@voltro/cli 0.55.0 → 0.56.0

package/dist/{serveCommand-C7IrCD58.js → serveCommand-DIJ3ma76.js}

@@ -4,50 +4,51 @@ import { r as n, t as r } from "./appModuleLoader-C9r9mxZt.js";
 import { t as i } from "./bootRefusal-pgvDxlrU.js";
 import { n as a, r as o } from "./startupRunner-CEqQq7ax.js";
 import { n as s, t as c } from "./interruptedReplace-CwnkBb2X.js";
-import { $ as l, $t as u, A as d, An as f, At as ee, Bt as te, C as ne, Cn as p, Ct as m, D as re, Dt as h, E as ie, En as ae, Et as oe, F as se, Ft as ce, G as le, Gt as g, H as ue, I as _, It as de, J as fe, Jt as pe, K as me, Kt as he, L as ge, Lt as v, M as y, Mt as _e, N as ve, Nt as ye, O as be, On as xe, Ot as Se, P as Ce, Pt as we, Q as Te, Qt as Ee, R as b, Rt as De, S as Oe, Sn as ke, St as Ae, T as je, Tn as x, Tt as Me, U as Ne, Ut as Pe, Vt as Fe, W as Ie, X as Le, Xt as S, Y as Re, Yt as ze, Z as Be, Zt as Ve, _ as He, _n as C, _t as w, an as Ue, at as We, b as Ge, bt as Ke, c as qe, cn as Je, ct as Ye, d as Xe, dn as Ze, dt as Qe, en as $e, et, fn as tt, ft as nt, g as rt, gn as it, gt as at, h as ot, hn as st, ht as ct, i as lt, in as ut, it as dt, j as ft, jn as pt, jt as T, k as mt, kn as ht, kt as E, ln as gt, lt as _t, m as D, mn as vt, mt as yt, nn as bt, nt as xt, o as O, on as St, ot as Ct, p as wt, pn as Tt, pt as Et, q as Dt, qt as Ot, r as kt, rn as At, rt as jt, sn as Mt, st as Nt, t as k, tn as A, tt as Pt, u as Ft, un as It, ut as j, v as Lt, vn as Rt, vt as zt, w as Bt, wn as Vt, wt as Ht, x as Ut, xn as Wt, xt as Gt, y as Kt, yn as qt, yt as Jt, z as M, zt as Yt } from "./dev-Ca_A_S9v.js";
-import { n as Xt } from "./cliArgs-D4p8n7EE.js";
-import { r as Zt } from "./appPort-B_HpJ_ck.js";
-import { Ut as Qt, Vt as $t } from "./webDev-B7vNj4Bq.js";
-import { r as N } from "./dialectDriver-czCHYpeH.js";
-import { i as P, n as en } from "./connectionConfig-Bk9IC7D0.js";
-import { c as tn, n as nn, o as rn } from "./seedRunner-Dgsiwk_e.js";
-import { d as an, h as on, m as sn, p as cn, r as ln } from "./frameworkTableAssembly-Do-cf6RJ.js";
-import { n as un, r as dn, t as fn } from "./declaredSchemaGates-BlcwObhb.js";
-import { C as pn, a as mn, h as hn, l as gn, n as _n, u as vn, w as yn } from "./fileConventions-l-RIXbx8.js";
-import { h as bn, o as xn } from "./inspect-DCqILJ1G.js";
-import { i as Sn, n as Cn, t as wn } from "./inspectMetrics-CGF94puw.js";
-import { n as Tn } from "./mssqlClusterPatch-_4cE_nun.js";
-import { i as En, n as Dn, r as On, t as kn } from "./webhookDiscovery-CphsQe59.js";
-import { r as An, u as jn } from "./apiBuild-CMvLJM_K.js";
-import { t as Mn } from "./bootTiming-BdyP9nYw.js";
-import { a as Nn, o as Pn, t as Fn } from "./dataProfile-Du3ztYxv.js";
-import F, { basename as In, join as Ln } from "node:path";
-import { createWriteStream as Rn, existsSync as zn } from "node:fs";
-import { pathToFileURL as Bn } from "node:url";
-import { LoggerLayer as Vn, createLogger as I } from "@voltro/logger";
-import { AuthMiddleware as Hn, ConnectionInfoMiddleware as Un, actionToRpc as L, anonymousSubject as Wn, isWireReachable as Gn, mutationToRpc as Kn, queryToRpc as R, streamToRpc as qn, wireErrorUnion as Jn, workflowCancelDescriptor as Yn, workflowDomainEventsQueryDescriptor as z, workflowEventDeliveriesQueryDescriptor as B, workflowResumeDescriptor as Xn, workflowRunEventsQueryDescriptor as Zn, workflowRunQueryDescriptor as Qn, workflowRunStepsQueryDescriptor as $n, workflowRunsQueryDescriptor as er, workflowSignalDescriptor as tr, workflowUpdateDescriptor as nr } from "@voltro/protocol";
-import { DATA_TRANSFERS_TABLE as V, _voltroDataTransfersTable as rr, allRegisteredTables as ir, and as ar, connectionIdentity as or, derivedRowId as sr, describeTransferRun as cr, ensureTableRegistered as lr, eq as H, or as ur } from "@voltro/database";
-import { Cause as dr, Effect as U, Layer as W, ManagedRuntime as fr } from "effect";
-import { SqlClient as pr } from "@effect/sql";
-import { declaredSnapshot as mr, describeOutcome as hr, pendingFileMigrationIds as gr, runPlannedMigrations as _r } from "@voltro/database/sql";
-import { AggregateRegistry as vr, CostRegistry as yr, DORMANCY_WAKEUP_TENANT as br, Dispatcher as xr, ExpectationRegistry as Sr, ExperimentRegistry as Cr, apiKeyManagementRoutes as wr, attachAnalyticsMirror as Tr, attachExpectations as Er, attachExperiments as Dr, attachFinops as Or, awaitServerListening as kr, bindMutation as G, bindStream as Ar, bindSubscription as K, buildTracingLayer as jr, cancelWakeup as Mr, compileCron as Nr, dataStoreApiKeyStore as Pr, formatServerOnlyLeaks as Fr, formatUnresolvedSources as Ir, frameworkApiKeyStrategy as Lr, getResourcePolicy as Rr, installPolicyGuardResolver as zr, loadResourceTuples as Br, makeActionRunner as Vr, makeAdvisoryLockCoordinator as Hr, makeApiKeyService as Ur, makeApiKeyUsageBuffer as Wr, makeApiKeyUsageFlusher as Gr, makeAsyncKv as Kr, makeAuthMiddlewareLayers as qr, makeCoordinatedScheduler as Jr, makeEffectStoreLayer as Yr, makeLazyWorkflowFacade as Xr, makeMutationOutputCodec as Zr, makeMutationRunner as Qr, makeOneShotQueryRunner as $r, makeQueryDescriptorProducer as q, makeQueryFinalizer as ei, makeQueryReauthorizer as ti, makeQuerySubscriber as ni, makeSchemaRegistry as ri, makeWorkflowFacade as ii, makeWorkflowFacadeWithCallerContext as ai, makeWorkflowLayers as oi, noopKv as si, onProcessShutdown as J, recordSubscriptionDelivery as Y, recordWorkflowRun as ci, registerDefaultTupleSource as li, registerWakeup as ui, resolveSecretsBackend as di, runProvidedEffect as fi, setSecretsBackend as pi, setSystemStoreHandle as mi, shutdownGraceMsFromEnv as hi, singleCoordinator as gi, startRpcServer as _i, startScheduler as vi, stripForbiddenForWire as yi, undoCaptureEnabled as bi, unresolvedSources as xi, withScopedRequest as Si, workflowToRpc as Ci, wrapStoreWithBootCodec as wi } from "@voltro/runtime";
-import Ti, { tmpdir as Ei } from "node:os";
-import { RpcGroup as Di } from "@effect/rpc";
-import { appStorageProvider as Oi, durabilityNotice as ki, fromNodeReadable as Ai, getObjectStream as ji, putObjectStream as Mi, toNodeReadable as Ni } from "@voltro/plugin-storage";
-import { isEnvContract as Pi } from "@voltro/env";
-import { assertProductionSessionSecret as Fi } from "@voltro/protocol/session";
+import { $ as l, $t as u, A as d, At as f, Bt as ee, C as te, Ct as p, D as ne, Dn as m, Dt as re, E as ie, En as h, Et as ae, F as oe, Fn as se, Ft as ce, G as le, Gt as ue, H as g, I as de, In as _, It as fe, J as pe, Jt as me, K as he, Kt as ge, L as v, Lt as y, M as _e, Mn as ve, Mt as ye, N as be, Nn as xe, Nt as Se, O as Ce, On as we, Ot as Te, P as Ee, Pn as b, Pt as De, Q as Oe, Qt as ke, R as Ae, Rt as x, S as je, Sn as Me, St as Ne, T as Pe, Tn as Fe, Tt as Ie, U as Le, Ut as Re, Vt as ze, W as Be, X as S, Xt as C, Y as Ve, Yt as He, Z as Ue, Zt as We, _ as Ge, _n as Ke, _t as w, an as qe, at as Je, b as Ye, bn as Xe, bt as Ze, c as Qe, cn as $e, ct as et, d as tt, dn as nt, dt as rt, en as it, et as at, fn as ot, ft as st, g as ct, gn as lt, gt as ut, h as dt, hn as ft, ht as pt, i as T, in as mt, it as ht, j as E, jn as D, jt as gt, k as _t, kn as vt, kt as yt, ln as bt, lt as O, m as xt, mn as St, mt as Ct, nn as wt, nt as Tt, o as k, on as Et, ot as Dt, p as Ot, pn as kt, pt as At, q as jt, qt as Mt, r as Nt, rn as Pt, rt as Ft, sn as It, st as A, t as j, tn as Lt, tt as Rt, u as zt, un as Bt, ut as M, v as Vt, vn as Ht, vt as Ut, w as Wt, wn as Gt, wt as Kt, x as qt, xn as N, xt as Jt, y as Yt, yn as Xt, yt as Zt, z as Qt, zt as $t } from "./dev-Dw263KPu.js";
+import { Kt as en, Vt as tn, zt as P } from "./webDev-C53hJdcL.js";
+import { g as nn, s as rn } from "./inspect-CNYvNXPU.js";
+import { n as F } from "./cliArgs-D4p8n7EE.js";
+import { r as an } from "./appPort-B_HpJ_ck.js";
+import { r as on, u as sn } from "./apiBuild-Bdaetr37.js";
+import { r as I } from "./dialectDriver-czCHYpeH.js";
+import { i as cn, n as ln } from "./connectionConfig-Bk9IC7D0.js";
+import { c as un, n as dn, o as fn } from "./seedRunner-DISBKow-.js";
+import { d as pn, h as mn, m as hn, p as gn, r as _n } from "./frameworkTableAssembly-DNOFXfEQ.js";
+import { n as vn, r as yn, t as bn } from "./declaredSchemaGates-BlcwObhb.js";
+import { C as xn, a as Sn, h as Cn, l as wn, n as Tn, u as En, w as Dn } from "./fileConventions-l-RIXbx8.js";
+import { i as On, n as kn, t as An } from "./inspectMetrics-BY0Sjb2F.js";
+import { n as jn } from "./mssqlClusterPatch-_4cE_nun.js";
+import { i as Mn, n as Nn, r as Pn, t as Fn } from "./webhookDiscovery-CphsQe59.js";
+import { t as In } from "./bootTiming-BdyP9nYw.js";
+import { a as Ln, o as Rn, t as zn } from "./dataProfile-Du3ztYxv.js";
+import L, { basename as Bn, join as Vn } from "node:path";
+import { createWriteStream as Hn, existsSync as Un } from "node:fs";
+import { pathToFileURL as Wn } from "node:url";
+import { LoggerLayer as Gn, createLogger as R } from "@voltro/logger";
+import { AuthMiddleware as Kn, ConnectionInfoMiddleware as qn, actionToRpc as z, anonymousSubject as Jn, isWireReachable as Yn, mutationToRpc as Xn, queryToRpc as B, streamToRpc as Zn, wireErrorUnion as Qn, workflowCancelDescriptor as $n, workflowDomainEventsQueryDescriptor as er, workflowEventDeliveriesQueryDescriptor as tr, workflowResumeDescriptor as nr, workflowRunEventsQueryDescriptor as rr, workflowRunQueryDescriptor as ir, workflowRunStepsQueryDescriptor as V, workflowRunsQueryDescriptor as ar, workflowSignalDescriptor as or, workflowUpdateDescriptor as sr } from "@voltro/protocol";
+import { DATA_TRANSFERS_TABLE as H, _voltroDataTransfersTable as cr, allRegisteredTables as lr, and as ur, connectionIdentity as dr, derivedRowId as fr, describeTransferRun as pr, ensureTableRegistered as mr, eq as U, or as W } from "@voltro/database";
+import { appMode as hr, frameworkVersion as gr, instanceId as _r, replicaId as vr, resolveAdvertisedHost as yr, setProcessAdvertisedAddress as br, setProcessBootPath as xr } from "@voltro/protocol/identity";
+import { AggregateRegistry as Sr, CostRegistry as Cr, DORMANCY_WAKEUP_TENANT as wr, Dispatcher as Tr, ExpectationRegistry as Er, ExperimentRegistry as Dr, apiKeyManagementRoutes as Or, attachAnalyticsMirror as kr, attachExpectations as Ar, attachExperiments as jr, attachFinops as Mr, awaitServerListening as Nr, bindMutation as G, bindStream as Pr, bindSubscription as Fr, buildTracingLayer as Ir, cancelWakeup as Lr, compileCron as Rr, dataStoreApiKeyStore as zr, formatServerOnlyLeaks as Br, formatUnresolvedSources as Vr, frameworkApiKeyStrategy as Hr, getResourcePolicy as Ur, installPolicyGuardResolver as Wr, loadResourceTuples as Gr, makeActionRunner as Kr, makeAdvisoryLockCoordinator as qr, makeApiKeyService as Jr, makeApiKeyUsageBuffer as Yr, makeApiKeyUsageFlusher as Xr, makeAsyncKv as Zr, makeAuthMiddlewareLayers as Qr, makeCoordinatedScheduler as $r, makeEffectStoreLayer as ei, makeLazyWorkflowFacade as ti, makeMutationOutputCodec as ni, makeMutationRunner as ri, makeOneShotQueryRunner as ii, makeQueryDescriptorProducer as ai, makeQueryFinalizer as oi, makeQueryReauthorizer as si, makeQuerySubscriber as ci, makeSchemaRegistry as li, makeWorkflowFacade as ui, makeWorkflowFacadeWithCallerContext as di, makeWorkflowLayers as K, noopKv as fi, onProcessShutdown as pi, recordSubscriptionDelivery as mi, recordWorkflowRun as hi, registerDefaultTupleSource as gi, registerWakeup as _i, resolveSecretsBackend as vi, runProvidedEffect as yi, setSecretsBackend as bi, setSystemStoreHandle as xi, shutdownGraceMsFromEnv as q, singleCoordinator as Si, startRpcServer as Ci, startScheduler as wi, stripForbiddenForWire as Ti, undoCaptureEnabled as Ei, unresolvedSources as Di, withScopedRequest as Oi, workflowToRpc as ki, wrapStoreWithBootCodec as Ai } from "@voltro/runtime";
+import { assertProductionSessionSecret as ji } from "@voltro/protocol/session";
+import { Cause as Mi, Effect as J, Layer as Y, ManagedRuntime as Ni } from "effect";
+import { SqlClient as Pi } from "@effect/sql";
+import { declaredSnapshot as Fi, describeOutcome as Ii, pendingFileMigrationIds as Li, runPlannedMigrations as Ri } from "@voltro/database/sql";
+import zi, { tmpdir as Bi } from "node:os";
+import { RpcGroup as Vi } from "@effect/rpc";
+import { appStorageProvider as Hi, durabilityNotice as Ui, fromNodeReadable as Wi, getObjectStream as Gi, putObjectStream as Ki, toNodeReadable as qi } from "@voltro/plugin-storage";
+import { isEnvContract as Ji } from "@voltro/env";
 import X from "node:fs/promises";
-import { createHash as Ii, timingSafeEqual as Li } from "node:crypto";
-import { channelFor as Ri, getBroadcastPlugin as zi } from "@voltro/plugin-broadcast";
-import { buildDeliverWebhookExecute as Bi, buildWebhooksService as Vi, defaultIncomingPath as Hi, deliverWebhookWorkflow as Ui, makeDeferredEmitHandler as Wi, mountIncomingWebhook as Gi } from "@voltro/plugin-webhooks";
-import { getAuthSessionStrategy as Ki } from "@voltro/plugin-auth";
-import { registerEmailTemplates as qi } from "@voltro/plugin-mail";
-import { checkSchemaDrift as Ji, decideStaging as Yi, isEnvironmentLocal as Xi, packBundle as Zi, peekBundle as Qi, runExport as $i, runImport as ea, storageBlobSink as ta, storageRefsBlobSource as na, unpackBundle as ra, unpackBundleToDir as ia } from "@voltro/data-transfer";
+import { createHash as Yi, timingSafeEqual as Xi } from "node:crypto";
+import { channelFor as Zi, getBroadcastPlugin as Qi } from "@voltro/plugin-broadcast";
+import { buildDeliverWebhookExecute as $i, buildWebhooksService as ea, defaultIncomingPath as ta, deliverWebhookWorkflow as na, makeDeferredEmitHandler as ra, mountIncomingWebhook as ia } from "@voltro/plugin-webhooks";
+import { getAuthSessionStrategy as aa } from "@voltro/plugin-auth";
+import { registerEmailTemplates as oa } from "@voltro/plugin-mail";
+import { checkSchemaDrift as sa, decideStaging as ca, isEnvironmentLocal as la, packBundle as ua, peekBundle as da, runExport as fa, runImport as pa, storageBlobSink as ma, storageRefsBlobSource as ha, unpackBundle as ga, unpackBundleToDir as _a } from "@voltro/data-transfer";
 //#region \0rolldown/runtime.js
-var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
+var va = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy < "u" ? new Proxy(e, { get: (e, t) => (typeof require < "u" ? require : e)[t] }) : e)(function(e) {
 	if (typeof require < "u") return require.apply(this, arguments);
 	throw Error("Calling `require` for \"" + e + "\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.");
-}), oa = () => Math.max(500, Math.floor(hi() * .6)), sa = (e) => new Promise((t) => setTimeout(t, e)), ca = (e) => {
+}), ya = () => Math.max(500, Math.floor(q() * .6)), ba = (e) => new Promise((t) => setTimeout(t, e)), xa = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = 0;
 	e.on("connection", (e) => {
 		t.add(e), e.once("close", () => {
@@ -61,14 +62,14 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	});
 	let i, a = async (t = {}) => {
-		let n = t.budgetMs ?? oa();
+		let n = t.budgetMs ?? ya();
 		i ??= new Promise((t) => {
 			e.close(() => {
 				t();
 			});
 		}), e.closeIdleConnections();
 		let a = Date.now() + n;
-		for (; r > 0 && Date.now() < a;) await sa(25), e.closeIdleConnections();
+		for (; r > 0 && Date.now() < a;) await ba(25), e.closeIdleConnections();
 		e.closeIdleConnections();
 	}, o = async () => {
 		i ??= new Promise((t) => {
@@ -85,7 +86,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			]));
 		} catch {}
 		else e.destroy();
-		for (let e = 0; t.size > 0 && e < 250; e += 25) await sa(25);
+		for (let e = 0; t.size > 0 && e < 250; e += 25) await ba(25);
 		for (let e of t) e.destroy();
 		await i;
 	};
@@ -97,83 +98,83 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			await a(e), await o();
 		}
 	};
-}, la = "/_voltro/admin/import", ua = "/_voltro/admin/import/start", da = "/_voltro/admin/export", fa = "/_voltro/admin/export/download", pa = "/_voltro/admin/transfers", Z = (e, t) => ({
+}, Sa = "/_voltro/admin/import", Ca = "/_voltro/admin/import/start", wa = "/_voltro/admin/export", Ta = "/_voltro/admin/export/download", Ea = "/_voltro/admin/transfers", Z = (e, t) => ({
 	status: e,
 	contentType: "application/json; charset=utf-8",
 	body: JSON.stringify(t)
-}), ma = (e) => {
+}), Da = (e) => {
 	let t = e.authorization ?? e.Authorization, n = t ? /^Bearer\s+(.+)$/i.exec(t) : null;
 	return n ? n[1] : null;
-}, ha = (e, t) => Li(Ii("sha256").update(e).digest(), Ii("sha256").update(t).digest()), ga = (e, t, n = "POST") => {
+}, Oa = (e, t) => Xi(Yi("sha256").update(e).digest(), Yi("sha256").update(t).digest()), ka = (e, t, n = "POST") => {
 	if (e.method.toUpperCase() !== n) return Z(405, { error: "method not allowed" });
 	if (!t || t.length < 16) return Z(503, { error: "data transfer misconfigured (no/weak secret)" });
-	let r = ma(e.headers);
-	return !r || !ha(r, t) ? Z(401, { error: "unauthorized" }) : null;
-}, _a = /^[A-Za-z0-9_-]{8,64}$/, va = (e) => _a.test(e), ya = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? F.join(Ti.tmpdir(), "voltro-import-uploads"), ba = (e) => F.join(ya(), e), xa = (e) => F.join(ba(e), "archive.bin"), Sa = (e) => F.join(ba(e), "meta.json"), Ca = async (e = Date.now()) => {
+	let r = Da(e.headers);
+	return !r || !Oa(r, t) ? Z(401, { error: "unauthorized" }) : null;
+}, Aa = /^[A-Za-z0-9_-]{8,64}$/, ja = (e) => Aa.test(e), Ma = () => process.env.VOLTRO_IMPORT_UPLOAD_DIR ?? L.join(zi.tmpdir(), "voltro-import-uploads"), Na = (e) => L.join(Ma(), e), Pa = (e) => L.join(Na(e), "archive.bin"), Fa = (e) => L.join(Na(e), "meta.json"), Ia = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(ya())) {
+		for (let n of await X.readdir(Ma())) {
 			if (n === ".runs") continue;
-			let r = await X.stat(ba(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(ba(n), {
+			let r = await X.stat(Na(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Na(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, wa = async (e) => {
-	if (!va(e)) return {
+}, La = async (e) => {
+	if (!ja(e)) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let t = await X.stat(xa(e)).catch(() => null);
+	let t = await X.stat(Pa(e)).catch(() => null);
 	if (t === null) return {
 		bytes: 0,
 		key: null,
 		runId: null
 	};
-	let n = await Ta(e);
+	let n = await Ra(e);
 	return {
 		bytes: t.size,
 		key: n.key ?? null,
 		runId: n.runId ?? null
 	};
-}, Ta = async (e) => {
+}, Ra = async (e) => {
 	try {
-		let t = await X.readFile(Sa(e), "utf8");
+		let t = await X.readFile(Fa(e), "utf8");
 		return JSON.parse(t);
 	} catch {
 		return {};
 	}
-}, Ea = async (e, t) => {
-	let n = Sa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
+}, za = async (e, t) => {
+	let n = Fa(e), r = `${n}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
 	await X.writeFile(r, JSON.stringify(t)), await X.rename(r, n);
-}, Da = async (e, t, n) => {
-	if (!va(e)) return t;
-	await X.mkdir(ba(e), { recursive: !0 });
-	let r = await Ta(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
-	return i !== null && n?.takeOver !== !0 ? i : (await Ea(e, {
+}, Ba = async (e, t, n) => {
+	if (!ja(e)) return t;
+	await X.mkdir(Na(e), { recursive: !0 });
+	let r = await Ra(e), i = typeof r.runId == "string" && r.runId.length > 0 ? r.runId : null;
+	return i !== null && n?.takeOver !== !0 ? i : (await za(e, {
 		...r,
 		runId: t
 	}), t);
-}, Oa = async (e) => {
-	if (!va(e)) return;
-	let t = await Ta(e);
+}, Va = async (e) => {
+	if (!ja(e)) return;
+	let t = await Ra(e);
 	if (t.runId === void 0) return;
 	let { runId: n, ...r } = t;
-	await Ea(e, r).catch(() => void 0);
-}, ka = async (e, t, n) => (await X.mkdir(ba(e), { recursive: !0 }), await X.writeFile(xa(e), Buffer.from(t)), await Ea(e, {
-	...await Ta(e),
+	await za(e, r).catch(() => void 0);
+}, Ha = async (e, t, n) => (await X.mkdir(Na(e), { recursive: !0 }), await X.writeFile(Pa(e), Buffer.from(t)), await za(e, {
+	...await Ra(e),
 	key: n,
 	startedAt: (/* @__PURE__ */ new Date()).toISOString()
-}), t.byteLength), Aa = (e) => `up-${Ii("sha256").update(e).digest("hex").slice(0, 32)}`, ja = async (e) => {
-	if (!va(e.id)) return {
+}), t.byteLength), Ua = (e) => `up-${Yi("sha256").update(e).digest("hex").slice(0, 32)}`, Wa = async (e) => {
+	if (!ja(e.id)) return {
 		reason: "bad-id",
-		message: `upload id must match ${String(_a)}`
+		message: `upload id must match ${String(Aa)}`
 	};
-	let t = await wa(e.id);
+	let t = await La(e.id);
 	if (t.key !== null && t.key !== e.key) return {
 		reason: "key-mismatch",
 		message: "this upload id already holds a different bundle. Use a new upload id, or delete the partial upload."
@@ -183,34 +184,34 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		message: `chunk starts at ${e.offset} but the server holds ${t.bytes} byte(s)`,
 		expectedOffset: t.bytes
 	};
-	if (await X.mkdir(ba(e.id), { recursive: !0 }), t.key === null) {
-		let t = await Ta(e.id);
-		await Ea(e.id, {
+	if (await X.mkdir(Na(e.id), { recursive: !0 }), t.key === null) {
+		let t = await Ra(e.id);
+		await za(e.id, {
 			...t,
 			key: e.key,
 			startedAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	}
 	return await new Promise((t, n) => {
-		let r = Rn(xa(e.id), { flags: "a" });
+		let r = Hn(Pa(e.id), { flags: "a" });
 		r.on("error", n), r.on("finish", () => t()), r.end(Buffer.from(e.bytes));
 	}), { total: t.bytes + e.bytes.byteLength };
-}, Ma = async (e) => {
-	let t = await X.stat(xa(e));
+}, Ga = async (e) => {
+	let t = await X.stat(Pa(e));
 	return {
-		path: xa(e),
+		path: Pa(e),
 		bytes: t.size
 	};
-}, Na = () => F.join(ya(), ".runs"), Pa = (e) => F.join(Na(), `${e}.bin`), Fa = async (e, t) => {
-	if (!va(e)) return null;
-	let n = xa(e), r = await X.stat(n).catch(() => null);
+}, Ka = () => L.join(Ma(), ".runs"), qa = (e) => L.join(Ka(), `${e}.bin`), Ja = async (e, t) => {
+	if (!ja(e)) return null;
+	let n = Pa(e), r = await X.stat(n).catch(() => null);
 	if (r === null || r.size === 0) return null;
-	await X.mkdir(Na(), { recursive: !0 });
-	let i = Pa(t);
+	await X.mkdir(Ka(), { recursive: !0 });
+	let i = qa(t);
 	return await X.rename(n, i), i;
-}, Ia = async (e) => {
-	await X.rm(Pa(e), { force: !0 }).catch(() => void 0);
-}, Q = I({ scope: "voltro:admin-import" }), La = "VBUNDLE2", Ra = (e) => {
+}, Ya = async (e) => {
+	await X.rm(qa(e), { force: !0 }).catch(() => void 0);
+}, Q = R({ scope: "voltro:admin-import" }), Xa = "VBUNDLE2", Za = (e) => {
 	let t = e.req.headers["x-import-rollback-key"];
 	if (e.mode !== "replace") return { options: {} };
 	if (typeof t != "string" || t.length === 0) return Q.warn("admin.import: no rollback capture — this run empties the target first, and nothing was asked to be kept. Send `x-import-rollback-key: <storage key>` (voltro data import --rollback-key <key>) to have the instance store the target's current rows before deleting them."), { options: {} };
@@ -221,18 +222,18 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			hint: "A capture written to the pod would not survive the failure it exists for. Configure storage (the same one the storage-push export uses), or re-send without `x-import-rollback-key` to accept that a run which does not finish can leave the target emptied. Note that CONFIGURED is not the same question as SURVIVES: a `filesystem` provider pointed at a container directory with no volume behind it passes this check and dies with the pod. The run says so when it can observe it — the capture path being on the same filesystem as `/`."
 		})
 	};
-	let n = Ln(Ei(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
+	let n = Vn(Bi(), `voltro-rollback-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`), r = e.deps.putArchive;
 	return {
 		key: t,
 		options: {
 			rollbackDir: n,
 			onRollbackCaptured: async () => {
-				let e = ki(n);
-				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => Zi({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
+				let e = Ui(n);
+				e !== void 0 && Q.warn(`admin.import: ${e}`), await r(t, () => ua({ dir: n })), Q.info("admin.import: rollback capture stored", { bundleKey: t });
 			}
 		}
 	};
-}, za = (e) => {
+}, Qa = (e) => {
 	let t = e["x-import-mode"], n = e["x-import-atomic"];
 	return {
 		mode: t,
@@ -242,34 +243,34 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		dryRun: e["x-import-dry-run"] === "1" || e["x-import-dry-run"] === "true",
 		tables: (e["x-import-tables"] ?? "").split(",").map((e) => e.trim()).filter(Boolean)
 	};
-}, Ba = async (e, t) => {
+}, $a = async (e, t) => {
 	if (typeof t.bundleKey == "string" && t.bundleKey !== "") {
 		if (!e.openArchive) return { refusal: Z(501, { error: "storage transport not configured on this instance" }) };
 		let n = e.openArchive, r = t.bundleKey;
 		return {
 			source: () => n(r),
 			transport: "storage",
-			uploadId: Aa(r)
+			uploadId: Ua(r)
 		};
 	}
 	let n = t.uploadId;
-	if (typeof n != "string" || !va(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
-	let r = await Ma(n).catch(() => null);
+	if (typeof n != "string" || !ja(n)) return { refusal: Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" }) };
+	let r = await Ga(n).catch(() => null);
 	return r === null || r.bytes === 0 ? { refusal: Z(409, {
 		error: "no such upload",
 		message: `this instance holds no bytes for upload '${n}'. Upload the bundle first, or re-upload if it has expired.`
 	}) } : {
-		source: () => Va(r.path),
+		source: () => eo(r.path),
 		transport: "upload",
 		uploadId: n
 	};
-}, Va = (e) => {
-	let { createReadStream: t } = aa("node:fs");
+}, eo = (e) => {
+	let { createReadStream: t } = va("node:fs");
 	return t(e);
-}, Ha = (e) => async (t) => {
-	let n = ga(t, e.secret);
+}, to = (e) => async (t) => {
+	let n = ka(t, e.secret);
 	if (n) return n;
-	let r = za(t.headers), i = Ra({
+	let r = Qa(t.headers), i = Za({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -283,16 +284,16 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			return Z(400, { error: "a preflight body must be JSON: { tables: string[] } or { bundleKey: string }" });
 		}
 		let a = Array.isArray(n.tables) ? n.tables.filter((e) => typeof e == "string") : [];
-		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await Ua(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
+		if (a.length === 0 && typeof n.bundleKey == "string" && n.bundleKey !== "" && e.openArchive && (a = [...await no(e.openArchive(n.bundleKey))]), a.length === 0) return Z(400, {
 			error: "a preflight needs { tables: string[] } — the bundle's table names, so the staging decision can be made against them",
 			hint: "or { bundleKey } on an instance with storage configured, where this endpoint reads the table list out of the archive itself"
 		});
-		let o = Yi({
+		let o = ca({
 			mode: r.mode ?? "upsert",
 			...e.dialect === void 0 ? {} : { targetDialect: e.dialect },
 			...e.snapshot === void 0 ? {} : { targetSnapshot: e.snapshot },
 			bundleTables: a,
-			isSkipped: Xi,
+			isSkipped: la,
 			canRunSql: !0
 		});
 		return Z(200, {
@@ -311,8 +312,8 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	}
 	let a = t.headers["x-import-upload-id"];
 	if (a !== void 0 && a !== "") {
-		if (Ca(), t.headers["x-import-probe"] === "1") {
-			let e = await wa(a);
+		if (Ia(), t.headers["x-import-probe"] === "1") {
+			let e = await La(a);
 			return Z(200, {
 				uploadId: a,
 				bytes: e.bytes,
@@ -321,7 +322,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 		let e = t.headers["x-import-upload-key"] ?? "", n = Number(t.headers["x-import-chunk-offset"] ?? "0");
 		if (e === "" || !Number.isFinite(n) || n < 0) return Z(400, { error: "a chunked upload needs x-import-upload-key and a numeric x-import-chunk-offset" });
-		let r = await ja({
+		let r = await Wa({
 			id: a,
 			key: e,
 			offset: n,
@@ -343,12 +344,12 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			complete: i
 		});
 	}
-	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === La) {
-		Ca();
-		let e = Ii("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = Aa(e);
+	if (t.rawBody.byteLength >= 8 && Buffer.from(t.rawBody.subarray(0, 8)).toString("latin1") === Xa) {
+		Ia();
+		let e = Yi("sha256").update(Buffer.from(t.rawBody)).digest("hex"), n = Ua(e);
 		return Z(202, {
 			uploadId: n,
-			bytes: await ka(n, t.rawBody, e),
+			bytes: await Ha(n, t.rawBody, e),
 			complete: !0
 		});
 	}
@@ -359,22 +360,22 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		return Z(400, { error: "body must be a packed bundle archive or { bundleKey } JSON" });
 	}
 	return typeof o.bundleKey != "string" || !o.bundleKey ? Z(400, { error: "body.bundleKey (string) is required for the storage transport" }) : e.openArchive ? Z(202, {
-		uploadId: Aa(o.bundleKey),
+		uploadId: Ua(o.bundleKey),
 		bundleKey: o.bundleKey,
 		complete: !0
 	}) : Z(501, { error: "storage transport not configured on this instance" });
-}, Ua = async (e) => {
-	let t = await Qi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
+}, no = async (e) => {
+	let t = await da(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => void 0);
 	if (t === void 0) return [];
 	try {
 		return (JSON.parse(Buffer.from(t).toString("utf8")).tables ?? []).map((e) => e.name).filter((e) => typeof e == "string");
 	} catch {
 		return [];
 	}
-}, Wa = (e) => async (t) => {
-	let n = ga(t, e.secret);
+}, ro = (e) => async (t) => {
+	let n = ka(t, e.secret);
 	if (n) return n;
-	let r = za(t.headers), i = Ra({
+	let r = Qa(t.headers), i = Za({
 		req: t,
 		mode: r.mode,
 		deps: e
@@ -386,12 +387,12 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} catch {
 		return Z(400, { error: "body must be JSON: { uploadId } or { bundleKey }" });
 	}
-	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? Aa(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
-	if (!va(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
-	let s = sr("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Da(o, s);
+	let o = typeof a.bundleKey == "string" && a.bundleKey !== "" ? Ua(a.bundleKey) : typeof a.uploadId == "string" ? a.uploadId : "";
+	if (!ja(o)) return Z(400, { error: "start needs { uploadId } from an upload, or { bundleKey } for the storage transport" });
+	let s = fr("dimp", `${o}-${Date.now()}-${Math.random()}`), c = await Ba(o, s);
 	if (c !== s) {
-		let t = await Nn(e.store, c);
-		if (Pn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
+		let t = await Ln(e.store, c);
+		if (Rn(t) === void 0 && t !== null) return Q.info("admin.import start: already running", {
 			uploadId: o,
 			runId: c
 		}), Z(202, {
@@ -402,18 +403,18 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		Q.info("admin.import start: taking over a claim whose run is not running", {
 			uploadId: o,
 			staleRunId: c,
-			outcome: Pn(t) ?? "no record"
-		}), c = await Da(o, s, { takeOver: !0 });
+			outcome: Rn(t) ?? "no record"
+		}), c = await Ba(o, s, { takeOver: !0 });
 	}
-	let l = async (e) => (await Oa(o).catch(() => void 0), e), u = await Ba(e, {
+	let l = async (e) => (await Va(o).catch(() => void 0), e), u = await $a(e, {
 		...typeof a.uploadId == "string" ? { uploadId: a.uploadId } : {},
 		...typeof a.bundleKey == "string" ? { bundleKey: a.bundleKey } : {}
 	});
 	if ("refusal" in u) return l(u.refusal);
 	if (e.snapshot !== void 0 && !r.force) {
-		let t = await Ga(u.source());
+		let t = await io(u.source());
 		if (t !== null) {
-			let n = Ji(t.source?.schemaFingerprint ?? "", e.snapshot, Ka(t));
+			let n = sa(t.source?.schemaFingerprint ?? "", e.snapshot, ao(t));
 			if (n.drifted) return Q.warn("admin.import refused (schema drift)", {
 				transport: u.transport,
 				bundle: n.bundleFingerprint.slice(0, 16),
@@ -428,17 +429,17 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		}
 	}
 	let d = null;
-	if (u.transport === "upload" && (d = await Fa(u.uploadId, c), d === null)) return l(Z(409, {
+	if (u.transport === "upload" && (d = await Ja(u.uploadId, c), d === null)) return l(Z(409, {
 		error: "no such upload",
 		message: `the bytes for upload '${u.uploadId}' are gone. Re-upload the bundle.`
 	}));
-	let f = await qa(e.store, {
+	let f = await oo(e.store, {
 		runId: c,
 		mode: r.mode ?? "upsert",
 		via: "api",
 		bundle: u.transport === "storage" ? String(a.bundleKey) : u.uploadId
 	});
-	return Ja({
+	return so({
 		deps: e,
 		opts: r,
 		rollback: i,
@@ -446,7 +447,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		traced: f,
 		resolved: d === null ? u : {
 			...u,
-			source: () => Va(d)
+			source: () => eo(d)
 		}
 	}), Q.info("admin.import started", {
 		runId: c,
@@ -465,15 +466,15 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: f,
 		outcome: "poll /_voltro/admin/transfers for this runId — a 202 means started, not finished"
 	});
-}, Ga = async (e) => {
-	let t = await Qi(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
+}, io = async (e) => {
+	let t = await da(e, ["manifest.json"]).then((e) => e.get("manifest.json"), () => null);
 	if (t == null) return null;
 	try {
 		return JSON.parse(Buffer.from(t).toString("utf8"));
 	} catch {
 		return null;
 	}
-}, Ka = (e) => ({ tables: (e.tables ?? []).map((e) => ({
+}, ao = (e) => ({ tables: (e.tables ?? []).map((e) => ({
 	name: e.name,
 	indexes: [],
 	columns: Object.entries(e.columnTypes ?? {}).map(([e, t]) => ({
@@ -483,9 +484,9 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		unique: !1,
 		hasDefault: !1
 	}))
-})) }), qa = async (e, t) => {
+})) }), oo = async (e, t) => {
 	try {
-		return lr(rr), await e.insert(V, {
+		return mr(cr), await e.insert(H, {
 			id: t.runId,
 			direction: "import",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -505,23 +506,23 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, Ja = async (e) => {
+}, so = async (e) => {
 	let { deps: t, opts: n, rollback: r, resolved: i, runId: a } = e, o = await import("node:os"), s = await import("node:fs/promises"), c = await import("node:path"), l = await s.mkdtemp(c.join(o.tmpdir(), "voltro-admin-import-")), u = async (n) => {
 		Q.warn("admin.import failed", {
 			runId: a,
 			transport: i.transport,
 			error: n
-		}), e.traced && await t.store.update(V, a, {
+		}), e.traced && await t.store.update(H, a, {
 			failure: n,
 			finishedAt: null
 		}).then(() => void 0, () => void 0);
 	};
 	try {
-		t.assetSink ? await ra(i.source(), {
+		t.assetSink ? await ga(i.source(), {
 			dir: l,
 			blobs: t.assetSink
-		}) : await ia(i.source(), l);
-		let o = await U.runPromiseExit(ea({
+		}) : await _a(i.source(), l);
+		let o = await J.runPromiseExit(pa({
 			store: t.store,
 			bundleDir: l,
 			...n.mode ? { mode: n.mode } : {},
@@ -566,24 +567,24 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		await s.rm(l, {
 			recursive: !0,
 			force: !0
-		}).catch(() => void 0), await Ia(a).catch(() => void 0), await Oa(i.uploadId).catch(() => void 0);
+		}).catch(() => void 0), await Ya(a).catch(() => void 0), await Va(i.uploadId).catch(() => void 0);
 	}
-}, Ya = /^[A-Za-z0-9_-]{8,64}$/, Xa = (e) => Ya.test(e), Za = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? F.join(Ti.tmpdir(), "voltro-export-artifacts"), Qa = (e) => F.join(Za(), e), $a = (e) => F.join(Qa(e), "archive.bin"), eo = async (e = Date.now()) => {
+}, co = /^[A-Za-z0-9_-]{8,64}$/, lo = (e) => co.test(e), uo = () => process.env.VOLTRO_EXPORT_ARTIFACT_DIR ?? L.join(zi.tmpdir(), "voltro-export-artifacts"), fo = (e) => L.join(uo(), e), po = (e) => L.join(fo(e), "archive.bin"), mo = async (e = Date.now()) => {
 	let t = 0;
 	try {
-		for (let n of await X.readdir(Za())) {
-			let r = await X.stat(Qa(n)).catch(() => null);
-			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(Qa(n), {
+		for (let n of await X.readdir(uo())) {
+			let r = await X.stat(fo(n)).catch(() => null);
+			r !== null && (e - r.mtimeMs <= 864e5 || (await X.rm(fo(n), {
 				recursive: !0,
 				force: !0
 			}).catch(() => void 0), t++));
 		}
 	} catch {}
 	return t;
-}, to = async (e, t) => {
-	if (!Xa(e)) throw Error(`invalid run id: ${e}`);
-	await X.mkdir(Qa(e), { recursive: !0 });
-	let { createWriteStream: n } = await import("node:fs"), r = n($a(e)), i = 0;
+}, ho = async (e, t) => {
+	if (!lo(e)) throw Error(`invalid run id: ${e}`);
+	await X.mkdir(fo(e), { recursive: !0 });
+	let { createWriteStream: n } = await import("node:fs"), r = n(po(e)), i = 0;
 	try {
 		for await (let e of t) i += e.byteLength, r.write(Buffer.from(e)) || await new Promise((e, t) => {
 			r.once("drain", e), r.once("error", t);
@@ -594,18 +595,18 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	}
 	return i;
-}, no = async (e) => {
-	if (!Xa(e)) return null;
-	let t = await X.stat($a(e)).catch(() => null);
+}, go = async (e) => {
+	if (!lo(e)) return null;
+	let t = await X.stat(po(e)).catch(() => null);
 	return t === null ? null : t.size;
-}, ro = async (e, t, n) => {
-	let r = await no(e);
+}, _o = async (e, t, n) => {
+	let r = await go(e);
 	if (r === null) return null;
 	if (t >= r) return {
 		bytes: Buffer.alloc(0),
 		total: r
 	};
-	let i = await X.open($a(e), "r");
+	let i = await X.open(po(e), "r");
 	try {
 		let e = Math.max(0, Math.min(n, r - t)), a = Buffer.alloc(e);
 		return await i.read(a, 0, e, t), {
@@ -615,27 +616,27 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		await i.close();
 	}
-}, io = async (e) => {
-	Xa(e) && await X.rm(Qa(e), {
+}, vo = async (e) => {
+	lo(e) && await X.rm(fo(e), {
 		recursive: !0,
 		force: !0
 	}).catch(() => void 0);
-}, ao = I({ scope: "voltro:admin-export" }), oo = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], so = (e) => {
+}, yo = R({ scope: "voltro:admin-export" }), bo = (e) => Array.isArray(e) ? e.filter((e) => typeof e == "string") : [], xo = (e) => {
 	if (typeof e.tenant == "string" && e.tenant) return {
 		kind: "tenant",
 		tenantId: e.tenant
 	};
 	if (Array.isArray(e.tables) && e.tables.length) return {
 		kind: "tables",
-		tables: oo(e.tables)
+		tables: bo(e.tables)
 	};
-	let t = oo(e.exclude);
+	let t = bo(e.exclude);
 	return t.length > 0 ? {
 		kind: "all",
 		exclude: t
 	} : { kind: "all" };
-}, co = (e) => async (t) => {
-	let n = ga(t, e.secret);
+}, So = (e) => async (t) => {
+	let n = ka(t, e.secret);
 	if (n) return n;
 	let r;
 	try {
@@ -655,12 +656,12 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		}
 	}
-	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? so(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = sr("dexp", `${Date.now()}-${Math.random()}`), d = await lo(e.store, {
+	let a = r.consistency === "snapshot" ? "snapshot" : i.consistency ?? "live", o = (typeof r.compression == "string" ? r.compression : void 0) ?? i.compression, s = i.scope ?? xo(r), c = typeof r.bundleKey == "string" && r.bundleKey.length > 0, l = r.assets === !0 && e.assetSource ? { blobs: e.assetSource } : {}, u = fr("dexp", `${Date.now()}-${Math.random()}`), d = await Co(e.store, {
 		runId: u,
 		mode: i.subset ? "subset" : s.kind,
 		bundle: c ? String(r.bundleKey) : null
 	});
-	return uo({
+	return wo({
 		deps: e,
 		runId: u,
 		recorded: d,
@@ -670,7 +671,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		blobs: l,
 		...o ? { compression: o } : {},
 		...c ? { bundleKey: String(r.bundleKey) } : {}
-	}), eo(), ao.info("admin.export started", {
+	}), mo(), yo.info("admin.export started", {
 		runId: u,
 		scope: s.kind,
 		storage: c
@@ -681,9 +682,9 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		recorded: d,
 		outcome: "poll /_voltro/admin/transfers for this runId; fetch the bytes from /_voltro/admin/export/download"
 	});
-}, lo = async (e, t) => {
+}, Co = async (e, t) => {
 	try {
-		return lr(rr), await e.insert(V, {
+		return mr(cr), await e.insert(H, {
 			id: t.runId,
 			direction: "export",
 			startedAt: /* @__PURE__ */ new Date(),
@@ -698,17 +699,17 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			staged: null
 		}), !0;
 	} catch (e) {
-		return ao.warn("admin.export: the run could not be recorded", {
+		return yo.warn("admin.export: the run could not be recorded", {
 			runId: t.runId,
 			error: e?.message ?? String(e)
 		}), !1;
 	}
-}, uo = async (e) => {
+}, wo = async (e) => {
 	let { deps: t, runId: n } = e, r = await import("node:os"), i = await import("node:fs/promises"), a = await import("node:path"), o = await i.mkdtemp(a.join(r.tmpdir(), "voltro-admin-export-")), s = async (r) => {
-		e.recorded && await t.store.update(V, n, r).then(() => void 0, () => void 0);
+		e.recorded && await t.store.update(H, n, r).then(() => void 0, () => void 0);
 	};
 	try {
-		let r = await U.runPromise($i({
+		let r = await J.runPromise(fa({
 			store: t.store,
 			snapshot: t.snapshot,
 			dialect: t.dialect,
@@ -723,16 +724,16 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		})), i = r.tables.reduce((e, t) => e + t.rowCount, 0), a = r.masking?.transformed.length ?? 0;
 		if (e.bundleKey !== void 0) {
 			if (!t.putArchive) throw Error("storage transport not configured on this instance");
-			await t.putArchive(e.bundleKey, () => Zi({
+			await t.putArchive(e.bundleKey, () => ua({
 				dir: o,
 				...e.blobs
 			}));
 		}
-		let c = await to(n, Zi({
+		let c = await ho(n, ua({
 			dir: o,
 			...e.blobs
 		}));
-		ao.info("admin.export complete", {
+		yo.info("admin.export complete", {
 			runId: n,
 			tables: r.tables.length,
 			rows: i,
@@ -748,25 +749,25 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 	} catch (e) {
 		let t = e?.message ?? String(e);
-		ao.warn("admin.export failed", {
+		yo.warn("admin.export failed", {
 			runId: n,
 			error: t
 		}), await s({
 			failure: t,
 			finishedAt: null
-		}), await io(n);
+		}), await vo(n);
 	} finally {
 		await i.rm(o, {
 			recursive: !0,
 			force: !0
 		}).catch(() => void 0);
 	}
-}, fo = (e) => async (t) => {
-	let n = ga(t, e.secret, "GET");
+}, To = (e) => async (t) => {
+	let n = ka(t, e.secret, "GET");
 	if (n) return n;
 	let r = new URLSearchParams(t.query ?? ""), i = r.get("runId") ?? "";
-	if (!Xa(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
-	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await ro(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, mo) : po);
+	if (!lo(i)) return Z(400, { error: "download needs ?runId=<id> from the 202 the export answered with" });
+	let a = Math.max(0, Number(r.get("offset") ?? "0") || 0), o = Number(r.get("length") ?? "8388608"), s = await _o(i, a, Number.isFinite(o) && o > 0 ? Math.min(o, Do) : Eo);
 	return s === null ? Z(404, {
 		error: "no artefact",
 		message: `this instance holds no produced bundle for run '${i}'. It may have expired, or the export may still be running — poll the run first.`
@@ -780,8 +781,8 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			"x-export-length": String(s.bytes.byteLength)
 		}
 	};
-}, po = 8388608, mo = 33554432, ho = async (e, t) => await e.query({
-	table: V,
+}, Eo = 8388608, Do = 33554432, Oo = async (e, t) => await e.query({
+	table: H,
 	order: [{
 		column: "startedAt",
 		direction: "desc"
@@ -790,23 +791,23 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	projection: void 0,
 	skip: 0,
 	take: t
-}), go = (e) => {
+}), ko = (e) => {
 	let t = new Date(e);
 	return Number.isFinite(t.getTime()) ? t : /* @__PURE__ */ new Date(0);
-}, _o = (e) => ({
+}, Ao = (e) => ({
 	...e,
-	startedAt: go(e.startedAt),
-	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : go(e.finishedAt)
-}), vo = (e) => async (t) => {
-	let n = ga(t, e.secret, "GET");
+	startedAt: ko(e.startedAt),
+	finishedAt: e.finishedAt === null || e.finishedAt === void 0 ? null : ko(e.finishedAt)
+}), jo = (e) => async (t) => {
+	let n = ka(t, e.secret, "GET");
 	if (n) return n;
 	let r = Number(new URLSearchParams(t.query ?? "").get("limit") ?? "20"), i = Number.isFinite(r) ? Math.max(1, Math.min(200, Math.trunc(r))) : 20, a;
 	try {
-		a = (await ho(e.store, i)).map(_o);
+		a = (await Oo(e.store, i)).map(Ao);
 	} catch (e) {
 		return Z(409, {
 			error: "no import history",
-			message: `this instance has no \`${V}\` table, so no import has been recorded. Run \`voltro db apply\` against it; imports themselves are unaffected.`,
+			message: `this instance has no \`${H}\` table, so no import has been recorded. Run \`voltro db apply\` against it; imports themselves are unaffected.`,
 			detail: e?.message ?? String(e)
 		});
 	}
@@ -825,11 +826,11 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			direction: e.direction,
 			failure: e.failure,
 			staged: e.staged,
-			line: cr(e)
+			line: pr(e)
 		}))
 	});
-}, yo = (e, t, n = {}) => (async function* () {
-	let r = await U.runPromise(ji(e, t).pipe(U.timeout(n.openTimeout ?? "30 seconds"))), i = await Ni(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
+}, Mo = (e, t, n = {}) => (async function* () {
+	let r = await J.runPromise(Gi(e, t).pipe(J.timeout(n.openTimeout ?? "30 seconds"))), i = await qi(r.stream), a = n.stallMs ?? 12e4, o, s = () => {
 		o && clearTimeout(o), o = setTimeout(() => i.destroy(/* @__PURE__ */ Error(`storage read stalled for ${a}ms reading '${t}'`)), a);
 	};
 	try {
@@ -838,7 +839,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	} finally {
 		o && clearTimeout(o), i.destroy();
 	}
-})(), bo = {
+})(), No = {
 	get: async () => void 0,
 	set: async () => {},
 	setWithTags: async () => {},
@@ -847,42 +848,42 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	clear: async () => {},
 	invalidateTag: async () => 0,
 	wrap: async (e, t, n) => n()
-}, xo = async (e) => {
-	Fe(e.appProcedures ?? e.discovered, {
+}, Po = async (e) => {
+	ze(e.appProcedures ?? e.discovered, {
 		defaultDeny: e.security?.defaultDeny ?? !0,
 		commandHint: "`voltro serve`"
-	}), mi({
+	}), xi({
 		dataStore: e.store,
 		schemaRegistry: e.schemaRegistry
 	});
-	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new xr({
+	let t = (e.discovered.budgets?.length ?? 0) > 0, n, r = new Tr({
 		crdtColumnsOf: (t) => e.schemaRegistry.crdtColumns(t),
 		store: e.store,
 		...e.snapshotCache ? { cache: e.snapshotCache } : {},
 		...e.reactive === void 0 ? {} : { reactive: e.reactive },
 		...t ? { recordCost: (e) => n?.record(e) } : {},
-		recordDelivery: (e) => Y({
+		recordDelivery: (e) => mi({
 			label: e.label,
 			kind: e.kind,
 			durationMs: e.durationMs,
 			rowCount: e.rowCount
 		})
-	}), i = e.cache ?? bo, a = e.kv ?? si, o, s = () => void 0, c, d, f, ee, te, ne, p, re = I({ scope: "voltro:workflow" }), ie = I({ scope: "voltro:schedule" }), ae = Ot({
+	}), i = e.cache ?? No, a = e.kv ?? fi, o, s = () => void 0, c, d, f, ee, te, ne, ie, h = R({ scope: "voltro:workflow" }), ae = R({ scope: "voltro:schedule" }), oe = Mt({
 		store: e.store,
-		warn: (e, t) => re.warn(e, t)
-	}), oe = ae.remember, se = ae.resolve, ce = pe({
+		warn: (e, t) => h.warn(e, t)
+	}), se = oe.remember, ce = oe.resolve, ue = me({
 		authority: e.authority,
 		getStore: () => e.store
-	}), g = (e.discovered.workflows?.length ?? 0) > 0 ? Xr(() => o) : void 0, fe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, he = fe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", be = e.tenantIsolation === "namespace", xe = (e.log ?? I({ scope: "voltro:serve" })).child("webhooks"), we, Ee, b = e.discovered.webhooks;
+	}), _ = (e.discovered.workflows?.length ?? 0) > 0 ? ti(() => o) : void 0, pe = (e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.eventTriggers?.length ?? 0) > 0, ge = pe || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster", ve = e.tenantIsolation === "namespace", xe = (e.log ?? R({ scope: "voltro:serve" })).child("webhooks"), Ce, we, b = e.discovered.webhooks;
 	if (b && b.outgoing.length > 0 && e.workflowEngineLayer !== void 0) {
 		e.workflowEngineLayer;
-		let t = Ze({
+		let t = St({
 			store: e.store,
 			schemaRegistry: e.schemaRegistry,
 			cache: i,
 			kv: a
 		}), n = b.outgoing.map((e) => e.descriptor);
-		Ee = Ui.toLayer(Bi(t, { events: n })), we = Vi(t, async (e) => {
+		we = na.toLayer($i(t, { events: n })), Ce = ea(t, async (e) => {
 			let t = f;
 			if (t === void 0) {
 				xe.error("webhook delivery skipped — the workflow runtime was never built. This is a framework defect, not a configuration problem: report it with your engine setting. Deliveries are NOT queued and will not be retried.", {
@@ -891,7 +892,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				});
 				return;
 			}
-			t.runPromise(Ui.execute(e)).catch((t) => {
+			t.runPromise(na.execute(e)).catch((t) => {
 				xe.error("deliverWebhook workflow crashed", {
 					deliveryId: e.deliveryId,
 					targetId: e.targetId
@@ -901,9 +902,9 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 	}
 	let De = /* @__PURE__ */ new Map();
 	if (b) for (let e of b.incoming) {
-		let t = e.descriptor.path ?? Hi(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = Gi(e.descriptor, {
+		let t = e.descriptor.path ?? ta(e.descriptor.id), n = `VOLTRO_WEBHOOK_SECRET_${e.descriptor.id.toUpperCase().replace(/[^A-Z0-9]/g, "_")}`, r = ia(e.descriptor, {
 			resolveSecret: async () => process.env[n] ?? null,
-			resolveWorkflows: () => g === void 0 ? void 0 : ai(g, {
+			resolveWorkflows: () => _ === void 0 ? void 0 : di(_, {
 				traceId: `incoming:${e.descriptor.id}`,
 				source: `incoming:${e.descriptor.id}`
 			}),
@@ -920,15 +921,15 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		});
 		De.set(t, { handle: r });
 	}
-	zr(), li((t) => Br(e.store, t.subjectId, t.resourceType, t.resourceId)) || I({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
-	let Oe = [], ke = [...e.discovered.outboxHandlers ?? [], ...Dn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
+	Wr(), gi((t) => Gr(e.store, t.subjectId, t.resourceType, t.resourceId)) || R({ scope: "voltro:serve" }).info("policy guards: using the app-registered tuple source");
+	let Oe = [], ke = [...e.discovered.outboxHandlers ?? [], ...Nn((b?.outgoing.length ?? 0) + (b?.incoming.length ?? 0) + (b?.providers.length ?? 0), []) ? [{
 		file: "<framework>/webhooks",
 		id: "voltro-webhook-emit",
-		definition: Wi(() => we)
-	}] : []], je = ke.length > 0 ? u({
+		definition: ra(() => Ce)
+	}] : []], Ae = ke.length > 0 ? u({
 		handlers: ke,
 		store: e.store,
-		log: (e.log ?? I({ scope: "voltro:serve" })).child("outbox"),
+		log: (e.log ?? R({ scope: "voltro:serve" })).child("outbox"),
 		onChange: (t) => e.store.onChange((e) => t({
 			table: e.table,
 			op: e.op
@@ -936,13 +937,13 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		onShutdown: (e) => {
 			Oe.push(e);
 		}
-	}) : void 0, x = S({
+	}) : void 0, x = C({
 		definitions: (e.discovered.connections ?? []).map((e) => e.definition),
 		store: e.store,
-		publicUrl: ze(e.port ?? 4e3),
-		log: (e.log ?? I({ scope: "voltro:serve" })).child("connections")
+		publicUrl: He(e.port ?? 4e3),
+		log: (e.log ?? R({ scope: "voltro:serve" })).child("connections")
 	});
-	y({
+	_e({
 		events: e.discovered.events ?? [],
 		rpcTags: [
 			...e.discovered.queries.map((e) => e.descriptor.name),
@@ -951,135 +952,135 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			...(e.discovered.streams ?? []).map((e) => e.descriptor.name)
 		]
 	});
-	let Me = (e.log ?? I({ scope: "voltro:serve" })).child("events"), Pe = e.broadcastNamespace ?? He(e.plugins, void 0), Le = Lt(e.plugins, Pe, Me), Be = e.membership?.instanceId ?? process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Ve = e.membership ?? Kt(e.plugins, {
-		instanceId: Be,
-		namespace: Pe,
+	let je = (e.log ?? R({ scope: "voltro:serve" })).child("events"), Me = e.broadcastNamespace ?? Ge(e.plugins, void 0), Pe = Vt(e.plugins, Me, je), Fe = e.membership?.instanceId ?? vr(), Ie = _r(), Re = e.membership ?? Yt(e.plugins, {
+		instanceId: Fe,
+		namespace: Me,
 		meta: { mode: "serve" },
-		logger: Me
-	}), C = ve({
+		logger: je
+	}), S = be({
 		events: e.discovered.events ?? [],
-		origin: Be,
-		...Le.publishRemote === void 0 ? {} : { publishRemote: Le.publishRemote }
-	}), Ue = (e.discovered.events ?? []).length > 0 ? await Le.attach(C.bus) : null, We = It({
+		origin: Ie,
+		...Pe.publishRemote === void 0 ? {} : { publishRemote: Pe.publishRemote }
+	}), Ue = (e.discovered.events ?? []).length > 0 ? await Pe.attach(S.bus) : null, We = kt({
 		store: e.store,
 		schemaRegistry: e.schemaRegistry,
 		cache: i,
 		kv: a,
-		...we === void 0 ? {} : { webhooksService: we },
-		...g === void 0 ? {} : { workflowsProxy: g },
+		...Ce === void 0 ? {} : { webhooksService: Ce },
+		..._ === void 0 ? {} : { workflowsProxy: _ },
 		eventTriggers: e.discovered.eventTriggers ?? [],
-		namespaceIsolationOn: be,
+		namespaceIsolationOn: ve,
 		...e.ensureTenantProvisioned === void 0 ? {} : { ensureTenantProvisioned: e.ensureTenantProvisioned },
 		...e.resolveResidentStore === void 0 ? {} : { resolveResidentStore: e.resolveResidentStore },
-		...je === void 0 ? {} : { outbox: { nudge: je.nudge } },
+		...Ae === void 0 ? {} : { outbox: { nudge: Ae.nudge } },
 		...x.active ? { connections: { registry: x.registry } } : {},
-		eventBus: C.bus
-	}), Ge = W.succeed(vr, Se), Ke = W.succeed(Sr, Ae), qe = W.succeed(yr, Gt), Je = W.succeed(Cr, m), Ye = (t, n) => {
-		let r = t.pipe(U.provide(Yr(n)));
-		return (e.baseLayer ? r.pipe(U.provide(e.baseLayer)) : r).pipe(U.provide(Ge)).pipe(U.provide(Ke)).pipe(U.provide(qe)).pipe(U.provide(Je));
-	}, Xe = (e, t) => {
-		let n = Ye(e, t);
-		return fi(n);
-	}, tt = wn(), rt = Re(e.plugins ?? [], tt), it = ue({
+		eventBus: S.bus
+	}), Ke = Y.succeed(Sr, Te), qe = Y.succeed(Er, Ne), Je = Y.succeed(Cr, Jt), Ye = Y.succeed(Dr, p), Xe = (t, n) => {
+		let r = t.pipe(J.provide(ei(n)));
+		return (e.baseLayer ? r.pipe(J.provide(e.baseLayer)) : r).pipe(J.provide(Ke)).pipe(J.provide(qe)).pipe(J.provide(Je)).pipe(J.provide(Ye));
+	}, Ze = (e, t) => {
+		let n = Xe(e, t);
+		return yi(n);
+	}, Qe = An(), $e = Ve(e.plugins ?? [], Qe), et = g({
 		plugins: e.plugins ?? [],
-		metrics: tt,
-		log: e.log ?? I({ scope: "voltro:serve" })
-	}), at = Dt(e.plugins ?? [], tt), ot = e.security?.defaultDeny ?? !0, st = Qr({
+		metrics: Qe,
+		log: e.log ?? R({ scope: "voltro:serve" })
+	}), tt = jt(e.plugins ?? [], Qe), nt = e.security?.defaultDeny ?? !0, ct = ri({
 		store: e.store,
-		defaultDeny: ot,
+		defaultDeny: nt,
 		recordMetric: (e) => {
-			tt.record(e);
+			Qe.record(e);
 		},
-		...rt.mutation === void 0 ? {} : { interceptor: rt.mutation },
+		...$e.mutation === void 0 ? {} : { interceptor: $e.mutation },
 		buildContext: (e, t, n) => We(e, t, n),
-		runEffect: Xe,
-		undoCapture: et((t) => e.schemaRegistry.crdtColumns(t))
-	}), ct = l();
+		runEffect: Ze,
+		undoCapture: Rt((t) => e.schemaRegistry.crdtColumns(t))
+	}), lt = at();
 	{
-		let t = Pt();
-		t !== void 0 && (e.log ?? I({ scope: "voltro:serve" })).info(t);
+		let t = Tt();
+		t !== void 0 && (e.log ?? R({ scope: "voltro:serve" })).info(t);
 	}
-	let lt = Te({
+	let ut = l({
 		store: e.store,
 		...e.approvals === void 0 ? {} : { defaultExpiryMs: e.approvals.defaultExpiryMs }
-	}), dt = Vr({
-		defaultDeny: ot,
+	}), dt = Kr({
+		defaultDeny: nt,
 		buildContext: (e) => We(e),
-		runEffect: Xe,
+		runEffect: Ze,
 		recordMetric: (e) => {
-			tt.record(e);
+			Qe.record(e);
 		},
-		...rt.action === void 0 ? {} : { interceptor: rt.action }
-	}), ft = ei({
+		...$e.action === void 0 ? {} : { interceptor: $e.action }
+	}), ft = oi({
 		tenantScopedTables: e.tenantScopedTables,
 		softDeleteScopedTables: e.softDeleteScopedTables
 	}), pt = {
-		defaultDeny: ot,
+		defaultDeny: nt,
 		buildContext: (e) => We(e),
 		finalize: (e, t) => ft(e, t.subject),
-		provideEffect: Ye,
-		...rt.query === void 0 ? {} : { interceptor: rt.query }
-	}, T = q(pt), mt = $r({
+		provideEffect: Xe,
+		...$e.query === void 0 ? {} : { interceptor: $e.query }
+	}, T = ai(pt), mt = ii({
 		...pt,
-		queryRows: (t, n) => e.store.query(t).then((e) => yi(t.table, e, n.subject))
-	}), ht = ni({
+		queryRows: (t, n) => e.store.query(t).then((e) => Ti(t.table, e, n.subject))
+	}), ht = ci({
 		...pt,
 		subscribeDescriptor: (e, t, n, i, a) => r.subscribe(e, t, n, void 0, void 0, void 0, i, a),
 		subscribeComputed: (e, t, n) => r.subscribeComputed(e, t, n)
-	}), E = (e) => e.filter((e) => Gn(e.descriptor)), D = {};
+	}), E = (e) => e.filter((e) => Yn(e.descriptor)), D = {};
 	for (let t of [
 		...E(e.discovered.queries),
-		...ct.queries,
 		...lt.queries,
+		...ut.queries,
 		...x.queries
-	]) D[t.descriptor.name] = (e) => K(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, ti(t, e));
+	]) D[t.descriptor.name] = (e) => Fr(T(t, e), r, `subscription.${t.descriptor.name}`, void 0, void 0, si(t, e));
 	for (let t of [
 		...E(e.discovered.mutations),
-		...ct.mutations,
 		...lt.mutations,
+		...ut.mutations,
 		...x.mutations
 	]) {
-		let n = Zr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => G(async (e, n) => st(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Jn(t.descriptor, "mutation"));
+		let n = ni(t.descriptor.output);
+		D[t.descriptor.name] = (r) => G(async (e, n) => ct(t, e, n), r, `mutation.${t.descriptor.name}`, n, e.idempotency, Qn(t.descriptor, "mutation"));
 	}
 	for (let t of [...E(e.discovered.actions), ...x.actions]) {
-		let n = Zr(t.descriptor.output);
-		D[t.descriptor.name] = (r) => G(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Jn(t.descriptor, "action"));
+		let n = ni(t.descriptor.output);
+		D[t.descriptor.name] = (r) => G(async (e, n) => dt(t, e, n), r, `action.${t.descriptor.name}`, n, e.idempotency, Qn(t.descriptor, "action"));
 	}
-	let vt = () => `public-${Math.random().toString(36).slice(2, 10)}`, yt = [
+	let gt = () => `public-${Math.random().toString(36).slice(2, 10)}`, _t = [
 		...e.discovered.queries.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => mt(e, t, {
 				subject: n.subject,
-				traceId: vt()
+				traceId: gt()
 			}),
 			subscribe: (t, n, r) => ht(e, t, {
 				subject: n.subject,
-				traceId: vt()
+				traceId: gt()
 			}, r)
 		})),
 		...e.discovered.mutations.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
-			invoke: (t, n) => st(e, t, {
+			invoke: (t, n) => ct(e, t, {
 				subject: n.subject,
-				traceId: vt()
+				traceId: gt()
 			})
 		})),
 		...e.discovered.actions.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 			descriptor: e.descriptor,
 			invoke: (t, n) => dt(e, t, {
 				subject: n.subject,
-				traceId: vt()
+				traceId: gt()
 			})
 		}))
-	], bt = {
-		candidates: v({
+	], vt = {
+		candidates: y({
 			queries: e.discovered.queries,
 			mutations: e.discovered.mutations,
 			actions: e.discovered.actions,
 			descriptorOf: (e) => e.descriptor,
 			runQuery: (e, t, n) => Promise.resolve(mt(e, t, n)),
-			runMutation: (e, t, n) => Promise.resolve(st(e, t, n)),
+			runMutation: (e, t, n) => Promise.resolve(ct(e, t, n)),
 			runAction: (e, t, n) => Promise.resolve(dt(e, t, n))
 		}),
 		policy: e.agents?.tools ?? {},
@@ -1108,7 +1109,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				kind: "mutation",
 				input: e.descriptor.input,
 				output: e.descriptor.output,
-				invoke: (n, r, i) => st(e, n, {
+				invoke: (n, r, i) => ct(e, n, {
 					subject: r.subject,
 					traceId: t(),
 					signal: i
@@ -1126,7 +1127,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				})
 			}))
 		];
-		await Wt({
+		await Gt({
 			config: e.grpc.config,
 			candidates: n,
 			resolveSubject: async (t) => {
@@ -1138,106 +1139,106 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			store: e.store,
 			root: e.grpc.root,
-			log: e.log ?? I({ scope: "voltro:serve" }),
-			onShutdown: (e) => J(e)
+			log: e.log ?? R({ scope: "voltro:serve" }),
+			onShutdown: (e) => pi(e)
 		});
 	}
-	let xt = ut({
+	let yt = It({
 		...e.restRoutes === void 0 ? {} : { restRoutes: e.restRoutes },
-		publicApiEntries: yt,
+		publicApiEntries: _t,
 		store: e.store,
 		resolveSubject: (t) => e.resolveSubject(t, -1).then((e) => e.subject),
 		...e.idempotency === void 0 ? {} : { idempotency: e.idempotency },
-		log: e.log ?? I({ scope: "voltro:serve" })
-	}), O = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, Ct = async (e, t) => {
-		let { Readable: n } = await import("node:stream"), r = Oi(), i = Ai("storage", () => n.from(t()));
-		await U.runPromise(Mi(r, e, i, { contentType: "application/octet-stream" }));
-	}, wt = O && O.length >= 16 ? [
+		log: e.log ?? R({ scope: "voltro:serve" })
+	}), O = e.dataTransferSecret ?? process.env.VOLTRO_DATA_TRANSFER_SECRET, xt = async (e, t) => {
+		let { Readable: n } = await import("node:stream"), r = Hi(), i = Wi("storage", () => n.from(t()));
+		await J.runPromise(Ki(r, e, i, { contentType: "application/octet-stream" }));
+	}, Ct = O && O.length >= 16 ? [
 		{
 			method: "POST",
-			path: la,
-			handle: Ha({
+			path: Sa,
+			handle: to({
 				secret: O,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: ta(Oi()),
-				openArchive: (e) => yo(Oi(), e),
+				assetSink: ma(Hi()),
+				openArchive: (e) => Mo(Hi(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: Ct,
+				putArchive: xt,
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {}
 			})
 		},
 		{
 			method: "POST",
-			path: ua,
-			handle: Wa({
+			path: Ca,
+			handle: ro({
 				secret: O,
 				store: e.store,
 				...e.dataTransferSnapshot ? { snapshot: e.dataTransferSnapshot } : {},
 				...e.dataTransferDialect ? { dialect: e.dataTransferDialect } : {},
-				assetSink: ta(Oi()),
-				openArchive: (e) => yo(Oi(), e),
+				assetSink: ma(Hi()),
+				openArchive: (e) => Mo(Hi(), e),
 				refreshSubscriptions: (e) => {
 					r.refreshAll(e);
 				},
-				putArchive: Ct
+				putArchive: xt
 			})
 		},
 		{
 			method: "GET",
-			path: pa,
-			handle: vo({
+			path: Ea,
+			handle: jo({
 				secret: O,
 				store: e.store
 			})
 		},
 		{
 			method: "GET",
-			path: fa,
-			handle: fo({ secret: O })
+			path: Ta,
+			handle: To({ secret: O })
 		},
 		{
 			method: "POST",
-			path: da,
-			handle: co({
+			path: wa,
+			handle: So({
 				secret: O,
 				store: e.store,
 				snapshot: e.dataTransferSnapshot ?? { tables: [] },
 				dialect: e.dataTransferDialect ?? "memory",
 				tenantTables: [...e.tenantScopedTables],
-				loadProfile: Fn,
-				assetSource: na(Oi(), e.store),
-				putArchive: Ct
+				loadProfile: zn,
+				assetSource: ha(Hi(), e.store),
+				putArchive: xt
 			})
 		}
-	] : [], Tt = [
+	] : [], k = [
 		...e.httpRoutes ?? [],
-		...xt.httpRoutes,
-		...wt,
+		...yt.httpRoutes,
+		...Ct,
 		...x.httpRoutes
 	];
-	Object.assign(D, C.handlers);
-	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Ar((r) => Si(r, (r) => {
+	Object.assign(D, S.handlers);
+	for (let t of E(e.discovered.streams ?? [])) D[t.descriptor.name] = (n) => Pr((r) => Oi(r, (r) => {
 		let i = We(r), a = t.executor(n, i);
-		if (U.isEffect(a)) {
-			let t = a.pipe(U.provide(Yr(i.store)));
-			return (e.baseLayer ? t.pipe(U.provide(e.baseLayer)) : t).pipe(U.provide(Ge)).pipe(U.provide(Ke)).pipe(U.provide(qe)).pipe(U.provide(Je));
+		if (J.isEffect(a)) {
+			let t = a.pipe(J.provide(ei(i.store)));
+			return (e.baseLayer ? t.pipe(J.provide(e.baseLayer)) : t).pipe(J.provide(Ke)).pipe(J.provide(qe)).pipe(J.provide(Je)).pipe(J.provide(Ye));
 		}
-		return typeof a == "object" && a && typeof a.then == "function" ? U.promise(() => a) : a;
+		return typeof a == "object" && a && typeof a.then == "function" ? J.promise(() => a) : a;
 	}), `stream.${t.descriptor.name}`);
 	for (let t of e.discovered.workflows ?? []) D[t.definition.name] = (e) => G(async (e, n) => {
 		let r = n;
-		return ai(g, {
+		return di(_, {
 			subject: r.subject,
 			traceId: r.traceId,
 			source: "workflow-rpc"
 		}).start(t.definition.name, e);
 	}, e, `workflow.${t.definition.name}`);
-	fe && (D[Qn.name] = (e) => K(T({
-		descriptor: Qn,
+	pe && (D[ir.name] = (e) => Fr(T({
+		descriptor: ir,
 		executor: (e) => {
 			let t = e.id;
 			return {
@@ -1246,30 +1247,30 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: ur(H("id", t), H("executionId", t)),
+				predicate: W(U("id", t), U("executionId", t)),
 				take: 1,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Qn.name}`), D[er.name] = (e) => K(T({
-		descriptor: er,
+	}, e), r, `subscription.${ir.name}`), D[ar.name] = (e) => Fr(T({
+		descriptor: ar,
 		executor: (e) => {
-			let t = e, n = [...t.tag === void 0 ? [] : [H("tag", t.tag)], ...t.status === void 0 ? [] : [H("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
+			let t = e, n = [...t.tag === void 0 ? [] : [U("tag", t.tag)], ...t.status === void 0 ? [] : [U("status", t.status)]], r = Number.isFinite(t.limit) && t.limit !== void 0 ? Math.min(Math.max(Math.floor(t.limit), 1), 500) : 100;
 			return {
 				table: "_voltro_workflow_runs",
 				order: [{
 					column: "startedAt",
 					direction: "desc"
 				}],
-				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : ar(...n),
+				predicate: n.length === 0 ? void 0 : n.length === 1 ? n[0] : ur(...n),
 				take: r,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${er.name}`), D[$n.name] = (e) => K(T({
-		descriptor: $n,
+	}, e), r, `subscription.${ar.name}`), D[V.name] = (e) => Fr(T({
+		descriptor: V,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1278,14 +1279,14 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "startedAt",
 					direction: "asc"
 				}],
-				predicate: H("runId", t),
+				predicate: U("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${$n.name}`), D[Zn.name] = (e) => K(T({
-		descriptor: Zn,
+	}, e), r, `subscription.${V.name}`), D[rr.name] = (e) => Fr(T({
+		descriptor: rr,
 		executor: (e) => {
 			let t = e.runId;
 			return {
@@ -1294,14 +1295,14 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "occurredAt",
 					direction: "asc"
 				}],
-				predicate: H("runId", t),
+				predicate: U("runId", t),
 				take: 1e3,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${Zn.name}`), D[z.name] = (e) => K(T({
-		descriptor: z,
+	}, e), r, `subscription.${rr.name}`), D[er.name] = (e) => Fr(T({
+		descriptor: er,
 		executor: (e) => {
 			let t = e;
 			return {
@@ -1310,14 +1311,14 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "occurredAt",
 					direction: "desc"
 				}],
-				predicate: t.name === void 0 ? void 0 : H("name", t.name),
+				predicate: t.name === void 0 ? void 0 : U("name", t.name),
 				take: Math.max(1, Math.min(500, t.limit ?? 100)),
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${z.name}`), D[B.name] = (e) => K(T({
-		descriptor: B,
+	}, e), r, `subscription.${er.name}`), D[tr.name] = (e) => Fr(T({
+		descriptor: tr,
 		executor: (e) => {
 			let t = e.eventId;
 			return {
@@ -1326,74 +1327,74 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 					column: "createdAt",
 					direction: "asc"
 				}],
-				predicate: H("eventId", t),
+				predicate: U("eventId", t),
 				take: 500,
 				skip: void 0,
 				projection: void 0
 			};
 		}
-	}, e), r, `subscription.${B.name}`), D[Yn.name] = (t) => G(async (t, n) => {
+	}, e), r, `subscription.${tr.name}`), D[$n.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { executionId: r.executionId }), await g.cancel(r.workflowName, r.executionId), await Rt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
-	}, t, `action.${Yn.name}`), D[Xn.name] = (t) => G(async (t, n) => {
+		return await ot(e.store, n.subject, { executionId: r.executionId }), await _.cancel(r.workflowName, r.executionId), await zt(r.workflowName, r.executionId, "workflow.cancel"), { ok: !0 };
+	}, t, `action.${$n.name}`), D[nr.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { executionId: r.executionId }), await g.resume(r.workflowName, r.executionId), { ok: !0 };
-	}, t, `action.${Xn.name}`), D[tr.name] = (t) => G(async (t, n) => {
+		return await ot(e.store, n.subject, { executionId: r.executionId }), await _.resume(r.workflowName, r.executionId), { ok: !0 };
+	}, t, `action.${nr.name}`), D[or.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { id: r.id }), g.signal({ id: r.id }, r.signalName, r.payload);
-	}, t, `action.${tr.name}`), D[nr.name] = (t) => G(async (t, n) => {
+		return await ot(e.store, n.subject, { id: r.id }), _.signal({ id: r.id }, r.signalName, r.payload);
+	}, t, `action.${or.name}`), D[sr.name] = (t) => G(async (t, n) => {
 		let r = t;
-		return await gt(e.store, n.subject, { id: r.id }), g.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
-	}, t, `action.${nr.name}`));
-	let kt = [
-		...E(e.discovered.queries).map((e) => R(e.descriptor)),
-		...E(e.discovered.mutations).map((e) => Kn(e.descriptor)),
-		...E(e.discovered.actions).map((e) => L(e.descriptor)),
-		...ct.queries.map((e) => R(e.descriptor)),
-		...ct.mutations.map((e) => Kn(e.descriptor)),
-		...lt.queries.map((e) => R(e.descriptor)),
-		...lt.mutations.map((e) => Kn(e.descriptor)),
-		...x.queries.map((e) => R(e.descriptor)),
-		...x.mutations.map((e) => Kn(e.descriptor)),
-		...x.actions.map((e) => L(e.descriptor)),
-		...E(e.discovered.streams ?? []).map((e) => qn(e.descriptor)),
-		...C.rpcs,
-		...(e.discovered.workflows ?? []).map((e) => Ci(e.definition)),
-		...fe ? [
-			R(Qn),
-			R(er),
-			R($n),
-			R(Zn),
-			R(z),
-			R(B),
-			L(Yn),
-			L(Xn),
-			L(tr),
-			L(nr)
+		return await ot(e.store, n.subject, { id: r.id }), _.update({ id: r.id }, r.updateName, r.payload, r.timeoutMs === void 0 ? void 0 : { timeoutMs: r.timeoutMs });
+	}, t, `action.${sr.name}`));
+	let Et = [
+		...E(e.discovered.queries).map((e) => B(e.descriptor)),
+		...E(e.discovered.mutations).map((e) => Xn(e.descriptor)),
+		...E(e.discovered.actions).map((e) => z(e.descriptor)),
+		...lt.queries.map((e) => B(e.descriptor)),
+		...lt.mutations.map((e) => Xn(e.descriptor)),
+		...ut.queries.map((e) => B(e.descriptor)),
+		...ut.mutations.map((e) => Xn(e.descriptor)),
+		...x.queries.map((e) => B(e.descriptor)),
+		...x.mutations.map((e) => Xn(e.descriptor)),
+		...x.actions.map((e) => z(e.descriptor)),
+		...E(e.discovered.streams ?? []).map((e) => Zn(e.descriptor)),
+		...S.rpcs,
+		...(e.discovered.workflows ?? []).map((e) => ki(e.definition)),
+		...pe ? [
+			B(ir),
+			B(ar),
+			B(V),
+			B(rr),
+			B(er),
+			B(tr),
+			z($n),
+			z(nr),
+			z(or),
+			z(sr)
 		] : []
-	], At = Di.make(...kt).middleware(Hn).middleware(Un), jt = qr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Mt = e.dormancyTenantId ?? br, Nt = e.dormancy === "sleep" ? {
-		register: (t, n, r) => ui(e.store, {
-			tenantId: r ?? Mt,
+	], Dt = Vi.make(...Et).middleware(Kn).middleware(qn), Ot = Qr({ resolveSubject: ({ headers: t, clientId: n }) => e.resolveSubject(t, n) }), Nt = e.dormancyTenantId ?? wr, Ft = e.dormancy === "sleep" ? {
+		register: (t, n, r) => _i(e.store, {
+			tenantId: r ?? Nt,
 			kind: "workflow",
 			refId: t,
 			wakeAt: n
 		}),
-		cancel: (t, n) => Mr(e.store, {
-			tenantId: n ?? Mt,
+		cancel: (t, n) => Lr(e.store, {
+			tenantId: n ?? Nt,
 			kind: "workflow",
 			refId: t
 		}).then(() => {})
-	} : void 0, k = he ? await import("@voltro/workflow") : void 0, A = k?.makeWorkflowRunRecorder({
+	} : void 0, A = ge ? await import("@voltro/workflow") : void 0, j = A?.makeWorkflowRunRecorder({
 		store: e.store,
 		...e.workflowRecording === void 0 ? {} : { recording: e.workflowRecording },
-		...Nt === void 0 ? {} : { wakeups: Nt }
-	}), Ft = async (t, n) => {
-		await k.closeWorkflowChildrenForParent({
+		...Ft === void 0 ? {} : { wakeups: Ft }
+	}), Lt = async (t, n) => {
+		await A.closeWorkflowChildrenForParent({
 			store: e.store,
 			parentExecutionId: t,
 			parentStatus: n,
-			recorder: A,
-			log: { warn: (e, t) => re.warn(e, t ?? {}) },
+			recorder: j,
+			log: { warn: (e, t) => h.warn(e, t ?? {}) },
 			interruptChild: async (t, n) => {
 				let r = (e.discovered.workflows ?? []).find((e) => e.definition.name === t);
 				if (!r) throw Error(`Unknown child workflow: ${t}`);
@@ -1401,11 +1402,11 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				await f.runPromise(r.definition.interrupt(n));
 			}
 		});
-	}, Rt = async (t, n, r) => {
+	}, zt = async (t, n, r) => {
 		let i = (await e.store.query({
 			table: "_voltro_workflow_runs",
 			order: [],
-			predicate: H("executionId", n),
+			predicate: U("executionId", n),
 			projection: void 0,
 			skip: void 0,
 			take: 1
@@ -1416,7 +1417,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		}), o = i.subject?.tenantId ?? void 0;
-		a && await A.recordEvent({
+		a && await j.recordEvent({
 			runId: i.id,
 			eventType: "run-cancelled",
 			payload: {
@@ -1425,18 +1426,18 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				executionId: n,
 				...o == null ? {} : { tenantId: o }
 			}
-		}), a && await Ft(n, "cancelled");
-	}, zt = [
-		...oi(e.discovered.workflows ?? [], {
+		}), a && await Lt(n, "cancelled");
+	}, Bt = [
+		...K(e.discovered.workflows ?? [], {
 			buildContext: (t, n) => e.buildContextForWorkflow?.(t, n) ?? We({
 				subject: t.subject,
 				traceId: t.traceId
 			}, e.store, void 0, `workflow:${n.workflowName}`, { parentExecutionId: n.executionId }),
-			resolveStartContext: se,
-			...ce === void 0 ? {} : { resolveAuthority: ce }
+			resolveStartContext: ce,
+			...ue === void 0 ? {} : { resolveAuthority: ue }
 		}, (t, n, r) => {
-			let i = k.getWorkflowVersionMetadata(t.definition);
-			return k.wrapWorkflowExecuteWithRunRecording({
+			let i = A.getWorkflowVersionMetadata(t.definition);
+			return A.wrapWorkflowExecuteWithRunRecording({
 				name: t.definition.name,
 				store: e.store,
 				subject: r.subject,
@@ -1447,27 +1448,27 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflowPatches: i.patches,
 				parentExecutionId: r?.parentExecutionId ?? null,
 				parentClosePolicy: r?.parentClosePolicy ?? null,
-				onParentClose: ({ executionId: e, status: t }) => Ft(e, t),
-				...j(t.definition),
+				onParentClose: ({ executionId: e, status: t }) => Lt(e, t),
+				...rt(t.definition),
 				onTerminal: async ({ executionId: e }) => {
 					await d?.gate.release(e);
 				},
-				recorder: A,
-				pluginWorkflowStepLayer: at,
-				recordRun: ci
+				recorder: j,
+				pluginWorkflowStepLayer: tt,
+				recordRun: hi
 			}, n);
 		}),
 		...e.discovered.workflowWorkers ?? [],
-		...Ee === void 0 ? [] : [Ee]
-	], Bt = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...Ee === void 0 ? [] : ["voltro.deliverWebhook"]], Ht = zt.length > 0 ? W.mergeAll(...zt) : W.empty;
-	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || Ee !== void 0) && e.workflowEngineLayer !== void 0) {
-		let t = Ht.pipe(W.provideMerge(e.workflowEngineLayer));
-		f = fr.make((e.baseLayer === void 0 ? t : t.pipe(W.provideMerge(e.baseLayer))).pipe(W.provideMerge(Vn({})))), await f.runPromise(U.void), (e.log ?? I({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Bt.length} entity type(s) registered`, { entities: Bt });
+		...we === void 0 ? [] : [we]
+	], Ht = [...(e.discovered.workflows ?? []).map((e) => e.definition.name).filter(Boolean), ...we === void 0 ? [] : ["voltro.deliverWebhook"]], Ut = Bt.length > 0 ? Y.mergeAll(...Bt) : Y.empty;
+	if (((e.discovered.workflows?.length ?? 0) > 0 || (e.discovered.workflowWorkers?.length ?? 0) > 0 || e.scheduleCoordination === "cluster" || we !== void 0) && e.workflowEngineLayer !== void 0) {
+		let t = Ut.pipe(Y.provideMerge(e.workflowEngineLayer));
+		f = Ni.make((e.baseLayer === void 0 ? t : t.pipe(Y.provideMerge(e.baseLayer))).pipe(Y.provideMerge(Gn({})))), await f.runPromise(J.void), (e.log ?? R({ scope: "voltro:serve" })).child("workflow").info(`workflow runtime ready — ${Ht.length} entity type(s) registered`, { entities: Ht });
 		let n = await import("@voltro/workflow/cluster"), r = (e) => f.runPromise(n.redriveFailedRun(e)), i = (e) => f.runPromise(n.resumeRunFromStep(e));
-		ne = await Vt({
-			provider: zi(e.plugins ?? [])?.broadcast?.provider,
-			crossReplica: zi(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
-			namespace: Pe,
+		ne = await m({
+			provider: Qi(e.plugins ?? [])?.broadcast?.provider,
+			crossReplica: Qi(e.plugins ?? [])?.broadcast?.crossReplica ?? !1,
+			namespace: Me,
 			replicaId: crypto.randomUUID(),
 			pollStorage: () => f.runPromise(n.pollWorkflowStorage),
 			onChange: (t) => e.store.onChange((e) => t({
@@ -1475,14 +1476,14 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				op: e.op,
 				...e.origin === void 0 ? {} : { origin: e.origin }
 			})),
-			log: (e.log ?? I({ scope: "voltro:serve" })).child("workflow")
+			log: (e.log ?? R({ scope: "voltro:serve" })).child("workflow")
 		}), ee = async (t) => {
-			let n = await Ie({
+			let n = await Be({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t.runId);
-			return n.statusReset && await A.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1500,7 +1501,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				workflows: e.discovered.workflows ?? [],
 				runResume: i
 			}, t.runId, t.step);
-			return n.statusReset && await A.recordEvent({
+			return n.statusReset && await j.recordEvent({
 				runId: t.runId,
 				eventType: "run-redriven",
 				payload: {
@@ -1515,10 +1516,10 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				reason: n.outcome.reason
 			};
 		};
-		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Hr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : gi, l = Jr({
+		let a = (e.scheduleCoordination ?? "single") === "advisoryLock" ? qr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Si, l = $r({
 			coordinator: a,
 			replicaId: e.scheduleReplicaId ?? `pid-${process.pid}`
-		}), u = I({ scope: "voltro:flow-control" }), p = {
+		}), u = R({ scope: "voltro:flow-control" }), p = {
 			info: (e, t) => {
 				u.info(e, t);
 			},
@@ -1528,19 +1529,19 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			error: (e, t) => {
 				u.error(e, t ?? {});
 			}
-		}, m, re = () => {
-			if (m !== void 0) return m;
-			if (o !== void 0 && A !== void 0) return m = _({
+		}, re, ie = () => {
+			if (re !== void 0) return re;
+			if (o !== void 0 && j !== void 0) return re = de({
 				store: e.store,
 				log: P,
 				workflows: e.discovered.workflows ?? [],
 				workflowsProxy: o,
 				workflowRuntime: f,
-				workflowRunRecorder: A,
-				closeChildrenForParent: Ft
-			}), m;
+				workflowRunRecorder: j,
+				closeChildrenForParent: Lt
+			}), re;
 		};
-		s = re, d = w({
+		s = ie, d = w({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1554,13 +1555,13 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			},
 			workflows: e.discovered.workflows ?? [],
 			facade: () => o,
-			cancelRunWithReason: re,
-			recordRunEvent: () => A?.recordEvent,
+			cancelRunWithReason: ie,
+			recordRunEvent: () => j?.recordEvent,
 			...e.workflowStaleness === void 0 ? {} : { staleness: e.workflowStaleness },
 			...e.workflowSuspendSignalHintMs === void 0 ? {} : { suspendSignalHintMs: e.workflowSuspendSignalHintMs },
 			scheduleCoordinated: l,
 			onAbandoned: async (t) => {
-				await _t({
+				await M({
 					workflows: e.discovered.workflows ?? [],
 					facade: () => o,
 					log: p,
@@ -1570,7 +1571,7 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			log: p
 		});
 		let h = d;
-		h !== void 0 && J(() => h.stop()), c = Et({
+		h !== void 0 && pi(() => h.stop()), c = At({
 			store: e.store,
 			onChange: (t) => e.store.onChange((e) => t({
 				table: e.table,
@@ -1581,10 +1582,10 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				tickIntervalMs: e.scheduling.inferenceTickMs
 			},
 			enabled: (e.discovered.workflows?.length ?? 0) > 0,
-			resumeSignal: () => f === void 0 || k === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
-				await f.runPromise(k.completeSuspendingSignal({
+			resumeSignal: () => f === void 0 || A === void 0 ? void 0 : async ({ executionId: t, workflowName: n, signalName: r, payload: i }) => {
+				await f.runPromise(A.completeSuspendingSignal({
 					store: e.store,
-					target: nt(t, n),
+					target: st(t, n),
 					signalName: r,
 					payload: i
 				}));
@@ -1593,8 +1594,8 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			scheduleCoordinated: l,
 			log: p
 		});
-		let ie = c;
-		ie !== void 0 && J(() => ie.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ii({
+		let ae = c;
+		ae !== void 0 && pi(() => ae.stop()), o = (e.discovered.workflows?.length ?? 0) > 0 ? ui({
 			workflows: e.discovered.workflows ?? [],
 			runEffect: (e) => f.runPromise(e),
 			onEnqueue: () => ne?.publishWake(),
@@ -1603,59 +1604,59 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				startPayloadSchema: h.gate.startPayloadSchema,
 				parkDelayedStart: h.gate.parkDelayed
 			},
-			rememberStartContext: oe,
+			rememberStartContext: se,
 			signal: async (t, n, r) => {
-				let i = await k.sendWorkflowSignal({
+				let i = await A.sendWorkflowSignal({
 					store: e.store,
-					recorder: A,
+					recorder: j,
 					target: t,
 					signalName: n,
 					payload: r
 				});
-				return await f.runPromise(k.completeSuspendingSignal({
+				return await f.runPromise(A.completeSuspendingSignal({
 					store: e.store,
 					target: t,
 					signalName: n,
 					payload: r
 				})).catch(() => {}), i;
 			},
-			update: (t, n, r, i) => k.sendWorkflowUpdate({
+			update: (t, n, r, i) => A.sendWorkflowUpdate({
 				store: e.store,
-				recorder: A,
+				recorder: j,
 				target: t,
 				updateName: n,
 				payload: r,
 				...i === void 0 ? {} : { options: i }
 			}),
-			listRuns: (t) => Ne(e.store, t),
-			retry: (t, n) => me({
+			listRuns: (t) => Le(e.store, t),
+			retry: (t, n) => he({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runPromise: (e) => f.runPromise(e)
 			}, t, n),
-			redrive: (t) => Ie({
+			redrive: (t) => Be({
 				store: e.store,
 				workflows: e.discovered.workflows ?? [],
 				runRedrive: r
 			}, t).then((e) => e.outcome)
 		}) : void 0;
 	}
-	let Ut = W.mergeAll(At.toLayer(D), jt), qt = St(D, e.discovered.queries.map((e) => e.descriptor.name), fe), Jt = W.mergeAll(At.toLayer(qt), jt), M = e.observability, Yt = await jr({
+	let Wt = Y.mergeAll(Dt.toLayer(D), Ot), Kt = bt(D, e.discovered.queries.map((e) => e.descriptor.name), pe), qt = Y.mergeAll(Dt.toLayer(Kt), Ot), N = e.observability, Xt = await Ir({
 		...e.appName === void 0 ? {} : { serviceName: e.appName },
-		...M && M.spanProcessors.length > 0 ? { extraSpanProcessors: M.spanProcessors } : {},
-		...M && M.metricReaders.length > 0 ? { extraMetricReaders: M.metricReaders } : {},
-		...M && Object.keys(M.resourceAttributes).length > 0 ? { resourceAttributes: M.resourceAttributes } : {},
-		...M && M.sampler !== void 0 ? { sampler: M.sampler } : {}
-	}), Xt = !1, Zt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: Qt, shutdown: $t } = _i({
-		group: At,
-		handlersLayer: Ut,
-		httpHandlersLayer: Jt,
+		...N && N.spanProcessors.length > 0 ? { extraSpanProcessors: N.spanProcessors } : {},
+		...N && N.metricReaders.length > 0 ? { extraMetricReaders: N.metricReaders } : {},
+		...N && Object.keys(N.resourceAttributes).length > 0 ? { resourceAttributes: N.resourceAttributes } : {},
+		...N && N.sampler !== void 0 ? { sampler: N.sampler } : {}
+	}), Zt = !1, Qt = e.store.ping ? () => e.store.ping().then(() => !0).catch(() => !1) : void 0, { server: $t, shutdown: en } = Ci({
+		group: Dt,
+		handlersLayer: Wt,
+		httpHandlersLayer: qt,
 		port: e.port ?? 4e3,
 		...e.host === void 0 ? {} : { host: e.host },
 		path: e.path ?? "/ws",
-		tracerLayer: Yt.layer,
-		security: de(e),
-		...Cn(e),
+		tracerLayer: Xt.layer,
+		security: fe(e),
+		...kn(e),
 		...e.discovered.wsGateways !== void 0 && e.discovered.wsGateways.length > 0 ? { webSocketGateways: e.discovered.wsGateways } : {},
 		resolveGatewaySubject: async (t) => {
 			let n = await e.resolveSubject(t, -1);
@@ -1664,19 +1665,20 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 				...n.credentialExpiresAt === void 0 ? {} : { credentialExpiresAt: n.credentialExpiresAt * 1e3 }
 			};
 		},
-		...it,
+		...et,
 		healthCheck: {
-			isReady: () => Xt,
-			...Zt ? { ping: Zt } : {}
+			isReady: () => Zt,
+			...Qt ? { ping: Qt } : {}
 		},
-		...Tt.length > 0 ? { httpRoutes: Tt } : {},
+		...k.length > 0 ? { httpRoutes: k } : {},
 		...e.getStore === void 0 ? {} : { getStore: e.getStore },
 		...De.size > 0 ? { webhookRoutes: De } : {},
-		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute }
-	}), N = ca(Qt);
-	if (await kr(Qt), (e.discovered.schedules?.length ?? 0) > 0) {
-		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? Hr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : gi;
-		p = await vi(e.discovered.schedules ?? [], {
+		...e.inspectRoute === void 0 ? {} : { inspectRoute: e.inspectRoute },
+		...e.inspectStream === void 0 ? {} : { inspectStream: e.inspectStream }
+	}), tn = xa($t);
+	if (await Nr($t), (e.discovered.schedules?.length ?? 0) > 0) {
+		let t = (e.scheduleCoordination ?? "single") === "advisoryLock" ? qr(e.store, e.scheduleReplicaId ?? `pid-${process.pid}`) : Si;
+		ie = await wi(e.discovered.schedules ?? [], {
 			store: e.store,
 			coordinator: t,
 			defaultTrigger: e.scheduleDefaultTrigger ?? "self",
@@ -1690,259 +1692,264 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			}, e.store, void 0, `schedule:${n}`),
 			log: {
 				info: (e, t) => {
-					ie.info(e, t);
+					ae.info(e, t);
 				},
 				warn: (e, t) => {
-					ie.warn(e, t);
+					ae.warn(e, t);
 				},
 				error: (e, t) => {
-					ie.error(e, t ?? {});
+					ae.error(e, t ?? {});
 				},
 				debug: () => {}
 			},
 			...e.scheduleFireInterceptor === void 0 ? {} : { interceptFire: e.scheduleFireInterceptor },
 			...e.onScheduleRunEvent === void 0 ? {} : { onRunEvent: e.onScheduleRunEvent }
-		}), e.onSchedulerReady?.(p);
+		}), e.onSchedulerReady?.(ie);
 	}
-	let P = e.log ?? I({ scope: "voltro:serve" }), en, tn;
-	if ((e.discovered.subscribers?.length ?? 0) > 0 && (en = $e(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, C.bus)), (e.discovered.reactions?.length ?? 0) > 0) {
-		let t = P.child("reaction"), n = async (n, r) => {
-			if (n.kind === "workflow") {
-				if (g === void 0) {
-					t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
+	let P = e.log ?? R({ scope: "voltro:serve" }), nn, rn, F = e.claimChange;
+	if ((e.discovered.subscribers?.length ?? 0) > 0 && (nn = it(e.discovered.subscribers ?? [], e.store, P.child("subscribe"), e.schemaRegistry, {
+		eventBus: S.bus,
+		...F === void 0 ? {} : { claimOnce: F }
+	})), (e.discovered.reactions?.length ?? 0) > 0) {
+		let t = P.child("reaction");
+		rn = ye(e.discovered.reactions ?? [], e.store, {
+			runAct: async (n, r) => {
+				if (n.kind === "workflow") {
+					if (_ === void 0) {
+						t.warn("reaction workflow act skipped — no workflow engine in this app", { workflow: n.workflow });
+						return;
+					}
+					let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
+					await di(_, {
+						traceId: `reaction:${n.workflow}`,
+						source: `reaction:${n.workflow}`
+					}).start(n.workflow, e);
 					return;
 				}
-				let e = n.payload === void 0 ? r.new ?? r.old ?? {} : n.payload(r);
-				await ai(g, {
-					traceId: `reaction:${n.workflow}`,
-					source: `reaction:${n.workflow}`
-				}).start(n.workflow, e);
-				return;
-			}
-			await ye(n.agent, r, {
-				findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
-				runAction: (e, t, n) => Promise.resolve(dt(e, t, n)),
-				makeSubject: (e) => Wn(e),
-				now: () => Date.now(),
-				log: t
-			});
-		}, r = async (n, r) => {
-			try {
-				let { requireAiBudget: t } = await import("@voltro/ai");
-				return (await U.runPromise(U.either(t(e.store, {
-					tenantId: n,
-					limitUsd: r
-				}))))._tag === "Right";
-			} catch (e) {
-				return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
-			}
-		}, i = Qe(e.store, { onError: (e) => t.warn("reaction: rate-slot claim failed; refusing the act", { cause: String(e) }) });
-		tn = _e(e.discovered.reactions ?? [], e.store, {
-			runAct: n,
-			checkBudget: r,
-			claimRateSlot: (e) => i.claim(e)
+				await Se(n.agent, r, {
+					findAgentSend: (t) => e.discovered.actions.find((e) => e.descriptor.name === `${t}.send`),
+					runAction: (e, t, n) => Promise.resolve(dt(e, t, n)),
+					makeSubject: (e) => Jn(e),
+					now: () => Date.now(),
+					log: t
+				});
+			},
+			checkBudget: async (n, r) => {
+				try {
+					let { requireAiBudget: t } = await import("@voltro/ai");
+					return (await J.runPromise(J.either(t(e.store, {
+						tenantId: n,
+						limitUsd: r
+					}))))._tag === "Right";
+				} catch (e) {
+					return t.warn("reaction budget check failed — refusing the act", { tenantId: n }, e), !1;
+				}
+			},
+			...F === void 0 ? {} : { claimRateSlot: (e) => F(Pt, e) },
+			...F === void 0 ? {} : { claimDedupe: (e) => F(wt, e) }
 		}, t);
 	}
-	let nn;
-	(e.discovered.aggregates?.length ?? 0) > 0 && (nn = await h({
+	let an;
+	(e.discovered.aggregates?.length ?? 0) > 0 && (an = await re({
 		discovered: e.discovered.aggregates ?? [],
 		store: e.store,
 		log: P.child("aggregate"),
 		...e.analytics === void 0 ? {} : { analytics: e.analytics },
 		...e.aggregateStorage === void 0 ? {} : { storage: e.aggregateStorage },
 		...e.aggregateCoordinator === void 0 ? {} : { coordinator: e.aggregateCoordinator }
-	}), Ge = W.succeed(vr, nn.registry));
-	let rn;
-	(e.discovered.expectations?.length ?? 0) > 0 && (rn = Er({
+	}), Ke = Y.succeed(Sr, an.registry));
+	let on;
+	(e.discovered.expectations?.length ?? 0) > 0 && (on = Ar({
 		discovered: e.discovered.expectations ?? [],
 		store: e.store,
 		log: P.child("expectation")
-	}), Ke = W.succeed(Sr, rn.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Or({
+	}), qe = Y.succeed(Er, on.registry)), (e.discovered.budgets?.length ?? 0) > 0 && (n = Mr({
 		discovered: e.discovered.budgets ?? [],
 		log: P.child("finops")
-	}), qe = W.succeed(yr, n.registry));
-	let an;
-	return (e.discovered.experiments?.length ?? 0) > 0 && (an = Dr({
+	}), Je = Y.succeed(Cr, n.registry));
+	let sn;
+	return (e.discovered.experiments?.length ?? 0) > 0 && (sn = jr({
 		discovered: e.discovered.experiments ?? [],
 		store: e.store,
 		log: P.child("experiment")
-	}), Je = W.succeed(Cr, an.registry)), Xt = !0, e.bootTiming?.mark("ready"), {
+	}), Ye = Y.succeed(Dr, sn.registry)), Zt = !0, e.bootTiming?.mark("ready"), {
 		dispatcher: r,
-		server: Qt,
-		scheduler: p,
-		eventsSnapshot: Ce(C.bus, C.declared),
+		server: $t,
+		scheduler: ie,
+		eventsSnapshot: Ee(S.bus, S.declared),
 		membersSnapshot: () => ({
-			members: Ve.membership.list(),
+			members: Re.membership.list(),
 			capturedAt: Date.now()
 		}),
-		agentTools: () => bt,
-		rpcMetrics: () => tt,
-		webhooksService: () => we,
+		agentTools: () => vt,
+		rpcMetrics: () => Qe,
+		webhooksService: () => Ce,
 		runCanceller: () => s(),
 		flowControlHealth: () => d?.cancelHealth(),
 		inferenceHealth: () => c?.health(),
-		workflowWriteActions: () => g === void 0 || A === void 0 ? void 0 : ge({
+		workflowWriteActions: () => _ === void 0 || j === void 0 ? void 0 : v({
 			store: e.store,
 			log: P,
 			workflows: e.discovered.workflows ?? [],
 			workflowsProxy: o,
 			workflowRuntime: f,
-			workflowRunRecorder: A,
-			closeChildrenForParent: Ft
+			workflowRunRecorder: j,
+			closeChildrenForParent: Lt
 		}),
 		redriveWorkflowRun: (e) => ee ? ee(e) : Promise.reject(/* @__PURE__ */ Error("redrive: this app registers no workflows")),
 		resumeWorkflowRunFromStep: (e) => te ? te(e) : Promise.reject(/* @__PURE__ */ Error("resume-from-step: this app registers no workflows")),
 		close: async () => {
-			Xt = !1, await N.drainRequests();
+			Zt = !1, await tn.drainRequests();
 			for (let e of Oe) try {
 				await e();
 			} catch (e) {
 				P.warn("serve: teardown step failed", {}, e);
 			}
-			await Ue?.detach(), await Ve.detach(), nn?.detach(), rn?.detach(), n?.detach(), an?.detach(), tn?.(), en?.(), await p?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await $t(), await N.finish();
+			await Ue?.detach(), await Re.detach(), an?.detach(), on?.detach(), n?.detach(), sn?.detach(), rn?.(), nn?.(), await ie?.shutdown(), r.close(), await ne?.detach(), await f?.dispose(), await en(), await tn.finish();
 		}
 	};
-}, $ = I({ scope: "voltro:serve" }), So = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Co = Xt, wo = async (e) => {
-	let t = jn(process.cwd());
-	if (zn(t)) {
+}, $ = R({ scope: "voltro:serve" }), Fo = (e, t, n) => (e === "production" || e === "staging") && t !== "memory" && n !== "0", Io = F, Lo = async (e) => {
+	let t = sn(process.cwd());
+	if (Un(t)) {
 		let n;
 		try {
-			let e = await import(Bn(t).href);
+			let e = await import(Wn(t).href);
 			typeof e.runServe == "function" ? n = e.runServe : $.warn("serve bundle has no runServe export — using the standard serve path");
 		} catch (e) {
 			$.warn("serve bundle failed to load — using the standard serve path", {}, e);
 		}
 		if (n) return $.info("serve: booting from the precompiled serve bundle"), n(e);
 	}
-	return To(e);
-}, To = async (l) => {
-	let u = Mn();
+	return Ro(e);
+}, Ro = async (l) => {
+	xr("serve");
+	let u = In();
 	e("serve");
 	try {
-		Fi();
+		ji();
 	} catch (e) {
 		throw i(e instanceof Error ? e.message : String(e));
 	}
-	let m = process.cwd(), h = await qe(m), le = Zt({
+	let p = process.cwd(), m = await Qe(p), re = an({
 		kind: "api",
-		configPort: h?.port,
+		configPort: m?.port,
 		env: process.env,
-		flagPort: Co(l, "--port")
+		flagPort: Io(l, "--port")
 	});
-	for (let e of le.warnings) $.warn(e);
-	let ue = le.port;
-	pi(di(h?.secrets)), await Qt({
-		rawEnv: h?.env,
+	for (let e of re.warnings) $.warn(e);
+	let le = re.port;
+	bi(vi(m?.secrets)), await tn({
+		rawEnv: m?.env,
 		appType: "api",
-		root: m,
+		root: p,
 		log: $,
 		generateTypes: !1
 	}), u.mark("config");
-	let _ = (process.env.DB_DIALECT ?? h?.store ?? "memory").toLowerCase(), pe = (_ === "mariadb" || _ === "postgres" || _ === "mssql") && (process.env.CDC ?? "1") !== "0", me = _ === "mariadb" ? "mariadb" : _ === "mssql" ? "mssql" : void 0, ge = An(m);
-	if (!r() && zn(ge)) try {
-		let e = await import(Bn(ge).href);
+	let g = (process.env.DB_DIALECT ?? m?.store ?? "memory").toLowerCase(), de = (g === "mariadb" || g === "postgres" || g === "mssql") && (process.env.CDC ?? "1") !== "0", me = g === "mariadb" ? "mariadb" : g === "mssql" ? "mssql" : void 0, he = on(p);
+	if (!r() && Un(he)) try {
+		let e = await import(Wn(he).href);
 		if (e.modules) {
 			let t = {};
-			for (let [n, r] of Object.entries(e.modules)) t[Ln(m, n)] = r;
+			for (let [n, r] of Object.entries(e.modules)) t[Vn(p, n)] = r;
 			n(t), $.info("precompiled api bundle loaded", { modules: Object.keys(t).length });
 		}
 	} catch (e) {
 		$.warn("precompiled api bundle failed to load — falling back to source", {}, e);
 	}
-	let v = await wt(m), y = await Ft(v, { cdc: pe && me !== void 0 }), _e = te(y);
+	let v = await Ot(p), y = await zt(v, { cdc: de && me !== void 0 }), _e = ee(y);
 	{
-		Xe({
-			plugins: h?.plugins ?? [],
+		tt({
+			plugins: m?.plugins ?? [],
 			queries: y.queries,
 			mutations: y.mutations,
 			actions: y.actions,
 			streams: y.streams,
 			log: $
 		});
-		let e = he(y.serverOnlyLeaks, g(process.env, "strict"), Fr, "`voltro serve`");
+		let e = ge(y.serverOnlyLeaks, ue(process.env, "strict"), Br, "`voltro serve`");
 		if (e.action === "fail") throw i(e.message ?? "");
 		e.action === "warn" && $.warn(e.message ?? "");
 	}
-	let ve = v.filter((e) => kn.test(e)), ye = ve.length > 0 ? await On(ve, $.child("webhooks")) : {
+	let ye = v.filter((e) => Fn.test(e)), be = ye.length > 0 ? await Pn(ye, $.child("webhooks")) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
-	}, Se = En(y.events), Ce = ye.outgoing.length + ye.incoming.length + ye.providers.length + Se.length === 0 ? void 0 : {
-		...ye,
-		outgoing: [...ye.outgoing, ...Se]
-	}, Te = un({
+	}, Se = Mn(y.events), Te = be.outgoing.length + be.incoming.length + be.providers.length + Se.length === 0 ? void 0 : {
+		...be,
+		outgoing: [...be.outgoing, ...Se]
+	}, Ee = vn({
 		nodeEnv: process.env.NODE_ENV,
 		cdcDialect: me,
-		declared: h?.schema
-	}), Ae = dn({
-		gates: Te,
+		declared: m?.schema
+	}), Ne = yn({
+		gates: Ee,
 		runtime: {
-			traces: se(),
-			undo: bi()
+			traces: oe(),
+			undo: Ei()
 		}
 	});
-	if (Ae !== void 0) throw i(`serve: ${Ae}`);
-	let Ne = ln({
+	if (Ne !== void 0) throw i(`serve: ${Ne}`);
+	let Le = _n({
 		mix: y.featureMix,
-		plugins: h?.plugins ?? [],
-		gates: Te,
+		plugins: m?.plugins ?? [],
+		gates: Ee,
 		...me ? { cdcDialect: me } : {}
-	}), Fe = h?.analytics !== void 0 && h.analytics.kind !== "noop" && _ !== "memory" ? (await N(_)).makeSqlLayer(O()) : void 0, Ie = await bt({
-		spec: h?.analytics,
-		sqlLayer: Fe,
+	}), ze = m?.analytics !== void 0 && m.analytics.kind !== "noop" && g !== "memory" ? (await I(g)).makeSqlLayer(k()) : void 0, Be = await qe({
+		spec: m?.analytics,
+		sqlLayer: ze,
 		log: $
-	}), S = (() => {
+	}), C = (() => {
 		let e = new Set(y.tables.map((e) => e.tableName)), t = [...y.tables];
-		for (let n of [...Ne, ...Ie.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
+		for (let n of [...Le, ...Be.tables]) e.has(n.tableName) || (e.add(n.tableName), t.push(n));
 		return t;
 	})();
-	for (let e of S) lr(e);
+	for (let e of C) mr(e);
 	{
-		let e = Ir(xi(x(y), ae(S)));
+		let e = Vr(Di(we(y), vt(C)));
 		e !== void 0 && $.warn(e);
 	}
-	let Re = (process.env.NODE_ENV ?? "").toLowerCase();
-	if (So(Re, _, process.env.VOLTRO_AUTO_MIGRATE)) {
-		let e = (await N(_)).makeSqlLayer(O()), t = await U.runPromise(pr.SqlClient.pipe(U.flatMap((e) => gr(e, m)), U.provide(e), U.catchAll(() => U.succeed([]))));
+	let Ve = (process.env.NODE_ENV ?? "").toLowerCase();
+	if (Fo(Ve, g, process.env.VOLTRO_AUTO_MIGRATE)) {
+		let e = (await I(g)).makeSqlLayer(k()), t = await J.runPromise(Pi.SqlClient.pipe(J.flatMap((e) => Li(e, p)), J.provide(e), J.catchAll(() => J.succeed([]))));
 		t.length > 0 && ($.error(`serve: refusing to boot — ${t.length} pending file-based migration(s) have never run against this database. They perform the changes a schema diff cannot infer (data moves, backfills, table splits), so the declarative fingerprint check below cannot see them and would have let this process serve un-migrated data.`, { pending: t }), $.error("Run them from your pre-deploy job — `voltro db migrate .` (schema + files) or `voltro db files .` (files alone) — or set VOLTRO_AUTO_MIGRATE=0 to bypass every boot schema check. `voltro serve` never applies them itself: a rolling deploy would start N replicas and each would try."), process.exit(1));
-		let n = await U.runPromise(pr.SqlClient.pipe(U.flatMap((e) => _r(e, S, {
-			appliedBy: `serve:${Re}`,
+		let n = await J.runPromise(Pi.SqlClient.pipe(J.flatMap((e) => Ri(e, C, {
+			appliedBy: `serve:${Ve}`,
 			environment: "prod",
-			dialectId: _
-		})), U.provide(e)));
-		n.kind === "prod-mismatch" && ($.error(hr(n, _)), $.error(fn({
-			gates: Te,
+			dialectId: g
+		})), J.provide(e)));
+		n.kind === "prod-mismatch" && ($.error(Ii(n, g)), $.error(bn({
+			gates: Ee,
 			nodeEnv: process.env.NODE_ENV,
 			cdcDialect: me,
-			declared: h?.schema
-		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(hr(n, _));
+			declared: m?.schema
+		})), $.error("serve: refusing to boot — apply the schema first (voltro db apply in a pre-deploy step), or set VOLTRO_AUTO_MIGRATE=0 to bypass this check."), process.exit(1)), $.info(Ii(n, g));
 	}
-	await rn({
-		dialectId: _,
-		tables: S,
-		mode: tn(h?.reactiveTriggers),
-		lockSchema: O().schema,
-		makeLayer: async () => (await N(_)).makeSqlLayer(O()),
+	await fn({
+		dialectId: g,
+		tables: C,
+		mode: un(m?.reactiveTriggers),
+		lockSchema: k().schema,
+		makeLayer: async () => (await I(g)).makeSqlLayer(k()),
 		log: {
 			info: (e, t) => $.info(e, t ?? {}),
 			warn: (e, t) => $.warn(e, t ?? {})
 		}
 	});
-	let ze = ri(S);
+	let He = li(C);
 	u.mark("discover");
-	let w = await lt(h, void 0);
+	let w = await T(m, void 0);
 	{
 		let e = await c(w);
 		if (e !== void 0) throw i(`serve: ${e}`);
-		let t = await s(w, _, h);
+		let t = await s(w, g, m);
 		t !== void 0 && $.warn(t);
 	}
-	let Ze = wi(w, _);
-	for (let e of qt({
-		dialect: String(h?.store ?? process.env.DB_DIALECT ?? "postgres"),
+	let rt = Ai(w, g);
+	for (let e of Me({
+		dialect: String(m?.store ?? process.env.DB_DIALECT ?? "postgres"),
 		changeStrategy: (process.env.CDC ?? "1") === "0" ? "inline" : "cdc",
 		dbUrl: process.env.DB_URL,
-		crossReplicaBus: zi(h?.plugins ?? [])?.broadcast.crossReplica === !0,
+		crossReplicaBus: Qi(m?.plugins ?? [])?.broadcast.crossReplica === !0,
 		tables: y.tables.map((e) => ({
 			tableName: e.tableName,
 			isReactive: e.isReactive === !0
@@ -1953,190 +1960,210 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		})
 	})) e.level === "warn" ? $.warn(e.message) : $.info(e.message);
 	{
-		let e = C({
-			tables: ir().map((e) => ({ tableName: e.tableName })),
+		let e = Xe({
+			tables: lr().map((e) => ({ tableName: e.tableName })),
 			queries: y.queries.map((e) => ({
 				name: e.descriptor.name,
 				source: e.descriptor.source
 			}))
-		}), t = Rt(e);
+		}), t = N(e);
 		t !== void 0 && $.warn(t);
 	}
-	h?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = h.cache), h?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = h.cacheRedisUrl), h?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = h.cacheRedisDriver), h?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = h.cacheKeyPrefix);
-	let { service: Qe, invalidationBus: $e, snapshotCache: et, cache: nt, semantic: ut, evictSource: gt, backend: _t, stats: St, dispose: Et } = await it({
+	m?.cache && !process.env.CACHE_BACKEND && (process.env.CACHE_BACKEND = m.cache), m?.cacheRedisUrl && !process.env.CACHE_REDIS_URL && (process.env.CACHE_REDIS_URL = m.cacheRedisUrl), m?.cacheRedisDriver && !process.env.CACHE_REDIS_DRIVER && (process.env.CACHE_REDIS_DRIVER = m.cacheRedisDriver), m?.cacheKeyPrefix && !process.env.CACHE_KEY_PREFIX && (process.env.CACHE_KEY_PREFIX = m.cacheKeyPrefix);
+	let { service: it, invalidationBus: at, snapshotCache: ot, cache: st, semantic: bt, evictSource: St, backend: wt, stats: Tt, dispose: kt } = await Xt({
 		env: process.env,
-		semantic: h?.cacheSemantic ?? !1
+		semantic: m?.cacheSemantic ?? !1
 	});
-	ut !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${_t}` + (_t === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance")), w.onChange((e) => {
-		if (U.runFork($e.publish(e.table)), gt !== void 0) {
+	bt !== void 0 && $.info("semantic cache enabled — reactive eviction on live writes"), $.info(`cache backend resolved: ${wt}` + (wt === "redis" ? ` (driver ${process.env.CACHE_REDIS_DRIVER ?? "resp"})` : " — in-process, not cross-instance"));
+	let At = (e) => {
+		J.runFork(at.publish(e));
+	};
+	w.onChange((e) => {
+		if (J.runFork(at.publish(e.table)), St !== void 0) {
 			let t = (e.new ?? e.old)?.id;
-			gt({
+			St({
 				table: e.table,
 				op: e.op,
 				...t === void 0 ? {} : { id: t }
 			});
 		}
-	}), h?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = h.kv), h?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = h.kvRedisUrl), h?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = h.kvKeyPrefix);
-	let { kv: Dt, service: Ot } = await Kr({ store: w });
-	ht({
+	}), m?.kv && !process.env.KV_BACKEND && (process.env.KV_BACKEND = m.kv), m?.kvRedisUrl && !process.env.KV_REDIS_URL && (process.env.KV_REDIS_URL = m.kvRedisUrl), m?.kvKeyPrefix && !process.env.KV_KEY_PREFIX && (process.env.KV_KEY_PREFIX = m.kvKeyPrefix);
+	let { kv: jt, service: Mt } = await Zr({ store: w });
+	ve({
 		log: $,
-		max: en(),
-		outOfPool: xe(_, (process.env.CDC ?? "1") !== "0"),
+		max: ln(),
+		outOfPool: D(g, (process.env.CDC ?? "1") !== "0"),
 		readPools: t.replicationSnapshot()?.replicaCount ?? 0,
 		always: !0
 	}), u.mark("store");
-	let Pt = Tr({
+	let Pt = kr({
 		store: w,
-		sink: Ie.sink,
+		sink: Be.sink,
 		log: $
-	}), It = st({
+	}), It = $e(m?.idempotency, w), Rt = Ht({
 		store: w,
-		dialect: _,
-		log: { info: (e) => $.info(e) }
-	}), j = h?.plugins ?? [], Lt = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Vt, Wt;
-	_ !== "memory" && (Vt = fr.make((await N(_)).makeSqlLayer(O()).pipe(W.provideMerge(Vn({})))), Wt = await Vt.runPromise(pr.SqlClient));
-	let Gt = [
+		dialect: g,
+		log: { info: (e) => $.info(e) },
+		...It === void 0 ? {} : { idempotencyTtlMs: It.ttlMs }
+	}), M = m?.plugins ?? [], Vt = vr(), Gt, Jt;
+	g !== "memory" && (Gt = Ni.make((await I(g)).makeSqlLayer(k()).pipe(Y.provideMerge(Gn({})))), Jt = await Gt.runPromise(Pi.SqlClient));
+	let F = [
 		"postgres",
 		"mariadb",
 		"mysql",
 		"mssql"
-	].includes(_) ? Hr(w, Lt, $) : gi, Xt = Jt(h?.scheduling), Cn = Jr({
-		maxIdleIntervalMs: Xt.pollCeilingMs,
-		coordinator: Gt,
-		replicaId: Lt,
+	].includes(g) ? qr(w, Vt, $) : Si, sn = Zt(m?.scheduling), kn = $r({
+		maxIdleIntervalMs: sn.pollCeilingMs,
+		coordinator: F,
+		replicaId: Vt,
 		log: $
-	}), Dn = [], jn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `serve-${process.pid}`, Nn = zi(h?.plugins ?? [])?.broadcast?.provider, Pn = He(h?.plugins, h?.name ?? In(m));
+	}), Nn = [], Ln = vr(), Rn = Qi(m?.plugins ?? [])?.broadcast?.provider, zn = Ge(m?.plugins, m?.name ?? Bn(p));
 	{
-		let e = rt(h?.plugins, h?.name ?? In(m));
+		let e = ct(m?.plugins, m?.name ?? Bn(p));
 		e !== void 0 && $.warn(e);
 	}
-	let Fn = Kt(h?.plugins, {
-		instanceId: jn,
-		namespace: Pn,
+	let L = Yt(m?.plugins, {
+		instanceId: Ln,
+		namespace: zn,
 		meta: { mode: "serve" },
 		logger: $
-	}), F = Sn({
+	}), Hn = yr();
+	br(`${Hn.host}:${le}`, Hn.declared);
+	let Kn = en(), qn = _({
+		store: w,
+		members: () => L.membership?.list() ?? []
+	}), z = () => {
+		let e = L.membership?.list().length;
+		return typeof e == "number" && e > 0 ? { fleetSize: e } : {};
+	}, Jn = On({
 		mode: "serve",
-		dialect: _,
-		...Nn === void 0 ? {} : { provider: Nn },
+		dialect: g,
+		...Rn === void 0 ? {} : { provider: Rn },
 		logger: $
 	});
-	J(async () => {
-		await F.stop();
-	}), vt(h?.reactive), Tt(h);
-	let Rn = {
-		...Wt ? { sql: Wt } : {},
-		instanceId: jn,
-		membership: Fn.membership,
-		...Nn === void 0 ? {} : { broadcast: Nn },
-		broadcastChannels: { presence: Ri(Pn, "presence") },
+	pi(async () => {
+		await Jn.stop();
+	}), Ke(m?.reactive), lt(m);
+	let Yn = mt(w, {
+		claimedBy: _r(),
+		onError: (e) => $.warn("change claim failed — the claimed effect is being SKIPPED, not duplicated", { cause: String(e) })
+	}), Xn = {
+		...Jt ? { sql: Jt } : {},
+		instanceId: Ln,
+		membership: L.membership,
+		...Rn === void 0 ? {} : { broadcast: Rn },
+		broadcastChannels: { presence: Zi(zn, "presence") },
 		scheduleCoordinated: (e, t, n) => {
-			let r = Cn(e, t, n);
-			return Dn.push(r), r;
-		}
+			let r = kn(e, t, n);
+			return Nn.push(r), r;
+		},
+		claimChange: Yn.claim
 	};
-	for (let e of j) e.bindDataStore?.(Ze, Rn);
-	ft({
+	for (let e of M) e.bindDataStore?.(rt, Xn);
+	E({
 		store: w,
 		...d(),
 		log: $
 	});
-	let Hn = j.filter((e) => typeof e.onChangeEvent == "function");
-	if (Hn.length > 0) {
+	let B = M.filter((e) => typeof e.onChangeEvent == "function");
+	if (B.length > 0) {
 		let e = w.changeScope ?? "local";
 		w.onChange((t) => {
 			let n = ce(t, e);
-			for (let e of Hn) U.runFork(e.onChangeEvent(n).pipe(U.catchAllCause((t) => U.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: dr.pretty(t) })))));
+			for (let e of B) J.runFork(e.onChangeEvent(n).pipe(J.catchAllCause((t) => J.sync(() => $.warn(`plugin ${e.name} onChangeEvent failed`, { error: Mi.pretty(t) })))));
 		});
 	}
-	let Un = v.filter((e) => mn.test(e));
-	Un.length > 0 && (await Ve(Un, $), $.info(`queue: ${Un.length} consumer file(s) loaded`));
-	let L = Le({
-		plugins: j,
-		appName: h?.name ?? "voltro-api",
+	let Zn = v.filter((e) => Sn.test(e));
+	Zn.length > 0 && (await We(Zn, $), $.info(`queue: ${Zn.length} consumer file(s) loaded`));
+	let Qn = S({
+		plugins: M,
+		appName: m?.name ?? "voltro-api",
 		appType: "api",
-		voltroVersion: process.env.npm_package_version ?? "0.0.0",
+		voltroVersion: gr() ?? "unknown",
 		log: $
 	});
-	j.length && await L.activate(), u.mark("plugins");
-	let Wn = await L.gatherObservability(), Gn = I({ scope: "voltro:broadcast" }), Kn = {
+	M.length && await Qn.activate(), u.mark("plugins");
+	let $n = await Qn.gatherObservability(), er = R({ scope: "voltro:broadcast" }), tr = {
 		info: (e, t) => {
-			Gn.info(e, t);
+			er.info(e, t);
 		},
 		warn: (e, t) => {
-			Gn.warn(e, t);
+			er.warn(e, t);
 		},
 		debug: () => {}
-	}, R, qn = await D(w, h, _, Pn, Kn, (e, t) => {
-		R?.refreshAll(`broadcast gap: missed ${t} change(s) from ${e}`);
-	}), Jn = h?.apiKeys, Yn = (typeof Jn == "object" ? Jn.prefix : void 0) ?? "voltro_", z = Jn ? Pr(w) : void 0, B = z ? Wr({ flush: Gr(z) }) : void 0;
-	B && J(() => B.shutdown());
-	let Xn = z ? Ur(z, {
-		prefix: Yn,
-		...B ? { usage: B } : {}
-	}) : void 0, Zn = Xn ? [Lr(Xn, { prefix: Yn })] : [], Qn = kt([...h?.auth?.strategies ?? [], ...Zn], Ki(h?.plugins ?? []), h?.auth?.anonymousTenantRequired ?? !1, h?.auth, () => Ze), $n = [...h?.restRoutes ?? [], ...Xn ? wr(Xn, (typeof Jn == "object" ? Jn.managementPath : void 0) ?? "/v1/api-keys") : []], er = Ue(h?.idempotency, w), tr = j.map((e) => e.services).filter((e) => e !== void 0), nr = W.mergeAll(Je({
-		analyticsLayer: Ie.layer,
-		cacheService: Qe,
-		kvService: Ot,
-		...ut === void 0 ? {} : { semanticCache: ut },
-		pluginServices: tr,
-		userLayers: h?.layers ?? []
-	}), Mt(h?.http ?? {})), V = await Ct({
+	}, nr, rr = Ue({
+		store: w,
+		dispatcher: () => nr,
+		invalidateTable: () => At,
+		log: tr
+	}), ir = await xt(w, m, g, zn, tr, rr.onBroadcastGap), V = m?.apiKeys, ar = (typeof V == "object" ? V.prefix : void 0) ?? "voltro_", or = V ? zr(w) : void 0, sr = or ? Yr({ flush: Xr(or) }) : void 0;
+	sr && pi(() => sr.shutdown());
+	let H = or ? Jr(or, {
+		prefix: ar,
+		...sr ? { usage: sr } : {}
+	}) : void 0, cr = H ? [Hr(H, { prefix: ar })] : [], ur = Nt([...m?.auth?.strategies ?? [], ...cr], aa(m?.plugins ?? []), m?.auth?.anonymousTenantRequired ?? !1, m?.auth, () => rt), fr = [...m?.restRoutes ?? [], ...H ? Or(H, (typeof V == "object" ? V.managementPath : void 0) ?? "/v1/api-keys") : []], pr = M.map((e) => e.services).filter((e) => e !== void 0), U = Y.mergeAll(nt({
+		analyticsLayer: Be.layer,
+		cacheService: it,
+		kvService: Mt,
+		...bt === void 0 ? {} : { semanticCache: bt },
+		pluginServices: pr,
+		userLayers: m?.layers ?? []
+	}), Bt(m?.http ?? {})), W = await A({
 		files: v,
 		store: w,
 		log: $,
 		seedPolicy: "report",
-		seedPattern: pn,
-		loadSeedFiles: nn,
-		startupPattern: yn,
+		seedPattern: xn,
+		loadSeedFiles: dn,
+		startupPattern: Dn,
 		loadStartupFiles: a,
 		runStartups: o,
-		emailPattern: Nt,
-		loadEmailFiles: Ye,
-		registerEmailTemplates: qi
+		emailPattern: et,
+		loadEmailFiles: O,
+		registerEmailTemplates: oa
 	});
-	(V.startupCount > 0 || V.emailCount > 0) && $.info("boot lifecycle", {
-		startups: V.startupCount,
-		emailTemplates: V.emailCount
-	}), V.startups !== void 0 && J(async () => {
-		await V.startups.stop();
-	}), De({
-		demands: Yt(_e),
-		isRegistered: (e) => Rr(e) !== void 0
+	(W.startupCount > 0 || W.emailCount > 0) && $.info("boot lifecycle", {
+		startups: W.startupCount,
+		emailTemplates: W.emailCount
+	}), W.startups !== void 0 && pi(async () => {
+		await W.startups.stop();
+	}), x({
+		demands: $t(_e),
+		isRegistered: (e) => Ur(e) !== void 0
 	});
-	let rr = dt({
-		schedules: We({
+	let Sr = Je({
+		schedules: Dt({
 			schedules: y.schedules,
-			seeds: V.seeds,
+			seeds: W.seeds,
 			store: w,
 			log: $.child("seeds")
 		}),
 		workflows: y.workflows ?? [],
 		log: $.child("workflow-schedules")
-	}), ar = h?.scheduling ?? {}, sr = ar.trigger ?? "self", cr = /* @__PURE__ */ new Set([
+	}), Cr = m?.scheduling ?? {}, wr = Cr.trigger ?? "self", Tr = /* @__PURE__ */ new Set([
 		"postgres",
 		"mysql",
 		"mariadb",
 		"mssql"
-	]), H = ar.coordination ?? (cr.has(_) ? "advisoryLock" : "single"), ur = H === "cluster" && cr.has(_), vr = ur ? "cluster" : H === "advisoryLock" && cr.has(_) ? "advisoryLock" : "single";
-	H === "cluster" && !ur && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), H === "advisoryLock" && !cr.has(_) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
-	let yr, br = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (Ce?.outgoing.length ?? 0) > 0 || ur, xr;
-	if (br) {
-		if (_ === "mssql") {
-			let e = await Tn(process.cwd());
+	]), Er = Cr.coordination ?? (Tr.has(g) ? "advisoryLock" : "single"), Dr = Er === "cluster" && Tr.has(g), Ar = Dr ? "cluster" : Er === "advisoryLock" && Tr.has(g) ? "advisoryLock" : "single";
+	Er === "cluster" && !Dr && $.warn("scheduling.coordination=cluster needs a sql-backed store except sqlite — falling back to single"), Er === "advisoryLock" && !Tr.has(g) && $.warn("scheduling.coordination=advisoryLock needs a SQL store (the claim-row gate) — falling back to single");
+	let jr, Mr = y.workflows.length > 0 || y.workflowWorkers.length > 0 || y.eventTriggers.length > 0 || (Te?.outgoing.length ?? 0) > 0 || Dr, Nr;
+	if (Mr) {
+		if (g === "mssql") {
+			let e = await jn(process.cwd());
 			e && $.warn(e);
 		}
-		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = ur ? rr.filter((e) => (e.trigger ?? sr) === "self").map((e) => t({
+		let [{ WorkflowEngine: e }, { makeClusterCronLayer: t, workflowEngineLayer: n, resolveRunnerStorage: r, resolveFailoverTuning: i }] = await Promise.all([import("@effect/workflow"), import("@voltro/workflow/cluster")]), a = Dr ? Sr.filter((e) => (e.trigger ?? wr) === "self").map((e) => t({
 			name: e.name,
-			cron: Nr(e),
+			cron: Rr(e),
 			execute: async () => {
-				await yr?.fireFromCluster(e.name);
+				await jr?.fireFromCluster(e.name);
 			}
 		})) : [];
-		xr = _ === "memory" ? e.layerMemory : await (async () => {
-			let e = await N(_), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
+		Nr = g === "memory" ? e.layerMemory : await (async () => {
+			let e = await I(g), t = r({ sqliteFamily: e.id === "sqlite" || e.id === "turso" });
 			return $.info(`workflow engine: cluster-${t}, dialect=${e.id}` + (t === "memory" ? " — single-process durable replay, no cross-pod shard handoff" + (e.id !== "sqlite" && e.id !== "turso" ? " (VOLTRO_WORKFLOW_RUNNER_STORAGE=memory: SqlRunnerStorage/cluster_runners + GET_LOCK skipped)" : "") : "")), n({
-				sqlClientLayer: e.makeSqlLayer(O()),
+				sqlClientLayer: e.makeSqlLayer(k()),
 				runnerStorage: t,
 				dialectId: e.id,
 				...process.env.VOLTRO_WORKFLOW_RUNNER_PORT ? { runnerListenPort: Number(process.env.VOLTRO_WORKFLOW_RUNNER_PORT) } : {},
@@ -2145,24 +2172,24 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 			});
 		})();
 	}
-	let Sr = fe(j, wn()), Cr = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), Er = Cr.length > 0 ? await A(Cr, $) : [], Dr = v.filter((e) => /\.reaction\.tsx?$/.test(e)), Or = Dr.length > 0 ? await we(Dr, $) : [], kr = v.filter((e) => hn.test(e)), G = kr.length > 0 ? await Ee(kr, $) : [], Ar = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), K = Ar.length > 0 ? await E(Ar, $) : [];
+	let G = pe(M, An()), Pr = v.filter((e) => /\.subscribe\.tsx?$/.test(e)), Fr = Pr.length > 0 ? await Lt(Pr, $) : [], Ir = v.filter((e) => /\.reaction\.tsx?$/.test(e)), Lr = Ir.length > 0 ? await De(Ir, $) : [], Wr = v.filter((e) => Cn.test(e)), Gr = Wr.length > 0 ? await ke(Wr, $) : [], Kr = v.filter((e) => /\.aggregate\.tsx?$/.test(e)), Qr = Kr.length > 0 ? await yt(Kr, $) : [];
 	{
-		let e = Ir(xi(x({ aggregates: K.map((e) => e.definition) }), ae(S)));
+		let e = Vr(Di(we({ aggregates: Qr.map((e) => e.definition) }), vt(C)));
 		e !== void 0 && $.warn(e);
 	}
-	let jr = ee();
-	if (K.length > 0 && _ !== "memory") try {
-		let e = (await N(_)).makeSqlLayer(O());
-		jr = T(e);
+	let ei = f();
+	if (Qr.length > 0 && g !== "memory") try {
+		let e = (await I(g)).makeSqlLayer(k());
+		ei = gt(e);
 	} catch (e) {
 		$.warn("aggregate: SQL storage init failed — falling back to in-process", { err: String(e) });
 	}
-	let Mr = _ === "memory" ? gi : Hr(w, `aggregate@${process.pid}`, $), zr = v.filter((e) => gn.test(e)), Br = zr.length > 0 ? await Me(zr, $) : [], Vr = v.filter((e) => _n.test(e)), qr = Vr.length > 0 ? await Ht(Vr, $) : [], Yr = v.filter((e) => vn.test(e)), Xr = Yr.length > 0 ? await oe(Yr, $) : [], Zr = [], Qr = [], $r = v.filter((e) => an.test(e));
-	if ($r.length > 0) {
-		let e = $.child("agent"), t = v.filter((e) => cn.test(e));
-		t.length > 0 && await on(t, e);
-		let n = await sn($r, e);
-		for (let e of n.agents) for (let t of xt(e)) (t.kind === "action" ? Zr : Qr).push({
+	let ti = g === "memory" ? Si : qr(w, `aggregate@${process.pid}`, $), ni = v.filter((e) => wn.test(e)), ri = ni.length > 0 ? await Ie(ni, $) : [], ii = v.filter((e) => Tn.test(e)), ai = ii.length > 0 ? await Kt(ii, $) : [], oi = v.filter((e) => En.test(e)), si = oi.length > 0 ? await ae(oi, $) : [], ci = [], ui = [], di = v.filter((e) => pn.test(e));
+	if (di.length > 0) {
+		let e = $.child("agent"), t = v.filter((e) => gn.test(e));
+		t.length > 0 && await mn(t, e);
+		let n = await hn(di, e);
+		for (let e of n.agents) for (let t of Ft(e)) (t.kind === "action" ? ci : ui).push({
 			file: t.file,
 			descriptor: t.descriptor,
 			executor: t.executor
@@ -2170,276 +2197,289 @@ var aa = /* @__PURE__ */ ((e) => typeof require < "u" ? require : typeof Proxy <
 		n.agents.length > 0 && e.info("synthesized agent routes", { agents: n.agents.map((e) => e.descriptor.name) });
 	}
 	u.mark("workflow");
-	let q = () => {
-		let e = Y.workflowWriteActions();
+	let K = () => {
+		let e = q.workflowWriteActions();
 		if (e === void 0) throw Error("workflow actions: this app registers no workflows");
 		return e;
-	}, ei = or({
-		dialect: _,
-		...O()
-	}), ti = _ === "memory" ? void 0 : (await N(_)).makeSqlLayer(O()), ni = async () => jt({
-		sqlLayer: ti,
-		declared: S,
+	}, fi = dr({
+		dialect: g,
+		...k()
+	}), mi = g === "memory" ? void 0 : (await I(g)).makeSqlLayer(k()), hi = async () => ht({
+		sqlLayer: mi,
+		declared: C,
 		log: $
-	}), ii = {
+	}), gi = {
 		kind: "api",
 		meta: {
-			name: h?.name ?? "voltro-api",
-			voltroVersion: k,
-			port: ue,
-			mode: "start",
-			store: _,
-			cdc: pe ? "on" : "off",
-			...ei === void 0 ? {} : { databaseId: ei }
+			name: m?.name ?? "voltro-api",
+			voltroVersion: j,
+			port: le,
+			mode: hr(),
+			store: g,
+			cdc: de ? "on" : "off",
+			...fi === void 0 ? {} : { databaseId: fi }
 		},
-		rpc: ke(y, m),
-		workflows: p(y, m),
-		migrations: ni,
-		events: () => Y.eventsSnapshot(),
-		agentTools: () => Y.agentTools(),
+		rpc: Fe(y, p),
+		workflows: h(y, p),
+		migrations: hi,
+		events: () => q.eventsSnapshot(),
+		agentTools: () => q.agentTools(),
 		invariantChecks: () => ({
 			mode: "serve",
 			accessGate: _e,
-			config: h,
+			config: m,
 			serverOnlyLeaks: y.serverOnlyLeaks,
-			migrations: ni
+			migrations: hi
 		}),
-		members: () => Y.membersSnapshot(),
+		members: () => q.membersSnapshot(),
 		inspectFireSchedule: async ({ name: e, trigger: t }) => {
-			if (!yr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
-			return { runId: await yr.fireNow(e, t) ?? null };
+			if (!jr) throw Error("scheduler not started — this app registers no self-triggered schedules (all schedules are trigger:'external', or there are none).");
+			return { runId: await jr.fireNow(e, t) ?? null };
 		},
-		inspectBackfillSchedule: re({
-			getHandle: () => yr,
-			getSchedules: () => rr
+		inspectBackfillSchedule: ne({
+			getHandle: () => jr,
+			getSchedules: () => Sr
 		}),
-		...Ce === void 0 ? {} : { webhooks: () => mt({
+		...Te === void 0 ? {} : { webhooks: () => _t({
 			store: w,
-			discoveredWebhooks: Ce
+			discoveredWebhooks: Te
 		}) },
 		plugins: () => ({
-			plugins: L.snapshot(),
+			plugins: Qn.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => $t(h?.name ?? In(m), {
-			...h?.env !== void 0 && Pi(h.env) ? { contract: h.env } : {},
-			plugins: h?.plugins ?? []
+		env: () => P(m?.name ?? Bn(p), {
+			...m?.env !== void 0 && Ji(m.env) ? { contract: m.env } : {},
+			plugins: m?.plugins ?? []
 		}),
-		dataCache: () => Ut({
-			stats: St,
-			backendKind: _t
+		dataCache: () => qt({
+			stats: Tt,
+			backendKind: wt
 		}),
-		subscriptions: () => Oe(() => R),
-		inspectTables: () => b(S),
-		inspectRows: M({
+		subscriptions: () => je(() => nr),
+		fleetObservations: (e) => qn.fleet(e),
+		peerAddress: (e) => qn.addressOf(e),
+		inspectTables: () => Ae(C),
+		inspectRows: Qt({
 			store: w,
-			tables: S,
+			tables: C,
 			mask: !0
 		}),
-		metrics: (e) => Y.rpcMetrics().snapshot(e),
-		cluster: () => Ge({
+		metrics: (e) => q.rpcMetrics().snapshot(e),
+		cluster: () => Ye({
 			store: w,
-			dialect: _,
-			useClusterCron: ur,
-			scheduleCoordChoice: H
+			dialect: g,
+			useClusterCron: Dr,
+			scheduleCoordChoice: Er
 		}),
 		inspectSchedules: () => ie({
-			schedules: rr,
-			defaultTrigger: sr,
-			coordination: vr
+			schedules: Sr,
+			defaultTrigger: wr,
+			coordination: Ar
 		}),
-		inspectScheduleRuns: (e) => je(w, e),
-		...Bt(w, {
-			controls: at(y.workflows ?? []),
+		inspectScheduleRuns: (e) => Pe(w, e),
+		...Wt(w, {
+			controls: ut(y.workflows ?? []),
 			active: (y.workflows?.length ?? 0) > 0,
-			cancellation: () => Y.flowControlHealth()
+			cancellation: () => q.flowControlHealth()
 		}),
-		webhookActions: ne(() => Y.webhooksService()),
-		inspectStartWorkflow: (e) => q().inspectStartWorkflow(e),
-		inspectCancelWorkflowRun: (e) => q().inspectCancelWorkflowRun(e),
-		inspectSuspendWorkflowRun: (e) => q().inspectSuspendWorkflowRun(e),
-		inspectResumeWorkflowRun: (e) => q().inspectResumeWorkflowRun(e),
-		inspectDiscardWorkflowRun: (e) => q().inspectDiscardWorkflowRun(e),
-		inspectRetryWorkflowRun: (e) => q().inspectRetryWorkflowRun(e),
-		inspectSignalWorkflowRun: (e) => q().inspectSignalWorkflowRun(e),
-		inspectUpdateWorkflowRun: (e) => q().inspectUpdateWorkflowRun(e),
-		inspectInferences: (e) => yt({
+		webhookActions: te(() => q.webhooksService()),
+		inspectStartWorkflow: (e) => K().inspectStartWorkflow(e),
+		inspectCancelWorkflowRun: (e) => K().inspectCancelWorkflowRun(e),
+		inspectSuspendWorkflowRun: (e) => K().inspectSuspendWorkflowRun(e),
+		inspectResumeWorkflowRun: (e) => K().inspectResumeWorkflowRun(e),
+		inspectDiscardWorkflowRun: (e) => K().inspectDiscardWorkflowRun(e),
+		inspectRetryWorkflowRun: (e) => K().inspectRetryWorkflowRun(e),
+		inspectSignalWorkflowRun: (e) => K().inspectSignalWorkflowRun(e),
+		inspectUpdateWorkflowRun: (e) => K().inspectUpdateWorkflowRun(e),
+		inspectInferences: (e) => Ct({
 			store: w,
 			active: (y.workflows?.length ?? 0) > 0,
-			dispatcher: () => Y.inferenceHealth()
+			dispatcher: () => q.inferenceHealth()
 		}, e.limit === void 0 ? {} : { limit: e.limit }),
-		...ct({
+		...pt({
 			store: w,
-			cancelRun: async (e) => await Y.runCanceller()?.(e) ?? !1,
-			retryRun: async (e) => q().inspectRetryWorkflowRun({ runId: e }),
-			redriveRun: async (e) => Y.redriveWorkflowRun({ runId: e }),
+			cancelRun: async (e) => await q.runCanceller()?.(e) ?? !1,
+			retryRun: async (e) => K().inspectRetryWorkflowRun({ runId: e }),
+			redriveRun: async (e) => q.redriveWorkflowRun({ runId: e }),
 			log: $
 		}),
-		inspectRedriveWorkflowRun: (e) => Y.redriveWorkflowRun(e),
-		inspectResumeWorkflowRunFromStep: (e) => Y.resumeWorkflowRunFromStep(e)
-	}, ai = (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace", oi = ai && _ !== "memory" ? await (async () => {
-		let e = await N(_);
-		return tt({
-			tables: S,
-			sqlLayer: e.makeSqlLayer(O()),
-			dialect: _,
+		inspectRedriveWorkflowRun: (e) => q.redriveWorkflowRun(e),
+		inspectResumeWorkflowRunFromStep: (e) => q.resumeWorkflowRunFromStep(e)
+	}, _i = (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace", yi = _i && g !== "memory" ? await (async () => {
+		let e = await I(g);
+		return ft({
+			tables: C,
+			sqlLayer: e.makeSqlLayer(k()),
+			dialect: g,
 			options: { retryFilter: e.retryFilter },
 			log: {
 				info: (e, t) => $.info(e, t),
 				error: (e, t, n) => $.error(e, t ?? {}, n)
 			}
 		});
-	})() : void 0, si = await ot({
-		input: h?.tenancy?.residency,
-		namespaceIsolationOn: ai,
-		makeStoreForUrl: (e, t) => lt(h, void 0, P(O(), t)),
+	})() : void 0, xi = await dt({
+		input: m?.tenancy?.residency,
+		namespaceIsolationOn: _i,
+		makeStoreForUrl: (e, t) => T(m, void 0, cn(k(), t)),
 		log: {
 			info: (e, t) => $.info(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
 	});
-	si !== void 0 && J(async () => {
-		await si.close();
+	xi !== void 0 && pi(async () => {
+		await xi.close();
 	});
-	let Y = await xo({
+	let q = await Po({
 		bootTiming: u,
-		broadcastNamespace: Pn,
+		claimChange: Yn.claim,
+		broadcastNamespace: zn,
 		scheduling: (() => {
-			let e = Xt;
+			let e = sn;
 			return {
 				admissionDrainMs: e.admissionDrainMs,
 				inferenceTickMs: e.inferenceTickMs,
 				cancelSweepMs: e.cancelSweepMs,
 				stalenessSweepMs: e.stalenessSweepMs,
-				disarmWhenIdle: zt({
+				disarmWhenIdle: Ut({
 					changeScope: w.changeScope,
-					broadcastAttached: qn !== void 0
+					broadcastAttached: ir !== void 0
 				})
 			};
 		})(),
-		...h?.workflows?.staleness === void 0 ? {} : { workflowStaleness: h.workflows.staleness },
-		...h?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: h.workflows.suspendSignalHintMs },
-		workflowRecording: Ke(h?.workflows?.recording),
+		...m?.workflows?.staleness === void 0 ? {} : { workflowStaleness: m.workflows.staleness },
+		...m?.workflows?.suspendSignalHintMs === void 0 ? {} : { workflowSuspendSignalHintMs: m.workflows.suspendSignalHintMs },
+		workflowRecording: Ze(m?.workflows?.recording),
 		membership: {
-			...Fn,
-			instanceId: jn
+			...L,
+			instanceId: Ln
 		},
 		security: {
-			defaultDeny: Pe(h),
-			...de(h)
+			defaultDeny: Re(m),
+			...fe(m)
 		},
-		approvals: { defaultExpiryMs: Be(h) },
-		...h?.plugins === void 0 ? {} : { plugins: h.plugins },
-		...er ? { idempotency: er } : {},
-		restRoutes: $n,
-		...h?.grpc === void 0 ? {} : { grpc: {
-			config: h.grpc,
-			root: m
+		approvals: { defaultExpiryMs: Oe(m) },
+		...m?.plugins === void 0 ? {} : { plugins: m.plugins },
+		...It ? { idempotency: It } : {},
+		restRoutes: fr,
+		...m?.grpc === void 0 ? {} : { grpc: {
+			config: m.grpc,
+			root: p
 		} },
 		appProcedures: _e,
 		discovered: {
 			wsGateways: y.wsGateways,
-			queries: [...y.queries, ...Qr],
+			queries: [...y.queries, ...ui],
 			mutations: y.mutations,
-			actions: [...y.actions, ...Zr],
+			actions: [...y.actions, ...ci],
 			streams: y.streams,
 			events: y.events,
 			workflows: y.workflows,
 			workflowWorkers: y.workflowWorkers,
 			eventTriggers: y.eventTriggers,
-			schedules: rr,
-			subscribers: Er,
-			outboxHandlers: G,
+			schedules: Sr,
+			subscribers: Fr,
+			outboxHandlers: Gr,
 			connections: y.connections,
-			reactions: Or,
-			aggregates: K,
-			expectations: Br,
-			budgets: qr,
-			experiments: Xr,
-			...Ce === void 0 ? {} : { webhooks: Ce }
+			reactions: Lr,
+			aggregates: Qr,
+			expectations: ri,
+			budgets: ai,
+			experiments: si,
+			...Te === void 0 ? {} : { webhooks: Te }
 		},
 		log: $,
-		analytics: Ie.sink,
-		aggregateStorage: jr,
-		aggregateCoordinator: Mr,
+		analytics: Be.sink,
+		aggregateStorage: ei,
+		aggregateCoordinator: ti,
 		store: w,
-		kv: Dt,
-		cache: nt,
-		snapshotCache: et,
-		...h?.reactive === void 0 ? {} : { reactive: h.reactive },
-		schemaRegistry: ze,
+		kv: jt,
+		cache: st,
+		snapshotCache: ot,
+		...m?.reactive === void 0 ? {} : { reactive: m.reactive },
+		schemaRegistry: He,
 		tenantScopedTables: y.tenantScopedTables,
 		softDeleteScopedTables: y.softDeleteScopedTables,
-		dataTransferSnapshot: mr(S, _),
-		dataTransferDialect: _,
-		...oi === void 0 ? {} : { ensureTenantProvisioned: oi.ensure },
-		...si === void 0 ? {} : { resolveResidentStore: si.resolveStore },
-		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? h?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
-		resolveSubject: (e, t) => Qn({
+		dataTransferSnapshot: Fi(C, g),
+		dataTransferDialect: g,
+		...yi === void 0 ? {} : { ensureTenantProvisioned: yi.ensure },
+		...xi === void 0 ? {} : { resolveResidentStore: xi.resolveStore },
+		tenantIsolation: (process.env.VOLTRO_TENANT_ISOLATION ?? m?.tenancy?.isolation) === "namespace" ? "namespace" : "shared-schema",
+		resolveSubject: (e, t) => ur({
 			headers: e,
 			clientId: t
 		}),
-		...h?.auth === void 0 ? {} : { authority: h.auth },
-		...h?.agents === void 0 ? {} : { agents: h.agents },
-		httpRoutes: j.flatMap((e) => e.httpRoutes ?? []),
-		getStore: () => Ze,
-		...nr ? { baseLayer: nr } : {},
-		...xr === void 0 ? {} : { workflowEngineLayer: xr },
-		scheduleDefaultTrigger: sr,
-		scheduleCoordination: vr,
-		scheduleArmSelf: !ur,
-		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : h?.dormancy ?? "always-on",
-		scheduleReplicaId: process.env.HOSTNAME ?? `pid-${process.pid}`,
-		...Sr === void 0 ? {} : { scheduleFireInterceptor: Sr },
+		...m?.auth === void 0 ? {} : { authority: m.auth },
+		...m?.agents === void 0 ? {} : { agents: m.agents },
+		httpRoutes: M.flatMap((e) => e.httpRoutes ?? []),
+		getStore: () => rt,
+		...U ? { baseLayer: U } : {},
+		...Nr === void 0 ? {} : { workflowEngineLayer: Nr },
+		scheduleDefaultTrigger: wr,
+		scheduleCoordination: Ar,
+		scheduleArmSelf: !Dr,
+		dormancy: process.env.VOLTRO_DORMANCY === "sleep" || process.env.VOLTRO_DORMANCY === "always-on" ? process.env.VOLTRO_DORMANCY : m?.dormancy ?? "always-on",
+		scheduleReplicaId: vr(),
+		...G === void 0 ? {} : { scheduleFireInterceptor: G },
 		onSchedulerReady: (e) => {
-			yr = e;
+			jr = e;
 		},
-		inspectRoute: { handle: async (e, t, n, r) => await be(e, ii, t, {
+		inspectStream: se(Kn),
+		inspectRoute: { handle: async (e, t, n, r) => await Ce(e, gi, t, {
+			method: n,
+			...r === void 0 ? {} : { body: r },
+			...z()
+		}) || ((n === "GET" ? await rn(e, gi, t, {
 			method: n,
-			...r === void 0 ? {} : { body: r }
-		}) || ((n === "GET" ? await xn(e, ii, t, { method: n }) : null) ?? bn(e, ii, t, {
+			...z()
+		}) : null) ?? nn(e, gi, t, {
 			method: n,
-			...r === void 0 ? {} : { body: r }
+			...r === void 0 ? {} : { body: r },
+			...z()
 		}) ?? {
 			status: 404,
 			contentType: "application/json",
 			body: JSON.stringify({ error: "not an inspect route" })
 		}) },
-		...h?.name === void 0 ? {} : { appName: h.name },
-		observability: Wn,
-		port: ue,
-		...h?.transport?.wsPath ? { path: h.transport.wsPath } : {},
-		...h?.http === void 0 ? {} : { http: h.http }
+		...m?.name === void 0 ? {} : { appName: m.name },
+		observability: $n,
+		port: le,
+		...m?.transport?.wsPath ? { path: m.transport.wsPath } : {},
+		...m?.http === void 0 ? {} : { http: m.http }
 	});
-	return R = Y.dispatcher, pt(f([
+	nr = q.dispatcher;
+	let Ci = () => {
+		Kn.emit("subscriptions", je(() => nr));
+	}, wi = q.dispatcher.onSubscriptionsChange(Ci);
+	return Ci(), b(xe([
 		y.queries,
 		y.mutations,
 		y.actions,
 		y.streams
 	]), (e) => {
 		$.warn(e);
-	}), $.info(`API listening on :${ue}`, {
-		dialect: _,
+	}), $.info(`API listening on :${le}`, {
+		dialect: g,
 		queries: y.queries.length,
 		mutations: y.mutations.length,
 		actions: y.actions.length,
 		streams: y.streams.length,
 		workflows: y.workflows.length,
 		workflowWorkers: y.workflowWorkers.length,
-		schedules: rr.length,
-		scheduleCoordination: vr
-	}), u.finish($), J(async () => {
-		for (let e of Dn) e.stop();
-		It.stop();
+		schedules: Sr.length,
+		scheduleCoordination: Ar
+	}), u.finish($), pi(async () => {
+		for (let e of Nn) e.stop();
+		Rt.stop(), wi(), qn.stop();
 		try {
-			await Y.close(), Et(), Vt?.dispose(), await L.deactivate(), await qn?.close(), await At({
+			await q.close(), kt(), Gt?.dispose(), await Qn.deactivate(), await ir?.close(), await Et({
 				mirror: Pt,
 				log: $
-			}), await Ie.dispose(), await w.close?.();
+			}), await Be.dispose(), await w.close?.();
 		} catch (e) {
 			console.error("serve: shutdown step failed, exiting anyway:", e);
 		}
 	}), await new Promise(() => {}), 0;
 };
 //#endregion
-export { wo as n, So as r, To as t };
+export { Lo as n, Fo as r, Ro as t };