@voltro/cli 0.52.0 → 0.54.0

package/dist/{serveCommand-DkP3OT0W.js → serveCommand-Bje09q1v.js}

@@ -4,50 +4,50 @@ import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
 import { t as s } from "./interruptedReplace-C3O3M1MM.js";
-import { $ as c, $t as l, A as u, At as d, Bt as f, C as ee, Ct as p, D as te, Dn as ne, Dt as m, E as h, En as re, Et as ie, F as ae, Ft as oe, G as se, Gt as g, H as ce, I as _, It as le, J as ue, Jt as de, K as fe, Kt as pe, L as me, Lt as v, M as y, Mt as he, N as ge, Nt as _e, O as ve, Ot as ye, P as be, Pt as xe, Q as Se, Qt as Ce, R as we, Rt as Te, S as b, Sn as Ee, St as De, T as Oe, Tn as ke, Tt as Ae, U as je, Ut as x, Vt as Me, W as S, X as Ne, Xt as Pe, Y as Fe, Yt as C, Z as Ie, Zt as Le, _ as Re, _t as ze, an as Be, at as Ve, b as He, bn as Ue, bt as w, c as We, cn as Ge, ct as Ke, d as qe, dn as Je, dt as Ye, en as Xe, et as Ze, fn as Qe, ft as $e, g as et, gn as tt, gt as nt, h as rt, hn as it, ht as at, i as ot, in as st, it as ct, j as lt, jt as ut, k as dt, kt as ft, ln as pt, lt as mt, m as T, mn as ht, mt as gt, nn as E, nt as D, o as O, on as _t, ot as vt, p as yt, pn as k, pt as bt, q as xt, qt as St, r as Ct, rn as wt, rt as Tt, sn as Et, st as Dt, t as Ot, tn as kt, tt as At, u as jt, un as A, ut as Mt, v as Nt, vn as Pt, vt as j, w as M, wn as Ft, wt as It, x as Lt, xn as Rt, xt as zt, y as Bt, yn as Vt, yt as Ht, z as Ut, zt as Wt } from "./dev-CRHoCEiy.js";
-import { n as N } from "./cliArgs-D4p8n7EE.js";
-import { r as Gt } from "./appPort-B_HpJ_ck.js";
-import { Dt as Kt, Tt as qt } from "./webDev-BgWL9gKV.js";
+import { $ as c, $t as l, A as u, An as d, At as f, Bt as ee, C as te, Cn as ne, Ct as p, D as m, Dt as h, E as g, En as re, Et as ie, F as ae, Ft as oe, G as se, Gt as ce, H as le, I as _, It as ue, J as v, Jt as de, K as fe, Kt as pe, L as me, Lt as y, M as b, Mt as he, N as ge, Nt as _e, O as ve, On as ye, Ot as be, P as xe, Pt as Se, Q as Ce, Qt as we, R as Te, Rt as x, S as Ee, Sn as De, St as Oe, T as ke, Tn as Ae, Tt as S, U as je, Ut as Me, Vt as Ne, W as Pe, X as Fe, Xt as C, Y as Ie, Yt as Le, Z as Re, Zt as ze, _ as Be, _n as Ve, _t as w, an as He, at as Ue, b as We, bt as Ge, c as Ke, cn as qe, ct as Je, d as Ye, dn as Xe, dt as Ze, en as Qe, et as $e, fn as et, ft as tt, g as nt, gn as rt, gt as it, h as at, hn as ot, ht as st, i as ct, in as lt, it as ut, j as dt, jn as ft, jt as pt, k as T, kn as mt, kt as ht, ln as gt, lt as _t, m as E, mn as D, mt as vt, nn as yt, nt as bt, o as O, on as xt, ot as k, p as St, pn as Ct, pt as wt, q as Tt, qt as Et, r as Dt, rn as Ot, rt as kt, sn as At, st as jt, t as Mt, tn as A, tt as Nt, u as j, un as Pt, ut as M, v as Ft, vn as It, vt as Lt, w as Rt, wn as zt, wt as Bt, x as Vt, xn as Ht, xt as Ut, y as Wt, yn as Gt, yt as Kt, z as qt, zt as N } from "./dev-CmuvUKRq.js";
+import { n as Jt } from "./cliArgs-D4p8n7EE.js";
+import { r as Yt } from "./appPort-B_HpJ_ck.js";
+import { Ut as Xt, Vt as Zt } from "./webDev-DSI9SOhs.js";
 import { r as P } from "./dialectDriver-czCHYpeH.js";
-import { i as Jt, n as Yt } from "./connectionConfig-Bk9IC7D0.js";
-import { c as F, n as Xt, o as Zt } from "./seedRunner-Dgsiwk_e.js";
-import { d as Qt, h as $t, m as en, p as tn, r as nn } from "./frameworkTableAssembly-w-XnLa3q.js";
-import { n as rn, r as an, t as on } from "./declaredSchemaGates-BlcwObhb.js";
-import { S as sn, c as cn, n as ln, p as un, s as dn, x as fn } from "./fileConventions-DOqD3lPS.js";
-import { h as pn, o as mn } from "./inspect-CtL_xTbu.js";
-import { i as hn, n as gn, t as _n } from "./inspectMetrics-CGF94puw.js";
-import { n as vn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as yn, n as bn, r as xn, t as Sn } from "./webhookDiscovery-CphsQe59.js";
-import { r as Cn, u as wn } from "./apiBuild-CSFI8QGq.js";
-import { t as Tn } from "./bootTiming-BdyP9nYw.js";
-import { a as En, o as Dn, t as On } from "./dataProfile-Du3ztYxv.js";
-import I, { basename as kn, join as An } from "node:path";
-import { createWriteStream as jn, existsSync as Mn } from "node:fs";
-import { pathToFileURL as Nn } from "node:url";
-import { createLogger as L } from "@voltro/logger";
-import { AuthMiddleware as Pn, ConnectionInfoMiddleware as Fn, actionToRpc as In, anonymousSubject as Ln, isWireReachable as Rn, mutationToRpc as zn, queryToRpc as R, streamToRpc as Bn, wireErrorUnion as Vn, workflowCancelDescriptor as Hn, workflowDomainEventsQueryDescriptor as z, workflowEventDeliveriesQueryDescriptor as Un, workflowResumeDescriptor as Wn, workflowRunEventsQueryDescriptor as Gn, workflowRunQueryDescriptor as Kn, workflowRunStepsQueryDescriptor as qn, workflowRunsQueryDescriptor as Jn, workflowSignalDescriptor as B, workflowUpdateDescriptor as V } from "@voltro/protocol";
-import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as Yn, allRegisteredTables as Xn, and as Zn, connectionIdentity as Qn, derivedRowId as $n, describeTransferRun as er, ensureTableRegistered as tr, eq as U, or as nr } from "@voltro/database";
-import { Cause as rr, Effect as W, Layer as G, ManagedRuntime as ir } from "effect";
-import { SqlClient as ar } from "@effect/sql";
-import { declaredSnapshot as or, describeOutcome as sr, pendingFileMigrationIds as cr, runPlannedMigrations as lr } from "@voltro/database/sql";
-import { AggregateRegistry as ur, CostRegistry as dr, DORMANCY_WAKEUP_TENANT as fr, Dispatcher as pr, ExpectationRegistry as mr, ExperimentRegistry as hr, apiKeyManagementRoutes as gr, attachAnalyticsMirror as _r, attachExpectations as vr, attachExperiments as yr, attachFinops as br, awaitServerListening as xr, bindMutation as K, bindStream as Sr, bindSubscription as q, buildTracingLayer as Cr, cancelWakeup as wr, compileCron as Tr, dataStoreApiKeyStore as Er, formatServerOnlyLeaks as Dr, formatUnresolvedSources as Or, frameworkApiKeyStrategy as kr, getResourcePolicy as Ar, installPolicyGuardResolver as jr, loadResourceTuples as Mr, makeActionRunner as Nr, makeAdvisoryLockCoordinator as Pr, makeApiKeyService as Fr, makeApiKeyUsageBuffer as Ir, makeApiKeyUsageFlusher as Lr, makeAsyncKv as Rr, makeAuthMiddlewareLayers as zr, makeCoordinatedScheduler as Br, makeEffectStoreLayer as Vr, makeLazyWorkflowFacade as Hr, makeMutationOutputCodec as Ur, makeMutationRunner as J, makeOneShotQueryRunner as Wr, makeQueryDescriptorProducer as Gr, makeQueryFinalizer as Kr, makeQueryReauthorizer as qr, makeQuerySubscriber as Jr, makeSchemaRegistry as Yr, makeWorkflowFacade as Xr, makeWorkflowFacadeWithCallerContext as Zr, makeWorkflowLayers as Y, noopKv as Qr, onProcessShutdown as $r, recordSubscriptionDelivery as ei, recordWorkflowRun as ti, registerDefaultTupleSource as ni, registerWakeup as ri, resolveSecretsBackend as ii, runProvidedEffect as ai, setSecretsBackend as oi, setSystemStoreHandle as si, shutdownGraceMsFromEnv as ci, singleCoordinator as li, startRpcServer as ui, startScheduler as di, stripForbiddenForWire as fi, undoCaptureEnabled as pi, unresolvedSources as mi, withScopedRequest as hi, workflowToRpc as gi, wrapStoreWithBootCodec as _i } from "@voltro/runtime";
-import vi, { tmpdir as yi } from "node:os";
-import { RpcGroup as bi } from "@effect/rpc";
-import { appStorageProvider as xi, durabilityNotice as Si, fromNodeReadable as Ci, getObjectStream as wi, putObjectStream as Ti, toNodeReadable as Ei } from "@voltro/plugin-storage";
-import { isEnvContract as Di } from "@voltro/env";
-import { assertProductionSessionSecret as Oi } from "@voltro/protocol/session";
+import { i as Qt, n as F } from "./connectionConfig-Bk9IC7D0.js";
+import { c as $t, n as en, o as tn } from "./seedRunner-Dgsiwk_e.js";
+import { d as nn, h as rn, m as an, p as on, r as sn } from "./frameworkTableAssembly-D7LJuALW.js";
+import { n as cn, r as ln, t as un } from "./declaredSchemaGates-BlcwObhb.js";
+import { C as dn, a as fn, h as pn, l as mn, n as hn, u as gn, w as _n } from "./fileConventions-l-RIXbx8.js";
+import { h as vn, o as yn } from "./inspect-Bd8-9wsi.js";
+import { i as bn, n as xn, t as Sn } from "./inspectMetrics-CGF94puw.js";
+import { n as Cn } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as wn, n as Tn, r as En, t as Dn } from "./webhookDiscovery-CphsQe59.js";
+import { r as On, u as kn } from "./apiBuild-DTWp0S_q.js";
+import { t as An } from "./bootTiming-BdyP9nYw.js";
+import { a as jn, o as Mn, t as Nn } from "./dataProfile-Du3ztYxv.js";
+import I, { basename as Pn, join as Fn } from "node:path";
+import { createWriteStream as In, existsSync as Ln } from "node:fs";
+import { pathToFileURL as Rn } from "node:url";
+import { LoggerLayer as zn, createLogger as L } from "@voltro/logger";
+import { AuthMiddleware as Bn, ConnectionInfoMiddleware as Vn, actionToRpc as R, anonymousSubject as Hn, isWireReachable as Un, mutationToRpc as Wn, queryToRpc as z, streamToRpc as Gn, wireErrorUnion as Kn, workflowCancelDescriptor as qn, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as Jn, workflowRunEventsQueryDescriptor as Yn, workflowRunQueryDescriptor as Xn, workflowRunStepsQueryDescriptor as Zn, workflowRunsQueryDescriptor as Qn, workflowSignalDescriptor as $n, workflowUpdateDescriptor as er } from "@voltro/protocol";
+import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as tr, allRegisteredTables as nr, and as rr, connectionIdentity as ir, derivedRowId as ar, describeTransferRun as or, ensureTableRegistered as sr, eq as U, or as cr } from "@voltro/database";
+import { Cause as lr, Effect as W, Layer as G, ManagedRuntime as ur } from "effect";
+import { SqlClient as dr } from "@effect/sql";
+import { declaredSnapshot as fr, describeOutcome as pr, pendingFileMigrationIds as mr, runPlannedMigrations as hr } from "@voltro/database/sql";
+import { AggregateRegistry as gr, CostRegistry as _r, DORMANCY_WAKEUP_TENANT as vr, Dispatcher as yr, ExpectationRegistry as br, ExperimentRegistry as xr, apiKeyManagementRoutes as Sr, attachAnalyticsMirror as Cr, attachExpectations as wr, attachExperiments as Tr, attachFinops as Er, awaitServerListening as Dr, bindMutation as K, bindStream as Or, bindSubscription as q, buildTracingLayer as kr, cancelWakeup as Ar, compileCron as jr, dataStoreApiKeyStore as Mr, formatServerOnlyLeaks as Nr, formatUnresolvedSources as Pr, frameworkApiKeyStrategy as Fr, getResourcePolicy as Ir, installPolicyGuardResolver as Lr, loadResourceTuples as Rr, makeActionRunner as zr, makeAdvisoryLockCoordinator as Br, makeApiKeyService as Vr, makeApiKeyUsageBuffer as Hr, makeApiKeyUsageFlusher as Ur, makeAsyncKv as Wr, makeAuthMiddlewareLayers as Gr, makeCoordinatedScheduler as Kr, makeEffectStoreLayer as qr, makeLazyWorkflowFacade as Jr, makeMutationOutputCodec as Yr, makeMutationRunner as Xr, makeOneShotQueryRunner as Zr, makeQueryDescriptorProducer as J, makeQueryFinalizer as Qr, makeQueryReauthorizer as $r, makeQuerySubscriber as ei, makeSchemaRegistry as ti, makeWorkflowFacade as ni, makeWorkflowFacadeWithCallerContext as ri, makeWorkflowLayers as ii, noopKv as ai, onProcessShutdown as oi, recordSubscriptionDelivery as Y, recordWorkflowRun as si, registerDefaultTupleSource as ci, registerWakeup as li, resolveSecretsBackend as ui, runProvidedEffect as di, setSecretsBackend as fi, setSystemStoreHandle as pi, shutdownGraceMsFromEnv as mi, singleCoordinator as hi, startRpcServer as gi, startScheduler as _i, stripForbiddenForWire as vi, undoCaptureEnabled as yi, unresolvedSources as bi, withScopedRequest as xi, workflowToRpc as Si, wrapStoreWithBootCodec as Ci } from "@voltro/runtime";
+import wi, { tmpdir as Ti } from "node:os";
+import { RpcGroup as Ei } from "@effect/rpc";
+import { appStorageProvider as Di, durabilityNotice as Oi, fromNodeReadable as ki, getObjectStream as Ai, putObjectStream as ji, toNodeReadable as Mi } from "@voltro/plugin-storage";
+import { isEnvContract as Ni } from "@voltro/env";
+import { assertProductionSessionSecret as Pi } from "@voltro/protocol/session";
 import X from "node:fs/promises";
-import { createHash as ki, timingSafeEqual as Ai } from "node:crypto";
-import { channelFor as ji, getBroadcastPlugin as Mi } from "@voltro/plugin-broadcast";
-import { buildDeliverWebhookExecute as Ni, buildWebhooksService as Pi, defaultIncomingPath as Fi, deliverWebhookWorkflow as Ii, makeDeferredEmitHandler as Li, mountIncomingWebhook as Ri } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as zi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as Bi } from "@voltro/plugin-mail";
-import { checkSchemaDrift as Vi, decideStaging as Hi, isEnvironmentLocal as Ui, packBundle as Wi, peekBundle as Gi, runExport as Ki, runImport as qi, storageBlobSink as Ji, storageRefsBlobSource as Yi, unpackBundle as Xi, unpackBundleToDir as Zi } from "@voltro/data-transfer";
+import { createHash as Fi, timingSafeEqual as Ii } from "node:crypto";
+import { channelFor as Li, getBroadcastPlugin as Ri } from "@voltro/plugin-broadcast";
+import { buildDeliverWebhookExecute as zi, buildWebhooksService as Bi, defaultIncomingPath as Vi, deliverWebhookWorkflow as Hi, makeDeferredEmitHandler as Ui, mountIncomingWebhook as Wi } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as Gi } from "@voltro/plugin-auth";
+import { registerEmailTemplates as Ki } from "@voltro/plugin-mail";
+import { checkSchemaDrift as qi, decideStaging as Ji, isEnvironmentLocal as Yi, packBundle as Xi, peekBundle as Zi, runExport as Qi, runImport as $i, storageBlobSink as ea, storageRefsBlobSource as ta, unpackBundle as na, unpackBundleToDir as ra } from "@voltro/data-transfer";
 //#region \0rolldown/runtime.js
-var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
+var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
 	if (typeof require < "u") return require.apply(this, arguments);
 	throw Error("Calling `require` for \"" + e + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
-}), $i = () => Math.max(500, Math.floor(ci() * .6)), ea = (e) => new Promise((t) => setTimeout(t, e)), ta = (e) => {
+}), aa = () => Math.max(500, Math.floor(mi() * .6)), oa = (e) => new Promise((t) => setTimeout(t, e)), sa = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -61,14 +61,14 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? $i();
+		let n = t.budgetMs ?? aa();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await ea(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await oa(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -85,7 +85,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await ea(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await oa(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -97,83 +97,83 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			await a(e), await o();
 		}
 	};
-}, na = "/_voltro/admin/import", ra = "/_voltro/admin/import/start", ia = "/_voltro/admin/export", aa = "/_voltro/admin/export/download", oa = "/_voltro/admin/transfers", Z = (e, t) => ({
+}, ca = "/_voltro/admin/import", la = "/_voltro/admin/import/start", ua = "/_voltro/admin/export", da = "/_voltro/admin/export/download", fa = "/_voltro/admin/transfers", Z = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), sa = (e) => {
+}), pa = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, ca = (e, t) => Ai(ki("sha256").update(e).digest(), ki("sha256").update(t).digest()), la = (e, t, n = "POST") => {
+}, ma = (e, t) => Ii(Fi("sha256").update(e).digest(), Fi("sha256").update(t).digest()), ha = (e, t, n = "POST") => {
 	if (e.method.toUpperCase() !== n) return Z(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Z(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let r = sa(e.headers);
-	return !r || !ca(r, t) ? Z(401, { error: "unauthorized" }) : null;
-}, ua = /^[A-Za-z0-9_-]{8,64}$/, da = (e) => ua.test(e), fa = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? I.join(vi.tmpdir(), "voltro-import-uploads"), pa = (e) => I.join(fa(), e), ma = (e) => I.join(pa(e), "archive.bin"), ha = (e) => I.join(pa(e), "meta.json"), ga = async (e = Date.now()) => {
+	let r = pa(e.headers);
+	return !r || !ma(r, t) ? Z(401, { error: "unauthorized" }) : null;
+}, ga = /^[A-Za-z0-9_-]{8,64}$/, _a = (e) => ga.test(e), va = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? I.join(wi.tmpdir(), "voltro-import-uploads"), ya = (e) => I.join(va(), e), ba = (e) => I.join(ya(e), "archive.bin"), xa = (e) => I.join(ya(e), "meta.json"), Sa = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(fa())) {
+		for (let n of await X.readdir(va())) {
 			if (n === ".runs") continue;
-			let r = await X.stat(pa(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(pa(n), {
+			let r = await X.stat(ya(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(ya(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, _a = async (e) => {
-	if (!da(e)) return {
+}, Ca = async (e) => {
+	if (!_a(e)) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let t = await X.stat(ma(e)).catch(() => null);
+	let t = await X.stat(ba(e)).catch(() => null);
 	if (t === null) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let n = await va(e);
+	let n = await wa(e);
 	return {
 		bytes: t.size,
 		key: n.key ?? null,
 		runId: n.runId ?? null
 	};
-}, va = async (e) => {
+}, wa = async (e) => {
 	try {
-		let t = await X.readFile(ha(e), "utf8");
+		let t = await X.readFile(xa(e), "utf8");
 		return JSON.parse(t);
 	} catch {
 		return {};
 	}
-}, ya = async (e, t) => {
-	let n = ha(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+}, Ta = async (e, t) => {
+	let n = xa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
 	await X.writeFile(r, JSON.stringify(t)), await X.rename(r, n);
-}, ba = async (e, t, n) => {
-	if (!da(e)) return t;
-	await X.mkdir(pa(e), { recursive: !0 });
-	let r = await va(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
-	return i !== null && n?.takeOver !== !0 ? i : (await ya(e, {
+}, Ea = async (e, t, n) => {
+	if (!_a(e)) return t;
+	await X.mkdir(ya(e), { recursive: !0 });
+	let r = await wa(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
+	return i !== null && n?.takeOver !== !0 ? i : (await Ta(e, {
 		...r,
 		runId: t
 	}), t);
-}, xa = async (e) => {
-	if (!da(e)) return;
-	let t = await va(e);
+}, Da = async (e) => {
+	if (!_a(e)) return;
+	let t = await wa(e);
 	if (t.runId === void 0) return;
 	let { runId: n, ...r } = t;
-	await ya(e, r).catch(() => void 0);
-}, Sa = async (e, t, n) => (await X.mkdir(pa(e), { recursive: !0 }), await X.writeFile(ma(e), Buffer.from(t)), await ya(e, {
-	...await va(e),
+	await Ta(e, r).catch(() => void 0);
+}, Oa = async (e, t, n) => (await X.mkdir(ya(e), { recursive: !0 }), await X.writeFile(ba(e), Buffer.from(t)), await Ta(e, {
+	...await wa(e),
 	key: n,
 	startedAt: (/* @__PURE__ */ new Date()).toISOString()
-}), t.byteLength), Ca = (e) => `up-${ki("sha256").update(e).digest("hex").slice(0, 32)}`, wa = async (e) => {
-	if (!da(e.id)) return {
+}), t.byteLength), ka = (e) => `up-${Fi("sha256").update(e).digest("hex").slice(0, 32)}`, Aa = async (e) => {
+	if (!_a(e.id)) return {
 		reason: "bad-id",
-		message: `upload id must match ${String(ua)}`
+		message: `upload id must match ${String(ga)}`
 	};
-	let t = await _a(e.id);
+	let t = await Ca(e.id);
 	if (t.key !== null && t.key !== e.key) return {
 		reason: "key-mismatch",
 		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
@@ -183,34 +183,34 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
 		expectedOffset: t.bytes
 	};
-	if (await X.mkdir(pa(e.id), { recursive: !0 }), t.key === null) {
-		let t = await va(e.id);
-		await ya(e.id, {
+	if (await X.mkdir(ya(e.id), { recursive: !0 }), t.key === null) {
+		let t = await wa(e.id);
+		await Ta(e.id, {
 			...t,
 			key: e.key,
 			startedAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
 	return await new Promise((t, n) => {
-		let r = jn(ma(e.id), { flags: "a" });
+		let r = In(ba(e.id), { flags: "a" });
 		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
 	}), { total: t.bytes + e.bytes.byteLength };
-}, Ta = async (e) => {
-	let t = await X.stat(ma(e));
+}, ja = async (e) => {
+	let t = await X.stat(ba(e));
 	return {
-		path: ma(e),
+		path: ba(e),
 		bytes: t.size
 	};
-}, Ea = () => I.join(fa(), ".runs"), Da = (e) => I.join(Ea(), `${e}.bin`), Oa = async (e, t) => {
-	if (!da(e)) return null;
-	let n = ma(e), r = await X.stat(n).catch(() => null);
+}, Ma = () => I.join(va(), ".runs"), Na = (e) => I.join(Ma(), `${e}.bin`), Pa = async (e, t) => {
+	if (!_a(e)) return null;
+	let n = ba(e), r = await X.stat(n).catch(() => null);
 	if (r === null || r.size === 0) return null;
-	await X.mkdir(Ea(), { recursive: !0 });
-	let i = Da(t);
+	await X.mkdir(Ma(), { recursive: !0 });
+	let i = Na(t);
 	return await X.rename(n, i), i;
-}, ka = async (e) => {
-	await X.rm(Da(e), { force: !0 }).catch(() => void 0);
-}, Q = L({ scope: "voltro:admin-import" }), Aa = "VBUNDLE2", ja = (e) => {
+}, Fa = async (e) => {
+	await X.rm(Na(e), { force: !0 }).catch(() => void 0);
+}, Q = L({ scope: "voltro:admin-import" }), Ia = "VBUNDLE2", La = (e) => {
 	let t = e.req.headers["x-import-rollback-key"];
 	if (e.mode !== "replace") return { options: {} };
 	if (typeof t != "string" || t.length === 0) return Q.warn("admin.import: no rollback capture — this run empties the target first, and nothing was asked to be kept. Send `x-import-rollback-key: <storage key>` (voltro data import --rollback-key <key>) to have the instance store the target's current rows before deleting them."), { options: {} };
@@ -221,18 +221,18 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			hint: "A capture written to the pod would not survive the failure it exists for. Configure storage (the same one the storage-push export uses), or re-send without `x-import-rollback-key` to accept that a run which does not finish can leave the target emptied. Note that CONFIGURED is not the same question as SURVIVES: a `filesystem` provider pointed at a container directory with no volume behind it passes this check and dies with the pod. The run says so when it can observe it — the capture path being on the same filesystem as `/`."
 		})
 	};
-	let n = An(yi(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
+	let n = Fn(Ti(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
 	return {
 		key: t,
 		options: {
 			rollbackDir: n,
 			onRollbackCaptured: async () => {
-				let e = Si(n);
-				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Wi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
+				let e = Oi(n);
+				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Xi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
 			}
 		}
 	};
-}, Ma = (e) => {
+}, Ra = (e) => {
 	let t = e["x-import-mode"], n = e["x-import-atomic"];
 	return {
 		mode: t,
@@ -242,34 +242,34 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		dryRun: e["x-import-dry-run"] === "1" || e["x-import-dry-run"] === "true",
 		tables: (e["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean)
 	};
-}, Na = async (e, t) => {
+}, za = async (e, t) => {
 	if (typeof t.bundleKey == "string" && t.bundleKey !== "") {
 		if (!e.openArchive) return { refusal: Z(501, { error: "storage transport not configured on this instance" }) };
 		let n = e.openArchive, r = t.bundleKey;
 		return {
 			source: () => n(r),
 			transport: "storage",
-			uploadId: Ca(r)
+			uploadId: ka(r)
 		};
 	}
 	let n = t.uploadId;
-	if (typeof n != "string" || !da(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
-	let r = await Ta(n).catch(() => null);
+	if (typeof n != "string" || !_a(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
+	let r = await ja(n).catch(() => null);
 	return r === null || r.bytes === 0 ? { refusal: Z(409, {
 		error: "no such upload",
 		message: `this instance holds no bytes for upload '${n}'. Upload the bundle first, or re-upload if it has expired.`
 	}) } : {
-		source: () => Pa(r.path),
+		source: () => Ba(r.path),
 		transport: "upload",
 		uploadId: n
 	};
-}, Pa = (e) => {
-	let { createReadStream: t } = Qi("node:fs");
+}, Ba = (e) => {
+	let { createReadStream: t } = ia("node:fs");
 	return t(e);
-}, Fa = (e) => async (t) => {
-	let n = la(t, e.secret);
+}, Va = (e) => async (t) => {
+	let n = ha(t, e.secret);
 	if (n) return n;
-	let r = Ma(t.headers), i = ja({
+	let r = Ra(t.headers), i = La({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -283,16 +283,16 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			return Z(400, { error: "a preflight body must be JSON: { tables: string[] } or { bundleKey: string }" });
 		}
 		let a = Array.isArray(n.tables) ? n.tables.filter((e) => typeof e == "string") : [];
-		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Ia(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
+		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Ha(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
 			error: "a preflight needs { tables: string[] } — the bundle's table names, so the staging decision can be made against them",
 			hint: "or { bundleKey } on an instance with storage configured, where this endpoint reads the table list out of the archive itself"
 		});
-		let o = Hi({
+		let o = Ji({
 			mode: r.mode ?? "upsert",
 			...e.dialect === void 0 ? {} : { targetDialect: e.dialect },
 			...e.snapshot === void 0 ? {} : { targetSnapshot: e.snapshot },
 			bundleTables: a,
-			isSkipped: Ui,
+			isSkipped: Yi,
 			canRunSql: !0
 		});
 		return Z(200, {
@@ -311,8 +311,8 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	}
 	let a = t.headers["x-import-upload-id"];
 	if (a !== void 0 && a !== "") {
-		if (ga(), t.headers["x-import-probe"] === "1") {
-			let e = await _a(a);
+		if (Sa(), t.headers["x-import-probe"] === "1") {
+			let e = await Ca(a);
 			return Z(200, {
 				uploadId: a,
 				bytes: e.bytes,
@@ -321,7 +321,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
 		if (e === "" || !Number.isFinite(n) || n < 0) return Z(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
-		let r = await wa({
+		let r = await Aa({
 			id: a,
 			key: e,
 			offset: n,
@@ -343,12 +343,12 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			complete: i
 		});
 	}
-	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Aa) {
-		ga();
-		let e = ki("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = Ca(e);
+	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Ia) {
+		Sa();
+		let e = Fi("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = ka(e);
 		return Z(202, {
 			uploadId: n,
-			bytes: await Sa(n, t.rawBody, e),
+			bytes: await Oa(n, t.rawBody, e),
 			complete: !0
 		});
 	}
@@ -359,22 +359,22 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		return Z(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
 	}
 	return typeof o.bundleKey != "string" || !o.bundleKey ? Z(400, { error: "body.bundleKey (string) is required for the storage transport" }) : e.openArchive ? Z(202, {
-		uploadId: Ca(o.bundleKey),
+		uploadId: ka(o.bundleKey),
 		bundleKey: o.bundleKey,
 		complete: !0
 	}) : Z(501, { error: "storage transport not configured on this instance" });
-}, Ia = async (e) => {
-	let t = await Gi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
+}, Ha = async (e) => {
+	let t = await Zi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
 	if (t === void 0) return [];
 	try {
 		return (JSON.parse(Buffer.from(t).toString("utf8")).tables ?? []).map((e) => e.name).filter((e) => typeof e == "string");
 	} catch {
 		return [];
 	}
-}, La = (e) => async (t) => {
-	let n = la(t, e.secret);
+}, Ua = (e) => async (t) => {
+	let n = ha(t, e.secret);
 	if (n) return n;
-	let r = Ma(t.headers), i = ja({
+	let r = Ra(t.headers), i = La({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -386,12 +386,12 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} catch {
 		return Z(400, { error: "body must be JSON: { uploadId } or { bundleKey }" });
 	}
-	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? Ca(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
-	if (!da(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
-	let s = $n("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await ba(o, s);
+	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? ka(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
+	if (!_a(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
+	let s = ar("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Ea(o, s);
 	if (c !== s) {
-		let t = await En(e.store, c);
-		if (Dn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
+		let t = await jn(e.store, c);
+		if (Mn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
 			uploadId: o,
 			runId: c
 		}), Z(202, {
@@ -402,18 +402,18 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		Q.info("admin.import start: taking over a claim whose run is not running", {
 			uploadId: o,
 			staleRunId: c,
-			outcome: Dn(t) ?? "no record"
-		}), c = await ba(o, s, { takeOver: !0 });
+			outcome: Mn(t) ?? "no record"
+		}), c = await Ea(o, s, { takeOver: !0 });
 	}
-	let l = async (e) => (await xa(o).catch(() => void 0), e), u = await Na(e, {
+	let l = async (e) => (await Da(o).catch(() => void 0), e), u = await za(e, {
 		...typeof a.uploadId == "string" ? { uploadId: a.uploadId } : {},
 		...typeof a.bundleKey == "string" ? { bundleKey: a.bundleKey } : {}
 	});
 	if ("refusal" in u) return l(u.refusal);
 	if (e.snapshot !== void 0 && !r.force) {
-		let t = await Ra(u.source());
+		let t = await Wa(u.source());
 		if (t !== null) {
-			let n = Vi(t.source?.schemaFingerprint ?? "", e.snapshot, za(t));
+			let n = qi(t.source?.schemaFingerprint ?? "", e.snapshot, Ga(t));
 			if (n.drifted) return Q.warn("admin.import refused (schema drift)", {
 				transport: u.transport,
 				bundle: n.bundleFingerprint.slice(0, 16),
@@ -428,17 +428,17 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 	}
 	let d = null;
-	if (u.transport === "upload" && (d = await Oa(u.uploadId, c), d === null)) return l(Z(409, {
+	if (u.transport === "upload" && (d = await Pa(u.uploadId, c), d === null)) return l(Z(409, {
 		error: "no such upload",
 		message: `the bytes for upload '${u.uploadId}' are gone. Re-upload the bundle.`
 	}));
-	let f = await Ba(e.store, {
+	let f = await Ka(e.store, {
 		runId: c,
 		mode: r.mode ?? "upsert",
 		via: "api",
 		bundle: u.transport === "storage" ? String(a.bundleKey) : u.uploadId
 	});
-	return Va({
+	return qa({
 		deps: e,
 		opts: r,
 		rollback: i,
@@ -446,7 +446,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		traced: f,
 		resolved: d === null ? u : {
 			...u,
-			source: () => Pa(d)
+			source: () => Ba(d)
 		}
 	}), Q.info("admin.import started", {
 		runId: c,
@@ -465,15 +465,15 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: f,
 		outcome: "poll /_voltro/admin/transfers for this runId — a 202 means started, not finished"
 	});
-}, Ra = async (e) => {
-	let t = await Gi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
+}, Wa = async (e) => {
+	let t = await Zi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
 	if (t == null) return null;
 	try {
 		return JSON.parse(Buffer.from(t).toString("utf8"));
 	} catch {
 		return null;
 	}
-}, za = (e) => ({ tables: (e.tables ?? []).map((e) => ({
+}, Ga = (e) => ({ tables: (e.tables ?? []).map((e) => ({
 	name: e.name,
 	indexes: [],
 	columns: Object.entries(e.columnTypes ?? {}).map(([e, t]) => ({
@@ -483,9 +483,9 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		unique: !1,
 		hasDefault: !1
 	}))
-})) }), Ba = async (e, t) => {
+})) }), Ka = async (e, t) => {
 	try {
-		return tr(Yn), await e.insert(H, {
+		return sr(tr), await e.insert(H, {
 			id: t.runId,
 			direction: "import",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -505,7 +505,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, Va = async (e) => {
+}, qa = async (e) => {
 	let { deps: t, opts: n, rollback: r, resolved: i, runId: a } = e, o = await import("node:os"), s = await import("node:fs/promises"), c = await import("node:path"), l = await s.mkdtemp(c.join(o.tmpdir(), "voltro-admin-import-")), u = async (n) => {
 		Q.warn("admin.import failed", {
 			runId: a,
@@ -517,11 +517,11 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}).then(() => void 0, () => void 0);
 	};
 	try {
-		t.assetSink ? await Xi(i.source(), {
+		t.assetSink ? await na(i.source(), {
 			dir: l,
 			blobs: t.assetSink
-		}) : await Zi(i.source(), l);
-		let o = await W.runPromiseExit(qi({
+		}) : await ra(i.source(), l);
+		let o = await W.runPromiseExit($i({
 			store: t.store,
 			bundleDir: l,
 			...n.mode ? { mode: n.mode } : {},
@@ -566,24 +566,24 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		await s.rm(l, {
 			recursive: !0,
 			force: !0
-		}).catch(() => void 0), await ka(a).catch(() => void 0), await xa(i.uploadId).catch(() => void 0);
+		}).catch(() => void 0), await Fa(a).catch(() => void 0), await Da(i.uploadId).catch(() => void 0);
 	}
-}, Ha = /^[A-Za-z0-9_-]{8,64}$/, Ua = (e) => Ha.test(e), Wa = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? I.join(vi.tmpdir(), "voltro-export-artifacts"), Ga = (e) => I.join(Wa(), e), Ka = (e) => I.join(Ga(e), "archive.bin"), qa = async (e = Date.now()) => {
+}, Ja = /^[A-Za-z0-9_-]{8,64}$/, Ya = (e) => Ja.test(e), Xa = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? I.join(wi.tmpdir(), "voltro-export-artifacts"), Za = (e) => I.join(Xa(), e), Qa = (e) => I.join(Za(e), "archive.bin"), $a = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(Wa())) {
-			let r = await X.stat(Ga(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Ga(n), {
+		for (let n of await X.readdir(Xa())) {
+			let r = await X.stat(Za(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Za(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, Ja = async (e, t) => {
-	if (!Ua(e)) throw Error(`invalid run id: ${e}`);
-	await X.mkdir(Ga(e), { recursive: !0 });
-	let { createWriteStream: n } = await import("node:fs"), r = n(Ka(e)), i = 0;
+}, eo = async (e, t) => {
+	if (!Ya(e)) throw Error(`invalid run id: ${e}`);
+	await X.mkdir(Za(e), { recursive: !0 });
+	let { createWriteStream: n } = await import("node:fs"), r = n(Qa(e)), i = 0;
 	try {
 		for await (let e of t) i += e.byteLength, r.write(Buffer.from(e)) || await new Promise((e, t) => {
 			r.once("drain", e), r.once("error", t);
@@ -594,18 +594,18 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	}
 	return i;
-}, Ya = async (e) => {
-	if (!Ua(e)) return null;
-	let t = await X.stat(Ka(e)).catch(() => null);
+}, to = async (e) => {
+	if (!Ya(e)) return null;
+	let t = await X.stat(Qa(e)).catch(() => null);
 	return t === null ? null : t.size;
-}, Xa = async (e, t, n) => {
-	let r = await Ya(e);
+}, no = async (e, t, n) => {
+	let r = await to(e);
 	if (r === null) return null;
 	if (t >= r) return {
 		bytes: Buffer.alloc(0),
 		total: r
 	};
-	let i = await X.open(Ka(e), "r");
+	let i = await X.open(Qa(e), "r");
 	try {
 		let e = Math.max(0, Math.min(n, r - t)), a = Buffer.alloc(e);
 		return await i.read(a, 0, e, t), {
@@ -615,27 +615,27 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		await i.close();
 	}
-}, Za = async (e) => {
-	Ua(e) && await X.rm(Ga(e), {
+}, ro = async (e) => {
+	Ya(e) && await X.rm(Za(e), {
 		recursive: !0,
 		force: !0
 	}).catch(() => void 0);
-}, Qa = L({ scope: "voltro:admin-export" }), $a = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], eo = (e) => {
+}, io = L({ scope: "voltro:admin-export" }), ao = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], oo = (e) => {
 	if (typeof e.tenant == "string" && e.tenant) return {
 		kind: "tenant",
 		tenantId: e.tenant
 	};
 	if (Array.isArray(e.tables) && e.tables.length) return {
 		kind: "tables",
-		tables: $a(e.tables)
+		tables: ao(e.tables)
 	};
-	let t = $a(e.exclude);
+	let t = ao(e.exclude);
 	return t.length > 0 ? {
 		kind: "all",
 		exclude: t
 	} : { kind: "all" };
-}, to = (e) => async (t) => {
-	let n = la(t, e.secret);
+}, so = (e) => async (t) => {
+	let n = ha(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -655,12 +655,12 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? eo(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = $n("dexp", `${Date.now()}-${Math.random()}`), d = await no(e.store, {
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? oo(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = ar("dexp", `${Date.now()}-${Math.random()}`), d = await co(e.store, {
 		runId: u,
 		mode: i.subset ? "subset" : s.kind,
 		bundle: c ? String(r.bundleKey) : null
 	});
-	return ro({
+	return lo({
 		deps: e,
 		runId: u,
 		recorded: d,
@@ -670,7 +670,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		blobs: l,
 		...o ? { compression: o } : {},
 		...c ? { bundleKey: String(r.bundleKey) } : {}
-	}), qa(), Qa.info("admin.export started", {
+	}), $a(), io.info("admin.export started", {
 		runId: u,
 		scope: s.kind,
 		storage: c
@@ -681,9 +681,9 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: d,
 		outcome: "poll /_voltro/admin/transfers for this runId; fetch the bytes from /_voltro/admin/export/download"
 	});
-}, no = async (e, t) => {
+}, co = async (e, t) => {
 	try {
-		return tr(Yn), await e.insert(H, {
+		return sr(tr), await e.insert(H, {
 			id: t.runId,
 			direction: "export",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -698,17 +698,17 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			staged: null
 		}), !0;
 	} catch (e) {
-		return Qa.warn("admin.export: the run could not be recorded", {
+		return io.warn("admin.export: the run could not be recorded", {
 			runId: t.runId,
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, ro = async (e) => {
+}, lo = async (e) => {
 	let { deps: t, runId: n } = e, r = await import("node:os"), i = await import("node:fs/promises"), a = await import("node:path"), o = await i.mkdtemp(a.join(r.tmpdir(), "voltro-admin-export-")), s = async (r) => {
 		e.recorded && await t.store.update(H, n, r).then(() => void 0, () => void 0);
 	};
 	try {
-		let r = await W.runPromise(Ki({
+		let r = await W.runPromise(Qi({
 			store: t.store,
 			snapshot: t.snapshot,
 			dialect: t.dialect,
@@ -723,16 +723,16 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		})), i = r.tables.reduce((e, t) => e + t.rowCount, 0), a = r.masking?.transformed.length ?? 0;
 		if (e.bundleKey !== void 0) {
 			if (!t.putArchive) throw Error("storage transport not configured on this instance");
-			await t.putArchive(e.bundleKey, () => Wi({
+			await t.putArchive(e.bundleKey, () => Xi({
 				dir: o,
 				...e.blobs
 			}));
 		}
-		let c = await Ja(n, Wi({
+		let c = await eo(n, Xi({
 			dir: o,
 			...e.blobs
 		}));
-		Qa.info("admin.export complete", {
+		io.info("admin.export complete", {
 			runId: n,
 			tables: r.tables.length,
 			rows: i,
@@ -748,25 +748,25 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	} catch (e) {
 		let t = e?.message ?? String(e);
-		Qa.warn("admin.export failed", {
+		io.warn("admin.export failed", {
 			runId: n,
 			error: t
 		}), await s({
 			failure: t,
 			finishedAt: null
-		}), await Za(n);
+		}), await ro(n);
 	} finally {
 		await i.rm(o, {
 			recursive: !0,
 			force: !0
 		}).catch(() => void 0);
 	}
-}, io = (e) => async (t) => {
-	let n = la(t, e.secret, "GET");
+}, uo = (e) => async (t) => {
+	let n = ha(t, e.secret, "GET");
 	if (n) return n;
 	let r = new URLSearchParams(t.query ?? ""), i = r.get("runId") ?? "";
-	if (!Ua(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
-	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await Xa(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, oo) : ao);
+	if (!Ya(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
+	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await no(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, po) : fo);
 	return s === null ? Z(404, {
 		error: "no artefact",
 		message: `this instance holds no produced bundle for run '${i}'. It may have expired, or the export may still be running — poll the run first.`
@@ -780,7 +780,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			"x-export-length": String(s.bytes.byteLength)
 		}
 	};
-}, ao = 8388608, oo = 33554432, so = async (e, t) => await e.query({
+}, fo = 8388608, po = 33554432, mo = async (e, t) => await e.query({
 	table: H,
 	order: [{
 		column: "startedAt",
@@ -790,19 +790,19 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	projection: void 0,
 	skip: 0,
 	take: t
-}), co = (e) => {
+}), ho = (e) => {
 	let t = new Date(e);
 	return Number.isFinite(t.getTime()) ? t : /* @__PURE__ */ new Date(0);
-}, lo = (e) => ({
+}, go = (e) => ({
 	...e,
-	startedAt: co(e.startedAt),
-	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : co(e.finishedAt)
-}), uo = (e) => async (t) => {
-	let n = la(t, e.secret, "GET");
+	startedAt: ho(e.startedAt),
+	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : ho(e.finishedAt)
+}), _o = (e) => async (t) => {
+	let n = ha(t, e.secret, "GET");
 	if (n) return n;
 	let r = Number(new URLSearchParams(t.query ?? "").get("limit") ?? "20"), i = Number.isFinite(r) ? Math.max(1, Math.min(200, Math.trunc(r))) : 20, a;
 	try {
-		a = (await so(e.store, i)).map(lo);
+		a = (await mo(e.store, i)).map(go);
 	} catch (e) {
 		return Z(409, {
 			error: "no import history",
@@ -825,11 +825,11 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			direction: e.direction,
 			failure: e.failure,
 			staged: e.staged,
-			line: er(e)
+			line: or(e)
 		}))
 	});
-}, fo = (e, t, n = {}) => (async function* () {
-	let r = await W.runPromise(wi(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await Ei(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, vo = (e, t, n = {}) => (async function* () {
+	let r = await W.runPromise(Ai(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await Mi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -838,7 +838,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), po = {
+})(), yo = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -847,53 +847,52 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, mo = async (e) => {
-	Me(e.appProcedures ?? e.discovered, {
+}, bo = async (e) => {
+	Ne(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), si({
+	}), pi({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new pr({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new yr({
+		crdtColumnsOf: (t) => e.schemaRegistry.crdtColumns(t),
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		...e.reactive === void 0 ? {} : { reactive: e.reactive },
 		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => ei({
+		recordDelivery: (e) => Y({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? po, a = e.kv ?? Qr, o, s = () => void 0, u, d, f, ee, te, ne, h, re = St({
+	}), i = e.cache ?? yo, a = e.kv ?? ai, o, s = () => void 0, u, d, f, ee, te, ne, m, g = L({ scope: "voltro:workflow" }), re = L({ scope: "voltro:schedule" }), ie = Et({
 		store: e.store,
-		warn: (e, t) => {
-			process.stderr.write(`[workflow] ${e} ${JSON.stringify(t)}\n`);
-		}
-	}), ie = re.remember, ae = re.resolve, oe = de({
+		warn: (e, t) => g.warn(e, t)
+	}), ae = ie.remember, oe = ie.resolve, ce = de({
 		authority: e.authority,
 		getStore: () => e.store
-	}), g = (e.discovered.workflows?.length ?? 0) > 0 ? Hr(() => o) : void 0, ue = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, pe = ue || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ve = e.tenantIsolation === "namespace", xe = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), we, Te, b = e.discovered.webhooks;
-	if (b && b.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? Jr(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ve = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ye = e.tenantIsolation === "namespace", Se = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), we, Te, x = e.discovered.webhooks;
+	if (x && x.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
-		let t = A({
+		let t = Xe({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: i,
 			kv: a
-		}), n = b.outgoing.map((e) => e.descriptor);
-		Te = Ii.toLayer(Ni(t, { events: n })), we = Pi(t, async (e) => {
+		}), n = x.outgoing.map((e) => e.descriptor);
+		Te = Hi.toLayer(zi(t, { events: n })), we = Bi(t, async (e) => {
 			let t = f;
 			if (t === void 0) {
-				xe.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+				Se.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				});
 				return;
 			}
-			t.runPromise(Ii.execute(e)).catch((t) => {
-				xe.error("deliverWebhook workflow crashed", {
+			t.runPromise(Hi.execute(e)).catch((t) => {
+				Se.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				}, t);
@@ -901,10 +900,10 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}, { events: n });
 	}
 	let Ee = /* @__PURE__ */ new Map();
-	if (b) for (let e of b.incoming) {
-		let t = e.descriptor.path ?? Fi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ri(e.descriptor, {
+	if (x) for (let e of x.incoming) {
+		let t = e.descriptor.path ?? Vi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Wi(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => g === void 0 ? void 0 : Zr(g, {
+			resolveWorkflows: () => v === void 0 ? void 0 : ri(v, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -916,17 +915,17 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					idempotency: e.idempotency,
 					durationMs: e.durationMs
 				};
-				e.status >= 500 ? xe.error("incoming delivery failed", t) : e.status >= 400 ? xe.warn("incoming delivery rejected", t) : xe.info("incoming delivery handled", t);
+				e.status >= 500 ? Se.error("incoming delivery failed", t) : e.status >= 400 ? Se.warn("incoming delivery rejected", t) : Se.info("incoming delivery handled", t);
 			}
 		});
 		Ee.set(t, { handle: r });
 	}
-	jr(), ni((t) => Mr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let Oe = [], ke = [...e.discovered.outboxHandlers ?? [], ...bn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
+	Lr(), ci((t) => Rr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	let De = [], ke = [...e.discovered.outboxHandlers ?? [], ...Tn((x?.outgoing.length ?? 0) + (x?.incoming.length ?? 0) + (x?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: Li(() => we)
-	}] : []], Ae = ke.length > 0 ? Ce({
+		definition: Ui(() => we)
+	}] : []], Ae = ke.length > 0 ? l({
 		handlers: ke,
 		store: e.store,
 		log: (e.log ?? L({ scope: "voltro:serve" })).child("outbox"),
@@ -935,15 +934,15 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			op: e.op
 		})),
 		onShutdown: (e) => {
-			Oe.push(e);
+			De.push(e);
 		}
-	}) : void 0, x = Pe({
+	}) : void 0, S = C({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: C(e.port ?? 4e3),
+		publicUrl: Le(e.port ?? 4e3),
 		log: (e.log ?? L({ scope: "voltro:serve" })).child("connections")
 	});
-	y({
+	b({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -952,236 +951,293 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let Ne = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Ie = e.broadcastNamespace ?? Re(e.plugins, void 0), Le = Nt(e.plugins, Ie, Ne), Ve = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, He = e.membership ?? Bt(e.plugins, {
-		instanceId: Ve,
-		namespace: Ie,
+	let Me = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Fe = e.broadcastNamespace ?? Be(e.plugins, void 0), Re = Ft(e.plugins, Fe, Me), ze = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ve = e.membership ?? Wt(e.plugins, {
+		instanceId: ze,
+		namespace: Fe,
 		meta: { mode: "serve" },
-		logger: Ne
-	}), w = ge({
+		logger: Me
+	}), He = ge({
 		events: e.discovered.events ?? [],
-		origin: Ve,
-		...Le.publishRemote === void 0 ? {} : { publishRemote: Le.publishRemote }
-	}), We = (e.discovered.events ?? []).length > 0 ? await Le.attach(w.bus) : null, Ke = pt({
+		origin: ze,
+		...Re.publishRemote === void 0 ? {} : { publishRemote: Re.publishRemote }
+	}), Ue = (e.discovered.events ?? []).length > 0 ? await Re.attach(He.bus) : null, We = Pt({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
 		kv: a,
 		...we === void 0 ? {} : { webhooksService: we },
-		...g === void 0 ? {} : { workflowsProxy: g },
+		...v === void 0 ? {} : { workflowsProxy: v },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: ve,
+		namespaceIsolationOn: ye,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
 		...Ae === void 0 ? {} : { outbox: { nudge: Ae.nudge } },
-		...x.active ? { connections: { registry: x.registry } } : {},
-		eventBus: w.bus
-	}), qe = G.succeed(ur, ye), Je = G.succeed(mr, De), Xe = G.succeed(dr, zt), Qe = G.succeed(hr, p), et = (t, n) => {
-		let r = t.pipe(W.provide(Vr(n)));
-		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(qe)).pipe(W.provide(Je)).pipe(W.provide(Xe)).pipe(W.provide(Qe));
-	}, tt = (e, t) => {
-		let n = et(e, t);
-		return ai(n);
-	}, nt = _n(), rt = Fe(e.plugins ?? [], nt), it = ce({
+		...S.active ? { connections: { registry: S.registry } } : {},
+		eventBus: He.bus
+	}), Ge = G.succeed(gr, be), Ke = G.succeed(br, Oe), qe = G.succeed(_r, Ut), Je = G.succeed(xr, p), Ye = (t, n) => {
+		let r = t.pipe(W.provide(qr(n)));
+		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Ge)).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je));
+	}, et = (e, t) => {
+		let n = Ye(e, t);
+		return di(n);
+	}, nt = Sn(), rt = Ie(e.plugins ?? [], nt), it = le({
 		plugins: e.plugins ?? [],
 		metrics: nt,
 		log: e.log ?? L({ scope: "voltro:serve" })
-	}), at = xt(e.plugins ?? [], nt), ot = e.security?.defaultDeny ?? !0, st = J({
+	}), at = Tt(e.plugins ?? [], nt), ot = e.security?.defaultDeny ?? !0, st = Xr({
 		store: e.store,
 		defaultDeny: ot,
 		recordMetric: (e) => {
 			nt.record(e);
 		},
 		...rt.mutation === void 0 ? {} : { interceptor: rt.mutation },
-		buildContext: (e, t, n) => Ke(e, t, n),
-		runEffect: tt,
-		undoCapture: Ze()
+		buildContext: (e, t, n) => We(e, t, n),
+		runEffect: et,
+		undoCapture: $e((t) => e.schemaRegistry.crdtColumns(t))
 	}), ct = c();
 	{
-		let t = At();
+		let t = Nt();
 		t !== void 0 && (e.log ?? L({ scope: "voltro:serve" })).info(t);
 	}
-	let lt = Se({
+	let ut = Ce({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), ut = Nr({
+	}), dt = zr({
 		defaultDeny: ot,
-		buildContext: (e) => Ke(e),
-		runEffect: tt,
+		buildContext: (e) => We(e),
+		runEffect: et,
 		recordMetric: (e) => {
 			nt.record(e);
 		},
 		...rt.action === void 0 ? {} : { interceptor: rt.action }
-	}), dt = Kr({
+	}), ft = Qr({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
-	}), ft = {
+	}), pt = {
 		defaultDeny: ot,
-		buildContext: (e) => Ke(e),
-		finalize: (e, t) => dt(e, t.subject),
-		provideEffect: et,
+		buildContext: (e) => We(e),
+		finalize: (e, t) => ft(e, t.subject),
+		provideEffect: Ye,
 		...rt.query === void 0 ? {} : { interceptor: rt.query }
-	}, T = Gr(ft), ht = Wr({
-		...ft,
-		queryRows: (t, n) => e.store.query(t).then((e) => fi(t.table, e, n.subject))
-	}), gt = Jr({
-		...ft,
-		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
+	}, T = J(pt), mt = Zr({
+		...pt,
+		queryRows: (t, n) => e.store.query(t).then((e) => vi(t.table, e, n.subject))
+	}), ht = ei({
+		...pt,
+		subscribeDescriptor: (e, t, n, i, a) => r.subscribe(e, t, n, void 0, void 0, void 0, i, a),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => Rn(e.descriptor)), D = {};
+	}), E = (e) => e.filter((e) => Un(e.descriptor)), D = {};
 	for (let t of [
 		...E(e.discovered.queries),
 		...ct.queries,
-		...lt.queries,
-		...x.queries
-	]) D[t.descriptor.name] = (e) => q(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, qr(t, e));
+		...ut.queries,
+		...S.queries
+	]) D[t.descriptor.name] = (e) => q(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, $r(t, e));
 	for (let t of [
 		...E(e.discovered.mutations),
 		...ct.mutations,
-		...lt.mutations,
-		...x.mutations
+		...ut.mutations,
+		...S.mutations
 	]) {
-		let n = Ur(t.descriptor.output);
-		D[t.descriptor.name] = (r) => K(async (e, n) => st(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Vn(t.descriptor, "mutation"));
+		let n = Yr(t.descriptor.output);
+		D[t.descriptor.name] = (r) => K(async (e, n) => st(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Kn(t.descriptor, "mutation"));
 	}
-	for (let t of [...E(e.discovered.actions), ...x.actions]) {
-		let n = Ur(t.descriptor.output);
-		D[t.descriptor.name] = (r) => K(async (e, n) => ut(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Vn(t.descriptor, "action"));
+	for (let t of [...E(e.discovered.actions), ...S.actions]) {
+		let n = Yr(t.descriptor.output);
+		D[t.descriptor.name] = (r) => K(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Kn(t.descriptor, "action"));
 	}
-	let O = () => `public-${Math.random().toString(36).slice(2, 10)}`, _t = [
+	let vt = () => `public-${Math.random().toString(36).slice(2, 10)}`, yt = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ht(e, t, {
+			invoke: (t, n) => mt(e, t, {
 				subject: n.subject,
-				traceId: O()
+				traceId: vt()
 			}),
-			subscribe: (t, n, r) => gt(e, t, {
+			subscribe: (t, n, r) => ht(e, t, {
 				subject: n.subject,
-				traceId: O()
+				traceId: vt()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => st(e, t, {
 				subject: n.subject,
-				traceId: O()
+				traceId: vt()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ut(e, t, {
+			invoke: (t, n) => dt(e, t, {
 				subject: n.subject,
-				traceId: O()
+				traceId: vt()
 			})
 		}))
-	], vt = {
-		candidates: v({
+	], bt = {
+		candidates: y({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
 			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(ht(e, t, n)),
+			runQuery: (e, t, n) => Promise.resolve(mt(e, t, n)),
 			runMutation: (e, t, n) => Promise.resolve(st(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(ut(e, t, n))
+			runAction: (e, t, n) => Promise.resolve(dt(e, t, n))
 		}),
 		policy: e.agents?.tools ?? {},
 		mcpEnabled: e.agents?.mcp === !0,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject)
-	}, yt = wt({
+	};
+	if (e.grpc !== void 0) {
+		let t = () => `grpc-${Math.random().toString(36).slice(2, 10)}`, n = [
+			...e.discovered.queries.map((e) => ({
+				tag: e.descriptor.name,
+				kind: "query",
+				input: e.descriptor.input,
+				output: e.descriptor.output,
+				invoke: (n, r, i) => mt(e, n, {
+					subject: r.subject,
+					traceId: t(),
+					signal: i
+				}),
+				subscribe: (n, r, i) => ht(e, n, {
+					subject: r.subject,
+					traceId: t()
+				}, i)
+			})),
+			...e.discovered.mutations.map((e) => ({
+				tag: e.descriptor.name,
+				kind: "mutation",
+				input: e.descriptor.input,
+				output: e.descriptor.output,
+				invoke: (n, r, i) => st(e, n, {
+					subject: r.subject,
+					traceId: t(),
+					signal: i
+				})
+			})),
+			...e.discovered.actions.map((e) => ({
+				tag: e.descriptor.name,
+				kind: "action",
+				input: e.descriptor.input,
+				output: e.descriptor.output,
+				invoke: async (n, r, i) => dt(e, n, {
+					subject: r.subject,
+					traceId: t(),
+					signal: i
+				})
+			}))
+		];
+		await Ht({
+			config: e.grpc.config,
+			candidates: n,
+			resolveSubject: async (t) => {
+				let { subject: n } = await e.resolveSubject(t, -1), r = n;
+				return r.type === "anonymous" && r.credentialRejected !== void 0 ? null : {
+					subject: n,
+					anonymous: r.type === "anonymous"
+				};
+			},
+			store: e.store,
+			root: e.grpc.root,
+			log: e.log ?? L({ scope: "voltro:serve" }),
+			onShutdown: (e) => oi(e)
+		});
+	}
+	let O = lt({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: _t,
+		publicApiEntries: yt,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
 		log: e.log ?? L({ scope: "voltro:serve" })
-	}), k = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Ct = async (e, t) => {
-		let { Readable: n } = await import("node:stream"), r = xi(), i = Ci("storage", () => n.from(t()));
-		await W.runPromise(Ti(r, e, i, { contentType: "application/octet-stream" }));
-	}, Tt = k && k.length >= 16 ? [
+	}), k = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, St = async (e, t) => {
+		let { Readable: n } = await import("node:stream"), r = Di(), i = ki("storage", () => n.from(t()));
+		await W.runPromise(ji(r, e, i, { contentType: "application/octet-stream" }));
+	}, Ct = k && k.length >= 16 ? [
 		{
 			method: "POST",
-			path: na,
-			handle: Fa({
+			path: ca,
+			handle: Va({
 				secret: k,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: Ji(xi()),
-				openArchive: (e) => fo(xi(), e),
+				assetSink: ea(Di()),
+				openArchive: (e) => vo(Di(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: Ct,
+				putArchive: St,
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {}
 			})
 		},
 		{
 			method: "POST",
-			path: ra,
-			handle: La({
+			path: la,
+			handle: Ua({
 				secret: k,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: Ji(xi()),
-				openArchive: (e) => fo(xi(), e),
+				assetSink: ea(Di()),
+				openArchive: (e) => vo(Di(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: Ct
+				putArchive: St
 			})
 		},
 		{
 			method: "GET",
-			path: oa,
-			handle: uo({
+			path: fa,
+			handle: _o({
 				secret: k,
 				store: e.store
 			})
 		},
 		{
 			method: "GET",
-			path: aa,
-			handle: io({ secret: k })
+			path: da,
+			handle: uo({ secret: k })
 		},
 		{
 			method: "POST",
-			path: ia,
-			handle: to({
+			path: ua,
+			handle: so({
 				secret: k,
 				store: e.store,
 				snapshot: e.dataTransferSnapshot ?? { tables: [] },
 				dialect: e.dataTransferDialect ?? "memory",
 				tenantTables: [...e.tenantScopedTables],
-				loadProfile: On,
-				assetSource: Yi(xi(), e.store),
-				putArchive: Ct
+				loadProfile: Nn,
+				assetSource: ta(Di(), e.store),
+				putArchive: St
 			})
 		}
-	] : [], Et = [
+	] : [], Dt = [
 		...e.httpRoutes ?? [],
-		...yt.httpRoutes,
-		...Tt,
-		...x.httpRoutes
+		...O.httpRoutes,
+		...Ct,
+		...S.httpRoutes
 	];
-	Object.assign(D, w.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Sr((r) => hi(r, (r) => {
-		let i = Ke(r), a = t.executor(n, i);
+	Object.assign(D, He.handlers);
+	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Or((r) => xi(r, (r) => {
+		let i = We(r), a = t.executor(n, i);
 		if (W.isEffect(a)) {
-			let t = a.pipe(W.provide(Vr(i.store)));
-			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(qe)).pipe(W.provide(Je)).pipe(W.provide(Xe)).pipe(W.provide(Qe));
+			let t = a.pipe(W.provide(qr(i.store)));
+			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Ge)).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je));
 		}
 		return typeof a == "object" && a && typeof a.then == "function" ? W.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
 	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => K(async (e, n) => {
 		let r = n;
-		return Zr(g, {
+		return ri(v, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	ue && (D[Kn.name] = (e) => q(T({
-		descriptor: Kn,
+	pe && (D[Xn.name] = (e) => q(T({
+		descriptor: Xn,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -1190,14 +1246,14 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: nr(U("id", t), U("executionId", t)),
+				predicate: cr(U("id", t), U("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Kn.name}`), D[Jn.name] = (e) => q(T({
-		descriptor: Jn,
+	}, e), r, `subscription.${Xn.name}`), D[Qn.name] = (e) => q(T({
+		descriptor: Qn,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [U("tag", t.tag)], ...t.status === void 0 ? [] : [U("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
@@ -1206,14 +1262,14 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : Zn(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : rr(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Jn.name}`), D[qn.name] = (e) => q(T({
-		descriptor: qn,
+	}, e), r, `subscription.${Qn.name}`), D[Zn.name] = (e) => q(T({
+		descriptor: Zn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1228,8 +1284,8 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${qn.name}`), D[Gn.name] = (e) => q(T({
-		descriptor: Gn,
+	}, e), r, `subscription.${Zn.name}`), D[Yn.name] = (e) => q(T({
+		descriptor: Yn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1244,8 +1300,8 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Gn.name}`), D[z.name] = (e) => q(T({
-		descriptor: z,
+	}, e), r, `subscription.${Yn.name}`), D[B.name] = (e) => q(T({
+		descriptor: B,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -1260,8 +1316,8 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${z.name}`), D[Un.name] = (e) => q(T({
-		descriptor: Un,
+	}, e), r, `subscription.${B.name}`), D[V.name] = (e) => q(T({
+		descriptor: V,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -1276,70 +1332,68 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Un.name}`), D[Hn.name] = (t) => K(async (t, n) => {
+	}, e), r, `subscription.${V.name}`), D[qn.name] = (t) => K(async (t, n) => {
 		let r = t;
-		return await Ge(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await It(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Hn.name}`), D[Wn.name] = (t) => K(async (t, n) => {
+		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.cancel(r.workflowName, r.executionId), await Lt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${qn.name}`), D[Jn.name] = (t) => K(async (t, n) => {
 		let r = t;
-		return await Ge(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Wn.name}`), D[B.name] = (t) => K(async (t, n) => {
+		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${Jn.name}`), D[$n.name] = (t) => K(async (t, n) => {
 		let r = t;
-		return await Ge(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${B.name}`), D[V.name] = (t) => K(async (t, n) => {
+		return await gt(e.store, n.subject, { id: r.id }), v.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${$n.name}`), D[er.name] = (t) => K(async (t, n) => {
 		let r = t;
-		return await Ge(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${V.name}`));
-	let Dt = [
-		...E(e.discovered.queries).map((e) => R(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => zn(e.descriptor)),
-		...E(e.discovered.actions).map((e) => In(e.descriptor)),
-		...ct.queries.map((e) => R(e.descriptor)),
-		...ct.mutations.map((e) => zn(e.descriptor)),
-		...lt.queries.map((e) => R(e.descriptor)),
-		...lt.mutations.map((e) => zn(e.descriptor)),
-		...x.queries.map((e) => R(e.descriptor)),
-		...x.mutations.map((e) => zn(e.descriptor)),
-		...x.actions.map((e) => In(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => Bn(e.descriptor)),
-		...w.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => gi(e.definition)),
-		...ue ? [
-			R(Kn),
-			R(Jn),
+		return await gt(e.store, n.subject, { id: r.id }), v.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${er.name}`));
+	let Ot = [
+		...E(e.discovered.queries).map((e) => z(e.descriptor)),
+		...E(e.discovered.mutations).map((e) => Wn(e.descriptor)),
+		...E(e.discovered.actions).map((e) => R(e.descriptor)),
+		...ct.queries.map((e) => z(e.descriptor)),
+		...ct.mutations.map((e) => Wn(e.descriptor)),
+		...ut.queries.map((e) => z(e.descriptor)),
+		...ut.mutations.map((e) => Wn(e.descriptor)),
+		...S.queries.map((e) => z(e.descriptor)),
+		...S.mutations.map((e) => Wn(e.descriptor)),
+		...S.actions.map((e) => R(e.descriptor)),
+		...E(e.discovered.streams ?? []).map((e) => Gn(e.descriptor)),
+		...He.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => Si(e.definition)),
+		...pe ? [
+			z(Xn),
+			z(Qn),
+			z(Zn),
+			z(Yn),
+			z(B),
+			z(V),
 			R(qn),
-			R(Gn),
-			R(z),
-			R(Un),
-			In(Hn),
-			In(Wn),
-			In(B),
-			In(V)
+			R(Jn),
+			R($n),
+			R(er)
 		] : []
-	], Ot = bi.make(...Dt).middleware(Pn).middleware(Fn), kt = zr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), jt = e.dormancyTenantId ?? fr, Pt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => ri(e.store, {
+	], kt = Ei.make(...Ot).middleware(Bn).middleware(Vn), At = Gr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), jt = e.dormancyTenantId ?? vr, Mt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => li(e.store, {
 			tenantId: r ?? jt,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => wr(e.store, {
+		cancel: (t, n) => Ar(e.store, {
 			tenantId: n ?? jt,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, j = pe ? await import("@voltro/workflow") : void 0, M = j?.makeWorkflowRunRecorder({
+	} : void 0, A = ve ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...Pt === void 0 ? {} : { wakeups: Pt }
-	}), Ft = async (t, n) => {
-		await j.closeWorkflowChildrenForParent({
+		...Mt === void 0 ? {} : { wakeups: Mt }
+	}), It = async (t, n) => {
+		await A.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: M,
-			log: { warn: (e, t) => {
-				process.stderr.write(`[workflow] ${e} ${t ? JSON.stringify(t) : ""}\n`);
-			} },
+			recorder: j,
+			log: { warn: (e, t) => g.warn(e, t ?? {}) },
 			interruptChild: async (t, n) => {
 				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
 				if (!r) throw Error(`Unknown child workflow: ${t}`);
@@ -1347,7 +1401,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				await f.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, It = async (t, n, r) => {
+	}, Lt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -1362,7 +1416,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await M.recordEvent({
+		a && await j.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -1371,18 +1425,18 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Ft(n, "cancelled");
-	}, Lt = [
-		...Y(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? Ke({
+		}), a && await It(n, "cancelled");
+	}, Rt = [
+		...ii(e.discovered.workflows ?? [], {
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? We({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: ae,
-			...oe === void 0 ? {} : { resolveAuthority: oe }
+			resolveStartContext: oe,
+			...ce === void 0 ? {} : { resolveAuthority: ce }
 		}, (t, n, r) => {
-			let i = j.getWorkflowVersionMetadata(t.definition);
-			return j.wrapWorkflowExecuteWithRunRecording({
+			let i = A.getWorkflowVersionMetadata(t.definition);
+			return A.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -1393,27 +1447,27 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Ft(e, t),
-				...Mt(t.definition),
+				onParentClose: ({ executionId: e, status: t }) => It(e, t),
+				...M(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await d?.gate.release(e);
 				},
-				recorder: M,
+				recorder: j,
 				pluginWorkflowStepLayer: at,
-				recordRun: ti
+				recordRun: si
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
 		...Te === void 0 ? [] : [Te]
-	], Rt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Te === void 0 ? [] : ["voltro.deliverWebhook"]], Vt = Lt.length > 0 ? G.mergeAll(...Lt) : G.empty;
+	], Bt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Te === void 0 ? [] : ["voltro.deliverWebhook"]], Vt = Rt.length > 0 ? G.mergeAll(...Rt) : G.empty;
 	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Te !== void 0) && e.workflowEngineLayer !== void 0) {
 		let t = Vt.pipe(G.provideMerge(e.workflowEngineLayer));
-		f = ir.make(e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))), await f.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Rt.length} entity type(s) registered`, { entities: Rt });
+		f = ur.make((e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))).pipe(G.provideMerge(zn({})))), await f.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Bt.length} entity type(s) registered`, { entities: Bt });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
-		ne = await Ue({
-			provider: Mi(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Mi(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Ie,
+		ne = await zt({
+			provider: Ri(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: Ri(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Fe,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -1423,12 +1477,12 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			})),
 			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
 		}), ee = async (t) => {
-			let n = await S({
+			let n = await Pe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await M.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1446,7 +1500,7 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await M.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1461,32 +1515,32 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Pr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : li, c = Br({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : hi, c = Kr({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), l = {
+		}), l = L({ scope: "voltro:flow-control" }), p = {
 			info: (e, t) => {
-				process.stdout.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				l.info(e, t);
 			},
 			warn: (e, t) => {
-				process.stderr.write(`[flow-control] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				l.warn(e, t);
 			},
 			error: (e, t) => {
-				process.stderr.write(`[flow-control] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+				l.error(e, t ?? {});
 			}
-		}, p, m = () => {
-			if (p !== void 0) return p;
-			if (o !== void 0 && M !== void 0) return p = _({
+		}, m, h = () => {
+			if (m !== void 0) return m;
+			if (o !== void 0 && j !== void 0) return m = _({
 				store: e.store,
 				log: F,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
 				workflowRuntime: f,
-				workflowRunRecorder: M,
-				closeChildrenForParent: Ft
-			}), p;
+				workflowRunRecorder: j,
+				closeChildrenForParent: It
+			}), m;
 		};
-		s = m, d = ze({
+		s = h, d = w({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1500,23 +1554,23 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			workflows: e.discovered.workflows ?? [],
 			facade: () => o,
-			cancelRunWithReason: m,
-			recordRunEvent: () => M?.recordEvent,
+			cancelRunWithReason: h,
+			recordRunEvent: () => j?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
 			scheduleCoordinated: c,
 			onAbandoned: async (t) => {
-				await mt({
+				await _t({
 					workflows: e.discovered.workflows ?? [],
 					facade: () => o,
-					log: l,
+					log: p,
 					...t
 				});
 			},
-			log: l
+			log: p
 		});
-		let h = d;
-		h !== void 0 && $r(() => h.stop()), u = bt({
+		let g = d;
+		g !== void 0 && oi(() => g.stop()), u = wt({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1527,47 +1581,47 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => f === void 0 || j === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await f.runPromise(j.completeSuspendingSignal({
+			resumeSignal: () => f === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(A.completeSuspendingSignal({
 					store: e.store,
-					target: $e(t, n),
+					target: tt(t, n),
 					signalName: r,
 					payload: i
 				}));
 			},
 			runEffect: (e) => f.runPromise(e),
 			scheduleCoordinated: c,
-			log: l
+			log: p
 		});
 		let re = u;
-		re !== void 0 && $r(() => re.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? Xr({
+		re !== void 0 && oi(() => re.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ni({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => f.runPromise(e),
 			onEnqueue: () => ne?.publishWake(),
-			...h === void 0 ? {} : {
-				admitStart: h.gate.admitStart,
-				startPayloadSchema: h.gate.startPayloadSchema,
-				parkDelayedStart: h.gate.parkDelayed
+			...g === void 0 ? {} : {
+				admitStart: g.gate.admitStart,
+				startPayloadSchema: g.gate.startPayloadSchema,
+				parkDelayedStart: g.gate.parkDelayed
 			},
-			rememberStartContext: ie,
+			rememberStartContext: ae,
 			signal: async (t, n, r) => {
-				let i = await j.sendWorkflowSignal({
+				let i = await A.sendWorkflowSignal({
 					store: e.store,
-					recorder: M,
+					recorder: j,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await f.runPromise(j.completeSuspendingSignal({
+				return await f.runPromise(A.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => j.sendWorkflowUpdate({
+			update: (t, n, r, i) => A.sendWorkflowUpdate({
 				store: e.store,
-				recorder: M,
+				recorder: j,
 				target: t,
 				updateName: n,
 				payload: r,
@@ -1579,29 +1633,29 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => f.runPromise(e)
 			}, t, n),
-			redrive: (t) => S({
+			redrive: (t) => Pe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Ht = G.mergeAll(Ot.toLayer(D), kt), Ut = Be(D, e.discovered.queries.map((e) => e.descriptor.name), ue), Wt = G.mergeAll(Ot.toLayer(Ut), kt), N = e.observability, Gt = await Cr({
+	let Gt = G.mergeAll(kt.toLayer(D), At), Kt = xt(D, e.discovered.queries.map((e) => e.descriptor.name), pe), qt = G.mergeAll(kt.toLayer(Kt), At), N = e.observability, Jt = await kr({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
 		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
 		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
 		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
 		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
-	}), Kt = !1, qt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: P, shutdown: Jt } = ui({
-		group: Ot,
-		handlersLayer: Ht,
-		httpHandlersLayer: Wt,
+	}), Yt = !1, Xt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Zt, shutdown: P } = gi({
+		group: kt,
+		handlersLayer: Gt,
+		httpHandlersLayer: qt,
 		port: e.port ?? 4e3,
 		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: Gt.layer,
-		security: le(e),
-		...gn(e),
+		tracerLayer: Jt.layer,
+		security: ue(e),
+		...xn(e),
 		...e.discovered.wsGateways !== void 0 && e.discovered.wsGateways.length > 0 ? { webSocketGateways: e.discovered.wsGateways } : {},
 		resolveGatewaySubject: async (t) => {
 			let n = await e.resolveSubject(t, -1);
@@ -1612,17 +1666,17 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		},
 		...it,
 		healthCheck: {
-			isReady: () => Kt,
-			...qt ? { ping: qt } : {}
+			isReady: () => Yt,
+			...Xt ? { ping: Xt } : {}
 		},
-		...Et.length > 0 ? { httpRoutes: Et } : {},
+		...Dt.length > 0 ? { httpRoutes: Dt } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
 		...Ee.size > 0 ? { webhookRoutes: Ee } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), Yt = ta(P);
-	if (await xr(P), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Pr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : li;
-		h = await di(e.discovered.schedules ?? [], {
+	}), Qt = sa(Zt);
+	if (await Dr(Zt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : hi;
+		m = await _i(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1630,36 +1684,36 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			armSelf: e.scheduleArmSelf ?? !0,
 			dormancy: e.dormancy ?? "always-on",
 			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => Ke({
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => We({
 				subject: r,
 				traceId: t
 			}, e.store, void 0, `schedule:${n}`),
 			log: {
 				info: (e, t) => {
-					process.stdout.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+					re.info(e, t);
 				},
 				warn: (e, t) => {
-					process.stderr.write(`[schedule] ${e} ${t ? JSON.stringify(t) : ""}\n`);
+					re.warn(e, t);
 				},
 				error: (e, t) => {
-					process.stderr.write(`[schedule] ERROR ${e} ${t ? JSON.stringify(t) : ""}\n`);
+					re.error(e, t ?? {});
 				},
 				debug: () => {}
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(h);
+		}), e.onSchedulerReady?.(m);
 	}
-	let F = e.log ?? L({ scope: "voltro:serve" }), Xt, Zt;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (Xt = l(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, w.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+	let F = e.log ?? L({ scope: "voltro:serve" }), $t, en;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && ($t = Qe(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, He.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
 		let t = F.child("reaction"), n = async (n, r) => {
 			if (n.kind === "workflow") {
-				if (g === void 0) {
+				if (v === void 0) {
 					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
 					return;
 				}
 				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await Zr(g, {
+				await ri(v, {
 					traceId: `reaction:${n.workflow}`,
 					source: `reaction:${n.workflow}`
 				}).start(n.workflow, e);
@@ -1667,8 +1721,8 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			}
 			await _e(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(ut(e, t, n)),
-				makeSubject: (e) => Ln(e),
+				runAction: (e, t, n) => Promise.resolve(dt(e, t, n)),
+				makeSubject: (e) => Hn(e),
 				now: () => Date.now(),
 				log: t
 			});
@@ -1682,191 +1736,191 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			} catch (e) {
 				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
 			}
-		}, i = Ye(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		Zt = he(e.discovered.reactions ?? [], e.store, {
+		}, i = Ze(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		en = he(e.discovered.reactions ?? [], e.store, {
 			runAct: n,
 			checkBudget: r,
 			claimRateSlot: (e) => i.claim(e)
 		}, t);
 	}
-	let Qt;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (Qt = await m({
+	let tn;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (tn = await h({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
 		log: F.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), qe = G.succeed(ur, Qt.registry));
-	let $t;
-	(e.discovered.expectations?.length ?? 0) > 0 && ($t = vr({
+	}), Ge = G.succeed(gr, tn.registry));
+	let nn;
+	(e.discovered.expectations?.length ?? 0) > 0 && (nn = wr({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
 		log: F.child("expectation")
-	}), Je = G.succeed(mr, $t.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = br({
+	}), Ke = G.succeed(br, nn.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Er({
 		discovered: e.discovered.budgets ?? [],
 		log: F.child("finops")
-	}), Xe = G.succeed(dr, n.registry));
-	let en;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (en = yr({
+	}), qe = G.succeed(_r, n.registry));
+	let rn;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (rn = Tr({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
 		log: F.child("experiment")
-	}), Qe = G.succeed(hr, en.registry)), Kt = !0, e.bootTiming?.mark("ready"), {
+	}), Je = G.succeed(xr, rn.registry)), Yt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: P,
-		scheduler: h,
-		eventsSnapshot: be(w.bus, w.declared),
+		server: Zt,
+		scheduler: m,
+		eventsSnapshot: xe(He.bus, He.declared),
 		membersSnapshot: () => ({
-			members: He.membership.list(),
+			members: Ve.membership.list(),
 			capturedAt: Date.now()
 		}),
-		agentTools: () => vt,
+		agentTools: () => bt,
 		rpcMetrics: () => nt,
 		webhooksService: () => we,
 		runCanceller: () => s(),
 		flowControlHealth: () => d?.cancelHealth(),
 		inferenceHealth: () => u?.health(),
-		workflowWriteActions: () => g === void 0 || M === void 0 ? void 0 : me({
+		workflowWriteActions: () => v === void 0 || j === void 0 ? void 0 : me({
 			store: e.store,
 			log: F,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
 			workflowRuntime: f,
-			workflowRunRecorder: M,
-			closeChildrenForParent: Ft
+			workflowRunRecorder: j,
+			closeChildrenForParent: It
 		}),
 		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
 		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
-			Kt = !1, await Yt.drainRequests();
-			for (let e of Oe) try {
+			Yt = !1, await Qt.drainRequests();
+			for (let e of De) try {
 				await e();
 			} catch (e) {
 				F.warn("serve: teardown step failed", {}, e);
 			}
-			await We?.detach(), await He.detach(), Qt?.detach(), $t?.detach(), n?.detach(), en?.detach(), Zt?.(), Xt?.(), await h?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await Jt(), await Yt.finish();
+			await Ue?.detach(), await Ve.detach(), tn?.detach(), nn?.detach(), n?.detach(), rn?.detach(), en?.(), $t?.(), await m?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await P(), await Qt.finish();
 		}
 	};
-}, $ = L({ scope: "voltro:serve" }), ho = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", go = N, _o = async (e) => {
-	let t = wn(process.cwd());
-	if (Mn(t)) {
+}, $ = L({ scope: "voltro:serve" }), xo = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", So = Jt, Co = async (e) => {
+	let t = kn(process.cwd());
+	if (Ln(t)) {
 		let n;
 		try {
-			let e = await import(Nn(t).href);
+			let e = await import(Rn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return vo(e);
-}, vo = async (c) => {
-	let l = Tn();
+	return wo(e);
+}, wo = async (c) => {
+	let l = An();
 	e("serve");
 	try {
-		Oi();
+		Pi();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let p = process.cwd(), m = await We(p), se = Gt({
+	let p = process.cwd(), h = await Ke(p), se = Yt({
 		kind: "api",
-		configPort: m?.port,
+		configPort: h?.port,
 		env: process.env,
-		flagPort: go(c, "--port")
+		flagPort: So(c, "--port")
 	});
 	for (let e of se.warnings) $.warn(e);
-	let ce = se.port;
-	oi(ii(m?.secrets)), await Kt({
-		rawEnv: m?.env,
+	let le = se.port;
+	fi(ui(h?.secrets)), await Xt({
+		rawEnv: h?.env,
 		appType: "api",
 		root: p,
 		log: $,
 		generateTypes: !1
 	}), l.mark("config");
-	let _ = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), de = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", fe = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, me = Cn(p);
-	if (!r() && Mn(me)) try {
-		let e = await import(Nn(me).href);
+	let _ = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), de = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", fe = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, me = On(p);
+	if (!r() && Ln(me)) try {
+		let e = await import(Rn(me).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[An(p, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Fn(p, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let v = await yt(p), y = await jt(v, { cdc: de && fe !== void 0 }), he = f(y);
+	let y = await St(p), b = await j(y, { cdc: de && fe !== void 0 }), he = ee(b);
 	{
-		qe({
-			plugins: m?.plugins ?? [],
-			queries: y.queries,
-			mutations: y.mutations,
-			actions: y.actions,
-			streams: y.streams,
+		Ye({
+			plugins: h?.plugins ?? [],
+			queries: b.queries,
+			mutations: b.mutations,
+			actions: b.actions,
+			streams: b.streams,
 			log: $
 		});
-		let e = pe(y.serverOnlyLeaks, g(process.env, "strict"), Dr, "`voltro serve`");
+		let e = pe(b.serverOnlyLeaks, ce(process.env, "strict"), Nr, "`voltro serve`");
 		if (e.action === "fail") throw i(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
-	let ge = v.filter((e) => Sn.test(e)), _e = ge.length > 0 ? await xn(ge, $.child("webhooks")) : {
+	let ge = y.filter((e) => Dn.test(e)), _e = ge.length > 0 ? await En(ge, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, ye = yn(y.events), be = _e.outgoing.length + _e.incoming.length + _e.providers.length + ye.length === 0 ? void 0 : {
+	}, be = wn(b.events), xe = _e.outgoing.length + _e.incoming.length + _e.providers.length + be.length === 0 ? void 0 : {
 		..._e,
-		outgoing: [..._e.outgoing, ...ye]
-	}, Se = rn({
+		outgoing: [..._e.outgoing, ...be]
+	}, Ce = cn({
 		nodeEnv: process.env.NODE_ENV,
 		cdcDialect: fe,
-		declared: m?.schema
-	}), Ce = an({
-		gates: Se,
+		declared: h?.schema
+	}), Oe = ln({
+		gates: Ce,
 		runtime: {
 			traces: ae(),
-			undo: pi()
+			undo: yi()
 		}
 	});
-	if (Ce !== void 0) throw i(`serve: ${Ce}`);
-	let De = nn({
-		mix: y.featureMix,
-		plugins: m?.plugins ?? [],
-		gates: Se,
+	if (Oe !== void 0) throw i(`serve: ${Oe}`);
+	let je = sn({
+		mix: b.featureMix,
+		plugins: h?.plugins ?? [],
+		gates: Ce,
 		...fe ? { cdcDialect: fe } : {}
-	}), je = m?.analytics !== void 0 && m.analytics.kind !== "noop" && _ !== "memory" ? (await P(_)).makeSqlLayer(O()) : void 0, Me = await kt({
-		spec: m?.analytics,
-		sqlLayer: je,
+	}), Ne = h?.analytics !== void 0 && h.analytics.kind !== "noop" && _ !== "memory" ? (await P(_)).makeSqlLayer(O()) : void 0, Pe = await yt({
+		spec: h?.analytics,
+		sqlLayer: Ne,
 		log: $
-	}), S = (() => {
-		let e = new Set(y.tables.map((e) => e.tableName)), t = [...y.tables];
-		for (let n of [...De, ...Me.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+	}), C = (() => {
+		let e = new Set(b.tables.map((e) => e.tableName)), t = [...b.tables];
+		for (let n of [...je, ...Pe.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of S) tr(e);
+	for (let e of C) sr(e);
 	{
-		let e = Or(mi(Rt(y), Ee(S)));
+		let e = Pr(bi(Ae(b), re(C)));
 		e !== void 0 && $.warn(e);
 	}
-	let Pe = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (ho(Pe, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await P(_)).makeSqlLayer(O()), t = await W.runPromise(ar.SqlClient.pipe(W.flatMap((e) => cr(e, p)), W.provide(e), W.catchAll(() => W.succeed([]))));
+	let Ie = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (xo(Ie, _, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await P(_)).makeSqlLayer(O()), t = await W.runPromise(dr.SqlClient.pipe(W.flatMap((e) => mr(e, p)), W.provide(e), W.catchAll(() => W.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await W.runPromise(ar.SqlClient.pipe(W.flatMap((e) => lr(e, S, {
-			appliedBy: `serve:${Pe}`,
+		let n = await W.runPromise(dr.SqlClient.pipe(W.flatMap((e) => hr(e, C, {
+			appliedBy: `serve:${Ie}`,
 			environment: "prod",
 			dialectId: _
 		})), W.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(sr(n, _)), $.error(on({
-			gates: Se,
+		n.kind === "prod-mismatch" && ($.error(pr(n, _)), $.error(un({
+			gates: Ce,
 			nodeEnv: process.env.NODE_ENV,
 			cdcDialect: fe,
-			declared: m?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(sr(n, _));
+			declared: h?.schema
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(pr(n, _));
 	}
-	await Zt({
+	await tn({
 		dialectId: _,
-		tables: S,
-		mode: F(m?.reactiveTriggers),
+		tables: C,
+		mode: $t(h?.reactiveTriggers),
 		lockSchema: O().schema,
 		makeLayer: async () => (await P(_)).makeSqlLayer(O()),
 		log: {
@@ -1874,204 +1928,210 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let Fe = Yr(S);
+	let Le = ti(C);
 	l.mark("discover");
-	let C = await ot(m, void 0);
+	let w = await ct(h, void 0);
 	{
-		let e = await s(C);
+		let e = await s(w);
 		if (e !== void 0) throw i(`serve: ${e}`);
 	}
-	let ze = _i(C, _);
-	for (let e of tt({
-		dialect: String(m?.store ?? process.env.DB_DIALECT ?? "postgres"),
+	let Xe = Ci(w, _);
+	for (let e of Gt({
+		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Mi(m?.plugins ?? [])?.broadcast.crossReplica === !0,
-		tables: y.tables.map((e) => ({
+		crossReplicaBus: Ri(h?.plugins ?? [])?.broadcast.crossReplica === !0,
+		tables: b.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
 		})),
-		querySources: y.queries.flatMap((e) => {
+		querySources: b.queries.flatMap((e) => {
 			let t = e.descriptor.source;
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = ht({
-			tables: Xn().map((e) => ({ tableName: e.tableName })),
-			queries: y.queries.map((e) => ({
+		let e = Ve({
+			tables: nr().map((e) => ({ tableName: e.tableName })),
+			queries: b.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
-		}), t = it(e);
+		}), t = It(e);
 		t !== void 0 && $.warn(t);
 	}
-	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: Be, invalidationBus: Ue, snapshotCache: Ge, cache: Ye, semantic: Ze, evictSource: $e, backend: pt, stats: mt, dispose: bt } = await k({
+	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
+	let { service: Ze, invalidationBus: Qe, snapshotCache: $e, cache: tt, semantic: lt, evictSource: gt, backend: _t, stats: xt, dispose: wt } = await rt({
 		env: process.env,
-		semantic: m?.cacheSemantic ?? !1
+		semantic: h?.cacheSemantic ?? !1
 	});
-	Ze !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${pt}` + (pt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), C.onChange((e) => {
-		if (W.runFork(Ue.publish(e.table)), $e !== void 0) {
+	lt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${_t}` + (_t === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
+		if (W.runFork(Qe.publish(e.table)), gt !== void 0) {
 			let t = (e.new ?? e.old)?.id;
-			$e({
+			gt({
 				table: e.table,
 				op: e.op,
 				...t === void 0 ? {} : { id: t }
 			});
 		}
-	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: xt, service: St } = await Rr({ store: C });
-	ke({
+	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
+	let { kv: Tt, service: Et } = await Wr({ store: w });
+	mt({
 		log: $,
-		max: Yt(),
-		outOfPool: Ft(_, (process.env.CDC ?? "1") !== "0"),
+		max: F(),
+		outOfPool: ye(_, (process.env.CDC ?? "1") !== "0"),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
 	}), l.mark("store");
-	let wt = _r({
-		store: C,
-		sink: Me.sink,
+	let Nt = Cr({
+		store: w,
+		sink: Pe.sink,
 		log: $
-	}), At = Qe({
-		store: C,
+	}), Pt = ot({
+		store: w,
 		dialect: _,
 		log: { info: (e) => $.info(e) }
-	}), A = m?.plugins ?? [], Mt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Nt, zt;
-	_ !== "memory" && (Nt = ir.make((await P(_)).makeSqlLayer(O())), zt = await Nt.runPromise(ar.SqlClient));
-	let N = [
+	}), M = h?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, zt, Ht;
+	_ !== "memory" && (zt = ur.make((await P(_)).makeSqlLayer(O()).pipe(G.provideMerge(zn({})))), Ht = await zt.runPromise(dr.SqlClient));
+	let Ut = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(_) ? Pr(C, Mt, $) : li, gn = Ht(m?.scheduling), bn = Br({
-		maxIdleIntervalMs: gn.pollCeilingMs,
-		coordinator: N,
-		replicaId: Mt,
+	].includes(_) ? Br(w, Ft, $) : hi, Jt = Kt(h?.scheduling), xn = Kr({
+		maxIdleIntervalMs: Jt.pollCeilingMs,
+		coordinator: Ut,
+		replicaId: Ft,
 		log: $
-	}), wn = [], En = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Dn = Mi(m?.plugins ?? [])?.broadcast?.provider, On = Re(m?.plugins, m?.name ?? kn(p));
+	}), Tn = [], kn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, jn = Ri(h?.plugins ?? [])?.broadcast?.provider, Mn = Be(h?.plugins, h?.name ?? Pn(p));
 	{
-		let e = et(m?.plugins, m?.name ?? kn(p));
+		let e = nt(h?.plugins, h?.name ?? Pn(p));
 		e !== void 0 && $.warn(e);
 	}
-	let I = Bt(m?.plugins, {
-		instanceId: En,
-		namespace: On,
+	let Nn = Wt(h?.plugins, {
+		instanceId: kn,
+		namespace: Mn,
 		meta: { mode: "serve" },
 		logger: $
-	}), jn = hn({
+	}), I = bn({
 		mode: "serve",
 		dialect: _,
-		...Dn === void 0 ? {} : { provider: Dn },
+		...jn === void 0 ? {} : { provider: jn },
 		logger: $
 	});
-	$r(async () => {
-		await jn.stop();
-	});
-	let L = {
-		...zt ? { sql: zt } : {},
-		instanceId: En,
-		membership: I.membership,
-		...Dn === void 0 ? {} : { broadcast: Dn },
-		broadcastChannels: { presence: ji(On, "presence") },
+	oi(async () => {
+		await I.stop();
+	}), D(h?.reactive), Ct(h);
+	let In = {
+		...Ht ? { sql: Ht } : {},
+		instanceId: kn,
+		membership: Nn.membership,
+		...jn === void 0 ? {} : { broadcast: jn },
+		broadcastChannels: { presence: Li(Mn, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = bn(e, t, n);
-			return wn.push(r), r;
+			let r = xn(e, t, n);
+			return Tn.push(r), r;
 		}
 	};
-	for (let e of A) e.bindDataStore?.(ze, L);
-	lt({
-		store: C,
+	for (let e of M) e.bindDataStore?.(Xe, In);
+	dt({
+		store: w,
 		...u(),
 		log: $
 	});
-	let Pn = A.filter((e) => typeof e.onChangeEvent == "function");
-	if (Pn.length > 0) {
-		let e = C.changeScope ?? "local";
-		C.onChange((t) => {
+	let Bn = M.filter((e) => typeof e.onChangeEvent == "function");
+	if (Bn.length > 0) {
+		let e = w.changeScope ?? "local";
+		w.onChange((t) => {
 			let n = oe(t, e);
-			for (let e of Pn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: rr.pretty(t) })))));
+			for (let e of Bn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: lr.pretty(t) })))));
 		});
 	}
-	let Fn = Ne({
-		plugins: A,
-		appName: m?.name ?? "voltro-api",
+	let Vn = y.filter((e) => fn.test(e));
+	Vn.length > 0 && (await ze(Vn, $), $.info(`queue: ${Vn.length} consumer file(s) loaded`));
+	let R = Fe({
+		plugins: M,
+		appName: h?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	A.length && await Fn.activate(), l.mark("plugins");
-	let In = await Fn.gatherObservability(), Ln = {
-		info: (e, t) => process.stdout.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
-		warn: (e, t) => process.stderr.write(`[broadcast] ${e} ${t ? JSON.stringify(t) : ""}\n`),
+	M.length && await R.activate(), l.mark("plugins");
+	let Hn = await R.gatherObservability(), Un = L({ scope: "voltro:broadcast" }), Wn = {
+		info: (e, t) => {
+			Un.info(e, t);
+		},
+		warn: (e, t) => {
+			Un.warn(e, t);
+		},
 		debug: () => {}
-	}, Rn, zn = await T(C, m, _, On, Ln, (e, t) => {
-		Rn?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), R = m?.apiKeys, Bn = (typeof R == "object" ? R.prefix : void 0) ?? "voltro_", Vn = R ? Er(C) : void 0, Hn = Vn ? Ir({ flush: Lr(Vn) }) : void 0;
-	Hn && $r(() => Hn.shutdown());
-	let z = Vn ? Fr(Vn, {
-		prefix: Bn,
-		...Hn ? { usage: Hn } : {}
-	}) : void 0, Un = z ? [kr(z, { prefix: Bn })] : [], Wn = Ct([...m?.auth?.strategies ?? [], ...Un], zi(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => ze), Gn = [...m?.restRoutes ?? [], ...z ? gr(z, (typeof R == "object" ? R.managementPath : void 0) ?? "/v1/api-keys") : []], Kn = st(m?.idempotency, C), qn = A.map((e) => e.services).filter((e) => e !== void 0), Jn = G.mergeAll(Et({
-		analyticsLayer: Me.layer,
-		cacheService: Be,
-		kvService: St,
-		...Ze === void 0 ? {} : { semanticCache: Ze },
-		pluginServices: qn,
-		userLayers: m?.layers ?? []
-	}), _t(m?.http ?? {})), B = await vt({
-		files: v,
-		store: C,
+	}, z, Gn = await E(w, h, _, Mn, Wn, (e, t) => {
+		z?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), Kn = h?.apiKeys, qn = (typeof Kn == "object" ? Kn.prefix : void 0) ?? "voltro_", B = Kn ? Mr(w) : void 0, V = B ? Hr({ flush: Ur(B) }) : void 0;
+	V && oi(() => V.shutdown());
+	let Jn = B ? Vr(B, {
+		prefix: qn,
+		...V ? { usage: V } : {}
+	}) : void 0, Yn = Jn ? [Fr(Jn, { prefix: qn })] : [], Xn = Dt([...h?.auth?.strategies ?? [], ...Yn], Gi(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth, () => Xe), Zn = [...h?.restRoutes ?? [], ...Jn ? Sr(Jn, (typeof Kn == "object" ? Kn.managementPath : void 0) ?? "/v1/api-keys") : []], Qn = He(h?.idempotency, w), $n = M.map((e) => e.services).filter((e) => e !== void 0), er = G.mergeAll(qe({
+		analyticsLayer: Pe.layer,
+		cacheService: Ze,
+		kvService: Et,
+		...lt === void 0 ? {} : { semanticCache: lt },
+		pluginServices: $n,
+		userLayers: h?.layers ?? []
+	}), At(h?.http ?? {})), H = await k({
+		files: y,
+		store: w,
 		log: $,
 		seedPolicy: "report",
-		seedPattern: fn,
-		loadSeedFiles: Xt,
-		startupPattern: sn,
+		seedPattern: dn,
+		loadSeedFiles: en,
+		startupPattern: _n,
 		loadStartupFiles: a,
 		runStartups: o,
-		emailPattern: Dt,
-		loadEmailFiles: Ke,
-		registerEmailTemplates: Bi
+		emailPattern: jt,
+		loadEmailFiles: Je,
+		registerEmailTemplates: Ki
 	});
-	(B.startupCount > 0 || B.emailCount > 0) && $.info("boot lifecycle", {
-		startups: B.startupCount,
-		emailTemplates: B.emailCount
-	}), B.startups !== void 0 && $r(async () => {
-		await B.startups.stop();
-	}), Te({
-		demands: Wt(he),
-		isRegistered: (e) => Ar(e) !== void 0
+	(H.startupCount > 0 || H.emailCount > 0) && $.info("boot lifecycle", {
+		startups: H.startupCount,
+		emailTemplates: H.emailCount
+	}), H.startups !== void 0 && oi(async () => {
+		await H.startups.stop();
+	}), x({
+		demands: N(he),
+		isRegistered: (e) => Ir(e) !== void 0
 	});
-	let V = ct({
-		schedules: Ve({
-			schedules: y.schedules,
-			seeds: B.seeds,
-			store: C,
+	let tr = ut({
+		schedules: Ue({
+			schedules: b.schedules,
+			seeds: H.seeds,
+			store: w,
 			log: $.child("seeds")
 		}),
-		workflows: y.workflows ?? [],
+		workflows: b.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), H = m?.scheduling ?? {}, Yn = H.trigger ?? "self", Zn = /* @__PURE__ */ new Set([
+	}), rr = h?.scheduling ?? {}, ar = rr.trigger ?? "self", or = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), $n = H.coordination ?? (Zn.has(_) ? "advisoryLock" : "single"), er = $n === "cluster" && Zn.has(_), U = er ? "cluster" : $n === "advisoryLock" && Zn.has(_) ? "advisoryLock" : "single";
-	$n === "cluster" && !er && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), $n === "advisoryLock" && !Zn.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let nr, ur = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (be?.outgoing.length ?? 0) > 0 || er, dr;
-	if (ur) {
+	]), U = rr.coordination ?? (or.has(_) ? "advisoryLock" : "single"), cr = U === "cluster" && or.has(_), gr = cr ? "cluster" : U === "advisoryLock" && or.has(_) ? "advisoryLock" : "single";
+	U === "cluster" && !cr && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), U === "advisoryLock" && !or.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let _r, vr = b.workflows.length > 0 || b.workflowWorkers.length > 0 || b.eventTriggers.length > 0 || (xe?.outgoing.length ?? 0) > 0 || cr, yr;
+	if (vr) {
 		if (_ === "mssql") {
-			let e = await vn(process.cwd());
+			let e = await Cn(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = er ? V.filter((e) => (e.trigger ?? Yn) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = cr ? tr.filter((e) => (e.trigger ?? ar) === "self").map((e) => t({
 			name: e.name,
-			cron: Tr(e),
+			cron: jr(e),
 			execute: async () => {
-				await nr?.fireFromCluster(e.name);
+				await _r?.fireFromCluster(e.name);
 			}
 		})) : [];
-		dr = _ === "memory" ? e.layerMemory : await (async () => {
+		yr = _ === "memory" ? e.layerMemory : await (async () => {
 			let e = await P(_), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
 				sqlClientLayer: e.makeSqlLayer(O()),
@@ -2083,24 +2143,24 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		})();
 	}
-	let fr = ue(A, _n()), pr = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), mr = pr.length > 0 ? await Xe(pr, $) : [], hr = v.filter((e) => /\.reaction\.tsx?$/.test(e)), vr = hr.length > 0 ? await xe(hr, $) : [], yr = v.filter((e) => un.test(e)), br = yr.length > 0 ? await Le(yr, $) : [], xr = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), K = xr.length > 0 ? await ft(xr, $) : [];
+	let br = v(M, Sn()), xr = y.filter((e) => /\.subscribe\.tsx?$/.test(e)), wr = xr.length > 0 ? await A(xr, $) : [], Tr = y.filter((e) => /\.reaction\.tsx?$/.test(e)), Er = Tr.length > 0 ? await Se(Tr, $) : [], Dr = y.filter((e) => pn.test(e)), K = Dr.length > 0 ? await we(Dr, $) : [], Or = y.filter((e) => /\.aggregate\.tsx?$/.test(e)), q = Or.length > 0 ? await ht(Or, $) : [];
 	{
-		let e = Or(mi(Rt({ aggregates: K.map((e) => e.definition) }), Ee(S)));
+		let e = Pr(bi(Ae({ aggregates: q.map((e) => e.definition) }), re(C)));
 		e !== void 0 && $.warn(e);
 	}
-	let Sr = d();
-	if (K.length > 0 && _ !== "memory") try {
+	let kr = f();
+	if (q.length > 0 && _ !== "memory") try {
 		let e = (await P(_)).makeSqlLayer(O());
-		Sr = ut(e);
+		kr = pt(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let q = _ === "memory" ? li : Pr(C, `aggregate@${process.pid}`, $), Cr = v.filter((e) => dn.test(e)), wr = Cr.length > 0 ? await Ae(Cr, $) : [], jr = v.filter((e) => ln.test(e)), Mr = jr.length > 0 ? await It(jr, $) : [], Nr = v.filter((e) => cn.test(e)), zr = Nr.length > 0 ? await ie(Nr, $) : [], Vr = [], Hr = [], Ur = v.filter((e) => Qt.test(e));
-	if (Ur.length > 0) {
-		let e = $.child("agent"), t = v.filter((e) => tn.test(e));
-		t.length > 0 && await $t(t, e);
-		let n = await en(Ur, e);
-		for (let e of n.agents) for (let t of D(e)) (t.kind === "action" ? Vr : Hr).push({
+	let Ar = _ === "memory" ? hi : Br(w, `aggregate@${process.pid}`, $), Lr = y.filter((e) => mn.test(e)), Rr = Lr.length > 0 ? await S(Lr, $) : [], zr = y.filter((e) => hn.test(e)), Gr = zr.length > 0 ? await Bt(zr, $) : [], qr = y.filter((e) => gn.test(e)), Jr = qr.length > 0 ? await ie(qr, $) : [], Yr = [], Xr = [], Zr = y.filter((e) => nn.test(e));
+	if (Zr.length > 0) {
+		let e = $.child("agent"), t = y.filter((e) => on.test(e));
+		t.length > 0 && await rn(t, e);
+		let n = await an(Zr, e);
+		for (let e of n.agents) for (let t of bt(e)) (t.kind === "action" ? Yr : Xr).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -2112,87 +2172,87 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		let e = Y.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, Wr = Qn({
+	}, Qr = ir({
 		dialect: _,
 		...O()
-	}), Gr = _ === "memory" ? void 0 : (await P(_)).makeSqlLayer(O()), Kr = async () => Tt({
-		sqlLayer: Gr,
-		declared: S,
+	}), $r = _ === "memory" ? void 0 : (await P(_)).makeSqlLayer(O()), ei = async () => kt({
+		sqlLayer: $r,
+		declared: C,
 		log: $
-	}), qr = {
+	}), ni = {
 		kind: "api",
 		meta: {
-			name: m?.name ?? "voltro-api",
-			voltroVersion: Ot,
-			port: ce,
+			name: h?.name ?? "voltro-api",
+			voltroVersion: Mt,
+			port: le,
 			mode: "start",
 			store: _,
 			cdc: de ? "on" : "off",
-			...Wr === void 0 ? {} : { databaseId: Wr }
+			...Qr === void 0 ? {} : { databaseId: Qr }
 		},
-		rpc: Pt(y, p),
-		workflows: Vt(y, p),
-		migrations: Kr,
+		rpc: De(b, p),
+		workflows: ne(b, p),
+		migrations: ei,
 		events: () => Y.eventsSnapshot(),
 		agentTools: () => Y.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
 			accessGate: he,
-			config: m,
-			serverOnlyLeaks: y.serverOnlyLeaks,
-			migrations: Kr
+			config: h,
+			serverOnlyLeaks: b.serverOnlyLeaks,
+			migrations: ei
 		}),
 		members: () => Y.membersSnapshot(),
 		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!nr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await nr.fireNow(e, t) ?? null };
+			if (!_r) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await _r.fireNow(e, t) ?? null };
 		},
-		inspectBackfillSchedule: te({
-			getHandle: () => nr,
-			getSchedules: () => V
+		inspectBackfillSchedule: m({
+			getHandle: () => _r,
+			getSchedules: () => tr
 		}),
-		...be === void 0 ? {} : { webhooks: () => dt({
-			store: C,
-			discoveredWebhooks: be
+		...xe === void 0 ? {} : { webhooks: () => T({
+			store: w,
+			discoveredWebhooks: xe
 		}) },
 		plugins: () => ({
-			plugins: Fn.snapshot(),
+			plugins: R.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => qt(m?.name ?? kn(p), {
-			...m?.env !== void 0 && Di(m.env) ? { contract: m.env } : {},
-			plugins: m?.plugins ?? []
+		env: () => Zt(h?.name ?? Pn(p), {
+			...h?.env !== void 0 && Ni(h.env) ? { contract: h.env } : {},
+			plugins: h?.plugins ?? []
 		}),
-		dataCache: () => Lt({
-			stats: mt,
-			backendKind: pt
+		dataCache: () => Vt({
+			stats: xt,
+			backendKind: _t
 		}),
-		subscriptions: () => b(() => Rn),
-		inspectTables: () => we(y.tables),
-		inspectRows: Ut({
-			store: C,
-			tables: y.tables,
+		subscriptions: () => Ee(() => z),
+		inspectTables: () => Te(C),
+		inspectRows: qt({
+			store: w,
+			tables: C,
 			mask: !0
 		}),
 		metrics: (e) => Y.rpcMetrics().snapshot(e),
-		cluster: () => He({
-			store: C,
+		cluster: () => We({
+			store: w,
 			dialect: _,
-			useClusterCron: er,
-			scheduleCoordChoice: $n
+			useClusterCron: cr,
+			scheduleCoordChoice: U
 		}),
-		inspectSchedules: () => h({
-			schedules: V,
-			defaultTrigger: Yn,
-			coordination: U
+		inspectSchedules: () => g({
+			schedules: tr,
+			defaultTrigger: ar,
+			coordination: gr
 		}),
-		inspectScheduleRuns: (e) => Oe(C, e),
-		...M(C, {
-			controls: nt(y.workflows ?? []),
-			active: (y.workflows?.length ?? 0) > 0,
+		inspectScheduleRuns: (e) => ke(w, e),
+		...Rt(w, {
+			controls: it(b.workflows ?? []),
+			active: (b.workflows?.length ?? 0) > 0,
 			cancellation: () => Y.flowControlHealth()
 		}),
-		webhookActions: ee(() => Y.webhooksService()),
+		webhookActions: te(() => Y.webhooksService()),
 		inspectStartWorkflow: (e) => J().inspectStartWorkflow(e),
 		inspectCancelWorkflowRun: (e) => J().inspectCancelWorkflowRun(e),
 		inspectSuspendWorkflowRun: (e) => J().inspectSuspendWorkflowRun(e),
@@ -2201,13 +2261,13 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		inspectRetryWorkflowRun: (e) => J().inspectRetryWorkflowRun(e),
 		inspectSignalWorkflowRun: (e) => J().inspectSignalWorkflowRun(e),
 		inspectUpdateWorkflowRun: (e) => J().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => gt({
-			store: C,
-			active: (y.workflows?.length ?? 0) > 0,
+		inspectInferences: (e) => vt({
+			store: w,
+			active: (b.workflows?.length ?? 0) > 0,
 			dispatcher: () => Y.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...at({
-			store: C,
+		...st({
+			store: w,
 			cancelRun: async (e) => await Y.runCanceller()?.(e) ?? !1,
 			retryRun: async (e) => J().inspectRetryWorkflowRun({ runId: e }),
 			redriveRun: async (e) => Y.redriveWorkflowRun({ runId: e }),
@@ -2215,10 +2275,10 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}),
 		inspectRedriveWorkflowRun: (e) => Y.redriveWorkflowRun(e),
 		inspectResumeWorkflowRunFromStep: (e) => Y.resumeWorkflowRunFromStep(e)
-	}, Jr = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", Xr = Jr && _ !== "memory" ? await (async () => {
+	}, ri = (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace", ii = ri && _ !== "memory" ? await (async () => {
 		let e = await P(_);
-		return Je({
-			tables: S,
+		return et({
+			tables: C,
 			sqlLayer: e.makeSqlLayer(O()),
 			dialect: _,
 			options: { retryFilter: e.retryFilter },
@@ -2227,111 +2287,115 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				error: (e, t, n) => $.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, Zr = await rt({
-		input: m?.tenancy?.residency,
-		namespaceIsolationOn: Jr,
-		makeStoreForUrl: (e, t) => ot(m, void 0, Jt(O(), t)),
+	})() : void 0, ai = await at({
+		input: h?.tenancy?.residency,
+		namespaceIsolationOn: ri,
+		makeStoreForUrl: (e, t) => ct(h, void 0, Qt(O(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	Zr !== void 0 && $r(async () => {
-		await Zr.close();
+	ai !== void 0 && oi(async () => {
+		await ai.close();
 	});
-	let Y = await mo({
+	let Y = await bo({
 		bootTiming: l,
-		broadcastNamespace: On,
+		broadcastNamespace: Mn,
 		scheduling: (() => {
-			let e = gn;
+			let e = Jt;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
 				cancelSweepMs: e.cancelSweepMs,
 				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: j({
-					changeScope: C.changeScope,
-					broadcastAttached: zn !== void 0
+				disarmWhenIdle: Lt({
+					changeScope: w.changeScope,
+					broadcastAttached: Gn !== void 0
 				})
 			};
 		})(),
-		...m?.workflows?.staleness === void 0 ? {} : { workflowStaleness: m.workflows.staleness },
-		...m?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: m.workflows.suspendSignalHintMs },
-		workflowRecording: w(m?.workflows?.recording),
+		...h?.workflows?.staleness === void 0 ? {} : { workflowStaleness: h.workflows.staleness },
+		...h?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: h.workflows.suspendSignalHintMs },
+		workflowRecording: Ge(h?.workflows?.recording),
 		membership: {
-			...I,
-			instanceId: En
+			...Nn,
+			instanceId: kn
 		},
 		security: {
-			defaultDeny: x(m),
-			...le(m)
+			defaultDeny: Me(h),
+			...ue(h)
 		},
-		approvals: { defaultExpiryMs: Ie(m) },
-		...m?.plugins === void 0 ? {} : { plugins: m.plugins },
-		...Kn ? { idempotency: Kn } : {},
-		restRoutes: Gn,
+		approvals: { defaultExpiryMs: Re(h) },
+		...h?.plugins === void 0 ? {} : { plugins: h.plugins },
+		...Qn ? { idempotency: Qn } : {},
+		restRoutes: Zn,
+		...h?.grpc === void 0 ? {} : { grpc: {
+			config: h.grpc,
+			root: p
+		} },
 		appProcedures: he,
 		discovered: {
-			wsGateways: y.wsGateways,
-			queries: [...y.queries, ...Hr],
-			mutations: y.mutations,
-			actions: [...y.actions, ...Vr],
-			streams: y.streams,
-			events: y.events,
-			workflows: y.workflows,
-			workflowWorkers: y.workflowWorkers,
-			eventTriggers: y.eventTriggers,
-			schedules: V,
-			subscribers: mr,
-			outboxHandlers: br,
-			connections: y.connections,
-			reactions: vr,
-			aggregates: K,
-			expectations: wr,
-			budgets: Mr,
-			experiments: zr,
-			...be === void 0 ? {} : { webhooks: be }
+			wsGateways: b.wsGateways,
+			queries: [...b.queries, ...Xr],
+			mutations: b.mutations,
+			actions: [...b.actions, ...Yr],
+			streams: b.streams,
+			events: b.events,
+			workflows: b.workflows,
+			workflowWorkers: b.workflowWorkers,
+			eventTriggers: b.eventTriggers,
+			schedules: tr,
+			subscribers: wr,
+			outboxHandlers: K,
+			connections: b.connections,
+			reactions: Er,
+			aggregates: q,
+			expectations: Rr,
+			budgets: Gr,
+			experiments: Jr,
+			...xe === void 0 ? {} : { webhooks: xe }
 		},
 		log: $,
-		analytics: Me.sink,
-		aggregateStorage: Sr,
-		aggregateCoordinator: q,
-		store: C,
-		kv: xt,
-		cache: Ye,
-		snapshotCache: Ge,
-		...m?.reactive === void 0 ? {} : { reactive: m.reactive },
-		schemaRegistry: Fe,
-		tenantScopedTables: y.tenantScopedTables,
-		softDeleteScopedTables: y.softDeleteScopedTables,
-		dataTransferSnapshot: or(S, _),
+		analytics: Pe.sink,
+		aggregateStorage: kr,
+		aggregateCoordinator: Ar,
+		store: w,
+		kv: Tt,
+		cache: tt,
+		snapshotCache: $e,
+		...h?.reactive === void 0 ? {} : { reactive: h.reactive },
+		schemaRegistry: Le,
+		tenantScopedTables: b.tenantScopedTables,
+		softDeleteScopedTables: b.softDeleteScopedTables,
+		dataTransferSnapshot: fr(C, _),
 		dataTransferDialect: _,
-		...Xr === void 0 ? {} : { ensureTenantProvisioned: Xr.ensure },
-		...Zr === void 0 ? {} : { resolveResidentStore: Zr.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Wn({
+		...ii === void 0 ? {} : { ensureTenantProvisioned: ii.ensure },
+		...ai === void 0 ? {} : { resolveResidentStore: ai.resolveStore },
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: (e, t) => Xn({
 			headers: e,
 			clientId: t
 		}),
-		...m?.auth === void 0 ? {} : { authority: m.auth },
-		...m?.agents === void 0 ? {} : { agents: m.agents },
-		httpRoutes: A.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => ze,
-		...Jn ? { baseLayer: Jn } : {},
-		...dr === void 0 ? {} : { workflowEngineLayer: dr },
-		scheduleDefaultTrigger: Yn,
-		scheduleCoordination: U,
-		scheduleArmSelf: !er,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
+		...h?.auth === void 0 ? {} : { authority: h.auth },
+		...h?.agents === void 0 ? {} : { agents: h.agents },
+		httpRoutes: M.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => Xe,
+		...er ? { baseLayer: er } : {},
+		...yr === void 0 ? {} : { workflowEngineLayer: yr },
+		scheduleDefaultTrigger: ar,
+		scheduleCoordination: gr,
+		scheduleArmSelf: !cr,
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...fr === void 0 ? {} : { scheduleFireInterceptor: fr },
+		...br === void 0 ? {} : { scheduleFireInterceptor: br },
 		onSchedulerReady: (e) => {
-			nr = e;
+			_r = e;
 		},
-		inspectRoute: { handle: async (e, t, n, r) => await ve(e, qr, t, {
+		inspectRoute: { handle: async (e, t, n, r) => await ve(e, ni, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await mn(e, qr, t, { method: n }) : null) ?? pn(e, qr, t, {
+		}) || ((n === "GET" ? await yn(e, ni, t, { method: n }) : null) ?? vn(e, ni, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) ?? {
@@ -2339,41 +2403,41 @@ var Qi = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
-		...m?.name === void 0 ? {} : { appName: m.name },
-		observability: In,
-		port: ce,
-		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {},
-		...m?.http === void 0 ? {} : { http: m.http }
+		...h?.name === void 0 ? {} : { appName: h.name },
+		observability: Hn,
+		port: le,
+		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {},
+		...h?.http === void 0 ? {} : { http: h.http }
 	});
-	return Rn = Y.dispatcher, ne(re([
-		y.queries,
-		y.mutations,
-		y.actions,
-		y.streams
+	return z = Y.dispatcher, ft(d([
+		b.queries,
+		b.mutations,
+		b.actions,
+		b.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${ce}`, {
+	}), $.info(`API listening on :${le}`, {
 		dialect: _,
-		queries: y.queries.length,
-		mutations: y.mutations.length,
-		actions: y.actions.length,
-		streams: y.streams.length,
-		workflows: y.workflows.length,
-		workflowWorkers: y.workflowWorkers.length,
-		schedules: V.length,
-		scheduleCoordination: U
-	}), l.finish($), $r(async () => {
-		for (let e of wn) e.stop();
-		At.stop();
+		queries: b.queries.length,
+		mutations: b.mutations.length,
+		actions: b.actions.length,
+		streams: b.streams.length,
+		workflows: b.workflows.length,
+		workflowWorkers: b.workflowWorkers.length,
+		schedules: tr.length,
+		scheduleCoordination: gr
+	}), l.finish($), oi(async () => {
+		for (let e of Tn) e.stop();
+		Pt.stop();
 		try {
-			await Y.close(), bt(), Nt?.dispose(), await Fn.deactivate(), await zn?.close(), await E({
-				mirror: wt,
+			await Y.close(), wt(), zt?.dispose(), await R.deactivate(), await Gn?.close(), await Ot({
+				mirror: Nt,
 				log: $
-			}), await Me.dispose(), await C.close?.();
+			}), await Pe.dispose(), await w.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { _o as n, ho as r, vo as t };
+export { Co as n, xo as r, wo as t };