@voltro/cli 0.53.0 → 0.54.0

package/dist/{serveCommand-CueKQgzl.js → serveCommand-Bje09q1v.js}

@@ -4,50 +4,50 @@ import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
 import { t as s } from "./interruptedReplace-C3O3M1MM.js";
-import { $ as c, $t as l, A as u, An as d, At as f, Bt as ee, C as te, Cn as p, Ct as m, D as ne, Dn as h, Dt as re, E as g, Et as ie, F as ae, Ft as oe, G as se, Gt as ce, H as _, I as le, It as ue, J as de, Jt as fe, K as pe, Kt as v, L as y, Lt as b, M as me, Mt as he, N as ge, Nt as _e, O as ve, On as ye, Ot as be, P as xe, Pt as Se, Q as Ce, Qt as we, R as Te, Rt as Ee, S as x, Sn as De, St as Oe, T as ke, Tn as Ae, Tt as je, U as Me, Ut as S, Vt as Ne, W as C, X as Pe, Xt as Fe, Y as Ie, Yt as w, Z as Le, Zt as Re, _ as ze, _n as Be, _t as Ve, an as He, at as T, b as Ue, bn as We, bt as Ge, c as Ke, cn as qe, ct as Je, d as Ye, dn as Xe, dt as Ze, en as Qe, et as $e, fn as et, ft as tt, g as nt, gn as rt, gt as it, h as at, hn as ot, ht as st, i as ct, in as lt, it as ut, j as dt, jt as ft, k as pt, kn as mt, kt as ht, ln as gt, lt as _t, m as vt, mn as yt, mt as E, nn as D, nt as bt, o as O, on as xt, ot as St, p as Ct, pn as k, pt as wt, q as Tt, qt as Et, r as Dt, rn as Ot, rt as kt, sn as At, st as jt, t as Mt, tn as Nt, tt as A, u as Pt, un as Ft, ut as It, v as Lt, vn as j, vt as M, w as Rt, wn as zt, wt as Bt, x as Vt, xn as Ht, xt as Ut, y as Wt, yt as Gt, z as Kt, zt as qt } from "./dev-C6LGF4iY.js";
-import { n as N } from "./cliArgs-D4p8n7EE.js";
-import { r as Jt } from "./appPort-B_HpJ_ck.js";
-import { Ht as Yt, Wt as Xt } from "./webDev-oczpugbx.js";
+import { $ as c, $t as l, A as u, An as d, At as f, Bt as ee, C as te, Cn as ne, Ct as p, D as m, Dt as h, E as g, En as re, Et as ie, F as ae, Ft as oe, G as se, Gt as ce, H as le, I as _, It as ue, J as v, Jt as de, K as fe, Kt as pe, L as me, Lt as y, M as b, Mt as he, N as ge, Nt as _e, O as ve, On as ye, Ot as be, P as xe, Pt as Se, Q as Ce, Qt as we, R as Te, Rt as x, S as Ee, Sn as De, St as Oe, T as ke, Tn as Ae, Tt as S, U as je, Ut as Me, Vt as Ne, W as Pe, X as Fe, Xt as C, Y as Ie, Yt as Le, Z as Re, Zt as ze, _ as Be, _n as Ve, _t as w, an as He, at as Ue, b as We, bt as Ge, c as Ke, cn as qe, ct as Je, d as Ye, dn as Xe, dt as Ze, en as Qe, et as $e, fn as et, ft as tt, g as nt, gn as rt, gt as it, h as at, hn as ot, ht as st, i as ct, in as lt, it as ut, j as dt, jn as ft, jt as pt, k as T, kn as mt, kt as ht, ln as gt, lt as _t, m as E, mn as D, mt as vt, nn as yt, nt as bt, o as O, on as xt, ot as k, p as St, pn as Ct, pt as wt, q as Tt, qt as Et, r as Dt, rn as Ot, rt as kt, sn as At, st as jt, t as Mt, tn as A, tt as Nt, u as j, un as Pt, ut as M, v as Ft, vn as It, vt as Lt, w as Rt, wn as zt, wt as Bt, x as Vt, xn as Ht, xt as Ut, y as Wt, yn as Gt, yt as Kt, z as qt, zt as N } from "./dev-CmuvUKRq.js";
+import { n as Jt } from "./cliArgs-D4p8n7EE.js";
+import { r as Yt } from "./appPort-B_HpJ_ck.js";
+import { Ut as Xt, Vt as Zt } from "./webDev-DSI9SOhs.js";
 import { r as P } from "./dialectDriver-czCHYpeH.js";
-import { i as Zt, n as Qt } from "./connectionConfig-Bk9IC7D0.js";
-import { c as F, n as $t, o as en } from "./seedRunner-Dgsiwk_e.js";
-import { d as tn, h as nn, m as rn, p as an, r as on } from "./frameworkTableAssembly-DKx3ba3S.js";
-import { n as sn, r as cn, t as ln } from "./declaredSchemaGates-BlcwObhb.js";
-import { C as un, S as dn, a as fn, c as pn, l as mn, m as hn, n as gn } from "./fileConventions-DASGEmj-.js";
-import { h as _n, o as vn } from "./inspect-Bd8-9wsi.js";
-import { i as yn, n as bn, t as xn } from "./inspectMetrics-CGF94puw.js";
-import { n as Sn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as Cn, n as wn, r as Tn, t as En } from "./webhookDiscovery-CphsQe59.js";
-import { r as Dn, u as On } from "./apiBuild-CaPfoWku.js";
-import { t as kn } from "./bootTiming-BdyP9nYw.js";
-import { a as An, o as jn, t as Mn } from "./dataProfile-Du3ztYxv.js";
-import I, { basename as Nn, join as Pn } from "node:path";
-import { createWriteStream as Fn, existsSync as In } from "node:fs";
-import { pathToFileURL as Ln } from "node:url";
-import { LoggerLayer as Rn, createLogger as L } from "@voltro/logger";
-import { AuthMiddleware as zn, ConnectionInfoMiddleware as Bn, actionToRpc as R, anonymousSubject as Vn, isWireReachable as Hn, mutationToRpc as Un, queryToRpc as z, streamToRpc as Wn, wireErrorUnion as Gn, workflowCancelDescriptor as Kn, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as qn, workflowRunEventsQueryDescriptor as Jn, workflowRunQueryDescriptor as Yn, workflowRunStepsQueryDescriptor as Xn, workflowRunsQueryDescriptor as Zn, workflowSignalDescriptor as Qn, workflowUpdateDescriptor as $n } from "@voltro/protocol";
-import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as er, allRegisteredTables as tr, and as nr, connectionIdentity as rr, derivedRowId as ir, describeTransferRun as ar, ensureTableRegistered as or, eq as U, or as sr } from "@voltro/database";
-import { Cause as cr, Effect as W, Layer as G, ManagedRuntime as lr } from "effect";
-import { SqlClient as ur } from "@effect/sql";
-import { declaredSnapshot as dr, describeOutcome as fr, pendingFileMigrationIds as pr, runPlannedMigrations as mr } from "@voltro/database/sql";
-import { AggregateRegistry as hr, CostRegistry as gr, DORMANCY_WAKEUP_TENANT as _r, Dispatcher as vr, ExpectationRegistry as yr, ExperimentRegistry as br, apiKeyManagementRoutes as xr, attachAnalyticsMirror as Sr, attachExpectations as Cr, attachExperiments as wr, attachFinops as Tr, awaitServerListening as Er, bindMutation as Dr, bindStream as Or, bindSubscription as K, buildTracingLayer as kr, cancelWakeup as Ar, compileCron as jr, dataStoreApiKeyStore as Mr, formatServerOnlyLeaks as Nr, formatUnresolvedSources as Pr, frameworkApiKeyStrategy as Fr, getResourcePolicy as Ir, installPolicyGuardResolver as Lr, loadResourceTuples as Rr, makeActionRunner as zr, makeAdvisoryLockCoordinator as Br, makeApiKeyService as Vr, makeApiKeyUsageBuffer as Hr, makeApiKeyUsageFlusher as Ur, makeAsyncKv as Wr, makeAuthMiddlewareLayers as Gr, makeCoordinatedScheduler as Kr, makeEffectStoreLayer as qr, makeLazyWorkflowFacade as Jr, makeMutationOutputCodec as Yr, makeMutationRunner as Xr, makeOneShotQueryRunner as Zr, makeQueryDescriptorProducer as q, makeQueryFinalizer as Qr, makeQueryReauthorizer as $r, makeQuerySubscriber as ei, makeSchemaRegistry as ti, makeWorkflowFacade as ni, makeWorkflowFacadeWithCallerContext as ri, makeWorkflowLayers as ii, noopKv as ai, onProcessShutdown as J, recordSubscriptionDelivery as Y, recordWorkflowRun as oi, registerDefaultTupleSource as si, registerWakeup as ci, resolveSecretsBackend as li, runProvidedEffect as ui, setSecretsBackend as di, setSystemStoreHandle as fi, shutdownGraceMsFromEnv as pi, singleCoordinator as mi, startRpcServer as hi, startScheduler as gi, stripForbiddenForWire as _i, undoCaptureEnabled as vi, unresolvedSources as yi, withScopedRequest as bi, workflowToRpc as xi, wrapStoreWithBootCodec as Si } from "@voltro/runtime";
-import Ci, { tmpdir as wi } from "node:os";
-import { RpcGroup as Ti } from "@effect/rpc";
-import { appStorageProvider as Ei, durabilityNotice as Di, fromNodeReadable as Oi, getObjectStream as ki, putObjectStream as Ai, toNodeReadable as ji } from "@voltro/plugin-storage";
-import { isEnvContract as Mi } from "@voltro/env";
-import { assertProductionSessionSecret as Ni } from "@voltro/protocol/session";
+import { i as Qt, n as F } from "./connectionConfig-Bk9IC7D0.js";
+import { c as $t, n as en, o as tn } from "./seedRunner-Dgsiwk_e.js";
+import { d as nn, h as rn, m as an, p as on, r as sn } from "./frameworkTableAssembly-D7LJuALW.js";
+import { n as cn, r as ln, t as un } from "./declaredSchemaGates-BlcwObhb.js";
+import { C as dn, a as fn, h as pn, l as mn, n as hn, u as gn, w as _n } from "./fileConventions-l-RIXbx8.js";
+import { h as vn, o as yn } from "./inspect-Bd8-9wsi.js";
+import { i as bn, n as xn, t as Sn } from "./inspectMetrics-CGF94puw.js";
+import { n as Cn } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as wn, n as Tn, r as En, t as Dn } from "./webhookDiscovery-CphsQe59.js";
+import { r as On, u as kn } from "./apiBuild-DTWp0S_q.js";
+import { t as An } from "./bootTiming-BdyP9nYw.js";
+import { a as jn, o as Mn, t as Nn } from "./dataProfile-Du3ztYxv.js";
+import I, { basename as Pn, join as Fn } from "node:path";
+import { createWriteStream as In, existsSync as Ln } from "node:fs";
+import { pathToFileURL as Rn } from "node:url";
+import { LoggerLayer as zn, createLogger as L } from "@voltro/logger";
+import { AuthMiddleware as Bn, ConnectionInfoMiddleware as Vn, actionToRpc as R, anonymousSubject as Hn, isWireReachable as Un, mutationToRpc as Wn, queryToRpc as z, streamToRpc as Gn, wireErrorUnion as Kn, workflowCancelDescriptor as qn, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as Jn, workflowRunEventsQueryDescriptor as Yn, workflowRunQueryDescriptor as Xn, workflowRunStepsQueryDescriptor as Zn, workflowRunsQueryDescriptor as Qn, workflowSignalDescriptor as $n, workflowUpdateDescriptor as er } from "@voltro/protocol";
+import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as tr, allRegisteredTables as nr, and as rr, connectionIdentity as ir, derivedRowId as ar, describeTransferRun as or, ensureTableRegistered as sr, eq as U, or as cr } from "@voltro/database";
+import { Cause as lr, Effect as W, Layer as G, ManagedRuntime as ur } from "effect";
+import { SqlClient as dr } from "@effect/sql";
+import { declaredSnapshot as fr, describeOutcome as pr, pendingFileMigrationIds as mr, runPlannedMigrations as hr } from "@voltro/database/sql";
+import { AggregateRegistry as gr, CostRegistry as _r, DORMANCY_WAKEUP_TENANT as vr, Dispatcher as yr, ExpectationRegistry as br, ExperimentRegistry as xr, apiKeyManagementRoutes as Sr, attachAnalyticsMirror as Cr, attachExpectations as wr, attachExperiments as Tr, attachFinops as Er, awaitServerListening as Dr, bindMutation as K, bindStream as Or, bindSubscription as q, buildTracingLayer as kr, cancelWakeup as Ar, compileCron as jr, dataStoreApiKeyStore as Mr, formatServerOnlyLeaks as Nr, formatUnresolvedSources as Pr, frameworkApiKeyStrategy as Fr, getResourcePolicy as Ir, installPolicyGuardResolver as Lr, loadResourceTuples as Rr, makeActionRunner as zr, makeAdvisoryLockCoordinator as Br, makeApiKeyService as Vr, makeApiKeyUsageBuffer as Hr, makeApiKeyUsageFlusher as Ur, makeAsyncKv as Wr, makeAuthMiddlewareLayers as Gr, makeCoordinatedScheduler as Kr, makeEffectStoreLayer as qr, makeLazyWorkflowFacade as Jr, makeMutationOutputCodec as Yr, makeMutationRunner as Xr, makeOneShotQueryRunner as Zr, makeQueryDescriptorProducer as J, makeQueryFinalizer as Qr, makeQueryReauthorizer as $r, makeQuerySubscriber as ei, makeSchemaRegistry as ti, makeWorkflowFacade as ni, makeWorkflowFacadeWithCallerContext as ri, makeWorkflowLayers as ii, noopKv as ai, onProcessShutdown as oi, recordSubscriptionDelivery as Y, recordWorkflowRun as si, registerDefaultTupleSource as ci, registerWakeup as li, resolveSecretsBackend as ui, runProvidedEffect as di, setSecretsBackend as fi, setSystemStoreHandle as pi, shutdownGraceMsFromEnv as mi, singleCoordinator as hi, startRpcServer as gi, startScheduler as _i, stripForbiddenForWire as vi, undoCaptureEnabled as yi, unresolvedSources as bi, withScopedRequest as xi, workflowToRpc as Si, wrapStoreWithBootCodec as Ci } from "@voltro/runtime";
+import wi, { tmpdir as Ti } from "node:os";
+import { RpcGroup as Ei } from "@effect/rpc";
+import { appStorageProvider as Di, durabilityNotice as Oi, fromNodeReadable as ki, getObjectStream as Ai, putObjectStream as ji, toNodeReadable as Mi } from "@voltro/plugin-storage";
+import { isEnvContract as Ni } from "@voltro/env";
+import { assertProductionSessionSecret as Pi } from "@voltro/protocol/session";
 import X from "node:fs/promises";
-import { createHash as Pi, timingSafeEqual as Fi } from "node:crypto";
-import { channelFor as Ii, getBroadcastPlugin as Li } from "@voltro/plugin-broadcast";
-import { buildDeliverWebhookExecute as Ri, buildWebhooksService as zi, defaultIncomingPath as Bi, deliverWebhookWorkflow as Vi, makeDeferredEmitHandler as Hi, mountIncomingWebhook as Ui } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as Wi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as Gi } from "@voltro/plugin-mail";
-import { checkSchemaDrift as Ki, decideStaging as qi, isEnvironmentLocal as Ji, packBundle as Yi, peekBundle as Xi, runExport as Zi, runImport as Qi, storageBlobSink as $i, storageRefsBlobSource as ea, unpackBundle as ta, unpackBundleToDir as na } from "@voltro/data-transfer";
+import { createHash as Fi, timingSafeEqual as Ii } from "node:crypto";
+import { channelFor as Li, getBroadcastPlugin as Ri } from "@voltro/plugin-broadcast";
+import { buildDeliverWebhookExecute as zi, buildWebhooksService as Bi, defaultIncomingPath as Vi, deliverWebhookWorkflow as Hi, makeDeferredEmitHandler as Ui, mountIncomingWebhook as Wi } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as Gi } from "@voltro/plugin-auth";
+import { registerEmailTemplates as Ki } from "@voltro/plugin-mail";
+import { checkSchemaDrift as qi, decideStaging as Ji, isEnvironmentLocal as Yi, packBundle as Xi, peekBundle as Zi, runExport as Qi, runImport as $i, storageBlobSink as ea, storageRefsBlobSource as ta, unpackBundle as na, unpackBundleToDir as ra } from "@voltro/data-transfer";
 //#region \0rolldown/runtime.js
-var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
+var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
 	if (typeof require < "u") return require.apply(this, arguments);
 	throw Error("Calling `require` for \"" + e + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
-}), ia = () => Math.max(500, Math.floor(pi() * .6)), aa = (e) => new Promise((t) => setTimeout(t, e)), oa = (e) => {
+}), aa = () => Math.max(500, Math.floor(mi() * .6)), oa = (e) => new Promise((t) => setTimeout(t, e)), sa = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -61,14 +61,14 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? ia();
+		let n = t.budgetMs ?? aa();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await aa(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await oa(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -85,7 +85,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await aa(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await oa(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -97,83 +97,83 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			await a(e), await o();
 		}
 	};
-}, sa = "/_voltro/admin/import", ca = "/_voltro/admin/import/start", la = "/_voltro/admin/export", ua = "/_voltro/admin/export/download", da = "/_voltro/admin/transfers", Z = (e, t) => ({
+}, ca = "/_voltro/admin/import", la = "/_voltro/admin/import/start", ua = "/_voltro/admin/export", da = "/_voltro/admin/export/download", fa = "/_voltro/admin/transfers", Z = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), fa = (e) => {
+}), pa = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, pa = (e, t) => Fi(Pi("sha256").update(e).digest(), Pi("sha256").update(t).digest()), ma = (e, t, n = "POST") => {
+}, ma = (e, t) => Ii(Fi("sha256").update(e).digest(), Fi("sha256").update(t).digest()), ha = (e, t, n = "POST") => {
 	if (e.method.toUpperCase() !== n) return Z(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Z(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let r = fa(e.headers);
-	return !r || !pa(r, t) ? Z(401, { error: "unauthorized" }) : null;
-}, ha = /^[A-Za-z0-9_-]{8,64}$/, ga = (e) => ha.test(e), _a = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? I.join(Ci.tmpdir(), "voltro-import-uploads"), va = (e) => I.join(_a(), e), ya = (e) => I.join(va(e), "archive.bin"), ba = (e) => I.join(va(e), "meta.json"), xa = async (e = Date.now()) => {
+	let r = pa(e.headers);
+	return !r || !ma(r, t) ? Z(401, { error: "unauthorized" }) : null;
+}, ga = /^[A-Za-z0-9_-]{8,64}$/, _a = (e) => ga.test(e), va = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? I.join(wi.tmpdir(), "voltro-import-uploads"), ya = (e) => I.join(va(), e), ba = (e) => I.join(ya(e), "archive.bin"), xa = (e) => I.join(ya(e), "meta.json"), Sa = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(_a())) {
+		for (let n of await X.readdir(va())) {
 			if (n === ".runs") continue;
-			let r = await X.stat(va(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(va(n), {
+			let r = await X.stat(ya(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(ya(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, Sa = async (e) => {
-	if (!ga(e)) return {
+}, Ca = async (e) => {
+	if (!_a(e)) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let t = await X.stat(ya(e)).catch(() => null);
+	let t = await X.stat(ba(e)).catch(() => null);
 	if (t === null) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let n = await Ca(e);
+	let n = await wa(e);
 	return {
 		bytes: t.size,
 		key: n.key ?? null,
 		runId: n.runId ?? null
 	};
-}, Ca = async (e) => {
+}, wa = async (e) => {
 	try {
-		let t = await X.readFile(ba(e), "utf8");
+		let t = await X.readFile(xa(e), "utf8");
 		return JSON.parse(t);
 	} catch {
 		return {};
 	}
-}, wa = async (e, t) => {
-	let n = ba(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+}, Ta = async (e, t) => {
+	let n = xa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
 	await X.writeFile(r, JSON.stringify(t)), await X.rename(r, n);
-}, Ta = async (e, t, n) => {
-	if (!ga(e)) return t;
-	await X.mkdir(va(e), { recursive: !0 });
-	let r = await Ca(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
-	return i !== null && n?.takeOver !== !0 ? i : (await wa(e, {
+}, Ea = async (e, t, n) => {
+	if (!_a(e)) return t;
+	await X.mkdir(ya(e), { recursive: !0 });
+	let r = await wa(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
+	return i !== null && n?.takeOver !== !0 ? i : (await Ta(e, {
 		...r,
 		runId: t
 	}), t);
-}, Ea = async (e) => {
-	if (!ga(e)) return;
-	let t = await Ca(e);
+}, Da = async (e) => {
+	if (!_a(e)) return;
+	let t = await wa(e);
 	if (t.runId === void 0) return;
 	let { runId: n, ...r } = t;
-	await wa(e, r).catch(() => void 0);
-}, Da = async (e, t, n) => (await X.mkdir(va(e), { recursive: !0 }), await X.writeFile(ya(e), Buffer.from(t)), await wa(e, {
-	...await Ca(e),
+	await Ta(e, r).catch(() => void 0);
+}, Oa = async (e, t, n) => (await X.mkdir(ya(e), { recursive: !0 }), await X.writeFile(ba(e), Buffer.from(t)), await Ta(e, {
+	...await wa(e),
 	key: n,
 	startedAt: (/* @__PURE__ */ new Date()).toISOString()
-}), t.byteLength), Oa = (e) => `up-${Pi("sha256").update(e).digest("hex").slice(0, 32)}`, ka = async (e) => {
-	if (!ga(e.id)) return {
+}), t.byteLength), ka = (e) => `up-${Fi("sha256").update(e).digest("hex").slice(0, 32)}`, Aa = async (e) => {
+	if (!_a(e.id)) return {
 		reason: "bad-id",
-		message: `upload id must match ${String(ha)}`
+		message: `upload id must match ${String(ga)}`
 	};
-	let t = await Sa(e.id);
+	let t = await Ca(e.id);
 	if (t.key !== null && t.key !== e.key) return {
 		reason: "key-mismatch",
 		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
@@ -183,34 +183,34 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
 		expectedOffset: t.bytes
 	};
-	if (await X.mkdir(va(e.id), { recursive: !0 }), t.key === null) {
-		let t = await Ca(e.id);
-		await wa(e.id, {
+	if (await X.mkdir(ya(e.id), { recursive: !0 }), t.key === null) {
+		let t = await wa(e.id);
+		await Ta(e.id, {
 			...t,
 			key: e.key,
 			startedAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
 	return await new Promise((t, n) => {
-		let r = Fn(ya(e.id), { flags: "a" });
+		let r = In(ba(e.id), { flags: "a" });
 		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
 	}), { total: t.bytes + e.bytes.byteLength };
-}, Aa = async (e) => {
-	let t = await X.stat(ya(e));
+}, ja = async (e) => {
+	let t = await X.stat(ba(e));
 	return {
-		path: ya(e),
+		path: ba(e),
 		bytes: t.size
 	};
-}, ja = () => I.join(_a(), ".runs"), Ma = (e) => I.join(ja(), `${e}.bin`), Na = async (e, t) => {
-	if (!ga(e)) return null;
-	let n = ya(e), r = await X.stat(n).catch(() => null);
+}, Ma = () => I.join(va(), ".runs"), Na = (e) => I.join(Ma(), `${e}.bin`), Pa = async (e, t) => {
+	if (!_a(e)) return null;
+	let n = ba(e), r = await X.stat(n).catch(() => null);
 	if (r === null || r.size === 0) return null;
-	await X.mkdir(ja(), { recursive: !0 });
-	let i = Ma(t);
+	await X.mkdir(Ma(), { recursive: !0 });
+	let i = Na(t);
 	return await X.rename(n, i), i;
-}, Pa = async (e) => {
-	await X.rm(Ma(e), { force: !0 }).catch(() => void 0);
-}, Q = L({ scope: "voltro:admin-import" }), Fa = "VBUNDLE2", Ia = (e) => {
+}, Fa = async (e) => {
+	await X.rm(Na(e), { force: !0 }).catch(() => void 0);
+}, Q = L({ scope: "voltro:admin-import" }), Ia = "VBUNDLE2", La = (e) => {
 	let t = e.req.headers["x-import-rollback-key"];
 	if (e.mode !== "replace") return { options: {} };
 	if (typeof t != "string" || t.length === 0) return Q.warn("admin.import: no rollback capture — this run empties the target first, and nothing was asked to be kept. Send `x-import-rollback-key: <storage key>` (voltro data import --rollback-key <key>) to have the instance store the target's current rows before deleting them."), { options: {} };
@@ -221,18 +221,18 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			hint: "A capture written to the pod would not survive the failure it exists for. Configure storage (the same one the storage-push export uses), or re-send without `x-import-rollback-key` to accept that a run which does not finish can leave the target emptied. Note that CONFIGURED is not the same question as SURVIVES: a `filesystem` provider pointed at a container directory with no volume behind it passes this check and dies with the pod. The run says so when it can observe it — the capture path being on the same filesystem as `/`."
 		})
 	};
-	let n = Pn(wi(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
+	let n = Fn(Ti(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
 	return {
 		key: t,
 		options: {
 			rollbackDir: n,
 			onRollbackCaptured: async () => {
-				let e = Di(n);
-				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Yi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
+				let e = Oi(n);
+				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Xi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
 			}
 		}
 	};
-}, La = (e) => {
+}, Ra = (e) => {
 	let t = e["x-import-mode"], n = e["x-import-atomic"];
 	return {
 		mode: t,
@@ -242,34 +242,34 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		dryRun: e["x-import-dry-run"] === "1" || e["x-import-dry-run"] === "true",
 		tables: (e["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean)
 	};
-}, Ra = async (e, t) => {
+}, za = async (e, t) => {
 	if (typeof t.bundleKey == "string" && t.bundleKey !== "") {
 		if (!e.openArchive) return { refusal: Z(501, { error: "storage transport not configured on this instance" }) };
 		let n = e.openArchive, r = t.bundleKey;
 		return {
 			source: () => n(r),
 			transport: "storage",
-			uploadId: Oa(r)
+			uploadId: ka(r)
 		};
 	}
 	let n = t.uploadId;
-	if (typeof n != "string" || !ga(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
-	let r = await Aa(n).catch(() => null);
+	if (typeof n != "string" || !_a(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
+	let r = await ja(n).catch(() => null);
 	return r === null || r.bytes === 0 ? { refusal: Z(409, {
 		error: "no such upload",
 		message: `this instance holds no bytes for upload '${n}'. Upload the bundle first, or re-upload if it has expired.`
 	}) } : {
-		source: () => za(r.path),
+		source: () => Ba(r.path),
 		transport: "upload",
 		uploadId: n
 	};
-}, za = (e) => {
-	let { createReadStream: t } = ra("node:fs");
+}, Ba = (e) => {
+	let { createReadStream: t } = ia("node:fs");
 	return t(e);
-}, Ba = (e) => async (t) => {
-	let n = ma(t, e.secret);
+}, Va = (e) => async (t) => {
+	let n = ha(t, e.secret);
 	if (n) return n;
-	let r = La(t.headers), i = Ia({
+	let r = Ra(t.headers), i = La({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -283,16 +283,16 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			return Z(400, { error: "a preflight body must be JSON: { tables: string[] } or { bundleKey: string }" });
 		}
 		let a = Array.isArray(n.tables) ? n.tables.filter((e) => typeof e == "string") : [];
-		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Va(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
+		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Ha(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
 			error: "a preflight needs { tables: string[] } — the bundle's table names, so the staging decision can be made against them",
 			hint: "or { bundleKey } on an instance with storage configured, where this endpoint reads the table list out of the archive itself"
 		});
-		let o = qi({
+		let o = Ji({
 			mode: r.mode ?? "upsert",
 			...e.dialect === void 0 ? {} : { targetDialect: e.dialect },
 			...e.snapshot === void 0 ? {} : { targetSnapshot: e.snapshot },
 			bundleTables: a,
-			isSkipped: Ji,
+			isSkipped: Yi,
 			canRunSql: !0
 		});
 		return Z(200, {
@@ -311,8 +311,8 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	}
 	let a = t.headers["x-import-upload-id"];
 	if (a !== void 0 && a !== "") {
-		if (xa(), t.headers["x-import-probe"] === "1") {
-			let e = await Sa(a);
+		if (Sa(), t.headers["x-import-probe"] === "1") {
+			let e = await Ca(a);
 			return Z(200, {
 				uploadId: a,
 				bytes: e.bytes,
@@ -321,7 +321,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
 		if (e === "" || !Number.isFinite(n) || n < 0) return Z(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
-		let r = await ka({
+		let r = await Aa({
 			id: a,
 			key: e,
 			offset: n,
@@ -343,12 +343,12 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			complete: i
 		});
 	}
-	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Fa) {
-		xa();
-		let e = Pi("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = Oa(e);
+	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Ia) {
+		Sa();
+		let e = Fi("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = ka(e);
 		return Z(202, {
 			uploadId: n,
-			bytes: await Da(n, t.rawBody, e),
+			bytes: await Oa(n, t.rawBody, e),
 			complete: !0
 		});
 	}
@@ -359,22 +359,22 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		return Z(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
 	}
 	return typeof o.bundleKey != "string" || !o.bundleKey ? Z(400, { error: "body.bundleKey (string) is required for the storage transport" }) : e.openArchive ? Z(202, {
-		uploadId: Oa(o.bundleKey),
+		uploadId: ka(o.bundleKey),
 		bundleKey: o.bundleKey,
 		complete: !0
 	}) : Z(501, { error: "storage transport not configured on this instance" });
-}, Va = async (e) => {
-	let t = await Xi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
+}, Ha = async (e) => {
+	let t = await Zi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
 	if (t === void 0) return [];
 	try {
 		return (JSON.parse(Buffer.from(t).toString("utf8")).tables ?? []).map((e) => e.name).filter((e) => typeof e == "string");
 	} catch {
 		return [];
 	}
-}, Ha = (e) => async (t) => {
-	let n = ma(t, e.secret);
+}, Ua = (e) => async (t) => {
+	let n = ha(t, e.secret);
 	if (n) return n;
-	let r = La(t.headers), i = Ia({
+	let r = Ra(t.headers), i = La({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -386,12 +386,12 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} catch {
 		return Z(400, { error: "body must be JSON: { uploadId } or { bundleKey }" });
 	}
-	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? Oa(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
-	if (!ga(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
-	let s = ir("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Ta(o, s);
+	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? ka(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
+	if (!_a(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
+	let s = ar("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Ea(o, s);
 	if (c !== s) {
-		let t = await An(e.store, c);
-		if (jn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
+		let t = await jn(e.store, c);
+		if (Mn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
 			uploadId: o,
 			runId: c
 		}), Z(202, {
@@ -402,18 +402,18 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		Q.info("admin.import start: taking over a claim whose run is not running", {
 			uploadId: o,
 			staleRunId: c,
-			outcome: jn(t) ?? "no record"
-		}), c = await Ta(o, s, { takeOver: !0 });
+			outcome: Mn(t) ?? "no record"
+		}), c = await Ea(o, s, { takeOver: !0 });
 	}
-	let l = async (e) => (await Ea(o).catch(() => void 0), e), u = await Ra(e, {
+	let l = async (e) => (await Da(o).catch(() => void 0), e), u = await za(e, {
 		...typeof a.uploadId == "string" ? { uploadId: a.uploadId } : {},
 		...typeof a.bundleKey == "string" ? { bundleKey: a.bundleKey } : {}
 	});
 	if ("refusal" in u) return l(u.refusal);
 	if (e.snapshot !== void 0 && !r.force) {
-		let t = await Ua(u.source());
+		let t = await Wa(u.source());
 		if (t !== null) {
-			let n = Ki(t.source?.schemaFingerprint ?? "", e.snapshot, Wa(t));
+			let n = qi(t.source?.schemaFingerprint ?? "", e.snapshot, Ga(t));
 			if (n.drifted) return Q.warn("admin.import refused (schema drift)", {
 				transport: u.transport,
 				bundle: n.bundleFingerprint.slice(0, 16),
@@ -428,17 +428,17 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 	}
 	let d = null;
-	if (u.transport === "upload" && (d = await Na(u.uploadId, c), d === null)) return l(Z(409, {
+	if (u.transport === "upload" && (d = await Pa(u.uploadId, c), d === null)) return l(Z(409, {
 		error: "no such upload",
 		message: `the bytes for upload '${u.uploadId}' are gone. Re-upload the bundle.`
 	}));
-	let f = await Ga(e.store, {
+	let f = await Ka(e.store, {
 		runId: c,
 		mode: r.mode ?? "upsert",
 		via: "api",
 		bundle: u.transport === "storage" ? String(a.bundleKey) : u.uploadId
 	});
-	return Ka({
+	return qa({
 		deps: e,
 		opts: r,
 		rollback: i,
@@ -446,7 +446,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		traced: f,
 		resolved: d === null ? u : {
 			...u,
-			source: () => za(d)
+			source: () => Ba(d)
 		}
 	}), Q.info("admin.import started", {
 		runId: c,
@@ -465,15 +465,15 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: f,
 		outcome: "poll /_voltro/admin/transfers for this runId — a 202 means started, not finished"
 	});
-}, Ua = async (e) => {
-	let t = await Xi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
+}, Wa = async (e) => {
+	let t = await Zi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
 	if (t == null) return null;
 	try {
 		return JSON.parse(Buffer.from(t).toString("utf8"));
 	} catch {
 		return null;
 	}
-}, Wa = (e) => ({ tables: (e.tables ?? []).map((e) => ({
+}, Ga = (e) => ({ tables: (e.tables ?? []).map((e) => ({
 	name: e.name,
 	indexes: [],
 	columns: Object.entries(e.columnTypes ?? {}).map(([e, t]) => ({
@@ -483,9 +483,9 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		unique: !1,
 		hasDefault: !1
 	}))
-})) }), Ga = async (e, t) => {
+})) }), Ka = async (e, t) => {
 	try {
-		return or(er), await e.insert(H, {
+		return sr(tr), await e.insert(H, {
 			id: t.runId,
 			direction: "import",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -505,7 +505,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, Ka = async (e) => {
+}, qa = async (e) => {
 	let { deps: t, opts: n, rollback: r, resolved: i, runId: a } = e, o = await import("node:os"), s = await import("node:fs/promises"), c = await import("node:path"), l = await s.mkdtemp(c.join(o.tmpdir(), "voltro-admin-import-")), u = async (n) => {
 		Q.warn("admin.import failed", {
 			runId: a,
@@ -517,11 +517,11 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}).then(() => void 0, () => void 0);
 	};
 	try {
-		t.assetSink ? await ta(i.source(), {
+		t.assetSink ? await na(i.source(), {
 			dir: l,
 			blobs: t.assetSink
-		}) : await na(i.source(), l);
-		let o = await W.runPromiseExit(Qi({
+		}) : await ra(i.source(), l);
+		let o = await W.runPromiseExit($i({
 			store: t.store,
 			bundleDir: l,
 			...n.mode ? { mode: n.mode } : {},
@@ -566,24 +566,24 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		await s.rm(l, {
 			recursive: !0,
 			force: !0
-		}).catch(() => void 0), await Pa(a).catch(() => void 0), await Ea(i.uploadId).catch(() => void 0);
+		}).catch(() => void 0), await Fa(a).catch(() => void 0), await Da(i.uploadId).catch(() => void 0);
 	}
-}, qa = /^[A-Za-z0-9_-]{8,64}$/, Ja = (e) => qa.test(e), Ya = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? I.join(Ci.tmpdir(), "voltro-export-artifacts"), Xa = (e) => I.join(Ya(), e), Za = (e) => I.join(Xa(e), "archive.bin"), Qa = async (e = Date.now()) => {
+}, Ja = /^[A-Za-z0-9_-]{8,64}$/, Ya = (e) => Ja.test(e), Xa = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? I.join(wi.tmpdir(), "voltro-export-artifacts"), Za = (e) => I.join(Xa(), e), Qa = (e) => I.join(Za(e), "archive.bin"), $a = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(Ya())) {
-			let r = await X.stat(Xa(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Xa(n), {
+		for (let n of await X.readdir(Xa())) {
+			let r = await X.stat(Za(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Za(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, $a = async (e, t) => {
-	if (!Ja(e)) throw Error(`invalid run id: ${e}`);
-	await X.mkdir(Xa(e), { recursive: !0 });
-	let { createWriteStream: n } = await import("node:fs"), r = n(Za(e)), i = 0;
+}, eo = async (e, t) => {
+	if (!Ya(e)) throw Error(`invalid run id: ${e}`);
+	await X.mkdir(Za(e), { recursive: !0 });
+	let { createWriteStream: n } = await import("node:fs"), r = n(Qa(e)), i = 0;
 	try {
 		for await (let e of t) i += e.byteLength, r.write(Buffer.from(e)) || await new Promise((e, t) => {
 			r.once("drain", e), r.once("error", t);
@@ -594,18 +594,18 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	}
 	return i;
-}, eo = async (e) => {
-	if (!Ja(e)) return null;
-	let t = await X.stat(Za(e)).catch(() => null);
+}, to = async (e) => {
+	if (!Ya(e)) return null;
+	let t = await X.stat(Qa(e)).catch(() => null);
 	return t === null ? null : t.size;
-}, to = async (e, t, n) => {
-	let r = await eo(e);
+}, no = async (e, t, n) => {
+	let r = await to(e);
 	if (r === null) return null;
 	if (t >= r) return {
 		bytes: Buffer.alloc(0),
 		total: r
 	};
-	let i = await X.open(Za(e), "r");
+	let i = await X.open(Qa(e), "r");
 	try {
 		let e = Math.max(0, Math.min(n, r - t)), a = Buffer.alloc(e);
 		return await i.read(a, 0, e, t), {
@@ -615,27 +615,27 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		await i.close();
 	}
-}, no = async (e) => {
-	Ja(e) && await X.rm(Xa(e), {
+}, ro = async (e) => {
+	Ya(e) && await X.rm(Za(e), {
 		recursive: !0,
 		force: !0
 	}).catch(() => void 0);
-}, ro = L({ scope: "voltro:admin-export" }), io = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], ao = (e) => {
+}, io = L({ scope: "voltro:admin-export" }), ao = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], oo = (e) => {
 	if (typeof e.tenant == "string" && e.tenant) return {
 		kind: "tenant",
 		tenantId: e.tenant
 	};
 	if (Array.isArray(e.tables) && e.tables.length) return {
 		kind: "tables",
-		tables: io(e.tables)
+		tables: ao(e.tables)
 	};
-	let t = io(e.exclude);
+	let t = ao(e.exclude);
 	return t.length > 0 ? {
 		kind: "all",
 		exclude: t
 	} : { kind: "all" };
-}, oo = (e) => async (t) => {
-	let n = ma(t, e.secret);
+}, so = (e) => async (t) => {
+	let n = ha(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -655,12 +655,12 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? ao(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = ir("dexp", `${Date.now()}-${Math.random()}`), d = await so(e.store, {
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? oo(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = ar("dexp", `${Date.now()}-${Math.random()}`), d = await co(e.store, {
 		runId: u,
 		mode: i.subset ? "subset" : s.kind,
 		bundle: c ? String(r.bundleKey) : null
 	});
-	return co({
+	return lo({
 		deps: e,
 		runId: u,
 		recorded: d,
@@ -670,7 +670,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		blobs: l,
 		...o ? { compression: o } : {},
 		...c ? { bundleKey: String(r.bundleKey) } : {}
-	}), Qa(), ro.info("admin.export started", {
+	}), $a(), io.info("admin.export started", {
 		runId: u,
 		scope: s.kind,
 		storage: c
@@ -681,9 +681,9 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: d,
 		outcome: "poll /_voltro/admin/transfers for this runId; fetch the bytes from /_voltro/admin/export/download"
 	});
-}, so = async (e, t) => {
+}, co = async (e, t) => {
 	try {
-		return or(er), await e.insert(H, {
+		return sr(tr), await e.insert(H, {
 			id: t.runId,
 			direction: "export",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -698,17 +698,17 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			staged: null
 		}), !0;
 	} catch (e) {
-		return ro.warn("admin.export: the run could not be recorded", {
+		return io.warn("admin.export: the run could not be recorded", {
 			runId: t.runId,
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, co = async (e) => {
+}, lo = async (e) => {
 	let { deps: t, runId: n } = e, r = await import("node:os"), i = await import("node:fs/promises"), a = await import("node:path"), o = await i.mkdtemp(a.join(r.tmpdir(), "voltro-admin-export-")), s = async (r) => {
 		e.recorded && await t.store.update(H, n, r).then(() => void 0, () => void 0);
 	};
 	try {
-		let r = await W.runPromise(Zi({
+		let r = await W.runPromise(Qi({
 			store: t.store,
 			snapshot: t.snapshot,
 			dialect: t.dialect,
@@ -723,16 +723,16 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		})), i = r.tables.reduce((e, t) => e + t.rowCount, 0), a = r.masking?.transformed.length ?? 0;
 		if (e.bundleKey !== void 0) {
 			if (!t.putArchive) throw Error("storage transport not configured on this instance");
-			await t.putArchive(e.bundleKey, () => Yi({
+			await t.putArchive(e.bundleKey, () => Xi({
 				dir: o,
 				...e.blobs
 			}));
 		}
-		let c = await $a(n, Yi({
+		let c = await eo(n, Xi({
 			dir: o,
 			...e.blobs
 		}));
-		ro.info("admin.export complete", {
+		io.info("admin.export complete", {
 			runId: n,
 			tables: r.tables.length,
 			rows: i,
@@ -748,25 +748,25 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	} catch (e) {
 		let t = e?.message ?? String(e);
-		ro.warn("admin.export failed", {
+		io.warn("admin.export failed", {
 			runId: n,
 			error: t
 		}), await s({
 			failure: t,
 			finishedAt: null
-		}), await no(n);
+		}), await ro(n);
 	} finally {
 		await i.rm(o, {
 			recursive: !0,
 			force: !0
 		}).catch(() => void 0);
 	}
-}, lo = (e) => async (t) => {
-	let n = ma(t, e.secret, "GET");
+}, uo = (e) => async (t) => {
+	let n = ha(t, e.secret, "GET");
 	if (n) return n;
 	let r = new URLSearchParams(t.query ?? ""), i = r.get("runId") ?? "";
-	if (!Ja(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
-	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await to(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, fo) : uo);
+	if (!Ya(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
+	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await no(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, po) : fo);
 	return s === null ? Z(404, {
 		error: "no artefact",
 		message: `this instance holds no produced bundle for run '${i}'. It may have expired, or the export may still be running — poll the run first.`
@@ -780,7 +780,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			"x-export-length": String(s.bytes.byteLength)
 		}
 	};
-}, uo = 8388608, fo = 33554432, po = async (e, t) => await e.query({
+}, fo = 8388608, po = 33554432, mo = async (e, t) => await e.query({
 	table: H,
 	order: [{
 		column: "startedAt",
@@ -790,19 +790,19 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	projection: void 0,
 	skip: 0,
 	take: t
-}), mo = (e) => {
+}), ho = (e) => {
 	let t = new Date(e);
 	return Number.isFinite(t.getTime()) ? t : /* @__PURE__ */ new Date(0);
-}, ho = (e) => ({
+}, go = (e) => ({
 	...e,
-	startedAt: mo(e.startedAt),
-	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : mo(e.finishedAt)
-}), go = (e) => async (t) => {
-	let n = ma(t, e.secret, "GET");
+	startedAt: ho(e.startedAt),
+	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : ho(e.finishedAt)
+}), _o = (e) => async (t) => {
+	let n = ha(t, e.secret, "GET");
 	if (n) return n;
 	let r = Number(new URLSearchParams(t.query ?? "").get("limit") ?? "20"), i = Number.isFinite(r) ? Math.max(1, Math.min(200, Math.trunc(r))) : 20, a;
 	try {
-		a = (await po(e.store, i)).map(ho);
+		a = (await mo(e.store, i)).map(go);
 	} catch (e) {
 		return Z(409, {
 			error: "no import history",
@@ -825,11 +825,11 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			direction: e.direction,
 			failure: e.failure,
 			staged: e.staged,
-			line: ar(e)
+			line: or(e)
 		}))
 	});
-}, _o = (e, t, n = {}) => (async function* () {
-	let r = await W.runPromise(ki(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await ji(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, vo = (e, t, n = {}) => (async function* () {
+	let r = await W.runPromise(Ai(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await Mi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -838,7 +838,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), vo = {
+})(), yo = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -847,15 +847,15 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, yo = async (e) => {
+}, bo = async (e) => {
 	Ne(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), fi({
+	}), pi({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new vr({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new yr({
 		crdtColumnsOf: (t) => e.schemaRegistry.crdtColumns(t),
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
@@ -867,13 +867,13 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? vo, a = e.kv ?? ai, o, s = () => void 0, u, d, f, ee, te, ne, h, g = L({ scope: "voltro:workflow" }), ie = L({ scope: "voltro:schedule" }), ae = Et({
+	}), i = e.cache ?? yo, a = e.kv ?? ai, o, s = () => void 0, u, d, f, ee, te, ne, m, g = L({ scope: "voltro:workflow" }), re = L({ scope: "voltro:schedule" }), ie = Et({
 		store: e.store,
 		warn: (e, t) => g.warn(e, t)
-	}), oe = ae.remember, ce = ae.resolve, de = fe({
+	}), ae = ie.remember, oe = ie.resolve, ce = de({
 		authority: e.authority,
 		getStore: () => e.store
-	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? Jr(() => o) : void 0, ve = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ye = ve || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", Se = e.tenantIsolation === "namespace", we = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), Te, Ee, x = e.discovered.webhooks;
+	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? Jr(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ve = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ye = e.tenantIsolation === "namespace", Se = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), we, Te, x = e.discovered.webhooks;
 	if (x && x.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
 		let t = Xe({
@@ -882,26 +882,26 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			cache: i,
 			kv: a
 		}), n = x.outgoing.map((e) => e.descriptor);
-		Ee = Vi.toLayer(Ri(t, { events: n })), Te = zi(t, async (e) => {
+		Te = Hi.toLayer(zi(t, { events: n })), we = Bi(t, async (e) => {
 			let t = f;
 			if (t === void 0) {
-				we.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+				Se.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				});
 				return;
 			}
-			t.runPromise(Vi.execute(e)).catch((t) => {
-				we.error("deliverWebhook workflow crashed", {
+			t.runPromise(Hi.execute(e)).catch((t) => {
+				Se.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				}, t);
 			});
 		}, { events: n });
 	}
-	let De = /* @__PURE__ */ new Map();
+	let Ee = /* @__PURE__ */ new Map();
 	if (x) for (let e of x.incoming) {
-		let t = e.descriptor.path ?? Bi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Ui(e.descriptor, {
+		let t = e.descriptor.path ?? Vi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Wi(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
 			resolveWorkflows: () => v === void 0 ? void 0 : ri(v, {
 				traceId: `incoming:${e.descriptor.id}`,
@@ -915,18 +915,18 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					idempotency: e.idempotency,
 					durationMs: e.durationMs
 				};
-				e.status >= 500 ? we.error("incoming delivery failed", t) : e.status >= 400 ? we.warn("incoming delivery rejected", t) : we.info("incoming delivery handled", t);
+				e.status >= 500 ? Se.error("incoming delivery failed", t) : e.status >= 400 ? Se.warn("incoming delivery rejected", t) : Se.info("incoming delivery handled", t);
 			}
 		});
-		De.set(t, { handle: r });
+		Ee.set(t, { handle: r });
 	}
-	Lr(), si((t) => Rr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let ke = [], Ae = [...e.discovered.outboxHandlers ?? [], ...wn((x?.outgoing.length ?? 0) + (x?.incoming.length ?? 0) + (x?.providers.length ?? 0), []) ? [{
+	Lr(), ci((t) => Rr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	let De = [], ke = [...e.discovered.outboxHandlers ?? [], ...Tn((x?.outgoing.length ?? 0) + (x?.incoming.length ?? 0) + (x?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: Hi(() => Te)
-	}] : []], je = Ae.length > 0 ? l({
-		handlers: Ae,
+		definition: Ui(() => we)
+	}] : []], Ae = ke.length > 0 ? l({
+		handlers: ke,
 		store: e.store,
 		log: (e.log ?? L({ scope: "voltro:serve" })).child("outbox"),
 		onChange: (t) => e.store.onChange((e) => t({
@@ -934,15 +934,15 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			op: e.op
 		})),
 		onShutdown: (e) => {
-			ke.push(e);
+			De.push(e);
 		}
-	}) : void 0, S = Fe({
+	}) : void 0, S = C({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: w(e.port ?? 4e3),
+		publicUrl: Le(e.port ?? 4e3),
 		log: (e.log ?? L({ scope: "voltro:serve" })).child("connections")
 	});
-	me({
+	b({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -951,136 +951,136 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let Pe = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Le = e.broadcastNamespace ?? ze(e.plugins, void 0), Re = Lt(e.plugins, Le, Pe), Be = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, He = e.membership ?? Wt(e.plugins, {
-		instanceId: Be,
-		namespace: Le,
+	let Me = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Fe = e.broadcastNamespace ?? Be(e.plugins, void 0), Re = Ft(e.plugins, Fe, Me), ze = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ve = e.membership ?? Wt(e.plugins, {
+		instanceId: ze,
+		namespace: Fe,
 		meta: { mode: "serve" },
-		logger: Pe
-	}), T = ge({
+		logger: Me
+	}), He = ge({
 		events: e.discovered.events ?? [],
-		origin: Be,
+		origin: ze,
 		...Re.publishRemote === void 0 ? {} : { publishRemote: Re.publishRemote }
-	}), Ue = (e.discovered.events ?? []).length > 0 ? await Re.attach(T.bus) : null, Ge = Ft({
+	}), Ue = (e.discovered.events ?? []).length > 0 ? await Re.attach(He.bus) : null, We = Pt({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
 		kv: a,
-		...Te === void 0 ? {} : { webhooksService: Te },
+		...we === void 0 ? {} : { webhooksService: we },
 		...v === void 0 ? {} : { workflowsProxy: v },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: Se,
+		namespaceIsolationOn: ye,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...je === void 0 ? {} : { outbox: { nudge: je.nudge } },
+		...Ae === void 0 ? {} : { outbox: { nudge: Ae.nudge } },
 		...S.active ? { connections: { registry: S.registry } } : {},
-		eventBus: T.bus
-	}), Ke = G.succeed(hr, be), qe = G.succeed(yr, Oe), Je = G.succeed(gr, Ut), Ye = G.succeed(br, m), et = (t, n) => {
+		eventBus: He.bus
+	}), Ge = G.succeed(gr, be), Ke = G.succeed(br, Oe), qe = G.succeed(_r, Ut), Je = G.succeed(xr, p), Ye = (t, n) => {
 		let r = t.pipe(W.provide(qr(n)));
-		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je)).pipe(W.provide(Ye));
-	}, nt = (e, t) => {
-		let n = et(e, t);
-		return ui(n);
-	}, rt = xn(), it = Ie(e.plugins ?? [], rt), at = _({
+		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Ge)).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je));
+	}, et = (e, t) => {
+		let n = Ye(e, t);
+		return di(n);
+	}, nt = Sn(), rt = Ie(e.plugins ?? [], nt), it = le({
 		plugins: e.plugins ?? [],
-		metrics: rt,
+		metrics: nt,
 		log: e.log ?? L({ scope: "voltro:serve" })
-	}), ot = Tt(e.plugins ?? [], rt), st = e.security?.defaultDeny ?? !0, ct = Xr({
+	}), at = Tt(e.plugins ?? [], nt), ot = e.security?.defaultDeny ?? !0, st = Xr({
 		store: e.store,
-		defaultDeny: st,
+		defaultDeny: ot,
 		recordMetric: (e) => {
-			rt.record(e);
+			nt.record(e);
 		},
-		...it.mutation === void 0 ? {} : { interceptor: it.mutation },
-		buildContext: (e, t, n) => Ge(e, t, n),
-		runEffect: nt,
+		...rt.mutation === void 0 ? {} : { interceptor: rt.mutation },
+		buildContext: (e, t, n) => We(e, t, n),
+		runEffect: et,
 		undoCapture: $e((t) => e.schemaRegistry.crdtColumns(t))
-	}), ut = c();
+	}), ct = c();
 	{
-		let t = A();
+		let t = Nt();
 		t !== void 0 && (e.log ?? L({ scope: "voltro:serve" })).info(t);
 	}
-	let dt = Ce({
+	let ut = Ce({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), ft = zr({
-		defaultDeny: st,
-		buildContext: (e) => Ge(e),
-		runEffect: nt,
+	}), dt = zr({
+		defaultDeny: ot,
+		buildContext: (e) => We(e),
+		runEffect: et,
 		recordMetric: (e) => {
-			rt.record(e);
+			nt.record(e);
 		},
-		...it.action === void 0 ? {} : { interceptor: it.action }
-	}), pt = Qr({
+		...rt.action === void 0 ? {} : { interceptor: rt.action }
+	}), ft = Qr({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
-	}), mt = {
-		defaultDeny: st,
-		buildContext: (e) => Ge(e),
-		finalize: (e, t) => pt(e, t.subject),
-		provideEffect: et,
-		...it.query === void 0 ? {} : { interceptor: it.query }
-	}, ht = q(mt), vt = Zr({
-		...mt,
-		queryRows: (t, n) => e.store.query(t).then((e) => _i(t.table, e, n.subject))
-	}), yt = ei({
-		...mt,
-		subscribeDescriptor: (e, t, n) => r.subscribe(e, t, n),
+	}), pt = {
+		defaultDeny: ot,
+		buildContext: (e) => We(e),
+		finalize: (e, t) => ft(e, t.subject),
+		provideEffect: Ye,
+		...rt.query === void 0 ? {} : { interceptor: rt.query }
+	}, T = J(pt), mt = Zr({
+		...pt,
+		queryRows: (t, n) => e.store.query(t).then((e) => vi(t.table, e, n.subject))
+	}), ht = ei({
+		...pt,
+		subscribeDescriptor: (e, t, n, i, a) => r.subscribe(e, t, n, void 0, void 0, void 0, i, a),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => Hn(e.descriptor)), D = {};
+	}), E = (e) => e.filter((e) => Un(e.descriptor)), D = {};
 	for (let t of [
 		...E(e.discovered.queries),
+		...ct.queries,
 		...ut.queries,
-		...dt.queries,
 		...S.queries
-	]) D[t.descriptor.name] = (e) => K(ht(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, $r(t, e));
+	]) D[t.descriptor.name] = (e) => q(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, $r(t, e));
 	for (let t of [
 		...E(e.discovered.mutations),
+		...ct.mutations,
 		...ut.mutations,
-		...dt.mutations,
 		...S.mutations
 	]) {
 		let n = Yr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => Dr(async (e, n) => ct(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Gn(t.descriptor, "mutation"));
+		D[t.descriptor.name] = (r) => K(async (e, n) => st(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Kn(t.descriptor, "mutation"));
 	}
 	for (let t of [...E(e.discovered.actions), ...S.actions]) {
 		let n = Yr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => Dr(async (e, n) => ft(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Gn(t.descriptor, "action"));
+		D[t.descriptor.name] = (r) => K(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Kn(t.descriptor, "action"));
 	}
-	let bt = () => `public-${Math.random().toString(36).slice(2, 10)}`, O = [
+	let vt = () => `public-${Math.random().toString(36).slice(2, 10)}`, yt = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => vt(e, t, {
+			invoke: (t, n) => mt(e, t, {
 				subject: n.subject,
-				traceId: bt()
+				traceId: vt()
 			}),
-			subscribe: (t, n, r) => yt(e, t, {
+			subscribe: (t, n, r) => ht(e, t, {
 				subject: n.subject,
-				traceId: bt()
+				traceId: vt()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ct(e, t, {
+			invoke: (t, n) => st(e, t, {
 				subject: n.subject,
-				traceId: bt()
+				traceId: vt()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => ft(e, t, {
+			invoke: (t, n) => dt(e, t, {
 				subject: n.subject,
-				traceId: bt()
+				traceId: vt()
 			})
 		}))
-	], St = {
-		candidates: b({
+	], bt = {
+		candidates: y({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
 			descriptorOf: (e) => e.descriptor,
-			runQuery: (e, t, n) => Promise.resolve(vt(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(ct(e, t, n)),
-			runAction: (e, t, n) => Promise.resolve(ft(e, t, n))
+			runQuery: (e, t, n) => Promise.resolve(mt(e, t, n)),
+			runMutation: (e, t, n) => Promise.resolve(st(e, t, n)),
+			runAction: (e, t, n) => Promise.resolve(dt(e, t, n))
 		}),
 		policy: e.agents?.tools ?? {},
 		mcpEnabled: e.agents?.mcp === !0,
@@ -1093,12 +1093,12 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				kind: "query",
 				input: e.descriptor.input,
 				output: e.descriptor.output,
-				invoke: (n, r, i) => vt(e, n, {
+				invoke: (n, r, i) => mt(e, n, {
 					subject: r.subject,
 					traceId: t(),
 					signal: i
 				}),
-				subscribe: (n, r, i) => yt(e, n, {
+				subscribe: (n, r, i) => ht(e, n, {
 					subject: r.subject,
 					traceId: t()
 				}, i)
@@ -1108,7 +1108,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				kind: "mutation",
 				input: e.descriptor.input,
 				output: e.descriptor.output,
-				invoke: (n, r, i) => ct(e, n, {
+				invoke: (n, r, i) => st(e, n, {
 					subject: r.subject,
 					traceId: t(),
 					signal: i
@@ -1119,14 +1119,14 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				kind: "action",
 				input: e.descriptor.input,
 				output: e.descriptor.output,
-				invoke: async (n, r, i) => ft(e, n, {
+				invoke: async (n, r, i) => dt(e, n, {
 					subject: r.subject,
 					traceId: t(),
 					signal: i
 				})
 			}))
 		];
-		await We({
+		await Ht({
 			config: e.grpc.config,
 			candidates: n,
 			resolveSubject: async (t) => {
@@ -1139,96 +1139,96 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			store: e.store,
 			root: e.grpc.root,
 			log: e.log ?? L({ scope: "voltro:serve" }),
-			onShutdown: (e) => J(e)
+			onShutdown: (e) => oi(e)
 		});
 	}
-	let Ct = lt({
+	let O = lt({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: O,
+		publicApiEntries: yt,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
 		log: e.log ?? L({ scope: "voltro:serve" })
-	}), k = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Dt = async (e, t) => {
-		let { Readable: n } = await import("node:stream"), r = Ei(), i = Oi("storage", () => n.from(t()));
-		await W.runPromise(Ai(r, e, i, { contentType: "application/octet-stream" }));
-	}, Ot = k && k.length >= 16 ? [
+	}), k = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, St = async (e, t) => {
+		let { Readable: n } = await import("node:stream"), r = Di(), i = ki("storage", () => n.from(t()));
+		await W.runPromise(ji(r, e, i, { contentType: "application/octet-stream" }));
+	}, Ct = k && k.length >= 16 ? [
 		{
 			method: "POST",
-			path: sa,
-			handle: Ba({
+			path: ca,
+			handle: Va({
 				secret: k,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: $i(Ei()),
-				openArchive: (e) => _o(Ei(), e),
+				assetSink: ea(Di()),
+				openArchive: (e) => vo(Di(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: Dt,
+				putArchive: St,
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {}
 			})
 		},
 		{
 			method: "POST",
-			path: ca,
-			handle: Ha({
+			path: la,
+			handle: Ua({
 				secret: k,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: $i(Ei()),
-				openArchive: (e) => _o(Ei(), e),
+				assetSink: ea(Di()),
+				openArchive: (e) => vo(Di(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: Dt
+				putArchive: St
 			})
 		},
 		{
 			method: "GET",
-			path: da,
-			handle: go({
+			path: fa,
+			handle: _o({
 				secret: k,
 				store: e.store
 			})
 		},
 		{
 			method: "GET",
-			path: ua,
-			handle: lo({ secret: k })
+			path: da,
+			handle: uo({ secret: k })
 		},
 		{
 			method: "POST",
-			path: la,
-			handle: oo({
+			path: ua,
+			handle: so({
 				secret: k,
 				store: e.store,
 				snapshot: e.dataTransferSnapshot ?? { tables: [] },
 				dialect: e.dataTransferDialect ?? "memory",
 				tenantTables: [...e.tenantScopedTables],
-				loadProfile: Mn,
-				assetSource: ea(Ei(), e.store),
-				putArchive: Dt
+				loadProfile: Nn,
+				assetSource: ta(Di(), e.store),
+				putArchive: St
 			})
 		}
-	] : [], kt = [
+	] : [], Dt = [
 		...e.httpRoutes ?? [],
-		...Ct.httpRoutes,
-		...Ot,
+		...O.httpRoutes,
+		...Ct,
 		...S.httpRoutes
 	];
-	Object.assign(D, T.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Or((r) => bi(r, (r) => {
-		let i = Ge(r), a = t.executor(n, i);
+	Object.assign(D, He.handlers);
+	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Or((r) => xi(r, (r) => {
+		let i = We(r), a = t.executor(n, i);
 		if (W.isEffect(a)) {
 			let t = a.pipe(W.provide(qr(i.store)));
-			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je)).pipe(W.provide(Ye));
+			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Ge)).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je));
 		}
 		return typeof a == "object" && a && typeof a.then == "function" ? W.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => Dr(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => K(async (e, n) => {
 		let r = n;
 		return ri(v, {
 			subject: r.subject,
@@ -1236,8 +1236,8 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	ve && (D[Yn.name] = (e) => K(ht({
-		descriptor: Yn,
+	pe && (D[Xn.name] = (e) => q(T({
+		descriptor: Xn,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -1246,14 +1246,14 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: sr(U("id", t), U("executionId", t)),
+				predicate: cr(U("id", t), U("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Yn.name}`), D[Zn.name] = (e) => K(ht({
-		descriptor: Zn,
+	}, e), r, `subscription.${Xn.name}`), D[Qn.name] = (e) => q(T({
+		descriptor: Qn,
 		executor: (e) => {
 			let t = e, n = [...t.tag === void 0 ? [] : [U("tag", t.tag)], ...t.status === void 0 ? [] : [U("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
@@ -1262,14 +1262,14 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : nr(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : rr(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Zn.name}`), D[Xn.name] = (e) => K(ht({
-		descriptor: Xn,
+	}, e), r, `subscription.${Qn.name}`), D[Zn.name] = (e) => q(T({
+		descriptor: Zn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1284,8 +1284,8 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Xn.name}`), D[Jn.name] = (e) => K(ht({
-		descriptor: Jn,
+	}, e), r, `subscription.${Zn.name}`), D[Yn.name] = (e) => q(T({
+		descriptor: Yn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1300,7 +1300,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Jn.name}`), D[B.name] = (e) => K(ht({
+	}, e), r, `subscription.${Yn.name}`), D[B.name] = (e) => q(T({
 		descriptor: B,
 		executor: (e) => {
 			let t = e;
@@ -1316,7 +1316,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${B.name}`), D[V.name] = (e) => K(ht({
+	}, e), r, `subscription.${B.name}`), D[V.name] = (e) => q(T({
 		descriptor: V,
 		executor: (e) => {
 			let t = e.eventId;
@@ -1332,67 +1332,67 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${V.name}`), D[Kn.name] = (t) => Dr(async (t, n) => {
+	}, e), r, `subscription.${V.name}`), D[qn.name] = (t) => K(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.cancel(r.workflowName, r.executionId), await zt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Kn.name}`), D[qn.name] = (t) => Dr(async (t, n) => {
+		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.cancel(r.workflowName, r.executionId), await Lt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${qn.name}`), D[Jn.name] = (t) => K(async (t, n) => {
 		let r = t;
 		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${qn.name}`), D[Qn.name] = (t) => Dr(async (t, n) => {
+	}, t, `action.${Jn.name}`), D[$n.name] = (t) => K(async (t, n) => {
 		let r = t;
 		return await gt(e.store, n.subject, { id: r.id }), v.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${Qn.name}`), D[$n.name] = (t) => Dr(async (t, n) => {
+	}, t, `action.${$n.name}`), D[er.name] = (t) => K(async (t, n) => {
 		let r = t;
 		return await gt(e.store, n.subject, { id: r.id }), v.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${$n.name}`));
-	let At = [
+	}, t, `action.${er.name}`));
+	let Ot = [
 		...E(e.discovered.queries).map((e) => z(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => Un(e.descriptor)),
+		...E(e.discovered.mutations).map((e) => Wn(e.descriptor)),
 		...E(e.discovered.actions).map((e) => R(e.descriptor)),
+		...ct.queries.map((e) => z(e.descriptor)),
+		...ct.mutations.map((e) => Wn(e.descriptor)),
 		...ut.queries.map((e) => z(e.descriptor)),
-		...ut.mutations.map((e) => Un(e.descriptor)),
-		...dt.queries.map((e) => z(e.descriptor)),
-		...dt.mutations.map((e) => Un(e.descriptor)),
+		...ut.mutations.map((e) => Wn(e.descriptor)),
 		...S.queries.map((e) => z(e.descriptor)),
-		...S.mutations.map((e) => Un(e.descriptor)),
+		...S.mutations.map((e) => Wn(e.descriptor)),
 		...S.actions.map((e) => R(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => Wn(e.descriptor)),
-		...T.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => xi(e.definition)),
-		...ve ? [
-			z(Yn),
-			z(Zn),
+		...E(e.discovered.streams ?? []).map((e) => Gn(e.descriptor)),
+		...He.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => Si(e.definition)),
+		...pe ? [
 			z(Xn),
-			z(Jn),
+			z(Qn),
+			z(Zn),
+			z(Yn),
 			z(B),
 			z(V),
-			R(Kn),
 			R(qn),
-			R(Qn),
-			R($n)
+			R(Jn),
+			R($n),
+			R(er)
 		] : []
-	], jt = Ti.make(...At).middleware(zn).middleware(Bn), Mt = Gr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Nt = e.dormancyTenantId ?? _r, Pt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => ci(e.store, {
-			tenantId: r ?? Nt,
+	], kt = Ei.make(...Ot).middleware(Bn).middleware(Vn), At = Gr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), jt = e.dormancyTenantId ?? vr, Mt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => li(e.store, {
+			tenantId: r ?? jt,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
 		cancel: (t, n) => Ar(e.store, {
-			tenantId: n ?? Nt,
+			tenantId: n ?? jt,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, j = ye ? await import("@voltro/workflow") : void 0, M = j?.makeWorkflowRunRecorder({
+	} : void 0, A = ve ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...Pt === void 0 ? {} : { wakeups: Pt }
-	}), Rt = async (t, n) => {
-		await j.closeWorkflowChildrenForParent({
+		...Mt === void 0 ? {} : { wakeups: Mt }
+	}), It = async (t, n) => {
+		await A.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: M,
+			recorder: j,
 			log: { warn: (e, t) => g.warn(e, t ?? {}) },
 			interruptChild: async (t, n) => {
 				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
@@ -1401,7 +1401,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				await f.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, zt = async (t, n, r) => {
+	}, Lt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
@@ -1416,7 +1416,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await M.recordEvent({
+		a && await j.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -1425,18 +1425,18 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Rt(n, "cancelled");
-	}, Bt = [
+		}), a && await It(n, "cancelled");
+	}, Rt = [
 		...ii(e.discovered.workflows ?? [], {
-			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? Ge({
+			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? We({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: ce,
-			...de === void 0 ? {} : { resolveAuthority: de }
+			resolveStartContext: oe,
+			...ce === void 0 ? {} : { resolveAuthority: ce }
 		}, (t, n, r) => {
-			let i = j.getWorkflowVersionMetadata(t.definition);
-			return j.wrapWorkflowExecuteWithRunRecording({
+			let i = A.getWorkflowVersionMetadata(t.definition);
+			return A.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -1447,27 +1447,27 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Rt(e, t),
-				...It(t.definition),
+				onParentClose: ({ executionId: e, status: t }) => It(e, t),
+				...M(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await d?.gate.release(e);
 				},
-				recorder: M,
-				pluginWorkflowStepLayer: ot,
-				recordRun: oi
+				recorder: j,
+				pluginWorkflowStepLayer: at,
+				recordRun: si
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
-		...Ee === void 0 ? [] : [Ee]
-	], Vt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Ee === void 0 ? [] : ["voltro.deliverWebhook"]], Ht = Bt.length > 0 ? G.mergeAll(...Bt) : G.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Ee !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Ht.pipe(G.provideMerge(e.workflowEngineLayer));
-		f = lr.make((e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))).pipe(G.provideMerge(Rn({})))), await f.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Vt.length} entity type(s) registered`, { entities: Vt });
+		...Te === void 0 ? [] : [Te]
+	], Bt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Te === void 0 ? [] : ["voltro.deliverWebhook"]], Vt = Rt.length > 0 ? G.mergeAll(...Rt) : G.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Te !== void 0) && e.workflowEngineLayer !== void 0) {
+		let t = Vt.pipe(G.provideMerge(e.workflowEngineLayer));
+		f = ur.make((e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))).pipe(G.provideMerge(zn({})))), await f.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Bt.length} entity type(s) registered`, { entities: Bt });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
-		ne = await p({
-			provider: Li(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Li(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Le,
+		ne = await zt({
+			provider: Ri(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: Ri(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Fe,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -1477,12 +1477,12 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			})),
 			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
 		}), ee = async (t) => {
-			let n = await C({
+			let n = await Pe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await M.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1500,7 +1500,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await M.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1515,10 +1515,10 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : mi, c = Kr({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : hi, c = Kr({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), l = L({ scope: "voltro:flow-control" }), m = {
+		}), l = L({ scope: "voltro:flow-control" }), p = {
 			info: (e, t) => {
 				l.info(e, t);
 			},
@@ -1528,19 +1528,19 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			error: (e, t) => {
 				l.error(e, t ?? {});
 			}
-		}, h, re = () => {
-			if (h !== void 0) return h;
-			if (o !== void 0 && M !== void 0) return h = le({
+		}, m, h = () => {
+			if (m !== void 0) return m;
+			if (o !== void 0 && j !== void 0) return m = _({
 				store: e.store,
 				log: F,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
 				workflowRuntime: f,
-				workflowRunRecorder: M,
-				closeChildrenForParent: Rt
-			}), h;
+				workflowRunRecorder: j,
+				closeChildrenForParent: It
+			}), m;
 		};
-		s = re, d = Ve({
+		s = h, d = w({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1554,8 +1554,8 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			workflows: e.discovered.workflows ?? [],
 			facade: () => o,
-			cancelRunWithReason: re,
-			recordRunEvent: () => M?.recordEvent,
+			cancelRunWithReason: h,
+			recordRunEvent: () => j?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
 			scheduleCoordinated: c,
@@ -1563,14 +1563,14 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				await _t({
 					workflows: e.discovered.workflows ?? [],
 					facade: () => o,
-					log: m,
+					log: p,
 					...t
 				});
 			},
-			log: m
+			log: p
 		});
 		let g = d;
-		g !== void 0 && J(() => g.stop()), u = wt({
+		g !== void 0 && oi(() => g.stop()), u = wt({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1581,8 +1581,8 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => f === void 0 || j === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await f.runPromise(j.completeSuspendingSignal({
+			resumeSignal: () => f === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(A.completeSuspendingSignal({
 					store: e.store,
 					target: tt(t, n),
 					signalName: r,
@@ -1591,10 +1591,10 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			runEffect: (e) => f.runPromise(e),
 			scheduleCoordinated: c,
-			log: m
+			log: p
 		});
-		let ie = u;
-		ie !== void 0 && J(() => ie.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ni({
+		let re = u;
+		re !== void 0 && oi(() => re.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ni({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => f.runPromise(e),
 			onEnqueue: () => ne?.publishWake(),
@@ -1603,51 +1603,51 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				startPayloadSchema: g.gate.startPayloadSchema,
 				parkDelayedStart: g.gate.parkDelayed
 			},
-			rememberStartContext: oe,
+			rememberStartContext: ae,
 			signal: async (t, n, r) => {
-				let i = await j.sendWorkflowSignal({
+				let i = await A.sendWorkflowSignal({
 					store: e.store,
-					recorder: M,
+					recorder: j,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await f.runPromise(j.completeSuspendingSignal({
+				return await f.runPromise(A.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => j.sendWorkflowUpdate({
+			update: (t, n, r, i) => A.sendWorkflowUpdate({
 				store: e.store,
-				recorder: M,
+				recorder: j,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => Me(e.store, t),
-			retry: (t, n) => pe({
+			listRuns: (t) => je(e.store, t),
+			retry: (t, n) => fe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => f.runPromise(e)
 			}, t, n),
-			redrive: (t) => C({
+			redrive: (t) => Pe({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Gt = G.mergeAll(jt.toLayer(D), Mt), Kt = xt(D, e.discovered.queries.map((e) => e.descriptor.name), ve), qt = G.mergeAll(jt.toLayer(Kt), Mt), N = e.observability, Jt = await kr({
+	let Gt = G.mergeAll(kt.toLayer(D), At), Kt = xt(D, e.discovered.queries.map((e) => e.descriptor.name), pe), qt = G.mergeAll(kt.toLayer(Kt), At), N = e.observability, Jt = await kr({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
 		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
 		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
 		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
 		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
-	}), Yt = !1, Xt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: P, shutdown: Zt } = hi({
-		group: jt,
+	}), Yt = !1, Xt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Zt, shutdown: P } = gi({
+		group: kt,
 		handlersLayer: Gt,
 		httpHandlersLayer: qt,
 		port: e.port ?? 4e3,
@@ -1655,7 +1655,7 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		path: e.path ?? "/ws",
 		tracerLayer: Jt.layer,
 		security: ue(e),
-		...bn(e),
+		...xn(e),
 		...e.discovered.wsGateways !== void 0 && e.discovered.wsGateways.length > 0 ? { webSocketGateways: e.discovered.wsGateways } : {},
 		resolveGatewaySubject: async (t) => {
 			let n = await e.resolveSubject(t, -1);
@@ -1664,19 +1664,19 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				...n.credentialExpiresAt === void 0 ? {} : { credentialExpiresAt: n.credentialExpiresAt * 1e3 }
 			};
 		},
-		...at,
+		...it,
 		healthCheck: {
 			isReady: () => Yt,
 			...Xt ? { ping: Xt } : {}
 		},
-		...kt.length > 0 ? { httpRoutes: kt } : {},
+		...Dt.length > 0 ? { httpRoutes: Dt } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...De.size > 0 ? { webhookRoutes: De } : {},
+		...Ee.size > 0 ? { webhookRoutes: Ee } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), Qt = oa(P);
-	if (await Er(P), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : mi;
-		h = await gi(e.discovered.schedules ?? [], {
+	}), Qt = sa(Zt);
+	if (await Dr(Zt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : hi;
+		m = await _i(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1684,28 +1684,28 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			armSelf: e.scheduleArmSelf ?? !0,
 			dormancy: e.dormancy ?? "always-on",
 			...e.dormancyTenantId === void 0 ? {} : { dormancyTenantId: e.dormancyTenantId },
-			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => Ge({
+			buildContext: ({ traceId: t, scheduleName: n, subject: r }) => We({
 				subject: r,
 				traceId: t
 			}, e.store, void 0, `schedule:${n}`),
 			log: {
 				info: (e, t) => {
-					ie.info(e, t);
+					re.info(e, t);
 				},
 				warn: (e, t) => {
-					ie.warn(e, t);
+					re.warn(e, t);
 				},
 				error: (e, t) => {
-					ie.error(e, t ?? {});
+					re.error(e, t ?? {});
 				},
 				debug: () => {}
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(h);
+		}), e.onSchedulerReady?.(m);
 	}
 	let F = e.log ?? L({ scope: "voltro:serve" }), $t, en;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && ($t = Qe(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, T.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && ($t = Qe(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, He.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
 		let t = F.child("reaction"), n = async (n, r) => {
 			if (n.kind === "workflow") {
 				if (v === void 0) {
@@ -1721,8 +1721,8 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			}
 			await _e(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(ft(e, t, n)),
-				makeSubject: (e) => Vn(e),
+				runAction: (e, t, n) => Promise.resolve(dt(e, t, n)),
+				makeSubject: (e) => Hn(e),
 				now: () => Date.now(),
 				log: t
 			});
@@ -1744,183 +1744,183 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}, t);
 	}
 	let tn;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (tn = await re({
+	(e.discovered.aggregates?.length ?? 0) > 0 && (tn = await h({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
 		log: F.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ke = G.succeed(hr, tn.registry));
+	}), Ge = G.succeed(gr, tn.registry));
 	let nn;
-	(e.discovered.expectations?.length ?? 0) > 0 && (nn = Cr({
+	(e.discovered.expectations?.length ?? 0) > 0 && (nn = wr({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
 		log: F.child("expectation")
-	}), qe = G.succeed(yr, nn.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Tr({
+	}), Ke = G.succeed(br, nn.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Er({
 		discovered: e.discovered.budgets ?? [],
 		log: F.child("finops")
-	}), Je = G.succeed(gr, n.registry));
+	}), qe = G.succeed(_r, n.registry));
 	let rn;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (rn = wr({
+	return (e.discovered.experiments?.length ?? 0) > 0 && (rn = Tr({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
 		log: F.child("experiment")
-	}), Ye = G.succeed(br, rn.registry)), Yt = !0, e.bootTiming?.mark("ready"), {
+	}), Je = G.succeed(xr, rn.registry)), Yt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: P,
-		scheduler: h,
-		eventsSnapshot: xe(T.bus, T.declared),
+		server: Zt,
+		scheduler: m,
+		eventsSnapshot: xe(He.bus, He.declared),
 		membersSnapshot: () => ({
-			members: He.membership.list(),
+			members: Ve.membership.list(),
 			capturedAt: Date.now()
 		}),
-		agentTools: () => St,
-		rpcMetrics: () => rt,
-		webhooksService: () => Te,
+		agentTools: () => bt,
+		rpcMetrics: () => nt,
+		webhooksService: () => we,
 		runCanceller: () => s(),
 		flowControlHealth: () => d?.cancelHealth(),
 		inferenceHealth: () => u?.health(),
-		workflowWriteActions: () => v === void 0 || M === void 0 ? void 0 : y({
+		workflowWriteActions: () => v === void 0 || j === void 0 ? void 0 : me({
 			store: e.store,
 			log: F,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
 			workflowRuntime: f,
-			workflowRunRecorder: M,
-			closeChildrenForParent: Rt
+			workflowRunRecorder: j,
+			closeChildrenForParent: It
 		}),
 		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
 		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
 			Yt = !1, await Qt.drainRequests();
-			for (let e of ke) try {
+			for (let e of De) try {
 				await e();
 			} catch (e) {
 				F.warn("serve: teardown step failed", {}, e);
 			}
-			await Ue?.detach(), await He.detach(), tn?.detach(), nn?.detach(), n?.detach(), rn?.detach(), en?.(), $t?.(), await h?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await Zt(), await Qt.finish();
+			await Ue?.detach(), await Ve.detach(), tn?.detach(), nn?.detach(), n?.detach(), rn?.detach(), en?.(), $t?.(), await m?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await P(), await Qt.finish();
 		}
 	};
-}, $ = L({ scope: "voltro:serve" }), bo = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", xo = N, So = async (e) => {
-	let t = On(process.cwd());
-	if (In(t)) {
+}, $ = L({ scope: "voltro:serve" }), xo = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", So = Jt, Co = async (e) => {
+	let t = kn(process.cwd());
+	if (Ln(t)) {
 		let n;
 		try {
-			let e = await import(Ln(t).href);
+			let e = await import(Rn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return Co(e);
-}, Co = async (c) => {
-	let l = kn();
+	return wo(e);
+}, wo = async (c) => {
+	let l = An();
 	e("serve");
 	try {
-		Ni();
+		Pi();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let p = process.cwd(), m = await Ke(p), re = Jt({
+	let p = process.cwd(), h = await Ke(p), se = Yt({
 		kind: "api",
-		configPort: m?.port,
+		configPort: h?.port,
 		env: process.env,
-		flagPort: xo(c, "--port")
+		flagPort: So(c, "--port")
 	});
-	for (let e of re.warnings) $.warn(e);
-	let se = re.port;
-	di(li(m?.secrets)), await Xt({
-		rawEnv: m?.env,
+	for (let e of se.warnings) $.warn(e);
+	let le = se.port;
+	fi(ui(h?.secrets)), await Xt({
+		rawEnv: h?.env,
 		appType: "api",
 		root: p,
 		log: $,
 		generateTypes: !1
 	}), l.mark("config");
-	let _ = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), le = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", fe = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, pe = Dn(p);
-	if (!r() && In(pe)) try {
-		let e = await import(Ln(pe).href);
+	let _ = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), de = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", fe = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, me = On(p);
+	if (!r() && Ln(me)) try {
+		let e = await import(Rn(me).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Pn(p, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Fn(p, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let y = await Ct(p), b = await Pt(y, { cdc: le && fe !== void 0 }), me = ee(b);
+	let y = await St(p), b = await j(y, { cdc: de && fe !== void 0 }), he = ee(b);
 	{
 		Ye({
-			plugins: m?.plugins ?? [],
+			plugins: h?.plugins ?? [],
 			queries: b.queries,
 			mutations: b.mutations,
 			actions: b.actions,
 			streams: b.streams,
 			log: $
 		});
-		let e = v(b.serverOnlyLeaks, ce(process.env, "strict"), Nr, "`voltro serve`");
+		let e = pe(b.serverOnlyLeaks, ce(process.env, "strict"), Nr, "`voltro serve`");
 		if (e.action === "fail") throw i(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
-	let he = y.filter((e) => En.test(e)), ge = he.length > 0 ? await Tn(he, $.child("webhooks")) : {
+	let ge = y.filter((e) => Dn.test(e)), _e = ge.length > 0 ? await En(ge, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, _e = Cn(b.events), be = ge.outgoing.length + ge.incoming.length + ge.providers.length + _e.length === 0 ? void 0 : {
-		...ge,
-		outgoing: [...ge.outgoing, ..._e]
-	}, xe = sn({
+	}, be = wn(b.events), xe = _e.outgoing.length + _e.incoming.length + _e.providers.length + be.length === 0 ? void 0 : {
+		..._e,
+		outgoing: [..._e.outgoing, ...be]
+	}, Ce = cn({
 		nodeEnv: process.env.NODE_ENV,
 		cdcDialect: fe,
-		declared: m?.schema
-	}), Ce = cn({
-		gates: xe,
+		declared: h?.schema
+	}), Oe = ln({
+		gates: Ce,
 		runtime: {
 			traces: ae(),
-			undo: vi()
+			undo: yi()
 		}
 	});
-	if (Ce !== void 0) throw i(`serve: ${Ce}`);
-	let Oe = on({
+	if (Oe !== void 0) throw i(`serve: ${Oe}`);
+	let je = sn({
 		mix: b.featureMix,
-		plugins: m?.plugins ?? [],
-		gates: xe,
+		plugins: h?.plugins ?? [],
+		gates: Ce,
 		...fe ? { cdcDialect: fe } : {}
-	}), Me = m?.analytics !== void 0 && m.analytics.kind !== "noop" && _ !== "memory" ? (await P(_)).makeSqlLayer(O()) : void 0, Ne = await D({
-		spec: m?.analytics,
-		sqlLayer: Me,
+	}), Ne = h?.analytics !== void 0 && h.analytics.kind !== "noop" && _ !== "memory" ? (await P(_)).makeSqlLayer(O()) : void 0, Pe = await yt({
+		spec: h?.analytics,
+		sqlLayer: Ne,
 		log: $
 	}), C = (() => {
 		let e = new Set(b.tables.map((e) => e.tableName)), t = [...b.tables];
-		for (let n of [...Oe, ...Ne.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		for (let n of [...je, ...Pe.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of C) or(e);
+	for (let e of C) sr(e);
 	{
-		let e = Pr(yi(zt(b), Ae(C)));
+		let e = Pr(bi(Ae(b), re(C)));
 		e !== void 0 && $.warn(e);
 	}
-	let Fe = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (bo(Fe, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await P(_)).makeSqlLayer(O()), t = await W.runPromise(ur.SqlClient.pipe(W.flatMap((e) => pr(e, p)), W.provide(e), W.catchAll(() => W.succeed([]))));
+	let Ie = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (xo(Ie, _, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await P(_)).makeSqlLayer(O()), t = await W.runPromise(dr.SqlClient.pipe(W.flatMap((e) => mr(e, p)), W.provide(e), W.catchAll(() => W.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await W.runPromise(ur.SqlClient.pipe(W.flatMap((e) => mr(e, C, {
-			appliedBy: `serve:${Fe}`,
+		let n = await W.runPromise(dr.SqlClient.pipe(W.flatMap((e) => hr(e, C, {
+			appliedBy: `serve:${Ie}`,
 			environment: "prod",
 			dialectId: _
 		})), W.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(fr(n, _)), $.error(ln({
-			gates: xe,
+		n.kind === "prod-mismatch" && ($.error(pr(n, _)), $.error(un({
+			gates: Ce,
 			nodeEnv: process.env.NODE_ENV,
 			cdcDialect: fe,
-			declared: m?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(fr(n, _));
+			declared: h?.schema
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(pr(n, _));
 	}
-	await en({
+	await tn({
 		dialectId: _,
 		tables: C,
-		mode: F(m?.reactiveTriggers),
+		mode: $t(h?.reactiveTriggers),
 		lockSchema: O().schema,
 		makeLayer: async () => (await P(_)).makeSqlLayer(O()),
 		log: {
@@ -1928,19 +1928,19 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let Ie = ti(C);
+	let Le = ti(C);
 	l.mark("discover");
-	let w = await ct(m, void 0);
+	let w = await ct(h, void 0);
 	{
 		let e = await s(w);
 		if (e !== void 0) throw i(`serve: ${e}`);
 	}
-	let Ve = Si(w, _);
-	for (let e of j({
-		dialect: String(m?.store ?? process.env.DB_DIALECT ?? "postgres"),
+	let Xe = Ci(w, _);
+	for (let e of Gt({
+		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Li(m?.plugins ?? [])?.broadcast.crossReplica === !0,
+		crossReplicaBus: Ri(h?.plugins ?? [])?.broadcast.crossReplica === !0,
 		tables: b.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
@@ -1951,159 +1951,159 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = rt({
-			tables: tr().map((e) => ({ tableName: e.tableName })),
+		let e = Ve({
+			tables: nr().map((e) => ({ tableName: e.tableName })),
 			queries: b.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
-		}), t = Be(e);
+		}), t = It(e);
 		t !== void 0 && $.warn(t);
 	}
-	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
-	let { service: We, invalidationBus: Xe, snapshotCache: Ze, cache: Qe, semantic: $e, evictSource: tt, backend: lt, stats: gt, dispose: _t } = await ot({
+	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
+	let { service: Ze, invalidationBus: Qe, snapshotCache: $e, cache: tt, semantic: lt, evictSource: gt, backend: _t, stats: xt, dispose: wt } = await rt({
 		env: process.env,
-		semantic: m?.cacheSemantic ?? !1
+		semantic: h?.cacheSemantic ?? !1
 	});
-	$e !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${lt}` + (lt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
-		if (W.runFork(Xe.publish(e.table)), tt !== void 0) {
+	lt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${_t}` + (_t === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
+		if (W.runFork(Qe.publish(e.table)), gt !== void 0) {
 			let t = (e.new ?? e.old)?.id;
-			tt({
+			gt({
 				table: e.table,
 				op: e.op,
 				...t === void 0 ? {} : { id: t }
 			});
 		}
-	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
-	let { kv: xt, service: wt } = await Wr({ store: w });
-	ye({
+	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
+	let { kv: Tt, service: Et } = await Wr({ store: w });
+	mt({
 		log: $,
-		max: Qt(),
-		outOfPool: h(_, (process.env.CDC ?? "1") !== "0"),
+		max: F(),
+		outOfPool: ye(_, (process.env.CDC ?? "1") !== "0"),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
 	}), l.mark("store");
-	let Tt = Sr({
+	let Nt = Cr({
 		store: w,
-		sink: Ne.sink,
+		sink: Pe.sink,
 		log: $
-	}), Et = yt({
+	}), Pt = ot({
 		store: w,
 		dialect: _,
 		log: { info: (e) => $.info(e) }
-	}), A = m?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, It, Lt;
-	_ !== "memory" && (It = lr.make((await P(_)).makeSqlLayer(O()).pipe(G.provideMerge(Rn({})))), Lt = await It.runPromise(ur.SqlClient));
+	}), M = h?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, zt, Ht;
+	_ !== "memory" && (zt = ur.make((await P(_)).makeSqlLayer(O()).pipe(G.provideMerge(zn({})))), Ht = await zt.runPromise(dr.SqlClient));
 	let Ut = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(_) ? Br(w, Ft, $) : mi, N = Gt(m?.scheduling), bn = Kr({
-		maxIdleIntervalMs: N.pollCeilingMs,
+	].includes(_) ? Br(w, Ft, $) : hi, Jt = Kt(h?.scheduling), xn = Kr({
+		maxIdleIntervalMs: Jt.pollCeilingMs,
 		coordinator: Ut,
 		replicaId: Ft,
 		log: $
-	}), wn = [], On = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, An = Li(m?.plugins ?? [])?.broadcast?.provider, jn = ze(m?.plugins, m?.name ?? Nn(p));
+	}), Tn = [], kn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, jn = Ri(h?.plugins ?? [])?.broadcast?.provider, Mn = Be(h?.plugins, h?.name ?? Pn(p));
 	{
-		let e = nt(m?.plugins, m?.name ?? Nn(p));
+		let e = nt(h?.plugins, h?.name ?? Pn(p));
 		e !== void 0 && $.warn(e);
 	}
-	let Mn = Wt(m?.plugins, {
-		instanceId: On,
-		namespace: jn,
+	let Nn = Wt(h?.plugins, {
+		instanceId: kn,
+		namespace: Mn,
 		meta: { mode: "serve" },
 		logger: $
-	}), I = yn({
+	}), I = bn({
 		mode: "serve",
 		dialect: _,
-		...An === void 0 ? {} : { provider: An },
+		...jn === void 0 ? {} : { provider: jn },
 		logger: $
 	});
-	J(async () => {
+	oi(async () => {
 		await I.stop();
-	}), k(m?.reactive);
-	let Fn = {
-		...Lt ? { sql: Lt } : {},
-		instanceId: On,
-		membership: Mn.membership,
-		...An === void 0 ? {} : { broadcast: An },
-		broadcastChannels: { presence: Ii(jn, "presence") },
+	}), D(h?.reactive), Ct(h);
+	let In = {
+		...Ht ? { sql: Ht } : {},
+		instanceId: kn,
+		membership: Nn.membership,
+		...jn === void 0 ? {} : { broadcast: jn },
+		broadcastChannels: { presence: Li(Mn, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = bn(e, t, n);
-			return wn.push(r), r;
+			let r = xn(e, t, n);
+			return Tn.push(r), r;
 		}
 	};
-	for (let e of A) e.bindDataStore?.(Ve, Fn);
+	for (let e of M) e.bindDataStore?.(Xe, In);
 	dt({
 		store: w,
 		...u(),
 		log: $
 	});
-	let zn = A.filter((e) => typeof e.onChangeEvent == "function");
-	if (zn.length > 0) {
+	let Bn = M.filter((e) => typeof e.onChangeEvent == "function");
+	if (Bn.length > 0) {
 		let e = w.changeScope ?? "local";
 		w.onChange((t) => {
 			let n = oe(t, e);
-			for (let e of zn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: cr.pretty(t) })))));
+			for (let e of Bn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: lr.pretty(t) })))));
 		});
 	}
-	let Bn = y.filter((e) => fn.test(e));
-	Bn.length > 0 && (await Re(Bn, $), $.info(`queue: ${Bn.length} consumer file(s) loaded`));
-	let R = Pe({
-		plugins: A,
-		appName: m?.name ?? "voltro-api",
+	let Vn = y.filter((e) => fn.test(e));
+	Vn.length > 0 && (await ze(Vn, $), $.info(`queue: ${Vn.length} consumer file(s) loaded`));
+	let R = Fe({
+		plugins: M,
+		appName: h?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	A.length && await R.activate(), l.mark("plugins");
-	let Vn = await R.gatherObservability(), Hn = L({ scope: "voltro:broadcast" }), Un = {
+	M.length && await R.activate(), l.mark("plugins");
+	let Hn = await R.gatherObservability(), Un = L({ scope: "voltro:broadcast" }), Wn = {
 		info: (e, t) => {
-			Hn.info(e, t);
+			Un.info(e, t);
 		},
 		warn: (e, t) => {
-			Hn.warn(e, t);
+			Un.warn(e, t);
 		},
 		debug: () => {}
-	}, z, Wn = await vt(w, m, _, jn, Un, (e, t) => {
+	}, z, Gn = await E(w, h, _, Mn, Wn, (e, t) => {
 		z?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), Gn = m?.apiKeys, Kn = (typeof Gn == "object" ? Gn.prefix : void 0) ?? "voltro_", B = Gn ? Mr(w) : void 0, V = B ? Hr({ flush: Ur(B) }) : void 0;
-	V && J(() => V.shutdown());
-	let qn = B ? Vr(B, {
-		prefix: Kn,
+	}), Kn = h?.apiKeys, qn = (typeof Kn == "object" ? Kn.prefix : void 0) ?? "voltro_", B = Kn ? Mr(w) : void 0, V = B ? Hr({ flush: Ur(B) }) : void 0;
+	V && oi(() => V.shutdown());
+	let Jn = B ? Vr(B, {
+		prefix: qn,
 		...V ? { usage: V } : {}
-	}) : void 0, Jn = qn ? [Fr(qn, { prefix: Kn })] : [], Yn = Dt([...m?.auth?.strategies ?? [], ...Jn], Wi(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => Ve), Xn = [...m?.restRoutes ?? [], ...qn ? xr(qn, (typeof Gn == "object" ? Gn.managementPath : void 0) ?? "/v1/api-keys") : []], Zn = He(m?.idempotency, w), Qn = A.map((e) => e.services).filter((e) => e !== void 0), $n = G.mergeAll(qe({
-		analyticsLayer: Ne.layer,
-		cacheService: We,
-		kvService: wt,
-		...$e === void 0 ? {} : { semanticCache: $e },
-		pluginServices: Qn,
-		userLayers: m?.layers ?? []
-	}), At(m?.http ?? {})), H = await St({
+	}) : void 0, Yn = Jn ? [Fr(Jn, { prefix: qn })] : [], Xn = Dt([...h?.auth?.strategies ?? [], ...Yn], Gi(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth, () => Xe), Zn = [...h?.restRoutes ?? [], ...Jn ? Sr(Jn, (typeof Kn == "object" ? Kn.managementPath : void 0) ?? "/v1/api-keys") : []], Qn = He(h?.idempotency, w), $n = M.map((e) => e.services).filter((e) => e !== void 0), er = G.mergeAll(qe({
+		analyticsLayer: Pe.layer,
+		cacheService: Ze,
+		kvService: Et,
+		...lt === void 0 ? {} : { semanticCache: lt },
+		pluginServices: $n,
+		userLayers: h?.layers ?? []
+	}), At(h?.http ?? {})), H = await k({
 		files: y,
 		store: w,
 		log: $,
 		seedPolicy: "report",
 		seedPattern: dn,
-		loadSeedFiles: $t,
-		startupPattern: un,
+		loadSeedFiles: en,
+		startupPattern: _n,
 		loadStartupFiles: a,
 		runStartups: o,
 		emailPattern: jt,
 		loadEmailFiles: Je,
-		registerEmailTemplates: Gi
+		registerEmailTemplates: Ki
 	});
 	(H.startupCount > 0 || H.emailCount > 0) && $.info("boot lifecycle", {
 		startups: H.startupCount,
 		emailTemplates: H.emailCount
-	}), H.startups !== void 0 && J(async () => {
+	}), H.startups !== void 0 && oi(async () => {
 		await H.startups.stop();
-	}), Ee({
-		demands: qt(me),
+	}), x({
+		demands: N(he),
 		isRegistered: (e) => Ir(e) !== void 0
 	});
-	let er = ut({
-		schedules: T({
+	let tr = ut({
+		schedules: Ue({
 			schedules: b.schedules,
 			seeds: H.seeds,
 			store: w,
@@ -2111,27 +2111,27 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}),
 		workflows: b.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), nr = m?.scheduling ?? {}, ir = nr.trigger ?? "self", ar = /* @__PURE__ */ new Set([
+	}), rr = h?.scheduling ?? {}, ar = rr.trigger ?? "self", or = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), U = nr.coordination ?? (ar.has(_) ? "advisoryLock" : "single"), sr = U === "cluster" && ar.has(_), hr = sr ? "cluster" : U === "advisoryLock" && ar.has(_) ? "advisoryLock" : "single";
-	U === "cluster" && !sr && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), U === "advisoryLock" && !ar.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let gr, _r = b.workflows.length > 0 || b.workflowWorkers.length > 0 || b.eventTriggers.length > 0 || (be?.outgoing.length ?? 0) > 0 || sr, vr;
-	if (_r) {
+	]), U = rr.coordination ?? (or.has(_) ? "advisoryLock" : "single"), cr = U === "cluster" && or.has(_), gr = cr ? "cluster" : U === "advisoryLock" && or.has(_) ? "advisoryLock" : "single";
+	U === "cluster" && !cr && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), U === "advisoryLock" && !or.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let _r, vr = b.workflows.length > 0 || b.workflowWorkers.length > 0 || b.eventTriggers.length > 0 || (xe?.outgoing.length ?? 0) > 0 || cr, yr;
+	if (vr) {
 		if (_ === "mssql") {
-			let e = await Sn(process.cwd());
+			let e = await Cn(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = sr ? er.filter((e) => (e.trigger ?? ir) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = cr ? tr.filter((e) => (e.trigger ?? ar) === "self").map((e) => t({
 			name: e.name,
 			cron: jr(e),
 			execute: async () => {
-				await gr?.fireFromCluster(e.name);
+				await _r?.fireFromCluster(e.name);
 			}
 		})) : [];
-		vr = _ === "memory" ? e.layerMemory : await (async () => {
+		yr = _ === "memory" ? e.layerMemory : await (async () => {
 			let e = await P(_), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
 				sqlClientLayer: e.makeSqlLayer(O()),
@@ -2143,23 +2143,23 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		})();
 	}
-	let yr = de(A, xn()), br = y.filter((e) => /\.subscribe\.tsx?$/.test(e)), Cr = br.length > 0 ? await Nt(br, $) : [], wr = y.filter((e) => /\.reaction\.tsx?$/.test(e)), Tr = wr.length > 0 ? await Se(wr, $) : [], Er = y.filter((e) => hn.test(e)), Dr = Er.length > 0 ? await we(Er, $) : [], Or = y.filter((e) => /\.aggregate\.tsx?$/.test(e)), K = Or.length > 0 ? await ht(Or, $) : [];
+	let br = v(M, Sn()), xr = y.filter((e) => /\.subscribe\.tsx?$/.test(e)), wr = xr.length > 0 ? await A(xr, $) : [], Tr = y.filter((e) => /\.reaction\.tsx?$/.test(e)), Er = Tr.length > 0 ? await Se(Tr, $) : [], Dr = y.filter((e) => pn.test(e)), K = Dr.length > 0 ? await we(Dr, $) : [], Or = y.filter((e) => /\.aggregate\.tsx?$/.test(e)), q = Or.length > 0 ? await ht(Or, $) : [];
 	{
-		let e = Pr(yi(zt({ aggregates: K.map((e) => e.definition) }), Ae(C)));
+		let e = Pr(bi(Ae({ aggregates: q.map((e) => e.definition) }), re(C)));
 		e !== void 0 && $.warn(e);
 	}
 	let kr = f();
-	if (K.length > 0 && _ !== "memory") try {
+	if (q.length > 0 && _ !== "memory") try {
 		let e = (await P(_)).makeSqlLayer(O());
-		kr = ft(e);
+		kr = pt(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Ar = _ === "memory" ? mi : Br(w, `aggregate@${process.pid}`, $), Lr = y.filter((e) => pn.test(e)), Rr = Lr.length > 0 ? await je(Lr, $) : [], zr = y.filter((e) => gn.test(e)), Gr = zr.length > 0 ? await Bt(zr, $) : [], qr = y.filter((e) => mn.test(e)), Jr = qr.length > 0 ? await ie(qr, $) : [], Yr = [], Xr = [], Zr = y.filter((e) => tn.test(e));
+	let Ar = _ === "memory" ? hi : Br(w, `aggregate@${process.pid}`, $), Lr = y.filter((e) => mn.test(e)), Rr = Lr.length > 0 ? await S(Lr, $) : [], zr = y.filter((e) => hn.test(e)), Gr = zr.length > 0 ? await Bt(zr, $) : [], qr = y.filter((e) => gn.test(e)), Jr = qr.length > 0 ? await ie(qr, $) : [], Yr = [], Xr = [], Zr = y.filter((e) => nn.test(e));
 	if (Zr.length > 0) {
-		let e = $.child("agent"), t = y.filter((e) => an.test(e));
-		t.length > 0 && await nn(t, e);
-		let n = await rn(Zr, e);
+		let e = $.child("agent"), t = y.filter((e) => on.test(e));
+		t.length > 0 && await rn(t, e);
+		let n = await an(Zr, e);
 		for (let e of n.agents) for (let t of bt(e)) (t.kind === "action" ? Yr : Xr).push({
 			file: t.file,
 			descriptor: t.descriptor,
@@ -2168,11 +2168,11 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
 	l.mark("workflow");
-	let q = () => {
+	let J = () => {
 		let e = Y.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, Qr = rr({
+	}, Qr = ir({
 		dialect: _,
 		...O()
 	}), $r = _ === "memory" ? void 0 : (await P(_)).makeSqlLayer(O()), ei = async () => kt({
@@ -2182,69 +2182,69 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	}), ni = {
 		kind: "api",
 		meta: {
-			name: m?.name ?? "voltro-api",
+			name: h?.name ?? "voltro-api",
 			voltroVersion: Mt,
-			port: se,
+			port: le,
 			mode: "start",
 			store: _,
-			cdc: le ? "on" : "off",
+			cdc: de ? "on" : "off",
 			...Qr === void 0 ? {} : { databaseId: Qr }
 		},
-		rpc: Ht(b, p),
-		workflows: De(b, p),
+		rpc: De(b, p),
+		workflows: ne(b, p),
 		migrations: ei,
 		events: () => Y.eventsSnapshot(),
 		agentTools: () => Y.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
-			accessGate: me,
-			config: m,
+			accessGate: he,
+			config: h,
 			serverOnlyLeaks: b.serverOnlyLeaks,
 			migrations: ei
 		}),
 		members: () => Y.membersSnapshot(),
 		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!gr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await gr.fireNow(e, t) ?? null };
+			if (!_r) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await _r.fireNow(e, t) ?? null };
 		},
-		inspectBackfillSchedule: ne({
-			getHandle: () => gr,
-			getSchedules: () => er
+		inspectBackfillSchedule: m({
+			getHandle: () => _r,
+			getSchedules: () => tr
 		}),
-		...be === void 0 ? {} : { webhooks: () => pt({
+		...xe === void 0 ? {} : { webhooks: () => T({
 			store: w,
-			discoveredWebhooks: be
+			discoveredWebhooks: xe
 		}) },
 		plugins: () => ({
 			plugins: R.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => Yt(m?.name ?? Nn(p), {
-			...m?.env !== void 0 && Mi(m.env) ? { contract: m.env } : {},
-			plugins: m?.plugins ?? []
+		env: () => Zt(h?.name ?? Pn(p), {
+			...h?.env !== void 0 && Ni(h.env) ? { contract: h.env } : {},
+			plugins: h?.plugins ?? []
 		}),
 		dataCache: () => Vt({
-			stats: gt,
-			backendKind: lt
+			stats: xt,
+			backendKind: _t
 		}),
-		subscriptions: () => x(() => z),
+		subscriptions: () => Ee(() => z),
 		inspectTables: () => Te(C),
-		inspectRows: Kt({
+		inspectRows: qt({
 			store: w,
 			tables: C,
 			mask: !0
 		}),
 		metrics: (e) => Y.rpcMetrics().snapshot(e),
-		cluster: () => Ue({
+		cluster: () => We({
 			store: w,
 			dialect: _,
-			useClusterCron: sr,
+			useClusterCron: cr,
 			scheduleCoordChoice: U
 		}),
 		inspectSchedules: () => g({
-			schedules: er,
-			defaultTrigger: ir,
-			coordination: hr
+			schedules: tr,
+			defaultTrigger: ar,
+			coordination: gr
 		}),
 		inspectScheduleRuns: (e) => ke(w, e),
 		...Rt(w, {
@@ -2253,15 +2253,15 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			cancellation: () => Y.flowControlHealth()
 		}),
 		webhookActions: te(() => Y.webhooksService()),
-		inspectStartWorkflow: (e) => q().inspectStartWorkflow(e),
-		inspectCancelWorkflowRun: (e) => q().inspectCancelWorkflowRun(e),
-		inspectSuspendWorkflowRun: (e) => q().inspectSuspendWorkflowRun(e),
-		inspectResumeWorkflowRun: (e) => q().inspectResumeWorkflowRun(e),
-		inspectDiscardWorkflowRun: (e) => q().inspectDiscardWorkflowRun(e),
-		inspectRetryWorkflowRun: (e) => q().inspectRetryWorkflowRun(e),
-		inspectSignalWorkflowRun: (e) => q().inspectSignalWorkflowRun(e),
-		inspectUpdateWorkflowRun: (e) => q().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => E({
+		inspectStartWorkflow: (e) => J().inspectStartWorkflow(e),
+		inspectCancelWorkflowRun: (e) => J().inspectCancelWorkflowRun(e),
+		inspectSuspendWorkflowRun: (e) => J().inspectSuspendWorkflowRun(e),
+		inspectResumeWorkflowRun: (e) => J().inspectResumeWorkflowRun(e),
+		inspectDiscardWorkflowRun: (e) => J().inspectDiscardWorkflowRun(e),
+		inspectRetryWorkflowRun: (e) => J().inspectRetryWorkflowRun(e),
+		inspectSignalWorkflowRun: (e) => J().inspectSignalWorkflowRun(e),
+		inspectUpdateWorkflowRun: (e) => J().inspectUpdateWorkflowRun(e),
+		inspectInferences: (e) => vt({
 			store: w,
 			active: (b.workflows?.length ?? 0) > 0,
 			dispatcher: () => Y.inferenceHealth()
@@ -2269,13 +2269,13 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		...st({
 			store: w,
 			cancelRun: async (e) => await Y.runCanceller()?.(e) ?? !1,
-			retryRun: async (e) => q().inspectRetryWorkflowRun({ runId: e }),
+			retryRun: async (e) => J().inspectRetryWorkflowRun({ runId: e }),
 			redriveRun: async (e) => Y.redriveWorkflowRun({ runId: e }),
 			log: $
 		}),
 		inspectRedriveWorkflowRun: (e) => Y.redriveWorkflowRun(e),
 		inspectResumeWorkflowRunFromStep: (e) => Y.resumeWorkflowRunFromStep(e)
-	}, ri = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", ii = ri && _ !== "memory" ? await (async () => {
+	}, ri = (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace", ii = ri && _ !== "memory" ? await (async () => {
 		let e = await P(_);
 		return et({
 			tables: C,
@@ -2288,53 +2288,53 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			}
 		});
 	})() : void 0, ai = await at({
-		input: m?.tenancy?.residency,
+		input: h?.tenancy?.residency,
 		namespaceIsolationOn: ri,
-		makeStoreForUrl: (e, t) => ct(m, void 0, Zt(O(), t)),
+		makeStoreForUrl: (e, t) => ct(h, void 0, Qt(O(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	ai !== void 0 && J(async () => {
+	ai !== void 0 && oi(async () => {
 		await ai.close();
 	});
-	let Y = await yo({
+	let Y = await bo({
 		bootTiming: l,
-		broadcastNamespace: jn,
+		broadcastNamespace: Mn,
 		scheduling: (() => {
-			let e = N;
+			let e = Jt;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
 				cancelSweepMs: e.cancelSweepMs,
 				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: M({
+				disarmWhenIdle: Lt({
 					changeScope: w.changeScope,
-					broadcastAttached: Wn !== void 0
+					broadcastAttached: Gn !== void 0
 				})
 			};
 		})(),
-		...m?.workflows?.staleness === void 0 ? {} : { workflowStaleness: m.workflows.staleness },
-		...m?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: m.workflows.suspendSignalHintMs },
-		workflowRecording: Ge(m?.workflows?.recording),
+		...h?.workflows?.staleness === void 0 ? {} : { workflowStaleness: h.workflows.staleness },
+		...h?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: h.workflows.suspendSignalHintMs },
+		workflowRecording: Ge(h?.workflows?.recording),
 		membership: {
-			...Mn,
-			instanceId: On
+			...Nn,
+			instanceId: kn
 		},
 		security: {
-			defaultDeny: S(m),
-			...ue(m)
+			defaultDeny: Me(h),
+			...ue(h)
 		},
-		approvals: { defaultExpiryMs: Le(m) },
-		...m?.plugins === void 0 ? {} : { plugins: m.plugins },
-		...Zn ? { idempotency: Zn } : {},
-		restRoutes: Xn,
-		...m?.grpc === void 0 ? {} : { grpc: {
-			config: m.grpc,
+		approvals: { defaultExpiryMs: Re(h) },
+		...h?.plugins === void 0 ? {} : { plugins: h.plugins },
+		...Qn ? { idempotency: Qn } : {},
+		restRoutes: Zn,
+		...h?.grpc === void 0 ? {} : { grpc: {
+			config: h.grpc,
 			root: p
 		} },
-		appProcedures: me,
+		appProcedures: he,
 		discovered: {
 			wsGateways: b.wsGateways,
 			queries: [...b.queries, ...Xr],
@@ -2345,57 +2345,57 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			workflows: b.workflows,
 			workflowWorkers: b.workflowWorkers,
 			eventTriggers: b.eventTriggers,
-			schedules: er,
-			subscribers: Cr,
-			outboxHandlers: Dr,
+			schedules: tr,
+			subscribers: wr,
+			outboxHandlers: K,
 			connections: b.connections,
-			reactions: Tr,
-			aggregates: K,
+			reactions: Er,
+			aggregates: q,
 			expectations: Rr,
 			budgets: Gr,
 			experiments: Jr,
-			...be === void 0 ? {} : { webhooks: be }
+			...xe === void 0 ? {} : { webhooks: xe }
 		},
 		log: $,
-		analytics: Ne.sink,
+		analytics: Pe.sink,
 		aggregateStorage: kr,
 		aggregateCoordinator: Ar,
 		store: w,
-		kv: xt,
-		cache: Qe,
-		snapshotCache: Ze,
-		...m?.reactive === void 0 ? {} : { reactive: m.reactive },
-		schemaRegistry: Ie,
+		kv: Tt,
+		cache: tt,
+		snapshotCache: $e,
+		...h?.reactive === void 0 ? {} : { reactive: h.reactive },
+		schemaRegistry: Le,
 		tenantScopedTables: b.tenantScopedTables,
 		softDeleteScopedTables: b.softDeleteScopedTables,
-		dataTransferSnapshot: dr(C, _),
+		dataTransferSnapshot: fr(C, _),
 		dataTransferDialect: _,
 		...ii === void 0 ? {} : { ensureTenantProvisioned: ii.ensure },
 		...ai === void 0 ? {} : { resolveResidentStore: ai.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Yn({
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: (e, t) => Xn({
 			headers: e,
 			clientId: t
 		}),
-		...m?.auth === void 0 ? {} : { authority: m.auth },
-		...m?.agents === void 0 ? {} : { agents: m.agents },
-		httpRoutes: A.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => Ve,
-		...$n ? { baseLayer: $n } : {},
-		...vr === void 0 ? {} : { workflowEngineLayer: vr },
-		scheduleDefaultTrigger: ir,
-		scheduleCoordination: hr,
-		scheduleArmSelf: !sr,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
+		...h?.auth === void 0 ? {} : { authority: h.auth },
+		...h?.agents === void 0 ? {} : { agents: h.agents },
+		httpRoutes: M.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => Xe,
+		...er ? { baseLayer: er } : {},
+		...yr === void 0 ? {} : { workflowEngineLayer: yr },
+		scheduleDefaultTrigger: ar,
+		scheduleCoordination: gr,
+		scheduleArmSelf: !cr,
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...yr === void 0 ? {} : { scheduleFireInterceptor: yr },
+		...br === void 0 ? {} : { scheduleFireInterceptor: br },
 		onSchedulerReady: (e) => {
-			gr = e;
+			_r = e;
 		},
 		inspectRoute: { handle: async (e, t, n, r) => await ve(e, ni, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await vn(e, ni, t, { method: n }) : null) ?? _n(e, ni, t, {
+		}) || ((n === "GET" ? await yn(e, ni, t, { method: n }) : null) ?? vn(e, ni, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) ?? {
@@ -2403,20 +2403,20 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
-		...m?.name === void 0 ? {} : { appName: m.name },
-		observability: Vn,
-		port: se,
-		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {},
-		...m?.http === void 0 ? {} : { http: m.http }
+		...h?.name === void 0 ? {} : { appName: h.name },
+		observability: Hn,
+		port: le,
+		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {},
+		...h?.http === void 0 ? {} : { http: h.http }
 	});
-	return z = Y.dispatcher, d(mt([
+	return z = Y.dispatcher, ft(d([
 		b.queries,
 		b.mutations,
 		b.actions,
 		b.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${se}`, {
+	}), $.info(`API listening on :${le}`, {
 		dialect: _,
 		queries: b.queries.length,
 		mutations: b.mutations.length,
@@ -2424,20 +2424,20 @@ var ra = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		streams: b.streams.length,
 		workflows: b.workflows.length,
 		workflowWorkers: b.workflowWorkers.length,
-		schedules: er.length,
-		scheduleCoordination: hr
-	}), l.finish($), J(async () => {
-		for (let e of wn) e.stop();
-		Et.stop();
+		schedules: tr.length,
+		scheduleCoordination: gr
+	}), l.finish($), oi(async () => {
+		for (let e of Tn) e.stop();
+		Pt.stop();
 		try {
-			await Y.close(), _t(), It?.dispose(), await R.deactivate(), await Wn?.close(), await Ot({
-				mirror: Tt,
+			await Y.close(), wt(), zt?.dispose(), await R.deactivate(), await Gn?.close(), await Ot({
+				mirror: Nt,
 				log: $
-			}), await Ne.dispose(), await w.close?.();
+			}), await Pe.dispose(), await w.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { So as n, bo as r, Co as t };
+export { Co as n, xo as r, wo as t };