@voltro/cli 0.54.0 → 0.55.0

package/dist/{serveCommand-Bje09q1v.js → serveCommand-C7IrCD58.js}

@@ -3,51 +3,51 @@ import { t } from "./frameworkInspectState-CX2250XB.js";
 import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
-import { t as s } from "./interruptedReplace-C3O3M1MM.js";
-import { $ as c, $t as l, A as u, An as d, At as f, Bt as ee, C as te, Cn as ne, Ct as p, D as m, Dt as h, E as g, En as re, Et as ie, F as ae, Ft as oe, G as se, Gt as ce, H as le, I as _, It as ue, J as v, Jt as de, K as fe, Kt as pe, L as me, Lt as y, M as b, Mt as he, N as ge, Nt as _e, O as ve, On as ye, Ot as be, P as xe, Pt as Se, Q as Ce, Qt as we, R as Te, Rt as x, S as Ee, Sn as De, St as Oe, T as ke, Tn as Ae, Tt as S, U as je, Ut as Me, Vt as Ne, W as Pe, X as Fe, Xt as C, Y as Ie, Yt as Le, Z as Re, Zt as ze, _ as Be, _n as Ve, _t as w, an as He, at as Ue, b as We, bt as Ge, c as Ke, cn as qe, ct as Je, d as Ye, dn as Xe, dt as Ze, en as Qe, et as $e, fn as et, ft as tt, g as nt, gn as rt, gt as it, h as at, hn as ot, ht as st, i as ct, in as lt, it as ut, j as dt, jn as ft, jt as pt, k as T, kn as mt, kt as ht, ln as gt, lt as _t, m as E, mn as D, mt as vt, nn as yt, nt as bt, o as O, on as xt, ot as k, p as St, pn as Ct, pt as wt, q as Tt, qt as Et, r as Dt, rn as Ot, rt as kt, sn as At, st as jt, t as Mt, tn as A, tt as Nt, u as j, un as Pt, ut as M, v as Ft, vn as It, vt as Lt, w as Rt, wn as zt, wt as Bt, x as Vt, xn as Ht, xt as Ut, y as Wt, yn as Gt, yt as Kt, z as qt, zt as N } from "./dev-CmuvUKRq.js";
-import { n as Jt } from "./cliArgs-D4p8n7EE.js";
-import { r as Yt } from "./appPort-B_HpJ_ck.js";
-import { Ut as Xt, Vt as Zt } from "./webDev-DSI9SOhs.js";
-import { r as P } from "./dialectDriver-czCHYpeH.js";
-import { i as Qt, n as F } from "./connectionConfig-Bk9IC7D0.js";
-import { c as $t, n as en, o as tn } from "./seedRunner-Dgsiwk_e.js";
-import { d as nn, h as rn, m as an, p as on, r as sn } from "./frameworkTableAssembly-D7LJuALW.js";
-import { n as cn, r as ln, t as un } from "./declaredSchemaGates-BlcwObhb.js";
-import { C as dn, a as fn, h as pn, l as mn, n as hn, u as gn, w as _n } from "./fileConventions-l-RIXbx8.js";
-import { h as vn, o as yn } from "./inspect-Bd8-9wsi.js";
-import { i as bn, n as xn, t as Sn } from "./inspectMetrics-CGF94puw.js";
-import { n as Cn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as wn, n as Tn, r as En, t as Dn } from "./webhookDiscovery-CphsQe59.js";
-import { r as On, u as kn } from "./apiBuild-DTWp0S_q.js";
-import { t as An } from "./bootTiming-BdyP9nYw.js";
-import { a as jn, o as Mn, t as Nn } from "./dataProfile-Du3ztYxv.js";
-import I, { basename as Pn, join as Fn } from "node:path";
-import { createWriteStream as In, existsSync as Ln } from "node:fs";
-import { pathToFileURL as Rn } from "node:url";
-import { LoggerLayer as zn, createLogger as L } from "@voltro/logger";
-import { AuthMiddleware as Bn, ConnectionInfoMiddleware as Vn, actionToRpc as R, anonymousSubject as Hn, isWireReachable as Un, mutationToRpc as Wn, queryToRpc as z, streamToRpc as Gn, wireErrorUnion as Kn, workflowCancelDescriptor as qn, workflowDomainEventsQueryDescriptor as B, workflowEventDeliveriesQueryDescriptor as V, workflowResumeDescriptor as Jn, workflowRunEventsQueryDescriptor as Yn, workflowRunQueryDescriptor as Xn, workflowRunStepsQueryDescriptor as Zn, workflowRunsQueryDescriptor as Qn, workflowSignalDescriptor as $n, workflowUpdateDescriptor as er } from "@voltro/protocol";
-import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as tr, allRegisteredTables as nr, and as rr, connectionIdentity as ir, derivedRowId as ar, describeTransferRun as or, ensureTableRegistered as sr, eq as U, or as cr } from "@voltro/database";
-import { Cause as lr, Effect as W, Layer as G, ManagedRuntime as ur } from "effect";
-import { SqlClient as dr } from "@effect/sql";
-import { declaredSnapshot as fr, describeOutcome as pr, pendingFileMigrationIds as mr, runPlannedMigrations as hr } from "@voltro/database/sql";
-import { AggregateRegistry as gr, CostRegistry as _r, DORMANCY_WAKEUP_TENANT as vr, Dispatcher as yr, ExpectationRegistry as br, ExperimentRegistry as xr, apiKeyManagementRoutes as Sr, attachAnalyticsMirror as Cr, attachExpectations as wr, attachExperiments as Tr, attachFinops as Er, awaitServerListening as Dr, bindMutation as K, bindStream as Or, bindSubscription as q, buildTracingLayer as kr, cancelWakeup as Ar, compileCron as jr, dataStoreApiKeyStore as Mr, formatServerOnlyLeaks as Nr, formatUnresolvedSources as Pr, frameworkApiKeyStrategy as Fr, getResourcePolicy as Ir, installPolicyGuardResolver as Lr, loadResourceTuples as Rr, makeActionRunner as zr, makeAdvisoryLockCoordinator as Br, makeApiKeyService as Vr, makeApiKeyUsageBuffer as Hr, makeApiKeyUsageFlusher as Ur, makeAsyncKv as Wr, makeAuthMiddlewareLayers as Gr, makeCoordinatedScheduler as Kr, makeEffectStoreLayer as qr, makeLazyWorkflowFacade as Jr, makeMutationOutputCodec as Yr, makeMutationRunner as Xr, makeOneShotQueryRunner as Zr, makeQueryDescriptorProducer as J, makeQueryFinalizer as Qr, makeQueryReauthorizer as $r, makeQuerySubscriber as ei, makeSchemaRegistry as ti, makeWorkflowFacade as ni, makeWorkflowFacadeWithCallerContext as ri, makeWorkflowLayers as ii, noopKv as ai, onProcessShutdown as oi, recordSubscriptionDelivery as Y, recordWorkflowRun as si, registerDefaultTupleSource as ci, registerWakeup as li, resolveSecretsBackend as ui, runProvidedEffect as di, setSecretsBackend as fi, setSystemStoreHandle as pi, shutdownGraceMsFromEnv as mi, singleCoordinator as hi, startRpcServer as gi, startScheduler as _i, stripForbiddenForWire as vi, undoCaptureEnabled as yi, unresolvedSources as bi, withScopedRequest as xi, workflowToRpc as Si, wrapStoreWithBootCodec as Ci } from "@voltro/runtime";
-import wi, { tmpdir as Ti } from "node:os";
-import { RpcGroup as Ei } from "@effect/rpc";
-import { appStorageProvider as Di, durabilityNotice as Oi, fromNodeReadable as ki, getObjectStream as Ai, putObjectStream as ji, toNodeReadable as Mi } from "@voltro/plugin-storage";
-import { isEnvContract as Ni } from "@voltro/env";
-import { assertProductionSessionSecret as Pi } from "@voltro/protocol/session";
+import { n as s, t as c } from "./interruptedReplace-CwnkBb2X.js";
+import { $ as l, $t as u, A as d, An as f, At as ee, Bt as te, C as ne, Cn as p, Ct as m, D as re, Dt as h, E as ie, En as ae, Et as oe, F as se, Ft as ce, G as le, Gt as g, H as ue, I as _, It as de, J as fe, Jt as pe, K as me, Kt as he, L as ge, Lt as v, M as y, Mt as _e, N as ve, Nt as ye, O as be, On as xe, Ot as Se, P as Ce, Pt as we, Q as Te, Qt as Ee, R as b, Rt as De, S as Oe, Sn as ke, St as Ae, T as je, Tn as x, Tt as Me, U as Ne, Ut as Pe, Vt as Fe, W as Ie, X as Le, Xt as S, Y as Re, Yt as ze, Z as Be, Zt as Ve, _ as He, _n as C, _t as w, an as Ue, at as We, b as Ge, bt as Ke, c as qe, cn as Je, ct as Ye, d as Xe, dn as Ze, dt as Qe, en as $e, et, fn as tt, ft as nt, g as rt, gn as it, gt as at, h as ot, hn as st, ht as ct, i as lt, in as ut, it as dt, j as ft, jn as pt, jt as T, k as mt, kn as ht, kt as E, ln as gt, lt as _t, m as D, mn as vt, mt as yt, nn as bt, nt as xt, o as O, on as St, ot as Ct, p as wt, pn as Tt, pt as Et, q as Dt, qt as Ot, r as kt, rn as At, rt as jt, sn as Mt, st as Nt, t as k, tn as A, tt as Pt, u as Ft, un as It, ut as j, v as Lt, vn as Rt, vt as zt, w as Bt, wn as Vt, wt as Ht, x as Ut, xn as Wt, xt as Gt, y as Kt, yn as qt, yt as Jt, z as M, zt as Yt } from "./dev-Ca_A_S9v.js";
+import { n as Xt } from "./cliArgs-D4p8n7EE.js";
+import { r as Zt } from "./appPort-B_HpJ_ck.js";
+import { Ut as Qt, Vt as $t } from "./webDev-B7vNj4Bq.js";
+import { r as N } from "./dialectDriver-czCHYpeH.js";
+import { i as P, n as en } from "./connectionConfig-Bk9IC7D0.js";
+import { c as tn, n as nn, o as rn } from "./seedRunner-Dgsiwk_e.js";
+import { d as an, h as on, m as sn, p as cn, r as ln } from "./frameworkTableAssembly-Do-cf6RJ.js";
+import { n as un, r as dn, t as fn } from "./declaredSchemaGates-BlcwObhb.js";
+import { C as pn, a as mn, h as hn, l as gn, n as _n, u as vn, w as yn } from "./fileConventions-l-RIXbx8.js";
+import { h as bn, o as xn } from "./inspect-DCqILJ1G.js";
+import { i as Sn, n as Cn, t as wn } from "./inspectMetrics-CGF94puw.js";
+import { n as Tn } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as En, n as Dn, r as On, t as kn } from "./webhookDiscovery-CphsQe59.js";
+import { r as An, u as jn } from "./apiBuild-CMvLJM_K.js";
+import { t as Mn } from "./bootTiming-BdyP9nYw.js";
+import { a as Nn, o as Pn, t as Fn } from "./dataProfile-Du3ztYxv.js";
+import F, { basename as In, join as Ln } from "node:path";
+import { createWriteStream as Rn, existsSync as zn } from "node:fs";
+import { pathToFileURL as Bn } from "node:url";
+import { LoggerLayer as Vn, createLogger as I } from "@voltro/logger";
+import { AuthMiddleware as Hn, ConnectionInfoMiddleware as Un, actionToRpc as L, anonymousSubject as Wn, isWireReachable as Gn, mutationToRpc as Kn, queryToRpc as R, streamToRpc as qn, wireErrorUnion as Jn, workflowCancelDescriptor as Yn, workflowDomainEventsQueryDescriptor as z, workflowEventDeliveriesQueryDescriptor as B, workflowResumeDescriptor as Xn, workflowRunEventsQueryDescriptor as Zn, workflowRunQueryDescriptor as Qn, workflowRunStepsQueryDescriptor as $n, workflowRunsQueryDescriptor as er, workflowSignalDescriptor as tr, workflowUpdateDescriptor as nr } from "@voltro/protocol";
+import { DATA_TRANSFERS_TABLE as V, _voltroDataTransfersTable as rr, allRegisteredTables as ir, and as ar, connectionIdentity as or, derivedRowId as sr, describeTransferRun as cr, ensureTableRegistered as lr, eq as H, or as ur } from "@voltro/database";
+import { Cause as dr, Effect as U, Layer as W, ManagedRuntime as fr } from "effect";
+import { SqlClient as pr } from "@effect/sql";
+import { declaredSnapshot as mr, describeOutcome as hr, pendingFileMigrationIds as gr, runPlannedMigrations as _r } from "@voltro/database/sql";
+import { AggregateRegistry as vr, CostRegistry as yr, DORMANCY_WAKEUP_TENANT as br, Dispatcher as xr, ExpectationRegistry as Sr, ExperimentRegistry as Cr, apiKeyManagementRoutes as wr, attachAnalyticsMirror as Tr, attachExpectations as Er, attachExperiments as Dr, attachFinops as Or, awaitServerListening as kr, bindMutation as G, bindStream as Ar, bindSubscription as K, buildTracingLayer as jr, cancelWakeup as Mr, compileCron as Nr, dataStoreApiKeyStore as Pr, formatServerOnlyLeaks as Fr, formatUnresolvedSources as Ir, frameworkApiKeyStrategy as Lr, getResourcePolicy as Rr, installPolicyGuardResolver as zr, loadResourceTuples as Br, makeActionRunner as Vr, makeAdvisoryLockCoordinator as Hr, makeApiKeyService as Ur, makeApiKeyUsageBuffer as Wr, makeApiKeyUsageFlusher as Gr, makeAsyncKv as Kr, makeAuthMiddlewareLayers as qr, makeCoordinatedScheduler as Jr, makeEffectStoreLayer as Yr, makeLazyWorkflowFacade as Xr, makeMutationOutputCodec as Zr, makeMutationRunner as Qr, makeOneShotQueryRunner as $r, makeQueryDescriptorProducer as q, makeQueryFinalizer as ei, makeQueryReauthorizer as ti, makeQuerySubscriber as ni, makeSchemaRegistry as ri, makeWorkflowFacade as ii, makeWorkflowFacadeWithCallerContext as ai, makeWorkflowLayers as oi, noopKv as si, onProcessShutdown as J, recordSubscriptionDelivery as Y, recordWorkflowRun as ci, registerDefaultTupleSource as li, registerWakeup as ui, resolveSecretsBackend as di, runProvidedEffect as fi, setSecretsBackend as pi, setSystemStoreHandle as mi, shutdownGraceMsFromEnv as hi, singleCoordinator as gi, startRpcServer as _i, startScheduler as vi, stripForbiddenForWire as yi, undoCaptureEnabled as bi, unresolvedSources as xi, withScopedRequest as Si, workflowToRpc as Ci, wrapStoreWithBootCodec as wi } from "@voltro/runtime";
+import Ti, { tmpdir as Ei } from "node:os";
+import { RpcGroup as Di } from "@effect/rpc";
+import { appStorageProvider as Oi, durabilityNotice as ki, fromNodeReadable as Ai, getObjectStream as ji, putObjectStream as Mi, toNodeReadable as Ni } from "@voltro/plugin-storage";
+import { isEnvContract as Pi } from "@voltro/env";
+import { assertProductionSessionSecret as Fi } from "@voltro/protocol/session";
 import X from "node:fs/promises";
-import { createHash as Fi, timingSafeEqual as Ii } from "node:crypto";
-import { channelFor as Li, getBroadcastPlugin as Ri } from "@voltro/plugin-broadcast";
-import { buildDeliverWebhookExecute as zi, buildWebhooksService as Bi, defaultIncomingPath as Vi, deliverWebhookWorkflow as Hi, makeDeferredEmitHandler as Ui, mountIncomingWebhook as Wi } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as Gi } from "@voltro/plugin-auth";
-import { registerEmailTemplates as Ki } from "@voltro/plugin-mail";
-import { checkSchemaDrift as qi, decideStaging as Ji, isEnvironmentLocal as Yi, packBundle as Xi, peekBundle as Zi, runExport as Qi, runImport as $i, storageBlobSink as ea, storageRefsBlobSource as ta, unpackBundle as na, unpackBundleToDir as ra } from "@voltro/data-transfer";
+import { createHash as Ii, timingSafeEqual as Li } from "node:crypto";
+import { channelFor as Ri, getBroadcastPlugin as zi } from "@voltro/plugin-broadcast";
+import { buildDeliverWebhookExecute as Bi, buildWebhooksService as Vi, defaultIncomingPath as Hi, deliverWebhookWorkflow as Ui, makeDeferredEmitHandler as Wi, mountIncomingWebhook as Gi } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as Ki } from "@voltro/plugin-auth";
+import { registerEmailTemplates as qi } from "@voltro/plugin-mail";
+import { checkSchemaDrift as Ji, decideStaging as Yi, isEnvironmentLocal as Xi, packBundle as Zi, peekBundle as Qi, runExport as $i, runImport as ea, storageBlobSink as ta, storageRefsBlobSource as na, unpackBundle as ra, unpackBundleToDir as ia } from "@voltro/data-transfer";
 //#region \0rolldown/runtime.js
-var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
+var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
 	if (typeof require < "u") return require.apply(this, arguments);
 	throw Error("Calling `require` for \"" + e + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
-}), aa = () => Math.max(500, Math.floor(mi() * .6)), oa = (e) => new Promise((t) => setTimeout(t, e)), sa = (e) => {
+}), oa = () => Math.max(500, Math.floor(hi() * .6)), sa = (e) => new Promise((t) => setTimeout(t, e)), ca = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -61,14 +61,14 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? aa();
+		let n = t.budgetMs ?? oa();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await oa(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await sa(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -85,7 +85,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await oa(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await sa(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -97,83 +97,83 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			await a(e), await o();
 		}
 	};
-}, ca = "/_voltro/admin/import", la = "/_voltro/admin/import/start", ua = "/_voltro/admin/export", da = "/_voltro/admin/export/download", fa = "/_voltro/admin/transfers", Z = (e, t) => ({
+}, la = "/_voltro/admin/import", ua = "/_voltro/admin/import/start", da = "/_voltro/admin/export", fa = "/_voltro/admin/export/download", pa = "/_voltro/admin/transfers", Z = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), pa = (e) => {
+}), ma = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, ma = (e, t) => Ii(Fi("sha256").update(e).digest(), Fi("sha256").update(t).digest()), ha = (e, t, n = "POST") => {
+}, ha = (e, t) => Li(Ii("sha256").update(e).digest(), Ii("sha256").update(t).digest()), ga = (e, t, n = "POST") => {
 	if (e.method.toUpperCase() !== n) return Z(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Z(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let r = pa(e.headers);
-	return !r || !ma(r, t) ? Z(401, { error: "unauthorized" }) : null;
-}, ga = /^[A-Za-z0-9_-]{8,64}$/, _a = (e) => ga.test(e), va = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? I.join(wi.tmpdir(), "voltro-import-uploads"), ya = (e) => I.join(va(), e), ba = (e) => I.join(ya(e), "archive.bin"), xa = (e) => I.join(ya(e), "meta.json"), Sa = async (e = Date.now()) => {
+	let r = ma(e.headers);
+	return !r || !ha(r, t) ? Z(401, { error: "unauthorized" }) : null;
+}, _a = /^[A-Za-z0-9_-]{8,64}$/, va = (e) => _a.test(e), ya = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? F.join(Ti.tmpdir(), "voltro-import-uploads"), ba = (e) => F.join(ya(), e), xa = (e) => F.join(ba(e), "archive.bin"), Sa = (e) => F.join(ba(e), "meta.json"), Ca = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(va())) {
+		for (let n of await X.readdir(ya())) {
 			if (n === ".runs") continue;
-			let r = await X.stat(ya(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(ya(n), {
+			let r = await X.stat(ba(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(ba(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, Ca = async (e) => {
-	if (!_a(e)) return {
+}, wa = async (e) => {
+	if (!va(e)) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let t = await X.stat(ba(e)).catch(() => null);
+	let t = await X.stat(xa(e)).catch(() => null);
 	if (t === null) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let n = await wa(e);
+	let n = await Ta(e);
 	return {
 		bytes: t.size,
 		key: n.key ?? null,
 		runId: n.runId ?? null
 	};
-}, wa = async (e) => {
+}, Ta = async (e) => {
 	try {
-		let t = await X.readFile(xa(e), "utf8");
+		let t = await X.readFile(Sa(e), "utf8");
 		return JSON.parse(t);
 	} catch {
 		return {};
 	}
-}, Ta = async (e, t) => {
-	let n = xa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+}, Ea = async (e, t) => {
+	let n = Sa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
 	await X.writeFile(r, JSON.stringify(t)), await X.rename(r, n);
-}, Ea = async (e, t, n) => {
-	if (!_a(e)) return t;
-	await X.mkdir(ya(e), { recursive: !0 });
-	let r = await wa(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
-	return i !== null && n?.takeOver !== !0 ? i : (await Ta(e, {
+}, Da = async (e, t, n) => {
+	if (!va(e)) return t;
+	await X.mkdir(ba(e), { recursive: !0 });
+	let r = await Ta(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
+	return i !== null && n?.takeOver !== !0 ? i : (await Ea(e, {
 		...r,
 		runId: t
 	}), t);
-}, Da = async (e) => {
-	if (!_a(e)) return;
-	let t = await wa(e);
+}, Oa = async (e) => {
+	if (!va(e)) return;
+	let t = await Ta(e);
 	if (t.runId === void 0) return;
 	let { runId: n, ...r } = t;
-	await Ta(e, r).catch(() => void 0);
-}, Oa = async (e, t, n) => (await X.mkdir(ya(e), { recursive: !0 }), await X.writeFile(ba(e), Buffer.from(t)), await Ta(e, {
-	...await wa(e),
+	await Ea(e, r).catch(() => void 0);
+}, ka = async (e, t, n) => (await X.mkdir(ba(e), { recursive: !0 }), await X.writeFile(xa(e), Buffer.from(t)), await Ea(e, {
+	...await Ta(e),
 	key: n,
 	startedAt: (/* @__PURE__ */ new Date()).toISOString()
-}), t.byteLength), ka = (e) => `up-${Fi("sha256").update(e).digest("hex").slice(0, 32)}`, Aa = async (e) => {
-	if (!_a(e.id)) return {
+}), t.byteLength), Aa = (e) => `up-${Ii("sha256").update(e).digest("hex").slice(0, 32)}`, ja = async (e) => {
+	if (!va(e.id)) return {
 		reason: "bad-id",
-		message: `upload id must match ${String(ga)}`
+		message: `upload id must match ${String(_a)}`
 	};
-	let t = await Ca(e.id);
+	let t = await wa(e.id);
 	if (t.key !== null && t.key !== e.key) return {
 		reason: "key-mismatch",
 		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
@@ -183,34 +183,34 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
 		expectedOffset: t.bytes
 	};
-	if (await X.mkdir(ya(e.id), { recursive: !0 }), t.key === null) {
-		let t = await wa(e.id);
-		await Ta(e.id, {
+	if (await X.mkdir(ba(e.id), { recursive: !0 }), t.key === null) {
+		let t = await Ta(e.id);
+		await Ea(e.id, {
 			...t,
 			key: e.key,
 			startedAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
 	return await new Promise((t, n) => {
-		let r = In(ba(e.id), { flags: "a" });
+		let r = Rn(xa(e.id), { flags: "a" });
 		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
 	}), { total: t.bytes + e.bytes.byteLength };
-}, ja = async (e) => {
-	let t = await X.stat(ba(e));
+}, Ma = async (e) => {
+	let t = await X.stat(xa(e));
 	return {
-		path: ba(e),
+		path: xa(e),
 		bytes: t.size
 	};
-}, Ma = () => I.join(va(), ".runs"), Na = (e) => I.join(Ma(), `${e}.bin`), Pa = async (e, t) => {
-	if (!_a(e)) return null;
-	let n = ba(e), r = await X.stat(n).catch(() => null);
+}, Na = () => F.join(ya(), ".runs"), Pa = (e) => F.join(Na(), `${e}.bin`), Fa = async (e, t) => {
+	if (!va(e)) return null;
+	let n = xa(e), r = await X.stat(n).catch(() => null);
 	if (r === null || r.size === 0) return null;
-	await X.mkdir(Ma(), { recursive: !0 });
-	let i = Na(t);
+	await X.mkdir(Na(), { recursive: !0 });
+	let i = Pa(t);
 	return await X.rename(n, i), i;
-}, Fa = async (e) => {
-	await X.rm(Na(e), { force: !0 }).catch(() => void 0);
-}, Q = L({ scope: "voltro:admin-import" }), Ia = "VBUNDLE2", La = (e) => {
+}, Ia = async (e) => {
+	await X.rm(Pa(e), { force: !0 }).catch(() => void 0);
+}, Q = I({ scope: "voltro:admin-import" }), La = "VBUNDLE2", Ra = (e) => {
 	let t = e.req.headers["x-import-rollback-key"];
 	if (e.mode !== "replace") return { options: {} };
 	if (typeof t != "string" || t.length === 0) return Q.warn("admin.import: no rollback capture — this run empties the target first, and nothing was asked to be kept. Send `x-import-rollback-key: <storage key>` (voltro data import --rollback-key <key>) to have the instance store the target's current rows before deleting them."), { options: {} };
@@ -221,18 +221,18 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			hint: "A capture written to the pod would not survive the failure it exists for. Configure storage (the same one the storage-push export uses), or re-send without `x-import-rollback-key` to accept that a run which does not finish can leave the target emptied. Note that CONFIGURED is not the same question as SURVIVES: a `filesystem` provider pointed at a container directory with no volume behind it passes this check and dies with the pod. The run says so when it can observe it — the capture path being on the same filesystem as `/`."
 		})
 	};
-	let n = Fn(Ti(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
+	let n = Ln(Ei(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
 	return {
 		key: t,
 		options: {
 			rollbackDir: n,
 			onRollbackCaptured: async () => {
-				let e = Oi(n);
-				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Xi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
+				let e = ki(n);
+				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Zi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
 			}
 		}
 	};
-}, Ra = (e) => {
+}, za = (e) => {
 	let t = e["x-import-mode"], n = e["x-import-atomic"];
 	return {
 		mode: t,
@@ -242,34 +242,34 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		dryRun: e["x-import-dry-run"] === "1" || e["x-import-dry-run"] === "true",
 		tables: (e["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean)
 	};
-}, za = async (e, t) => {
+}, Ba = async (e, t) => {
 	if (typeof t.bundleKey == "string" && t.bundleKey !== "") {
 		if (!e.openArchive) return { refusal: Z(501, { error: "storage transport not configured on this instance" }) };
 		let n = e.openArchive, r = t.bundleKey;
 		return {
 			source: () => n(r),
 			transport: "storage",
-			uploadId: ka(r)
+			uploadId: Aa(r)
 		};
 	}
 	let n = t.uploadId;
-	if (typeof n != "string" || !_a(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
-	let r = await ja(n).catch(() => null);
+	if (typeof n != "string" || !va(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
+	let r = await Ma(n).catch(() => null);
 	return r === null || r.bytes === 0 ? { refusal: Z(409, {
 		error: "no such upload",
 		message: `this instance holds no bytes for upload '${n}'. Upload the bundle first, or re-upload if it has expired.`
 	}) } : {
-		source: () => Ba(r.path),
+		source: () => Va(r.path),
 		transport: "upload",
 		uploadId: n
 	};
-}, Ba = (e) => {
-	let { createReadStream: t } = ia("node:fs");
+}, Va = (e) => {
+	let { createReadStream: t } = aa("node:fs");
 	return t(e);
-}, Va = (e) => async (t) => {
-	let n = ha(t, e.secret);
+}, Ha = (e) => async (t) => {
+	let n = ga(t, e.secret);
 	if (n) return n;
-	let r = Ra(t.headers), i = La({
+	let r = za(t.headers), i = Ra({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -283,16 +283,16 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			return Z(400, { error: "a preflight body must be JSON: { tables: string[] } or { bundleKey: string }" });
 		}
 		let a = Array.isArray(n.tables) ? n.tables.filter((e) => typeof e == "string") : [];
-		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Ha(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
+		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Ua(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
 			error: "a preflight needs { tables: string[] } — the bundle's table names, so the staging decision can be made against them",
 			hint: "or { bundleKey } on an instance with storage configured, where this endpoint reads the table list out of the archive itself"
 		});
-		let o = Ji({
+		let o = Yi({
 			mode: r.mode ?? "upsert",
 			...e.dialect === void 0 ? {} : { targetDialect: e.dialect },
 			...e.snapshot === void 0 ? {} : { targetSnapshot: e.snapshot },
 			bundleTables: a,
-			isSkipped: Yi,
+			isSkipped: Xi,
 			canRunSql: !0
 		});
 		return Z(200, {
@@ -311,8 +311,8 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	}
 	let a = t.headers["x-import-upload-id"];
 	if (a !== void 0 && a !== "") {
-		if (Sa(), t.headers["x-import-probe"] === "1") {
-			let e = await Ca(a);
+		if (Ca(), t.headers["x-import-probe"] === "1") {
+			let e = await wa(a);
 			return Z(200, {
 				uploadId: a,
 				bytes: e.bytes,
@@ -321,7 +321,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
 		if (e === "" || !Number.isFinite(n) || n < 0) return Z(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
-		let r = await Aa({
+		let r = await ja({
 			id: a,
 			key: e,
 			offset: n,
@@ -343,12 +343,12 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			complete: i
 		});
 	}
-	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Ia) {
-		Sa();
-		let e = Fi("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = ka(e);
+	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === La) {
+		Ca();
+		let e = Ii("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = Aa(e);
 		return Z(202, {
 			uploadId: n,
-			bytes: await Oa(n, t.rawBody, e),
+			bytes: await ka(n, t.rawBody, e),
 			complete: !0
 		});
 	}
@@ -359,22 +359,22 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		return Z(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
 	}
 	return typeof o.bundleKey != "string" || !o.bundleKey ? Z(400, { error: "body.bundleKey (string) is required for the storage transport" }) : e.openArchive ? Z(202, {
-		uploadId: ka(o.bundleKey),
+		uploadId: Aa(o.bundleKey),
 		bundleKey: o.bundleKey,
 		complete: !0
 	}) : Z(501, { error: "storage transport not configured on this instance" });
-}, Ha = async (e) => {
-	let t = await Zi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
+}, Ua = async (e) => {
+	let t = await Qi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
 	if (t === void 0) return [];
 	try {
 		return (JSON.parse(Buffer.from(t).toString("utf8")).tables ?? []).map((e) => e.name).filter((e) => typeof e == "string");
 	} catch {
 		return [];
 	}
-}, Ua = (e) => async (t) => {
-	let n = ha(t, e.secret);
+}, Wa = (e) => async (t) => {
+	let n = ga(t, e.secret);
 	if (n) return n;
-	let r = Ra(t.headers), i = La({
+	let r = za(t.headers), i = Ra({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -386,12 +386,12 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} catch {
 		return Z(400, { error: "body must be JSON: { uploadId } or { bundleKey }" });
 	}
-	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? ka(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
-	if (!_a(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
-	let s = ar("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Ea(o, s);
+	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? Aa(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
+	if (!va(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
+	let s = sr("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Da(o, s);
 	if (c !== s) {
-		let t = await jn(e.store, c);
-		if (Mn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
+		let t = await Nn(e.store, c);
+		if (Pn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
 			uploadId: o,
 			runId: c
 		}), Z(202, {
@@ -402,18 +402,18 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		Q.info("admin.import start: taking over a claim whose run is not running", {
 			uploadId: o,
 			staleRunId: c,
-			outcome: Mn(t) ?? "no record"
-		}), c = await Ea(o, s, { takeOver: !0 });
+			outcome: Pn(t) ?? "no record"
+		}), c = await Da(o, s, { takeOver: !0 });
 	}
-	let l = async (e) => (await Da(o).catch(() => void 0), e), u = await za(e, {
+	let l = async (e) => (await Oa(o).catch(() => void 0), e), u = await Ba(e, {
 		...typeof a.uploadId == "string" ? { uploadId: a.uploadId } : {},
 		...typeof a.bundleKey == "string" ? { bundleKey: a.bundleKey } : {}
 	});
 	if ("refusal" in u) return l(u.refusal);
 	if (e.snapshot !== void 0 && !r.force) {
-		let t = await Wa(u.source());
+		let t = await Ga(u.source());
 		if (t !== null) {
-			let n = qi(t.source?.schemaFingerprint ?? "", e.snapshot, Ga(t));
+			let n = Ji(t.source?.schemaFingerprint ?? "", e.snapshot, Ka(t));
 			if (n.drifted) return Q.warn("admin.import refused (schema drift)", {
 				transport: u.transport,
 				bundle: n.bundleFingerprint.slice(0, 16),
@@ -428,17 +428,17 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 	}
 	let d = null;
-	if (u.transport === "upload" && (d = await Pa(u.uploadId, c), d === null)) return l(Z(409, {
+	if (u.transport === "upload" && (d = await Fa(u.uploadId, c), d === null)) return l(Z(409, {
 		error: "no such upload",
 		message: `the bytes for upload '${u.uploadId}' are gone. Re-upload the bundle.`
 	}));
-	let f = await Ka(e.store, {
+	let f = await qa(e.store, {
 		runId: c,
 		mode: r.mode ?? "upsert",
 		via: "api",
 		bundle: u.transport === "storage" ? String(a.bundleKey) : u.uploadId
 	});
-	return qa({
+	return Ja({
 		deps: e,
 		opts: r,
 		rollback: i,
@@ -446,7 +446,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		traced: f,
 		resolved: d === null ? u : {
 			...u,
-			source: () => Ba(d)
+			source: () => Va(d)
 		}
 	}), Q.info("admin.import started", {
 		runId: c,
@@ -465,15 +465,15 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: f,
 		outcome: "poll /_voltro/admin/transfers for this runId — a 202 means started, not finished"
 	});
-}, Wa = async (e) => {
-	let t = await Zi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
+}, Ga = async (e) => {
+	let t = await Qi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
 	if (t == null) return null;
 	try {
 		return JSON.parse(Buffer.from(t).toString("utf8"));
 	} catch {
 		return null;
 	}
-}, Ga = (e) => ({ tables: (e.tables ?? []).map((e) => ({
+}, Ka = (e) => ({ tables: (e.tables ?? []).map((e) => ({
 	name: e.name,
 	indexes: [],
 	columns: Object.entries(e.columnTypes ?? {}).map(([e, t]) => ({
@@ -483,9 +483,9 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		unique: !1,
 		hasDefault: !1
 	}))
-})) }), Ka = async (e, t) => {
+})) }), qa = async (e, t) => {
 	try {
-		return sr(tr), await e.insert(H, {
+		return lr(rr), await e.insert(V, {
 			id: t.runId,
 			direction: "import",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -505,23 +505,23 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, qa = async (e) => {
+}, Ja = async (e) => {
 	let { deps: t, opts: n, rollback: r, resolved: i, runId: a } = e, o = await import("node:os"), s = await import("node:fs/promises"), c = await import("node:path"), l = await s.mkdtemp(c.join(o.tmpdir(), "voltro-admin-import-")), u = async (n) => {
 		Q.warn("admin.import failed", {
 			runId: a,
 			transport: i.transport,
 			error: n
-		}), e.traced && await t.store.update(H, a, {
+		}), e.traced && await t.store.update(V, a, {
 			failure: n,
 			finishedAt: null
 		}).then(() => void 0, () => void 0);
 	};
 	try {
-		t.assetSink ? await na(i.source(), {
+		t.assetSink ? await ra(i.source(), {
 			dir: l,
 			blobs: t.assetSink
-		}) : await ra(i.source(), l);
-		let o = await W.runPromiseExit($i({
+		}) : await ia(i.source(), l);
+		let o = await U.runPromiseExit(ea({
 			store: t.store,
 			bundleDir: l,
 			...n.mode ? { mode: n.mode } : {},
@@ -566,24 +566,24 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		await s.rm(l, {
 			recursive: !0,
 			force: !0
-		}).catch(() => void 0), await Fa(a).catch(() => void 0), await Da(i.uploadId).catch(() => void 0);
+		}).catch(() => void 0), await Ia(a).catch(() => void 0), await Oa(i.uploadId).catch(() => void 0);
 	}
-}, Ja = /^[A-Za-z0-9_-]{8,64}$/, Ya = (e) => Ja.test(e), Xa = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? I.join(wi.tmpdir(), "voltro-export-artifacts"), Za = (e) => I.join(Xa(), e), Qa = (e) => I.join(Za(e), "archive.bin"), $a = async (e = Date.now()) => {
+}, Ya = /^[A-Za-z0-9_-]{8,64}$/, Xa = (e) => Ya.test(e), Za = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? F.join(Ti.tmpdir(), "voltro-export-artifacts"), Qa = (e) => F.join(Za(), e), $a = (e) => F.join(Qa(e), "archive.bin"), eo = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(Xa())) {
-			let r = await X.stat(Za(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Za(n), {
+		for (let n of await X.readdir(Za())) {
+			let r = await X.stat(Qa(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Qa(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, eo = async (e, t) => {
-	if (!Ya(e)) throw Error(`invalid run id: ${e}`);
-	await X.mkdir(Za(e), { recursive: !0 });
-	let { createWriteStream: n } = await import("node:fs"), r = n(Qa(e)), i = 0;
+}, to = async (e, t) => {
+	if (!Xa(e)) throw Error(`invalid run id: ${e}`);
+	await X.mkdir(Qa(e), { recursive: !0 });
+	let { createWriteStream: n } = await import("node:fs"), r = n($a(e)), i = 0;
 	try {
 		for await (let e of t) i += e.byteLength, r.write(Buffer.from(e)) || await new Promise((e, t) => {
 			r.once("drain", e), r.once("error", t);
@@ -594,18 +594,18 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	}
 	return i;
-}, to = async (e) => {
-	if (!Ya(e)) return null;
-	let t = await X.stat(Qa(e)).catch(() => null);
+}, no = async (e) => {
+	if (!Xa(e)) return null;
+	let t = await X.stat($a(e)).catch(() => null);
 	return t === null ? null : t.size;
-}, no = async (e, t, n) => {
-	let r = await to(e);
+}, ro = async (e, t, n) => {
+	let r = await no(e);
 	if (r === null) return null;
 	if (t >= r) return {
 		bytes: Buffer.alloc(0),
 		total: r
 	};
-	let i = await X.open(Qa(e), "r");
+	let i = await X.open($a(e), "r");
 	try {
 		let e = Math.max(0, Math.min(n, r - t)), a = Buffer.alloc(e);
 		return await i.read(a, 0, e, t), {
@@ -615,27 +615,27 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		await i.close();
 	}
-}, ro = async (e) => {
-	Ya(e) && await X.rm(Za(e), {
+}, io = async (e) => {
+	Xa(e) && await X.rm(Qa(e), {
 		recursive: !0,
 		force: !0
 	}).catch(() => void 0);
-}, io = L({ scope: "voltro:admin-export" }), ao = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], oo = (e) => {
+}, ao = I({ scope: "voltro:admin-export" }), oo = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], so = (e) => {
 	if (typeof e.tenant == "string" && e.tenant) return {
 		kind: "tenant",
 		tenantId: e.tenant
 	};
 	if (Array.isArray(e.tables) && e.tables.length) return {
 		kind: "tables",
-		tables: ao(e.tables)
+		tables: oo(e.tables)
 	};
-	let t = ao(e.exclude);
+	let t = oo(e.exclude);
 	return t.length > 0 ? {
 		kind: "all",
 		exclude: t
 	} : { kind: "all" };
-}, so = (e) => async (t) => {
-	let n = ha(t, e.secret);
+}, co = (e) => async (t) => {
+	let n = ga(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -655,12 +655,12 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? oo(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = ar("dexp", `${Date.now()}-${Math.random()}`), d = await co(e.store, {
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? so(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = sr("dexp", `${Date.now()}-${Math.random()}`), d = await lo(e.store, {
 		runId: u,
 		mode: i.subset ? "subset" : s.kind,
 		bundle: c ? String(r.bundleKey) : null
 	});
-	return lo({
+	return uo({
 		deps: e,
 		runId: u,
 		recorded: d,
@@ -670,7 +670,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		blobs: l,
 		...o ? { compression: o } : {},
 		...c ? { bundleKey: String(r.bundleKey) } : {}
-	}), $a(), io.info("admin.export started", {
+	}), eo(), ao.info("admin.export started", {
 		runId: u,
 		scope: s.kind,
 		storage: c
@@ -681,9 +681,9 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: d,
 		outcome: "poll /_voltro/admin/transfers for this runId; fetch the bytes from /_voltro/admin/export/download"
 	});
-}, co = async (e, t) => {
+}, lo = async (e, t) => {
 	try {
-		return sr(tr), await e.insert(H, {
+		return lr(rr), await e.insert(V, {
 			id: t.runId,
 			direction: "export",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -698,17 +698,17 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			staged: null
 		}), !0;
 	} catch (e) {
-		return io.warn("admin.export: the run could not be recorded", {
+		return ao.warn("admin.export: the run could not be recorded", {
 			runId: t.runId,
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, lo = async (e) => {
+}, uo = async (e) => {
 	let { deps: t, runId: n } = e, r = await import("node:os"), i = await import("node:fs/promises"), a = await import("node:path"), o = await i.mkdtemp(a.join(r.tmpdir(), "voltro-admin-export-")), s = async (r) => {
-		e.recorded && await t.store.update(H, n, r).then(() => void 0, () => void 0);
+		e.recorded && await t.store.update(V, n, r).then(() => void 0, () => void 0);
 	};
 	try {
-		let r = await W.runPromise(Qi({
+		let r = await U.runPromise($i({
 			store: t.store,
 			snapshot: t.snapshot,
 			dialect: t.dialect,
@@ -723,16 +723,16 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		})), i = r.tables.reduce((e, t) => e + t.rowCount, 0), a = r.masking?.transformed.length ?? 0;
 		if (e.bundleKey !== void 0) {
 			if (!t.putArchive) throw Error("storage transport not configured on this instance");
-			await t.putArchive(e.bundleKey, () => Xi({
+			await t.putArchive(e.bundleKey, () => Zi({
 				dir: o,
 				...e.blobs
 			}));
 		}
-		let c = await eo(n, Xi({
+		let c = await to(n, Zi({
 			dir: o,
 			...e.blobs
 		}));
-		io.info("admin.export complete", {
+		ao.info("admin.export complete", {
 			runId: n,
 			tables: r.tables.length,
 			rows: i,
@@ -748,25 +748,25 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	} catch (e) {
 		let t = e?.message ?? String(e);
-		io.warn("admin.export failed", {
+		ao.warn("admin.export failed", {
 			runId: n,
 			error: t
 		}), await s({
 			failure: t,
 			finishedAt: null
-		}), await ro(n);
+		}), await io(n);
 	} finally {
 		await i.rm(o, {
 			recursive: !0,
 			force: !0
 		}).catch(() => void 0);
 	}
-}, uo = (e) => async (t) => {
-	let n = ha(t, e.secret, "GET");
+}, fo = (e) => async (t) => {
+	let n = ga(t, e.secret, "GET");
 	if (n) return n;
 	let r = new URLSearchParams(t.query ?? ""), i = r.get("runId") ?? "";
-	if (!Ya(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
-	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await no(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, po) : fo);
+	if (!Xa(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
+	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await ro(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, mo) : po);
 	return s === null ? Z(404, {
 		error: "no artefact",
 		message: `this instance holds no produced bundle for run '${i}'. It may have expired, or the export may still be running — poll the run first.`
@@ -780,8 +780,8 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			"x-export-length": String(s.bytes.byteLength)
 		}
 	};
-}, fo = 8388608, po = 33554432, mo = async (e, t) => await e.query({
-	table: H,
+}, po = 8388608, mo = 33554432, ho = async (e, t) => await e.query({
+	table: V,
 	order: [{
 		column: "startedAt",
 		direction: "desc"
@@ -790,23 +790,23 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	projection: void 0,
 	skip: 0,
 	take: t
-}), ho = (e) => {
+}), go = (e) => {
 	let t = new Date(e);
 	return Number.isFinite(t.getTime()) ? t : /* @__PURE__ */ new Date(0);
-}, go = (e) => ({
+}, _o = (e) => ({
 	...e,
-	startedAt: ho(e.startedAt),
-	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : ho(e.finishedAt)
-}), _o = (e) => async (t) => {
-	let n = ha(t, e.secret, "GET");
+	startedAt: go(e.startedAt),
+	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : go(e.finishedAt)
+}), vo = (e) => async (t) => {
+	let n = ga(t, e.secret, "GET");
 	if (n) return n;
 	let r = Number(new URLSearchParams(t.query ?? "").get("limit") ?? "20"), i = Number.isFinite(r) ? Math.max(1, Math.min(200, Math.trunc(r))) : 20, a;
 	try {
-		a = (await mo(e.store, i)).map(go);
+		a = (await ho(e.store, i)).map(_o);
 	} catch (e) {
 		return Z(409, {
 			error: "no import history",
-			message: `this instance has no \`${H}\` table, so no import has been recorded. Run \`voltro db apply\` against it; imports themselves are unaffected.`,
+			message: `this instance has no \`${V}\` table, so no import has been recorded. Run \`voltro db apply\` against it; imports themselves are unaffected.`,
 			detail: e?.message ?? String(e)
 		});
 	}
@@ -825,11 +825,11 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			direction: e.direction,
 			failure: e.failure,
 			staged: e.staged,
-			line: or(e)
+			line: cr(e)
 		}))
 	});
-}, vo = (e, t, n = {}) => (async function* () {
-	let r = await W.runPromise(Ai(e, t).pipe(W.timeout(n.openTimeout ?? "30 seconds"))), i = await Mi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, yo = (e, t, n = {}) => (async function* () {
+	let r = await U.runPromise(ji(e, t).pipe(U.timeout(n.openTimeout ?? "30 seconds"))), i = await Ni(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -838,7 +838,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), yo = {
+})(), bo = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -847,15 +847,15 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, bo = async (e) => {
-	Ne(e.appProcedures ?? e.discovered, {
+}, xo = async (e) => {
+	Fe(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), pi({
+	}), mi({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new yr({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new xr({
 		crdtColumnsOf: (t) => e.schemaRegistry.crdtColumns(t),
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
@@ -867,43 +867,43 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? yo, a = e.kv ?? ai, o, s = () => void 0, u, d, f, ee, te, ne, m, g = L({ scope: "voltro:workflow" }), re = L({ scope: "voltro:schedule" }), ie = Et({
+	}), i = e.cache ?? bo, a = e.kv ?? si, o, s = () => void 0, c, d, f, ee, te, ne, p, re = I({ scope: "voltro:workflow" }), ie = I({ scope: "voltro:schedule" }), ae = Ot({
 		store: e.store,
-		warn: (e, t) => g.warn(e, t)
-	}), ae = ie.remember, oe = ie.resolve, ce = de({
+		warn: (e, t) => re.warn(e, t)
+	}), oe = ae.remember, se = ae.resolve, ce = pe({
 		authority: e.authority,
 		getStore: () => e.store
-	}), v = (e.discovered.workflows?.length ?? 0) > 0 ? Jr(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ve = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ye = e.tenantIsolation === "namespace", Se = (e.log ?? L({ scope: "voltro:serve" })).child("webhooks"), we, Te, x = e.discovered.webhooks;
-	if (x && x.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
+	}), g = (e.discovered.workflows?.length ?? 0) > 0 ? Xr(() => o) : void 0, fe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, he = fe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", be = e.tenantIsolation === "namespace", xe = (e.log ?? I({ scope: "voltro:serve" })).child("webhooks"), we, Ee, b = e.discovered.webhooks;
+	if (b && b.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
-		let t = Xe({
+		let t = Ze({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: i,
 			kv: a
-		}), n = x.outgoing.map((e) => e.descriptor);
-		Te = Hi.toLayer(zi(t, { events: n })), we = Bi(t, async (e) => {
+		}), n = b.outgoing.map((e) => e.descriptor);
+		Ee = Ui.toLayer(Bi(t, { events: n })), we = Vi(t, async (e) => {
 			let t = f;
 			if (t === void 0) {
-				Se.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
+				xe.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				});
 				return;
 			}
-			t.runPromise(Hi.execute(e)).catch((t) => {
-				Se.error("deliverWebhook workflow crashed", {
+			t.runPromise(Ui.execute(e)).catch((t) => {
+				xe.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
 				}, t);
 			});
 		}, { events: n });
 	}
-	let Ee = /* @__PURE__ */ new Map();
-	if (x) for (let e of x.incoming) {
-		let t = e.descriptor.path ?? Vi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Wi(e.descriptor, {
+	let De = /* @__PURE__ */ new Map();
+	if (b) for (let e of b.incoming) {
+		let t = e.descriptor.path ?? Hi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Gi(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => v === void 0 ? void 0 : ri(v, {
+			resolveWorkflows: () => g === void 0 ? void 0 : ai(g, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -915,34 +915,34 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					idempotency: e.idempotency,
 					durationMs: e.durationMs
 				};
-				e.status >= 500 ? Se.error("incoming delivery failed", t) : e.status >= 400 ? Se.warn("incoming delivery rejected", t) : Se.info("incoming delivery handled", t);
+				e.status >= 500 ? xe.error("incoming delivery failed", t) : e.status >= 400 ? xe.warn("incoming delivery rejected", t) : xe.info("incoming delivery handled", t);
 			}
 		});
-		Ee.set(t, { handle: r });
+		De.set(t, { handle: r });
 	}
-	Lr(), ci((t) => Rr(e.store, t.subjectId, t.resourceType, t.resourceId)) || L({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let De = [], ke = [...e.discovered.outboxHandlers ?? [], ...Tn((x?.outgoing.length ?? 0) + (x?.incoming.length ?? 0) + (x?.providers.length ?? 0), []) ? [{
+	zr(), li((t) => Br(e.store, t.subjectId, t.resourceType, t.resourceId)) || I({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	let Oe = [], ke = [...e.discovered.outboxHandlers ?? [], ...Dn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: Ui(() => we)
-	}] : []], Ae = ke.length > 0 ? l({
+		definition: Wi(() => we)
+	}] : []], je = ke.length > 0 ? u({
 		handlers: ke,
 		store: e.store,
-		log: (e.log ?? L({ scope: "voltro:serve" })).child("outbox"),
+		log: (e.log ?? I({ scope: "voltro:serve" })).child("outbox"),
 		onChange: (t) => e.store.onChange((e) => t({
 			table: e.table,
 			op: e.op
 		})),
 		onShutdown: (e) => {
-			De.push(e);
+			Oe.push(e);
 		}
-	}) : void 0, S = C({
+	}) : void 0, x = S({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: Le(e.port ?? 4e3),
-		log: (e.log ?? L({ scope: "voltro:serve" })).child("connections")
+		publicUrl: ze(e.port ?? 4e3),
+		log: (e.log ?? I({ scope: "voltro:serve" })).child("connections")
 	});
-	b({
+	y({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -951,66 +951,66 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let Me = (e.log ?? L({ scope: "voltro:serve" })).child("events"), Fe = e.broadcastNamespace ?? Be(e.plugins, void 0), Re = Ft(e.plugins, Fe, Me), ze = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ve = e.membership ?? Wt(e.plugins, {
-		instanceId: ze,
-		namespace: Fe,
+	let Me = (e.log ?? I({ scope: "voltro:serve" })).child("events"), Pe = e.broadcastNamespace ?? He(e.plugins, void 0), Le = Lt(e.plugins, Pe, Me), Be = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ve = e.membership ?? Kt(e.plugins, {
+		instanceId: Be,
+		namespace: Pe,
 		meta: { mode: "serve" },
 		logger: Me
-	}), He = ge({
+	}), C = ve({
 		events: e.discovered.events ?? [],
-		origin: ze,
-		...Re.publishRemote === void 0 ? {} : { publishRemote: Re.publishRemote }
-	}), Ue = (e.discovered.events ?? []).length > 0 ? await Re.attach(He.bus) : null, We = Pt({
+		origin: Be,
+		...Le.publishRemote === void 0 ? {} : { publishRemote: Le.publishRemote }
+	}), Ue = (e.discovered.events ?? []).length > 0 ? await Le.attach(C.bus) : null, We = It({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
 		kv: a,
 		...we === void 0 ? {} : { webhooksService: we },
-		...v === void 0 ? {} : { workflowsProxy: v },
+		...g === void 0 ? {} : { workflowsProxy: g },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: ye,
+		namespaceIsolationOn: be,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...Ae === void 0 ? {} : { outbox: { nudge: Ae.nudge } },
-		...S.active ? { connections: { registry: S.registry } } : {},
-		eventBus: He.bus
-	}), Ge = G.succeed(gr, be), Ke = G.succeed(br, Oe), qe = G.succeed(_r, Ut), Je = G.succeed(xr, p), Ye = (t, n) => {
-		let r = t.pipe(W.provide(qr(n)));
-		return (e.baseLayer ? r.pipe(W.provide(e.baseLayer)) : r).pipe(W.provide(Ge)).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je));
-	}, et = (e, t) => {
+		...je === void 0 ? {} : { outbox: { nudge: je.nudge } },
+		...x.active ? { connections: { registry: x.registry } } : {},
+		eventBus: C.bus
+	}), Ge = W.succeed(vr, Se), Ke = W.succeed(Sr, Ae), qe = W.succeed(yr, Gt), Je = W.succeed(Cr, m), Ye = (t, n) => {
+		let r = t.pipe(U.provide(Yr(n)));
+		return (e.baseLayer ? r.pipe(U.provide(e.baseLayer)) : r).pipe(U.provide(Ge)).pipe(U.provide(Ke)).pipe(U.provide(qe)).pipe(U.provide(Je));
+	}, Xe = (e, t) => {
 		let n = Ye(e, t);
-		return di(n);
-	}, nt = Sn(), rt = Ie(e.plugins ?? [], nt), it = le({
+		return fi(n);
+	}, tt = wn(), rt = Re(e.plugins ?? [], tt), it = ue({
 		plugins: e.plugins ?? [],
-		metrics: nt,
-		log: e.log ?? L({ scope: "voltro:serve" })
-	}), at = Tt(e.plugins ?? [], nt), ot = e.security?.defaultDeny ?? !0, st = Xr({
+		metrics: tt,
+		log: e.log ?? I({ scope: "voltro:serve" })
+	}), at = Dt(e.plugins ?? [], tt), ot = e.security?.defaultDeny ?? !0, st = Qr({
 		store: e.store,
 		defaultDeny: ot,
 		recordMetric: (e) => {
-			nt.record(e);
+			tt.record(e);
 		},
 		...rt.mutation === void 0 ? {} : { interceptor: rt.mutation },
 		buildContext: (e, t, n) => We(e, t, n),
-		runEffect: et,
-		undoCapture: $e((t) => e.schemaRegistry.crdtColumns(t))
-	}), ct = c();
+		runEffect: Xe,
+		undoCapture: et((t) => e.schemaRegistry.crdtColumns(t))
+	}), ct = l();
 	{
-		let t = Nt();
-		t !== void 0 && (e.log ?? L({ scope: "voltro:serve" })).info(t);
+		let t = Pt();
+		t !== void 0 && (e.log ?? I({ scope: "voltro:serve" })).info(t);
 	}
-	let ut = Ce({
+	let lt = Te({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), dt = zr({
+	}), dt = Vr({
 		defaultDeny: ot,
 		buildContext: (e) => We(e),
-		runEffect: et,
+		runEffect: Xe,
 		recordMetric: (e) => {
-			nt.record(e);
+			tt.record(e);
 		},
 		...rt.action === void 0 ? {} : { interceptor: rt.action }
-	}), ft = Qr({
+	}), ft = ei({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
 	}), pt = {
@@ -1019,32 +1019,32 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		finalize: (e, t) => ft(e, t.subject),
 		provideEffect: Ye,
 		...rt.query === void 0 ? {} : { interceptor: rt.query }
-	}, T = J(pt), mt = Zr({
+	}, T = q(pt), mt = $r({
 		...pt,
-		queryRows: (t, n) => e.store.query(t).then((e) => vi(t.table, e, n.subject))
-	}), ht = ei({
+		queryRows: (t, n) => e.store.query(t).then((e) => yi(t.table, e, n.subject))
+	}), ht = ni({
 		...pt,
 		subscribeDescriptor: (e, t, n, i, a) => r.subscribe(e, t, n, void 0, void 0, void 0, i, a),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => Un(e.descriptor)), D = {};
+	}), E = (e) => e.filter((e) => Gn(e.descriptor)), D = {};
 	for (let t of [
 		...E(e.discovered.queries),
 		...ct.queries,
-		...ut.queries,
-		...S.queries
-	]) D[t.descriptor.name] = (e) => q(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, $r(t, e));
+		...lt.queries,
+		...x.queries
+	]) D[t.descriptor.name] = (e) => K(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, ti(t, e));
 	for (let t of [
 		...E(e.discovered.mutations),
 		...ct.mutations,
-		...ut.mutations,
-		...S.mutations
+		...lt.mutations,
+		...x.mutations
 	]) {
-		let n = Yr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => K(async (e, n) => st(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Kn(t.descriptor, "mutation"));
+		let n = Zr(t.descriptor.output);
+		D[t.descriptor.name] = (r) => G(async (e, n) => st(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Jn(t.descriptor, "mutation"));
 	}
-	for (let t of [...E(e.discovered.actions), ...S.actions]) {
-		let n = Yr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => K(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Kn(t.descriptor, "action"));
+	for (let t of [...E(e.discovered.actions), ...x.actions]) {
+		let n = Zr(t.descriptor.output);
+		D[t.descriptor.name] = (r) => G(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Jn(t.descriptor, "action"));
 	}
 	let vt = () => `public-${Math.random().toString(36).slice(2, 10)}`, yt = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
@@ -1073,7 +1073,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			})
 		}))
 	], bt = {
-		candidates: y({
+		candidates: v({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
@@ -1126,7 +1126,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				})
 			}))
 		];
-		await Ht({
+		await Wt({
 			config: e.grpc.config,
 			candidates: n,
 			resolveSubject: async (t) => {
@@ -1138,106 +1138,106 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			store: e.store,
 			root: e.grpc.root,
-			log: e.log ?? L({ scope: "voltro:serve" }),
-			onShutdown: (e) => oi(e)
+			log: e.log ?? I({ scope: "voltro:serve" }),
+			onShutdown: (e) => J(e)
 		});
 	}
-	let O = lt({
+	let xt = ut({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
 		publicApiEntries: yt,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? L({ scope: "voltro:serve" })
-	}), k = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, St = async (e, t) => {
-		let { Readable: n } = await import("node:stream"), r = Di(), i = ki("storage", () => n.from(t()));
-		await W.runPromise(ji(r, e, i, { contentType: "application/octet-stream" }));
-	}, Ct = k && k.length >= 16 ? [
+		log: e.log ?? I({ scope: "voltro:serve" })
+	}), O = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Ct = async (e, t) => {
+		let { Readable: n } = await import("node:stream"), r = Oi(), i = Ai("storage", () => n.from(t()));
+		await U.runPromise(Mi(r, e, i, { contentType: "application/octet-stream" }));
+	}, wt = O && O.length >= 16 ? [
 		{
 			method: "POST",
-			path: ca,
-			handle: Va({
-				secret: k,
+			path: la,
+			handle: Ha({
+				secret: O,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: ea(Di()),
-				openArchive: (e) => vo(Di(), e),
+				assetSink: ta(Oi()),
+				openArchive: (e) => yo(Oi(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: St,
+				putArchive: Ct,
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {}
 			})
 		},
 		{
 			method: "POST",
-			path: la,
-			handle: Ua({
-				secret: k,
+			path: ua,
+			handle: Wa({
+				secret: O,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: ea(Di()),
-				openArchive: (e) => vo(Di(), e),
+				assetSink: ta(Oi()),
+				openArchive: (e) => yo(Oi(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: St
+				putArchive: Ct
 			})
 		},
 		{
 			method: "GET",
-			path: fa,
-			handle: _o({
-				secret: k,
+			path: pa,
+			handle: vo({
+				secret: O,
 				store: e.store
 			})
 		},
 		{
 			method: "GET",
-			path: da,
-			handle: uo({ secret: k })
+			path: fa,
+			handle: fo({ secret: O })
 		},
 		{
 			method: "POST",
-			path: ua,
-			handle: so({
-				secret: k,
+			path: da,
+			handle: co({
+				secret: O,
 				store: e.store,
 				snapshot: e.dataTransferSnapshot ?? { tables: [] },
 				dialect: e.dataTransferDialect ?? "memory",
 				tenantTables: [...e.tenantScopedTables],
-				loadProfile: Nn,
-				assetSource: ta(Di(), e.store),
-				putArchive: St
+				loadProfile: Fn,
+				assetSource: na(Oi(), e.store),
+				putArchive: Ct
 			})
 		}
-	] : [], Dt = [
+	] : [], Tt = [
 		...e.httpRoutes ?? [],
-		...O.httpRoutes,
-		...Ct,
-		...S.httpRoutes
+		...xt.httpRoutes,
+		...wt,
+		...x.httpRoutes
 	];
-	Object.assign(D, He.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Or((r) => xi(r, (r) => {
+	Object.assign(D, C.handlers);
+	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Ar((r) => Si(r, (r) => {
 		let i = We(r), a = t.executor(n, i);
-		if (W.isEffect(a)) {
-			let t = a.pipe(W.provide(qr(i.store)));
-			return (e.baseLayer ? t.pipe(W.provide(e.baseLayer)) : t).pipe(W.provide(Ge)).pipe(W.provide(Ke)).pipe(W.provide(qe)).pipe(W.provide(Je));
+		if (U.isEffect(a)) {
+			let t = a.pipe(U.provide(Yr(i.store)));
+			return (e.baseLayer ? t.pipe(U.provide(e.baseLayer)) : t).pipe(U.provide(Ge)).pipe(U.provide(Ke)).pipe(U.provide(qe)).pipe(U.provide(Je));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? W.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? U.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
-	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => K(async (e, n) => {
+	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => G(async (e, n) => {
 		let r = n;
-		return ri(v, {
+		return ai(g, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	pe && (D[Xn.name] = (e) => q(T({
-		descriptor: Xn,
+	fe && (D[Qn.name] = (e) => K(T({
+		descriptor: Qn,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -1246,30 +1246,30 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: cr(U("id", t), U("executionId", t)),
+				predicate: ur(H("id", t), H("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Xn.name}`), D[Qn.name] = (e) => q(T({
-		descriptor: Qn,
+	}, e), r, `subscription.${Qn.name}`), D[er.name] = (e) => K(T({
+		descriptor: er,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [U("tag", t.tag)], ...t.status === void 0 ? [] : [U("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : rr(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : ar(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Qn.name}`), D[Zn.name] = (e) => q(T({
-		descriptor: Zn,
+	}, e), r, `subscription.${er.name}`), D[$n.name] = (e) => K(T({
+		descriptor: $n,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1278,14 +1278,14 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: U("runId", t),
+				predicate: H("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Zn.name}`), D[Yn.name] = (e) => q(T({
-		descriptor: Yn,
+	}, e), r, `subscription.${$n.name}`), D[Zn.name] = (e) => K(T({
+		descriptor: Zn,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1294,14 +1294,14 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: U("runId", t),
+				predicate: H("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Yn.name}`), D[B.name] = (e) => q(T({
-		descriptor: B,
+	}, e), r, `subscription.${Zn.name}`), D[z.name] = (e) => K(T({
+		descriptor: z,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -1310,14 +1310,14 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : U("name", t.name),
+				predicate: t.name === void 0 ? void 0 : H("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${B.name}`), D[V.name] = (e) => q(T({
-		descriptor: V,
+	}, e), r, `subscription.${z.name}`), D[B.name] = (e) => K(T({
+		descriptor: B,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -1326,74 +1326,74 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: U("eventId", t),
+				predicate: H("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${V.name}`), D[qn.name] = (t) => K(async (t, n) => {
+	}, e), r, `subscription.${B.name}`), D[Yn.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.cancel(r.workflowName, r.executionId), await Lt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${qn.name}`), D[Jn.name] = (t) => K(async (t, n) => {
+		return await gt(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Rt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${Yn.name}`), D[Xn.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { executionId: r.executionId }), await v.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Jn.name}`), D[$n.name] = (t) => K(async (t, n) => {
+		return await gt(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${Xn.name}`), D[tr.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { id: r.id }), v.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${$n.name}`), D[er.name] = (t) => K(async (t, n) => {
+		return await gt(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${tr.name}`), D[nr.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { id: r.id }), v.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${er.name}`));
-	let Ot = [
-		...E(e.discovered.queries).map((e) => z(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => Wn(e.descriptor)),
-		...E(e.discovered.actions).map((e) => R(e.descriptor)),
-		...ct.queries.map((e) => z(e.descriptor)),
-		...ct.mutations.map((e) => Wn(e.descriptor)),
-		...ut.queries.map((e) => z(e.descriptor)),
-		...ut.mutations.map((e) => Wn(e.descriptor)),
-		...S.queries.map((e) => z(e.descriptor)),
-		...S.mutations.map((e) => Wn(e.descriptor)),
-		...S.actions.map((e) => R(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => Gn(e.descriptor)),
-		...He.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => Si(e.definition)),
-		...pe ? [
-			z(Xn),
-			z(Qn),
-			z(Zn),
-			z(Yn),
-			z(B),
-			z(V),
-			R(qn),
-			R(Jn),
+		return await gt(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${nr.name}`));
+	let kt = [
+		...E(e.discovered.queries).map((e) => R(e.descriptor)),
+		...E(e.discovered.mutations).map((e) => Kn(e.descriptor)),
+		...E(e.discovered.actions).map((e) => L(e.descriptor)),
+		...ct.queries.map((e) => R(e.descriptor)),
+		...ct.mutations.map((e) => Kn(e.descriptor)),
+		...lt.queries.map((e) => R(e.descriptor)),
+		...lt.mutations.map((e) => Kn(e.descriptor)),
+		...x.queries.map((e) => R(e.descriptor)),
+		...x.mutations.map((e) => Kn(e.descriptor)),
+		...x.actions.map((e) => L(e.descriptor)),
+		...E(e.discovered.streams ?? []).map((e) => qn(e.descriptor)),
+		...C.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => Ci(e.definition)),
+		...fe ? [
+			R(Qn),
+			R(er),
 			R($n),
-			R(er)
+			R(Zn),
+			R(z),
+			R(B),
+			L(Yn),
+			L(Xn),
+			L(tr),
+			L(nr)
 		] : []
-	], kt = Ei.make(...Ot).middleware(Bn).middleware(Vn), At = Gr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), jt = e.dormancyTenantId ?? vr, Mt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => li(e.store, {
-			tenantId: r ?? jt,
+	], At = Di.make(...kt).middleware(Hn).middleware(Un), jt = qr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Mt = e.dormancyTenantId ?? br, Nt = e.dormancy === "sleep" ? {
+		register: (t, n, r) => ui(e.store, {
+			tenantId: r ?? Mt,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => Ar(e.store, {
-			tenantId: n ?? jt,
+		cancel: (t, n) => Mr(e.store, {
+			tenantId: n ?? Mt,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, A = ve ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
+	} : void 0, k = he ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...Mt === void 0 ? {} : { wakeups: Mt }
-	}), It = async (t, n) => {
-		await A.closeWorkflowChildrenForParent({
+		...Nt === void 0 ? {} : { wakeups: Nt }
+	}), Ft = async (t, n) => {
+		await k.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: j,
-			log: { warn: (e, t) => g.warn(e, t ?? {}) },
+			recorder: A,
+			log: { warn: (e, t) => re.warn(e, t ?? {}) },
 			interruptChild: async (t, n) => {
 				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
 				if (!r) throw Error(`Unknown child workflow: ${t}`);
@@ -1401,11 +1401,11 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				await f.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Lt = async (t, n, r) => {
+	}, Rt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: U("executionId", n),
+			predicate: H("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -1416,7 +1416,7 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await j.recordEvent({
+		a && await A.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -1425,18 +1425,18 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await It(n, "cancelled");
-	}, Rt = [
-		...ii(e.discovered.workflows ?? [], {
+		}), a && await Ft(n, "cancelled");
+	}, zt = [
+		...oi(e.discovered.workflows ?? [], {
 			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? We({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: oe,
+			resolveStartContext: se,
 			...ce === void 0 ? {} : { resolveAuthority: ce }
 		}, (t, n, r) => {
-			let i = A.getWorkflowVersionMetadata(t.definition);
-			return A.wrapWorkflowExecuteWithRunRecording({
+			let i = k.getWorkflowVersionMetadata(t.definition);
+			return k.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -1447,27 +1447,27 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => It(e, t),
-				...M(t.definition),
+				onParentClose: ({ executionId: e, status: t }) => Ft(e, t),
+				...j(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await d?.gate.release(e);
 				},
-				recorder: j,
+				recorder: A,
 				pluginWorkflowStepLayer: at,
-				recordRun: si
+				recordRun: ci
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
-		...Te === void 0 ? [] : [Te]
-	], Bt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Te === void 0 ? [] : ["voltro.deliverWebhook"]], Vt = Rt.length > 0 ? G.mergeAll(...Rt) : G.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Te !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Vt.pipe(G.provideMerge(e.workflowEngineLayer));
-		f = ur.make((e.baseLayer === void 0 ? t : t.pipe(G.provideMerge(e.baseLayer))).pipe(G.provideMerge(zn({})))), await f.runPromise(W.void), (e.log ?? L({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Bt.length} entity type(s) registered`, { entities: Bt });
+		...Ee === void 0 ? [] : [Ee]
+	], Bt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Ee === void 0 ? [] : ["voltro.deliverWebhook"]], Ht = zt.length > 0 ? W.mergeAll(...zt) : W.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Ee !== void 0) && e.workflowEngineLayer !== void 0) {
+		let t = Ht.pipe(W.provideMerge(e.workflowEngineLayer));
+		f = fr.make((e.baseLayer === void 0 ? t : t.pipe(W.provideMerge(e.baseLayer))).pipe(W.provideMerge(Vn({})))), await f.runPromise(U.void), (e.log ?? I({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Bt.length} entity type(s) registered`, { entities: Bt });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
-		ne = await zt({
-			provider: Ri(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: Ri(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Fe,
+		ne = await Vt({
+			provider: zi(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: zi(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Pe,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -1475,14 +1475,14 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				op: e.op,
 				...e.origin === void 0 ? {} : { origin: e.origin }
 			})),
-			log: (e.log ?? L({ scope: "voltro:serve" })).child("workflow")
+			log: (e.log ?? I({ scope: "voltro:serve" })).child("workflow")
 		}), ee = async (t) => {
-			let n = await Pe({
+			let n = await Ie({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await j.recordEvent({
+			return n.statusReset && await A.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1495,12 +1495,12 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				reason: n.outcome.reason
 			};
 		}, te = async (t) => {
-			let n = await se({
+			let n = await le({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await j.recordEvent({
+			return n.statusReset && await A.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1515,32 +1515,32 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : hi, c = Kr({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Hr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : gi, l = Jr({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), l = L({ scope: "voltro:flow-control" }), p = {
+		}), u = I({ scope: "voltro:flow-control" }), p = {
 			info: (e, t) => {
-				l.info(e, t);
+				u.info(e, t);
 			},
 			warn: (e, t) => {
-				l.warn(e, t);
+				u.warn(e, t);
 			},
 			error: (e, t) => {
-				l.error(e, t ?? {});
+				u.error(e, t ?? {});
 			}
-		}, m, h = () => {
+		}, m, re = () => {
 			if (m !== void 0) return m;
-			if (o !== void 0 && j !== void 0) return m = _({
+			if (o !== void 0 && A !== void 0) return m = _({
 				store: e.store,
-				log: F,
+				log: P,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
 				workflowRuntime: f,
-				workflowRunRecorder: j,
-				closeChildrenForParent: It
+				workflowRunRecorder: A,
+				closeChildrenForParent: Ft
 			}), m;
 		};
-		s = h, d = w({
+		s = re, d = w({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1554,11 +1554,11 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			workflows: e.discovered.workflows ?? [],
 			facade: () => o,
-			cancelRunWithReason: h,
-			recordRunEvent: () => j?.recordEvent,
+			cancelRunWithReason: re,
+			recordRunEvent: () => A?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
-			scheduleCoordinated: c,
+			scheduleCoordinated: l,
 			onAbandoned: async (t) => {
 				await _t({
 					workflows: e.discovered.workflows ?? [],
@@ -1569,8 +1569,8 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			log: p
 		});
-		let g = d;
-		g !== void 0 && oi(() => g.stop()), u = wt({
+		let h = d;
+		h !== void 0 && J(() => h.stop()), c = Et({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1581,81 +1581,81 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => f === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await f.runPromise(A.completeSuspendingSignal({
+			resumeSignal: () => f === void 0 || k === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(k.completeSuspendingSignal({
 					store: e.store,
-					target: tt(t, n),
+					target: nt(t, n),
 					signalName: r,
 					payload: i
 				}));
 			},
 			runEffect: (e) => f.runPromise(e),
-			scheduleCoordinated: c,
+			scheduleCoordinated: l,
 			log: p
 		});
-		let re = u;
-		re !== void 0 && oi(() => re.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ni({
+		let ie = c;
+		ie !== void 0 && J(() => ie.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ii({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => f.runPromise(e),
 			onEnqueue: () => ne?.publishWake(),
-			...g === void 0 ? {} : {
-				admitStart: g.gate.admitStart,
-				startPayloadSchema: g.gate.startPayloadSchema,
-				parkDelayedStart: g.gate.parkDelayed
+			...h === void 0 ? {} : {
+				admitStart: h.gate.admitStart,
+				startPayloadSchema: h.gate.startPayloadSchema,
+				parkDelayedStart: h.gate.parkDelayed
 			},
-			rememberStartContext: ae,
+			rememberStartContext: oe,
 			signal: async (t, n, r) => {
-				let i = await A.sendWorkflowSignal({
+				let i = await k.sendWorkflowSignal({
 					store: e.store,
-					recorder: j,
+					recorder: A,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await f.runPromise(A.completeSuspendingSignal({
+				return await f.runPromise(k.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => A.sendWorkflowUpdate({
+			update: (t, n, r, i) => k.sendWorkflowUpdate({
 				store: e.store,
-				recorder: j,
+				recorder: A,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => je(e.store, t),
-			retry: (t, n) => fe({
+			listRuns: (t) => Ne(e.store, t),
+			retry: (t, n) => me({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => f.runPromise(e)
 			}, t, n),
-			redrive: (t) => Pe({
+			redrive: (t) => Ie({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Gt = G.mergeAll(kt.toLayer(D), At), Kt = xt(D, e.discovered.queries.map((e) => e.descriptor.name), pe), qt = G.mergeAll(kt.toLayer(Kt), At), N = e.observability, Jt = await kr({
+	let Ut = W.mergeAll(At.toLayer(D), jt), qt = St(D, e.discovered.queries.map((e) => e.descriptor.name), fe), Jt = W.mergeAll(At.toLayer(qt), jt), M = e.observability, Yt = await jr({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
-		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
-		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
-		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
-	}), Yt = !1, Xt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Zt, shutdown: P } = gi({
-		group: kt,
-		handlersLayer: Gt,
-		httpHandlersLayer: qt,
+		...M && M.spanProcessors.length > 0 ? { extraSpanProcessors: M.spanProcessors } : {},
+		...M && M.metricReaders.length > 0 ? { extraMetricReaders: M.metricReaders } : {},
+		...M && Object.keys(M.resourceAttributes).length > 0 ? { resourceAttributes: M.resourceAttributes } : {},
+		...M && M.sampler !== void 0 ? { sampler: M.sampler } : {}
+	}), Xt = !1, Zt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Qt, shutdown: $t } = _i({
+		group: At,
+		handlersLayer: Ut,
+		httpHandlersLayer: Jt,
 		port: e.port ?? 4e3,
 		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: Jt.layer,
-		security: ue(e),
-		...xn(e),
+		tracerLayer: Yt.layer,
+		security: de(e),
+		...Cn(e),
 		...e.discovered.wsGateways !== void 0 && e.discovered.wsGateways.length > 0 ? { webSocketGateways: e.discovered.wsGateways } : {},
 		resolveGatewaySubject: async (t) => {
 			let n = await e.resolveSubject(t, -1);
@@ -1666,17 +1666,17 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		},
 		...it,
 		healthCheck: {
-			isReady: () => Yt,
-			...Xt ? { ping: Xt } : {}
+			isReady: () => Xt,
+			...Zt ? { ping: Zt } : {}
 		},
-		...Dt.length > 0 ? { httpRoutes: Dt } : {},
+		...Tt.length > 0 ? { httpRoutes: Tt } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
-		...Ee.size > 0 ? { webhookRoutes: Ee } : {},
+		...De.size > 0 ? { webhookRoutes: De } : {},
 		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), Qt = sa(Zt);
-	if (await Dr(Zt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Br(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : hi;
-		m = await _i(e.discovered.schedules ?? [], {
+	}), N = ca(Qt);
+	if (await kr(Qt), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Hr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : gi;
+		p = await vi(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1690,283 +1690,285 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			}, e.store, void 0, `schedule:${n}`),
 			log: {
 				info: (e, t) => {
-					re.info(e, t);
+					ie.info(e, t);
 				},
 				warn: (e, t) => {
-					re.warn(e, t);
+					ie.warn(e, t);
 				},
 				error: (e, t) => {
-					re.error(e, t ?? {});
+					ie.error(e, t ?? {});
 				},
 				debug: () => {}
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(m);
+		}), e.onSchedulerReady?.(p);
 	}
-	let F = e.log ?? L({ scope: "voltro:serve" }), $t, en;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && ($t = Qe(e.discovered.subscribers ?? [], e.store, F.child("subscribe"), e.schemaRegistry, He.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = F.child("reaction"), n = async (n, r) => {
+	let P = e.log ?? I({ scope: "voltro:serve" }), en, tn;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (en = $e(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, C.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = P.child("reaction"), n = async (n, r) => {
 			if (n.kind === "workflow") {
-				if (v === void 0) {
+				if (g === void 0) {
 					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
 					return;
 				}
 				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await ri(v, {
+				await ai(g, {
 					traceId: `reaction:${n.workflow}`,
 					source: `reaction:${n.workflow}`
 				}).start(n.workflow, e);
 				return;
 			}
-			await _e(n.agent, r, {
+			await ye(n.agent, r, {
 				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
 				runAction: (e, t, n) => Promise.resolve(dt(e, t, n)),
-				makeSubject: (e) => Hn(e),
+				makeSubject: (e) => Wn(e),
 				now: () => Date.now(),
 				log: t
 			});
 		}, r = async (n, r) => {
 			try {
 				let { requireAiBudget: t } = await import("@voltro/ai");
-				return (await W.runPromise(W.either(t(e.store, {
+				return (await U.runPromise(U.either(t(e.store, {
 					tenantId: n,
 					limitUsd: r
 				}))))._tag === "Right";
 			} catch (e) {
 				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
 			}
-		}, i = Ze(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		en = he(e.discovered.reactions ?? [], e.store, {
+		}, i = Qe(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
+		tn = _e(e.discovered.reactions ?? [], e.store, {
 			runAct: n,
 			checkBudget: r,
 			claimRateSlot: (e) => i.claim(e)
 		}, t);
 	}
-	let tn;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (tn = await h({
+	let nn;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (nn = await h({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
-		log: F.child("aggregate"),
+		log: P.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ge = G.succeed(gr, tn.registry));
-	let nn;
-	(e.discovered.expectations?.length ?? 0) > 0 && (nn = wr({
+	}), Ge = W.succeed(vr, nn.registry));
+	let rn;
+	(e.discovered.expectations?.length ?? 0) > 0 && (rn = Er({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
-		log: F.child("expectation")
-	}), Ke = G.succeed(br, nn.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Er({
+		log: P.child("expectation")
+	}), Ke = W.succeed(Sr, rn.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Or({
 		discovered: e.discovered.budgets ?? [],
-		log: F.child("finops")
-	}), qe = G.succeed(_r, n.registry));
-	let rn;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (rn = Tr({
+		log: P.child("finops")
+	}), qe = W.succeed(yr, n.registry));
+	let an;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (an = Dr({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
-		log: F.child("experiment")
-	}), Je = G.succeed(xr, rn.registry)), Yt = !0, e.bootTiming?.mark("ready"), {
+		log: P.child("experiment")
+	}), Je = W.succeed(Cr, an.registry)), Xt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: Zt,
-		scheduler: m,
-		eventsSnapshot: xe(He.bus, He.declared),
+		server: Qt,
+		scheduler: p,
+		eventsSnapshot: Ce(C.bus, C.declared),
 		membersSnapshot: () => ({
 			members: Ve.membership.list(),
 			capturedAt: Date.now()
 		}),
 		agentTools: () => bt,
-		rpcMetrics: () => nt,
+		rpcMetrics: () => tt,
 		webhooksService: () => we,
 		runCanceller: () => s(),
 		flowControlHealth: () => d?.cancelHealth(),
-		inferenceHealth: () => u?.health(),
-		workflowWriteActions: () => v === void 0 || j === void 0 ? void 0 : me({
+		inferenceHealth: () => c?.health(),
+		workflowWriteActions: () => g === void 0 || A === void 0 ? void 0 : ge({
 			store: e.store,
-			log: F,
+			log: P,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
 			workflowRuntime: f,
-			workflowRunRecorder: j,
-			closeChildrenForParent: It
+			workflowRunRecorder: A,
+			closeChildrenForParent: Ft
 		}),
 		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
 		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
-			Yt = !1, await Qt.drainRequests();
-			for (let e of De) try {
+			Xt = !1, await N.drainRequests();
+			for (let e of Oe) try {
 				await e();
 			} catch (e) {
-				F.warn("serve: teardown step failed", {}, e);
+				P.warn("serve: teardown step failed", {}, e);
 			}
-			await Ue?.detach(), await Ve.detach(), tn?.detach(), nn?.detach(), n?.detach(), rn?.detach(), en?.(), $t?.(), await m?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await P(), await Qt.finish();
+			await Ue?.detach(), await Ve.detach(), nn?.detach(), rn?.detach(), n?.detach(), an?.detach(), tn?.(), en?.(), await p?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await $t(), await N.finish();
 		}
 	};
-}, $ = L({ scope: "voltro:serve" }), xo = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", So = Jt, Co = async (e) => {
-	let t = kn(process.cwd());
-	if (Ln(t)) {
+}, $ = I({ scope: "voltro:serve" }), So = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Co = Xt, wo = async (e) => {
+	let t = jn(process.cwd());
+	if (zn(t)) {
 		let n;
 		try {
-			let e = await import(Rn(t).href);
+			let e = await import(Bn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return wo(e);
-}, wo = async (c) => {
-	let l = An();
+	return To(e);
+}, To = async (l) => {
+	let u = Mn();
 	e("serve");
 	try {
-		Pi();
+		Fi();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let p = process.cwd(), h = await Ke(p), se = Yt({
+	let m = process.cwd(), h = await qe(m), le = Zt({
 		kind: "api",
 		configPort: h?.port,
 		env: process.env,
-		flagPort: So(c, "--port")
+		flagPort: Co(l, "--port")
 	});
-	for (let e of se.warnings) $.warn(e);
-	let le = se.port;
-	fi(ui(h?.secrets)), await Xt({
+	for (let e of le.warnings) $.warn(e);
+	let ue = le.port;
+	pi(di(h?.secrets)), await Qt({
 		rawEnv: h?.env,
 		appType: "api",
-		root: p,
+		root: m,
 		log: $,
 		generateTypes: !1
-	}), l.mark("config");
-	let _ = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), de = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", fe = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, me = On(p);
-	if (!r() && Ln(me)) try {
-		let e = await import(Rn(me).href);
+	}), u.mark("config");
+	let _ = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), pe = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", me = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, ge = An(m);
+	if (!r() && zn(ge)) try {
+		let e = await import(Bn(ge).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Fn(p, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Ln(m, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let y = await St(p), b = await j(y, { cdc: de && fe !== void 0 }), he = ee(b);
+	let v = await wt(m), y = await Ft(v, { cdc: pe && me !== void 0 }), _e = te(y);
 	{
-		Ye({
+		Xe({
 			plugins: h?.plugins ?? [],
-			queries: b.queries,
-			mutations: b.mutations,
-			actions: b.actions,
-			streams: b.streams,
+			queries: y.queries,
+			mutations: y.mutations,
+			actions: y.actions,
+			streams: y.streams,
 			log: $
 		});
-		let e = pe(b.serverOnlyLeaks, ce(process.env, "strict"), Nr, "`voltro serve`");
+		let e = he(y.serverOnlyLeaks, g(process.env, "strict"), Fr, "`voltro serve`");
 		if (e.action === "fail") throw i(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
-	let ge = y.filter((e) => Dn.test(e)), _e = ge.length > 0 ? await En(ge, $.child("webhooks")) : {
+	let ve = v.filter((e) => kn.test(e)), ye = ve.length > 0 ? await On(ve, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, be = wn(b.events), xe = _e.outgoing.length + _e.incoming.length + _e.providers.length + be.length === 0 ? void 0 : {
-		..._e,
-		outgoing: [..._e.outgoing, ...be]
-	}, Ce = cn({
+	}, Se = En(y.events), Ce = ye.outgoing.length + ye.incoming.length + ye.providers.length + Se.length === 0 ? void 0 : {
+		...ye,
+		outgoing: [...ye.outgoing, ...Se]
+	}, Te = un({
 		nodeEnv: process.env.NODE_ENV,
-		cdcDialect: fe,
+		cdcDialect: me,
 		declared: h?.schema
-	}), Oe = ln({
-		gates: Ce,
+	}), Ae = dn({
+		gates: Te,
 		runtime: {
-			traces: ae(),
-			undo: yi()
+			traces: se(),
+			undo: bi()
 		}
 	});
-	if (Oe !== void 0) throw i(`serve: ${Oe}`);
-	let je = sn({
-		mix: b.featureMix,
+	if (Ae !== void 0) throw i(`serve: ${Ae}`);
+	let Ne = ln({
+		mix: y.featureMix,
 		plugins: h?.plugins ?? [],
-		gates: Ce,
-		...fe ? { cdcDialect: fe } : {}
-	}), Ne = h?.analytics !== void 0 && h.analytics.kind !== "noop" && _ !== "memory" ? (await P(_)).makeSqlLayer(O()) : void 0, Pe = await yt({
+		gates: Te,
+		...me ? { cdcDialect: me } : {}
+	}), Fe = h?.analytics !== void 0 && h.analytics.kind !== "noop" && _ !== "memory" ? (await N(_)).makeSqlLayer(O()) : void 0, Ie = await bt({
 		spec: h?.analytics,
-		sqlLayer: Ne,
+		sqlLayer: Fe,
 		log: $
-	}), C = (() => {
-		let e = new Set(b.tables.map((e) => e.tableName)), t = [...b.tables];
-		for (let n of [...je, ...Pe.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+	}), S = (() => {
+		let e = new Set(y.tables.map((e) => e.tableName)), t = [...y.tables];
+		for (let n of [...Ne, ...Ie.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of C) sr(e);
+	for (let e of S) lr(e);
 	{
-		let e = Pr(bi(Ae(b), re(C)));
+		let e = Ir(xi(x(y), ae(S)));
 		e !== void 0 && $.warn(e);
 	}
-	let Ie = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (xo(Ie, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await P(_)).makeSqlLayer(O()), t = await W.runPromise(dr.SqlClient.pipe(W.flatMap((e) => mr(e, p)), W.provide(e), W.catchAll(() => W.succeed([]))));
+	let Re = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (So(Re, _, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await N(_)).makeSqlLayer(O()), t = await U.runPromise(pr.SqlClient.pipe(U.flatMap((e) => gr(e, m)), U.provide(e), U.catchAll(() => U.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await W.runPromise(dr.SqlClient.pipe(W.flatMap((e) => hr(e, C, {
-			appliedBy: `serve:${Ie}`,
+		let n = await U.runPromise(pr.SqlClient.pipe(U.flatMap((e) => _r(e, S, {
+			appliedBy: `serve:${Re}`,
 			environment: "prod",
 			dialectId: _
-		})), W.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(pr(n, _)), $.error(un({
-			gates: Ce,
+		})), U.provide(e)));
+		n.kind === "prod-mismatch" && ($.error(hr(n, _)), $.error(fn({
+			gates: Te,
 			nodeEnv: process.env.NODE_ENV,
-			cdcDialect: fe,
+			cdcDialect: me,
 			declared: h?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(pr(n, _));
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(hr(n, _));
 	}
-	await tn({
+	await rn({
 		dialectId: _,
-		tables: C,
-		mode: $t(h?.reactiveTriggers),
+		tables: S,
+		mode: tn(h?.reactiveTriggers),
 		lockSchema: O().schema,
-		makeLayer: async () => (await P(_)).makeSqlLayer(O()),
+		makeLayer: async () => (await N(_)).makeSqlLayer(O()),
 		log: {
 			info: (e, t) => $.info(e, t ?? {}),
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let Le = ti(C);
-	l.mark("discover");
-	let w = await ct(h, void 0);
+	let ze = ri(S);
+	u.mark("discover");
+	let w = await lt(h, void 0);
 	{
-		let e = await s(w);
+		let e = await c(w);
 		if (e !== void 0) throw i(`serve: ${e}`);
+		let t = await s(w, _, h);
+		t !== void 0 && $.warn(t);
 	}
-	let Xe = Ci(w, _);
-	for (let e of Gt({
+	let Ze = wi(w, _);
+	for (let e of qt({
 		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: Ri(h?.plugins ?? [])?.broadcast.crossReplica === !0,
-		tables: b.tables.map((e) => ({
+		crossReplicaBus: zi(h?.plugins ?? [])?.broadcast.crossReplica === !0,
+		tables: y.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
 		})),
-		querySources: b.queries.flatMap((e) => {
+		querySources: y.queries.flatMap((e) => {
 			let t = e.descriptor.source;
 			return t === void 0 ? [] : typeof t == "string" ? [t] : [...t];
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = Ve({
-			tables: nr().map((e) => ({ tableName: e.tableName })),
-			queries: b.queries.map((e) => ({
+		let e = C({
+			tables: ir().map((e) => ({ tableName: e.tableName })),
+			queries: y.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
-		}), t = It(e);
+		}), t = Rt(e);
 		t !== void 0 && $.warn(t);
 	}
 	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
-	let { service: Ze, invalidationBus: Qe, snapshotCache: $e, cache: tt, semantic: lt, evictSource: gt, backend: _t, stats: xt, dispose: wt } = await rt({
+	let { service: Qe, invalidationBus: $e, snapshotCache: et, cache: nt, semantic: ut, evictSource: gt, backend: _t, stats: St, dispose: Et } = await it({
 		env: process.env,
 		semantic: h?.cacheSemantic ?? !1
 	});
-	lt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${_t}` + (_t === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
-		if (W.runFork(Qe.publish(e.table)), gt !== void 0) {
+	ut !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${_t}` + (_t === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
+		if (U.runFork($e.publish(e.table)), gt !== void 0) {
 			let t = (e.new ?? e.old)?.id;
 			gt({
 				table: e.table,
@@ -1975,164 +1977,164 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		}
 	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
-	let { kv: Tt, service: Et } = await Wr({ store: w });
-	mt({
+	let { kv: Dt, service: Ot } = await Kr({ store: w });
+	ht({
 		log: $,
-		max: F(),
-		outOfPool: ye(_, (process.env.CDC ?? "1") !== "0"),
+		max: en(),
+		outOfPool: xe(_, (process.env.CDC ?? "1") !== "0"),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
-	}), l.mark("store");
-	let Nt = Cr({
+	}), u.mark("store");
+	let Pt = Tr({
 		store: w,
-		sink: Pe.sink,
+		sink: Ie.sink,
 		log: $
-	}), Pt = ot({
+	}), It = st({
 		store: w,
 		dialect: _,
 		log: { info: (e) => $.info(e) }
-	}), M = h?.plugins ?? [], Ft = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, zt, Ht;
-	_ !== "memory" && (zt = ur.make((await P(_)).makeSqlLayer(O()).pipe(G.provideMerge(zn({})))), Ht = await zt.runPromise(dr.SqlClient));
-	let Ut = [
+	}), j = h?.plugins ?? [], Lt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Vt, Wt;
+	_ !== "memory" && (Vt = fr.make((await N(_)).makeSqlLayer(O()).pipe(W.provideMerge(Vn({})))), Wt = await Vt.runPromise(pr.SqlClient));
+	let Gt = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(_) ? Br(w, Ft, $) : hi, Jt = Kt(h?.scheduling), xn = Kr({
-		maxIdleIntervalMs: Jt.pollCeilingMs,
-		coordinator: Ut,
-		replicaId: Ft,
+	].includes(_) ? Hr(w, Lt, $) : gi, Xt = Jt(h?.scheduling), Cn = Jr({
+		maxIdleIntervalMs: Xt.pollCeilingMs,
+		coordinator: Gt,
+		replicaId: Lt,
 		log: $
-	}), Tn = [], kn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, jn = Ri(h?.plugins ?? [])?.broadcast?.provider, Mn = Be(h?.plugins, h?.name ?? Pn(p));
+	}), Dn = [], jn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Nn = zi(h?.plugins ?? [])?.broadcast?.provider, Pn = He(h?.plugins, h?.name ?? In(m));
 	{
-		let e = nt(h?.plugins, h?.name ?? Pn(p));
+		let e = rt(h?.plugins, h?.name ?? In(m));
 		e !== void 0 && $.warn(e);
 	}
-	let Nn = Wt(h?.plugins, {
-		instanceId: kn,
-		namespace: Mn,
+	let Fn = Kt(h?.plugins, {
+		instanceId: jn,
+		namespace: Pn,
 		meta: { mode: "serve" },
 		logger: $
-	}), I = bn({
+	}), F = Sn({
 		mode: "serve",
 		dialect: _,
-		...jn === void 0 ? {} : { provider: jn },
+		...Nn === void 0 ? {} : { provider: Nn },
 		logger: $
 	});
-	oi(async () => {
-		await I.stop();
-	}), D(h?.reactive), Ct(h);
-	let In = {
-		...Ht ? { sql: Ht } : {},
-		instanceId: kn,
-		membership: Nn.membership,
-		...jn === void 0 ? {} : { broadcast: jn },
-		broadcastChannels: { presence: Li(Mn, "presence") },
+	J(async () => {
+		await F.stop();
+	}), vt(h?.reactive), Tt(h);
+	let Rn = {
+		...Wt ? { sql: Wt } : {},
+		instanceId: jn,
+		membership: Fn.membership,
+		...Nn === void 0 ? {} : { broadcast: Nn },
+		broadcastChannels: { presence: Ri(Pn, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = xn(e, t, n);
-			return Tn.push(r), r;
+			let r = Cn(e, t, n);
+			return Dn.push(r), r;
 		}
 	};
-	for (let e of M) e.bindDataStore?.(Xe, In);
-	dt({
+	for (let e of j) e.bindDataStore?.(Ze, Rn);
+	ft({
 		store: w,
-		...u(),
+		...d(),
 		log: $
 	});
-	let Bn = M.filter((e) => typeof e.onChangeEvent == "function");
-	if (Bn.length > 0) {
+	let Hn = j.filter((e) => typeof e.onChangeEvent == "function");
+	if (Hn.length > 0) {
 		let e = w.changeScope ?? "local";
 		w.onChange((t) => {
-			let n = oe(t, e);
-			for (let e of Bn) W.runFork(e.onChangeEvent(n).pipe(W.catchAllCause((t) => W.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: lr.pretty(t) })))));
+			let n = ce(t, e);
+			for (let e of Hn) U.runFork(e.onChangeEvent(n).pipe(U.catchAllCause((t) => U.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: dr.pretty(t) })))));
 		});
 	}
-	let Vn = y.filter((e) => fn.test(e));
-	Vn.length > 0 && (await ze(Vn, $), $.info(`queue: ${Vn.length} consumer file(s) loaded`));
-	let R = Fe({
-		plugins: M,
+	let Un = v.filter((e) => mn.test(e));
+	Un.length > 0 && (await Ve(Un, $), $.info(`queue: ${Un.length} consumer file(s) loaded`));
+	let L = Le({
+		plugins: j,
 		appName: h?.name ?? "voltro-api",
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
 	});
-	M.length && await R.activate(), l.mark("plugins");
-	let Hn = await R.gatherObservability(), Un = L({ scope: "voltro:broadcast" }), Wn = {
+	j.length && await L.activate(), u.mark("plugins");
+	let Wn = await L.gatherObservability(), Gn = I({ scope: "voltro:broadcast" }), Kn = {
 		info: (e, t) => {
-			Un.info(e, t);
+			Gn.info(e, t);
 		},
 		warn: (e, t) => {
-			Un.warn(e, t);
+			Gn.warn(e, t);
 		},
 		debug: () => {}
-	}, z, Gn = await E(w, h, _, Mn, Wn, (e, t) => {
-		z?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), Kn = h?.apiKeys, qn = (typeof Kn == "object" ? Kn.prefix : void 0) ?? "voltro_", B = Kn ? Mr(w) : void 0, V = B ? Hr({ flush: Ur(B) }) : void 0;
-	V && oi(() => V.shutdown());
-	let Jn = B ? Vr(B, {
-		prefix: qn,
-		...V ? { usage: V } : {}
-	}) : void 0, Yn = Jn ? [Fr(Jn, { prefix: qn })] : [], Xn = Dt([...h?.auth?.strategies ?? [], ...Yn], Gi(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth, () => Xe), Zn = [...h?.restRoutes ?? [], ...Jn ? Sr(Jn, (typeof Kn == "object" ? Kn.managementPath : void 0) ?? "/v1/api-keys") : []], Qn = He(h?.idempotency, w), $n = M.map((e) => e.services).filter((e) => e !== void 0), er = G.mergeAll(qe({
-		analyticsLayer: Pe.layer,
-		cacheService: Ze,
-		kvService: Et,
-		...lt === void 0 ? {} : { semanticCache: lt },
-		pluginServices: $n,
+	}, R, qn = await D(w, h, _, Pn, Kn, (e, t) => {
+		R?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
+	}), Jn = h?.apiKeys, Yn = (typeof Jn == "object" ? Jn.prefix : void 0) ?? "voltro_", z = Jn ? Pr(w) : void 0, B = z ? Wr({ flush: Gr(z) }) : void 0;
+	B && J(() => B.shutdown());
+	let Xn = z ? Ur(z, {
+		prefix: Yn,
+		...B ? { usage: B } : {}
+	}) : void 0, Zn = Xn ? [Lr(Xn, { prefix: Yn })] : [], Qn = kt([...h?.auth?.strategies ?? [], ...Zn], Ki(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth, () => Ze), $n = [...h?.restRoutes ?? [], ...Xn ? wr(Xn, (typeof Jn == "object" ? Jn.managementPath : void 0) ?? "/v1/api-keys") : []], er = Ue(h?.idempotency, w), tr = j.map((e) => e.services).filter((e) => e !== void 0), nr = W.mergeAll(Je({
+		analyticsLayer: Ie.layer,
+		cacheService: Qe,
+		kvService: Ot,
+		...ut === void 0 ? {} : { semanticCache: ut },
+		pluginServices: tr,
 		userLayers: h?.layers ?? []
-	}), At(h?.http ?? {})), H = await k({
-		files: y,
+	}), Mt(h?.http ?? {})), V = await Ct({
+		files: v,
 		store: w,
 		log: $,
 		seedPolicy: "report",
-		seedPattern: dn,
-		loadSeedFiles: en,
-		startupPattern: _n,
+		seedPattern: pn,
+		loadSeedFiles: nn,
+		startupPattern: yn,
 		loadStartupFiles: a,
 		runStartups: o,
-		emailPattern: jt,
-		loadEmailFiles: Je,
-		registerEmailTemplates: Ki
+		emailPattern: Nt,
+		loadEmailFiles: Ye,
+		registerEmailTemplates: qi
 	});
-	(H.startupCount > 0 || H.emailCount > 0) && $.info("boot lifecycle", {
-		startups: H.startupCount,
-		emailTemplates: H.emailCount
-	}), H.startups !== void 0 && oi(async () => {
-		await H.startups.stop();
-	}), x({
-		demands: N(he),
-		isRegistered: (e) => Ir(e) !== void 0
+	(V.startupCount > 0 || V.emailCount > 0) && $.info("boot lifecycle", {
+		startups: V.startupCount,
+		emailTemplates: V.emailCount
+	}), V.startups !== void 0 && J(async () => {
+		await V.startups.stop();
+	}), De({
+		demands: Yt(_e),
+		isRegistered: (e) => Rr(e) !== void 0
 	});
-	let tr = ut({
-		schedules: Ue({
-			schedules: b.schedules,
-			seeds: H.seeds,
+	let rr = dt({
+		schedules: We({
+			schedules: y.schedules,
+			seeds: V.seeds,
 			store: w,
 			log: $.child("seeds")
 		}),
-		workflows: b.workflows ?? [],
+		workflows: y.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), rr = h?.scheduling ?? {}, ar = rr.trigger ?? "self", or = /* @__PURE__ */ new Set([
+	}), ar = h?.scheduling ?? {}, sr = ar.trigger ?? "self", cr = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), U = rr.coordination ?? (or.has(_) ? "advisoryLock" : "single"), cr = U === "cluster" && or.has(_), gr = cr ? "cluster" : U === "advisoryLock" && or.has(_) ? "advisoryLock" : "single";
-	U === "cluster" && !cr && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), U === "advisoryLock" && !or.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let _r, vr = b.workflows.length > 0 || b.workflowWorkers.length > 0 || b.eventTriggers.length > 0 || (xe?.outgoing.length ?? 0) > 0 || cr, yr;
-	if (vr) {
+	]), H = ar.coordination ?? (cr.has(_) ? "advisoryLock" : "single"), ur = H === "cluster" && cr.has(_), vr = ur ? "cluster" : H === "advisoryLock" && cr.has(_) ? "advisoryLock" : "single";
+	H === "cluster" && !ur && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), H === "advisoryLock" && !cr.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let yr, br = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (Ce?.outgoing.length ?? 0) > 0 || ur, xr;
+	if (br) {
 		if (_ === "mssql") {
-			let e = await Cn(process.cwd());
+			let e = await Tn(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = cr ? tr.filter((e) => (e.trigger ?? ar) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = ur ? rr.filter((e) => (e.trigger ?? sr) === "self").map((e) => t({
 			name: e.name,
-			cron: jr(e),
+			cron: Nr(e),
 			execute: async () => {
-				await _r?.fireFromCluster(e.name);
+				await yr?.fireFromCluster(e.name);
 			}
 		})) : [];
-		yr = _ === "memory" ? e.layerMemory : await (async () => {
-			let e = await P(_), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+		xr = _ === "memory" ? e.layerMemory : await (async () => {
+			let e = await N(_), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
 				sqlClientLayer: e.makeSqlLayer(O()),
 				runnerStorage: t,
@@ -2143,142 +2145,142 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		})();
 	}
-	let br = v(M, Sn()), xr = y.filter((e) => /\.subscribe\.tsx?$/.test(e)), wr = xr.length > 0 ? await A(xr, $) : [], Tr = y.filter((e) => /\.reaction\.tsx?$/.test(e)), Er = Tr.length > 0 ? await Se(Tr, $) : [], Dr = y.filter((e) => pn.test(e)), K = Dr.length > 0 ? await we(Dr, $) : [], Or = y.filter((e) => /\.aggregate\.tsx?$/.test(e)), q = Or.length > 0 ? await ht(Or, $) : [];
+	let Sr = fe(j, wn()), Cr = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), Er = Cr.length > 0 ? await A(Cr, $) : [], Dr = v.filter((e) => /\.reaction\.tsx?$/.test(e)), Or = Dr.length > 0 ? await we(Dr, $) : [], kr = v.filter((e) => hn.test(e)), G = kr.length > 0 ? await Ee(kr, $) : [], Ar = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), K = Ar.length > 0 ? await E(Ar, $) : [];
 	{
-		let e = Pr(bi(Ae({ aggregates: q.map((e) => e.definition) }), re(C)));
+		let e = Ir(xi(x({ aggregates: K.map((e) => e.definition) }), ae(S)));
 		e !== void 0 && $.warn(e);
 	}
-	let kr = f();
-	if (q.length > 0 && _ !== "memory") try {
-		let e = (await P(_)).makeSqlLayer(O());
-		kr = pt(e);
+	let jr = ee();
+	if (K.length > 0 && _ !== "memory") try {
+		let e = (await N(_)).makeSqlLayer(O());
+		jr = T(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Ar = _ === "memory" ? hi : Br(w, `aggregate@${process.pid}`, $), Lr = y.filter((e) => mn.test(e)), Rr = Lr.length > 0 ? await S(Lr, $) : [], zr = y.filter((e) => hn.test(e)), Gr = zr.length > 0 ? await Bt(zr, $) : [], qr = y.filter((e) => gn.test(e)), Jr = qr.length > 0 ? await ie(qr, $) : [], Yr = [], Xr = [], Zr = y.filter((e) => nn.test(e));
-	if (Zr.length > 0) {
-		let e = $.child("agent"), t = y.filter((e) => on.test(e));
-		t.length > 0 && await rn(t, e);
-		let n = await an(Zr, e);
-		for (let e of n.agents) for (let t of bt(e)) (t.kind === "action" ? Yr : Xr).push({
+	let Mr = _ === "memory" ? gi : Hr(w, `aggregate@${process.pid}`, $), zr = v.filter((e) => gn.test(e)), Br = zr.length > 0 ? await Me(zr, $) : [], Vr = v.filter((e) => _n.test(e)), qr = Vr.length > 0 ? await Ht(Vr, $) : [], Yr = v.filter((e) => vn.test(e)), Xr = Yr.length > 0 ? await oe(Yr, $) : [], Zr = [], Qr = [], $r = v.filter((e) => an.test(e));
+	if ($r.length > 0) {
+		let e = $.child("agent"), t = v.filter((e) => cn.test(e));
+		t.length > 0 && await on(t, e);
+		let n = await sn($r, e);
+		for (let e of n.agents) for (let t of xt(e)) (t.kind === "action" ? Zr : Qr).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
 		});
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
-	l.mark("workflow");
-	let J = () => {
+	u.mark("workflow");
+	let q = () => {
 		let e = Y.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, Qr = ir({
+	}, ei = or({
 		dialect: _,
 		...O()
-	}), $r = _ === "memory" ? void 0 : (await P(_)).makeSqlLayer(O()), ei = async () => kt({
-		sqlLayer: $r,
-		declared: C,
+	}), ti = _ === "memory" ? void 0 : (await N(_)).makeSqlLayer(O()), ni = async () => jt({
+		sqlLayer: ti,
+		declared: S,
 		log: $
-	}), ni = {
+	}), ii = {
 		kind: "api",
 		meta: {
 			name: h?.name ?? "voltro-api",
-			voltroVersion: Mt,
-			port: le,
+			voltroVersion: k,
+			port: ue,
 			mode: "start",
 			store: _,
-			cdc: de ? "on" : "off",
-			...Qr === void 0 ? {} : { databaseId: Qr }
+			cdc: pe ? "on" : "off",
+			...ei === void 0 ? {} : { databaseId: ei }
 		},
-		rpc: De(b, p),
-		workflows: ne(b, p),
-		migrations: ei,
+		rpc: ke(y, m),
+		workflows: p(y, m),
+		migrations: ni,
 		events: () => Y.eventsSnapshot(),
 		agentTools: () => Y.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
-			accessGate: he,
+			accessGate: _e,
 			config: h,
-			serverOnlyLeaks: b.serverOnlyLeaks,
-			migrations: ei
+			serverOnlyLeaks: y.serverOnlyLeaks,
+			migrations: ni
 		}),
 		members: () => Y.membersSnapshot(),
 		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!_r) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await _r.fireNow(e, t) ?? null };
+			if (!yr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await yr.fireNow(e, t) ?? null };
 		},
-		inspectBackfillSchedule: m({
-			getHandle: () => _r,
-			getSchedules: () => tr
+		inspectBackfillSchedule: re({
+			getHandle: () => yr,
+			getSchedules: () => rr
 		}),
-		...xe === void 0 ? {} : { webhooks: () => T({
+		...Ce === void 0 ? {} : { webhooks: () => mt({
 			store: w,
-			discoveredWebhooks: xe
+			discoveredWebhooks: Ce
 		}) },
 		plugins: () => ({
-			plugins: R.snapshot(),
+			plugins: L.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => Zt(h?.name ?? Pn(p), {
-			...h?.env !== void 0 && Ni(h.env) ? { contract: h.env } : {},
+		env: () => $t(h?.name ?? In(m), {
+			...h?.env !== void 0 && Pi(h.env) ? { contract: h.env } : {},
 			plugins: h?.plugins ?? []
 		}),
-		dataCache: () => Vt({
-			stats: xt,
+		dataCache: () => Ut({
+			stats: St,
 			backendKind: _t
 		}),
-		subscriptions: () => Ee(() => z),
-		inspectTables: () => Te(C),
-		inspectRows: qt({
+		subscriptions: () => Oe(() => R),
+		inspectTables: () => b(S),
+		inspectRows: M({
 			store: w,
-			tables: C,
+			tables: S,
 			mask: !0
 		}),
 		metrics: (e) => Y.rpcMetrics().snapshot(e),
-		cluster: () => We({
+		cluster: () => Ge({
 			store: w,
 			dialect: _,
-			useClusterCron: cr,
-			scheduleCoordChoice: U
+			useClusterCron: ur,
+			scheduleCoordChoice: H
 		}),
-		inspectSchedules: () => g({
-			schedules: tr,
-			defaultTrigger: ar,
-			coordination: gr
+		inspectSchedules: () => ie({
+			schedules: rr,
+			defaultTrigger: sr,
+			coordination: vr
 		}),
-		inspectScheduleRuns: (e) => ke(w, e),
-		...Rt(w, {
-			controls: it(b.workflows ?? []),
-			active: (b.workflows?.length ?? 0) > 0,
+		inspectScheduleRuns: (e) => je(w, e),
+		...Bt(w, {
+			controls: at(y.workflows ?? []),
+			active: (y.workflows?.length ?? 0) > 0,
 			cancellation: () => Y.flowControlHealth()
 		}),
-		webhookActions: te(() => Y.webhooksService()),
-		inspectStartWorkflow: (e) => J().inspectStartWorkflow(e),
-		inspectCancelWorkflowRun: (e) => J().inspectCancelWorkflowRun(e),
-		inspectSuspendWorkflowRun: (e) => J().inspectSuspendWorkflowRun(e),
-		inspectResumeWorkflowRun: (e) => J().inspectResumeWorkflowRun(e),
-		inspectDiscardWorkflowRun: (e) => J().inspectDiscardWorkflowRun(e),
-		inspectRetryWorkflowRun: (e) => J().inspectRetryWorkflowRun(e),
-		inspectSignalWorkflowRun: (e) => J().inspectSignalWorkflowRun(e),
-		inspectUpdateWorkflowRun: (e) => J().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => vt({
+		webhookActions: ne(() => Y.webhooksService()),
+		inspectStartWorkflow: (e) => q().inspectStartWorkflow(e),
+		inspectCancelWorkflowRun: (e) => q().inspectCancelWorkflowRun(e),
+		inspectSuspendWorkflowRun: (e) => q().inspectSuspendWorkflowRun(e),
+		inspectResumeWorkflowRun: (e) => q().inspectResumeWorkflowRun(e),
+		inspectDiscardWorkflowRun: (e) => q().inspectDiscardWorkflowRun(e),
+		inspectRetryWorkflowRun: (e) => q().inspectRetryWorkflowRun(e),
+		inspectSignalWorkflowRun: (e) => q().inspectSignalWorkflowRun(e),
+		inspectUpdateWorkflowRun: (e) => q().inspectUpdateWorkflowRun(e),
+		inspectInferences: (e) => yt({
 			store: w,
-			active: (b.workflows?.length ?? 0) > 0,
+			active: (y.workflows?.length ?? 0) > 0,
 			dispatcher: () => Y.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...st({
+		...ct({
 			store: w,
 			cancelRun: async (e) => await Y.runCanceller()?.(e) ?? !1,
-			retryRun: async (e) => J().inspectRetryWorkflowRun({ runId: e }),
+			retryRun: async (e) => q().inspectRetryWorkflowRun({ runId: e }),
 			redriveRun: async (e) => Y.redriveWorkflowRun({ runId: e }),
 			log: $
 		}),
 		inspectRedriveWorkflowRun: (e) => Y.redriveWorkflowRun(e),
 		inspectResumeWorkflowRunFromStep: (e) => Y.resumeWorkflowRunFromStep(e)
-	}, ri = (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace", ii = ri && _ !== "memory" ? await (async () => {
-		let e = await P(_);
-		return et({
-			tables: C,
+	}, ai = (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace", oi = ai && _ !== "memory" ? await (async () => {
+		let e = await N(_);
+		return tt({
+			tables: S,
 			sqlLayer: e.makeSqlLayer(O()),
 			dialect: _,
 			options: { retryFilter: e.retryFilter },
@@ -2287,115 +2289,115 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				error: (e, t, n) => $.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, ai = await at({
+	})() : void 0, si = await ot({
 		input: h?.tenancy?.residency,
-		namespaceIsolationOn: ri,
-		makeStoreForUrl: (e, t) => ct(h, void 0, Qt(O(), t)),
+		namespaceIsolationOn: ai,
+		makeStoreForUrl: (e, t) => lt(h, void 0, P(O(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	ai !== void 0 && oi(async () => {
-		await ai.close();
+	si !== void 0 && J(async () => {
+		await si.close();
 	});
-	let Y = await bo({
-		bootTiming: l,
-		broadcastNamespace: Mn,
+	let Y = await xo({
+		bootTiming: u,
+		broadcastNamespace: Pn,
 		scheduling: (() => {
-			let e = Jt;
+			let e = Xt;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
 				cancelSweepMs: e.cancelSweepMs,
 				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: Lt({
+				disarmWhenIdle: zt({
 					changeScope: w.changeScope,
-					broadcastAttached: Gn !== void 0
+					broadcastAttached: qn !== void 0
 				})
 			};
 		})(),
 		...h?.workflows?.staleness === void 0 ? {} : { workflowStaleness: h.workflows.staleness },
 		...h?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: h.workflows.suspendSignalHintMs },
-		workflowRecording: Ge(h?.workflows?.recording),
+		workflowRecording: Ke(h?.workflows?.recording),
 		membership: {
-			...Nn,
-			instanceId: kn
+			...Fn,
+			instanceId: jn
 		},
 		security: {
-			defaultDeny: Me(h),
-			...ue(h)
+			defaultDeny: Pe(h),
+			...de(h)
 		},
-		approvals: { defaultExpiryMs: Re(h) },
+		approvals: { defaultExpiryMs: Be(h) },
 		...h?.plugins === void 0 ? {} : { plugins: h.plugins },
-		...Qn ? { idempotency: Qn } : {},
-		restRoutes: Zn,
+		...er ? { idempotency: er } : {},
+		restRoutes: $n,
 		...h?.grpc === void 0 ? {} : { grpc: {
 			config: h.grpc,
-			root: p
+			root: m
 		} },
-		appProcedures: he,
+		appProcedures: _e,
 		discovered: {
-			wsGateways: b.wsGateways,
-			queries: [...b.queries, ...Xr],
-			mutations: b.mutations,
-			actions: [...b.actions, ...Yr],
-			streams: b.streams,
-			events: b.events,
-			workflows: b.workflows,
-			workflowWorkers: b.workflowWorkers,
-			eventTriggers: b.eventTriggers,
-			schedules: tr,
-			subscribers: wr,
-			outboxHandlers: K,
-			connections: b.connections,
-			reactions: Er,
-			aggregates: q,
-			expectations: Rr,
-			budgets: Gr,
-			experiments: Jr,
-			...xe === void 0 ? {} : { webhooks: xe }
+			wsGateways: y.wsGateways,
+			queries: [...y.queries, ...Qr],
+			mutations: y.mutations,
+			actions: [...y.actions, ...Zr],
+			streams: y.streams,
+			events: y.events,
+			workflows: y.workflows,
+			workflowWorkers: y.workflowWorkers,
+			eventTriggers: y.eventTriggers,
+			schedules: rr,
+			subscribers: Er,
+			outboxHandlers: G,
+			connections: y.connections,
+			reactions: Or,
+			aggregates: K,
+			expectations: Br,
+			budgets: qr,
+			experiments: Xr,
+			...Ce === void 0 ? {} : { webhooks: Ce }
 		},
 		log: $,
-		analytics: Pe.sink,
-		aggregateStorage: kr,
-		aggregateCoordinator: Ar,
+		analytics: Ie.sink,
+		aggregateStorage: jr,
+		aggregateCoordinator: Mr,
 		store: w,
-		kv: Tt,
-		cache: tt,
-		snapshotCache: $e,
+		kv: Dt,
+		cache: nt,
+		snapshotCache: et,
 		...h?.reactive === void 0 ? {} : { reactive: h.reactive },
-		schemaRegistry: Le,
-		tenantScopedTables: b.tenantScopedTables,
-		softDeleteScopedTables: b.softDeleteScopedTables,
-		dataTransferSnapshot: fr(C, _),
+		schemaRegistry: ze,
+		tenantScopedTables: y.tenantScopedTables,
+		softDeleteScopedTables: y.softDeleteScopedTables,
+		dataTransferSnapshot: mr(S, _),
 		dataTransferDialect: _,
-		...ii === void 0 ? {} : { ensureTenantProvisioned: ii.ensure },
-		...ai === void 0 ? {} : { resolveResidentStore: ai.resolveStore },
+		...oi === void 0 ? {} : { ensureTenantProvisioned: oi.ensure },
+		...si === void 0 ? {} : { resolveResidentStore: si.resolveStore },
 		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Xn({
+		resolveSubject: (e, t) => Qn({
 			headers: e,
 			clientId: t
 		}),
 		...h?.auth === void 0 ? {} : { authority: h.auth },
 		...h?.agents === void 0 ? {} : { agents: h.agents },
-		httpRoutes: M.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => Xe,
-		...er ? { baseLayer: er } : {},
-		...yr === void 0 ? {} : { workflowEngineLayer: yr },
-		scheduleDefaultTrigger: ar,
-		scheduleCoordination: gr,
-		scheduleArmSelf: !cr,
+		httpRoutes: j.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => Ze,
+		...nr ? { baseLayer: nr } : {},
+		...xr === void 0 ? {} : { workflowEngineLayer: xr },
+		scheduleDefaultTrigger: sr,
+		scheduleCoordination: vr,
+		scheduleArmSelf: !ur,
 		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
 		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...br === void 0 ? {} : { scheduleFireInterceptor: br },
+		...Sr === void 0 ? {} : { scheduleFireInterceptor: Sr },
 		onSchedulerReady: (e) => {
-			_r = e;
+			yr = e;
 		},
-		inspectRoute: { handle: async (e, t, n, r) => await ve(e, ni, t, {
+		inspectRoute: { handle: async (e, t, n, r) => await be(e, ii, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await yn(e, ni, t, { method: n }) : null) ?? vn(e, ni, t, {
+		}) || ((n === "GET" ? await xn(e, ii, t, { method: n }) : null) ?? bn(e, ii, t, {
 			method: n,
 			...r === void 0 ? {} : { body: r }
 		}) ?? {
@@ -2404,40 +2406,40 @@ var ia = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
 		...h?.name === void 0 ? {} : { appName: h.name },
-		observability: Hn,
-		port: le,
+		observability: Wn,
+		port: ue,
 		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {},
 		...h?.http === void 0 ? {} : { http: h.http }
 	});
-	return z = Y.dispatcher, ft(d([
-		b.queries,
-		b.mutations,
-		b.actions,
-		b.streams
+	return R = Y.dispatcher, pt(f([
+		y.queries,
+		y.mutations,
+		y.actions,
+		y.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${le}`, {
+	}), $.info(`API listening on :${ue}`, {
 		dialect: _,
-		queries: b.queries.length,
-		mutations: b.mutations.length,
-		actions: b.actions.length,
-		streams: b.streams.length,
-		workflows: b.workflows.length,
-		workflowWorkers: b.workflowWorkers.length,
-		schedules: tr.length,
-		scheduleCoordination: gr
-	}), l.finish($), oi(async () => {
-		for (let e of Tn) e.stop();
-		Pt.stop();
+		queries: y.queries.length,
+		mutations: y.mutations.length,
+		actions: y.actions.length,
+		streams: y.streams.length,
+		workflows: y.workflows.length,
+		workflowWorkers: y.workflowWorkers.length,
+		schedules: rr.length,
+		scheduleCoordination: vr
+	}), u.finish($), J(async () => {
+		for (let e of Dn) e.stop();
+		It.stop();
 		try {
-			await Y.close(), wt(), zt?.dispose(), await R.deactivate(), await Gn?.close(), await Ot({
-				mirror: Nt,
+			await Y.close(), Et(), Vt?.dispose(), await L.deactivate(), await qn?.close(), await At({
+				mirror: Pt,
 				log: $
-			}), await Pe.dispose(), await w.close?.();
+			}), await Ie.dispose(), await w.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { Co as n, xo as r, wo as t };
+export { wo as n, So as r, To as t };