeSubject: (e) => Nn(e),
 				now: () => Date.now(),
 				log: t
 			});
@@ -1206,394 +1206,388 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			} catch (e) {
 				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
 			}
-		}, i = ut(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		Xt = u(e.discovered.reactions ?? [], e.store, {
+		}, i = pt(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		Zt = u(e.discovered.reactions ?? [], e.store, {
 			runAct: n,
 			checkBudget: r,
 			claimRateSlot: (e) => i.claim(e)
 		}, t);
 	}
-	let Zt;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (Zt = await Te({
+	let Qt;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (Qt = await De({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: F.child("aggregate"),
+		log: P.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Be = U.succeed(nr, Zt.registry));
-	let Qt;
-	(e.discovered.expectations?.length ?? 0) > 0 && (Qt = lr({
+	}), Ve = U.succeed(ir, Qt.registry));
+	let $t;
+	(e.discovered.expectations?.length ?? 0) > 0 && ($t = dr({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
-		log: F.child("expectation")
-	}), Ve = U.succeed(ar, Qt.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = dr({
+		log: P.child("expectation")
+	}), He = U.succeed(sr, $t.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = pr({
 		discovered: e.discovered.budgets ?? [],
-		log: F.child("finops")
+		log: P.child("finops")
 	}), Ue = U.succeed(K, n.registry));
-	let $t;
-	return (e.discovered.experiments?.length ?? 0) > 0 && ($t = ur({
+	let en;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (en = fr({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
-		log: F.child("experiment")
-	}), Ge = U.succeed(or, $t.registry)), Wt = !0, e.bootTiming?.mark("ready"), {
+		log: P.child("experiment")
+	}), We = U.succeed(cr, en.registry)), Kt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: Kt,
-		scheduler: oe,
-		eventsSnapshot: fe(w.bus, w.declared),
+		server: qt,
+		scheduler: m,
+		eventsSnapshot: me(S.bus, S.declared),
 		membersSnapshot: () => ({
-			members: Le.membership.list(),
+			members: Ie.membership.list(),
 			capturedAt: Date.now()
 		}),
-		agentTools: () => ht,
-		rpcMetrics: () => Ye,
-		webhooksService: () => ye,
+		agentTools: () => gt,
+		rpcMetrics: () => Xe,
+		webhooksService: () => ve,
 		runCanceller: () => c(),
 		flowControlHealth: () => ee?.cancelHealth(),
 		inferenceHealth: () => l?.health(),
-		workflowWriteActions: () => b === void 0 || M === void 0 ? void 0 : ae({
+		workflowWriteActions: () => y === void 0 || A === void 0 ? void 0 : se({
 			store: e.store,
-			log: F,
+			log: P,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
 			workflowRuntime: f,
-			workflowRunRecorder: M,
-			closeChildrenForParent: Nt
+			workflowRunRecorder: A,
+			closeChildrenForParent: Pt
 		}),
 		redriveWorkflowRun: (e) => p ? p(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
 		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
-			Wt = !1, await Jt.drainRequests();
-			for (let e of Se) try {
+			Kt = !1, await Yt.drainRequests();
+			for (let e of Ce) try {
 				await e();
 			} catch (e) {
-				F.warn("serve: teardown step failed", {}, e);
+				P.warn("serve: teardown step failed", {}, e);
 			}
-			await Re?.detach(), await Le.detach(), Zt?.detach(), Qt?.detach(), n?.detach(), $t?.detach(), Xt?.(), Yt?.(), await oe?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await qt(), await Jt.finish();
+			await ze?.detach(), await Ie.detach(), Qt?.detach(), $t?.detach(), n?.detach(), en?.detach(), Zt?.(), Xt?.(), await m?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await Jt(), await Yt.finish();
 		}
 	};
-}, $ = L({ scope: "voltro:serve" }), da = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", fa = Vt, pa = async (e) => {
-	let t = bn(process.cwd());
-	if (En(t)) {
+}, $ = I({ scope: "voltro:serve" }), pa = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", ma = Wt, ha = async (e) => {
+	let t = Cn(process.cwd());
+	if (kn(t)) {
 		let n;
 		try {
-			let e = await import(Dn(t).href);
+			let e = await import(An(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return ma(e);
-}, ma = async (s) => {
-	let u = xn();
+	return ga(e);
+}, ga = async (s) => {
+	let u = wn();
 	e("serve");
 	try {
-		hi();
+		_i();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let d = process.cwd(), m = await Ue(d), h = Ht({
+	let d = process.cwd(), h = await Ke(d), re = M({
 		kind: "api",
-		configPort: m?.port,
+		configPort: h?.port,
 		env: process.env,
-		flagPort: fa(s, "--port")
+		flagPort: ma(s, "--port")
 	});
-	for (let e of h.warnings) $.warn(e);
-	let g = h.port;
-	Zr(Yr(m?.secrets)), await Ut({
-		rawEnv: m?.env,
+	for (let e of re.warnings) $.warn(e);
+	let ie = re.port;
+	$r(Zr(h?.secrets)), await Gt({
+		rawEnv: h?.env,
 		appType: "api",
 		root: d,
 		log: $,
 		generateTypes: !1
 	}), u.mark("config");
-	let _ = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), re = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", ie = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, ae = yn(d);
-	if (!r() && En(ae)) try {
-		let e = await import(Dn(ae).href);
+	let g = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), ae = (g === "mariadb" || g === "postgres" || g === "mssql") && (process.env.CDC ?? "1") !== "0", oe = g === "mariadb" ? "mariadb" : g === "mssql" ? "mssql" : void 0, se = Sn(d);
+	if (!r() && kn(se)) try {
+		let e = await import(An(se).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[wn(d, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Dn(d, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let v = await Ye(d), y = await kt(v, { cdc: re && ie !== void 0 }), de = x(y);
+	let _ = await Qe(d), v = await k(_, { cdc: ae && oe !== void 0 }), fe = Se(v);
 	{
 		let e = /* @__PURE__ */ new Set([
-			...y.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...y.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
-			...y.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
+			...v.queries.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			...v.mutations.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name),
+			...v.actions.filter((e) => e.descriptor.overridesPlugin === !0).map((e) => e.descriptor.name)
 		]);
-		Yt(F(m?.plugins ?? []), [
-			...y.queries.map((e) => e.descriptor.name),
-			...y.mutations.map((e) => e.descriptor.name),
-			...y.actions.map((e) => e.descriptor.name),
-			...y.streams.map((e) => e.descriptor.name)
+		Qt(Zt(h?.plugins ?? []), [
+			...v.queries.map((e) => e.descriptor.name),
+			...v.mutations.map((e) => e.descriptor.name),
+			...v.actions.map((e) => e.descriptor.name),
+			...v.streams.map((e) => e.descriptor.name)
 		], e);
-		let t = Ae(y.serverOnlyLeaks, S(process.env, "strict"), vr, "`voltro serve`");
+		let t = Ne(v.serverOnlyLeaks, ke(process.env, "strict"), br, "`voltro serve`");
 		if (t.action === "fail") throw i(t.message ?? "");
 		t.action === "warn" && $.warn(t.message ?? "");
 	}
-	let fe = v.filter((e) => _n.test(e)), ve = fe.length > 0 ? await gn(fe, $.child("webhooks")) : {
+	let me = _.filter((e) => bn.test(e)), be = me.length > 0 ? await yn(me, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, Te = mn(y.events), Ee = ve.outgoing.length + ve.incoming.length + ve.providers.length + Te.length === 0 ? void 0 : {
-		...ve,
-		outgoing: [...ve.outgoing, ...Te]
-	}, De = nn({
+	}, De = _n(v.events), Oe = be.outgoing.length + be.incoming.length + be.providers.length + De.length === 0 ? void 0 : {
+		...be,
+		outgoing: [...be.outgoing, ...De]
+	}, Ae = on({
 		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: ie,
-		declared: m?.schema
-	}), ke = Zt({
-		gates: De,
+		cdcDialect: oe,
+		declared: h?.schema
+	}), Me = en({
+		gates: Ae,
 		runtime: {
-			traces: ge(),
-			undo: ii()
+			traces: ve(),
+			undo: oi()
 		}
 	});
-	if (ke !== void 0) throw i(`serve: ${ke}`);
-	let je = tn({
-		mix: y.featureMix,
-		plugins: m?.plugins ?? [],
-		gates: De,
-		...ie ? { cdcDialect: ie } : {}
-	}), Me = m?.analytics !== void 0 && m.analytics.kind !== "noop" && _ !== "memory" ? (await P(_)).makeSqlLayer(k()) : void 0, Fe = await c({
-		spec: m?.analytics,
-		sqlLayer: Me,
+	if (Me !== void 0) throw i(`serve: ${Me}`);
+	let Pe = an({
+		mix: v.featureMix,
+		plugins: h?.plugins ?? [],
+		gates: Ae,
+		...oe ? { cdcDialect: oe } : {}
+	}), Fe = h?.analytics !== void 0 && h.analytics.kind !== "noop" && g !== "memory" ? (await N(g)).makeSqlLayer(O()) : void 0, Le = await c({
+		spec: h?.analytics,
+		sqlLayer: Fe,
 		log: $
 	}), C = (() => {
-		let e = new Set(y.tables.map((e) => e.tableName)), t = [...y.tables];
-		for (let n of [...je, ...Fe.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		let e = new Set(v.tables.map((e) => e.tableName)), t = [...v.tables];
+		for (let n of [...Pe, ...Le.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of C) er(e);
+	for (let e of C) nr(e);
 	{
-		let e = yr(ai(y.queries.map((e) => ({
-			name: e.descriptor.name,
-			source: e.descriptor.source
-		})), new Set(C.flatMap((e) => {
-			let t = e.tableName;
-			return t === void 0 ? [] : [t];
-		}))));
+		let e = xr(si(Vt(v), We(C)));
 		e !== void 0 && $.warn(e);
 	}
-	let Ie = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (da(Ie, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await P(_)).makeSqlLayer(k()), t = await H.runPromise(Gn.SqlClient.pipe(H.flatMap((e) => Jn(e, d)), H.provide(e), H.catchAll(() => H.succeed([]))));
+	let Re = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (pa(Re, g, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await N(g)).makeSqlLayer(O()), t = await H.runPromise(qn.SqlClient.pipe(H.flatMap((e) => Xn(e, d)), H.provide(e), H.catchAll(() => H.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await H.runPromise(Gn.SqlClient.pipe(H.flatMap((e) => Yn(e, C, {
-			appliedBy: `serve:${Ie}`,
+		let n = await H.runPromise(qn.SqlClient.pipe(H.flatMap((e) => Zn(e, C, {
+			appliedBy: `serve:${Re}`,
 			environment: "prod",
-			dialectId: _
+			dialectId: g
 		})), H.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(qn(n, _)), $.error($t({
-			gates: De,
+		n.kind === "prod-mismatch" && ($.error(Yn(n, g)), $.error(nn({
+			gates: Ae,
 			nodeEnv: process.env.NODE_ENV,
-			cdcDialect: ie,
-			declared: m?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(qn(n, _));
+			cdcDialect: oe,
+			declared: h?.schema
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Yn(n, g));
 	}
-	await Jt({
-		dialectId: _,
+	await Xt({
+		dialectId: g,
 		tables: C,
-		mode: Kt(m?.reactiveTriggers),
-		lockSchema: k().schema,
-		makeLayer: async () => (await P(_)).makeSqlLayer(k()),
+		mode: Yt(h?.reactiveTriggers),
+		lockSchema: O().schema,
+		makeLayer: async () => (await N(g)).makeSqlLayer(O()),
 		log: {
 			info: (e, t) => $.info(e, t ?? {}),
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let He = Br(C);
+	let Ge = Hr(C);
 	u.mark("discover");
-	let T = await rt(m, void 0), We = ci(T, _);
-	for (let e of ft({
-		dialect: String(m?.store ?? process.env.DB_DIALECT ?? "postgres"),
+	let w = await ot(h, void 0), qe = ui(w, g);
+	for (let e of D({
+		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Di(m?.plugins ?? [])?.broadcast.crossReplica === !0,
-		tables: y.tables.map((e) => ({
+		crossReplicaBus: ki(h?.plugins ?? [])?.broadcast.crossReplica === !0,
+		tables: v.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
 		})),
-		querySources: y.queries.flatMap((e) => {
+		querySources: v.queries.flatMap((e) => {
 			let t = e.descriptor.source;
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = Xe({
-			tables: Zn().map((e) => ({ tableName: e.tableName })),
-			queries: y.queries.map((e) => ({
+		let e = $e({
+			tables: $n().map((e) => ({ tableName: e.tableName })),
+			queries: v.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
-		}), t = _t(e);
+		}), t = bt(e);
 		t !== void 0 && $.warn(t);
 	}
-	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: Ke, invalidationBus: nt, snapshotCache: ot, cache: st, semantic: ut, evictSource: mt, backend: yt, stats: bt, dispose: St } = await Ge({
+	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
+	let { service: Ye, invalidationBus: at, snapshotCache: lt, cache: ut, semantic: pt, evictSource: _t, backend: St, stats: Ct, dispose: Tt } = await Je({
 		env: process.env,
-		semantic: m?.cacheSemantic ?? !1
+		semantic: h?.cacheSemantic ?? !1
 	});
-	ut !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${yt}` + (yt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), T.onChange((e) => {
-		if (H.runFork(nt.publish(e.table)), mt !== void 0) {
+	pt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${St}` + (St === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
+		if (H.runFork(at.publish(e.table)), _t !== void 0) {
 			let t = (e.new ?? e.old)?.id;
-			mt({
+			_t({
 				table: e.table,
 				op: e.op,
 				...t === void 0 ? {} : { id: t }
 			});
 		}
-	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: wt, service: Tt } = await kr({ store: T });
-	Ve({
+	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
+	let { kv: Dt, service: Ot } = await jr({ store: w });
+	f({
 		log: $,
-		max: Gt(),
-		outOfPool: Rt(_, (process.env.CDC ?? "1") !== "0"),
+		max: Jt(),
+		outOfPool: we(g, (process.env.CDC ?? "1") !== "0"),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
 	}), u.mark("store");
-	let Dt = cr({
-		store: T,
-		sink: Fe.sink,
+	let At = ur({
+		store: w,
+		sink: Le.sink,
 		log: $
-	}), jt = At({
-		store: T,
-		dialect: _,
+	}), Mt = A({
+		store: w,
+		dialect: g,
 		log: { info: (e) => $.info(e) }
-	}), A = m?.plugins ?? [], It = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, zt, Bt;
-	_ !== "memory" && (zt = Wn.make((await P(_)).makeSqlLayer(k())), Bt = await zt.runPromise(Gn.SqlClient));
-	let Vt = [
+	}), j = h?.plugins ?? [], zt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ht, Ut;
+	g !== "memory" && (Ht = Kn.make((await N(g)).makeSqlLayer(O())), Ut = await Ht.runPromise(qn.SqlClient));
+	let Wt = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(_) ? Tr(T, It, $) : ei, hn = w(m?.scheduling), bn = jr({
-		maxIdleIntervalMs: hn.pollCeilingMs,
-		coordinator: Vt,
-		replicaId: It,
+	].includes(g) ? Dr(w, zt, $) : ni, vn = Be(h?.scheduling), Cn = Nr({
+		maxIdleIntervalMs: vn.pollCeilingMs,
+		coordinator: Wt,
+		replicaId: zt,
 		log: $
-	}), Sn = [], I = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Tn = Di(m?.plugins ?? [])?.broadcast?.provider, L = Qe(m?.plugins, m?.name ?? Cn(d));
+	}), Tn = [], F = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, On = ki(h?.plugins ?? [])?.broadcast?.provider, I = tt(h?.plugins, h?.name ?? En(d));
 	{
-		let e = tt(m?.plugins, m?.name ?? Cn(d));
+		let e = it(h?.plugins, h?.name ?? En(d));
 		e !== void 0 && $.warn(e);
 	}
-	let On = Mt(m?.plugins, {
-		instanceId: I,
-		namespace: L,
+	let jn = Nt(h?.plugins, {
+		instanceId: F,
+		namespace: I,
 		meta: { mode: "serve" },
 		logger: $
-	}), kn = {
-		...Bt ? { sql: Bt } : {},
-		instanceId: I,
-		membership: On.membership,
-		...Tn === void 0 ? {} : { broadcast: Tn },
-		broadcastChannels: { presence: Ei(L, "presence") },
+	}), Mn = {
+		...Ut ? { sql: Ut } : {},
+		instanceId: F,
+		membership: jn.membership,
+		...On === void 0 ? {} : { broadcast: On },
+		broadcastChannels: { presence: Oi(I, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = bn(e, t, n);
-			return Sn.push(r), r;
+			let r = Cn(e, t, n);
+			return Tn.push(r), r;
 		}
 	};
-	for (let e of A) e.bindDataStore?.(We, kn);
+	for (let e of j) e.bindDataStore?.(qe, Mn);
 	l({
-		store: T,
-		...ct(),
+		store: w,
+		...T(),
 		log: $
 	});
-	let R = A.filter((e) => typeof e.onChangeEvent == "function");
-	if (R.length > 0) {
-		let e = T.changeScope ?? "local";
-		T.onChange((t) => {
-			let n = pe(t, e);
-			for (let e of R) H.runFork(e.onChangeEvent(n).pipe(H.catchAllCause((t) => H.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Un.pretty(t) })))));
+	let L = j.filter((e) => typeof e.onChangeEvent == "function");
+	if (L.length > 0) {
+		let e = w.changeScope ?? "local";
+		w.onChange((t) => {
+			let n = he(t, e);
+			for (let e of L) H.runFork(e.onChangeEvent(n).pipe(H.catchAllCause((t) => H.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Gn.pretty(t) })))));
 		});
 	}
-	let An = se({
-		plugins: A,
-		appName: m?.name ?? "voltro-api",
+	let Nn = le({
+		plugins: j,
+		appName: h?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	A.length && await An.activate(), u.mark("plugins");
-	let jn = await An.gatherObservability(), Mn = {
+	j.length && await Nn.activate(), u.mark("plugins");
+	let Pn = await Nn.gatherObservability(), Fn = {
 		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
 		debug: () => {}
-	}, z, Nn = await gt(T, m, _, L, Mn, (e, t) => {
-		z?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), Pn = m?.apiKeys, Fn = (typeof Pn == "object" ? Pn.prefix : void 0) ?? "voltro_", B = Pn ? _r(T) : void 0, V = B ? Dr({ flush: Or(B) }) : void 0;
-	V && Gr(() => V.shutdown());
-	let In = B ? Er(B, {
-		prefix: Fn,
+	}, R, In = await yt(w, h, g, I, Fn, (e, t) => {
+		R?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), z = h?.apiKeys, Ln = (typeof z == "object" ? z.prefix : void 0) ?? "voltro_", B = z ? yr(w) : void 0, V = B ? kr({ flush: Ar(B) }) : void 0;
+	V && qr(() => V.shutdown());
+	let Rn = B ? Or(B, {
+		prefix: Ln,
 		...V ? { usage: V } : {}
-	}) : void 0, Ln = In ? [br(In, { prefix: Fn })] : [], Rn = xt([...m?.auth?.strategies ?? [], ...Ln], wi(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => We), zn = [...m?.restRoutes ?? [], ...In ? sr(In, (typeof Pn == "object" ? Pn.managementPath : void 0) ?? "/v1/api-keys") : []], Bn = O(m?.idempotency, T), Vn = A.map((e) => e.services).filter((e) => e !== void 0), Hn = U.mergeAll(Re({
-		analyticsLayer: Fe.layer,
-		cacheService: Ke,
-		kvService: Tt,
-		...ut === void 0 ? {} : { semanticCache: ut },
-		pluginServices: Vn,
-		userLayers: m?.layers ?? []
-	}), it(m?.http ?? {})), W = await at({
-		files: v,
-		store: T,
+	}) : void 0, zn = Rn ? [Sr(Rn, { prefix: Ln })] : [], Bn = wt([...h?.auth?.strategies ?? [], ...zn], Ei(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth, () => qe), Vn = [...h?.restRoutes ?? [], ...Rn ? lr(Rn, (typeof z == "object" ? z.managementPath : void 0) ?? "/v1/api-keys") : []], Hn = ht(h?.idempotency, w), Un = j.map((e) => e.services).filter((e) => e !== void 0), Wn = U.mergeAll(Ve({
+		analyticsLayer: Le.layer,
+		cacheService: Ye,
+		kvService: Ot,
+		...pt === void 0 ? {} : { semanticCache: pt },
+		pluginServices: Un,
+		userLayers: h?.layers ?? []
+	}), st(h?.http ?? {})), W = await ct({
+		files: _,
+		store: w,
 		log: $,
 		seedPolicy: "report",
-		seedPattern: un,
-		loadSeedFiles: qt,
-		startupPattern: an,
+		seedPattern: pn,
+		loadSeedFiles: P,
+		startupPattern: cn,
 		loadStartupFiles: a,
 		runStartups: o,
-		emailPattern: ze,
-		loadEmailFiles: ht,
-		registerEmailTemplates: Ti
+		emailPattern: He,
+		loadEmailFiles: vt,
+		registerEmailTemplates: Di
 	});
 	(W.startupCount > 0 || W.emailCount > 0) && $.info("boot lifecycle", {
 		startups: W.startupCount,
 		emailTemplates: W.emailCount
-	}), W.startups !== void 0 && Gr(async () => {
+	}), W.startups !== void 0 && qr(async () => {
 		await W.startups.stop();
-	}), oe({
-		demands: ue(de),
-		isRegistered: (e) => xr(e) !== void 0
+	}), ce({
+		demands: y(fe),
+		isRegistered: (e) => Cr(e) !== void 0
 	});
-	let Xn = pt({
-		schedules: Ct({
-			schedules: y.schedules,
+	let Qn = gt({
+		schedules: Et({
+			schedules: v.schedules,
 			seeds: W.seeds,
-			store: T,
+			store: w,
 			log: $.child("seeds")
 		}),
-		workflows: y.workflows ?? [],
+		workflows: v.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), Qn = m?.scheduling ?? {}, G = Qn.trigger ?? "self", tr = /* @__PURE__ */ new Set([
+	}), er = h?.scheduling ?? {}, G = er.trigger ?? "self", rr = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), nr = Qn.coordination ?? (tr.has(_) ? "advisoryLock" : "single"), K = nr === "cluster" && tr.has(_), rr = K ? "cluster" : nr === "advisoryLock" && tr.has(_) ? "advisoryLock" : "single";
-	nr === "cluster" && !K && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), nr === "advisoryLock" && !tr.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let ir, ar = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (Ee?.outgoing.length ?? 0) > 0 || K, or;
-	if (ar) {
-		if (_ === "mssql") {
-			let e = await pn(process.cwd());
+	]), ir = er.coordination ?? (rr.has(g) ? "advisoryLock" : "single"), K = ir === "cluster" && rr.has(g), ar = K ? "cluster" : ir === "advisoryLock" && rr.has(g) ? "advisoryLock" : "single";
+	ir === "cluster" && !K && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), ir === "advisoryLock" && !rr.has(g) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let or, sr = v.workflows.length > 0 || v.workflowWorkers.length > 0 || v.eventTriggers.length > 0 || (Oe?.outgoing.length ?? 0) > 0 || K, cr;
+	if (sr) {
+		if (g === "mssql") {
+			let e = await gn(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = K ? Xn.filter((e) => (e.trigger ?? G) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = K ? Qn.filter((e) => (e.trigger ?? G) === "self").map((e) => t({
 			name: e.name,
-			cron: gr(e),
+			cron: vr(e),
 			execute: async () => {
-				await ir?.fireFromCluster(e.name);
+				await or?.fireFromCluster(e.name);
 			}
 		})) : [];
-		or = _ === "memory" ? e.layerMemory : await (async () => {
-			let e = await P(_), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+		cr = g === "memory" ? e.layerMemory : await (async () => {
+			let e = await N(g), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(k()),
+				sqlClientLayer: e.makeSqlLayer(O()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -1602,19 +1596,19 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			});
 		})();
 	}
-	let lr = ce(A, vn()), ur = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), dr = ur.length > 0 ? await ye(ur, $) : [], fr = v.filter((e) => /\.reaction\.tsx?$/.test(e)), q = fr.length > 0 ? await b(fr, $) : [], pr = v.filter((e) => cn.test(e)), J = pr.length > 0 ? await Pe(pr, $) : [], mr = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), hr = mr.length > 0 ? await te(mr, $) : [], Sr = he();
-	if (hr.length > 0 && _ !== "memory") try {
-		let e = (await P(_)).makeSqlLayer(k());
-		Sr = lt(e);
+	let dr = ue(j, xn()), fr = _.filter((e) => /\.subscribe\.tsx?$/.test(e)), pr = fr.length > 0 ? await xe(fr, $) : [], mr = _.filter((e) => /\.reaction\.tsx?$/.test(e)), q = mr.length > 0 ? await pe(mr, $) : [], hr = _.filter((e) => dn.test(e)), J = hr.length > 0 ? await S(hr, $) : [], gr = _.filter((e) => /\.aggregate\.tsx?$/.test(e)), _r = gr.length > 0 ? await ne(gr, $) : [], wr = _e();
+	if (_r.length > 0 && g !== "memory") try {
+		let e = (await N(g)).makeSqlLayer(O());
+		wr = dt(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Cr = _ === "memory" ? ei : Tr(T, `aggregate@${process.pid}`, $), wr = v.filter((e) => ln.test(e)), Ar = wr.length > 0 ? await f(wr, $) : [], Mr = v.filter((e) => sn.test(e)), Nr = Mr.length > 0 ? await Ce(Mr, $) : [], Pr = v.filter((e) => on.test(e)), Fr = Pr.length > 0 ? await Nt(Pr, $) : [], Ir = [], Lr = [], Rr = v.filter((e) => en.test(e));
-	if (Rr.length > 0) {
-		let e = $.child("agent"), t = v.filter((e) => Qt.test(e));
-		t.length > 0 && await rn(t, e);
-		let n = await Xt(Rr, e);
-		for (let e of n.agents) for (let t of Je(e)) (t.kind === "action" ? Ir : Lr).push({
+	let Tr = g === "memory" ? ni : Dr(w, `aggregate@${process.pid}`, $), Er = _.filter((e) => fn.test(e)), Mr = Er.length > 0 ? await p(Er, $) : [], Pr = _.filter((e) => un.test(e)), Fr = Pr.length > 0 ? await Te(Pr, $) : [], Ir = _.filter((e) => ln.test(e)), Lr = Ir.length > 0 ? await Lt(Ir, $) : [], Rr = [], zr = [], Br = _.filter((e) => rn.test(e));
+	if (Br.length > 0) {
+		let e = $.child("agent"), t = _.filter((e) => tn.test(e));
+		t.length > 0 && await sn(t, e);
+		let n = await $t(Br, e);
+		for (let e of n.agents) for (let t of Ze(e)) (t.kind === "action" ? Rr : zr).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -1626,87 +1620,87 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 		let e = X.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, zr = $n({
-		dialect: _,
-		...k()
-	}), Vr = _ === "memory" ? void 0 : (await P(_)).makeSqlLayer(k()), Hr = async () => Ot({
-		sqlLayer: Vr,
+	}, Vr = tr({
+		dialect: g,
+		...O()
+	}), Ur = g === "memory" ? void 0 : (await N(g)).makeSqlLayer(O()), Wr = async () => jt({
+		sqlLayer: Ur,
 		declared: C,
 		log: $
-	}), Ur = {
+	}), Gr = {
 		kind: "api",
 		meta: {
-			name: m?.name ?? "voltro-api",
-			voltroVersion: Et,
-			port: g,
+			name: h?.name ?? "voltro-api",
+			voltroVersion: kt,
+			port: ie,
 			mode: "start",
-			store: _,
-			cdc: re ? "on" : "off",
-			...zr === void 0 ? {} : { databaseId: zr }
+			store: g,
+			cdc: ae ? "on" : "off",
+			...Vr === void 0 ? {} : { databaseId: Vr }
 		},
-		rpc: $e(y, d),
-		workflows: Le(y, d),
-		migrations: Hr,
+		rpc: nt(v, d),
+		workflows: ze(v, d),
+		migrations: Wr,
 		events: () => X.eventsSnapshot(),
 		agentTools: () => X.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
-			accessGate: de,
-			config: m,
-			serverOnlyLeaks: y.serverOnlyLeaks,
-			migrations: Hr
+			accessGate: fe,
+			config: h,
+			serverOnlyLeaks: v.serverOnlyLeaks,
+			migrations: Wr
 		}),
 		members: () => X.membersSnapshot(),
 		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!ir) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await ir.fireNow(e, t) ?? null };
+			if (!or) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await or.fireNow(e, t) ?? null };
 		},
-		inspectBackfillSchedule: ne({
-			getHandle: () => ir,
-			getSchedules: () => Xn
+		inspectBackfillSchedule: m({
+			getHandle: () => or,
+			getSchedules: () => Qn
 		}),
-		...Ee === void 0 ? {} : { webhooks: () => me({
-			store: T,
-			discoveredWebhooks: Ee
+		...Oe === void 0 ? {} : { webhooks: () => ge({
+			store: w,
+			discoveredWebhooks: Oe
 		}) },
 		plugins: () => ({
-			plugins: An.snapshot(),
+			plugins: Nn.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => N(m?.name ?? Cn(d), {
-			...m?.env !== void 0 && mi(m.env) ? { contract: m.env } : {},
-			plugins: m?.plugins ?? []
+		env: () => Kt(h?.name ?? En(d), {
+			...h?.env !== void 0 && gi(h.env) ? { contract: h.env } : {},
+			plugins: h?.plugins ?? []
 		}),
-		dataCache: () => Be({
-			stats: bt,
-			backendKind: yt
+		dataCache: () => Ue({
+			stats: Ct,
+			backendKind: St
 		}),
-		subscriptions: () => Pt(() => z),
-		inspectTables: () => le(y.tables),
-		inspectRows: be({
-			store: T,
-			tables: y.tables,
+		subscriptions: () => Rt(() => R),
+		inspectTables: () => de(v.tables),
+		inspectRows: b({
+			store: w,
+			tables: v.tables,
 			mask: !0
 		}),
 		metrics: (e) => X.rpcMetrics().snapshot(e),
-		cluster: () => Lt({
-			store: T,
-			dialect: _,
+		cluster: () => Bt({
+			store: w,
+			dialect: g,
 			useClusterCron: K,
-			scheduleCoordChoice: nr
+			scheduleCoordChoice: ir
 		}),
-		inspectSchedules: () => we({
-			schedules: Xn,
+		inspectSchedules: () => x({
+			schedules: Qn,
 			defaultTrigger: G,
-			coordination: rr
+			coordination: ar
 		}),
-		inspectScheduleRuns: (e) => M(T, e),
-		...ee(T, {
-			controls: D(y.workflows ?? []),
-			active: (y.workflows?.length ?? 0) > 0,
+		inspectScheduleRuns: (e) => Ft(w, e),
+		...ee(w, {
+			controls: mt(v.workflows ?? []),
+			active: (v.workflows?.length ?? 0) > 0,
 			cancellation: () => X.flowControlHealth()
 		}),
-		webhookActions: xe(() => X.webhooksService()),
+		webhookActions: Ce(() => X.webhooksService()),
 		inspectStartWorkflow: (e) => Y().inspectStartWorkflow(e),
 		inspectCancelWorkflowRun: (e) => Y().inspectCancelWorkflowRun(e),
 		inspectSuspendWorkflowRun: (e) => Y().inspectSuspendWorkflowRun(e),
@@ -1715,13 +1709,13 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 		inspectRetryWorkflowRun: (e) => Y().inspectRetryWorkflowRun(e),
 		inspectSignalWorkflowRun: (e) => Y().inspectSignalWorkflowRun(e),
 		inspectUpdateWorkflowRun: (e) => Y().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => Ze({
-			store: T,
-			active: (y.workflows?.length ?? 0) > 0,
+		inspectInferences: (e) => et({
+			store: w,
+			active: (v.workflows?.length ?? 0) > 0,
 			dispatcher: () => X.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...vt({
-			store: T,
+		...xt({
+			store: w,
 			cancelRun: async (e) => await X.runCanceller()?.(e) ?? !1,
 			retryRun: async (e) => Y().inspectRetryWorkflowRun({ runId: e }),
 			redriveRun: async (e) => X.redriveWorkflowRun({ runId: e }),
@@ -1729,122 +1723,122 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 		}),
 		inspectRedriveWorkflowRun: (e) => X.redriveWorkflowRun(e),
 		inspectResumeWorkflowRunFromStep: (e) => X.resumeWorkflowRunFromStep(e)
-	}, Wr = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", Kr = Wr && _ !== "memory" ? await (async () => {
-		let e = await P(_);
-		return E({
+	}, Kr = (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace", Jr = Kr && g !== "memory" ? await (async () => {
+		let e = await N(g);
+		return ft({
 			tables: C,
-			sqlLayer: e.makeSqlLayer(k()),
-			dialect: _,
+			sqlLayer: e.makeSqlLayer(O()),
+			dialect: g,
 			options: { retryFilter: e.retryFilter },
 			log: {
 				info: (e, t) => $.info(e, t),
 				error: (e, t, n) => $.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, qr = await dt({
-		input: m?.tenancy?.residency,
-		namespaceIsolationOn: Wr,
-		makeStoreForUrl: (e, t) => rt(m, void 0, Wt(k(), t)),
+	})() : void 0, Yr = await E({
+		input: h?.tenancy?.residency,
+		namespaceIsolationOn: Kr,
+		makeStoreForUrl: (e, t) => ot(h, void 0, qt(O(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	qr !== void 0 && Gr(async () => {
-		await qr.close();
+	Yr !== void 0 && qr(async () => {
+		await Yr.close();
 	});
-	let X = await ua({
+	let X = await fa({
 		bootTiming: u,
-		broadcastNamespace: L,
+		broadcastNamespace: I,
 		scheduling: (() => {
-			let e = hn;
+			let e = vn;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
 				cancelSweepMs: e.cancelSweepMs,
 				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: et({
-					changeScope: T.changeScope,
-					broadcastAttached: Nn !== void 0
+				disarmWhenIdle: rt({
+					changeScope: w.changeScope,
+					broadcastAttached: In !== void 0
 				})
 			};
 		})(),
-		...m?.workflows?.staleness === void 0 ? {} : { workflowStaleness: m.workflows.staleness },
-		...m?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: m.workflows.suspendSignalHintMs },
-		workflowRecording: j(m?.workflows?.recording),
+		...h?.workflows?.staleness === void 0 ? {} : { workflowStaleness: h.workflows.staleness },
+		...h?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: h.workflows.suspendSignalHintMs },
+		workflowRecording: Pt(h?.workflows?.recording),
 		membership: {
-			...On,
-			instanceId: I
+			...jn,
+			instanceId: F
 		},
 		security: {
-			defaultDeny: Oe(m),
-			..._e(m)
+			defaultDeny: je(h),
+			...ye(h)
 		},
-		approvals: { defaultExpiryMs: Ne(m) },
-		...m?.plugins === void 0 ? {} : { plugins: m.plugins },
-		...Bn ? { idempotency: Bn } : {},
-		restRoutes: zn,
-		appProcedures: de,
+		approvals: { defaultExpiryMs: Ie(h) },
+		...h?.plugins === void 0 ? {} : { plugins: h.plugins },
+		...Hn ? { idempotency: Hn } : {},
+		restRoutes: Vn,
+		appProcedures: fe,
 		discovered: {
-			queries: [...y.queries, ...Lr],
-			mutations: y.mutations,
-			actions: [...y.actions, ...Ir],
-			streams: y.streams,
-			events: y.events,
-			workflows: y.workflows,
-			workflowWorkers: y.workflowWorkers,
-			eventTriggers: y.eventTriggers,
-			schedules: Xn,
-			subscribers: dr,
+			queries: [...v.queries, ...zr],
+			mutations: v.mutations,
+			actions: [...v.actions, ...Rr],
+			streams: v.streams,
+			events: v.events,
+			workflows: v.workflows,
+			workflowWorkers: v.workflowWorkers,
+			eventTriggers: v.eventTriggers,
+			schedules: Qn,
+			subscribers: pr,
 			outboxHandlers: J,
-			connections: y.connections,
+			connections: v.connections,
 			reactions: q,
-			aggregates: hr,
-			expectations: Ar,
-			budgets: Nr,
-			experiments: Fr,
-			...Ee === void 0 ? {} : { webhooks: Ee }
+			aggregates: _r,
+			expectations: Mr,
+			budgets: Fr,
+			experiments: Lr,
+			...Oe === void 0 ? {} : { webhooks: Oe }
 		},
 		log: $,
-		analytics: Fe.sink,
-		aggregateStorage: Sr,
-		aggregateCoordinator: Cr,
-		store: T,
-		kv: wt,
-		cache: st,
-		snapshotCache: ot,
-		...m?.reactive === void 0 ? {} : { reactive: m.reactive },
-		schemaRegistry: He,
-		tenantScopedTables: y.tenantScopedTables,
-		softDeleteScopedTables: y.softDeleteScopedTables,
-		dataTransferSnapshot: Kn(C, _),
-		dataTransferDialect: _,
-		...Kr === void 0 ? {} : { ensureTenantProvisioned: Kr.ensure },
-		...qr === void 0 ? {} : { resolveResidentStore: qr.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Rn({
+		analytics: Le.sink,
+		aggregateStorage: wr,
+		aggregateCoordinator: Tr,
+		store: w,
+		kv: Dt,
+		cache: ut,
+		snapshotCache: lt,
+		...h?.reactive === void 0 ? {} : { reactive: h.reactive },
+		schemaRegistry: Ge,
+		tenantScopedTables: v.tenantScopedTables,
+		softDeleteScopedTables: v.softDeleteScopedTables,
+		dataTransferSnapshot: Jn(C, g),
+		dataTransferDialect: g,
+		...Jr === void 0 ? {} : { ensureTenantProvisioned: Jr.ensure },
+		...Yr === void 0 ? {} : { resolveResidentStore: Yr.resolveStore },
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: (e, t) => Bn({
 			headers: e,
 			clientId: t
 		}),
-		...m?.auth === void 0 ? {} : { authority: m.auth },
-		...m?.agents === void 0 ? {} : { agents: m.agents },
-		httpRoutes: A.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => We,
-		...Hn ? { baseLayer: Hn } : {},
-		...or === void 0 ? {} : { workflowEngineLayer: or },
+		...h?.auth === void 0 ? {} : { authority: h.auth },
+		...h?.agents === void 0 ? {} : { agents: h.agents },
+		httpRoutes: j.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => qe,
+		...Wn ? { baseLayer: Wn } : {},
+		...cr === void 0 ? {} : { workflowEngineLayer: cr },
 		scheduleDefaultTrigger: G,
-		scheduleCoordination: rr,
+		scheduleCoordination: ar,
 		scheduleArmSelf: !K,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...lr === void 0 ? {} : { scheduleFireInterceptor: lr },
+		...dr === void 0 ? {} : { scheduleFireInterceptor: dr },
 		onSchedulerReady: (e) => {
-			ir = e;
+			or = e;
 		},
-		inspectRoute: { handle: async (e, t, n, r) => await p(e, Ur, t, {
+		inspectRoute: { handle: async (e, t, n, r) => await te(e, Gr, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await fn(e, Ur, t, { method: n }) : null) ?? dn(e, Ur, t, {
+		}) || ((n === "GET" ? await hn(e, Gr, t, { method: n }) : null) ?? mn(e, Gr, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) ?? {
@@ -1852,40 +1846,40 @@ var Fi = () => Math.max(500, Math.floor($r() * .6)), Ii = (e) => new Promise((t)
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
-		...m?.name === void 0 ? {} : { appName: m.name },
-		observability: jn,
-		port: g,
-		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {}
+		...h?.name === void 0 ? {} : { appName: h.name },
+		observability: Pn,
+		port: ie,
+		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {}
 	});
-	return z = X.dispatcher, Se(Ft([
-		y.queries,
-		y.mutations,
-		y.actions,
-		y.streams
+	return R = X.dispatcher, Ee(It([
+		v.queries,
+		v.mutations,
+		v.actions,
+		v.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${g}`, {
-		dialect: _,
-		queries: y.queries.length,
-		mutations: y.mutations.length,
-		actions: y.actions.length,
-		streams: y.streams.length,
-		workflows: y.workflows.length,
-		workflowWorkers: y.workflowWorkers.length,
-		schedules: Xn.length,
-		scheduleCoordination: rr
-	}), u.finish($), Gr(async () => {
-		for (let e of Sn) e.stop();
-		jt.stop();
+	}), $.info(`API listening on :${ie}`, {
+		dialect: g,
+		queries: v.queries.length,
+		mutations: v.mutations.length,
+		actions: v.actions.length,
+		streams: v.streams.length,
+		workflows: v.workflows.length,
+		workflowWorkers: v.workflowWorkers.length,
+		schedules: Qn.length,
+		scheduleCoordination: ar
+	}), u.finish($), qr(async () => {
+		for (let e of Tn) e.stop();
+		Mt.stop();
 		try {
-			await X.close(), St(), zt?.dispose(), await An.deactivate(), await Nn?.close(), await qe({
-				mirror: Dt,
+			await X.close(), Tt(), Ht?.dispose(), await Nn.deactivate(), await In?.close(), await Xe({
+				mirror: At,
 				log: $
-			}), await Fe.dispose(), await T.close?.();
+			}), await Le.dispose(), await w.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { pa as n, da as r, ma as t };
+export { ha as n, pa as r, ga as t };