@voltro/cli 0.7.0 → 0.9.0

package/dist/{dev-Bqyq62Ak.js → dev-63Ehpw2p.js}

@@ -1,14 +1,14 @@
-import { $ as e, A as t, B as n, D as r, F as i, G as a, H as o, I as s, J as c, K as l, L as u, M as d, O as f, P as p, Q as m, R as h, S as g, U as _, V as ee, W as te, X as ne, Y as re, Z as ie, _ as ae, at as v, ct as oe, et as se, h as ce, it as le, lt as ue, m as de, nt as fe, ot as pe, pt as me, q as he, rt as ge, s as _e, st as y, t as ve, tt as ye, ut as be, vt as xe, x as Se, xt as Ce, y as we, z as Te } from "./inspectMetrics-BLUBAWLb.js";
-import { i as b, n as Ee, t as De } from "./startupRunner-DhlX9nqd.js";
-import { r as Oe } from "./devActivity-1WtIVyHc.js";
-import { t as x } from "./frameworkInspectState-CX2250XB.js";
-import { basename as S, dirname as C, join as w, relative as T, resolve as E } from "node:path";
-import { fileURLToPath as ke, pathToFileURL as D } from "node:url";
-import { FetchHttpClient as Ae } from "@effect/platform";
-import { Cause as je, Cron as Me, Duration as Ne, Effect as O, Fiber as Pe, JSONSchema as Fe, Layer as k, ManagedRuntime as Ie, Option as A, Ref as Le, Schema as Re, Stream as ze } from "effect";
-import { createLogger as Be, printAppSurface as Ve, printReadyBlock as He } from "@voltro/logger";
-import { appendFileSync as Ue, existsSync as j, promises as M, readFileSync as We, writeFileSync as N } from "node:fs";
-import { AggregateError as P, AggregateMaintainer as F, AggregateNotFound as I, AggregateRegistry as Ge, AggregateStale as L, AnalyticsSink as Ke, Dispatcher as qe, InMemoryDataStore as Je, ReactionRateLimiter as Ye, ReplicatedDataStore as Xe, _voltroConnectionGrantsTable as Ze, _voltroConnectionsTable as Qe, _voltroScheduleClaimsTable as $e, _voltroScheduleRunsTable as et, _voltroTracesTable as tt, _voltroUndoLogTable as R, _voltroWakeupsTable as nt, _voltroWorkflowEventDeliveriesTable as rt, _voltroWorkflowEventsTable as it, apiKeyManagementRoutes as at, applySoftDeleteScope as ot, applyTenantScope as st, applyUndoInvocation as ct, assertConnectionCipherConfigured as lt, attachAnalyticsMirror as ut, awaitServerListening as dt, bindMutation as ft, bindStream as pt, bindSubscription as mt, buildTracingLayer as ht, cancelWakeup as gt, compileCron as _t, completeOAuthConnect as vt, dataStoreApiKeyStore as yt, dataStoreIdempotencyStore as bt, drainOutbox as xt, extractDbCause as St, frameworkApiKeyStrategy as Ct, getConnectionSubject as wt, getTimelineRecorder as Tt, installPolicyGuardResolver as Et, isAggregateDefinition as z, isScheduleDefinition as Dt, isWorkflowEventTriggerDefinition as Ot, listRetentions as kt, loadResourceTuples as At, localityAwareSelector as jt, makeActionRunner as Mt, makeAdvisoryLockCoordinator as Nt, makeApiKeyService as Pt, makeAppAccess as Ft, makeAsyncKv as It, makeBufferingSpanProcessor as Lt, makeConnectionRegistry as Rt, makeConnectionResolver as zt, makeConnectionsFacade as Bt, makeCoordinatedScheduler as Vt, makeDataLoader as Ht, makeDisconnectConnectionExecutor as Ut, makeEffectStoreLayer as Wt, makeEventsFacade as Gt, makeLazyWorkflowFacade as Kt, makeListConnectionsExecutor as qt, makeMutationRunner as Jt, makeOutboxFacade as Yt, makePostCommitWorkflowFacade as Xt, makeQueryDescriptorProducer as Zt, makeQueryReauthorizer as Qt, makeSchemaRegistry as $t, makeStartConnectionExecutor as en, makeSubmitTokenExecutor as tn, makeUndoCapture as nn, makeWorkflowFacade as rn, makeWorkflowFacadeWithCallerContext as an, makeWorkflowLayers as on, memoryRywPositionStore as sn, nextFiring as cn, noopAnalytics as ln, noopAnalyticsSpec as un, outboxAttemptsTable as dn, outboxTable as fn, powerOfTwoSelector as pn, recordSubscriptionDelivery as mn, recordTimelineEvent as hn, redisRywPositionStore as gn, redoUndoInvocation as _n, registerRetention as vn, registerWakeup as yn, resolveCurrentRegion as bn, resolveSecretsBackend as xn, retentionTtlMsFromEnv as Sn, runProvidedEffect as Cn, runReaction as wn, sanitizeRedirectTo as Tn, setConnectionResolver as En, setSecretsBackend as Dn, setTupleSource as On, singleCoordinator as kn, snapshotMetricsSync as An, startRpcServer as jn, startScheduler as Mn, sweepRetention as Nn, tracingHttpClientLayer as B, undoCaptureEnabled as Pn, undoLogExecutor as Fn, wrapStoreWithMixinBehaviour as In } from "@voltro/runtime";
+import { $ as e, At as t, Dt as n, E as r, F as i, G as a, H as o, J as s, K as c, L as l, O as u, P as d, Q as f, S as p, St as m, U as h, V as g, W as _, X as ee, Y as te, Z as ne, _t as re, at as ie, ct as ae, dt as v, et as oe, ft as se, gt as ce, ht as le, it as ue, k as de, l as y, lt as fe, mt as b, nt as pe, ot as me, pt as he, q as ge, rt as _e, st as ve, t as ye, tt as be, ut as xe, w as Se, x as Ce, z as we } from "./inspectMetrics-DVCKKSPk.js";
+import { i as x, n as Te, t as Ee } from "./startupRunner-DhlX9nqd.js";
+import { r as De } from "./devActivity-1WtIVyHc.js";
+import { t as S } from "./frameworkInspectState-CX2250XB.js";
+import { basename as C, dirname as w, join as T, relative as E, resolve as D } from "node:path";
+import { fileURLToPath as Oe, pathToFileURL as O } from "node:url";
+import { FetchHttpClient as ke } from "@effect/platform";
+import { Cause as Ae, Cron as je, Duration as Me, Effect as k, Fiber as Ne, JSONSchema as Pe, Layer as A, ManagedRuntime as Fe, Option as j, Ref as Ie, Schema as Le, Stream as Re } from "effect";
+import { createLogger as ze, printAppSurface as Be, printReadyBlock as Ve } from "@voltro/logger";
+import { appendFileSync as He, existsSync as M, promises as N, readFileSync as Ue, writeFileSync as P } from "node:fs";
+import { AggregateError as F, AggregateMaintainer as I, AggregateNotFound as We, AggregateRegistry as Ge, AggregateStale as L, AnalyticsSink as Ke, Dispatcher as qe, InMemoryDataStore as Je, ReactionRateLimiter as Ye, ReplicatedDataStore as Xe, _voltroConnectionGrantsTable as Ze, _voltroConnectionsTable as Qe, _voltroScheduleClaimsTable as $e, _voltroScheduleRunsTable as et, _voltroTracesTable as tt, _voltroUndoLogTable as R, _voltroWakeupsTable as nt, _voltroWorkflowEventDeliveriesTable as rt, _voltroWorkflowEventsTable as it, apiKeyManagementRoutes as at, applySoftDeleteScope as ot, applyTenantScope as st, applyUndoInvocation as ct, assertConnectionCipherConfigured as lt, attachAnalyticsMirror as ut, awaitServerListening as dt, bindMutation as ft, bindStream as pt, bindSubscription as mt, buildTracingLayer as ht, cancelWakeup as gt, compileCron as _t, completeOAuthConnect as vt, dataStoreApiKeyStore as yt, dataStoreIdempotencyStore as bt, drainOutbox as xt, extractDbCause as St, frameworkApiKeyStrategy as Ct, getConnectionSubject as wt, getTimelineRecorder as Tt, installPolicyGuardResolver as Et, isAggregateDefinition as z, isScheduleDefinition as Dt, isWorkflowEventTriggerDefinition as Ot, listRetentions as kt, loadResourceTuples as At, localityAwareSelector as jt, makeActionRunner as Mt, makeAdvisoryLockCoordinator as Nt, makeApiKeyService as Pt, makeAppAccess as Ft, makeAsyncKv as It, makeBufferingSpanProcessor as Lt, makeConnectionRegistry as Rt, makeConnectionResolver as zt, makeConnectionsFacade as Bt, makeCoordinatedScheduler as Vt, makeDataLoader as Ht, makeDisconnectConnectionExecutor as Ut, makeEffectStoreLayer as Wt, makeEventsFacade as Gt, makeLazyWorkflowFacade as Kt, makeListConnectionsExecutor as qt, makeMutationRunner as Jt, makeOutboxFacade as Yt, makePostCommitWorkflowFacade as Xt, makeQueryDescriptorProducer as Zt, makeQueryReauthorizer as Qt, makeSchemaRegistry as $t, makeStartConnectionExecutor as en, makeSubmitTokenExecutor as tn, makeUndoCapture as nn, makeWorkflowFacade as rn, makeWorkflowFacadeWithCallerContext as an, makeWorkflowLayers as on, memoryRywPositionStore as sn, nextFiring as cn, noopAnalytics as ln, noopAnalyticsSpec as un, outboxAttemptsTable as dn, outboxTable as fn, powerOfTwoSelector as pn, recordSubscriptionDelivery as mn, recordTimelineEvent as hn, redisRywPositionStore as gn, redoUndoInvocation as _n, registerRetention as vn, registerWakeup as yn, resolveCurrentRegion as bn, resolveSecretsBackend as xn, retentionTtlMsFromEnv as Sn, runProvidedEffect as Cn, runReaction as wn, sanitizeRedirectTo as Tn, setConnectionResolver as En, setSecretsBackend as Dn, setTupleSource as On, singleCoordinator as kn, snapshotMetricsSync as An, startRpcServer as jn, startScheduler as Mn, sweepRetention as Nn, tracingHttpClientLayer as B, undoCaptureEnabled as Pn, undoLogExecutor as Fn, wrapStoreWithMixinBehaviour as In } from "@voltro/runtime";
 import { isEnvContract as Ln } from "@voltro/env";
 import { createHash as Rn, randomBytes as zn } from "node:crypto";
 import { spawn as Bn } from "node:child_process";
@@ -38,7 +38,7 @@ import { isEmailTemplate as K, registerEmailTemplates as na } from "@voltro/plug
 import { attachBroadcastBus as ra, getBroadcastPlugin as ia } from "@voltro/plugin-broadcast";
 import { runImport as aa } from "@voltro/data-transfer";
 //#region src/browserSafetyGuard.ts
-var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.https.http2.tls.dns.dgram.stream.zlib.child_process.worker_threads.cluster.readline.vm.module.perf_hooks.async_hooks.inspector.v8.process.tty.repl.constants.sys.string_decoder".split(".")), sa = (e) => e.startsWith("node:") || oa.has(e) || e === "@voltro/workflow" || e === "@voltro/database" || e.startsWith("@voltro/database/") || e === "@voltro/runtime" || e.startsWith("@voltro/runtime/") ? !0 : e === "@voltro/ai/agent" || e === "@voltro/ai/events" ? !1 : !!(e === "@voltro/ai" || e.startsWith("@voltro/ai/") || [
+var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.https.http2.tls.dns.dgram.stream.zlib.child_process.worker_threads.cluster.readline.vm.module.perf_hooks.async_hooks.inspector.v8.process.tty.repl.constants.sys.string_decoder".split(".")), sa = (e) => e.startsWith("node:") || oa.has(e) || e === "@voltro/workflow" ? !0 : e === "@voltro/database/wire" ? !1 : e === "@voltro/database" || e.startsWith("@voltro/database/") || e === "@voltro/runtime" || e.startsWith("@voltro/runtime/") ? !0 : e === "@voltro/ai/agent" || e === "@voltro/ai/events" ? !1 : !!(e === "@voltro/ai" || e.startsWith("@voltro/ai/") || [
 	"@voltro/protocol/session",
 	"@voltro/protocol/jwt",
 	"@voltro/protocol/apikey"
@@ -78,21 +78,21 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 	let t = ua(e) ? [e] : [
 		`${e}.ts`,
 		`${e}.tsx`,
-		w(e, "index.ts"),
-		w(e, "index.tsx")
+		T(e, "index.ts"),
+		T(e, "index.tsx")
 	];
 	for (let e of t) try {
-		if ((await M.stat(e)).isFile()) return e;
+		if ((await N.stat(e)).isFile()) return e;
 	} catch {}
 	return null;
 }, fa = async (e, t) => {
 	let n = t;
 	for (;;) {
-		let t = w(n, "node_modules", e);
+		let t = T(n, "node_modules", e);
 		try {
-			if ((await M.stat(t)).isDirectory()) return t;
+			if ((await N.stat(t)).isDirectory()) return t;
 		} catch {}
-		let r = C(n);
+		let r = w(n);
 		if (r === n) return null;
 		n = r;
 	}
@@ -111,12 +111,12 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 		}
 	}
 }, ma = async (e, t) => {
-	if (e.startsWith(".")) return da(E(C(t), e));
-	let n = e.split("/"), r = e.startsWith("@"), i = r ? `${n[0]}/${n[1]}` : n[0], a = r ? n.slice(2) : n.slice(1), o = a.length > 0 ? `./${a.join("/")}` : ".", s = await fa(i, C(t));
+	if (e.startsWith(".")) return da(D(w(t), e));
+	let n = e.split("/"), r = e.startsWith("@"), i = r ? `${n[0]}/${n[1]}` : n[0], a = r ? n.slice(2) : n.slice(1), o = a.length > 0 ? `./${a.join("/")}` : ".", s = await fa(i, w(t));
 	if (!s) return null;
 	try {
-		let e = JSON.parse(await M.readFile(w(s, "package.json"), "utf8")), t = pa(e.exports?.[o]) ?? (o === "." ? e.module ?? e.main : void 0);
-		if (typeof t == "string") return da(E(s, t));
+		let e = JSON.parse(await N.readFile(T(s, "package.json"), "utf8")), t = pa(e.exports?.[o]) ?? (o === "." ? e.module ?? e.main : void 0);
+		if (typeof t == "string") return da(D(s, t));
 	} catch {}
 	return null;
 }, ha = (e, t) => e.startsWith(t) ? e.slice(t.length).replace(/^[/\\]/, "") : e, ga = async (e, t) => {
@@ -130,7 +130,7 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 		n.add(e);
 		let a;
 		try {
-			a = await M.readFile(e, "utf8");
+			a = await N.readFile(e, "utf8");
 		} catch {
 			continue;
 		}
@@ -149,7 +149,7 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 	return null;
 }, _a = async (e) => {
 	if (process.env.VOLTRO_BROWSER_SAFETY === "off") return;
-	let t = await ga(e, C(e));
+	let t = await ga(e, w(e));
 	if (!t) return;
 	let n = t.chain.join("\n      → ");
 	throw Error(`browser-safety violation — the generated rpcGroup pulls a SERVER-ONLY module into the client bundle.\n\n  '${t.specifier}' is server-only (node:* / database / ai / cluster / protocol session / db driver),\n  and the web client loads rpcGroup VALUE-LEVEL — this crashes the browser with\n  "Module …node:crypto… has been externalized for browser compatibility", or bloats the\n  bundle with the whole server graph.\n\n  import chain:\n      → ${n}\n\n  Fix: keep the descriptor (*.query/.mutation/.action.ts), the workflow descriptor\n  (*.workflow.tsx, import from @voltro/workflow/define), AND any plugin error schema\n  browser-safe. Move DB-backed / node: code behind a *.server.ts file or a browser-safe\n  subpath (e.g. a plugin's '/errors' export). Escape hatch (not recommended):\n  VOLTRO_BROWSER_SAFETY=off.`);
@@ -163,10 +163,10 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 	".git"
 ]), Ca = async (e) => {
 	let t = async (e) => {
-		let n = await M.readdir(e, { withFileTypes: !0 }).catch(() => []);
+		let n = await N.readdir(e, { withFileTypes: !0 }).catch(() => []);
 		for (let r of n) if (!Sa.has(r.name)) {
 			if (r.isDirectory()) {
-				if (await t(w(e, r.name))) return !0;
+				if (await t(T(e, r.name))) return !0;
 			} else if (r.isFile() && xa.test(r.name)) return !0;
 		}
 		return !1;
@@ -174,10 +174,10 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 	return t(e);
 }, J = async (e) => {
 	let t = [], n = async (e) => {
-		let r = await M.readdir(e, { withFileTypes: !0 });
+		let r = await N.readdir(e, { withFileTypes: !0 });
 		for (let i of r) {
 			if (Sa.has(i.name)) continue;
-			let r = w(e, i.name);
+			let r = T(e, i.name);
 			i.isDirectory() ? await n(r) : i.isFile() && (va.test(i.name) && !ya.test(i.name) || ba.test(i.name) || q.test(i.name)) && t.push(r);
 		}
 	};
@@ -185,7 +185,7 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 }, wa = (e) => typeof e == "object" && !!e && "kind" in e && "name" in e && (e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream"), Ta = Symbol.for("@effect/workflow/Workflow"), Ea = (e) => typeof e == "object" && !!e && Ta in e && "name" in e && typeof e.name == "string", Da = async (e) => {
 	let t = [];
 	for (let n of e) {
-		let e = await import(D(n).href);
+		let e = await import(O(n).href);
 		for (let [r, i] of Object.entries(e)) wa(i) ? t.push({
 			file: n,
 			exportName: r,
@@ -203,7 +203,7 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 	let t = [];
 	for (let n of e) {
 		if (!q.test(n)) continue;
-		let e = await import(D(n).href);
+		let e = await import(O(n).href);
 		for (let [r, i] of Object.entries(e)) nr(i) && t.push({
 			file: n,
 			exportName: r,
@@ -215,7 +215,7 @@ var oa = /* @__PURE__ */ new Set(/* @__PURE__ */ "crypto.fs.path.os.net.http.htt
 	let t = (e, t) => e.split(/[^a-zA-Z0-9]+/).filter(Boolean).map((e, n) => (n === 0 && !t ? e.charAt(0).toLowerCase() : e.charAt(0).toUpperCase()) + e.slice(1)).join(""), n = e.split(".");
 	return `${t(n[0] ?? "rpc", !1)}${n.slice(1).map((e) => t(e, !0)).join("")}Rpc`;
 }, ka = /^[A-Za-z][A-Za-z0-9]*([._-][A-Za-z0-9]+)*$/, Aa = (e, t) => {
-	let n = (e) => T(t, e.file).replace(/\\/g, "/"), r = e.filter((e) => !ka.test(e.rpcTag));
+	let n = (e) => E(t, e.file).replace(/\\/g, "/"), r = e.filter((e) => !ka.test(e.rpcTag));
 	if (r.length > 0) throw Error(`invalid rpc tag — a procedure/workflow \`name\` must start with a letter and
 use only letters, digits, and \`.\` \`-\` \`_\` separators (the tag becomes a JS
 identifier in the generated rpcGroup):
@@ -243,7 +243,7 @@ ${a.map((e) => `  ${Y(e[0].rpcTag)}:\n` + e.map((e) => `    - "${e.rpcTag}"  (${
 }, Ma = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let t of e) n.has(t.rpcTag) || n.set(t.rpcTag, t);
-	let r = [...n.keys()], i = (e) => T(t, n.get(e).file).replace(/\\/g, "/"), a = [];
+	let r = [...n.keys()], i = (e) => E(t, n.get(e).file).replace(/\\/g, "/"), a = [];
 	for (let e of r) {
 		let t = r.filter((t) => t.startsWith(`${e}.`)).sort();
 		if (t.length === 0) continue;
@@ -281,8 +281,8 @@ ${a.join("\n\n")}\n`);
 		...l,
 		...d
 	], e);
-	let f = (e) => e.replace(/[^a-zA-Z0-9_$]/g, "_"), p = (e) => `__src_agent_${f(e.name)}`, m = (e) => `__agentRoutes_${f(e.name)}`, h = r.length > 0, g = r.map((e, t) => `import { ${e.name} as __pe${t} } from '${e.module}'`), _ = h ? ", __voltroPluginErrors" : "", ee = u.length > 0, te = u.map((e, t) => `import { ${e.name} as __prpc${t} } from '${e.module}'`), ne = (e) => e === "query" ? "queryToRpc" : e === "mutation" ? "mutationToRpc" : "actionToRpc", re = u.map((e, t) => `export const ${Y(e.tag)} = ${ne(e.kind)}(__prpc${t}${_})`), ie = u.map((e) => `  ${Y(e.tag)},`), ae = u.map((e, t) => `  ${JSON.stringify(e.tag)}: normalizeDescriptor(__prpc${t}),`), v = [...n].sort((e, t) => e.kind === t.kind ? e.rpcTag < t.rpcTag ? -1 : 1 : ja(e.kind) - ja(t.kind)), oe = C(t), se = (e) => `__src_${Y(e.rpcTag)}`, ce = (e) => {
-		let t = `./${T(oe, e.file).replace(/\\/g, "/").replace(/\.tsx?$/, "")}`;
+	let f = (e) => e.replace(/[^a-zA-Z0-9_$]/g, "_"), p = (e) => `__src_agent_${f(e.name)}`, m = (e) => `__agentRoutes_${f(e.name)}`, h = r.length > 0, g = r.map((e, t) => `import { ${e.name} as __pe${t} } from '${e.module}'`), _ = h ? ", __voltroPluginErrors" : "", ee = u.length > 0, te = u.map((e, t) => `import { ${e.name} as __prpc${t} } from '${e.module}'`), ne = (e) => e === "query" ? "queryToRpc" : e === "mutation" ? "mutationToRpc" : "actionToRpc", re = u.map((e, t) => `export const ${Y(e.tag)} = ${ne(e.kind)}(__prpc${t}${_})`), ie = u.map((e) => `  ${Y(e.tag)},`), ae = u.map((e, t) => `  ${JSON.stringify(e.tag)}: normalizeDescriptor(__prpc${t}),`), v = [...n].sort((e, t) => e.kind === t.kind ? e.rpcTag < t.rpcTag ? -1 : 1 : ja(e.kind) - ja(t.kind)), oe = w(t), se = (e) => `__src_${Y(e.rpcTag)}`, ce = (e) => {
+		let t = `./${E(oe, e.file).replace(/\\/g, "/").replace(/\.tsx?$/, "")}`;
 		return `import { ${e.exportName} as ${se(e)} } from '${t}'`;
 	}, le = (e) => {
 		let t = Y(e.rpcTag), n = se(e);
@@ -293,7 +293,7 @@ ${a.join("\n\n")}\n`);
 			`  error:   ${n}.errorSchema,`,
 			"})"
 		].join("\n");
-	}, ue = [...v.filter((e) => e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream").map((e) => `  | __AppErrorOf<typeof ${se(e)}>`), ...h ? ["  | Schema.Schema.Type<(typeof __voltroPluginErrors)[number]>"] : []], de = ue.length > 0, fe = v.some((e) => e.kind === "workflow"), pe = fe ? [
+	}, ue = [...v.filter((e) => e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream").map((e) => `  | __AppErrorOf<typeof ${se(e)}>`), ...h ? ["  | Schema.Schema.Type<(typeof __voltroPluginErrors)[number]>"] : []], de = ue.length > 0, y = v.some((e) => e.kind === "workflow"), fe = y ? [
 		"__voltroWorkflowRun",
 		"__voltroWorkflowRuns",
 		"__voltroWorkflowRunSteps",
@@ -304,25 +304,25 @@ ${a.join("\n\n")}\n`);
 		"__voltroWorkflowResume",
 		"__voltroWorkflowSignal",
 		"__voltroWorkflowUpdate"
-	] : [], me = a ? [
+	] : [], b = a ? [
 		"__voltroUndoLog",
 		"__voltroUndoApply",
 		"__voltroUndoRedo"
-	] : [], he = o ? [
+	] : [], pe = o ? [
 		"__voltroConnectionsList",
 		"__voltroConnectionStart",
 		"__voltroConnectionSubmitToken",
 		"__voltroConnectionDisconnect"
-	] : [], ge = [
+	] : [], me = [
 		...v.map((e) => `  ${Y(e.rpcTag)},`),
 		...i.flatMap((e) => [`  ${Y(`${e.name}.send`)},`, `  ${Y(`${e.name}.messages`)},`]),
+		...fe.map((e) => `  ${e},`),
+		...b.map((e) => `  ${e},`),
 		...pe.map((e) => `  ${e},`),
-		...me.map((e) => `  ${e},`),
-		...he.map((e) => `  ${e},`),
 		...ie
-	].join("\n"), _e = ["queryToRpc"];
-	(v.some((e) => e.kind === "mutation") || u.some((e) => e.kind === "mutation")) && _e.push("mutationToRpc"), (v.some((e) => e.kind === "action") || fe || c || u.some((e) => e.kind === "action")) && _e.push("actionToRpc"), v.some((e) => e.kind === "stream") && _e.push("streamToRpc"), fe && _e.push("WorkflowRunHandleSchema", "workflowCancelDescriptor", "workflowDomainEventsQueryDescriptor", "workflowEventDeliveriesQueryDescriptor", "workflowResumeDescriptor", "workflowRunEventsQueryDescriptor", "workflowRunQueryDescriptor", "workflowRunsQueryDescriptor", "workflowRunStepsQueryDescriptor", "workflowSignalDescriptor", "workflowUpdateDescriptor"), a && _e.push("mutationToRpc", "undoLogQueryDescriptor", "undoApplyDescriptor", "undoRedoDescriptor"), o && _e.push("mutationToRpc", "actionToRpc", "connectionsListQueryDescriptor", "connectionStartDescriptor", "connectionSubmitTokenDescriptor", "connectionDisconnectDescriptor"), (v.some((e) => e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream") || c || fe || a || o || ee) && _e.push("normalizeDescriptor");
-	let y = [...new Set(_e)].sort(), ve = v.filter((e) => e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream").map((e) => `  ${JSON.stringify(e.rpcTag)}: normalizeDescriptor(${se(e)}),`), ye = i.flatMap((e) => [`  ${JSON.stringify(`${e.name}.send`)}: normalizeDescriptor(${m(e)}.send),`, `  ${JSON.stringify(`${e.name}.messages`)}: normalizeDescriptor(${m(e)}.messages),`]), be = fe ? [
+	].join("\n"), he = ["queryToRpc"];
+	(v.some((e) => e.kind === "mutation") || u.some((e) => e.kind === "mutation")) && he.push("mutationToRpc"), (v.some((e) => e.kind === "action") || y || c || u.some((e) => e.kind === "action")) && he.push("actionToRpc"), v.some((e) => e.kind === "stream") && he.push("streamToRpc"), y && he.push("WorkflowRunHandleSchema", "workflowCancelDescriptor", "workflowDomainEventsQueryDescriptor", "workflowEventDeliveriesQueryDescriptor", "workflowResumeDescriptor", "workflowRunEventsQueryDescriptor", "workflowRunQueryDescriptor", "workflowRunsQueryDescriptor", "workflowRunStepsQueryDescriptor", "workflowSignalDescriptor", "workflowUpdateDescriptor"), a && he.push("mutationToRpc", "undoLogQueryDescriptor", "undoApplyDescriptor", "undoRedoDescriptor"), o && he.push("mutationToRpc", "actionToRpc", "connectionsListQueryDescriptor", "connectionStartDescriptor", "connectionSubmitTokenDescriptor", "connectionDisconnectDescriptor"), (v.some((e) => e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream") || c || y || a || o || ee) && he.push("normalizeDescriptor");
+	let ge = [...new Set(he)].sort(), _e = v.filter((e) => e.kind === "query" || e.kind === "mutation" || e.kind === "action" || e.kind === "stream").map((e) => `  ${JSON.stringify(e.rpcTag)}: normalizeDescriptor(${se(e)}),`), ve = i.flatMap((e) => [`  ${JSON.stringify(`${e.name}.send`)}: normalizeDescriptor(${m(e)}.send),`, `  ${JSON.stringify(`${e.name}.messages`)}: normalizeDescriptor(${m(e)}.messages),`]), ye = y ? [
 		"  \"__voltro.workflow.run\": normalizeDescriptor(workflowRunQueryDescriptor),",
 		"  \"__voltro.workflow.runs\": normalizeDescriptor(workflowRunsQueryDescriptor),",
 		"  \"__voltro.workflow.run.steps\": normalizeDescriptor(workflowRunStepsQueryDescriptor),",
@@ -333,16 +333,16 @@ ${a.join("\n\n")}\n`);
 		"  \"__voltro.workflow.resume\": normalizeDescriptor(workflowResumeDescriptor),",
 		"  \"__voltro.workflow.signal\": normalizeDescriptor(workflowSignalDescriptor),",
 		"  \"__voltro.workflow.update\": normalizeDescriptor(workflowUpdateDescriptor),"
-	] : [], xe = a ? [
+	] : [], be = a ? [
 		"  \"__voltro.undo.log\": normalizeDescriptor(undoLogQueryDescriptor),",
 		"  \"__voltro.undo.apply\": normalizeDescriptor(undoApplyDescriptor),",
 		"  \"__voltro.undo.redo\": normalizeDescriptor(undoRedoDescriptor),"
-	] : [], Se = o ? [
+	] : [], xe = o ? [
 		"  \"__voltro.connections.list\": normalizeDescriptor(connectionsListQueryDescriptor),",
 		"  \"__voltro.connections.start\": normalizeDescriptor(connectionStartDescriptor),",
 		"  \"__voltro.connections.submitToken\": normalizeDescriptor(connectionSubmitTokenDescriptor),",
 		"  \"__voltro.connections.disconnect\": normalizeDescriptor(connectionDisconnectDescriptor),"
-	] : [], Ce = v.filter((e) => e.kind === "workflow").map((e) => `  ${JSON.stringify(e.rpcTag)}: { kind: 'workflow' },`), we = v.filter((e) => e.kind === "workflow").map((e) => {
+	] : [], Se = v.filter((e) => e.kind === "workflow").map((e) => `  ${JSON.stringify(e.rpcTag)}: { kind: 'workflow' },`), Ce = v.filter((e) => e.kind === "workflow").map((e) => {
 		let t = se(e);
 		return [
 			`  ${JSON.stringify(e.rpcTag)}: {`,
@@ -355,31 +355,31 @@ ${a.join("\n\n")}\n`);
 			`    queries: __voltroWorkflowMessages(${t}).queries,`,
 			"  },"
 		].join("\n");
-	}), Te = [...v, ...i.map((e) => ({
+	}), we = [...v, ...i.map((e) => ({
 		rpcTag: `agent:${e.name}`,
 		file: e.file
 	}))];
 	return [
 		"// THIS FILE IS GENERATED — DO NOT EDIT BY HAND.",
 		"// Re-emitted by `voltro dev` whenever query/mutation/action/stream/workflow files change.",
-		`// descriptor-fingerprint: ${Rn("sha1").update(Te.map((e) => {
+		`// descriptor-fingerprint: ${Rn("sha1").update(we.map((e) => {
 			let t = "";
 			try {
-				t = We(e.file, "utf8");
+				t = Ue(e.file, "utf8");
 			} catch {}
 			return `${e.rpcTag}${t}`;
 		}).join("
")).digest("hex").slice(0, 16)}`,
 		"// Source files:",
-		...v.map((t) => `//   - ${T(e, t.file).replace(/\\/g, "/")}`),
-		...i.map((t) => `//   - ${T(e, t.file).replace(/\\/g, "/")}  (agent)`),
+		...v.map((t) => `//   - ${E(e, t.file).replace(/\\/g, "/")}`),
+		...i.map((t) => `//   - ${E(e, t.file).replace(/\\/g, "/")}  (agent)`),
 		"",
-		fe ? "import { Rpc, RpcGroup } from '@effect/rpc'" : "import { RpcGroup } from '@effect/rpc'",
-		...fe || de ? ["import { Schema } from 'effect'"] : [],
-		`import { ${y.join(", ")} } from '@voltro/protocol'`,
+		y ? "import { Rpc, RpcGroup } from '@effect/rpc'" : "import { RpcGroup } from '@effect/rpc'",
+		...y || de ? ["import { Schema } from 'effect'"] : [],
+		`import { ${ge.join(", ")} } from '@voltro/protocol'`,
 		...c ? ["import { agentRouteDescriptors as __voltroAgentRoutes } from '@voltro/ai/agent'"] : [],
 		"",
 		...v.map(ce),
-		...i.map((e) => `import { ${e.exportName} as ${p(e)} } from './${T(oe, e.file).replace(/\\/g, "/").replace(/\.tsx?$/, "")}'`),
+		...i.map((e) => `import { ${e.exportName} as ${p(e)} } from './${E(oe, e.file).replace(/\\/g, "/").replace(/\.tsx?$/, "")}'`),
 		...h ? ["", ...g] : [],
 		...ee ? ["", ...te] : [],
 		"",
@@ -391,7 +391,7 @@ ${a.join("\n\n")}\n`);
 			`const __voltroPluginErrors = [${r.map((e, t) => `__pe${t}`).join(", ")}] as const`,
 			""
 		] : [],
-		...fe ? [
+		...y ? [
 			"const __voltroEmptyWorkflowMessages = { signals: {}, updates: {}, queries: {} } as const",
 			"const __voltroWorkflowMessages = <const M extends {",
 			"  readonly signals: Readonly<Record<string, Schema.Schema.Any>>",
@@ -401,7 +401,7 @@ ${a.join("\n\n")}\n`);
 			"  definition.__voltroWorkflowMessages ?? __voltroEmptyWorkflowMessages",
 			"",
 			"export const workflowDescriptors = {",
-			...we,
+			...Ce,
 			"} as const",
 			"",
 			"export type WorkflowDescriptors = typeof workflowDescriptors",
@@ -427,7 +427,7 @@ ${a.join("\n\n")}\n`);
 		] : [],
 		...v.map(le),
 		...i.flatMap((e) => [`export const ${Y(`${e.name}.send`)} = actionToRpc(${m(e)}.send${_})`, `export const ${Y(`${e.name}.messages`)} = queryToRpc(${m(e)}.messages${_})`]),
-		...fe ? [
+		...y ? [
 			"export const __voltroWorkflowRun = queryToRpc(workflowRunQueryDescriptor)",
 			"export const __voltroWorkflowRuns = queryToRpc(workflowRunsQueryDescriptor)",
 			"export const __voltroWorkflowRunSteps = queryToRpc(workflowRunStepsQueryDescriptor)",
@@ -453,19 +453,19 @@ ${a.join("\n\n")}\n`);
 		...re,
 		"",
 		"export const appGroup = RpcGroup.make(",
-		ge,
+		me,
 		")",
 		"",
 		"/** Per-rpc-tag metadata for the client. Drives auto-optimistic etc.",
 		" *  Function fields (target.shape, target.identify) survive because",
 		" *  the descriptors themselves are imported by reference. */",
 		"export const appDescriptors = {",
+		..._e,
 		...ve,
+		...Se,
 		...ye,
-		...Ce,
 		...be,
 		...xe,
-		...Se,
 		...ae,
 		"} as const",
 		"",
@@ -502,7 +502,7 @@ ${a.join("\n\n")}\n`);
 		] : []
 	].join("\n");
 }, Pa = async (e) => {
-	let t = E(e.root), n = await J(t), r = await Da(n), i = await Oa(n), a = await Ca(t);
+	let t = D(e.root), n = await J(t), r = await Da(n), i = await Oa(n), a = await Ca(t);
 	if (r.length === 0 && i.length === 0 && !a && (e.pluginRpcImports?.length ?? 0) === 0) return;
 	let o = ((e) => {
 		if (e.length === 0) return t;
@@ -521,7 +521,7 @@ ${a.join("\n\n")}\n`);
 		"workflows"
 	]), c = (e) => e.slice(e.lastIndexOf("/") + 1), l = o;
 	for (; l !== t && s.has(c(l));) l = l.slice(0, l.lastIndexOf("/")) || "/";
-	let u = E(e.outputFile ?? w(l, "rpcGroup.generated.ts")), d = [...new Map((e.pluginErrorImports ?? []).map((e) => [`${e.module}#${e.name}`, e])).values()], f = [...new Map((e.pluginRpcImports ?? []).map((e) => [e.tag, e])).values()], p = Na(t, u, r, d, i, Pn(), a, f), m = [];
+	let u = D(e.outputFile ?? T(l, "rpcGroup.generated.ts")), d = [...new Map((e.pluginErrorImports ?? []).map((e) => [`${e.module}#${e.name}`, e])).values()], f = [...new Map((e.pluginRpcImports ?? []).map((e) => [e.tag, e])).values()], p = Na(t, u, r, d, i, Pn(), a, f), m = [];
 	for (let t of e.pluginContributions ?? []) {
 		let e = null;
 		try {
@@ -538,9 +538,9 @@ ${a.join("\n\n")}\n`);
 	}
 	let h = m.length === 0 ? p : `${p}\n\n// ---- plugin codegen ----\n\n${m.join("\n")}`, g = null;
 	try {
-		g = await M.readFile(u, "utf8");
+		g = await N.readFile(u, "utf8");
 	} catch {}
-	return g !== h && await M.writeFile(u, h, "utf8"), await _a(u), u;
+	return g !== h && await N.writeFile(u, h, "utf8"), await _a(u), u;
 }, Fa = {
 	postgres: "@voltro/sql-postgres",
 	sqlite: "@voltro/sql-sqlite",
@@ -561,7 +561,7 @@ ${a.join("\n\n")}\n`);
 	let t = Ra.get(e);
 	if (t) return t;
 	try {
-		return await import(D(Wn(w(process.cwd(), "package.json")).resolve(e)).href);
+		return await import(O(Wn(T(process.cwd(), "package.json")).resolve(e)).href);
 	} catch {
 		try {
 			return await import(e);
@@ -713,7 +713,7 @@ ${a.join("\n\n")}\n`);
 			...n.error === void 0 ? {} : { error: n.error }
 		});
 	}
-}, qa = (e) => (t, n) => O.suspend(() => {
+}, qa = (e) => (t, n) => k.suspend(() => {
 	let r = { request: {
 		subject: n.request.subject,
 		traceId: n.request.traceId
@@ -746,7 +746,7 @@ ${a.join("\n\n")}\n`);
 		if (r !== void 0) throw Error(`plugin route tag collision: "${e}" declared by plugin "${t.plugin.name}" but already claimed by ${r === "user-route" ? "a user-authored route" : `plugin "${r}"`}`);
 		n.set(e, t.plugin.name);
 	}
-}, Xa = "_voltro_plugin_migrations", Za = () => O.gen(function* () {
+}, Xa = "_voltro_plugin_migrations", Za = () => k.gen(function* () {
 	yield* (yield* V.SqlClient).unsafe(`
       CREATE TABLE IF NOT EXISTS ${Xa} (
         id          TEXT PRIMARY KEY,
@@ -755,17 +755,17 @@ ${a.join("\n\n")}\n`);
         description TEXT,
         applied_at  TEXT NOT NULL
       );
-    `).pipe(O.orDie);
-}), Qa = (e, t) => `${Wa(e)}__${t}`, $a = () => O.gen(function* () {
-	let e = yield* V.SqlClient, t = yield* e`SELECT id FROM ${e(Xa)}`.pipe(O.orDie);
+    `).pipe(k.orDie);
+}), Qa = (e, t) => `${Wa(e)}__${t}`, $a = () => k.gen(function* () {
+	let e = yield* V.SqlClient, t = yield* e`SELECT id FROM ${e(Xa)}`.pipe(k.orDie);
 	return new Set(t.map((e) => e.id));
-}), eo = (e) => O.gen(function* () {
+}), eo = (e) => k.gen(function* () {
 	let t = yield* V.SqlClient, n = (/* @__PURE__ */ new Date()).toISOString();
 	yield* t`
         INSERT INTO ${t(Xa)} (id, plugin_name, migration_id, description, applied_at)
         VALUES (${e.key}, ${e.pluginName}, ${e.migration.id}, ${e.migration.description ?? null}, ${n})
-      `.pipe(O.orDie);
-}), to = (e) => O.gen(function* () {
+      `.pipe(k.orDie);
+}), to = (e) => k.gen(function* () {
 	let t = e.flatMap((e) => (e.extendSchema?.migrations ?? []).map((t) => ({
 		plugin: e,
 		migration: t
@@ -786,7 +786,7 @@ ${a.join("\n\n")}\n`);
 		}
 		let o = yield* V.SqlClient;
 		try {
-			yield* i.up(o).pipe(O.mapError((e) => e)), yield* eo({
+			yield* i.up(o).pipe(k.mapError((e) => e)), yield* eo({
 				key: t,
 				pluginName: e.name,
 				migration: i
@@ -803,7 +803,7 @@ ${a.join("\n\n")}\n`);
 				status: "failed",
 				durationMs: Date.now() - a,
 				error: t
-			}), yield* O.fail(/* @__PURE__ */ Error(`Plugin migration failed: ${e.name} ${i.id} — ${t instanceof Error ? t.message : String(t)}`));
+			}), yield* k.fail(/* @__PURE__ */ Error(`Plugin migration failed: ${e.name} ${i.id} — ${t instanceof Error ? t.message : String(t)}`));
 		}
 	}
 	return r;
@@ -815,7 +815,7 @@ ${a.join("\n\n")}\n`);
 })), ro = (e) => e.flatMap((e) => e.extendSchema?.tables ?? []), io = /(?<!\.server)\.agent\.tsx?$/, Z = /\.agent\.server\.tsx?$/, ao = /\.tool\.tsx?$/, oo = async (e, t) => {
 	let n = 0;
 	for (let r of e) if (ao.test(r)) try {
-		let e = await b(r);
+		let e = await x(r);
 		n += Qn(e);
 	} catch (e) {
 		t.warn("tool: failed to import — handler not wired", { file: r }, e);
@@ -827,7 +827,7 @@ ${a.join("\n\n")}\n`);
 		if (!io.test(i)) continue;
 		let e;
 		try {
-			e = await b(i);
+			e = await x(i);
 		} catch (e) {
 			t.warn("agent: failed to import descriptor", { file: i }, e);
 			continue;
@@ -846,7 +846,7 @@ ${a.join("\n\n")}\n`);
 		}
 		let o = so(i), s;
 		try {
-			s = await b(o);
+			s = await x(o);
 		} catch (e) {
 			t.warn("agent: no executor — expected a `*.agent.server.tsx` default-exporting defineAgentExecutor()", {
 				descriptor: i,
@@ -876,7 +876,7 @@ ${a.join("\n\n")}\n`);
 	for (let i of e) {
 		let e;
 		try {
-			e = await b(i);
+			e = await x(i);
 		} catch (e) {
 			t.warn("connections: failed to import", { file: i }, e);
 			continue;
@@ -914,7 +914,7 @@ ${a.join("\n\n")}\n`);
 	}
 	return n.length > 0 && t.info("discovered connections", {
 		connections: n.map((e) => `${e.definition.id} (${e.definition.kind})`),
-		files: n.map((e) => uo(S(e.file)))
+		files: n.map((e) => uo(C(e.file)))
 	}), n;
 }, po = (e) => typeof e.attributes["framework.kind"] == "string" && e.attributes["framework.kind"].startsWith("subscription."), mo = (e) => {
 	if (e.name.includes("_voltro_traces")) return !0;
@@ -1107,10 +1107,10 @@ ${a.join("\n\n")}\n`);
 	};
 }, Mo = /\.outbox\.tsx?$/, No = /\.workflow\.tsx?$/, Po = /\.trigger\.tsx?$/, Fo = /\.cron\.tsx?$/, Io = /\.webhook\.tsx?$/, Lo = async (e) => {
 	let t = !1, n = !1, r = !1, i = !1, a = !1, o = !1, s = async (e) => {
-		let c = await M.readdir(e, { withFileTypes: !0 }).catch(() => []);
+		let c = await N.readdir(e, { withFileTypes: !0 }).catch(() => []);
 		for (let l of c) if (l.isDirectory()) {
 			if (l.name === "node_modules" || l.name === "dist" || l.name === ".framework" || l.name.startsWith(".")) continue;
-			await s(w(e, l.name));
+			await s(T(e, l.name));
 		} else {
 			let e = l.name;
 			(No.test(e) || Po.test(e)) && (t = !0), Fo.test(e) && (n = !0), Io.test(e) && (r = !0), io.test(e) && (i = !0), Mo.test(e) && (a = !0), lo.test(e) && (o = !0);
@@ -1126,7 +1126,7 @@ ${a.join("\n\n")}\n`);
 	};
 }, Ro = async (e) => {
 	try {
-		return (await import(D(w(e, "app.config.ts")).href)).default?.plugins ?? [];
+		return (await import(O(T(e, "app.config.ts")).href)).default?.plugins ?? [];
 	} catch {
 		return [];
 	}
@@ -1157,15 +1157,15 @@ ${a.join("\n\n")}\n`);
 		...i ? { cdcDialect: i } : {}
 	});
 }, Vo = ".env.local", Ho = (e) => {
-	let t = w(e, ".gitignore"), n = "";
+	let t = T(e, ".gitignore"), n = "";
 	try {
-		j(t) && (n = We(t, "utf8"));
+		M(t) && (n = Ue(t, "utf8"));
 	} catch {
 		return !1;
 	}
 	if (n.split(/\r?\n/).map((e) => e.trim()).some((e) => e === Vo || e === `/${Vo}` || e === ".env*" || e === ".env.*" || e === ".env.local*")) return !0;
 	try {
-		return Ue(t, `${n === "" || n.endsWith("\n") ? "" : "\n"}\n# Local secrets minted by \`voltro dev\` — machine-specific, never commit.\n${Vo}\n`, "utf8"), !0;
+		return He(t, `${n === "" || n.endsWith("\n") ? "" : "\n"}\n# Local secrets minted by \`voltro dev\` — machine-specific, never commit.\n${Vo}\n`, "utf8"), !0;
 	} catch {
 		return !1;
 	}
@@ -1182,13 +1182,13 @@ ${a.join("\n\n")}\n`);
 		});
 	}
 	if (r.length === 0) return { minted: [] };
-	if (!Ho(t)) throw Error(`cannot mint ${r.map((e) => e.key).join(", ")}: failed to add "${Vo}" to ${w(t, ".gitignore")}. Refusing to write a secret to a path that might be committed — add the entry by hand, or set the variable(s) yourself (\`voltro secret generate\`).`);
-	let i = w(t, Vo), a = r.map((e) => `${e.description ? `# ${e.description}\n` : ""}${e.key}=${e.value}`).join("\n");
+	if (!Ho(t)) throw Error(`cannot mint ${r.map((e) => e.key).join(", ")}: failed to add "${Vo}" to ${T(t, ".gitignore")}. Refusing to write a secret to a path that might be committed — add the entry by hand, or set the variable(s) yourself (\`voltro secret generate\`).`);
+	let i = T(t, Vo), a = r.map((e) => `${e.description ? `# ${e.description}\n` : ""}${e.key}=${e.value}`).join("\n");
 	try {
-		if (j(i)) {
-			let e = We(i, "utf8");
-			Ue(i, `${e === "" || e.endsWith("\n") ? "" : "\n"}\n${a}\n`, "utf8");
-		} else N(i, `# Minted by \`voltro dev\` — unique to this project and this machine.
+		if (M(i)) {
+			let e = Ue(i, "utf8");
+			He(i, `${e === "" || e.endsWith("\n") ? "" : "\n"}\n${a}\n`, "utf8");
+		} else P(i, `# Minted by \`voltro dev\` — unique to this project and this machine.
 # Not committed (see .gitignore). Your deployment needs its OWN values:
 #   voltro secret generate
 \n${a}\n`, "utf8");
@@ -1201,7 +1201,7 @@ ${a.join("\n\n")}\n`);
 		file: i
 	};
 }, Go = async ({ env: e = process.env } = {}) => {
-	let t = Ie.make(k.mergeAll(Hi.layer, Ui.Default)), n = await t.runPromise(Vi), r = await t.runPromise(Ui), i = (e.CACHE_BACKEND ?? "memory").toLowerCase();
+	let t = Fe.make(A.mergeAll(Hi.layer, Ui.Default)), n = await t.runPromise(Vi), r = await t.runPromise(Ui), i = (e.CACHE_BACKEND ?? "memory").toLowerCase();
 	return await t.runPromise(r.addSink((e) => n.invalidateTag(e))), {
 		service: n,
 		invalidationBus: r,
@@ -1210,7 +1210,7 @@ ${a.join("\n\n")}\n`);
 				ttlMs: e.ttlMs,
 				...e.swrMs === void 0 ? {} : { swrMs: e.swrMs },
 				tags: r
-			}, O.promise(i))),
+			}, k.promise(i))),
 			put: (e, r, i) => {
 				t.runFork(n.put(e.key, {
 					ttlMs: e.ttlMs,
@@ -1220,14 +1220,14 @@ ${a.join("\n\n")}\n`);
 			}
 		},
 		cache: {
-			get: (e) => t.runPromise(n.get(e)).then((e) => A.getOrUndefined(e)),
+			get: (e) => t.runPromise(n.get(e)).then((e) => j.getOrUndefined(e)),
 			set: (e, r, i) => t.runPromise(n.set(e, r, i)),
 			setWithTags: (e, r, i) => t.runPromise(n.setWithTags(e, r, i)),
 			remove: (e) => t.runPromise(n.remove(e)),
 			has: (e) => t.runPromise(n.has(e)),
 			clear: () => t.runPromise(n.clear()),
 			invalidateTag: (e) => t.runPromise(n.invalidateTag(e)),
-			wrap: (e, r, i) => t.runPromise(n.wrap(e, r, O.promise(i)))
+			wrap: (e, r, i) => t.runPromise(n.wrap(e, r, k.promise(i)))
 		},
 		backend: i,
 		stats: () => t.runSync(n.stats()),
@@ -1354,15 +1354,15 @@ ${a.join("\n\n")}\n`);
 		take: 1
 	}))[0], a = i?.subject?.tenantId ?? null, o = t.tenantId ?? null;
 	if (i === void 0 || a !== o) throw new ni({ reason: "not authorized for this workflow run" });
-}, Yo = B.pipe(k.provide(Ae.layer)), Xo = (e) => {
-	let t = k.succeed(Vi, e.cacheService), n = k.succeed(Wi, e.kvService), r = [
+}, Yo = B.pipe(A.provide(ke.layer)), Xo = (e) => {
+	let t = A.succeed(Vi, e.cacheService), n = A.succeed(Wi, e.kvService), r = [
 		e.analyticsLayer,
 		t,
 		n,
 		...e.pluginServices,
 		...e.userLayers
 	];
-	return k.mergeAll(...r);
+	return A.mergeAll(...r);
 }, Zo = [
 	Oi,
 	Ai,
@@ -1374,13 +1374,13 @@ ${a.join("\n\n")}\n`);
 	let r = new Set(t);
 	if (n) for (let e of Zo) r.add(e.name);
 	let i = {};
-	for (let [t, n] of Object.entries(e)) i[t] = r.has(t) ? (e) => n(e).pipe(ze.take(1)) : n;
+	for (let [t, n] of Object.entries(e)) i[t] = r.has(t) ? (e) => n(e).pipe(Re.take(1)) : n;
 	return i;
-}, $o = Be({ scope: "voltro:dev:supervisor" }), es = /\.generated\./, ts = /\.([cm]?[jt]sx?|json)$/, ns = (e) => {
-	let t = S(e);
+}, $o = ze({ scope: "voltro:dev:supervisor" }), es = /\.generated\./, ts = /\.([cm]?[jt]sx?|json)$/, ns = (e) => {
+	let t = C(e);
 	return !es.test(t) && ts.test(t);
-}, rs = (e) => e.startsWith("node_modules") || e.startsWith(".framework") || e.startsWith(".turbo") || e.startsWith(".vite") || e.startsWith("dist") || e.startsWith(".git"), is = process.env.WATCH_POLL === "1" || process.env.CHOKIDAR_USEPOLLING === "1", as = 1e3, os = (e) => ze.async((t) => {
-	let n = E(e), r = (e) => T(n, e), i = Ji(n, {
+}, rs = (e) => e.startsWith("node_modules") || e.startsWith(".framework") || e.startsWith(".turbo") || e.startsWith(".vite") || e.startsWith("dist") || e.startsWith(".git"), is = process.env.WATCH_POLL === "1" || process.env.CHOKIDAR_USEPOLLING === "1", as = 1e3, os = (e) => Re.async((t) => {
+	let n = D(e), r = (e) => E(n, e), i = Ji(n, {
 		persistent: !0,
 		ignoreInitial: !0,
 		atomic: !0,
@@ -1389,7 +1389,7 @@ ${a.join("\n\n")}\n`);
 		binaryInterval: as,
 		ignored: (e) => {
 			let t = r(e);
-			return t === "" ? !1 : rs(t) || es.test(S(e));
+			return t === "" ? !1 : rs(t) || es.test(C(e));
 		}
 	});
 	return i.on("all", (e, n) => {
@@ -1400,10 +1400,10 @@ ${a.join("\n\n")}\n`);
 		}), !rs(i) && ns(i) && t.single({ file: i });
 	}), i.on("error", (e) => {
 		$o.error("watcher error", { hint: is ? void 0 : "on a bind-mount (k8s hostPath / Docker volume) set WATCH_POLL=1" }, e);
-	}), O.sync(() => {
+	}), k.sync(() => {
 		i.close();
 	});
-}), ss = (e) => O.acquireUseRelease(O.sync(() => {
+}), ss = (e) => k.acquireUseRelease(k.sync(() => {
 	let t = process.argv[1] ?? "";
 	return Bn(process.execPath, [
 		"--import",
@@ -1418,9 +1418,9 @@ ${a.join("\n\n")}\n`);
 			FRAMEWORK_DEV_INNER: "1"
 		}
 	});
-}), () => O.never, (e) => O.async((t) => {
+}), () => k.never, (e) => k.async((t) => {
 	if (e.exitCode !== null || e.killed) {
-		t(O.void);
+		t(k.void);
 		return;
 	}
 	e.kill("SIGTERM");
@@ -1428,29 +1428,29 @@ ${a.join("\n\n")}\n`);
 		e.exitCode === null && !e.killed && e.kill("SIGKILL");
 	}, 1500);
 	e.once("exit", () => {
-		clearTimeout(n), t(O.void);
+		clearTimeout(n), t(k.void);
 	});
-})), cs = (e) => O.gen(function* () {
+})), cs = (e) => k.gen(function* () {
 	$o.info("supervisor active — watching project root", {
 		root: e.root,
 		patterns: ["**/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs,json} (excl. *.generated.*)"],
 		watcher: is ? "chokidar (polling)" : "chokidar (native)",
 		hint: "WATCH=0 disables, WATCH_DEBUG=1 traces every event, WATCH_POLL=1 for bind-mounts (k8s/Docker)"
 	});
-	let t = yield* Le.make(A.none()), n = O.gen(function* () {
-		let n = yield* O.fork(ss(e.root));
-		yield* Le.set(t, A.some(n));
-	}), r = O.gen(function* () {
-		let e = yield* Le.get(t);
-		yield* A.match(e, {
-			onNone: () => O.void,
-			onSome: (e) => Pe.interrupt(e)
-		}), yield* Le.set(t, A.none());
+	let t = yield* Ie.make(j.none()), n = k.gen(function* () {
+		let n = yield* k.fork(ss(e.root));
+		yield* Ie.set(t, j.some(n));
+	}), r = k.gen(function* () {
+		let e = yield* Ie.get(t);
+		yield* j.match(e, {
+			onNone: () => k.void,
+			onSome: (e) => Ne.interrupt(e)
+		}), yield* Ie.set(t, j.none());
 	});
-	return yield* n, yield* os(e.root).pipe(ze.debounce(Ne.millis(80)), ze.runForEach((e) => O.gen(function* () {
+	return yield* n, yield* os(e.root).pipe(Re.debounce(Me.millis(80)), Re.runForEach((e) => k.gen(function* () {
 		let t = Date.now();
 		$o.info("file changed — restarting", { file: e.file }), yield* r, yield* n, $o.info("restart complete", { ms: Date.now() - t });
-	}))), yield* O.never;
+	}))), yield* k.never;
 }), ls = (e) => {
 	let t = [];
 	for (let n of e) for (let e of n) {
@@ -1468,37 +1468,37 @@ ${a.join("\n\n")}\n`);
 	return n.length === 0 ? 0 : (t(ai(n)), n.length);
 }, ds = async (e) => {
 	let t = e.spec ?? un, n;
-	return t.kind !== "noop" && e.sqlLayer !== void 0 ? n = await O.runPromise(O.gen(function* () {
+	return t.kind !== "noop" && e.sqlLayer !== void 0 ? n = await k.runPromise(k.gen(function* () {
 		let n = yield* V.SqlClient, r = t.build(n);
-		return t.initialize && (yield* t.initialize(r).pipe(O.catchAll((t) => O.sync(() => e.log.warn("analytics sink initialize failed", {
+		return t.initialize && (yield* t.initialize(r).pipe(k.catchAll((t) => k.sync(() => e.log.warn("analytics sink initialize failed", {
 			provider: r.info.provider,
 			err: String(t)
 		}))))), r;
-	}).pipe(O.provide(e.sqlLayer))) : (t.kind !== "noop" && e.sqlLayer === void 0 && e.log.warn(`analytics sink '${t.kind}' requires a real SQL store — falling back to noop`), n = ln()), e.log.info("analytics sink", {
+	}).pipe(k.provide(e.sqlLayer))) : (t.kind !== "noop" && e.sqlLayer === void 0 && e.log.warn(`analytics sink '${t.kind}' requires a real SQL store — falling back to noop`), n = ln()), e.log.info("analytics sink", {
 		provider: n.info.provider,
 		capabilities: n.info.capabilities,
 		...n.info.detail ?? {}
 	}), {
 		spec: t,
 		sink: n,
-		layer: k.succeed(Ke, n),
+		layer: A.succeed(Ke, n),
 		tables: t.tables ?? [],
 		dispose: async () => {
-			t.dispose && await O.runPromise(t.dispose(n).pipe(O.timeout("1200 millis"), O.ignore));
+			t.dispose && await k.runPromise(t.dispose(n).pipe(k.timeout("1200 millis"), k.ignore));
 		}
 	};
-}, fs = "@effect/cluster@0.59.0", ps = "@effect__cluster@0.59.0.patch", ms = `patches/${ps}`, hs = C(ke(import.meta.url)), gs = [E(hs, "..", "templates", "patches", ps), E(hs, "..", "..", "templates", "patches", ps)], _s = async () => {
-	for (let e of gs) if (j(e)) return M.readFile(e, "utf8");
+}, fs = "@effect/cluster@0.59.0", ps = "@effect__cluster@0.59.0.patch", ms = `patches/${ps}`, hs = w(Oe(import.meta.url)), gs = [D(hs, "..", "templates", "patches", ps), D(hs, "..", "..", "templates", "patches", ps)], _s = async () => {
+	for (let e of gs) if (M(e)) return N.readFile(e, "utf8");
 	throw Error(`@effect/cluster patch asset not found (looked in: ${gs.join(", ")}). This is a packaging bug — the CLI should ship it under templates/patches/.`);
 }, vs = (e) => RegExp(`['"]?${fs.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}['"]?\\s*:`).test(e), ys = (e) => {
 	if (vs(e)) return null;
 	let t = `  '${fs}': ${ms}`, n = /^patchedDependencies:[ \t]*\n/m;
 	return n.test(e) ? e.replace(n, (e) => `${e}${t}\n`) : `${e}${e.endsWith("\n") ? "" : "\n"}\npatchedDependencies:\n${t}\n`;
 }, bs = (e) => {
-	let t = E(e);
+	let t = D(e);
 	for (let e = 0; e < 12; e++) {
-		if (j(w(t, "pnpm-workspace.yaml"))) return t;
-		let e = C(t);
+		if (M(T(t, "pnpm-workspace.yaml"))) return t;
+		let e = w(t);
 		if (e === t) break;
 		t = e;
 	}
@@ -1509,19 +1509,19 @@ ${a.join("\n\n")}\n`);
 	let n = await Ss(t);
 	return n.fullyWired ? null : `mssql + durable cluster workflows need the @effect/cluster patch, which a plain install cannot carry. Run \`voltro add mssql\` then \`pnpm install\` to wire it (missing: ${[n.patchFilePresent ? null : ms, n.pnpmEntryPresent ? null : "patchedDependencies in pnpm-workspace.yaml"].filter(Boolean).join(" + ")}). Without it, workflow message/runner storage misbehaves on SQL Server.`;
 }, Ss = async (e) => {
-	let t = j(w(e, ms)), n = w(e, "pnpm-workspace.yaml"), r = j(n) && vs(await M.readFile(n, "utf8"));
+	let t = M(T(e, ms)), n = T(e, "pnpm-workspace.yaml"), r = M(n) && vs(await N.readFile(n, "utf8"));
 	return {
 		patchFilePresent: t,
 		pnpmEntryPresent: r,
 		fullyWired: t && r
 	};
 }, Cs = async (e) => {
-	let t = [], n = w(e, ms), r = await _s();
-	(j(n) ? await M.readFile(n, "utf8") : null) !== r && (await M.mkdir(C(n), { recursive: !0 }), await M.writeFile(n, r, "utf8"), t.push(`patch file → ${ms}`));
-	let i = w(e, "pnpm-workspace.yaml");
-	if (j(i)) {
-		let e = ys(await M.readFile(i, "utf8"));
-		e !== null && (await M.writeFile(i, e, "utf8"), t.push(`patchedDependencies['${fs}'] → pnpm-workspace.yaml`));
+	let t = [], n = T(e, ms), r = await _s();
+	(M(n) ? await N.readFile(n, "utf8") : null) !== r && (await N.mkdir(w(n), { recursive: !0 }), await N.writeFile(n, r, "utf8"), t.push(`patch file → ${ms}`));
+	let i = T(e, "pnpm-workspace.yaml");
+	if (M(i)) {
+		let e = ys(await N.readFile(i, "utf8"));
+		e !== null && (await N.writeFile(i, e, "utf8"), t.push(`patchedDependencies['${fs}'] → pnpm-workspace.yaml`));
 	}
 	return t;
 }, ws = async (e, t) => {
@@ -1529,7 +1529,7 @@ ${a.join("\n\n")}\n`);
 	for (let r of e) {
 		let e;
 		try {
-			e = await import(D(r).href);
+			e = await import(O(r).href);
 		} catch (e) {
 			t.warn("seed: failed to import", { file: r }, e);
 			continue;
@@ -1539,7 +1539,7 @@ ${a.join("\n\n")}\n`);
 			t.warn("seed: no defineSeed export", { file: r });
 			continue;
 		}
-		let a = await M.readFile(r, "utf8").catch(() => ""), o = i.fingerprint ? i.fingerprint({ src: a }) : Rn("sha256").update(a).digest("hex").slice(0, 16);
+		let a = await N.readFile(r, "utf8").catch(() => ""), o = i.fingerprint ? i.fingerprint({ src: a }) : Rn("sha256").update(a).digest("hex").slice(0, 16);
 		n.push({
 			file: r,
 			definition: i,
@@ -1641,7 +1641,7 @@ ${a.join("\n\n")}\n`);
 	for (let r of e) {
 		let e;
 		try {
-			e = await b(r);
+			e = await x(r);
 		} catch (e) {
 			t.warn("subscriber: failed to import", { file: r }, e);
 			continue;
@@ -1662,7 +1662,7 @@ ${a.join("\n\n")}\n`);
 		}
 		n.push({
 			file: r,
-			id: Ms(S(r)),
+			id: Ms(C(r)),
 			definition: a
 		});
 	}
@@ -1723,7 +1723,7 @@ ${a.join("\n\n")}\n`);
 	for (let i of e) {
 		let e;
 		try {
-			e = await b(i);
+			e = await x(i);
 		} catch (e) {
 			t.warn("outbox: failed to import", { file: i }, e);
 			continue;
@@ -1753,7 +1753,7 @@ ${a.join("\n\n")}\n`);
 		}
 		r.set(o.effect, i), n.push({
 			file: i,
-			id: Fs(S(i)),
+			id: Fs(C(i)),
 			definition: o
 		});
 	}
@@ -1891,7 +1891,7 @@ ${a.join("\n\n")}\n`);
 	for (let r of e) {
 		let e;
 		try {
-			e = await b(r);
+			e = await x(r);
 		} catch (e) {
 			t.warn("reaction: failed to import (check defineReaction validation)", { file: r }, e);
 			continue;
@@ -1920,7 +1920,7 @@ ${a.join("\n\n")}\n`);
 		}
 		n.push({
 			file: r,
-			id: Us(S(r)),
+			id: Us(C(r)),
 			definition: a
 		});
 	}
@@ -2069,11 +2069,11 @@ ${a.join("\n\n")}\n`);
 		durationMs: 0,
 		lastError: null,
 		nextRefreshAt: null
-	}, r = (t) => O.runPromise(t.pipe(O.provide(e))), i = () => O.gen(function* () {
+	}, r = (t) => k.runPromise(t.pipe(k.provide(e))), i = () => k.gen(function* () {
 		let e = yield* V.SqlClient;
-		yield* e.unsafe(Xs).pipe(O.orDie), yield* e.unsafe(Zs).pipe(O.orDie), yield* e.unsafe(Qs).pipe(O.orDie);
-	}), a = () => O.gen(function* () {
-		let e = yield* V.SqlClient, n = yield* e`SELECT * FROM ${e(qs)}`.pipe(O.orElseSucceed(() => []));
+		yield* e.unsafe(Xs).pipe(k.orDie), yield* e.unsafe(Zs).pipe(k.orDie), yield* e.unsafe(Qs).pipe(k.orDie);
+	}), a = () => k.gen(function* () {
+		let e = yield* V.SqlClient, n = yield* e`SELECT * FROM ${e(qs)}`.pipe(k.orElseSucceed(() => []));
 		for (let r of n) {
 			let n = yield* e`
           SELECT ${e("row_index")} AS row_index, ${e("row_data")} AS row_data
@@ -2081,7 +2081,7 @@ ${a.join("\n\n")}\n`);
           WHERE ${e("aggregate_name")} = ${r.name}
             AND ${e("generation")} = ${r.generation}
           ORDER BY ${e("row_index")} ASC
-        `.pipe(O.orElseSucceed(() => [])), i = [];
+        `.pipe(k.orElseSucceed(() => [])), i = [];
 			for (let e of n) try {
 				i.push(JSON.parse(e.row_data));
 			} catch {}
@@ -2090,12 +2090,12 @@ ${a.join("\n\n")}\n`);
 				meta: $s(r)
 			});
 		}
-	}), o = (e, t) => O.gen(function* () {
+	}), o = (e, t) => k.gen(function* () {
 		let n = yield* V.SqlClient, r = (yield* n`
         SELECT ${n("generation")} AS generation
         FROM ${n(qs)}
         WHERE ${n("name")} = ${e}
-      `.pipe(O.orElseSucceed(() => [])))[0]?.generation ?? 0, i = r + 1;
+      `.pipe(k.orElseSucceed(() => [])))[0]?.generation ?? 0, i = r + 1;
 		yield* n`
         UPDATE ${n(qs)} SET
           ${n("generation")} = ${i},
@@ -2105,7 +2105,7 @@ ${a.join("\n\n")}\n`);
           ${n("last_error")} = ${t.meta.lastError},
           ${n("next_refresh_at")} = ${t.meta.nextRefreshAt ? t.meta.nextRefreshAt.toISOString() : null}
         WHERE ${n("name")} = ${e}
-      `.pipe(O.orDie), r === 0 && (yield* n`
+      `.pipe(k.orDie), r === 0 && (yield* n`
           INSERT INTO ${n(qs)}
             (${n("name")}, ${n("generation")}, ${n("refreshed_at")},
              ${n("duration_ms")}, ${n("row_count")}, ${n("last_error")}, ${n("next_refresh_at")})
@@ -2113,7 +2113,7 @@ ${a.join("\n\n")}\n`);
             (${e}, ${i}, ${t.meta.refreshedAt ? t.meta.refreshedAt.toISOString() : null},
              ${t.meta.durationMs}, ${t.meta.rowCount}, ${t.meta.lastError},
              ${t.meta.nextRefreshAt ? t.meta.nextRefreshAt.toISOString() : null})
-        `.pipe(O.orElseSucceed(() => void 0)));
+        `.pipe(k.orElseSucceed(() => void 0)));
 		for (let r = 0; r < t.rows.length; r++) {
 			let a = JSON.stringify(t.rows[r]);
 			yield* n`
@@ -2121,14 +2121,14 @@ ${a.join("\n\n")}\n`);
             (${n("aggregate_name")}, ${n("generation")}, ${n("row_index")}, ${n("row_data")})
           VALUES
             (${e}, ${i}, ${r}, ${a})
-        `.pipe(O.orDie);
+        `.pipe(k.orDie);
 		}
 		r > 0 && (yield* n`
           DELETE FROM ${n(Js)}
           WHERE ${n("aggregate_name")} = ${e}
             AND ${n("generation")} < ${i}
-        `.pipe(O.orDie));
-	}), s = (e, t) => O.gen(function* () {
+        `.pipe(k.orDie));
+	}), s = (e, t) => k.gen(function* () {
 		let n = yield* V.SqlClient;
 		yield* n`
         UPDATE ${n(qs)} SET
@@ -2138,10 +2138,10 @@ ${a.join("\n\n")}\n`);
           ${n("last_error")} = ${t.lastError},
           ${n("next_refresh_at")} = ${t.nextRefreshAt ? t.nextRefreshAt.toISOString() : null}
         WHERE ${n("name")} = ${e}
-      `.pipe(O.orDie), (yield* n`
+      `.pipe(k.orDie), (yield* n`
         SELECT ${n("name")} FROM ${n(qs)}
         WHERE ${n("name")} = ${e}
-      `.pipe(O.orElseSucceed(() => []))).length === 0 && (yield* n`
+      `.pipe(k.orElseSucceed(() => []))).length === 0 && (yield* n`
           INSERT INTO ${n(qs)}
             (${n("name")}, ${n("generation")}, ${n("refreshed_at")},
              ${n("duration_ms")}, ${n("row_count")}, ${n("last_error")}, ${n("next_refresh_at")})
@@ -2149,7 +2149,7 @@ ${a.join("\n\n")}\n`);
             (${e}, 0, ${t.refreshedAt ? t.refreshedAt.toISOString() : null},
              ${t.durationMs}, ${t.rowCount}, ${t.lastError},
              ${t.nextRefreshAt ? t.nextRefreshAt.toISOString() : null})
-        `.pipe(O.orDie));
+        `.pipe(k.orDie));
 	});
 	return {
 		initialize: async () => {
@@ -2189,11 +2189,11 @@ ${a.join("\n\n")}\n`);
 			};
 		},
 		refreshMirror: async (e) => {
-			await r(O.gen(function* () {
+			await r(k.gen(function* () {
 				let n = yield* V.SqlClient, r = (yield* n`
           SELECT * FROM ${n(qs)}
           WHERE ${n("name")} = ${e}
-        `.pipe(O.orElseSucceed(() => [])))[0];
+        `.pipe(k.orElseSucceed(() => [])))[0];
 				if (!r) return;
 				let i = yield* n`
           SELECT ${n("row_index")} AS row_index, ${n("row_data")} AS row_data
@@ -2201,7 +2201,7 @@ ${a.join("\n\n")}\n`);
           WHERE ${n("aggregate_name")} = ${e}
             AND ${n("generation")} = ${r.generation}
           ORDER BY ${n("row_index")} ASC
-        `.pipe(O.orElseSucceed(() => [])), a = [];
+        `.pipe(k.orElseSucceed(() => [])), a = [];
 				for (let e of i) try {
 					a.push(JSON.parse(e.row_data));
 				} catch {}
@@ -2217,7 +2217,7 @@ ${a.join("\n\n")}\n`);
 	for (let i of e) {
 		let e;
 		try {
-			e = await b(i);
+			e = await x(i);
 		} catch (e) {
 			t.warn("aggregate: failed to import", { file: i }, e);
 			continue;
@@ -2231,7 +2231,7 @@ ${a.join("\n\n")}\n`);
 		r.add(a.name), n.push({
 			file: i,
 			definition: a
-		}), tc(S(i));
+		}), tc(C(i));
 	}
 	return n;
 }, rc = /^(\d+)(ms|s|m|h|d)$/, ic = (e) => {
@@ -2271,7 +2271,7 @@ ${a.join("\n\n")}\n`);
 	let r = n ?? 0, i = t === void 0 ? e.length : r + t;
 	return e.slice(r, i);
 }, cc = (e, t) => {
-	let n = Re.decodeUnknownEither(e.output), r = [];
+	let n = Le.decodeUnknownEither(e.output), r = [];
 	for (let e = 0; e < t.length; e++) {
 		let i = n(t[e]);
 		if (i._tag === "Left") {
@@ -2290,10 +2290,10 @@ ${a.join("\n\n")}\n`);
 }, lc = (e, t) => {
 	let n = e.refresh;
 	if (n.cron) {
-		let e = n.timezone ?? "UTC", r = Me.unsafeParse(n.cron, e);
+		let e = n.timezone ?? "UTC", r = je.unsafeParse(n.cron, e);
 		return {
 			intervalMs: null,
-			nextAt: Me.next(r, t),
+			nextAt: je.next(r, t),
 			kind: "cron"
 		};
 	}
@@ -2337,7 +2337,7 @@ ${a.join("\n\n")}\n`);
 			analytics: r,
 			log: l,
 			id: t.name
-		}), o = cc(t, e instanceof Promise ? await e : await O.runPromise(e));
+		}), o = cc(t, e instanceof Promise ? await e : await k.runPromise(e));
 		if (!o.ok) throw Error(`output schema mismatch: ${o.reason}`);
 		let s = o.rows;
 		if (t.strategy === "merge") {
@@ -2431,7 +2431,7 @@ ${a.join("\n\n")}\n`);
 }, pc = (e) => {
 	let { definition: t, store: n, storage: r, log: i, schedule: a } = e, o = t.incremental;
 	if (o === void 0) return;
-	let s = i.child(`aggregate:${t.name}`), c = new F({
+	let s = i.child(`aggregate:${t.name}`), c = new I({
 		op: o.op,
 		...o.column === void 0 ? {} : { column: o.column },
 		...o.groupBy === void 0 ? {} : { groupBy: o.groupBy }
@@ -2573,13 +2573,13 @@ ${a.join("\n\n")}\n`);
 	return {
 		registry: {
 			getHandle: (a) => {
-				let l = s.has(a.name), u = () => O.fail(new I({ name: a.name }));
+				let l = s.has(a.name), u = () => k.fail(new We({ name: a.name }));
 				return l ? {
-					read: (e) => O.gen(function* () {
+					read: (e) => k.gen(function* () {
 						let n = t.get(a.name);
 						if (e?.maxAgeMs !== void 0) {
 							let t = n.meta.refreshedAt, r = t === null ? Infinity : Date.now() - t.getTime();
-							if (r > e.maxAgeMs) return yield* O.fail(new L({
+							if (r > e.maxAgeMs) return yield* k.fail(new L({
 								name: a.name,
 								ageMs: Number.isFinite(r) ? r : -1,
 								maxAgeMs: e.maxAgeMs
@@ -2587,8 +2587,8 @@ ${a.join("\n\n")}\n`);
 						}
 						return sc(oc(ac(n.rows, e?.where), e?.orderBy, e?.direction), e?.limit, e?.offset);
 					}),
-					meta: () => O.succeed(t.get(a.name).meta),
-					refresh: () => O.tryPromise({
+					meta: () => k.succeed(t.get(a.name).meta),
+					refresh: () => k.tryPromise({
 						try: () => uc({
 							definition: s.get(a.name),
 							store: e.store,
@@ -2599,7 +2599,7 @@ ${a.join("\n\n")}\n`);
 							refreshState: o.get(a.name),
 							scheduledAt: /* @__PURE__ */ new Date()
 						}),
-						catch: (e) => new P({
+						catch: (e) => new F({
 							name: a.name,
 							operation: "refresh",
 							cause: e instanceof Error ? `${e.name}: ${e.message}` : String(e)
@@ -2607,7 +2607,7 @@ ${a.join("\n\n")}\n`);
 					})
 				} : {
 					read: () => u(),
-					meta: () => O.succeed(c),
+					meta: () => k.succeed(c),
 					refresh: () => u()
 				};
 			},
@@ -2641,15 +2641,15 @@ ${a.join("\n\n")}\n`);
 	};
 }, hc = {
 	getHandle: (e) => ({
-		read: () => O.fail(new I({ name: e.name })),
-		meta: () => O.succeed({
+		read: () => k.fail(new We({ name: e.name })),
+		meta: () => k.succeed({
 			refreshedAt: null,
 			rowCount: 0,
 			durationMs: 0,
 			lastError: null,
 			nextRefreshAt: null
 		}),
-		refresh: () => O.fail(new I({ name: e.name }))
+		refresh: () => k.fail(new We({ name: e.name }))
 	}),
 	snapshot: () => [],
 	refreshByName: async () => !1
@@ -2797,7 +2797,7 @@ ${a.join("\n\n")}\n`);
 	for (let a of e) {
 		let e;
 		try {
-			e = await b(a);
+			e = await x(a);
 		} catch (e) {
 			t.warn("webhook: failed to import", { file: a }, e);
 			continue;
@@ -2838,7 +2838,7 @@ ${a.join("\n\n")}\n`);
 	for (let r of e) {
 		let e;
 		try {
-			e = await import(D(r).href);
+			e = await import(O(r).href);
 		} catch (e) {
 			t.warn("email: failed to import", { file: r }, e);
 			continue;
@@ -2854,7 +2854,7 @@ ${a.join("\n\n")}\n`);
 		});
 	}
 	return { templates: n };
-}, Fc = (e) => O.map(e, (e) => ({ text: e })), Ic = (e) => {
+}, Fc = (e) => k.map(e, (e) => ({ text: e })), Ic = (e) => {
 	let { descriptor: t, executor: n, file: r } = e, { send: i, messages: a } = tr(t);
 	return [{
 		kind: "action",
@@ -2958,8 +2958,8 @@ ${a.join("\n\n")}\n`);
 	}
 }, Jc = async (e) => {
 	if (e !== void 0) {
-		if (typeof e == "object" && e && O.isEffect(e)) {
-			await O.runPromise(e);
+		if (typeof e == "object" && e && k.isEffect(e)) {
+			await k.runPromise(e);
 			return;
 		}
 		await Promise.resolve(e);
@@ -2973,7 +2973,7 @@ ${a.join("\n\n")}\n`);
 		}
 		let n = e.pluginConfigs?.[t.name];
 		try {
-			let e = Re.decodeUnknownSync(t.configSchema)(n);
+			let e = Le.decodeUnknownSync(t.configSchema)(n);
 			a.set(t.name, e);
 		} catch (e) {
 			throw Error(`plugin "${t.name}" config failed validation: ${e.message ?? String(e)}`);
@@ -2985,7 +2985,7 @@ ${a.join("\n\n")}\n`);
 			type: e.appType,
 			voltroVersion: e.voltroVersion
 		},
-		logger: Be({ scope: t.name }),
+		logger: ze({ scope: t.name }),
 		env: process.env,
 		config: a.get(t.name)
 	});
@@ -3134,21 +3134,21 @@ ${a.join("\n\n")}\n`);
 	action: "intercept-action"
 }, $c = (e, t, n, r) => {
 	let i = Qc[t], a = `plugin.${e}.${i}`, o = a;
-	return (t, s) => O.suspend(() => {
+	return (t, s) => k.suspend(() => {
 		let c = Date.now();
-		return n(t, s).pipe(O.withSpan(a, { attributes: {
+		return n(t, s).pipe(k.withSpan(a, { attributes: {
 			"plugin.name": e,
 			"plugin.hook": i,
 			"rpc.tag": s.tag,
 			"rpc.kind": s.kind
-		} }), O.tap(() => O.sync(() => {
+		} }), k.tap(() => k.sync(() => {
 			r.record({
 				kind: "plugin",
 				tag: o,
 				durationMs: Date.now() - c,
 				status: "ok"
 			});
-		})), O.tapErrorCause(() => O.sync(() => {
+		})), k.tapErrorCause(() => k.sync(() => {
 			r.record({
 				kind: "plugin",
 				tag: o,
@@ -3164,7 +3164,7 @@ ${a.join("\n\n")}\n`);
 		typeof e == "function" && i.push($c(a.name, t, e, n));
 	}
 	return i;
-}, tl = `${n}/plugins/`, nl = (e) => e.startsWith("/") ? e : `/${e}`, rl = (e) => {
+}, tl = `${ge}/plugins/`, nl = (e) => e.startsWith("/") ? e : `/${e}`, rl = (e) => {
 	let t = e.indexOf("?");
 	return t >= 0 ? e.slice(0, t) : e;
 }, il = (e, t) => e.kind === "json" ? {
@@ -3196,50 +3196,50 @@ ${a.join("\n\n")}\n`);
 	return {
 		endpoints: n,
 		async dispatch(e, t, r, i, a) {
-			let s = rl(e);
-			if (!s.startsWith(tl)) return null;
-			let c = y(r.origin ?? r.Origin), l = t.toUpperCase();
-			if (l === "OPTIONS") return {
+			let o = rl(e);
+			if (!o.startsWith(tl)) return null;
+			let s = b(r.origin ?? r.Origin), c = t.toUpperCase();
+			if (c === "OPTIONS") return {
 				status: 204,
 				contentType: "text/plain",
 				body: "",
-				headers: c
+				headers: s
 			};
-			if (oe()) return {
+			if (le()) return {
 				status: 503,
 				contentType: "application/json; charset=utf-8",
 				body: JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }),
-				headers: c
+				headers: s
 			};
-			let u = (a?.authResolver ?? o)(r);
-			if (!u.ok) return {
+			let l = (a?.authResolver ?? te)(r);
+			if (!l.ok) return {
 				status: 401,
 				contentType: "application/json; charset=utf-8",
 				body: JSON.stringify({
 					error: "unauthorized",
-					reason: u.reason
+					reason: l.reason
 				}),
-				headers: c
+				headers: s
 			};
-			let d = n.find((e) => e.method === l && e.path === s);
-			if (!d) return null;
+			let u = n.find((e) => e.method === c && e.path === o);
+			if (!u) return null;
 			try {
-				return il(await O.runPromise(d.handler({
-					method: l,
+				return il(await k.runPromise(u.handler({
+					method: c,
 					url: e,
 					headers: r,
 					body: i
-				})), c);
+				})), s);
 			} catch (e) {
 				return {
 					status: 500,
 					contentType: "application/json; charset=utf-8",
 					body: JSON.stringify({
 						error: "plugin inspect handler failed",
-						plugin: d.pluginName,
+						plugin: u.pluginName,
 						message: e?.message ?? String(e)
 					}),
-					headers: c
+					headers: s
 				};
 			}
 		}
@@ -3249,10 +3249,10 @@ ${a.join("\n\n")}\n`);
 	return async (i, a) => {
 		let o = Date.now();
 		try {
-			await O.runPromise(O.tryPromise({
+			await k.runPromise(k.tryPromise({
 				try: () => t(i, a),
 				catch: (e) => e
-			}).pipe(O.withSpan(`plugin.${e}.schedule-fire`, { attributes: {
+			}).pipe(k.withSpan(`plugin.${e}.schedule-fire`, { attributes: {
 				"plugin.name": e,
 				"plugin.hook": "schedule-fire",
 				"schedule.name": a.name,
@@ -3285,20 +3285,20 @@ ${a.join("\n\n")}\n`);
 	};
 }, cl = (e, t, n) => ((r, i) => {
 	let a = `plugin.${e}.workflow-step`, o = a, s = Date.now();
-	return t(r, i).pipe(O.withSpan(a, { attributes: {
+	return t(r, i).pipe(k.withSpan(a, { attributes: {
 		"plugin.name": e,
 		"plugin.hook": "workflow-step",
 		"workflow.step": i.stepName,
 		"workflow.runId": i.runId,
 		"workflow.attempt": i.attempt
-	} }), O.tap(() => O.sync(() => {
+	} }), k.tap(() => k.sync(() => {
 		n.record({
 			kind: "plugin",
 			tag: o,
 			durationMs: Date.now() - s,
 			status: "ok"
 		});
-	})), O.tapErrorCause(() => O.sync(() => {
+	})), k.tapErrorCause(() => k.sync(() => {
 		n.record({
 			kind: "plugin",
 			tag: o,
@@ -3309,7 +3309,7 @@ ${a.join("\n\n")}\n`);
 }), ll = (e, t) => {
 	let n = [];
 	for (let r of e) typeof r.onWorkflowStep == "function" && n.push(cl(r.name, r.onWorkflowStep, t));
-	return n.length === 0 ? k.succeed(or, { interceptor: ((e) => e) }) : k.succeed(or, { interceptor: ((e, t) => n.reduceRight((e, n) => n(e, t), e)) });
+	return n.length === 0 ? A.succeed(or, { interceptor: ((e) => e) }) : A.succeed(or, { interceptor: ((e, t) => n.reduceRight((e, n) => n(e, t), e)) });
 }, ul = (e) => {
 	if (!e) return;
 	let t = e.workflowName ?? e.tag, n = [];
@@ -3428,13 +3428,13 @@ ${a.join("\n\n")}\n`);
 	let t = [], n = async (e) => {
 		let r;
 		try {
-			r = await M.readdir(e, { withFileTypes: !0 });
+			r = await N.readdir(e, { withFileTypes: !0 });
 		} catch {
 			return;
 		}
 		for (let i of r) {
 			if (bl.has(i.name)) continue;
-			let r = w(e, i.name);
+			let r = T(e, i.name);
 			i.isDirectory() ? await n(r) : i.isFile() && (_l.test(i.name) && !vl.test(i.name) || yl.test(i.name)) && t.push(r);
 		}
 	};
@@ -3442,7 +3442,7 @@ ${a.join("\n\n")}\n`);
 }, Sl = async (e) => {
 	let t = await xl(e), n = [];
 	for (let e of t) try {
-		let t = await import(D(e).href);
+		let t = await import(O(e).href);
 		for (let r of Object.values(t)) {
 			if (r && typeof r == "object" && "kind" in r && "name" in r) {
 				let e = r;
@@ -3730,9 +3730,9 @@ ${a.join("\n\n")}\n`);
 			r.removeListener("error", n), r.unref(), e.log?.info("dev health server listening", { port: e.port }), t(i(!0));
 		});
 	});
-}, Gl = Yo, $ = Be({ scope: "voltro:dev" }), Kl = await (async () => {
+}, Gl = Yo, $ = ze({ scope: "voltro:dev" }), Kl = await (async () => {
 	try {
-		let e = w(C(ke(import.meta.url)), "..", "package.json"), t = await M.readFile(e, "utf8");
+		let e = T(w(Oe(import.meta.url)), "..", "package.json"), t = await N.readFile(e, "utf8");
 		return JSON.parse(t).version ?? "0.0.0";
 	} catch {
 		return "0.0.0";
@@ -3760,25 +3760,25 @@ ${a.join("\n\n")}\n`);
 	onStrategyFailed: ({ strategyId: e, reason: t }) => {
 		$.warn(`auth strategy "${e}" rejected request: ${t}`);
 	}
-}), Zl = (e) => k.succeed(ei, ei.of(({ headers: t, clientId: n }) => O.promise(async () => wt(n) || e({
+}), Zl = (e) => A.succeed(ei, ei.of(({ headers: t, clientId: n }) => k.promise(async () => wt(n) || e({
 	headers: t,
 	clientId: n
-})))), Ql = k.succeed(ti, ti.of(({ clientId: e }) => O.succeed({ clientId: e }))), $l = (e) => {
-	if (je.isCause(e)) return e;
+})))), Ql = A.succeed(ti, ti.of(({ clientId: e }) => k.succeed({ clientId: e }))), $l = (e) => {
+	if (Ae.isCause(e)) return e;
 	if (typeof e != "object" || !e) return;
 	for (let t of Object.getOwnPropertySymbols(e)) if (t.description === "effect/Runtime/FiberFailure/Cause") {
 		let n = e[t];
-		if (je.isCause(n)) return n;
+		if (Ae.isCause(n)) return n;
 	}
 	let t = e.cause;
-	return je.isCause(t) ? t : void 0;
+	return Ae.isCause(t) ? t : void 0;
 }, eu = (e) => {
 	let t = $l(e);
 	if (t === void 0) return;
-	let n = je.failureOption(t);
-	if (A.isSome(n)) return n.value;
-	let r = je.dieOption(t);
-	if (A.isSome(r)) return r.value;
+	let n = Ae.failureOption(t);
+	if (j.isSome(n)) return n.value;
+	let r = Ae.dieOption(t);
+	if (j.isSome(r)) return r.value;
 }, tu = (e) => {
 	if (e == null) return { message: "unknown error" };
 	let t = eu(e);
@@ -3809,10 +3809,10 @@ ${a.join("\n\n")}\n`);
 	".git"
 ]), vu = async (e) => {
 	let t = [], n = async (e) => {
-		let r = await M.readdir(e, { withFileTypes: !0 });
+		let r = await N.readdir(e, { withFileTypes: !0 });
 		for (let i of r) {
 			if (_u.has(i.name)) continue;
-			let r = w(e, i.name);
+			let r = T(e, i.name);
 			i.isDirectory() ? await n(r) : i.isFile() && (nu.test(i.name) && !ru.test(i.name) || ru.test(i.name) || iu.test(i.name) || au.test(i.name) || ou.test(i.name) || hu.test(i.name) || gu.test(i.name) || su.test(i.name) || cu.test(i.name) || lu.test(i.name) || uu.test(i.name) || Nc.test(i.name) || io.test(i.name) || Z.test(i.name) || du.test(i.name) || fu.test(i.name) || pu.test(i.name) || mu.test(i.name)) && t.push(r);
 		}
 	};
@@ -3896,26 +3896,26 @@ ${a.join("\n\n")}\n`);
 }, Iu = async (e, t) => {
 	let n = [], r = [], i = [], a = [], o = [], s = [], c = [], l = [], u = /* @__PURE__ */ new Set(), d = /* @__PURE__ */ new Set(), f = /* @__PURE__ */ new Map(), p = [], m = /* @__PURE__ */ new Map();
 	for (let t of e) {
-		let e = S(t);
+		let e = C(t);
 		if (hu.test(e)) {
-			let e = await b(t);
+			let e = await x(t);
 			for (let t of Object.values(e)) Ou(t) && (f.set(t.tableName, t), ju(t) && u.add(t.tableName), Nu(t) && d.add(t.tableName));
 			Gr(e);
 			continue;
 		}
 		if (gu.test(e)) {
-			Gr(await b(t)) === 0 && $.warn("skipping relations file — no relations(...) export found", { file: t });
+			Gr(await x(t)) === 0 && $.warn("skipping relations file — no relations(...) export found", { file: t });
 			continue;
 		}
 		if (iu.test(e)) {
-			let e = await b(t), n = Object.values(e).find(wu);
+			let e = await x(t), n = Object.values(e).find(wu);
 			if (!n) {
 				$.warn("skipping workflow — no workflow(...) export", { file: t });
 				continue;
 			}
 			let r = t.replace(/\.workflow\.tsx$/, ".workflow.server.tsx"), i;
 			try {
-				i = await b(r);
+				i = await x(r);
 			} catch {
 				$.warn("skipping workflow — missing paired executor", {
 					file: t,
@@ -3937,7 +3937,7 @@ ${a.join("\n\n")}\n`);
 			continue;
 		}
 		if (ou.test(e)) {
-			let n = await b(t), r = n.default ?? Object.values(n).find(Ot);
+			let n = await x(t), r = n.default ?? Object.values(n).find(Ot);
 			if (!Ot(r)) {
 				$.warn("skipping trigger — default export is not triggerWorkflow(...)", { file: t });
 				continue;
@@ -3954,7 +3954,7 @@ ${a.join("\n\n")}\n`);
 			continue;
 		}
 		if (lu.test(e)) {
-			let e = (await b(t)).default;
+			let e = (await x(t)).default;
 			if (!Dt(e)) {
 				$.warn("skipping cron — default export is not defineSchedule(...)", { file: t });
 				continue;
@@ -3980,7 +3980,7 @@ ${a.join("\n\n")}\n`);
 		}
 	}
 	for (let e of p) {
-		let t = await b(e), o = Object.values(t).find(yu) ?? Object.values(t).find(bu) ?? Object.values(t).find(xu) ?? Object.values(t).find(Su);
+		let t = await x(e), o = Object.values(t).find(yu) ?? Object.values(t).find(bu) ?? Object.values(t).find(xu) ?? Object.values(t).find(Su);
 		if (!o) {
 			$.warn("skipping procedure descriptor — no defineQuery / defineMutation / defineAction / defineStream export", { file: e });
 			continue;
@@ -3993,7 +3993,7 @@ ${a.join("\n\n")}\n`);
 			});
 			continue;
 		}
-		let c = (await b(s)).default;
+		let c = (await x(s)).default;
 		if (typeof c != "function") {
 			$.warn("skipping procedure server executor — missing default export", { file: s });
 			continue;
@@ -4022,12 +4022,12 @@ ${a.join("\n\n")}\n`);
 		...h === void 0 ? {} : { actors: () => h },
 		...g === void 0 ? {} : { tenants: () => g }
 	});
-	let _ = e.filter((e) => lo.test(S(e))), ee = _.length > 0 ? await fo(_, $.child("connections")) : [], te = {
+	let _ = e.filter((e) => lo.test(C(e))), ee = _.length > 0 ? await fo(_, $.child("connections")) : [], te = {
 		workflows: o.length > 0 || c.length > 0,
 		schedules: l.length > 0,
-		webhooks: e.some((e) => uu.test(S(e))),
-		agents: e.some((e) => io.test(S(e))),
-		outbox: e.some((e) => fu.test(S(e))),
+		webhooks: e.some((e) => uu.test(C(e))),
+		agents: e.some((e) => io.test(C(e))),
+		outbox: e.some((e) => fu.test(C(e))),
 		connections: _.length > 0
 	};
 	return qr(), {
@@ -4046,9 +4046,9 @@ ${a.join("\n\n")}\n`);
 		softDeleteScopedTables: d
 	};
 }, Lu = async (e) => {
-	let t = w(e, "app.config.ts");
+	let t = T(e, "app.config.ts");
 	try {
-		let e = (await b(t)).default;
+		let e = (await x(t)).default;
 		return typeof e == "object" && e ? e : null;
 	} catch {
 		return null;
@@ -4152,14 +4152,14 @@ ${a.join("\n\n")}\n`);
 		changeStrategy: r ? "cdc" : "inline",
 		...u ? { cdcConfig: u } : {}
 	}), f = Hu();
-	if (f.length === 0) return $.info("read replicas: none configured (DB_REPLICA_URLS unset) — all queries → primary"), x.recordReplication({
+	if (f.length === 0) return $.info("read replicas: none configured (DB_REPLICA_URLS unset) — all queries → primary"), S.recordReplication({
 		replicaCount: 0,
 		rywPolicy: "off",
 		rywStore: "memory",
 		region: null,
 		localityEnabled: !1
 	}), d;
-	if (Vr(i.id)) return $.warn(`read replicas: not applicable (${i.id} is single-process); ignoring DB_REPLICA_URLS`), x.recordReplication({
+	if (Vr(i.id)) return $.warn(`read replicas: not applicable (${i.id} is single-process); ignoring DB_REPLICA_URLS`), S.recordReplication({
 		replicaCount: 0,
 		rywPolicy: "off",
 		rywStore: "memory",
@@ -4167,7 +4167,7 @@ ${a.join("\n\n")}\n`);
 		localityEnabled: !1
 	}), d;
 	let p = await Xu(i.id);
-	if (p === null) return $.warn(`read replicas: no replication adapter for dialect ${i.id}; falling back to primary-only routing`), x.recordReplication({
+	if (p === null) return $.warn(`read replicas: no replication adapter for dialect ${i.id}; falling back to primary-only routing`), S.recordReplication({
 		replicaCount: 0,
 		rywPolicy: "off",
 		rywStore: "memory",
@@ -4203,7 +4203,7 @@ ${a.join("\n\n")}\n`);
 		replicaRegions: Yu(m, te),
 		inner: pn()
 	}) : pn();
-	return $.info(`read replicas: ${m.length} configured, ryw policy '${h}', dialect=${i.id}, region=${ne ?? "unknown"}` + (te.length > 0 ? ", replica-locality=on" : "")), x.recordReplication({
+	return $.info(`read replicas: ${m.length} configured, ryw policy '${h}', dialect=${i.id}, region=${ne ?? "unknown"}` + (te.length > 0 ? ", replica-locality=on" : "")), S.recordReplication({
 		replicaCount: m.length,
 		rywPolicy: h,
 		rywStore: ee,
@@ -4252,40 +4252,40 @@ ${a.join("\n\n")}\n`);
 		default: return null;
 	}
 }, Zu = async (e) => {
-	let t = E(e.find((e) => !e.startsWith("-")) ?? process.cwd()), n = await _e(t);
-	return n.ran ? n.exitCode : process.env.FRAMEWORK_DEV_INNER !== "1" && process.env.WATCH !== "0" ? (Ce(cs({ root: t }), { scope: "voltro:dev" }), new Promise(() => {})) : Qu(t);
-}, Qu = async (n) => {
-	let _e = Date.now(), Ce = await Lu(n), b = Number(process.env.PORT ?? Ce?.port ?? 4e3), C = Ce?.name ?? S(n), E = we("api", C, b), ke = ae(C);
-	await g({
-		id: E,
-		name: C,
+	let n = D(e.find((e) => !e.startsWith("-")) ?? process.cwd()), r = await y(n);
+	return r.ran ? r.exitCode : process.env.FRAMEWORK_DEV_INNER !== "1" && process.env.WATCH !== "0" ? (t(cs({ root: n }), { scope: "voltro:dev" }), new Promise(() => {})) : Qu(n);
+}, Qu = async (t) => {
+	let y = Date.now(), ge = await Lu(t), x = Number(process.env.PORT ?? ge?.port ?? 4e3), w = ge?.name ?? C(t), D = r("api", w, x), Oe = Se(w);
+	await de({
+		id: D,
+		name: w,
 		kind: "api",
-		url: `http://localhost:${b}`,
+		url: `http://localhost:${x}`,
 		pid: process.pid,
 		status: "booting",
-		logFile: ke.path
+		logFile: Oe.path
 	}).catch(() => {});
-	let D = h();
-	i(D), $.info("booting voltro dev", {
-		root: n,
+	let O = a();
+	o(O), $.info("booting voltro dev", {
+		root: t,
 		version: Kl,
-		logFile: ke.path
+		logFile: Oe.path
 	});
-	let Ae = await Oe({
-		project: S(n),
+	let ke = await De({
+		project: C(t),
 		cliVersion: Kl
 	});
-	if (Ae.kind === "not-personal") return $.error(`voltro dev needs a personal login — the stored credential belongs to no user.
-  ${Ae.message}`), 1;
-	Ae.kind === "reported" && Ae.seat === "claimed" && $.info("cloud: this machine now counts toward your organisation's seats (voltro cloud whoami)");
-	let Me = process.env.VOLTRO_DEV_HEALTH_PORT, Ne = Me === void 0 ? b + 1 : Number(Me), Pe;
-	Ne > 0 && Number.isFinite(Ne) && (Pe = await Wl({
-		port: Ne,
+	if (ke.kind === "not-personal") return $.error(`voltro dev needs a personal login — the stored credential belongs to no user.
+  ${ke.message}`), 1;
+	ke.kind === "reported" && ke.seat === "claimed" && $.info("cloud: this machine now counts toward your organisation's seats (voltro cloud whoami)");
+	let je = process.env.VOLTRO_DEV_HEALTH_PORT, Me = je === void 0 ? x + 1 : Number(je), Ne;
+	Me > 0 && Number.isFinite(Me) && (Ne = await Wl({
+		port: Me,
 		log: {
 			info: (e, t) => $.debug(e, t),
 			warn: (e, t) => $.warn(e, t)
 		}
-	})), xe(n).then((e) => {
+	})), n(t).then((e) => {
 		for (let t of e.files) if (t.action === "created") {
 			let e = t.path.split("/").slice(-2).join("/");
 			$.info(`${e} seeded`, { path: t.path });
@@ -4293,34 +4293,34 @@ ${a.join("\n\n")}\n`);
 	}).catch((e) => {
 		$.warn("agent-instructions seed failed (non-fatal)", {}, e);
 	});
-	let A = await vu(n);
-	$.info(`discovered ${A.length} files`, { count: A.length });
-	let { pluginContributions: Le, pluginErrorImports: Re, pluginRpcImports: ze } = await wl(Ce?.plugins ?? [], Ce?.name ?? S(n), n), Be = await Pa({
-		root: n,
-		...Le.length > 0 ? { pluginContributions: Le } : {},
-		...Re.length > 0 ? { pluginErrorImports: Re } : {},
-		...ze.length > 0 ? { pluginRpcImports: ze } : {},
-		...Ce?.name === void 0 ? {} : { apiName: Ce.name }
+	let j = await vu(t);
+	$.info(`discovered ${j.length} files`, { count: j.length });
+	let { pluginContributions: Ie, pluginErrorImports: Le, pluginRpcImports: Re } = await wl(ge?.plugins ?? [], ge?.name ?? C(t), t), ze = await Pa({
+		root: t,
+		...Ie.length > 0 ? { pluginContributions: Ie } : {},
+		...Le.length > 0 ? { pluginErrorImports: Le } : {},
+		...Re.length > 0 ? { pluginRpcImports: Re } : {},
+		...ge?.name === void 0 ? {} : { apiName: ge.name }
 	});
-	Be ? ($.info("codegen wrote rpcGroup", { path: T(n, Be) }), await _a(Be)) : $.debug("codegen skipped — no descriptors discovered");
-	let Ue = Wu(Ce ?? null), j = Ue === "mariadb" ? "mariadb" : Ue === "mssql" ? "mssql" : void 0, We = j !== void 0 && (process.env.CDC ?? "1") !== "0", { queries: N, mutations: P, actions: F, streams: I, workflows: L, workflowWorkers: Ke, eventTriggers: Je, schedules: Ye, connections: Xe, tables: Ze, featureMix: Qe, tenantScopedTables: $e, softDeleteScopedTables: et } = await Iu(A, { cdc: We }), tt = L.length > 0 || Je.length > 0, R = await Lu(n);
+	ze ? ($.info("codegen wrote rpcGroup", { path: E(t, ze) }), await _a(ze)) : $.debug("codegen skipped — no descriptors discovered");
+	let He = Wu(ge ?? null), M = He === "mariadb" ? "mariadb" : He === "mssql" ? "mssql" : void 0, Ue = M !== void 0 && (process.env.CDC ?? "1") !== "0", { queries: P, mutations: F, actions: I, streams: We, workflows: L, workflowWorkers: Ke, eventTriggers: Je, schedules: Ye, connections: Xe, tables: Ze, featureMix: Qe, tenantScopedTables: $e, softDeleteScopedTables: et } = await Iu(j, { cdc: Ue }), tt = L.length > 0 || Je.length > 0, R = await Lu(t);
 	Dn(xn(R?.secrets));
-	let nt = Wo(Ln(R?.env) ? R.env : void 0, n);
-	nt.minted.length > 0 && nt.file !== void 0 && ($.warn(`minted ${nt.minted.length} project secret(s) into ${T(n, nt.file)} — unique to this project, gitignored. Your DEPLOYMENT needs its own values (\`voltro secret generate\`).`, {
+	let nt = Wo(Ln(R?.env) ? R.env : void 0, t);
+	nt.minted.length > 0 && nt.file !== void 0 && ($.warn(`minted ${nt.minted.length} project secret(s) into ${E(t, nt.file)} — unique to this project, gitignored. Your DEPLOYMENT needs its own values (\`voltro secret generate\`).`, {
 		keys: nt.minted,
-		file: T(n, nt.file)
-	}), t.includes(nt.file) || t.unshift(nt.file)), await me({
+		file: E(t, nt.file)
+	}), l.includes(nt.file) || l.unshift(nt.file)), await m({
 		rawEnv: R?.env,
 		appType: "api",
-		root: n,
+		root: t,
 		log: $,
 		generateTypes: !0
 	});
 	let rt = R?.apiKeys, it = (typeof rt == "object" ? rt.prefix : void 0) ?? "voltro_", ct, lt = rt ? [Ct({ resolveByHash: (e, t) => ct ? ct.resolveByHash(e, t) : Promise.resolve(null) }, { prefix: it })] : [], vt = Xl([...R?.auth?.strategies ?? [], ...lt], Gi(R?.plugins ?? []), R?.auth?.anonymousTenantRequired ?? !1), xt = Zl(vt), St = zo({
 		mix: Qe,
 		plugins: R?.plugins ?? [],
-		cdc: We,
-		...j ? { cdcDialect: j } : {}
+		cdc: Ue,
+		...M ? { cdcDialect: M } : {}
 	}), wt = R?.analytics?.tables ?? [], z = (() => {
 		let e = new Set(Ze.map((e) => e.tableName)), t = [...Ze];
 		for (let n of [...St, ...wt]) {
@@ -4332,7 +4332,7 @@ ${a.join("\n\n")}\n`);
 	for (let e of z) Rr(e);
 	let Dt = Zc({
 		plugins: R?.plugins ?? [],
-		appName: R?.name ?? S(n),
+		appName: R?.name ?? C(t),
 		appType: "api",
 		voltroVersion: process.env.npm_package_version ?? "0.0.0",
 		log: $
@@ -4353,20 +4353,20 @@ ${a.join("\n\n")}\n`);
 	let zt = Ja(R?.plugins ?? []);
 	if (zt.length > 0) {
 		Ya(zt, [
-			...N.map((e) => e.descriptor.name),
 			...P.map((e) => e.descriptor.name),
 			...F.map((e) => e.descriptor.name),
-			...I.map((e) => e.descriptor.name)
+			...I.map((e) => e.descriptor.name),
+			...We.map((e) => e.descriptor.name)
 		]);
-		for (let e of zt) e.kind === "query" ? N.push({
+		for (let e of zt) e.kind === "query" ? P.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : e.kind === "mutation" ? P.push({
+		}) : e.kind === "mutation" ? F.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : F.push({
+		}) : I.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
@@ -4376,20 +4376,20 @@ ${a.join("\n\n")}\n`);
 			routes: zt.map((e) => `${e.plugin.name}:${e.descriptor.name} (${e.kind})`)
 		});
 	}
-	let Bt = $.child("agent"), Ut = A.filter((e) => ao.test(S(e)));
+	let Bt = $.child("agent"), Ut = j.filter((e) => ao.test(C(e)));
 	if (Ut.length > 0) {
 		let e = await oo(Ut, Bt);
 		e > 0 && Bt.info("wired tool handlers", { tools: e });
 	}
-	let Gt = A.filter((e) => io.test(S(e))), qt = [];
+	let Gt = j.filter((e) => io.test(C(e))), qt = [];
 	if (Gt.length > 0) {
 		let e = await co(Gt, Bt);
 		qt = e.agents.map((e) => e.descriptor.name);
-		for (let t of e.agents) for (let e of Ic(t)) e.kind === "action" ? F.push({
+		for (let t of e.agents) for (let e of Ic(t)) e.kind === "action" ? I.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
-		}) : N.push({
+		}) : P.push({
 			file: e.file,
 			descriptor: e.descriptor,
 			executor: e.executor
@@ -4400,26 +4400,26 @@ ${a.join("\n\n")}\n`);
 		});
 	}
 	let Yt = Rc();
-	(Yt.queries.length > 0 || Yt.mutations.length > 0) && (N.push(...Yt.queries), P.push(...Yt.mutations), $.info("undo built-ins registered", { routes: [
+	(Yt.queries.length > 0 || Yt.mutations.length > 0) && (P.push(...Yt.queries), F.push(...Yt.mutations), $.info("undo built-ins registered", { routes: [
 		"__voltro.undo.log",
 		"__voltro.undo.apply",
 		"__voltro.undo.redo"
 	] }));
-	let Xt = $.child("aggregate"), en = A.filter((e) => mu.test(e)), tn = en.length > 0 ? await nc(en, Xt) : [], nn = tn.map((e) => e.definition.name);
+	let Xt = $.child("aggregate"), en = j.filter((e) => mu.test(e)), tn = en.length > 0 ? await nc(en, Xt) : [], nn = tn.map((e) => e.definition.name);
 	for (let e of Lr()) $.warn(`identifier length · ${e}`);
-	let sn = R?.restRoutes ?? [], ln = A.filter((e) => du.test(e)).length, un = A.filter((e) => cu.test(e)).length, dn = A.filter((e) => /\.seed\.ts$/.test(e)).length, fn = A.filter((e) => uu.test(e)).length, pn = A.filter((e) => Nc.test(e)).length;
+	let sn = R?.restRoutes ?? [], ln = j.filter((e) => du.test(e)).length, un = j.filter((e) => cu.test(e)).length, dn = j.filter((e) => /\.seed\.ts$/.test(e)).length, fn = j.filter((e) => uu.test(e)).length, pn = j.filter((e) => Nc.test(e)).length;
 	us(ls([
-		N,
 		P,
 		F,
-		I
+		I,
+		We
 	]), (e) => {
 		$.warn(e);
 	}), $.info("app surface", {
-		queryCount: N.length,
-		mutationCount: P.length,
-		actionCount: F.length,
-		streamCount: I.length,
+		queryCount: P.length,
+		mutationCount: F.length,
+		actionCount: I.length,
+		streamCount: We.length,
 		restRouteCount: sn.length,
 		workflowCount: L.length,
 		workflowWorkerCount: Ke.length,
@@ -4433,12 +4433,12 @@ ${a.join("\n\n")}\n`);
 		webhookCount: fn,
 		emailCount: pn,
 		tenantTables: [...$e]
-	}), Ve({
-		appName: R?.name ?? S(n),
-		queries: N.map((e) => e.descriptor.name),
-		mutations: P.map((e) => e.descriptor.name),
-		actions: F.map((e) => e.descriptor.name),
-		streams: I.map((e) => e.descriptor.name),
+	}), Be({
+		appName: R?.name ?? C(t),
+		queries: P.map((e) => e.descriptor.name),
+		mutations: F.map((e) => e.descriptor.name),
+		actions: I.map((e) => e.descriptor.name),
+		streams: We.map((e) => e.descriptor.name),
 		restRoutes: sn.map((e) => `${e.method} ${e.path}`),
 		workflows: L.map((e) => e.definition.name),
 		triggers: Je.map((e) => `${e.event}→${e.workflow}`),
@@ -4459,7 +4459,7 @@ ${a.join("\n\n")}\n`);
 		let t = e.attributes, n = String(t["url.path"] ?? t["http.route"] ?? t["http.target"] ?? "");
 		return n.startsWith("/_voltro/") || n === "/ws" || n.startsWith("/ws/") || n.startsWith("/ws?");
 	}, wn = (e) => {
-		Sn(e) || mo(e) || e.name.startsWith("RpcServer.") || (gn.append(e), (vn || e.status === "error") && D.emit("trace", e), bn(e));
+		Sn(e) || mo(e) || e.name.startsWith("RpcServer.") || (gn.append(e), (vn || e.status === "error") && O.emit("trace", e), bn(e));
 	}, Tn = _n ? void 0 : Lt(wn), En = await ht({
 		serviceName: process.env.OTEL_SERVICE_NAME ?? R?.name ?? "voltro-api",
 		...Tn ? { traceSink: Tn } : {},
@@ -4474,14 +4474,14 @@ ${a.join("\n\n")}\n`);
 	let Pn = Bs({
 		definitions: Xe.map((e) => e.definition),
 		store: B,
-		publicUrl: Hs(b),
+		publicUrl: Hs(x),
 		log: $.child("connections")
 	});
-	N.push(...Pn.queries), P.push(...Pn.mutations), F.push(...Pn.actions);
+	P.push(...Pn.queries), F.push(...Pn.mutations), I.push(...Pn.actions);
 	let Fn = Wu(R), Rn = process.env.POD_NAME ?? process.env.HOSTNAME ?? `dev-${process.pid}`, zn, Bn;
 	if (Fn !== "memory") {
 		let e = await Va(Fn);
-		zn = Ie.make(e.makeSqlLayer(Ru())), Bn = await zn.runPromise(V.SqlClient);
+		zn = Fe.make(e.makeSqlLayer(Ru())), Bn = await zn.runPromise(V.SqlClient);
 	}
 	let Vn = Vt({
 		coordinator: [
@@ -4525,33 +4525,33 @@ ${a.join("\n\n")}\n`);
 	});
 	let lr = or.dispose, ur = Wu(R), mr;
 	if (ur !== "memory" && process.env.VOLTRO_AUTO_MIGRATE !== "0") {
-		let e = Date.now(), t = (process.env.NODE_ENV ?? "").toLowerCase() === "production" ? "prod" : (process.env.NODE_ENV ?? "").toLowerCase() === "staging" ? "staging" : "dev";
+		let e = Date.now(), n = (process.env.NODE_ENV ?? "").toLowerCase() === "production" ? "prod" : (process.env.NODE_ENV ?? "").toLowerCase() === "staging" ? "staging" : "dev";
 		$.info("auto-migrate: planning schema", {
 			dialect: ur,
-			env: t,
+			env: n,
 			tables: z.length
-		}), Pe?.set({
+		}), Ne?.set({
 			phase: "migrating",
 			tablesTotal: z.length
 		});
 		try {
 			let r = await Va(ur), i = r.makeSqlLayer(Ru());
 			mr = i, await zi(ku(z.filter((e) => e.tableName.startsWith("_voltro_") || e.tableName === "voltro_isr_cache"), z), i, r.id);
-			let a = await O.runPromise(V.SqlClient.pipe(O.flatMap((e) => Ri(e, {
-				projectRoot: n,
-				env: t,
-				appliedBy: `boot:${t}`
-			})), O.provide(i)));
+			let a = await k.runPromise(V.SqlClient.pipe(k.flatMap((e) => Ri(e, {
+				projectRoot: t,
+				env: n,
+				appliedBy: `boot:${n}`
+			})), k.provide(i)));
 			a.applied.length > 0 && $.info(`file-based migrations: applied ${a.applied.length}`, { applied: a.applied.map((e) => `${e.id} (${e.durationMs}ms)`) });
-			let o = await O.runPromise(V.SqlClient.pipe(O.flatMap((e) => Bi(e, z, {
-				appliedBy: `boot:${t}`,
-				environment: t,
+			let o = await k.runPromise(V.SqlClient.pipe(k.flatMap((e) => Bi(e, z, {
+				appliedBy: `boot:${n}`,
+				environment: n,
 				dialectId: r.id
-			})), O.provide(i)));
+			})), k.provide(i)));
 			if (o.kind === "refused-blocked" || o.kind === "prod-mismatch") throw $.error(Pi(o, r.id)), Error("auto-migrate refused — see error above");
 			$.info(Pi(o, r.id), { durationMs: Date.now() - e });
 		} catch (e) {
-			throw $.error("auto-migrate failed — aborting boot", { err: e }), Pe?.set({
+			throw $.error("auto-migrate failed — aborting boot", { err: e }), Ne?.set({
 				phase: "error",
 				error: e instanceof Error ? e.message : String(e)
 			}), e;
@@ -4561,7 +4561,7 @@ ${a.join("\n\n")}\n`);
 	if ((R?.plugins ?? []).some((e) => (e.extendSchema?.migrations?.length ?? 0) > 0) && Tr !== "memory") {
 		let e = (await Va(Tr)).makeSqlLayer(Ru());
 		try {
-			let t = await O.runPromise(to(R.plugins).pipe(O.provide(e))), n = t.filter((e) => e.status === "applied"), r = t.filter((e) => e.status === "skipped");
+			let t = await k.runPromise(to(R.plugins).pipe(k.provide(e))), n = t.filter((e) => e.status === "applied"), r = t.filter((e) => e.status === "skipped");
 			$.info("plugin migrations complete", {
 				applied: n.map((e) => `${e.pluginName}:${e.migrationId} (${e.durationMs}ms)`),
 				skippedCount: r.length
@@ -4570,28 +4570,28 @@ ${a.join("\n\n")}\n`);
 			throw $.error("plugin migrations failed — aborting boot", { err: e }), e;
 		}
 	}
-	let Er = Bl(B, D);
+	let Er = Bl(B, O);
 	process.on("beforeExit", () => {
 		Er();
 	});
-	let Dr = $.child("seeds"), Or = A.filter((e) => /\.seed\.ts$/.test(e)), kr = Or.length > 0 ? await ws(Or, Dr) : [];
+	let Dr = $.child("seeds"), Or = j.filter((e) => /\.seed\.ts$/.test(e)), kr = Or.length > 0 ? await ws(Or, Dr) : [];
 	if (kr.length > 0) {
 		Dr.info("discovered seeds", { ids: kr.map((e) => e.definition.id) });
-		for (let e of kr) x.registerSeed(e);
+		for (let e of kr) S.registerSeed(e);
 		let e = await ks(kr, B, Dr);
-		for (let t of e) x.recordSeedResult(t);
+		for (let t of e) S.recordSeedResult(t);
 		let t = e.filter((e) => e.status === "failed");
 		t.length > 0 && Dr.warn("one or more seeds failed (server continues)", { failedIds: t.map((e) => e.seedId) });
 	}
-	let Ar = $.child("startup"), jr = A.filter((e) => cu.test(e)), Mr = jr.length > 0 ? await De(jr, Ar) : [], Nr;
-	Mr.length > 0 && (Ar.info("discovered startups", { ids: Mr.map((e) => e.id) }), Nr = await Ee(Mr, B, Ar)), Nr && process.on("beforeExit", () => {
+	let Ar = $.child("startup"), jr = j.filter((e) => cu.test(e)), Mr = jr.length > 0 ? await Ee(jr, Ar) : [], Nr;
+	Mr.length > 0 && (Ar.info("discovered startups", { ids: Mr.map((e) => e.id) }), Nr = await Te(Mr, B, Ar)), Nr && process.on("beforeExit", () => {
 		Nr.shutdown();
 	});
-	let Pr = $.child("subscribe"), Br = A.filter((e) => du.test(e)), Hr = Br.length > 0 ? await Ns(Br, Pr) : [], Wr;
+	let Pr = $.child("subscribe"), Br = j.filter((e) => du.test(e)), Hr = Br.length > 0 ? await Ns(Br, Pr) : [], Wr;
 	Hr.length > 0 && (Pr.info("discovered subscribers", { subscribers: Hr.map((e) => `${e.id}@${e.definition.table}`) }), Wr = Ps(Hr, B, Pr)), Wr && process.on("beforeExit", () => {
 		Wr();
 	}), Et(), On((e) => At(B, e.subjectId, e.resourceType, e.resourceId));
-	let Gr = $.child("outbox"), Kr = A.filter((e) => fu.test(e)), qr = Kr.length > 0 ? await Is(Kr, Gr) : [], Yr = qr.length > 0 ? Ls({
+	let Gr = $.child("outbox"), Kr = j.filter((e) => fu.test(e)), qr = Kr.length > 0 ? await Is(Kr, Gr) : [], Yr = qr.length > 0 ? Ls({
 		handlers: qr,
 		store: B,
 		log: Gr
@@ -4725,7 +4725,7 @@ ${a.join("\n\n")}\n`);
 			});
 			return;
 		}
-	}, W = L.length > 0 ? Kt(() => pi) : void 0, xi = $.child("webhooks"), Si = A.filter((e) => uu.test(e)), G = Si.length > 0 ? await Mc(Si, xi) : {
+	}, W = L.length > 0 ? Kt(() => pi) : void 0, xi = $.child("webhooks"), Si = j.filter((e) => uu.test(e)), G = Si.length > 0 ? await Mc(Si, xi) : {
 		outgoing: [],
 		incoming: [],
 		providers: []
@@ -4735,7 +4735,7 @@ ${a.join("\n\n")}\n`);
 		incoming: G.incoming.map((e) => e.descriptor.id),
 		providers: G.providers.map((e) => e.descriptor.id)
 	});
-	let Vi = A.filter((e) => Nc.test(e));
+	let Vi = j.filter((e) => Nc.test(e));
 	if (Vi.length > 0) {
 		let e = $.child("mail"), t = await Pc(Vi, e);
 		t.templates.length > 0 && (na(t.templates.map((e) => e.template)), e.info("discovered email templates", { templates: t.templates.map((e) => e.template.name) }));
@@ -4765,7 +4765,7 @@ ${a.join("\n\n")}\n`);
 			secretEnvKey: n
 		});
 	}
-	let Ui = $.child("reaction"), Wi = A.filter((e) => pu.test(e)), Ji = Wi.length > 0 ? await Ws(Wi, Ui) : [], Yi;
+	let Ui = $.child("reaction"), Wi = j.filter((e) => pu.test(e)), Ji = Wi.length > 0 ? await Ws(Wi, Ui) : [], Yi;
 	Ji.length > 0 && (Ui.info("discovered reactions", { reactions: Ji.map((e) => `${e.definition.name}@${e.definition.watch.table}`) }), Yi = Ks(Ji, B, {
 		runAct: async (e, t) => {
 			if (e.kind === "workflow") {
@@ -4781,7 +4781,7 @@ ${a.join("\n\n")}\n`);
 				return;
 			}
 			await Gs(e.agent, t, {
-				findAgentSend: (e) => F.find((t) => t.descriptor.name === `${e}.send`),
+				findAgentSend: (e) => I.find((t) => t.descriptor.name === `${e}.send`),
 				runAction: (e, t, n) => Promise.resolve(Ia(e, t, n)),
 				makeSubject: (e) => oi(e),
 				now: () => Date.now(),
@@ -4791,7 +4791,7 @@ ${a.join("\n\n")}\n`);
 		checkBudget: async (e, t) => {
 			try {
 				let { requireAiBudget: n } = await import("@voltro/ai");
-				return (await O.runPromise(O.either(n(B, {
+				return (await k.runPromise(k.either(n(B, {
 					tenantId: e,
 					limitUsd: t
 				}))))._tag === "Right";
@@ -4840,7 +4840,7 @@ ${a.join("\n\n")}\n`);
 				...e.usingIndex === void 0 ? {} : { usingIndex: e.usingIndex }
 			};
 		});
-		D.emit("subscriptions", {
+		O.emit("subscriptions", {
 			subscriptions: n,
 			matcherStats: t.perTable,
 			capturedAt: Date.now()
@@ -4857,7 +4857,7 @@ ${a.join("\n\n")}\n`);
 			op: e.op,
 			old: e.old ?? null,
 			new: e.new ?? null
-		}), O.runFork(Kn.publish(e.table)), oa.length > 0) {
+		}), k.runFork(Kn.publish(e.table)), oa.length > 0) {
 			let t = {
 				table: e.table,
 				op: e.op,
@@ -4868,10 +4868,10 @@ ${a.join("\n\n")}\n`);
 			};
 			for (let n of oa) {
 				let r = ia.child(`plugin:${n.name}`);
-				O.runFork(n.onChangeEvent(t).pipe(O.catchAllCause((t) => O.sync(() => r.warn("onChangeEvent failed", {
+				k.runFork(n.onChangeEvent(t).pipe(k.catchAllCause((t) => k.sync(() => r.warn("onChangeEvent failed", {
 					table: e.table,
 					op: e.op
-				}, Error(je.pretty(t)))))));
+				}, Error(Ae.pretty(t)))))));
 			}
 		}
 	});
@@ -4891,13 +4891,13 @@ ${a.join("\n\n")}\n`);
 		ii(ji),
 		ii(Mi)
 	] : [], ua = (R?.plugins ?? []).flatMap((e) => (e.errorSchemas ?? []).map((e) => e.schema)), da = ua.length > 0 ? ua : void 0, fa = [
-		...N.map((e) => yi(e.descriptor, da)),
-		...P.map((e) => vi(e.descriptor, da)),
-		...F.map((e) => ii(e.descriptor, da)),
-		...I.map((e) => bi(e.descriptor, da)),
+		...P.map((e) => yi(e.descriptor, da)),
+		...F.map((e) => vi(e.descriptor, da)),
+		...I.map((e) => ii(e.descriptor, da)),
+		...We.map((e) => bi(e.descriptor, da)),
 		...ca,
 		...la
-	], pa = ir.make(...fa).middleware(ei).middleware(ti), ma = R?.layers ?? [], ha = (R?.plugins ?? []).map((e) => e.services).filter((e) => e !== void 0), ga = k.succeed(Ge, $r.registry), va = k.mergeAll(Xo({
+	], pa = ir.make(...fa).middleware(ei).middleware(ti), ma = R?.layers ?? [], ha = (R?.plugins ?? []).map((e) => e.services).filter((e) => e !== void 0), ga = A.succeed(Ge, $r.registry), va = A.mergeAll(Xo({
 		analyticsLayer: or.layer,
 		cacheService: Gn,
 		kvService: $n,
@@ -4908,7 +4908,7 @@ ${a.join("\n\n")}\n`);
 		userLayers: ma.length,
 		pluginLayers: ha.length
 	});
-	let ya = (e, t) => Cn(e.pipe(O.provide(Wt(t)), O.provide(va), O.provide(Gl))), ba = $t(z);
+	let ya = (e, t) => Cn(e.pipe(k.provide(Wt(t)), k.provide(va), k.provide(Gl))), ba = $t(z);
 	if ((process.env.VOLTRO_INDEX_AUDIT ?? "on") !== "off") {
 		let e = Ir(z), t = process.stdout.isTTY === !0 && (process.env.NO_COLOR ?? "") === "";
 		for (let n of e) $.warn("\n" + zr(n, {
@@ -4939,8 +4939,8 @@ ${a.join("\n\n")}\n`);
 			kv: Qn
 		}, t = G.outgoing.map((e) => e.descriptor);
 		q = Zi(e, async (n) => {
-			let r = $i.execute(n).pipe(O.provide($i.toLayer(Xi(e, { events: t })).pipe(k.provideMerge(fi))));
-			O.runPromise(r).catch((e) => {
+			let r = $i.execute(n).pipe(k.provide($i.toLayer(Xi(e, { events: t })).pipe(A.provideMerge(fi))));
+			k.runPromise(r).catch((e) => {
 				xi.error("deliverWebhook workflow crashed", {
 					deliveryId: n.deliveryId,
 					targetId: n.targetId
@@ -4959,7 +4959,7 @@ ${a.join("\n\n")}\n`);
 		...W === void 0 ? {} : { workflowsProxy: W },
 		eventTriggers: Je,
 		namespaceIsolationOn: xa,
-		onEventEmit: (e, t) => D.emit(e, t),
+		onEventEmit: (e, t) => O.emit(e, t),
 		...Yr === void 0 ? {} : { outbox: { nudge: Yr.nudge } },
 		...Pn.active ? { connections: { registry: Pn.registry } } : {}
 	}), Ca = async () => {
@@ -4987,7 +4987,7 @@ ${a.join("\n\n")}\n`);
 				warn: (e, t) => $.warn(e, t ?? {}),
 				debug: (e, t) => $.debug(e, t ?? {})
 			},
-			onRunEvent: (e, t) => D.emit("scheduleRuns", {
+			onRunEvent: (e, t) => O.emit("scheduleRuns", {
 				op: e,
 				row: t
 			}),
@@ -5022,14 +5022,14 @@ ${a.join("\n\n")}\n`);
 	}, Oa = (e) => JSON.stringify(e, (e, t) => typeof t == "object" && t && !Array.isArray(t) ? Object.fromEntries(Object.entries(t).sort(([e], [t]) => e.localeCompare(t))) : t), Y = (e, t) => {
 		let n = e.cache;
 		if (n === void 0) return;
-		let i = r(n.ttl);
-		if (i !== null) return {
-			ttlMs: i,
-			swrMs: n.swr === void 0 ? void 0 : r(n.swr) ?? void 0,
+		let r = d(n.ttl);
+		if (r !== null) return {
+			ttlMs: r,
+			swrMs: n.swr === void 0 ? void 0 : d(n.swr) ?? void 0,
 			scope: n.scope,
 			baseKey: `q:${e.name}:${Oa(t)}`
 		};
-	}, ka = ve(), Aa = R?.plugins ?? [], ja = li(el(Aa, "mutation", ka)), Ma = li(el(Aa, "action", ka)), Na = li(el(Aa, "query", ka)), Fa = Jt({
+	}, ka = ye(), Aa = R?.plugins ?? [], ja = li(el(Aa, "mutation", ka)), Ma = li(el(Aa, "action", ka)), Na = li(el(Aa, "query", ka)), Fa = Jt({
 		store: B,
 		buildContext: (e, t, n) => Sa(e, t, n),
 		runEffect: (e, t) => ya(e, t),
@@ -5047,23 +5047,23 @@ ${a.join("\n\n")}\n`);
 			let n = wa(e, t);
 			return Ea(n), n;
 		},
-		provideEffect: (e, t) => e.pipe(O.provide(Wt(t)), O.provide(Gl)),
+		provideEffect: (e, t) => e.pipe(k.provide(Wt(t)), k.provide(Gl)),
 		...Na ? { interceptor: Na } : {}
 	});
-	for (let e of N) J[e.descriptor.name] = (t) => mt(La(e, t), K, `subscription.${e.descriptor.name}`, Da, Y(e.descriptor, t), Qt(e, t));
-	for (let e of P) {
+	for (let e of P) J[e.descriptor.name] = (t) => mt(La(e, t), K, `subscription.${e.descriptor.name}`, Da, Y(e.descriptor, t), Qt(e, t));
+	for (let e of F) {
 		let t = `mutation.${e.descriptor.name}`;
 		J[e.descriptor.name] = (n) => ft(async (t, n) => Fa(e, t, n), n, t);
 	}
-	for (let e of F) {
+	for (let e of I) {
 		let t = `action.${e.descriptor.name}`;
 		J[e.descriptor.name] = (n) => ft(async (t, n) => Ia(e, t, n), n, t);
 	}
-	for (let e of I) {
+	for (let e of We) {
 		let t = `stream.${e.descriptor.name}`;
 		J[e.descriptor.name] = (n) => pt((t) => {
 			let r = Sa(t), i = e.executor(n, r);
-			return O.isEffect(i) ? i.pipe(O.provide(Wt(r.store)), O.provide(va), O.provide(Gl)) : typeof i == "object" && i && typeof i.then == "function" ? O.promise(() => i) : i;
+			return k.isEffect(i) ? i.pipe(k.provide(Wt(r.store)), k.provide(va), k.provide(Gl)) : typeof i == "object" && i && typeof i.then == "function" ? k.promise(() => i) : i;
 		}, t);
 	}
 	tt && (J[Oi.name] = (e) => mt(La({
@@ -5186,7 +5186,7 @@ ${a.join("\n\n")}\n`);
 	let Ra = oi(ql), za = (e, t) => Sa({
 		subject: e?.subject ?? Ra,
 		traceId: e?.traceId ?? "workflow-bootstrap"
-	}, B, void 0, `workflow:${t.workflowName}`, { parentExecutionId: t.executionId }), Ba = ll(R?.plugins ?? [], ka), Ha = vr, Ua = (e, t) => D.emit(e, t), Wa = R?.dormancy === "sleep" ? {
+	}, B, void 0, `workflow:${t.workflowName}`, { parentExecutionId: t.executionId }), Ba = ll(R?.plugins ?? [], ka), Ha = vr, Ua = (e, t) => O.emit(e, t), Wa = R?.dormancy === "sleep" ? {
 		register: (e, t, n) => yn(B, {
 			tenantId: n ?? ql,
 			kind: "workflow",
@@ -5237,7 +5237,7 @@ ${a.join("\n\n")}\n`);
 			cancelled: !0,
 			completedAt: /* @__PURE__ */ new Date()
 		});
-		i && D.emit("workflowRuns", {
+		i && O.emit("workflowRuns", {
 			op: "update",
 			row: Ha(i)
 		});
@@ -5274,7 +5274,7 @@ ${a.join("\n\n")}\n`);
 	}, Xa = [...on(L, {
 		buildContext: za,
 		resolveStartContext: _i
-	}, (e, t, n) => qa(e.definition.name, e.definition, t, n)), ...Ke], Za = Xa.length > 0 ? k.mergeAll(...Xa) : k.empty, Qa = Ie.make(Za.pipe(k.provideMerge(fi)));
+	}, (e, t, n) => qa(e.definition.name, e.definition, t, n)), ...Ke], Za = Xa.length > 0 ? A.mergeAll(...Xa) : A.empty, Qa = Fe.make(Za.pipe(A.provideMerge(fi)));
 	process.on("beforeExit", () => {
 		Qa.dispose();
 	}), pi = L.length > 0 ? rn({
@@ -5311,7 +5311,7 @@ ${a.join("\n\n")}\n`);
 			runPromise: (e) => Qa.runPromise(e)
 		}, e, t)
 	}) : void 0;
-	let $a = k.mergeAll(pa.toLayer(J), xt, Ql), eo = Qo(J, N.map((e) => e.descriptor.name), tt), ro = k.mergeAll(pa.toLayer(eo), xt, Ql), Z = U, so = (Z === "postgres" || Z === "mysql" || Z === "mariadb" || Z === "mssql") && (process.env.CDC ?? "1") !== "0";
+	let $a = A.mergeAll(pa.toLayer(J), xt, Ql), eo = Qo(J, P.map((e) => e.descriptor.name), tt), ro = A.mergeAll(pa.toLayer(eo), xt, Ql), Z = U, so = (Z === "postgres" || Z === "mysql" || Z === "mariadb" || Z === "mssql") && (process.env.CDC ?? "1") !== "0";
 	if (Z === "postgres" && Eo()) {
 		let e = jo({
 			store: B,
@@ -5328,7 +5328,7 @@ ${a.join("\n\n")}\n`);
 	});
 	let uo = (e) => {
 		try {
-			return Fe.make(e);
+			return Pe.make(e);
 		} catch {
 			return;
 		}
@@ -5356,34 +5356,34 @@ ${a.join("\n\n")}\n`);
 			}));
 			e.length > 0 && (i.targets = e);
 		}
-		let c = ue(e.guards);
+		let c = ce(e.guards);
 		c !== void 0 && (i.guards = c), e.publicApi != null && typeof e.publicApi == "object" && (i.publicApi = e.publicApi);
 		let l = e.exposeAsTool;
 		return l === !0 ? i.exposeAsTool = { enabled: !0 } : typeof l == "object" && l && (i.exposeAsTool = l), i;
 	}, ho = [
-		...N.map((e) => po(e.descriptor, "query", T(n, e.file))),
-		...P.map((e) => po(e.descriptor, "mutation", T(n, e.file))),
-		...F.map((e) => po(e.descriptor, "action", T(n, e.file))),
-		...I.map((e) => po({
+		...P.map((e) => po(e.descriptor, "query", E(t, e.file))),
+		...F.map((e) => po(e.descriptor, "mutation", E(t, e.file))),
+		...I.map((e) => po(e.descriptor, "action", E(t, e.file))),
+		...We.map((e) => po({
 			name: e.descriptor.name,
 			input: e.descriptor.input,
 			output: e.descriptor.element,
 			error: e.descriptor.error
-		}, "stream", T(n, e.file)))
+		}, "stream", E(t, e.file)))
 	], go = L.map((e) => ({
 		tag: e.definition.name,
-		file: T(n, e.file)
+		file: E(t, e.file)
 	}));
-	M.writeFile(w(n, "app.manifest.generated.json"), `${JSON.stringify(ee(ho, go), null, 2)}\n`, "utf8").catch(() => {}), (async () => {
-		let e = w(n, ".gitignore"), t = "";
+	N.writeFile(T(t, "app.manifest.generated.json"), `${JSON.stringify(s(ho, go), null, 2)}\n`, "utf8").catch(() => {}), (async () => {
+		let e = T(t, ".gitignore"), n = "";
 		try {
-			t = await M.readFile(e, "utf8");
+			n = await N.readFile(e, "utf8");
 		} catch {}
-		let r = t.split("\n").filter((e) => e.trim() !== "");
-		r.includes("app.manifest.generated.json") || (r.push("app.manifest.generated.json"), await M.writeFile(e, `${r.join("\n")}\n`, "utf8"));
+		let r = n.split("\n").filter((e) => e.trim() !== "");
+		r.includes("app.manifest.generated.json") || (r.push("app.manifest.generated.json"), await N.writeFile(e, `${r.join("\n")}\n`, "utf8"));
 	})().catch(() => {});
 	let _o = /* @__PURE__ */ new Map();
-	for (let e of P) _o.set(e.descriptor.name, async (t, n) => {
+	for (let e of F) _o.set(e.descriptor.name, async (t, n) => {
 		let r = {
 			subject: await vt({
 				headers: n,
@@ -5407,7 +5407,7 @@ ${a.join("\n\n")}\n`);
 			};
 		}
 	});
-	for (let e of F) _o.set(e.descriptor.name, async (t, n) => {
+	for (let e of I) _o.set(e.descriptor.name, async (t, n) => {
 		let r = {
 			subject: await vt({
 				headers: n,
@@ -5433,14 +5433,14 @@ ${a.join("\n\n")}\n`);
 	});
 	let vo = () => ({
 		dialect: U,
-		replication: x.replicationSnapshot() ?? {
+		replication: S.replicationSnapshot() ?? {
 			replicaCount: 0,
 			rywPolicy: "off",
 			rywStore: "memory",
 			region: null,
 			localityEnabled: !1
 		},
-		migrations: x.migrationsSnapshot().map((e) => ({
+		migrations: S.migrationsSnapshot().map((e) => ({
 			id: e.id,
 			name: e.name,
 			hash: e.hash,
@@ -5450,7 +5450,7 @@ ${a.join("\n\n")}\n`);
 			...e.durationMs ? { durationMs: e.durationMs } : {},
 			...e.lastError ? { lastError: e.lastError } : {}
 		})),
-		seeds: x.seedsSnapshot().map((e) => ({
+		seeds: S.seedsSnapshot().map((e) => ({
 			id: e.id,
 			name: e.name,
 			lifecycle: e.lifecycle,
@@ -5475,7 +5475,7 @@ ${a.join("\n\n")}\n`);
 			softDropSnapshots: []
 		};
 		if (!mr) return e;
-		let t = O.gen(function* () {
+		let t = k.gen(function* () {
 			let e = yield* V.SqlClient, t = yield* e`
         SELECT ${e("id")}, ${e("fingerprint")},
                ${e("appliedAt")}::text AS ${e("appliedAt")},
@@ -5485,7 +5485,7 @@ ${a.join("\n\n")}\n`);
         FROM ${e("_voltro_migration_plans")}
         ORDER BY ${e("appliedAt")} DESC
         LIMIT 20
-      `.pipe(O.orElseSucceed(() => [])), n = yield* Ii(e), r = Fi({ tables: n.tables.filter((e) => !e.name.startsWith("_voltro_")) }), i = t[0], a = {
+      `.pipe(k.orElseSucceed(() => [])), n = yield* Ii(e), r = Fi({ tables: n.tables.filter((e) => !e.name.startsWith("_voltro_")) }), i = t[0], a = {
 				isDrifted: i ? i.fingerprint !== r : !1,
 				liveFingerprint: r,
 				liveSnapshot: n
@@ -5534,16 +5534,16 @@ ${a.join("\n\n")}\n`);
 			};
 		});
 		try {
-			return await O.runPromise(t.pipe(O.provide(mr)));
+			return await k.runPromise(t.pipe(k.provide(mr)));
 		} catch (t) {
 			return $.warn("inspect.migrations: snapshot build failed", { err: String(t) }), e;
 		}
 	}, Q = {
 		kind: "api",
 		meta: {
-			name: R?.name ?? S(n),
+			name: R?.name ?? C(t),
 			voltroVersion: Kl,
-			port: b,
+			port: x,
 			mode: "dev",
 			store: Z,
 			cdc: so ? "on" : "off"
@@ -5567,7 +5567,7 @@ ${a.join("\n\n")}\n`);
 			plugins: Dt.snapshot(),
 			capturedAt: Date.now()
 		}),
-		env: () => be(R?.name ?? S(n), {
+		env: () => re(R?.name ?? C(t), {
 			contract: Ln(R?.env) ? R.env : void 0,
 			plugins: R?.plugins ?? []
 		}),
@@ -5663,7 +5663,7 @@ ${a.join("\n\n")}\n`);
 			}), { deleted: t };
 		},
 		inspectImport: async (e) => {
-			let t = await O.runPromise(aa({
+			let t = await k.runPromise(aa({
 				store: B,
 				bundleDir: e.bundleDir,
 				...e.mode ? { mode: e.mode } : {},
@@ -5749,7 +5749,7 @@ ${a.join("\n\n")}\n`);
 					cancelled: !0,
 					completedAt: /* @__PURE__ */ new Date()
 				});
-				r && D.emit("workflowRuns", {
+				r && O.emit("workflowRuns", {
 					op: "update",
 					row: Ha(r)
 				});
@@ -5930,7 +5930,7 @@ ${a.join("\n\n")}\n`);
 					status: "suspended",
 					completedAt: /* @__PURE__ */ new Date()
 				});
-				return r && D.emit("workflowRuns", {
+				return r && O.emit("workflowRuns", {
 					op: "update",
 					row: Ha(r)
 				}), r && await X.recordEvent({
@@ -5962,7 +5962,7 @@ ${a.join("\n\n")}\n`);
 					status: "running",
 					completedAt: null
 				});
-				return r && D.emit("workflowRuns", {
+				return r && O.emit("workflowRuns", {
 					op: "update",
 					row: Ha(r)
 				}), r && await X.recordEvent({
@@ -6149,7 +6149,7 @@ ${a.join("\n\n")}\n`);
 		},
 		runSeed: async (e) => {
 			let t = await As(kr, e, B, Dr);
-			return x.recordSeedResult(t), vo();
+			return S.recordSeedResult(t), vo();
 		},
 		rollbackMigration: async (e) => (Dr.warn("rollbackMigration called but only memory store is wired — no-op"), vo()),
 		webhooks: async () => {
@@ -6220,13 +6220,13 @@ ${a.join("\n\n")}\n`);
 		} }
 	}, xo = hl(R?.plugins ?? [], ka);
 	xo !== void 0 && $.info("plugin http-request interceptor active", { plugins: (R?.plugins ?? []).filter((e) => typeof e.onHttpRequest == "function").map((e) => e.name) });
-	let So = (R?.plugins ?? []).flatMap((e) => e.httpRoutes ?? []), Co = typeof rt == "object" ? rt.managementPath : void 0, wo = () => `public-${Math.random().toString(36).slice(2, 10)}`, To = Ki([...P.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+	let So = (R?.plugins ?? []).flatMap((e) => e.httpRoutes ?? []), Co = typeof rt == "object" ? rt.managementPath : void 0, wo = () => `public-${Math.random().toString(36).slice(2, 10)}`, To = Ki([...F.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 		descriptor: e.descriptor,
 		invoke: (t, n) => Fa(e, t, {
 			subject: n.subject,
 			traceId: wo()
 		})
-	})), ...F.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
+	})), ...I.filter((e) => e.descriptor.publicApi !== void 0).map((e) => ({
 		descriptor: e.descriptor,
 		invoke: (t, n) => Ia(e, t, {
 			subject: n.subject,
@@ -6262,7 +6262,7 @@ ${a.join("\n\n")}\n`);
 		group: pa,
 		handlersLayer: $a,
 		httpHandlersLayer: ro,
-		port: b,
+		port: x,
 		path: R?.transport?.wsPath ?? "/ws",
 		...xo ? { pluginHttpInterceptor: xo } : {},
 		...Mo.length > 0 ? { httpRoutes: Mo } : {},
@@ -6274,67 +6274,67 @@ ${a.join("\n\n")}\n`);
 					mounts: jt,
 					capturedAt: Date.now()
 				}),
-				headers: y(n.origin)
+				headers: b(n.origin)
 			};
-			if (r === "POST" && (t === "/_voltro/inspect/invoke" || t.startsWith("/_voltro/inspect/invoke?"))) return c(Q, n, i ?? "", { method: r });
-			if (r === "POST" && t.startsWith("/_voltro/inspect/webhooks/")) return m(t, Q, n, i ?? "", { method: r }).then((e) => e ?? {
+			if (r === "POST" && (t === "/_voltro/inspect/invoke" || t.startsWith("/_voltro/inspect/invoke?"))) return be(Q, n, i ?? "", { method: r });
+			if (r === "POST" && t.startsWith("/_voltro/inspect/webhooks/")) return ie(t, Q, n, i ?? "", { method: r }).then((e) => e ?? {
 				status: 404,
 				contentType: "application/json; charset=utf-8",
 				body: JSON.stringify({ error: "unknown webhook URL" })
 			});
 			if (r === "POST" && t.startsWith("/_voltro/inspect/")) {
-				let e = he(t, Q, n, i ?? "", { method: r });
+				let e = oe(t, Q, n, i ?? "", { method: r });
 				if (t === "/_voltro/inspect/seeds/run" || t === "/_voltro/inspect/migrations/rollback") return e;
 			}
 			if (r === "POST" && t === "/_voltro/inspect/clientLog") return {
-				...p(i ?? "", D),
-				headers: y(n.origin)
+				...g(i ?? "", O),
+				headers: b(n.origin)
 			};
 			if (r === "GET" && (t === "/_voltro/inspect/logs" || t.startsWith("/_voltro/inspect/logs?"))) return {
-				...d(t, s()),
-				headers: y(n.origin)
+				...we(t, h()),
+				headers: b(n.origin)
 			};
 			if (r === "GET" && (t === "/_voltro/inspect/traces" || t.startsWith("/_voltro/inspect/traces?"))) {
 				let e = bo();
 				return {
 					...Hl(t, Z === "postgres" && Eo() ? await Fu(t, e, B) : e),
-					headers: y(n.origin)
+					headers: b(n.origin)
 				};
 			}
 			if (r === "GET" && (t === "/_voltro/inspect/data/rows" || t.startsWith("/_voltro/inspect/data/rows?"))) {
-				let e = await a(t, Q, n, { method: r });
+				let e = await f(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (r === "GET" && t.startsWith("/_voltro/inspect/provenance")) {
-				let e = await re(t, Q, n, { method: r });
+				let e = await pe(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if ((r === "POST" || r === "PATCH" || r === "DELETE") && t.startsWith("/_voltro/inspect/data/rows")) {
-				let e = await l(t, Q, n, i ?? "", { method: r });
-				if (e) return e;
+				let a = await e(t, Q, n, i ?? "", { method: r });
+				if (a) return a;
 			}
 			if (r === "POST" && t.startsWith("/_voltro/inspect/data/import")) {
-				let e = await te(t, Q, n, i ?? "", { method: r });
+				let e = await ne(t, Q, n, i ?? "", { method: r });
 				if (e) return e;
 			}
 			if (r === "GET" && (t === "/_voltro/inspect/workflows/runs" || t.startsWith("/_voltro/inspect/workflows/runs?"))) {
-				let e = await v(t, Q, n, { method: r });
+				let e = await se(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (r === "POST" && t.startsWith("/_voltro/inspect/workflows/start/")) {
-				let e = await pe(t, Q, n, i ?? "", { method: r });
+				let e = await he(t, Q, n, i ?? "", { method: r });
 				if (e) return e;
 			}
 			if (r === "GET" && t.startsWith("/_voltro/inspect/workflows/runs/") && t.endsWith("/steps")) {
-				let e = await le(t, Q, n, { method: r });
+				let e = await v(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (r === "GET" && t.startsWith("/_voltro/inspect/workflows/runs/") && t.endsWith("/events")) {
-				let e = await ge(t, Q, n, { method: r });
+				let e = await xe(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (r === "GET" && (t === "/_voltro/inspect/workflows/events" || t.startsWith("/_voltro/inspect/workflows/events?"))) {
-				let e = await ye(Q, t, n, { method: r });
+				let e = await ae(Q, t, n, { method: r });
 				if (e) return e;
 			}
 			if (r === "GET" && t.startsWith("/_voltro/inspect/workflows/events/") && t.endsWith("/deliveries")) {
@@ -6342,23 +6342,23 @@ ${a.join("\n\n")}\n`);
 				if (e) return e;
 			}
 			if (r === "GET" && (t === "/_voltro/inspect/workflows/children" || t.startsWith("/_voltro/inspect/workflows/children?"))) {
-				let e = await se(t, Q, n, { method: r });
+				let e = await ve(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (r === "POST" && t.startsWith("/_voltro/inspect/workflows/runs/") && (t.endsWith("/cancel") || t.endsWith("/retry") || t.endsWith("/suspend") || t.endsWith("/resume") || t.endsWith("/signal"))) {
-				let a = await e(t, Q, n, i ?? "", { method: r });
-				if (a) return a;
+				let e = await me(t, Q, n, i ?? "", { method: r });
+				if (e) return e;
 			}
 			if (t.startsWith("/_voltro/inspect/schedules")) {
-				let e = await ie(t, Q, n, { method: r });
+				let e = await ue(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (t === "/_voltro/inspect/cluster" || t.startsWith("/_voltro/inspect/cluster?")) {
-				let e = await _(t, Q, n, { method: r });
+				let e = await ee(t, Q, n, { method: r });
 				if (e) return e;
 			}
 			if (t.startsWith("/_voltro/inspect/aggregates")) {
-				let e = await bc(t, r, $r.registry, y(n.origin));
+				let e = await bc(t, r, $r.registry, b(n.origin));
 				if (e) return e;
 			}
 			if (t.startsWith("/_voltro/inspect/timeline")) {
@@ -6370,14 +6370,14 @@ ${a.join("\n\n")}\n`);
 						limit: 500,
 						count: "none"
 					})).rows
-				}, y(n.origin));
+				}, b(n.origin));
 				if (e) return e;
 			}
 			if (t.startsWith("/_voltro/inspect/analytics")) {
 				let e = wc(t, r, {
 					sink: sr,
 					metricsCollector: ka
-				}, y(n.origin));
+				}, b(n.origin));
 				if (e) return e;
 			}
 			if (r === "GET" && (t === "/_voltro/inspect/webhooks" || t.startsWith("/_voltro/inspect/webhooks?"))) return Q.webhooks === void 0 ? {
@@ -6389,26 +6389,26 @@ ${a.join("\n\n")}\n`);
 					targets: [],
 					deliveries: []
 				}),
-				headers: y(n.origin)
+				headers: b(n.origin)
 			} : Q.webhooks().then((e) => ({
 				status: 200,
 				contentType: "application/json; charset=utf-8",
 				body: JSON.stringify(e),
-				headers: y(n.origin)
+				headers: b(n.origin)
 			}));
 			if (t.startsWith("/_voltro/inspect/plugins/")) {
 				let e = await kt.dispatch(t, r, n, i ?? "");
 				if (e) return e;
 			}
-			return ne(t, Q, n, { method: r });
+			return _e(t, Q, n, { method: r });
 		} },
 		inspectStream: {
-			authorize: (e) => o(e),
-			isDisabled: () => oe(),
-			replay: () => D.buffered().map(u),
-			subscribe: (e) => D.subscribe((t) => e(u(t))),
-			corsHeaders: (e) => y(e),
-			keepAlive: () => Te()
+			authorize: (e) => te(e),
+			isDisabled: () => le(),
+			replay: () => O.buffered().map(_),
+			subscribe: (e) => O.subscribe((t) => e(_(t))),
+			corsHeaders: (e) => b(e),
+			keepAlive: () => c()
 		},
 		webhookRoutes: new Map(Array.from(Hi.entries()).map(([e, t]) => [e, { handle: t }])),
 		...Nn ? { tracerLayer: Nn } : {}
@@ -6416,76 +6416,76 @@ ${a.join("\n\n")}\n`);
 	try {
 		await dt(No);
 	} catch (e) {
-		$.error(`rpc server failed to bind on port ${b} — aborting boot`, { port: b }, e), process.exit(1);
+		$.error(`rpc server failed to bind on port ${x} — aborting boot`, { port: x }, e), process.exit(1);
 	}
-	$.info(`listening on http://localhost:${b}`, {
-		port: b,
-		ws: `ws://localhost:${b}/ws`,
+	$.info(`listening on http://localhost:${x}`, {
+		port: x,
+		ws: `ws://localhost:${x}/ws`,
 		store: Z
-	}), Pe?.set({ phase: "ready" }), Z === "postgres" && $.info("postgres change-data-capture", { enabled: (process.env.CDC ?? "1") !== "0" }), await Ca();
+	}), Ne?.set({ phase: "ready" }), Z === "postgres" && $.info("postgres change-data-capture", { enabled: (process.env.CDC ?? "1") !== "0" }), await Ca();
 	try {
-		await g({
-			id: E,
-			name: C,
+		await de({
+			id: D,
+			name: w,
 			kind: "api",
-			url: `http://localhost:${b}`,
+			url: `http://localhost:${x}`,
 			pid: process.pid,
 			status: "live",
-			logFile: ke.path
+			logFile: Oe.path
 		});
-		let e = ce(n);
+		let e = p(t);
 		if (e) {
-			let t = await de({ dashboardAppPath: e });
+			let t = await Ce({ dashboardAppPath: e });
 			t.status === "launched" ? $.info(`dashboard launched at http://localhost:${t.port}`, { port: t.port }) : t.status === "already-running" && $.debug(`dashboard already running on :${t.port}`, { port: t.port });
 		}
 		setInterval(() => {
-			g({
-				id: E,
-				name: C,
+			de({
+				id: D,
+				name: w,
 				kind: "api",
-				url: `http://localhost:${b}`,
+				url: `http://localhost:${x}`,
 				pid: process.pid,
 				status: "live",
-				logFile: ke.path
+				logFile: Oe.path
 			}).catch(() => {});
 		}, 1e4).unref();
-		let t = async () => {
+		let n = async () => {
 			Dt.deactivate();
 			for (let e of Hn) e.stop();
-			zn?.dispose(), Se(E), ke.dispose(), Zn(), Wn?.close(), await lr();
+			zn?.dispose(), u(D), Oe.dispose(), Zn(), Wn?.close(), await lr();
 		};
 		process.on("SIGINT", () => {
-			t();
+			n();
 		}), process.on("SIGTERM", () => {
-			t();
+			n();
 		});
 		let r = process.ppid;
 		if (r > 1) {
 			let e = setInterval(() => {
-				(process.ppid !== r || process.ppid === 1) && (clearInterval(e), t().finally(() => process.exit(0)));
+				(process.ppid !== r || process.ppid === 1) && (clearInterval(e), n().finally(() => process.exit(0)));
 			}, 2e3);
 			e.unref();
 		}
 	} catch (e) {
 		$.warn("runtime-registry write failed", {}, e);
 	}
-	return f(t, $, {
-		root: n,
+	return i(l, $, {
+		root: t,
 		onBeforeRestart: () => {
 			try {
 				No.closeAllConnections?.();
 			} catch {}
 			No.close();
 		}
-	}), He({
-		app: C,
+	}), Ve({
+		app: w,
 		kind: "api",
-		url: `http://localhost:${b}`,
+		url: `http://localhost:${x}`,
 		extras: [{
 			label: "WS",
-			url: `ws://localhost:${b}/ws`
+			url: `ws://localhost:${x}/ws`
 		}],
-		bootMs: Date.now() - _e
+		bootMs: Date.now() - y
 	}), new Promise(() => {});
 };
 //#endregion