@voltro/runtime 0.10.0 → 0.11.0

package/dist/index.js

@@ -1,24 +1,24 @@
-import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as ne, neq as w, or as re, queryFor as ie, raiseChangeListenerCeiling as ae, registerRetention as oe, requireTable as se, retentionTtlMsFromEnv as ce, serializeArraysForWrite as le, sweepRetention as ue, table as T, text as E, timestamp as D, walkLeaves as de } from "@voltro/database";
-import { createCipheriv as fe, createDecipheriv as pe, createHash as me, randomBytes as he, randomUUID as ge, scryptSync as _e } from "node:crypto";
-import { EventEmitter as ve } from "node:events";
-import { ADMIN_SCOPE as ye, ConnectionHandshakeFailed as O, ConnectionInfo as be, ConnectionKindMismatch as xe, ConnectionNotDeclared as Se, ConnectionSubjectRequired as Ce, SubjectService as we, UndoConflict as Te, UndoForbidden as Ee, UndoNotFound as De, WorkflowRunHandleSchema as Oe, checkGuardsEffect as ke, diffRows as Ae, effectiveScopes as je, hasEffectiveScope as Me, isIdKeyed as Ne, publishServerError as Pe, requireScope as Fe, setPolicyGuardResolver as Ie, systemSubject as Le, tsMs as Re } from "@voltro/protocol";
+import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as ne, neq as w, or as re, queryFor as ie, raiseChangeListenerCeiling as ae, registerRetention as oe, requireTable as se, retentionTtlMsFromEnv as ce, serializeArraysForWrite as le, stampGeneratedId as ue, sweepRetention as de, table as T, text as E, timestamp as D, walkLeaves as fe } from "@voltro/database";
+import { createCipheriv as pe, createDecipheriv as me, createHash as he, randomBytes as ge, randomUUID as _e, scryptSync as ve } from "node:crypto";
+import { EventEmitter as ye } from "node:events";
+import { ADMIN_SCOPE as be, ConnectionHandshakeFailed as O, ConnectionInfo as xe, ConnectionKindMismatch as Se, ConnectionNotDeclared as Ce, ConnectionSubjectRequired as we, SubjectService as Te, UndoConflict as Ee, UndoForbidden as De, UndoNotFound as Oe, WorkflowRunHandleSchema as ke, checkGuardsEffect as Ae, diffRows as je, effectiveScopes as Me, hasEffectiveScope as Ne, isIdKeyed as Pe, publishServerError as Fe, requireScope as Ie, setPolicyGuardResolver as Le, systemSubject as Re, tsMs as ze } from "@voltro/protocol";
 import { createLogger as k } from "@voltro/logger";
-import { Cause as A, Clock as ze, Context as Be, Cron as j, Deferred as Ve, Duration as He, Effect as M, Either as Ue, Exit as We, Layer as N, ManagedRuntime as Ge, Metric as P, MetricBoundaries as Ke, MetricState as qe, Option as F, Ref as I, Schedule as Je, Schema as L, Stream as R, Tracer as Ye } from "effect";
-import * as Xe from "node:http";
-import { createServer as Ze } from "node:http";
-import { HttpClient as Qe, HttpClientRequest as $e, HttpLayerRouter as z, HttpServer as et, HttpServerRequest as tt, HttpServerResponse as B } from "@effect/platform";
-import { NodeContext as nt, NodeHttpServer as rt, NodeRuntime as it } from "@effect/platform-node";
-import { Rpc as at, RpcSerialization as ot, RpcServer as st } from "@effect/rpc";
-import { defineRestRoute as ct, dispatchSharedPath as lt, requireScope as ut } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as dt } from "node:async_hooks";
-import { SpanKind as ft, SpanStatusCode as pt } from "@opentelemetry/api";
-import { Kv as mt, KvError as ht, KvStore as gt, layerConnections as _t, layerMemory as vt, layerRedis as yt } from "@voltro/kv";
-import { apiKeyStrategy as bt } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as xt, inspectWorkflow as St } from "@voltro/workflow";
-import { ArrayFormatter as Ct } from "effect/ParseResult";
-import { spawn as wt } from "node:child_process";
+import { Cause as A, Clock as Be, Context as Ve, Cron as j, Deferred as He, Duration as Ue, Effect as M, Either as We, Exit as Ge, Layer as N, ManagedRuntime as Ke, Metric as P, MetricBoundaries as qe, MetricState as Je, Option as F, Ref as I, Schedule as Ye, Schema as L, Stream as R, Tracer as Xe } from "effect";
+import * as Ze from "node:http";
+import { createServer as Qe } from "node:http";
+import { HttpClient as $e, HttpClientRequest as et, HttpLayerRouter as z, HttpServer as tt, HttpServerRequest as nt, HttpServerResponse as B } from "@effect/platform";
+import { NodeContext as rt, NodeHttpServer as it, NodeRuntime as at } from "@effect/platform-node";
+import { Rpc as ot, RpcSerialization as st, RpcServer as ct } from "@effect/rpc";
+import { defineRestRoute as lt, dispatchSharedPath as ut, requireScope as dt } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as ft } from "node:async_hooks";
+import { SpanKind as pt, SpanStatusCode as mt } from "@opentelemetry/api";
+import { Kv as ht, KvError as gt, KvStore as _t, layerConnections as vt, layerMemory as yt, layerRedis as bt } from "@voltro/kv";
+import { apiKeyStrategy as xt } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as St, inspectWorkflow as Ct } from "@voltro/workflow";
+import { ArrayFormatter as wt } from "effect/ParseResult";
+import { spawn as Tt } from "node:child_process";
 //#region src/matcher.ts
-var Tt = class {
+var Et = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -59,9 +59,9 @@ var Tt = class {
 		});
 		return { perTable: e };
 	}
-}, Et = (e) => {
+}, Dt = (e) => {
 	let t = [];
-	for (let n of de(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
+	for (let n of fe(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
 		values: [n.value]
 	}), n.op === "in" && t.push({
@@ -69,18 +69,18 @@ var Tt = class {
 		values: n.value
 	}));
 	return t;
-}, Dt = (e) => {
+}, Ot = (e) => {
 	let t = [];
-	for (let n of de(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
+	for (let n of fe(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
 		op: n.op,
 		threshold: n.value
 	});
 	return t;
-}, Ot = (e, t) => {
-	for (let n of de(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
-	return null;
 }, kt = (e, t) => {
+	for (let n of fe(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
+	return null;
+}, At = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -88,8 +88,8 @@ var Tt = class {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, At = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, jt = (e, t, n) => {
-	let r = At(e, n);
+}, jt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, Mt = (e, t, n) => {
+	let r = jt(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -97,7 +97,7 @@ var Tt = class {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, Mt = class {
+}, Nt = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -105,9 +105,9 @@ var Tt = class {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = Et(e.predicate), n = Dt(e.predicate);
+		let t = Dt(e.predicate), n = Ot(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = kt(r.fields, (t) => Ot(e.predicate, t));
+			let r = e.usingIndex, i = At(r.fields, (t) => kt(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -252,7 +252,7 @@ var Tt = class {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = kt(a, (e) => t[e]);
+				let i = At(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -266,7 +266,7 @@ var Tt = class {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) jt(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) Mt(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -275,7 +275,7 @@ var Tt = class {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!jt(e, n.op, n.threshold)) return !1;
+			} else if (!Mt(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -297,23 +297,23 @@ var Tt = class {
 		}
 		return i;
 	}
-}, Nt = (e) => {
+}, Pt = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(Nt);
+	if (Array.isArray(e)) return e.map(Pt);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = Nt(t[e]);
+		for (let e of n) r[e] = Pt(t[e]);
 		return r;
 	}
 	return e;
-}, Pt = (e, t, n) => {
-	let r = Nt({
+}, Ft = (e, t, n) => {
+	let r = Pt({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
-	return me("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, Ft = class {
+	return he("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
+}, It = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -332,7 +332,7 @@ var Tt = class {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = Pt(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = Ft(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -390,7 +390,7 @@ var Tt = class {
 		});
 		return e;
 	}
-}, It = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, Lt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -400,7 +400,7 @@ var Tt = class {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), Lt = (e, t, n) => {
+}), Rt = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -418,11 +418,11 @@ var Tt = class {
 		...e,
 		[i]: c
 	};
-}, Rt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
+}, zt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of a(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = zt(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = Bt(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -437,15 +437,15 @@ var Tt = class {
 		}
 	}
 	return n;
-}, zt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => Rt(e.predicate, t, i));
+}, Bt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => zt(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = Bt(a, e.aggregations, e.groupBy);
+		let t = Vt(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
 		let r = V(e.having, n);
-		return t.filter((t) => Rt(e.having, t, r));
+		return t.filter((t) => zt(e.having, t, r));
 	}
-	let o = It(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = Lt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -453,7 +453,7 @@ var Tt = class {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, Bt = (e, t, n) => {
+}, Vt = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -471,11 +471,11 @@ var Tt = class {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = Vt(r, e.rows);
+		for (let r of t) n[r.alias] = Ht(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, Vt = (e, t) => {
+}, Ht = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -519,7 +519,7 @@ var Tt = class {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, Ht = "\0", Ut = (e, t) => e === null ? t : `${e}${Ht}${t}`, Wt = class e {
+}, Ut = "\0", Wt = (e, t) => e === null ? t : `${e}${Ut}${t}`, Gt = class e {
 	#e;
 	#t;
 	#n;
@@ -529,13 +529,13 @@ var Tt = class {
 		return r.#e = t.tables, r.#t = t.emitter, r.#n = t.numericCounters, r;
 	}
 	constructor(e, t = null) {
-		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ve(), ae(this.#t), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
+		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ye(), ae(this.#t), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
 			let e = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(Ut(t, n), e);
+			this.#e.set(Wt(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -546,11 +546,11 @@ var Tt = class {
 		}, t);
 	}
 	#a(e) {
-		return Ut(this.#r, e);
+		return Wt(this.#r, e);
 	}
 	#o() {
-		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Ht}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(Ht) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Ut}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(Ut) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#s(e) {
@@ -558,10 +558,11 @@ var Tt = class {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = zt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
+		let t = Bt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
 		return _(e) ? n(t, e.eager, se(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
+		t = ue(e, t);
 		let n = t;
 		if (n.id === void 0) {
 			let r = this.#c(e);
@@ -588,7 +589,7 @@ var Tt = class {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = Lt(a, n, r);
+		let o = Rt(a, n, r);
 		return i.set(t, o), this.#t.emit("change", {
 			table: e,
 			op: "update",
@@ -688,7 +689,7 @@ var Tt = class {
 		}
 	}
 	async transactional(e) {
-		let t = new Gt(this.#u());
+		let t = new Kt(this.#u());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -724,7 +725,7 @@ var Tt = class {
 			allocateNumericId: (e) => this.#c(e)
 		};
 	}
-}, Gt = class {
+}, Kt = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -754,10 +755,11 @@ var Tt = class {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), r = zt(e, this.materialise(e.table), t);
+		let t = this.buildTablesView(e), r = Bt(e, this.materialise(e.table), t);
 		return _(e) ? n(r, e.eager, se(e.table), (e) => this.query(e)) : r;
 	}
 	async insert(e, t) {
+		t = ue(e, t);
 		let n = t;
 		n.id === void 0 && (n = {
 			...t,
@@ -793,7 +795,7 @@ var Tt = class {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = Lt(i, n, r);
+		let a = Rt(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -894,7 +896,7 @@ var Tt = class {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, Kt = (e) => {
+}, qt = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -905,23 +907,23 @@ var Tt = class {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, qt = (e) => {
+}, Jt = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, Jt = (e) => ({
-	has: (t) => Me(e, t),
-	hasAny: (t) => t.some((t) => Me(e, t)),
-	require: (t) => Fe(e, t),
+}, Yt = (e) => ({
+	has: (t) => Ne(e, t),
+	hasAny: (t) => t.some((t) => Ne(e, t)),
+	require: (t) => Ie(e, t),
 	get scopes() {
-		return je(e);
+		return Me(e);
 	}
-}), Yt = (e) => {
+}), Xt = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return Xt(e, t), t;
-}, Xt = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && Zt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Xt(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) Xt(n.descriptor, t);
-}, Zt = (e, t, n) => {
+	return Zt(e, t), t;
+}, Zt = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && Qt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Zt(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) Zt(n.descriptor, t);
+}, Qt = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -929,24 +931,24 @@ var Tt = class {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && Zt(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && Qt(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && Zt(e, a.with, n);
+			n.add(e), a.with !== void 0 && Qt(e, a.with, n);
 		}
 	}
-}, Qt = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), $t = /* @__PURE__ */ new Set(["*"]), en = (e, t) => {
+}, $t = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), en = /* @__PURE__ */ new Set(["*"]), tn = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			en(e.not, t);
+			tn(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) en(n, t);
+			for (let n of e.and) tn(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) en(n, t);
+			for (let n of e.or) tn(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -959,7 +961,7 @@ var Tt = class {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, tn = (e, t, n) => {
+}, nn = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -967,65 +969,65 @@ var Tt = class {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), nn(i.tableName, o, n), o.with !== void 0 && tn(i.tableName, o.with, n);
+			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), rn(i.tableName, o, n), o.with !== void 0 && nn(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), nn(s.tableName, o, n), o.with !== void 0 && tn(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), rn(s.tableName, o, n), o.with !== void 0 && nn(s.tableName, o.with, n);
 	}
-}, nn = (e, t, n) => {
+}, rn = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		en(t.where, r), H(n, e, r);
+		tn(t.where, r), H(n, e, r);
 	}
 	t.orderBy !== void 0 && H(n, e, t.orderBy.map((e) => e.column));
 	let r = m(e);
 	r === void 0 ? H(n, e, ["*"]) : H(n, e, Object.keys(r.fields));
-}, rn = (e) => {
+}, an = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (Qt(e)) {
-		for (let n of Yt(e)) H(t, n, ["*"]);
+	if ($t(e)) {
+		for (let n of Xt(e)) H(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	en(e.predicate, n);
+	tn(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return H(t, e.table, n), e.eager !== void 0 && tn(e.table, e.eager, t), t;
-}, an = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return $t;
+	return H(t, e.table, n), e.eager !== void 0 && nn(e.table, e.eager, t), t;
+}, on = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return en;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, on = (e, t) => {
+}, sn = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = an(e);
+	let r = on(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, sn = Ke.exponential({
+}, cn = qe.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), cn = P.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), ln = P.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), un = P.histogram("voltro_rpc_duration_seconds", sn, "RPC handler duration in seconds."), dn = P.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), fn = P.histogram("voltro_http_duration_seconds", sn, "HTTP route duration in seconds."), pn = P.histogram("voltro_plugin_hook_duration_seconds", sn, "Plugin interceptor duration in seconds."), mn = P.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), hn = P.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), gn = P.histogram("voltro_subscription_delivery_seconds", sn, "Subscription delivery produce→push latency in seconds."), _n = P.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), vn = (e) => {
-	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? M.zipRight(P.increment(cn).pipe(M.tagMetrics("tag", e.tag), M.tagMetrics("status", e.status)), M.zipRight(P.update(un, t).pipe(M.tagMetrics("tag", e.tag)), e.status === "error" ? P.increment(ln).pipe(M.tagMetrics("tag", e.tag)) : M.void)) : e.kind === "request" ? M.zipRight(P.increment(dn).pipe(M.tagMetrics("route", e.tag), M.tagMetrics("status", e.status)), P.update(fn, t).pipe(M.tagMetrics("route", e.tag))) : M.zipRight(P.update(pn, t).pipe(M.tagMetrics("hook", e.tag)), e.status === "error" ? P.increment(mn).pipe(M.tagMetrics("hook", e.tag)) : M.void);
+}), ln = P.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), un = P.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), dn = P.histogram("voltro_rpc_duration_seconds", cn, "RPC handler duration in seconds."), fn = P.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), pn = P.histogram("voltro_http_duration_seconds", cn, "HTTP route duration in seconds."), mn = P.histogram("voltro_plugin_hook_duration_seconds", cn, "Plugin interceptor duration in seconds."), hn = P.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), gn = P.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), _n = P.histogram("voltro_subscription_delivery_seconds", cn, "Subscription delivery produce→push latency in seconds."), vn = P.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), yn = (e) => {
+	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? M.zipRight(P.increment(ln).pipe(M.tagMetrics("tag", e.tag), M.tagMetrics("status", e.status)), M.zipRight(P.update(dn, t).pipe(M.tagMetrics("tag", e.tag)), e.status === "error" ? P.increment(un).pipe(M.tagMetrics("tag", e.tag)) : M.void)) : e.kind === "request" ? M.zipRight(P.increment(fn).pipe(M.tagMetrics("route", e.tag), M.tagMetrics("status", e.status)), P.update(pn, t).pipe(M.tagMetrics("route", e.tag))) : M.zipRight(P.update(mn, t).pipe(M.tagMetrics("hook", e.tag)), e.status === "error" ? P.increment(hn).pipe(M.tagMetrics("hook", e.tag)) : M.void);
 	M.runSync(n);
-}, yn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, bn = (e) => {
-	let t = yn(e.label);
-	M.runSync(M.zipRight(P.increment(hn).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind)), P.update(gn, e.durationMs / 1e3).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind))));
-}, xn = /* @__PURE__ */ new Map(), U = (e, t) => {
-	let n = yn(e), r = Math.max(0, (xn.get(n) ?? 0) + t);
-	r === 0 ? xn.delete(n) : xn.set(n, r), M.runSync(P.set(_n, r).pipe(M.tagMetrics("tag", n)));
-}, Sn = (e, t) => P.counter(e, t === void 0 ? {} : { description: t }), Cn = (e, t) => P.gauge(e, t === void 0 ? {} : { description: t }), wn = (e, t = sn, n) => P.histogram(e, t, n), Tn = (e) => {
+}, bn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, xn = (e) => {
+	let t = bn(e.label);
+	M.runSync(M.zipRight(P.increment(gn).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind)), P.update(_n, e.durationMs / 1e3).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind))));
+}, Sn = /* @__PURE__ */ new Map(), U = (e, t) => {
+	let n = bn(e), r = Math.max(0, (Sn.get(n) ?? 0) + t);
+	r === 0 ? Sn.delete(n) : Sn.set(n, r), M.runSync(P.set(vn, r).pipe(M.tagMetrics("tag", n)));
+}, Cn = (e, t) => P.counter(e, t === void 0 ? {} : { description: t }), wn = (e, t) => P.gauge(e, t === void 0 ? {} : { description: t }), Tn = (e, t = cn, n) => P.histogram(e, t, n), En = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
-}, En = P.snapshot.pipe(M.map((e) => e.map((e) => {
-	let t = e.metricKey.name, n = Tn(e.metricKey.tags), r = F.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
-	if (qe.isHistogramState(a)) return {
+}, Dn = P.snapshot.pipe(M.map((e) => e.map((e) => {
+	let t = e.metricKey.name, n = En(e.metricKey.tags), r = F.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
+	if (Je.isHistogramState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1037,14 +1039,14 @@ var Tt = class {
 		sum: a.sum,
 		count: a.count
 	};
-	if (qe.isGaugeState(a)) return {
+	if (Je.isGaugeState(a)) return {
 		name: t,
 		labels: n,
 		...i,
 		type: "gauge",
 		value: Number(a.value)
 	};
-	if (qe.isSummaryState(a)) return {
+	if (Je.isSummaryState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1056,7 +1058,7 @@ var Tt = class {
 			value: t.value
 		}] : [])
 	};
-	if (qe.isFrequencyState(a)) {
+	if (Je.isFrequencyState(a)) {
 		let e = {};
 		for (let [t, n] of a.occurrences) e[t] = n;
 		return {
@@ -1074,25 +1076,25 @@ var Tt = class {
 		type: "counter",
 		value: Number(a.count)
 	};
-}))), Dn = () => M.runSync(En), On = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, kn = Je.exponential("20 millis").pipe(Je.intersect(Je.recurs(2))), An, jn = (e) => {
-	An = e;
-}, Mn = () => An, Nn = () => void 0, Pn = (e, t) => Fn(An, e, t), Fn = (e, t, n) => {
-	if (e === void 0 || t.type === "system") return M.succeed(Nn);
-	let r = e.retry ?? kn, i = e.load(t);
-	return (r === !1 ? i : M.retry(i, r)).pipe(M.map((t) => (n) => e.predicate(t, n)), M.catchAll((t) => M.suspend(() => (n?.(t), e.onLoadError === "deny" ? M.succeed(In) : M.fail(new On({ cause: String(t) }))))));
-}, In = () => ({
+}))), On = () => M.runSync(Dn), kn = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, An = Ye.exponential("20 millis").pipe(Ye.intersect(Ye.recurs(2))), jn, Mn = (e) => {
+	jn = e;
+}, Nn = () => jn, Pn = () => void 0, Fn = (e, t) => In(jn, e, t), In = (e, t, n) => {
+	if (e === void 0 || t.type === "system") return M.succeed(Pn);
+	let r = e.retry ?? An, i = e.load(t);
+	return (r === !1 ? i : M.retry(i, r)).pipe(M.map((t) => (n) => e.predicate(t, n)), M.catchAll((t) => M.suspend(() => (n?.(t), e.onLoadError === "deny" ? M.succeed(Ln) : M.fail(new kn({ cause: String(t) }))))));
+}, Ln = () => ({
 	column: "id",
 	op: "isNull"
-}), Ln = (e, n, r) => {
+}), Rn = (e, n, r) => {
 	let i = e(n);
 	return i === void 0 ? r : r ? t(r, i) : i;
-}, Rn = (e, t) => {
-	let n = Ln(e, t.table, t.predicate);
+}, zn = (e, t) => {
+	let n = Rn(e, t.table, t.predicate);
 	return n === t.predicate ? t : {
 		...t,
 		predicate: n
 	};
-}, W = k({ scope: "voltro:dispatcher" }), zn = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Bn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Vn = class {
+}, W = k({ scope: "voltro:dispatcher" }), Bn = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Vn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Hn = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1102,12 +1104,12 @@ var Tt = class {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new Mt(), this.subscriptionRegistry = new Ft(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new Nt(), this.subscriptionRegistry = new It(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a, o, s) {
-		let c = `sub_${ge()}`, l = i ?? `subscription.${e.table}`, u = Yt(e), d = rn(e);
+		let c = `sub_${_e()}`, l = i ?? `subscription.${e.table}`, u = Xt(e), d = an(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(c, e.table, e.predicate, r);
 		for (let e of u) {
 			let t = this.dependentByTable.get(e);
@@ -1121,7 +1123,7 @@ var Tt = class {
 			}
 		}, h, g;
 		try {
-			h = s === void 0 ? e : Rn(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
+			h = s === void 0 ? e : zn(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
 		} catch (e) {
 			throw m(), e;
 		}
@@ -1188,7 +1190,7 @@ var Tt = class {
 		});
 	}
 	async subscribeComputed(e, t, n, r) {
-		let i = `csub_${ge()}`, a = e.dependentTables, o = {
+		let i = `csub_${_e()}`, a = e.dependentTables, o = {
 			id: i,
 			recompute: e.recompute,
 			tenantId: e.tenantId,
@@ -1196,7 +1198,7 @@ var Tt = class {
 			context: n,
 			label: r ?? "subscription.computed",
 			tables: a,
-			lastJson: Hn(e.value),
+			lastJson: Un(e.value),
 			revision: 0
 		};
 		this.computedSubs.set(i, o), U(o.label, 1);
@@ -1217,7 +1219,7 @@ var Tt = class {
 			startMs: s,
 			endMs: Date.now(),
 			durationMs: Date.now() - s,
-			rowCount: zn(e.value)
+			rowCount: Bn(e.value)
 		}), () => {
 			this.computedSubs.delete(i), U(o.label, -1);
 			for (let e of a) {
@@ -1229,7 +1231,7 @@ var Tt = class {
 	async recomputeComputed(e) {
 		let t = Date.now();
 		try {
-			let n = await e.recompute(), r = Hn(n);
+			let n = await e.recompute(), r = Un(n);
 			if (r === e.lastJson) return;
 			e.lastJson = r, e.revision += 1;
 			let i = Date.now();
@@ -1245,10 +1247,10 @@ var Tt = class {
 				startMs: t,
 				endMs: i,
 				durationMs: i - t,
-				rowCount: zn(n)
+				rowCount: Bn(n)
 			});
 		} catch (t) {
-			if (Bn(t)) {
+			if (Vn(t)) {
 				this.revokeComputed(e, t);
 				return;
 			}
@@ -1301,7 +1303,7 @@ var Tt = class {
 				W.trace("missing subscription", { subscriberId: t });
 				continue;
 			}
-			if (!on(e, n.relevantFields)) {
+			if (!sn(e, n.relevantFields)) {
 				o++;
 				continue;
 			}
@@ -1324,21 +1326,21 @@ var Tt = class {
 						this.revokeSubscription(n, e, "row filter unavailable");
 						continue;
 					}
-					i = Rn(e, n.baseDescriptor);
+					i = zn(e, n.baseDescriptor);
 				}
 				let o = await this.deps.store.query(i), s = n.lastDelivered;
-				if (Un(o, s)) {
+				if (Wn(o, s)) {
 					W.trace("suppressed no-op delta", {
 						subscriberId: t,
 						table: e.table
 					});
 					continue;
 				}
-				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), Ne(s) && Ne(o) ? n.emit({
+				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), Pe(s) && Pe(o) ? n.emit({
 					_tag: "delta",
 					revision: a,
 					emittedAt: a,
-					patch: Ae(s, o)
+					patch: je(s, o)
 				}) : n.emit({
 					_tag: "snapshot",
 					revision: a,
@@ -1370,44 +1372,44 @@ var Tt = class {
 			skipped: o
 		});
 	}
-}, Hn = (e) => {
+}, Un = (e) => {
 	try {
 		return JSON.stringify(e) ?? "null";
 	} catch {
 		return String(e);
 	}
-}, Un = (e, t) => {
+}, Wn = (e, t) => {
 	if (e === t) return !0;
 	if (e.length !== t.length) return !1;
 	for (let n = 0; n < e.length; n++) if (JSON.stringify(e[n]) !== JSON.stringify(t[n])) return !1;
 	return !0;
-}, Wn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Gn = 1440 * 60 * 1e3, Kn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), qn = /* @__PURE__ */ new Set(), Jn = (e, t) => {
+}, Gn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Kn = 1440 * 60 * 1e3, qn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), Jn = /* @__PURE__ */ new Set(), Yn = (e, t) => {
 	G.set(e, {
 		subject: t,
 		touchedAt: Date.now()
 	});
-	for (let n of qn) try {
+	for (let n of Jn) try {
 		n(e, t);
 	} catch {}
-}, Yn = (e) => {
+}, Xn = (e) => {
 	let t = G.get(e);
 	if (t) return t.touchedAt = Date.now(), t.subject;
-}, Xn = (e) => {
+}, Zn = (e) => {
 	G.delete(e);
-}, Zn = (e) => (qn.add(e), () => {
-	qn.delete(e);
-}), Qn = setInterval(() => {
-	let e = Date.now() - Gn;
+}, Qn = (e) => (Jn.add(e), () => {
+	Jn.delete(e);
+}), $n = setInterval(() => {
+	let e = Date.now() - Kn;
 	for (let [t, n] of G) n.touchedAt < e && G.delete(t);
-}, Kn);
-typeof Qn == "object" && Qn && "unref" in Qn && Qn.unref();
-var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
+}, qn);
+typeof $n == "object" && $n && "unref" in $n && $n.unref();
+var K = /* @__PURE__ */ new Map(), er = (e, t) => {
 	let n = K.get(e);
 	return n || (n = /* @__PURE__ */ new Set(), K.set(e, n)), n.add(t), () => {
 		let n = K.get(e);
 		n && (n.delete(t), n.size === 0 && K.delete(e));
 	};
-}, er = (e) => {
+}, tr = (e) => {
 	let t = K.get(e);
 	if (t) {
 		for (let e of [...t]) try {
@@ -1415,15 +1417,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		} catch {}
 		K.delete(e);
 	}
-}, tr = (e) => K.get(e)?.size ?? 0, nr = () => {
+}, nr = (e) => K.get(e)?.size ?? 0, rr = () => {
 	G.clear(), K.clear();
-}, rr = () => [...G.entries()].map(([e, t]) => ({
+}, ir = () => [...G.entries()].map(([e, t]) => ({
 	clientId: e,
 	subjectType: t.subject.type,
 	tenantId: t.subject.tenantId
-})), ir = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, ar = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, or = (e) => {
+})), ar = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, or = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, sr = (e) => {
 	if (typeof e != "string") return null;
-	let t = ir.exec(e.trim().toLowerCase());
+	let t = ar.exec(e.trim().toLowerCase());
 	if (t === null) return null;
 	let [, n, r, i] = t;
 	return n === "0".repeat(32) || r === "0".repeat(16) ? null : {
@@ -1431,14 +1433,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		spanId: r,
 		sampled: (parseInt(i, 16) & 1) == 1
 	};
-}, sr = (e) => {
-	let t = or(e);
-	if (t !== null) return Ye.externalSpan({
+}, cr = (e) => {
+	let t = sr(e);
+	if (t !== null) return Xe.externalSpan({
 		traceId: t.traceId,
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, cr = new dt(), lr = (e, t) => cr.run(e, t), ur = () => cr.getStore(), dr = (e = {}) => {
+}, lr = new ft(), ur = (e, t) => lr.run(e, t), dr = () => lr.getStore(), fr = (e = {}) => {
 	let t = e.random ?? Math.random, n = /* @__PURE__ */ new Map(), r = (e) => n.get(e) ?? 0;
 	return {
 		pick(e) {
@@ -1463,7 +1465,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			}));
 		}
 	};
-}, fr = (e = {}) => {
+}, pr = (e = {}) => {
 	let t = e.thresholdFailures ?? 3, n = e.windowMs ?? 1e4, r = e.blackoutMs ?? 6e4, i = e.now ?? Date.now, a = /* @__PURE__ */ new Map(), o = (e) => {
 		let t = a.get(e);
 		return t === void 0 && (t = {
@@ -1497,7 +1499,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			}));
 		}
 	};
-}, pr = (e = {}) => {
+}, mr = (e = {}) => {
 	let t = e.now ?? Date.now, n = /* @__PURE__ */ new Map();
 	return {
 		get(e) {
@@ -1520,7 +1522,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			return n.size;
 		}
 	};
-}, mr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, hr = (e) => {
+}, hr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, gr = (e) => {
 	let t = e.now ?? Date.now, n = e.keyPrefix ?? "voltro:ryw", r = e.channel ?? `${n}:bus`, i = e.onError ?? ((e, t) => {
 		process.stderr.write(`[voltro:ryw] redis ${t} failed: ${String(e)}\n`);
 	}), a = `${process.pid ?? 0}:${Math.random() * 1e9 | 0}:${t()}`, o = /* @__PURE__ */ new Map(), s = (e) => {
@@ -1579,7 +1581,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			return o.size;
 		}
 	};
-}, gr = k({ scope: "voltro:replication" }), _r = new dt(), vr = (e, t) => _r.run(e, t), yr = () => _r.getStore(), br = class {
+}, _r = k({ scope: "voltro:replication" }), vr = new ft(), yr = (e, t) => vr.run(e, t), br = () => vr.getStore(), xr = class {
 	primary;
 	replicas;
 	adapter;
@@ -1592,10 +1594,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	recordRouting;
 	now;
 	constructor(e) {
-		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? pr({ now: this.now }), this.selector = e.replicaSelector ?? dr(), this.health = e.replicaHealth ?? fr({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
+		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? mr({ now: this.now }), this.selector = e.replicaSelector ?? fr(), this.health = e.replicaHealth ?? pr({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
 	}
 	async query(e) {
-		let t = _r.getStore(), n = t?.subjectKey ?? "anon:bg";
+		let t = vr.getStore(), n = t?.subjectKey ?? "anon:bg";
 		if (t?.forcePrimary === !0) return this.emitRouting({
 			target: "primary",
 			replicaIndex: null,
@@ -1659,7 +1661,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				waitMs: 0
 			}), r;
 		} catch (r) {
-			return this.health.reportFailure(i, String(r)), gr.warn("replica query failed; falling back to primary", {
+			return this.health.reportFailure(i, String(r)), _r.warn("replica query failed; falling back to primary", {
 				idx: a,
 				err: r
 			}), this.emitRouting({
@@ -1728,7 +1730,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 					fallbackReason: "wait-timeout"
 				}), this.primary.query(e);
 			}
-			await xr(10);
+			await Sr(10);
 		}
 	}
 	async insert(e, t) {
@@ -1768,8 +1770,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		return await this.stampPostWrite(), r;
 	}
 	async transactional(e) {
-		let t = await vr({
-			subjectKey: _r.getStore()?.subjectKey ?? "anon:bg",
+		let t = await yr({
+			subjectKey: vr.getStore()?.subjectKey ?? "anon:bg",
 			forcePrimary: !0
 		}, () => this.primary.transactional(e));
 		return await this.stampPostWrite(), t;
@@ -1785,7 +1787,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	async stampPostWrite() {
 		if (this.replicas.length === 0) return;
-		let e = _r.getStore()?.subjectKey ?? "anon:bg";
+		let e = vr.getStore()?.subjectKey ?? "anon:bg";
 		try {
 			let t = await this.adapter.capturePrimaryPosition(this.primary);
 			this.rywStore.set(e, {
@@ -1793,37 +1795,37 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				expiresAt: this.now() + this.rywTtlMs
 			});
 		} catch (e) {
-			gr.warn("failed to capture primary position; RYW skipped", { err: e });
+			_r.warn("failed to capture primary position; RYW skipped", { err: e });
 		}
 	}
 	emitRouting(e) {
 		this.recordRouting?.(e);
 	}
-}, xr = (e) => new Promise((t) => setTimeout(t, e)), Sr = (e, t, n) => ({
+}, Sr = (e) => new Promise((t) => setTimeout(t, e)), Cr = (e, t, n) => ({
 	subject: e,
-	traceId: t?.traceId ?? ge(),
+	traceId: t?.traceId ?? _e(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), Cr = M.currentSpan.pipe(M.catchAll(() => M.succeed(void 0))), wr = (e) => ({
+}), wr = M.currentSpan.pipe(M.catchAll(() => M.succeed(void 0))), Tr = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Tr = (e, t, n) => {
+}), Er = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, Er = (e) => {
-	if (Mn() !== void 0) return async () => {
-		let t = await M.runPromise(M.either(Pn(e, (e) => {
+}, Dr = (e) => {
+	if (Nn() !== void 0) return async () => {
+		let t = await M.runPromise(M.either(Fn(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
 		})));
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, Dr = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => M.gen(function* () {
+}, Or = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => M.gen(function* () {
 	let l = yield* M.tryPromise(() => t.subscribe(e, (e) => {
 		c.single(e);
 	}, n, r, i, a, o, s)).pipe(M.matchCause({
-		onFailure: (e) => (Nr(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (Pr(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Lr(e)
+			error: Rr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1839,21 +1841,21 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	let u = l.unsubscribe;
 	if (yield* M.addFinalizer(() => M.sync(() => u())), n.clientId !== void 0) {
-		let e = $n(n.clientId, () => {
+		let e = er(n.clientId, () => {
 			c.end();
 		});
 		yield* M.addFinalizer(() => M.sync(() => e()));
 	}
-})), Or = (e, t, n, r) => R.asyncScoped((i) => M.gen(function* () {
+})), kr = (e, t, n, r) => R.asyncScoped((i) => M.gen(function* () {
 	let a = yield* M.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(M.matchCause({
-		onFailure: (e) => (Nr(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (Pr(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Lr(e)
+			error: Rr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1869,21 +1871,21 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	let o = a.unsubscribe;
 	if (yield* M.addFinalizer(() => M.sync(() => o())), n.clientId !== void 0) {
-		let e = $n(n.clientId, () => {
+		let e = er(n.clientId, () => {
 			i.end();
 		});
 		yield* M.addFinalizer(() => M.sync(() => e()));
 	}
-})), kr = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(M.gen(function* () {
-	let s = yield* we, c = yield* be, l = yield* Cr;
-	Tr(l, n, s);
-	let u = Sr(s, l, c.clientId), d = mr(s.id, c.clientId), f = vr({ subjectKey: d }, () => lr({
+})), Ar = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(M.gen(function* () {
+	let s = yield* Te, c = yield* xe, l = yield* wr;
+	Er(l, n, s);
+	let u = Cr(s, l, c.clientId), d = hr(s.id, c.clientId), f = yr({ subjectKey: d }, () => ur({
 		traceId: u.traceId,
 		...u.spanId === void 0 ? {} : { spanId: u.spanId }
 	}, () => e(u))), p = M.isEffect(f) ? yield* f.pipe(M.matchCause({
-		onFailure: (e) => (Nr(`subscription.${n}`, u.traceId, e), {
+		onFailure: (e) => (Pr(`subscription.${n}`, u.traceId, e), {
 			ok: !1,
-			error: Lr(e)
+			error: Rr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1898,38 +1900,38 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		error: p.error
 	});
 	let m = p.value;
-	if (Wn(m)) return Or(m, t, u, n);
+	if (Gn(m)) return kr(m, t, u, n);
 	let h = m, g = r?.(h);
-	return Dr(h, t, u, g, n, i === void 0 ? void 0 : {
+	return Or(h, t, u, g, n, i === void 0 ? void 0 : {
 		key: i.scope === "subject" ? `${i.baseKey}:s:${d}` : `${i.baseKey}:global`,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(s), o?.(s) ?? Er(s));
-}).pipe(M.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Ar = (e, t = "rpc.stream") => R.unwrap(M.gen(function* () {
-	let n = yield* we, r = yield* be, i = yield* Cr;
-	Tr(i, t, n);
-	let a = Sr(n, i, r.clientId), o = e(a), s = M.isEffect(o) ? yield* o.pipe(M.orDie) : o;
+	}, a?.(s), o?.(s) ?? Dr(s));
+}).pipe(M.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), jr = (e, t = "rpc.stream") => R.unwrap(M.gen(function* () {
+	let n = yield* Te, r = yield* xe, i = yield* wr;
+	Er(i, t, n);
+	let a = Cr(n, i, r.clientId), o = e(a), s = M.isEffect(o) ? yield* o.pipe(M.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
 	return R.unwrapScoped(M.gen(function* () {
-		let e = yield* Ve.make(), t = $n(c, () => {
-			Ve.unsafeDone(e, M.void);
+		let e = yield* He.make(), t = er(c, () => {
+			He.unsafeDone(e, M.void);
 		});
-		return yield* M.addFinalizer(() => M.sync(() => t())), s.pipe(R.interruptWhen(Ve.await(e)));
+		return yield* M.addFinalizer(() => M.sync(() => t())), s.pipe(R.interruptWhen(He.await(e)));
 	}));
-}).pipe(M.withSpan(t, { attributes: { "framework.kind": "stream" } }))), jr = k({ scope: "voltro:rpc" }), Mr = k({ scope: "voltro:http" }), Nr = (e, t, n) => {
+}).pipe(M.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Mr = k({ scope: "voltro:rpc" }), Nr = k({ scope: "voltro:http" }), Pr = (e, t, n) => {
 	if (A.isInterruptedOnly(n)) return;
-	let r = A.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = A.dieOption(n)._tag === "Some", s = Kt(r), c = {
+	let r = A.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = A.dieOption(n)._tag === "Some", s = qt(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? jr.error(`${e} failed: ${l}`, c) : jr.warn(`${e} failed: ${l}`, c);
-}, Pr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), Fr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Pr.has(e._tag), Ir = (e) => ({
+	o ? Mr.error(`${e} failed: ${l}`, c) : Mr.warn(`${e} failed: ${l}`, c);
+}, Fr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), Ir = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Fr.has(e._tag), Lr = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Lr = (e) => {
+}), Rr = (e) => {
 	let t = A.squash(e);
 	t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t);
 	let n = t && typeof t == "object" ? t : {}, r = {};
@@ -1940,19 +1942,19 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, Rr = (e, t, n = "rpc.mutation") => M.gen(function* () {
-	let r = yield* we, i = yield* be, a = yield* Cr;
-	Tr(a, n, r);
-	let o = Sr(r, a, i.clientId), s = vr({ subjectKey: mr(r.id, i.clientId) }, () => lr({
+}, zr = (e, t, n = "rpc.mutation") => M.gen(function* () {
+	let r = yield* Te, i = yield* xe, a = yield* wr;
+	Er(a, n, r);
+	let o = Cr(r, a, i.clientId), s = yr({ subjectKey: hr(r.id, i.clientId) }, () => ur({
 		traceId: o.traceId,
 		...o.spanId === void 0 ? {} : { spanId: o.spanId }
 	}, () => e(t, o)));
 	return yield* (M.isEffect(s) ? s : M.tryPromise({
 		try: () => Promise.resolve(s),
 		catch: (e) => e
-	})).pipe(M.tapErrorCause((e) => M.sync(() => Nr(n, o.traceId, e))), M.catchIf(Fr, () => M.die(Ir(o.traceId))), M.annotateLogs(wr(o)));
-}).pipe(M.withSpan(n, { attributes: { "framework.kind": "mutation" } })), zr = 8 * 1024 * 1024, Br = (e) => {
-	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Ze(), i = (t) => tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+	})).pipe(M.tapErrorCause((e) => M.sync(() => Pr(n, o.traceId, e))), M.catchIf(Ir, () => M.die(Lr(o.traceId))), M.annotateLogs(Tr(o)));
+}).pipe(M.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Br = 8 * 1024 * 1024, Vr = (e) => {
+	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Qe(), i = (t) => nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -1964,7 +1966,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	}))), a = () => tt.HttpServerRequest.pipe(M.flatMap((t) => {
+	}))), a = () => nt.HttpServerRequest.pipe(M.flatMap((t) => {
 		let n = e.inspectStream;
 		if (!n) return M.succeed(B.text("inspect stream not configured", { status: 404 }));
 		let r = {};
@@ -2009,7 +2011,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				...i
 			}
 		}));
-	})), o = z.add("*", "/_voltro/inspect/*", tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+	})), o = z.add("*", "/_voltro/inspect/*", nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -2025,10 +2027,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? N.mergeAll(z.add("*", "/_voltro/inspect", i(!0)), o) : N.mergeAll(z.add("GET", "/_voltro/inspect/stream", a()), z.add("*", "/_voltro/inspect", i(!0)), o));
 	let c = N.empty;
 	if (e.webhookRoutes !== void 0 && e.webhookRoutes.size > 0) {
-		let t = (e) => tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+		let t = (e) => nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
-			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(M.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = sr(n.traceparent), s = yield* M.promise(() => e.handle({
+			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(M.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = cr(n.traceparent), s = yield* M.promise(() => e.handle({
 				method: t.method,
 				path: a,
 				headers: n,
@@ -2049,7 +2051,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	let l = N.empty;
 	if (e.httpRoutes !== void 0 && e.httpRoutes.length > 0) {
-		let t = (e) => tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+		let t = (e) => nt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 			let r = t.url.indexOf("?"), i = r >= 0 ? t.url.slice(0, r) : t.url, a = r >= 0 ? t.url.slice(r + 1) : "", o = t.method !== "GET" && t.method !== "HEAD" ? new Uint8Array(yield* t.arrayBuffer.pipe(M.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), s = {
@@ -2058,8 +2060,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				query: a,
 				headers: n,
 				rawBody: o
-			}, c = yield* M.promise(() => lt(e, s));
-			c.status >= 500 && Mr.warn(`${t.method} ${i} → ${c.status}`, {
+			}, c = yield* M.promise(() => ut(e, s));
+			c.status >= 500 && Nr.warn(`${t.method} ${i} → ${c.status}`, {
 				method: t.method,
 				path: i,
 				status: c.status,
@@ -2071,7 +2073,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				headers: l
 			};
 			return c.body instanceof Uint8Array ? B.uint8Array(c.body, u) : B.text(c.body ?? "", u);
-		})), M.tapErrorCause((t) => A.isInterruptedOnly(t) ? M.void : M.sync(() => Mr.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, A.squash(t))))), n = /* @__PURE__ */ new Map();
+		})), M.tapErrorCause((t) => A.isInterruptedOnly(t) ? M.void : M.sync(() => Nr.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, A.squash(t))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
@@ -2082,14 +2084,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		});
 		l = N.mergeAll(...r);
 	}
-	let u = st.layerProtocolWebsocketRouter({ path: n }), d = st.layer(e.group), f = st.layer(e.group).pipe(N.provide(st.layerProtocolHttpRouter({ path: "/rpc" })), N.provide(ot.layerJson), N.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = N.scopedDiscard(M.gen(function* () {
-		let e = yield* st.Protocol;
+	let u = ct.layerProtocolWebsocketRouter({ path: n }), d = ct.layer(e.group), f = ct.layer(e.group).pipe(N.provide(ct.layerProtocolHttpRouter({ path: "/rpc" })), N.provide(st.layerJson), N.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = N.scopedDiscard(M.gen(function* () {
+		let e = yield* ct.Protocol;
 		yield* M.forkScoped(M.gen(function* () {
 			let t = yield* e.disconnects.take;
-			Xn(t), er(t);
+			Zn(t), tr(t);
 		}).pipe(M.forever));
-	})), m = N.mergeAll(d, p).pipe(N.provide(u), N.provide(ot.layerJson), N.provide(e.handlersLayer)), h = N.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => M.gen(function* () {
-		let t = yield* tt.HttpServerRequest, n = {};
+	})), m = N.mergeAll(d, p).pipe(N.provide(u), N.provide(st.layerJson), N.provide(e.handlersLayer)), h = N.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => M.gen(function* () {
+		let t = yield* nt.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
 		if (t.method === "POST" && i === "/rpc") {
@@ -2129,13 +2131,13 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			status: l.status,
 			...l.headers ? { headers: l.headers } : {}
 		});
-	}), S = N.unwrapEffect(z.toHttpEffect(h).pipe(M.map((e) => et.serve(x(e))))).pipe(N.provide(rt.layer(() => r, { port: t })), N.provide(nt.layer));
+	}), S = N.unwrapEffect(z.toHttpEffect(h).pipe(M.map((e) => tt.serve(x(e))))).pipe(N.provide(it.layer(() => r, { port: t })), N.provide(rt.layer));
 	e.tracerLayer && (S = S.pipe(N.provide(e.tracerLayer)));
 	let C = k({ scope: "voltro:rpc" }), ee = N.launch(S).pipe(M.catchAllCause((e) => M.sync(() => {
 		C.error("rpc server crashed", {}, A.squash(e)), process.exit(1);
 	})));
-	return it.runMain(ee, { disableErrorReporting: !0 }), r;
-}, Vr = (e, t = 1e4) => new Promise((n, r) => {
+	return at.runMain(ee, { disableErrorReporting: !0 }), r;
+}, Hr = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2151,13 +2153,13 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Hr = () => {
+}), Ur = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Ur = () => {
+}, Wr = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, Wr = async () => {
+}, Gr = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2172,7 +2174,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, Gr = (e, t, n) => {
+}, Kr = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2195,8 +2197,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, Kr = async (e = {}) => {
-	let t = e.mode ?? Hr(), n = e.metricsMode ?? Ur(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, qr = async (e = {}) => {
+	let t = e.mode ?? Ur(), n = e.metricsMode ?? Wr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: N.empty,
 		mode: t,
@@ -2205,13 +2207,13 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await Wr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await Gr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Gr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Kr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2229,18 +2231,18 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, qr = {
-	[ft.INTERNAL]: "internal",
-	[ft.SERVER]: "server",
-	[ft.CLIENT]: "client",
-	[ft.PRODUCER]: "producer",
-	[ft.CONSUMER]: "consumer"
-}, Jr = (e) => e[0] * 1e3 + e[1] / 1e6, Yr = 512, Xr = 48, Zr = (e) => {
+}, Jr = {
+	[pt.INTERNAL]: "internal",
+	[pt.SERVER]: "server",
+	[pt.CLIENT]: "client",
+	[pt.PRODUCER]: "producer",
+	[pt.CONSUMER]: "consumer"
+}, Yr = (e) => e[0] * 1e3 + e[1] / 1e6, Xr = 512, Zr = 48, Qr = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= Xr) break;
+		if (n >= Zr) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > Yr ? `${i.slice(0, Yr)}…` : i;
+		if (typeof i == "string") t[r] = i.length > Xr ? `${i.slice(0, Xr)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2249,49 +2251,49 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > Yr ? `${e.slice(0, Yr)}…` : e;
+			t[r] = e.length > Xr ? `${e.slice(0, Xr)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, Qr = {
-	[pt.UNSET]: "unset",
-	[pt.OK]: "ok",
-	[pt.ERROR]: "error"
-}, $r = (e) => {
+}, $r = {
+	[mt.UNSET]: "unset",
+	[mt.OK]: "ok",
+	[mt.ERROR]: "error"
+}, ei = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: Jr(e.time),
-		...e.attributes ? { attributes: Zr(e.attributes) } : {}
+		tsMs: Yr(e.time),
+		...e.attributes ? { attributes: Qr(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: qr[e.kind] ?? "internal",
-		attributes: Zr(e.attributes),
-		startMs: Jr(e.startTime),
-		endMs: Jr(e.endTime),
-		durationMs: Jr(e.duration),
-		status: Qr[e.status.code] ?? "unset",
+		kind: Jr[e.kind] ?? "internal",
+		attributes: Qr(e.attributes),
+		startMs: Yr(e.startTime),
+		endMs: Yr(e.endTime),
+		durationMs: Yr(e.duration),
+		status: $r[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, ei = (e) => ({
+}, ti = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e($r(t));
+			e(ei(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), ti = { get: (e) => Promise.resolve(process.env[e]) }, ni = ti, ri = (e) => {
-	ni = e;
-}, ii = () => {
-	ni = ti;
-}, ai = async (e) => await ni.get(e) ?? process.env[e], oi = (e) => process.env[e], si = (e, t = 6e4, n = () => Date.now()) => {
+}), ni = { get: (e) => Promise.resolve(process.env[e]) }, ri = ni, ii = (e) => {
+	ri = e;
+}, ai = () => {
+	ri = ni;
+}, oi = async (e) => await ri.get(e) ?? process.env[e], si = (e) => process.env[e], ci = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2302,12 +2304,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, ci = (e) => {
+}, li = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return si({ get: async (n) => {
+	if (e.perKey) return ci({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -2318,59 +2320,59 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, li = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ti : e.kind === "custom" ? e.backend : e.kind === "http" ? ci(e) : ti, ui = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : _e(e, "voltro:field-encryption:v1", 32), di = (t) => {
+}, ui = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ni : e.kind === "custom" ? e.backend : e.kind === "http" ? li(e) : ni, di = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ve(e, "voltro:field-encryption:v1", 32), fi = (t) => {
 	if (t.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${t.length}`);
 	return {
 		encrypt: (n) => {
-			let r = he(12), i = fe("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
+			let r = ge(12), i = pe("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
 			return `${e}${r.toString("base64")}:${o.toString("base64")}:${a.toString("base64")}`;
 		},
 		decrypt: (n) => {
 			let [r, i, a] = n.slice(e.length).split(":");
 			if (!r || !i || a === void 0) throw Error("field cipher: malformed ciphertext");
-			let o = pe("aes-256-gcm", t, Buffer.from(r, "base64"));
+			let o = me("aes-256-gcm", t, Buffer.from(r, "base64"));
 			return o.setAuthTag(Buffer.from(i, "base64")), Buffer.concat([o.update(Buffer.from(a, "base64")), o.final()]).toString("utf8");
 		}
 	};
-}, fi = (e) => di(ui(e)), pi, mi = (e) => {
-	pi = e;
-}, hi = () => pi, gi = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
-	let t = hi();
-	if (!t) throw Error(`encryptField: ${gi}`);
+}, pi = (e) => fi(di(e)), mi, hi = (e) => {
+	mi = e;
+}, gi = () => mi, _i = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
+	let t = gi();
+	if (!t) throw Error(`encryptField: ${_i}`);
 	return t.encrypt(e);
-}, _i = (e) => {
+}, vi = (e) => {
 	if (!x(e)) return e;
-	let t = hi();
-	if (!t) throw Error(`decryptField: ${gi}`);
+	let t = gi();
+	if (!t) throw Error(`decryptField: ${_i}`);
 	return t.decrypt(e);
-}, vi = "_voltro_idempotency", yi = (e) => {
+}, yi = "_voltro_idempotency", bi = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, bi = (e) => ({
+}, xi = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: yi(e.response),
-	createdAt: Re(e.createdAt)
-}), xi = async (e, n, r) => (await e.query({
-	table: vi,
+	response: bi(e.response),
+	createdAt: ze(e.createdAt)
+}), Si = async (e, n, r) => (await e.query({
+	table: yi,
 	predicate: t(u("scope", n), u("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Si = (e) => ({
+}))[0] ?? null, Ci = (e) => ({
 	get: async (t, n) => {
-		let r = await xi(e, t, n);
-		return r ? bi(r) : null;
+		let r = await Si(e, t, n);
+		return r ? xi(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = f({
 				kind: "typeid",
 				prefix: "idem"
-			}, vi), o = await e.insertIgnore(vi, {
+			}, yi), o = await e.insertIgnore(yi, {
 				id: a,
 				scope: t,
 				key: n,
@@ -2379,11 +2381,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - Re(o.createdAt) < i) return bi(o);
-			await e.delete(vi, o.id);
+			if (r - ze(o.createdAt) < i) return xi(o);
+			await e.delete(yi, o.id);
 		}
-		let a = await xi(e, t, n);
-		return a ? bi(a) : {
+		let a = await Si(e, t, n);
+		return a ? xi(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -2392,36 +2394,36 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await xi(e, t, n);
-		a && await e.update(vi, a.id, {
+		let a = await Si(e, t, n);
+		a && await e.update(yi, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await xi(e, t, n);
-		r && await e.delete(vi, r.id);
+		let r = await Si(e, t, n);
+		r && await e.delete(yi, r.id);
 	}
-}), J = "_voltro_kv", Ci = (e) => {
+}), J = "_voltro_kv", wi = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, wi = (e, t) => {
-	let n = Ci(e.expiresAt);
+}, Ti = (e, t) => {
+	let n = wi(e.expiresAt);
 	return n !== null && n <= t;
-}, Ti = (e) => e === null ? null : JSON.parse(e), Ei = async (e, t) => (await e.query({
+}, Ei = (e) => e === null ? null : JSON.parse(e), Di = async (e, t) => (await e.query({
 	table: J,
 	predicate: u("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Di = (e) => {
+}))[0] ?? null, Oi = (e) => {
 	let n = (e, t, n) => M.tryPromise({
 		try: n,
-		catch: (n) => new ht({
+		catch: (n) => new gt({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -2429,8 +2431,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await Ei(e, t);
-			return n === null ? F.none() : wi(n, Date.now()) ? (await e.delete(J, n.id), F.none()) : F.some(Ti(n.value));
+			let n = await Di(e, t);
+			return n === null ? F.none() : Ti(n, Date.now()) ? (await e.delete(J, n.id), F.none()) : F.some(Ei(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = f({
@@ -2453,14 +2455,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await Ei(e, t);
+			let n = await Di(e, t);
 			if (n === null) return !1;
-			let r = !wi(n, Date.now());
+			let r = !Ti(n, Date.now());
 			return await e.delete(J, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await Ei(e, t);
-			return n === null ? !1 : wi(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
+			let n = await Di(e, t);
+			return n === null ? !1 : Ti(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
 			let n = Date.now(), i = re(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
@@ -2471,7 +2473,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of s) wi(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of s) Ti(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
@@ -2481,8 +2483,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			} });
 		})
 	};
-}, Oi = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? yt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(N.provide(_t)) : r === "memory" ? vt() : N.succeed(gt, gt.of(Di(e))), a = Ge.make(mt.Default.pipe(N.provide(i))), o = await a.runPromise(mt);
+}, ki = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? bt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(N.provide(vt)) : r === "memory" ? yt() : N.succeed(_t, _t.of(Oi(e))), a = Ke.make(ht.Default.pipe(N.provide(i))), o = await a.runPromise(ht);
 	return {
 		kv: {
 			get: (e) => a.runPromise(o.get(e)).then((e) => F.getOrUndefined(e)),
@@ -2497,7 +2499,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, ki = {
+}, Ai = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -2505,7 +2507,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, Ai = "_voltro_api_keys", ji = (e) => me("sha256").update(e, "utf8").digest("hex"), Mi = (e = "voltro_") => `${e}${he(30).toString("base64url")}`, Ni = (e) => ({
+}, ji = "_voltro_api_keys", Mi = (e) => he("sha256").update(e, "utf8").digest("hex"), Ni = (e = "voltro_") => `${e}${ge(30).toString("base64url")}`, Pi = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -2515,17 +2517,17 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	expiresAt: e.expiresAt,
 	revokedAt: e.revokedAt,
 	createdAt: e.createdAt
-}), Pi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Fi = (e, t = {}) => {
+}), Fi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ii = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = async (t) => {
-		let r = Mi(n), i = f({
+		let r = Ni(n), i = f({
 			kind: "typeid",
 			prefix: "apikey"
-		}, Ai), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, ji), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
-			hashedKey: ji(r),
+			hashedKey: Mi(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -2543,7 +2545,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		};
 	}, i = async (t, n = Date.now()) => {
 		let r = await e.findByHash(t);
-		return !r || !Pi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
+		return !r || !Fi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
 			id: r.id,
 			tenantId: r.tenantId ?? "",
 			createdBy: r.createdBy ?? null,
@@ -2553,7 +2555,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	return {
 		issue: r,
 		resolveByHash: i,
-		verify: (e, t) => i(ji(e), t),
+		verify: (e, t) => i(Mi(e), t),
 		revoke: async (t, n = Date.now()) => await e.findById(t) ? (await e.patch(t, { revokedAt: n }), !0) : !1,
 		rotate: async (t, n = Date.now()) => {
 			let i = await e.findById(t);
@@ -2564,9 +2566,9 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				createdBy: i.createdBy
 			})) : null;
 		},
-		list: async (t) => (await e.listByTenant(t)).map(Ni)
+		list: async (t) => (await e.listByTenant(t)).map(Pi)
 	};
-}, Ii = () => {
+}, Li = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -2583,21 +2585,21 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			});
 		}
 	};
-}, Li = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ri = (e) => ({
+}, Ri = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, zi = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: Li(e.lastUsedAt),
-	expiresAt: Li(e.expiresAt),
-	revokedAt: Li(e.revokedAt),
+	lastUsedAt: Ri(e.lastUsedAt),
+	expiresAt: Ri(e.expiresAt),
+	revokedAt: Ri(e.revokedAt),
 	createdBy: e.createdBy ?? null,
-	createdAt: Li(e.createdAt) ?? 0
-}), zi = (e) => {
+	createdAt: Ri(e.createdAt) ?? 0
+}), Bi = (e) => {
 	let t = async (t) => await e.query({
-		table: Ai,
+		table: ji,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -2615,32 +2617,32 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(Ai, n(t));
+			await e.insert(ji, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(u("hashedKey", e));
-			return n[0] ? Ri(n[0]) : null;
+			return n[0] ? zi(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(u("id", e));
-			return n[0] ? Ri(n[0]) : null;
+			return n[0] ? zi(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(Ri).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(zi).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(Ai, t, n(r));
+			await e.update(ji, t, n(r));
 		}
 	};
-}, Bi = (e, t = {}) => bt({
+}, Vi = (e, t = {}) => xt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), Vi = (e) => {
+}), Hi = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null
 	};
-}, Hi = (e, t = "/v1/api-keys") => {
+}, Ui = (e, t = "/v1/api-keys") => {
 	let n = L.Struct({
 		id: L.String,
 		name: L.String,
@@ -2653,11 +2655,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		createdAt: L.Number
 	});
 	return [
-		ct({
+		lt({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [ut(ye)],
+			guards: [dt(be)],
 			input: L.Struct({ body: L.Struct({
 				name: L.String,
 				scopes: L.optional(L.Array(L.String)),
@@ -2669,7 +2671,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				keyPrefix: L.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = Vi(n), a = await e.issue({
+				let r = t.body, i = Hi(n), a = await e.issue({
 					tenantId: i.tenantId,
 					name: r.name,
 					...r.scopes ? { scopes: r.scopes } : {},
@@ -2683,72 +2685,72 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				};
 			}
 		}),
-		ct({
+		lt({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [ut(ye)],
+			guards: [dt(be)],
 			input: L.Struct({}),
 			output: L.Struct({ keys: L.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(Vi(n).tenantId)] })
+			handler: async (t, n) => ({ keys: [...await e.list(Hi(n).tenantId)] })
 		}),
-		ct({
+		lt({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [ut(ye)],
+			guards: [dt(be)],
 			input: L.Struct({ body: L.Struct({ id: L.String }) }),
 			output: L.Struct({ ok: L.Boolean }),
 			handler: async (t, n) => ({ ok: await e.revoke(t.body.id) })
 		})
 	];
-}, Ui = {
+}, Wi = {
 	type: "anonymous",
 	id: null,
 	tenantId: null
-}, Wi = class extends L.TaggedError()("TenantScopeViolation", {
+}, Gi = class extends L.TaggedError()("TenantScopeViolation", {
 	table: L.String,
 	reason: L.String
-}) {}, Gi = class extends L.TaggedError()("StoreOperationFailed", {
+}) {}, Ki = class extends L.TaggedError()("StoreOperationFailed", {
 	operation: L.String,
 	table: L.String,
 	cause: L.String
-}) {}, Ki = class extends L.TaggedError()("TableValidationFailed", {
+}) {}, qi = class extends L.TaggedError()("TableValidationFailed", {
 	table: L.String,
 	summary: L.String,
 	issues: L.Array(L.Struct({
 		path: L.String,
 		message: L.String
 	}))
-}) {}, qi = class extends Be.Tag("@voltro/EffectStore")() {}, Ji = (e, t) => (n) => n instanceof Wi ? n : new Gi({
+}) {}, Ji = class extends Ve.Tag("@voltro/EffectStore")() {}, Yi = (e, t) => (n) => n instanceof Gi ? n : new Ki({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), Yi = (e, t, n) => M.tryPromise({
+}), Xi = (e, t, n) => M.tryPromise({
 	try: n,
-	catch: Ji(e, t)
-}), Xi = (e) => N.succeed(qi, {
-	query: ((t) => Yi("query", t.table, () => e.query(t))),
-	insert: (t, n) => Yi("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => Yi("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => Yi("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => Yi("hardDelete", t, () => e.hardDelete(t, n))
-}), Zi = (e) => at.make(e.name, {
+	catch: Yi(e, t)
+}), Zi = (e) => N.succeed(Ji, {
+	query: ((t) => Xi("query", t.table, () => e.query(t))),
+	insert: (t, n) => Xi("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => Xi("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => Xi("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => Xi("hardDelete", t, () => e.hardDelete(t, n))
+}), Qi = (e) => ot.make(e.name, {
 	payload: e.payloadSchema,
-	success: Oe,
+	success: ke,
 	error: e.errorSchema
-}), Qi = (e, t) => ({
+}), $i = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), $i = Qi, ea = (e) => {
+}), ea = $i, ta = (e) => {
 	let t = A.failureOption(e), n = t._tag === "Some" ? t.value : A.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, ta = (e, t, n) => {
+}, na = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -2763,7 +2765,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	};
 	if (typeof n == "object" && n && n._tag === "Complete") {
 		let r = n.exit;
-		return We.isSuccess(r) ? {
+		return Ge.isSuccess(r) ? {
 			id: t,
 			workflowName: e,
 			executionId: t,
@@ -2774,7 +2776,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: ea(r.cause)
+			error: ta(r.cause)
 		};
 	}
 	return {
@@ -2783,17 +2785,17 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, na = (e) => new Promise((t) => setTimeout(t, e)), ra = (e) => {
+}, ra = (e) => new Promise((t) => setTimeout(t, e)), ia = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) throw Error(`Unknown workflow: ${e}`);
 		return n;
 	}, r = async (t, r) => {
 		let i = n(t);
-		return ta(t, r, await e.runEffect(i.poll(r)));
-	}, i = async () => e.runEffect(xt()), a = async (t, r, i) => {
+		return na(t, r, await e.runEffect(i.poll(r)));
+	}, i = async () => e.runEffect(St()), a = async (t, r, i) => {
 		let a = n(t), o;
-		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), Qi(t, o ?? await e.runEffect(a.executionId(r)))) : Qi(t, await e.runEffect(a.execute(r, { discard: !0 })));
+		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), $i(t, o ?? await e.runEffect(a.executionId(r)))) : $i(t, await e.runEffect(a.execute(r, { discard: !0 })));
 	};
 	return {
 		start: a,
@@ -2831,7 +2833,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				let e = await r(i, a);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' run '${a}'`);
-				await na(c);
+				await ra(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -2869,22 +2871,22 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, ia = (e, t) => ({
+}, aa = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), Qi(n, a);
+		return t(() => e.start(n, r)), $i(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), Qi(n, a);
+		return t(() => e.child(n, r, i)), $i(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), aa = (e, t) => ({
+}), oa = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -2898,7 +2900,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), oa = (e) => {
+}), sa = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -2919,16 +2921,16 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, sa = (e, t) => {
+}, ca = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? M.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(M.map((e) => Qi(r.definition.name, e)))).pipe(M.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? M.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(M.map((e) => $i(r.definition.name, e)))).pipe(M.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, ca = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, la = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? M.succeed(void 0) : M.promise(() => Promise.resolve(a))).pipe(M.flatMap((a) => {
 		let o = {
 			...a,
-			subject: a?.subject ?? Ui,
+			subject: a?.subject ?? Wi,
 			traceId: a?.traceId ?? "workflow-bootstrap"
 		}, s = t.buildContext(o, {
 			workflowName: e.definition.name,
@@ -2936,15 +2938,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
 		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = s?.store;
-		return u === void 0 ? l : M.provide(l, Xi(u));
+		return u === void 0 ? l : M.provide(l, Zi(u));
 	}));
-}))), la = (e) => ({
+}))), ua = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), ua = la, da = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", fa = () => {
+}), da = ua, fa = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", pa = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, pa = (e) => `${e}_${fa()}`, ma = (e) => e.id ?? `${e.event}->${e.workflow}`, ha = T("_voltro_workflow_events", {
+}, ma = (e) => `${e}_${pa()}`, ha = (e) => e.id ?? `${e.event}->${e.workflow}`, ga = T("_voltro_workflow_events", {
 	id: v({ prefix: "wfe" }),
 	name: E(),
 	payload: C(),
@@ -2952,7 +2954,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	subject: C().nullable(),
 	traceId: E().nullable(),
 	occurredAt: D().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), ga = T("_voltro_workflow_event_deliveries", {
+}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), _a = T("_voltro_workflow_event_deliveries", {
 	id: v({ prefix: "wfed" }),
 	eventId: E(),
 	eventName: E(),
@@ -2970,8 +2972,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	errorMessage: E().nullable(),
 	createdAt: D().default("now"),
 	completedAt: D().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), _a = (e) => {
-	let t = e.makeId ?? pa, n = /* @__PURE__ */ new Map();
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), va = (e) => {
+	let t = e.makeId ?? ma, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3012,7 +3014,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = ma(o), l = o.workflow, d;
+			let s = ha(o), l = o.workflow, d;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -3115,10 +3117,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			triggered: m
 		};
 	} };
-}, va = k({ scope: "voltro:outbox" }), Y = "_voltro_outbox", ya = {
+}, ya = k({ scope: "voltro:outbox" }), Y = "_voltro_outbox", ba = {
 	kind: "typeid",
 	prefix: "obx"
-}, ba = T(Y, {
+}, xa = T(Y, {
 	id: v({ prefix: "obx" }),
 	effect: E(),
 	payload: C(),
@@ -3136,10 +3138,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	resendRequestedBy: E().nullable(),
 	resendReason: E().nullable(),
 	resendCount: b()
-}), xa = "_voltro_outbox_attempts", Sa = {
+}), Sa = "_voltro_outbox_attempts", Ca = {
 	kind: "typeid",
 	prefix: "obxa"
-}, Ca = T(xa, {
+}, wa = T(Sa, {
 	id: v({ prefix: "obxa" }),
 	outboxId: E(),
 	effect: E(),
@@ -3160,11 +3162,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	subjectId: E().nullable(),
 	tenantId: E().nullable(),
 	traceId: E().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), wa = (e) => {
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Ta = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Ta = 8, Ea = (e) => ({
+}, Ea = 8, Da = (e) => ({
 	enqueue: async (n, r, i) => {
 		let a = (e.now ?? (() => /* @__PURE__ */ new Date()))(), o = i?.idempotencyKey;
 		if (o !== void 0) {
@@ -3179,12 +3181,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			if (n !== void 0) return n.id;
 		}
 		let s = {
-			id: f(ya, Y),
+			id: f(ba, Y),
 			effect: n,
 			payload: r,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: i?.maxAttempts ?? Ta,
+			maxAttempts: i?.maxAttempts ?? Ea,
 			nextAttemptAt: new Date(a.getTime() + (i?.delayMs ?? 0)),
 			idempotencyKey: o ?? null,
 			lastError: null,
@@ -3231,7 +3233,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), Da = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Oa = 50, ka = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Aa = (e) => {
+}), Oa = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), ka = 50, Aa = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, ja = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -3241,13 +3243,13 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: ka(n, 8192)
+		preview: Aa(n, 8192)
 	} : t;
-}, ja = async (e, t, n) => {
+}, Ma = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(xa, {
-			id: f(Sa, xa),
+		await e.insert(Sa, {
+			id: f(Ca, Sa),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -3258,14 +3260,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : ka(t.error, 4e3),
-			response: Aa(t.response),
+			error: t.error === null ? null : Aa(t.error, 4e3),
+			response: ja(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		va.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		ya.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -3273,7 +3275,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: xa,
+			table: Sa,
 			predicate: u("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -3283,11 +3285,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(xa, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Sa, r.id);
 	} catch (e) {
-		va.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		ya.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, Ma = async (e) => {
+}, Na = async (e) => {
 	let n = (e.now ?? (() => /* @__PURE__ */ new Date()))(), r = await e.store.query({
 		table: Y,
 		predicate: t(u("status", "pending"), ne("nextAttemptAt", n)),
@@ -3305,7 +3307,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			s++;
 			continue;
 		}
-		let u = t.attempts + 1, d = t.maxAttempts ?? Ta, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = t.attempts + 1, d = t.maxAttempts ?? Ea, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let n = await l.handler({
 				payload: t.payload ?? {},
@@ -3314,7 +3316,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
 			});
-			await ja(e.store, {
+			await Ma(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: "delivered",
@@ -3332,7 +3334,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			}), i++;
 		} catch (i) {
 			let s = i instanceof Error ? i.message : String(i), l = u >= d;
-			await ja(e.store, {
+			await Ma(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -3344,20 +3346,20 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: s,
-				nextAttemptAt: new Date(n.getTime() + Da(u)),
+				nextAttemptAt: new Date(n.getTime() + Oa(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (o++, va.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (o++, ya.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, i)) : (a++, va.warn("outbox delivery failed; will retry", {
+			}, i)) : (a++, ya.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: Da(u)
+				retryInMs: Oa(u)
 			}));
 		}
 	}
@@ -3367,10 +3369,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		dead: o,
 		skipped: s
 	};
-}, Na = k({ scope: "voltro:connections" }), X = "_voltro_connections", Pa = {
+}, Pa = k({ scope: "voltro:connections" }), X = "_voltro_connections", Fa = {
 	kind: "typeid",
 	prefix: "conn"
-}, Fa = T(X, {
+}, Ia = T(X, {
 	id: v({ prefix: "conn" }),
 	connectionId: E(),
 	subjectId: E(),
@@ -3393,10 +3395,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	metadata: C().nullable(),
 	connectedAt: D(),
 	updatedAt: D()
-}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), Ia = "_voltro_connection_grants", La = {
+}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), La = "_voltro_connection_grants", Ra = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Ra = T(Ia, {
+}, za = T(La, {
 	id: v({ prefix: "cgrant" }),
 	state: E().unique(),
 	connectionId: E(),
@@ -3406,8 +3408,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	redirectTo: E(),
 	createdAt: D(),
 	expiresAt: D()
-}).index(["expiresAt"]), za = /^[a-z][a-z0-9-]*$/, Ba = (e) => {
-	if (!za.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+}).index(["expiresAt"]), Ba = /^[a-z][a-z0-9-]*$/, Va = (e) => {
+	if (!Ba.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of [
 			"authorizeUrl",
@@ -3417,9 +3419,9 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 	}
 	return e;
-}, Va = (e) => e.label ?? e.id, Ha = (e) => {
-	if (e.length !== 0 && hi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, Ua = (e) => {
+}, Ha = (e) => e.label ?? e.id, Ua = (e) => {
+	if (e.length !== 0 && gi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
+}, Wa = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -3429,14 +3431,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, Wa = (e) => {
+}, Ga = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, Ga = (e) => Wa(e)?.toISOString() ?? null, Ka = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), qa = (e, t) => t === void 0 ? {
+}, Ka = (e) => Ga(e)?.toISOString() ?? null, qa = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Ja = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Va(e),
+	label: Ha(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -3447,24 +3449,24 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Va(e),
+	label: Ha(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: Ka(t.scopes),
-	expiresAt: Ga(t.expiresAt),
+	scopes: qa(t.scopes),
+	expiresAt: Ka(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: Ga(t.connectedAt)
-}, Ja = async (e, n, r) => (await e.query({
+	connectedAt: Ka(t.connectedAt)
+}, Ya = async (e, n, r) => (await e.query({
 	table: X,
 	predicate: t(u("connectionId", n), u("subjectId", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], Ya = async (e) => {
+}))[0], Xa = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: f(Pa, X),
+		id: f(Fa, X),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -3482,8 +3484,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return Xa(e.store, r);
-}, Xa = (e, t) => e.upsert(X, t, {
+	return Za(e.store, r);
+}, Za = (e, t) => e.upsert(X, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -3499,10 +3501,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), Za = async (e, t, n) => {
-	let r = await Ja(e, t, n);
+}), Qa = async (e, t, n) => {
+	let r = await Ya(e, t, n);
 	return r !== void 0 && e.delete(X, r.id);
-}, Qa = async (e, t, n) => {
+}, $a = async (e, t, n) => {
 	let r = await e.query({
 		table: X,
 		predicate: u("subjectId", n),
@@ -3511,9 +3513,9 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => qa(e, i.get(e.id)));
-}, $a = (e, t) => globalThis.fetch(e, t), eo = async (e, t, n) => {
-	let r = e.fetchImpl ?? $a, i, a;
+	return t.list().map((e) => Ja(e, i.get(e.id)));
+}, eo = (e, t) => globalThis.fetch(e, t), to = async (e, t, n) => {
+	let r = e.fetchImpl ?? eo, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -3553,62 +3555,62 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, to = (e, t, n = Date.now) => eo(e, {
+}, no = (e, t, n = Date.now) => to(e, {
 	grant_type: "authorization_code",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), no = (e, t, n = Date.now) => eo(e, {
+}, n), ro = (e, t, n = Date.now) => to(e, {
 	grant_type: "refresh_token",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	refresh_token: t
-}, n), ro = 6e4, io = 3e4, ao = class extends Error {
+}, n), io = 6e4, ao = 3e4, oo = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, oo = (e) => new Promise((t) => {
+}, so = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), so = /* @__PURE__ */ new Map(), co = (e, t) => `${e}${t}`, lo = () => {
-	so.clear();
-}, uo = (e, t) => ({
+}), co = /* @__PURE__ */ new Map(), lo = (e, t) => `${e}${t}`, uo = () => {
+	co.clear();
+}, fo = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
-	accessToken: _i(String(t.accessToken)),
-	expiresAt: Wa(t.expiresAt),
-	scopes: Ka(t.scopes),
+	accessToken: vi(String(t.accessToken)),
+	expiresAt: Ga(t.expiresAt),
+	scopes: qa(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), fo = (e, t, n) => {
-	let r = Wa(e.expiresAt);
+}), po = (e, t, n) => {
+	let r = Ga(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, po = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Ja(n, r.id, i);
-	if (a === void 0) throw new ao(r.id, i);
-	if (r.kind === "pat" || !fo(a, r.refreshSkewMs ?? 6e4, t())) return uo(r, a);
-	let o = co(r.id, i), s = so.get(o);
+}, mo = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Ya(n, r.id, i);
+	if (a === void 0) throw new oo(r.id, i);
+	if (r.kind === "pat" || !po(a, r.refreshSkewMs ?? 6e4, t())) return fo(r, a);
+	let o = lo(r.id, i), s = co.get(o);
 	if (s !== void 0) return s;
-	let c = mo({
+	let c = ho({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		so.delete(o);
+		co.delete(o);
 	});
-	return so.set(o, c), c;
-}, mo = async (e) => {
-	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? oo, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
+	return co.set(o, c), c;
+}, ho = async (e) => {
+	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? so, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
 	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), ne("refreshLockedUntil", new Date(i()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await o(200);
-			let e = await Ja(n, a.id, r);
-			if (e === void 0) throw new ao(a.id, r);
-			if (!fo(e, s, i())) return uo(a, e);
+			let e = await Ya(n, a.id, r);
+			if (e === void 0) throw new oo(a.id, r);
+			if (!po(e, s, i())) return fo(a, e);
 		}
 		throw new O({
 			connectionId: a.id,
@@ -3629,7 +3631,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	});
 	let d;
 	try {
-		d = await no(a, _i(String(l)), i);
+		d = await ro(a, vi(String(l)), i);
 	} catch (e) {
 		let t = e instanceof O ? e : new O({
 			connectionId: a.id,
@@ -3646,7 +3648,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Na.warn("connection refresh failed", {
+		}), Pa.warn("connection refresh failed", {
 			connectionId: a.id,
 			transient: t.transient,
 			reason: t.reason
@@ -3662,32 +3664,32 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
 	};
-	return uo(a, await n.update(X, c, f) ?? {
+	return fo(a, await n.update(X, c, f) ?? {
 		...e.row,
 		...f
 	});
-}, ho = (e = 32) => {
+}, go = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, go = (e) => {
+}, _o = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, _o = async (e) => {
+}, vo = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return go(new Uint8Array(t));
-}, vo = 10 * 6e4, yo = (e) => `/_voltro/connections/${e}/callback`, bo = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, xo = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${yo(e.id)}`, So = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = ho(), i = n.pkce === !1 ? null : ho(48), a = xo(n, e.publicUrl);
-	await e.store.insert(Ia, {
-		id: f(La, Ia),
+	return _o(new Uint8Array(t));
+}, yo = 10 * 6e4, bo = (e) => `/_voltro/connections/${e}/callback`, xo = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, So = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${bo(e.id)}`, Co = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = go(), i = n.pkce === !1 ? null : go(48), a = So(n, e.publicUrl);
+	await e.store.insert(La, {
+		id: f(Ra, La),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		codeVerifier: i === null ? null : q(i),
-		redirectTo: bo(e.redirectTo),
+		redirectTo: xo(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + vo)
+		expiresAt: new Date(t.getTime() + yo)
 	});
 	let o = new URLSearchParams({
 		response_type: "code",
@@ -3697,15 +3699,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (o.set("code_challenge", await _o(i)), o.set("code_challenge_method", "S256"));
+	i !== null && (o.set("code_challenge", await vo(i)), o.set("code_challenge_method", "S256"));
 	let s = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${s}${o.toString()}`,
 		state: r
 	};
-}, Co = async (e) => {
+}, wo = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: Ia,
+		table: La,
 		predicate: u("state", e.state),
 		order: [],
 		take: 1,
@@ -3717,8 +3719,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(Ia, n.id);
-	let r = String(n.connectionId), i = Wa(n.expiresAt);
+	await e.store.delete(La, n.id);
+	let r = String(n.connectionId), i = Ga(n.expiresAt);
 	if (i !== null && i.getTime() < t.getTime()) throw new O({
 		connectionId: r,
 		reason: "handshake expired — start again",
@@ -3730,17 +3732,17 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : _i(String(n.codeVerifier)), s = await to(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : vi(String(n.codeVerifier)), s = await no(a, {
 		code: e.code,
-		redirectUri: xo(a, e.publicUrl),
+		redirectUri: So(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Na.warn("connection identify failed; storing without account details", {
+		Pa.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await Ya({
+	return await Xa({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -3750,11 +3752,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: bo(String(n.redirectTo ?? "/"))
+		redirectTo: xo(String(n.redirectTo ?? "/"))
 	};
-}, wo = async (e, t = /* @__PURE__ */ new Date()) => {
+}, To = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: Ia,
+		table: La,
 		predicate: ne("expiresAt", t),
 		order: [],
 		take: void 0,
@@ -3763,27 +3765,27 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, To, Eo = (e) => {
-	To = e;
-}, Do = () => To, Oo = (e, t) => {
-	let n = To;
+}, Eo, Do = (e) => {
+	Eo = e;
+}, Oo = () => Eo, ko = (e, t) => {
+	let n = Eo;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, ko = (e) => async (t, n) => {
+}, Ao = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new ao(n, "<anonymous>");
-	return po({
+	if (i === null || i === "") throw new oo(n, "<anonymous>");
+	return mo({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, Ao = (e) => {
+}, jo = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new ao(n, "<anonymous>");
-		return po({
+		if (t === null || t === "") throw new oo(n, "<anonymous>");
+		return mo({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -3795,7 +3797,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof ao) return null;
+				if (e instanceof oo) return null;
 				throw e;
 			}
 		},
@@ -3810,17 +3812,17 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : Qa(e.store, e.registry, t)
+		})) : $a(e.store, e.registry, t)
 	};
-}, jo = (e, t) => {
+}, Mo = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
-	if (n === null || n === "") throw new Ce({ connectionId: t });
+	if (n === null || n === "") throw new we({ connectionId: t });
 	return n;
-}, Mo = (e, t) => {
+}, No = (e, t) => {
 	let n = e.registry.get(t);
-	if (n === void 0) throw new Se({ connectionId: t });
+	if (n === void 0) throw new Ce({ connectionId: t });
 	return n;
-}, No = (e) => async (t, n) => {
+}, Po = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -3833,15 +3835,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : Qa(n.store, e.registry, r);
-}, Po = (e) => async (t, n) => {
-	let r = Mo(e, t.connectionId), i = jo(n, t.connectionId);
-	if (r.kind !== "oauth2") throw new xe({
+	})) : $a(n.store, e.registry, r);
+}, Fo = (e) => async (t, n) => {
+	let r = No(e, t.connectionId), i = Mo(n, t.connectionId);
+	if (r.kind !== "oauth2") throw new Se({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return So({
+	return Co({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -3849,9 +3851,9 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Fo = (e) => async (t, n) => {
-	let r = Mo(e, t.connectionId), i = jo(n, t.connectionId);
-	if (r.kind !== "pat") throw new xe({
+}, Io = (e) => async (t, n) => {
+	let r = No(e, t.connectionId), i = Mo(n, t.connectionId);
+	if (r.kind !== "pat") throw new Se({
 		connectionId: t.connectionId,
 		expected: "pat",
 		actual: r.kind
@@ -3872,7 +3874,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			transient: !1
 		});
 	}
-	return await Ya({
+	return await Xa({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -3883,20 +3885,20 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, Io = (e) => async (t, n) => {
-	Mo(e, t.connectionId);
-	let r = jo(n, t.connectionId);
-	return { ok: await Za(n.store, t.connectionId, r) };
-}, Lo = "admin:full", Ro = class extends L.TaggedError()("AccessDenied", {
+}, Lo = (e) => async (t, n) => {
+	No(e, t.connectionId);
+	let r = Mo(n, t.connectionId);
+	return { ok: await Qa(n.store, t.connectionId, r) };
+}, Ro = "admin:full", zo = class extends L.TaggedError()("AccessDenied", {
 	action: L.String,
 	resourceType: L.String,
 	resourceId: L.String
-}) {}, zo = /* @__PURE__ */ new Map(), Bo = (e) => {
+}) {}, Bo = /* @__PURE__ */ new Map(), Vo = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (zo.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return zo.set(e.resourceType, e), e;
-}, Vo = (e) => zo.get(e), Ho = () => [...zo.values()], Uo = () => zo.clear(), Wo = () => Ho().map((e) => {
+	if (Bo.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Bo.set(e.resourceType, e), e;
+}, Ho = (e) => Bo.get(e), Uo = () => [...Bo.values()], Wo = () => Bo.clear(), Go = () => Uo().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -3909,7 +3911,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Go = (e, t) => {
+}), Ko = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -3918,37 +3920,37 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, Ko = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Go(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), qo = (e, t, n, r) => {
+}, qo = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Ko(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Jo = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = Ko(e, n, r.tuples, r.policy);
+	let a = qo(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Jo = (e, t, n, r) => {
-	if (!qo(e, t, n, r)) throw new Ro({
+}, Yo = (e, t, n, r) => {
+	if (!Jo(e, t, n, r)) throw new zo({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Yo = (e, t, n, r, i) => r.filter((r) => qo(e, t, {
+}, Xo = (e, t, n, r, i) => r.filter((r) => Jo(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), Xo = (e, t) => {
+}, i)), Zo = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, Zo = k({ scope: "voltro:policy" }), Qo, $o = (e) => {
-	Qo = e;
-}, es = () => Qo, ts = () => {
-	Ie((e) => M.gen(function* () {
-		let t = Vo(e.resourceType);
-		if (t === void 0) return Zo.warn("policy guard denied — no resource policy registered for this type", {
+}, Qo = k({ scope: "voltro:policy" }), $o, es = (e) => {
+	$o = e;
+}, ts = () => $o, ns = () => {
+	Le((e) => M.gen(function* () {
+		let t = Ho(e.resourceType);
+		if (t === void 0) return Qo.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = Qo;
-		if (n === void 0) return Zo.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = $o;
+		if (n === void 0) return Qo.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
@@ -3959,11 +3961,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				resourceId: e.resourceId
 			}),
 			catch: (e) => e
-		}).pipe(M.catchAll((t) => (Zo.error("policy guard denied — tuple source failed", {
+		}).pipe(M.catchAll((t) => (Qo.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
 		}, t), M.succeed([])))), i = e.subject;
-		return qo({
+		return Jo({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -3976,10 +3978,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			tuples: r
 		});
 	}));
-}, ns = (e) => {
-	Promise.resolve().then(e);
 }, rs = (e) => {
-	let t = e.schedule ?? ns, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
+	Promise.resolve().then(e);
+}, is = (e) => {
+	let t = e.schedule ?? rs, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -4025,11 +4027,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, is = N.effect(Qe.HttpClient, M.map(Qe.HttpClient, (e) => e.pipe(Qe.mapRequestEffect((e) => M.currentSpan.pipe(M.map((t) => e.headers.traceparent === void 0 ? $e.setHeader(e, "traceparent", ar({
+}, as = N.effect($e.HttpClient, M.map($e.HttpClient, (e) => e.pipe($e.mapRequestEffect((e) => M.currentSpan.pipe(M.map((t) => e.headers.traceparent === void 0 ? et.setHeader(e, "traceparent", or({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), M.catchAll(() => M.succeed(e))))))), as = "voltro/audit", os = "voltro/softDelete", ss = "voltro/tenant", cs = (e) => {
+})) : e), M.catchAll(() => M.succeed(e))))))), os = "voltro/audit", ss = "voltro/softDelete", cs = "voltro/tenant", ls = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -4072,27 +4074,27 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? ls,
-		computedFields: (e) => t.get(e)?.computedFields ?? us,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? us,
+		computedFields: (e) => t.get(e)?.computedFields ?? ds,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, ls = /* @__PURE__ */ new Map(), us = /* @__PURE__ */ new Map(), ds = cs([]), fs = class extends L.TaggedError()("NoRowFound", {
+}, us = /* @__PURE__ */ new Map(), ds = /* @__PURE__ */ new Map(), fs = ls([]), ps = class extends L.TaggedError()("NoRowFound", {
 	table: L.String,
 	found: L.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, ps = class extends L.TaggedError()("OptimisticLockError", {
+}, ms = class extends L.TaggedError()("OptimisticLockError", {
 	table: L.String,
 	expected: L.Number
 }) {
 	get message() {
 		return `optimistic lock failed on '${this.table}': expected version ${this.expected}`;
 	}
-}, ms = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), hs = (e) => {
-	if (e.length === 1 && ms(e[0])) return e[0];
+}, hs = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), gs = (e) => {
+	if (e.length === 1 && hs(e[0])) return e[0];
 	let t = e[0];
 	if (e.length === 2) return u(t, e[1]);
 	let n = e[1], r = e[2];
@@ -4110,11 +4112,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		case "fts": return o(t, r);
 		default: return u(t, r);
 	}
-}, gs = (e) => {
+}, _s = (e) => {
 	let t = m(e);
 	if (t === void 0) throw Error(`unknown table '${e}' — is it declared with table()?`);
 	return ie(t);
-}, _s = class e {
+}, vs = class e {
 	backend;
 	scope;
 	table;
@@ -4128,7 +4130,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		return new e(this.backend, this.scope, this.table, t, this.skipTenant, this.skipSoftDelete);
 	}
 	where(...e) {
-		return this.clone(this.query.where(hs(e)));
+		return this.clone(this.query.where(gs(e)));
 	}
 	orderBy(e, t = "asc") {
 		return this.clone(this.query.orderBy(e, t));
@@ -4163,7 +4165,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	scopedQuery() {
 		let e = this.query, { subject: t, schemaRegistry: n } = this.scope;
 		!this.skipTenant && n.hasTenant(this.table) && t.tenantId != null && (e = e.where(u("tenantId", t.tenantId))), !this.skipSoftDelete && n.hasSoftDelete(this.table) && (e = e.where(S("deletedAt")));
-		let r = (this.scope.rowFilter ?? Nn)(this.table);
+		let r = (this.scope.rowFilter ?? Pn)(this.table);
 		return r !== void 0 && (e = e.where(r)), e;
 	}
 	async all() {
@@ -4177,11 +4179,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	async one() {
 		let e = await this.backend.query(this.scopedQuery().limit(2).descriptor), t = e[0];
-		if (t === void 0) throw new fs({
+		if (t === void 0) throw new ps({
 			table: this.table,
 			found: 0
 		});
-		if (e.length > 1) throw new fs({
+		if (e.length > 1) throw new ps({
 			table: this.table,
 			found: e.length
 		});
@@ -4197,7 +4199,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	get descriptor() {
 		return this.scopedQuery().descriptor;
 	}
-}, vs = class {
+}, ys = class {
 	backend;
 	scope;
 	table;
@@ -4208,7 +4210,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = hs(e);
+		let n = gs(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -4232,7 +4234,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	async set(e) {
 		let t = await this.backend.updateMany(this.table, e, { where: this.scopedWhere() });
-		if (this.expectedVersion !== void 0 && t === 0) throw new ps({
+		if (this.expectedVersion !== void 0 && t === 0) throw new ms({
 			table: this.table,
 			expected: this.expectedVersion
 		});
@@ -4241,7 +4243,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	async restore() {
 		return this.backend.updateMany(this.table, { deletedAt: null }, { where: this.scopedWhere() });
 	}
-}, ys = class {
+}, bs = class {
 	backend;
 	scope;
 	table;
@@ -4251,7 +4253,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = hs(e);
+		let n = gs(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -4272,32 +4274,32 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	async hard() {
 		return this.backend.deleteMany(this.table, { where: this.scopedWhere() });
 	}
-}, bs = (e, t) => ({
-	select: (n) => new _s(e, t, n, gs(n)),
-	updateWhere: (n) => new vs(e, t, n),
-	deleteWhere: (n) => new ys(e, t, n)
-}), xs = "id", Ss = (e) => "descriptor" in e ? e.descriptor : e, Cs = (e, t) => {
+}, xs = (e, t) => ({
+	select: (n) => new vs(e, t, n, _s(n)),
+	updateWhere: (n) => new ys(e, t, n),
+	deleteWhere: (n) => new bs(e, t, n)
+}), Ss = "id", Cs = (e) => "descriptor" in e ? e.descriptor : e, ws = (e, t) => {
 	let n = {};
 	for (let r of t) e[r] !== void 0 && (n[r] = e[r]);
 	return n;
-}, ws = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", Ts = (e) => {
-	throw new Wi({
+}, Ts = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", Es = (e) => {
+	throw new Gi({
 		table: e,
-		reason: ws
+		reason: Ts
 	});
-}, Es = (e, n) => {
-	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Nn, o = (e, t) => {
+}, Ds = (e, n) => {
+	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Pn, o = (e, t) => {
 		let a = { ...t }, o = n.schemaRegistry, s = o.idScheme(e);
-		if (s !== void 0 && a[xs] == null) if (s.kind === "numeric") delete a[xs];
+		if (s !== void 0 && a[Ss] == null) if (s.kind === "numeric") delete a[Ss];
 		else {
 			let t = f(s, e);
-			t !== null && (a[xs] = t);
+			t !== null && (a[Ss] = t);
 		}
 		if (o.hasAudit(e)) {
 			let e = /* @__PURE__ */ new Date();
 			"createdAt" in a || (a.createdAt = e), "updatedAt" in a || (a.updatedAt = e), r !== null && ("createdBy" in a || (a.createdBy = r), "updatedBy" in a || (a.updatedBy = r));
 		}
-		o.hasTenant(e) && ("tenantId" in a || (i === null && Ts(e), a.tenantId = i));
+		o.hasTenant(e) && ("tenantId" in a || (i === null && Es(e), a.tenantId = i));
 		let c = o.defaultFactories(e);
 		if (c.size > 0) for (let [e, t] of c) (!(e in a) || a[e] === void 0) && (a[e] = t());
 		let l = o.computedFields(e);
@@ -4312,10 +4314,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		try {
 			return await r();
 		} catch (n) {
-			let r = Kt(n);
-			if (qt(r)) {
+			let r = qt(n);
+			if (Jt(r)) {
 				let n = t.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
-				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Wi({
+				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Gi({
 					table: e,
 					reason: n == null ? "write references a tenant that does not exist" : `tenant '${String(n)}' does not exist — seed the row in \`tenants\`, or fix how the request resolved this tenant (subject.tenantId / the x-tenant header / the dev TENANT fallback)`
 				});
@@ -4336,11 +4338,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		if (r === void 0) return t;
 		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = Ct.formatErrorSync(i.left).map((e) => ({
+		let a = wt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Ki({
+		throw new qi({
 			table: e,
 			summary: o === void 0 ? "patch validation failed" : `${o.path}: ${o.message}`,
 			issues: a
@@ -4353,20 +4355,20 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		if (r === void 0) return t;
 		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = Ct.formatErrorSync(i.left).map((e) => ({
+		let a = wt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Ki({
+		throw new qi({
 			table: e,
 			summary: o === void 0 ? "row validation failed" : `${o.path}: ${o.message}`,
 			issues: a
 		});
 	}, y = n.dialect, b = (e, t) => {
 		let n = m(e);
-		return l(y ? le(t, n, y) : t, n, hi());
+		return l(y ? le(t, n, y) : t, n, gi());
 	}, x = (e, t) => {
-		let n = m(e), r = s(t, n, hi());
+		let n = m(e), r = s(t, n, gi());
 		return y ? c(r, n, y) : r;
 	}, C = (e) => {
 		let r = e.table, o = e.predicate;
@@ -4378,7 +4380,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			let e = S("deletedAt");
 			o = o ? t(o, e) : e;
 		}
-		return o = Ln(a, r, o), o === e.predicate ? e : {
+		return o = Rn(a, r, o), o === e.predicate ? e : {
 			...e,
 			predicate: o
 		};
@@ -4391,7 +4393,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			let n = (await e.query({
 				table: t,
 				predicate: {
-					column: xs,
+					column: Ss,
 					op: "eq",
 					value: r
 				},
@@ -4412,7 +4414,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}), se = async (e, t) => ie(e, {
 		...t,
 		where: ae(e, t.where)
-	}), ce = bs({
+	}), ce = xs({
 		query: ee,
 		updateMany: re,
 		deleteMany: ie,
@@ -4425,26 +4427,26 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	return {
 		query: te,
 		one: (async (e) => {
-			let t = Ss(e), n = await te({
+			let t = Cs(e), n = await te({
 				...t,
 				take: 2
 			}), r = n[0];
-			if (r === void 0) throw new fs({
+			if (r === void 0) throw new ps({
 				table: t.table,
 				found: 0
 			});
-			if (n.length > 1) throw new fs({
+			if (n.length > 1) throw new ps({
 				table: t.table,
 				found: n.length
 			});
 			return r;
 		}),
 		first: (async (e) => (await te({
-			...Ss(e),
+			...Cs(e),
 			take: 1
 		}))[0] ?? null),
 		maybeOne: (async (e) => (await te({
-			...Ss(e),
+			...Cs(e),
 			take: 1
 		}))[0] ?? null),
 		insert: async (t, n) => {
@@ -4462,7 +4464,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		select: ce.select,
 		update: ((e, t, n) => t === void 0 ? ce.updateWhere(e) : ne(e, t, n)),
 		delete: ((e, t) => t === void 0 ? ce.deleteWhere(e) : w(e, t)),
-		applyDefined: Cs,
+		applyDefined: ws,
 		hardDelete: async (t, n) => e.delete(t, n),
 		updateMany: oe,
 		deleteMany: se,
@@ -4474,34 +4476,34 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			let i = o(t, n), a = await p(t, i, () => e.insertIgnore(t, b(t, v(t, i)), r));
 			return x(t, [a])[0];
 		},
-		transactional: (t) => e.transactional(async (e) => t(Es(e, n))),
+		transactional: (t) => e.transactional(async (e) => t(Ds(e, n))),
 		...e.raw ? { raw: e.raw.bind(e) } : {},
 		onChange: (t) => e.onChange(t),
 		injectExternalChange: (t) => e.injectExternalChange(t),
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope }
 	};
-}, Ds = class extends L.TaggedError()("CircuitOpen", {
+}, Os = class extends L.TaggedError()("CircuitOpen", {
 	name: L.String,
 	retryAfterMs: L.Number
-}) {}, Os = {
+}) {}, ks = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, ks = { make: (e) => M.gen(function* () {
-	let t = e.name ?? "circuit", n = He.toMillis(He.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(Os), o = M.gen(function* () {
+}, As = { make: (e) => M.gen(function* () {
+	let t = e.name ?? "circuit", n = Ue.toMillis(Ue.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(ks), o = M.gen(function* () {
 		let e = yield* I.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* I.set(a, t >= r ? Os : {
+			yield* I.set(a, t >= r ? ks : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* I.set(a, Os));
+		e.failureCount !== 0 && (yield* I.set(a, ks));
 	}), s = M.gen(function* () {
-		let t = yield* ze.currentTimeMillis, n = yield* I.get(a);
+		let t = yield* Be.currentTimeMillis, n = yield* I.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
 			yield* I.set(a, {
 				tag: "open",
@@ -4524,7 +4526,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}), c = M.gen(function* () {
 		let e = yield* I.get(a);
 		if (e.tag !== "open") return null;
-		let t = (yield* ze.currentTimeMillis) - e.openedAt;
+		let t = (yield* Be.currentTimeMillis) - e.openedAt;
 		return t >= n ? (yield* I.set(a, {
 			tag: "half-open",
 			failureCount: 0,
@@ -4537,7 +4539,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			if (A.isInterruptedOnly(e)) return M.void;
 			let t = A.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
 			return i(n) ? s : M.void;
-		})) : yield* M.fail(new Ds({
+		})) : yield* M.fail(new Os({
 			name: t,
 			retryAfterMs: n
 		}));
@@ -4546,25 +4548,25 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		value: I.get(a).pipe(M.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: I.set(a, Os),
+		value: I.set(a, ks),
 		enumerable: !0
 	}), u;
-}) }, As, js = (e) => {
-	As = e;
-}, Ms = () => {
-	As = void 0;
-}, Ns = () => As, Ps = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? Le(t.id ?? "system") : Le(t.id ?? "system", t.scopes), r = t.store ?? As?.dataStore, i = t.schemaRegistry ?? As?.schemaRegistry, a = t.dialect ?? As?.dialect;
+}) }, js, Ms = (e) => {
+	js = e;
+}, Ns = () => {
+	js = void 0;
+}, Ps = () => js, Fs = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Re(t.id ?? "system") : Re(t.id ?? "system", t.scopes), r = t.store ?? js?.dataStore, i = t.schemaRegistry ?? js?.schemaRegistry, a = t.dialect ?? js?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
-		store: Es(r, {
+		store: Ds(r, {
 			subject: n,
 			schemaRegistry: i,
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, Fs = (e) => {
+}, Is = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -4592,7 +4594,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, Is = (e = process.env) => {
+}, Ls = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -4604,7 +4606,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, Ls = () => {
+}, Rs = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -4629,27 +4631,27 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, Rs = Symbol.for("@voltro/ScheduleDefinition"), zs = (e) => typeof e == "object" && !!e && Rs in e, Bs = 30 * 6e4, Vs = (e) => {
+}, zs = Symbol.for("@voltro/ScheduleDefinition"), Bs = (e) => typeof e == "object" && !!e && zs in e, Vs = 30 * 6e4, Hs = (e) => {
 	let t = j.parse(e.cron, e.timezone);
-	if (Ue.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
+	if (We.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
 	return {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? Bs,
-		[Rs]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? Vs,
+		[zs]: !0
 	};
-}, Hs = (e) => j.unsafeParse(e.cron, e.timezone), Us = (e, t = /* @__PURE__ */ new Date()) => j.next(Hs(e), t), Z = "_voltro_wakeups", Ws = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Gs = (e) => ({
+}, Us = (e) => j.unsafeParse(e.cron, e.timezone), Ws = (e, t = /* @__PURE__ */ new Date()) => j.next(Us(e), t), Z = "_voltro_wakeups", Gs = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Ks = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), Ks = async (e, t) => {
+}), qs = async (e, t) => {
 	await e.upsert(Z, {
-		id: Ws(t),
+		id: Gs(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -4659,7 +4661,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, qs = async (e, t) => e.delete(Z, Ws(t)), Js = async (e, t) => await e.update(Z, Ws(t), { status: "fired" }) !== null, Ys = (e, t) => ({ and: [{
+}, Js = async (e, t) => e.delete(Z, Gs(t)), Ys = async (e, t) => await e.update(Z, Gs(t), { status: "fired" }) !== null, Xs = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -4667,16 +4669,16 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), Xs = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Ys(Ws(t), "pending") }) > 0, Zs = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: Ys(Ws(t), "fired") });
-}, Qs = {
+}] }), Zs = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Xs(Gs(t), "pending") }) > 0, Qs = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: Xs(Gs(t), "fired") });
+}, $s = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, $s = async (e, t) => {
+}, ec = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: Qs,
+		predicate: $s,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4685,18 +4687,18 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Gs);
-}, ec = async (e, t, n = 500) => {
-	let r = await $s(e, n), i = t.getTime();
+	return (await e.query(n)).map(Ks);
+}, tc = async (e, t, n = 500) => {
+	let r = await ec(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, tc = async (e) => (await $s(e, 1))[0] ?? null, nc = {
+}, nc = async (e) => (await ec(e, 1))[0] ?? null, rc = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, rc = async (e, t = {}) => {
+}, ic = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: nc,
+		predicate: rc,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4707,12 +4709,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, ic = Ui, ac = "default", oc = {
+}, ac = Wi, oc = "default", sc = {
 	kind: "single",
 	tryClaim: async () => !0
-}, sc = "_voltro_schedule_claims", cc = (e, t, n) => {
+}, cc = "_voltro_schedule_claims", lc = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: sc,
+		table: cc,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -4727,7 +4729,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(sc, {
+				return await e.insert(cc, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -4745,12 +4747,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			}
 		}
 	};
-}, lc = "_voltro_schedule_runs", uc = async (e, t) => {
+}, uc = "_voltro_schedule_runs", dc = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, fc(t));
+		s?.(e, pc(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${ge()}`, l = await n.insert(lc, {
+			let o = `sr_${_e()}`, l = await n.insert(uc, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -4775,7 +4777,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(lc, e, t);
+			let r = await n.update(uc, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -4786,7 +4788,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: lc,
+				table: uc,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -4821,7 +4823,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				scheduleName: e.name,
 				trigger: n,
 				runId: s,
-				subject: ic
+				subject: ac
 			})
 		};
 		try {
@@ -4852,7 +4854,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			let n = Q(t).includes("exceeded maxRuntimeMs");
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : dc(t),
+				errorTag: n ? "timeout" : fc(t),
 				errorMessage: Q(t),
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -4860,7 +4862,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n
-			}), Pe({
+			}), Fe({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -4909,8 +4911,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = j.next(Hs(e), /* @__PURE__ */ new Date());
-			await Ks(n, {
+			let t = j.next(Us(e), /* @__PURE__ */ new Date());
+			await qs(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -4924,7 +4926,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		}
 	}, ee = 2147483647, te = (e) => {
 		if (m) return;
-		let n = Hs(e), r = j.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = Us(e), r = j.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
 			if (n > ee) {
@@ -4946,7 +4948,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		let r;
 		try {
 			let t = (await n.query({
-				table: lc,
+				table: uc,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -4965,7 +4967,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = Hs(e), a = [], s = j.next(i, r), c = Date.now();
+		let i = Us(e), a = [], s = j.next(i, r), c = Date.now();
 		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = j.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
@@ -5010,11 +5012,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), dc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, fc = (e) => {
+}, Q = (e) => e?.message ?? String(e), fc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, pc = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, pc = (e, t, n, r) => {
+}, mc = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -5044,7 +5046,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, mc = (e) => (t, n, r) => pc(t, n, r, e), hc = T("_voltro_schedule_runs", {
+}, hc = (e) => (t, n, r) => mc(t, n, r, e), gc = T("_voltro_schedule_runs", {
 	id: v({ prefix: "schrun" }),
 	name: E(),
 	status: E().oneOf([
@@ -5074,13 +5076,13 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	]).nullable(),
 	replicaId: E().nullable(),
 	result: C().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), gc = T("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), _c = T("_voltro_schedule_claims", {
 	id: v({ prefix: "schclaim" }),
 	scheduleName: E(),
 	bucket: E(),
 	claimedBy: E(),
 	claimedAt: D()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), _c = T("_voltro_traces", {
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), vc = T("_voltro_traces", {
 	id: v({ prefix: "span" }),
 	traceId: E(),
 	spanId: E(),
@@ -5104,7 +5106,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	durationMs: b(),
 	attributes: C().nullable(),
 	events: C().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), vc = T("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), yc = T("_voltro_undo_log", {
 	id: v({ prefix: "undo" }),
 	tag: E(),
 	label: E().nullable(),
@@ -5115,25 +5117,25 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	crossesAction: r().default(!1),
 	undone: r().default(!1),
 	createdAt: D().default("now")
-}).index(["subjectId", "createdAt"]).reactive(), yc = (e = process.env) => {
+}).index(["subjectId", "createdAt"]).reactive(), bc = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, bc = (e) => e.startsWith("_voltro"), xc = async (e, t, n) => (await e.query({
+}, xc = (e) => e.startsWith("_voltro"), Sc = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, Sc = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, Cc = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return bc(n) || t({
+		return xc(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = bc(n) ? null : await xc(e, n, r), o = await e.update(n, r, i);
-		return bc(n) || t({
+		let a = xc(n) ? null : await Sc(e, n, r), o = await e.update(n, r, i);
+		return xc(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -5142,8 +5144,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = bc(n) ? null : await xc(e, n, r), a = await e.delete(n, r);
-		return !bc(n) && a && t({
+		let i = xc(n) ? null : await Sc(e, n, r), a = await e.delete(n, r);
+		return !xc(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -5152,10 +5154,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), Cc = (e) => {
+} }), wc = (e) => {
 	let t = [];
 	return {
-		tx: Sc(e, (e) => t.push(e)),
+		tx: Cc(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -5171,14 +5173,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			});
 		}
 	};
-}, wc = (e) => {
+}, Tc = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, Tc = (e) => {
-	let t = wc(e);
+}, Ec = (e) => {
+	let t = Tc(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -5202,28 +5204,28 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			row: e.prev
 		};
 	}
-}, Ec = (e) => {
-	if (e.crossesAction) throw new Dc(e.invocationId, "action");
+}, Dc = (e) => {
+	if (e.crossesAction) throw new Oc(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = Tc(e.changes[n]);
+		let r = Ec(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, Dc = class extends Error {
+}, Oc = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Oc = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, kc = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, kc = class {
+}, Ac = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -5259,7 +5261,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, Ac = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, jc = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -5276,7 +5278,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, jc = async (e, t) => {
+}, Mc = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -5294,21 +5296,21 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, Mc = async (e, t) => {
-	for (let n of t) await jc(e, n);
-}, Nc = (e) => e.request?.subject?.id ?? null, Pc = (e) => e === !0 || e === 1, Fc = async (e, t, n) => (await e.query({
+}, Nc = async (e, t) => {
+	for (let n of t) await Mc(e, n);
+}, Pc = (e) => e.request?.subject?.id ?? null, Fc = (e) => e === !0 || e === 1, Ic = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, Ic = (e) => {
+}))[0] ?? null, Lc = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Lc = (e) => e.id ?? e.next?.id ?? e.prev?.id, Rc = async (e, t) => {
-	let n = Nc(t);
+}, Rc = (e) => e.id ?? e.next?.id ?? e.prev?.id, zc = async (e, t) => {
+	let n = Pc(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: u("subjectId", n),
@@ -5317,68 +5319,68 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: Pc(e.undone),
-		crossesAction: Pc(e.crossesAction),
+		undone: Fc(e.undone),
+		crossesAction: Fc(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, zc = async (e, t) => {
-	let n = await Fc(t.store, "_voltro_undo_log", e.invocationId);
-	if (!n) throw new De({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== Nc(t)) throw new Ee({ invocationId: e.invocationId });
-	return n;
 }, Bc = async (e, t) => {
-	let n = await zc(e, t);
-	if (Pc(n.undone)) return { ok: !0 };
-	if (Pc(n.crossesAction)) throw new Te({
+	let n = await Ic(t.store, "_voltro_undo_log", e.invocationId);
+	if (!n) throw new Oe({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== Pc(t)) throw new De({ invocationId: e.invocationId });
+	return n;
+}, Vc = async (e, t) => {
+	let n = await Bc(e, t);
+	if (Fc(n.undone)) return { ok: !0 };
+	if (Fc(n.crossesAction)) throw new Ee({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = Ic(n.changes);
+	let r = Lc(n.changes);
 	for (let n of r) {
-		let r = Lc(n);
-		if (r !== void 0 && !Oc(await Fc(t.store, n.table, r), n.next ?? null)) throw new Te({
+		let r = Rc(n);
+		if (r !== void 0 && !kc(await Ic(t.store, n.table, r), n.next ?? null)) throw new Ee({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: Nc(t),
+		subject: Pc(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await Mc(t.store, Ec(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, Vc = async (e, t) => {
-	let n = await zc(e, t);
-	if (!Pc(n.undone)) return { ok: !0 };
-	for (let e of Ic(n.changes)) {
-		let n = Lc(e);
+	return await Nc(t.store, Dc(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Hc = async (e, t) => {
+	let n = await Bc(e, t);
+	if (!Fc(n.undone)) return { ok: !0 };
+	for (let e of Lc(n.changes)) {
+		let n = Rc(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Hc = (e = process.env) => {
+}, Uc = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, Uc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Wc = "«redacted»", Gc = (e) => {
+}, Wc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Gc = "«redacted»", Kc = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = Uc.test(n) ? Wc : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Wc.test(n) ? Gc : r;
 	return t;
-}, Kc = (e) => {
+}, qc = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, qc = (e, t) => {
+}, Jc = (e, t) => {
 	if (t.op === "insert") {
-		let n = Kc(t.new);
+		let n = qc(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Kc(t.new) ?? Kc(t.old);
+		let n = qc(t.new) ?? qc(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, Jc = class {
+}, Yc = class {
 	mode;
 	capacity;
 	now;
@@ -5398,8 +5400,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Gc(e.old),
-			new: Gc(e.new),
+			old: Kc(e.old),
+			new: Kc(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -5412,23 +5414,23 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = qc(i, e);
+		for (let e of r) i = Jc(i, e);
 		return i;
 	}
-}, Yc, Xc = () => (Yc === void 0 && (Yc = new Jc(Hc())), Yc), Zc = (e) => {
-	Yc = e;
-}, Qc = (e) => {
-	let t = Xc();
+}, Xc, Zc = () => (Xc === void 0 && (Xc = new Yc(Uc())), Xc), Qc = (e) => {
+	Xc = e;
+}, $c = (e) => {
+	let t = Zc();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, $c = /* @__PURE__ */ new Set([
+}, el = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), el = (e) => {
+]), tl = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -5450,7 +5452,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return $c.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return el.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -5464,7 +5466,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, tl = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(tl), nl = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), rl = (e, t) => {
+}, nl = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(nl), rl = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), il = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -5472,10 +5474,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, il = (e, t) => {
+}, al = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = nl(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = rl(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -5491,10 +5493,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		}
 	}
 	return n;
-}, al = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, ol = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: rl(e, n)
-})), ol = (e, t, n) => {
+	value: il(e, n)
+})), sl = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -5503,7 +5505,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = nl(t, e.column);
+		let s = rl(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -5512,7 +5514,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = nl(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = rl(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -5532,15 +5534,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, sl = (e, t, n, r) => {
+}, cl = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = il(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = al(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, cl = class {
+}, ll = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -5548,7 +5550,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = il(this.shape, e), this.groups.clear();
+		this.state = al(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -5560,14 +5562,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = ol(this.shape, this.state, e);
+		let n = sl(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = sl(this.shape, this.state, e, t);
+		this.state = cl(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -5576,7 +5578,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return al(this.shape, this.state).map((e) => ({
+		return ol(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -5589,7 +5591,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, ll = T("_voltro_rebac_tuples", {
+}, ul = T("_voltro_rebac_tuples", {
 	id: v({ prefix: "rbct" }),
 	subjectId: E(),
 	relation: E(),
@@ -5601,7 +5603,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]).reactive(), ul = async (e, n, r, i) => n === null ? [] : (await e.query({
+]).reactive(), dl = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r), u("resourceId", i)),
 	order: [],
@@ -5613,16 +5615,16 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), dl = (e) => ({
+})), fl = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), fl = (e, t) => {
-	let n = t.getPolicy ?? Vo;
+}), pl = (e, t) => {
+	let n = t.getPolicy ?? Ho;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let o = n(a.resourceType), s = (e) => M.fail(new Ro({
+		let o = n(a.resourceType), s = (e) => M.fail(new zo({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -5630,17 +5632,17 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = dl(i.subject), u = {
+		let l = fl(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
 		};
-		return M.flatMap(M.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => qo(l, a.action, u, {
+		return M.flatMap(M.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Jo(l, a.action, u, {
 			policy: o,
 			tuples: e
 		}) ? r : s(c));
 	};
-}, pl = async (e, n, r) => n === null ? [] : (await e.query({
+}, ml = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r)),
 	order: [],
@@ -5652,18 +5654,18 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), ml = (e) => {
-	let t = e.getPolicy ?? Vo;
+})), hl = (e) => {
+	let t = e.getPolicy ?? Ho;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = dl(n);
-		return Yo(s, i, r, a, {
+		let s = fl(n);
+		return Xo(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, hl = (e) => {
+}, gl = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -5671,14 +5673,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, gl = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, _l = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, vl = class {
+}, _l = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, vl = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, yl = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, yl = async (e, t, n) => {
-	if (t.table !== e.watch.table || !gl(e.watch.on, t.op)) return "skipped-op";
+}, bl = async (e, t, n) => {
+	if (t.table !== e.watch.table || !_l(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -5687,26 +5689,26 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = _l(t);
+	let a = vl(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, bl = T("_voltro_wakeups", {
+}, xl = T("_voltro_wakeups", {
 	id: v({ prefix: "wakeup" }),
 	tenantId: E(),
 	kind: E(),
 	refId: E(),
 	wakeAt: D(),
 	status: E()
-}).index(["status", "wakeAt"]).index(["tenantId"]), xl = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await ec(e.store, t, e.batchLimit ?? 100);
+}).index(["status", "wakeAt"]).index(["tenantId"]), Sl = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await tc(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await Xs(e.store, t)) try {
+	for (let t of n) if (await Zs(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await Zs(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await Qs(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -5714,11 +5716,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, Sl = (e, t = 1e3) => {
+}, Cl = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await xl(e);
+				await Sl(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -5728,10 +5730,10 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, Cl = (e) => ({ wake: async () => {
+}, wl = (e) => ({ wake: async () => {
 	await e.start();
-} }), wl = (e) => new Promise((t) => setTimeout(t, e)), Tl = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? wl, i = e.spawnImpl ?? wt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), Tl = (e) => new Promise((t) => setTimeout(t, e)), El = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Tl, i = e.spawnImpl ?? Tt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -5785,11 +5787,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		},
 		stop: m
 	};
-}, El = async (e) => {
+}, Dl = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await tc(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await nc(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Dl = (e, t = Date.now) => {
+}, Ol = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -5801,7 +5803,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Ol = () => {
+}, kl = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -5819,8 +5821,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, kl = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Al = (e, t, n, r) => new Promise((i, a) => {
-	let o = Xe.request({
+}, Al = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), jl = (e, t, n, r) => new Promise((i, a) => {
+	let o = Ze.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -5830,8 +5832,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), jl = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = Xe.request({
+}), Ml = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = Ze.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -5845,21 +5847,21 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Ml = (e) => {
-	let t = kl({
+}), Nl = (e) => {
+	let t = Al({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = Xe.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Al(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = Ze.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => jl(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => jl(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Ml(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Nl = async (e) => {
+}, Pl = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -5876,15 +5878,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, Pl = async (e) => {
-	let t = Cl(e.supervisor), n = await xl({
+}, Fl = async (e) => {
+	let t = wl(e.supervisor), n = await Sl({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await El({
+	let r = await Dl({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -5894,12 +5896,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, Fl = async (e) => {
-	let t = Dl(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Ol(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Il = async (e) => {
+	let t = Ol(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = kl(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Ml({
+	}, s = Nl({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -5918,7 +5920,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Nl(e.store)), await Pl({
+				if (a && (i = await Pl(e.store)), await Fl({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -5926,7 +5928,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await rc(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await ic(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -5941,14 +5943,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Il = (e) => e, Ll = class extends L.TaggedError()("AnalyticsError", {
+}, Ll = (e) => e, Rl = class extends L.TaggedError()("AnalyticsError", {
 	provider: L.String,
 	operation: L.String,
 	cause: L.String
-}) {}, Rl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, zl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: L.String,
 	capability: L.String
-}) {}, zl = class extends Be.Tag("@voltro/AnalyticsSink")() {}, Bl = (e, t) => ({
+}) {}, Bl = class extends Ve.Tag("@voltro/AnalyticsSink")() {}, Vl = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -5967,20 +5969,20 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Vl = () => M.gen(function* () {
-	let e = yield* zl, t = yield* M.serviceOption(we), n = F.match(t, {
+}), Hl = () => M.gen(function* () {
+	let e = yield* Bl, t = yield* M.serviceOption(Te), n = F.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : Bl(e, n);
-}), Hl = "noop", Ul = () => {
-	let e = (e) => M.fail(new Rl({
-		provider: Hl,
+	return n === null ? e : Vl(e, n);
+}), Ul = "noop", Wl = () => {
+	let e = (e) => M.fail(new zl({
+		provider: Ul,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Hl,
+			provider: Ul,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -5994,8 +5996,8 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, Wl = (e) => {
-	if (e.length === 0) return Ul();
+}, Gl = (e) => {
+	if (e.length === 0) return Wl();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -6012,7 +6014,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? M.fail(new Rl({
+		return r === void 0 ? M.fail(new zl({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -6035,11 +6037,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Gl = (e) => {
+}, Kl = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => Wl(e.map((e) => e.build(t))),
+		build: (t) => Gl(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => M.forEach(e, (e) => e.initialize ? e.initialize(t) : M.void, {
 			concurrency: 1,
@@ -6050,15 +6052,15 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, Kl = {
-	kind: "noop",
-	build: () => Ul()
 }, ql = {
+	kind: "noop",
+	build: () => Wl()
+}, Jl = {
 	tables: [],
 	detach: () => {}
-}, Jl = (e) => {
+}, Yl = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return ql;
+	if (i === void 0 || i.tables.length === 0) return Jl;
 	let a = e.run ?? ((e) => M.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -6082,11 +6084,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, Yl = (e) => {
+}, Xl = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = el({
+		let t = tl({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -6108,47 +6110,47 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, Xl = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Zl = class extends L.TaggedError()("AggregateStale", {
+}, Zl = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Ql = class extends L.TaggedError()("AggregateStale", {
 	name: L.String,
 	ageMs: L.Number,
 	maxAgeMs: L.Number
-}) {}, Ql = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, $l = class extends L.TaggedError()("AggregateError", {
+}) {}, $l = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, eu = class extends L.TaggedError()("AggregateError", {
 	name: L.String,
 	operation: L.String,
 	cause: L.String
-}) {}, eu = class extends Be.Tag("@voltro/AggregateRegistry")() {}, tu = (e) => M.gen(function* () {
-	return (yield* eu).getHandle(e);
-}), nu = (e, n, r) => {
+}) {}, tu = class extends Ve.Tag("@voltro/AggregateRegistry")() {}, nu = (e) => M.gen(function* () {
+	return (yield* tu).getHandle(e);
+}), ru = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = u("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, ru = (e, n) => {
+}, iu = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
 	let r = S("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, iu = (e) => M.runPromiseExit(e).then((e) => {
-	if (We.isSuccess(e)) return e.value;
+}, au = (e) => M.runPromiseExit(e).then((e) => {
+	if (Ge.isSuccess(e)) return e.value;
 	let t = A.failureOption(e.cause);
 	throw F.isSome(t) ? t.value : A.squash(e.cause);
-}), au = (e, t) => e.pipe(M.provideService(we, t)), ou = async (e, t, n) => {
-	let r = await M.runPromise(ke(t, e.guards, n));
+}), ou = (e, t) => e.pipe(M.provideService(Te, t)), su = async (e, t, n) => {
+	let r = await M.runPromise(Ae(t, e.guards, n));
 	if (r) throw r;
-}, su = async (e) => {
-	if (Mn() === void 0) return e;
-	let t = await iu(Pn(e.subject, (e) => {
+}, cu = async (e) => {
+	if (Nn() === void 0) return e;
+	let t = await au(Fn(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, cu = async (e) => {
+}, lu = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
@@ -6163,7 +6165,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 				traceId: e.requestContext.traceId,
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId }
 			}), r = await M.runPromiseExit(n);
-			if (We.isSuccess(r)) return r.value;
+			if (Ge.isSuccess(r)) return r.value;
 			throw A.squash(r.cause);
 		}
 		return await e.runExecutor();
@@ -6177,28 +6179,28 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			status: r
 		});
 	}
-}, lu = /* @__PURE__ */ new Set([1213, 1205]), uu = /* @__PURE__ */ new Set([
+}, uu = /* @__PURE__ */ new Set([1213, 1205]), du = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), du = (e) => {
+]), fu = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && lu.has(e.errno) || typeof e.code == "string" && uu.has(e.code) || typeof e.sqlState == "string" && uu.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && uu.has(e.errno) || typeof e.code == "string" && du.has(e.code) || typeof e.sqlState == "string" && du.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, fu = 3, pu = (e) => new Promise((t) => setTimeout(t, e)), mu = async (e, t) => {
-	let n = t?.delay ?? ((e) => pu(e * 20 + Math.floor(Math.random() * 30)));
+}, pu = 3, mu = (e) => new Promise((t) => setTimeout(t, e)), hu = async (e, t) => {
+	let n = t?.delay ?? ((e) => mu(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= fu || !du(e)) throw e;
+		if (t >= pu || !fu(e)) throw e;
 		await n(t);
 	}
-}, hu = (e) => (t, n, r) => cu({
+}, gu = (e) => (t, n, r) => lu({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -6206,11 +6208,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await ou(t.descriptor, r.subject, n);
-		let i = await su(r), a = [], o = await mu(async () => (a.length = 0, e.store.transactional(async (o) => {
+		await su(t.descriptor, r.subject, n);
+		let i = await cu(r), a = [], o = await hu(async () => (a.length = 0, e.store.transactional(async (o) => {
 			let s = e.undoCapture?.(o), c = s ? s.tx : o, l = e.buildContext(i, c, { afterCommit: (e) => {
 				a.push(e);
-			} }), u = t.executor(n, l), d = M.isEffect(u) ? await e.runEffect(au(u, r.subject), l.store) : await u;
+			} }), u = t.executor(n, l), d = M.isEffect(u) ? await e.runEffect(ou(u, r.subject), l.store) : await u;
 			return s && await s.persist(l.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -6220,33 +6222,33 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		for (let e of a) await e();
 		return o;
 	}
-}), gu = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, _u = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, vu = (e) => {
+}), _u = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, vu = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, yu = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, yu = (e, t) => (n) => () => {
+}, bu = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
-	return !r || r.length === 0 ? Promise.resolve(null) : M.runPromise(ke(n, r, t));
-}, bu = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = yu(t, n)(r.subject), o = async () => {
+	return !r || r.length === 0 ? Promise.resolve(null) : M.runPromise(Ae(n, r, t));
+}, xu = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = bu(t, n)(r.subject), o = async () => {
 		let i = await a();
 		if (i) throw i;
-		let o = e.buildContext(await su(r)), s = t.executor(n, o);
-		return M.isEffect(s) ? M.runPromise(e.provideEffect(au(s, r.subject), o.store)) : gu(await Promise.resolve(s));
+		let o = e.buildContext(await cu(r)), s = t.executor(n, o);
+		return M.isEffect(s) ? M.runPromise(e.provideEffect(ou(s, r.subject), o.store)) : _u(await Promise.resolve(s));
 	}, s = (n) => {
-		let i = gu(n);
-		return _u(i) ? e.finalize(i, r) : {
+		let i = _u(n);
+		return vu(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: vu(t),
+			dependentTables: yu(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: o
 		};
 	}, c = () => {
 		let a = t.executor(n, i);
-		return M.isEffect(a) ? e.provideEffect(au(a, r.subject), i.store).pipe(M.map(s)) : a instanceof Promise ? M.promise(() => a).pipe(M.map(s)) : s(a);
+		return M.isEffect(a) ? e.provideEffect(ou(a, r.subject), i.store).pipe(M.map(s)) : a instanceof Promise ? M.promise(() => a).pipe(M.map(s)) : s(a);
 	}, l = () => {
 		let e = t.descriptor.guards;
-		return !e || e.length === 0 ? c() : ke(r.subject, e, n).pipe(M.flatMap((e) => {
+		return !e || e.length === 0 ? c() : Ae(r.subject, e, n).pipe(M.flatMap((e) => {
 			if (e) return M.fail(e);
 			let t = c();
 			return M.isEffect(t) ? t : M.succeed(t);
@@ -6265,7 +6267,7 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, xu = (e) => (t, n, r) => cu({
+}, Su = (e) => (t, n, r) => lu({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -6273,16 +6275,16 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await ou(t.descriptor, r.subject, n);
-		let i = e.buildContext(await su(r)), a = t.executor(n, i);
-		return M.isEffect(a) ? e.runEffect(au(a, r.subject), i.store) : a;
+		await su(t.descriptor, r.subject, n);
+		let i = e.buildContext(await cu(r)), a = t.executor(n, i);
+		return M.isEffect(a) ? e.runEffect(ou(a, r.subject), i.store) : a;
 	}
-}), Su = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Cu = (e) => typeof e == "string" && e.length > 0 ? e : null, wu = [
+}), Cu = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, wu = (e) => typeof e == "string" && e.length > 0 ? e : null, Tu = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], Tu = (e) => wu.some((t) => t in e), Eu = (e, t, n) => {
+], Eu = (e) => Tu.some((t) => t in e), Du = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -6297,14 +6299,14 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!Tu(e)) return {
+	if (!Eu(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = Cu(e.updatedBy) ?? Cu(e.createdBy), o = Su(e.updatedAt) ?? Su(e.createdAt);
+	let a = wu(e.updatedBy) ?? wu(e.createdBy), o = Cu(e.updatedAt) ?? Cu(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -6316,12 +6318,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, Du = (e, t) => {
+}, Ou = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: Cu(e.actor) ?? Cu(e.changedBy) },
-			at: Su(e.at) ?? Su(e.changedAt),
+			actor: { id: wu(e.actor) ?? wu(e.changedBy) },
+			at: Cu(e.at) ?? Cu(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -6336,12 +6338,12 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, Ou = (e) => {
+}, ku = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, ku = (e) => {
+}, Au = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -6361,11 +6363,11 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: Ou(e),
+		id: ku(e),
 		fields: t
 	};
-}, Au = (e) => {
-	let t = e.map(ku);
+}, ju = (e) => {
+	let t = e.map(Au);
 	return {
 		rows: t,
 		summary: {
@@ -6374,21 +6376,21 @@ var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, ju = class extends Error {
+}, Mu = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, Mu = async (e, t) => {
+}, Nu = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new ju();
+			throw n = await t(e), r = !0, new Mu();
 		});
 	} catch (e) {
-		if (!(e instanceof ju)) throw e;
+		if (!(e instanceof Mu)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, Nu = "framework-runtime";
+}, Pu = "framework-runtime";
 //#endregion
-export { Ai as API_KEYS_TABLE, Ro as AccessDenied, $l as AggregateError, cl as AggregateMaintainer, Ql as AggregateNotFound, eu as AggregateRegistry, Zl as AggregateStale, Rl as AnalyticsCapabilityNotSupported, Ll as AnalyticsError, zl as AnalyticsSink, X as CONNECTIONS_TABLE, Ia as CONNECTION_GRANTS_TABLE, ks as CircuitBreaker, Ds as CircuitOpen, ao as ConnectionNotConnected, zr as DEFAULT_MAX_RPC_BODY_BYTES, ro as DEFAULT_REFRESH_SKEW_MS, kn as DEFAULT_ROW_FILTER_RETRY, ac as DORMANCY_WAKEUP_TENANT, ys as DeleteBuilder, Vn as Dispatcher, qi as EffectStore, vo as GRANT_TTL_MS, Wt as InMemoryDataStore, Mt as IndexedMatcher, Tt as LinearScanMatcher, Ke as MetricBoundaries, Hl as NOOP_ANALYTICS_PROVIDER, Nn as NO_ROW_FILTER, fs as NoRowFound, xa as OUTBOX_ATTEMPTS_TABLE, Oa as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, ps as OptimisticLockError, Lo as REBAC_ADMIN_SCOPE, io as REFRESH_LEASE_MS, Nu as RUNTIME_NAME, vl as ReactionRateLimiter, br as ReplicatedDataStore, On as RowFilterUnavailable, ic as SCHEDULE_SUBJECT, Ui as SYSTEM_SUBJECT, _s as SelectBuilder, Gi as StoreOperationFailed, Ft as SubscriptionRegistry, Ki as TableValidationFailed, Wi as TenantScopeViolation, Jc as TimelineRecorder, Dc as UndoBoundaryError, kc as UndoStack, vs as UpdateBuilder, as as VOLTRO_AUDIT_MIXIN_ID, os as VOLTRO_SOFT_DELETE_MIXIN_ID, ss as VOLTRO_TENANT_MIXIN_ID, tr as _connectionStreamCount, nr as _resetConnectionSubjectsForTest, Ra as _voltroConnectionGrantsTable, Fa as _voltroConnectionsTable, ll as _voltroRebacTuplesTable, gc as _voltroScheduleClaimsTable, hc as _voltroScheduleRunsTable, _c as _voltroTracesTable, vc as _voltroUndoLogTable, bl as _voltroWakeupsTable, ga as _voltroWorkflowEventDeliveriesTable, ha as _voltroWorkflowEventsTable, Hi as apiKeyManagementRoutes, Cs as applyDefined, ol as applyDelta, jc as applyInverse, Mc as applyInverses, Ln as applyRowFilter, Rn as applyRowFilterToDescriptor, ru as applySoftDeleteScope, nu as applyTenantScope, Bc as applyUndoInvocation, Jo as assertCan, Ha as assertConnectionCipherConfigured, Jl as attachAnalyticsMirror, Vr as awaitServerListening, Da as backoffMs, So as beginOAuthConnect, Jn as bindConnectionSubject, Rr as bindMutation, Ar as bindStream, kr as bindSubscription, Dr as bindSubscriptionUntyped, il as buildIvmState, Au as buildPreview, fl as buildRebacInterceptor, ml as buildRebacReadFilter, mr as buildSubjectKey, Kr as buildTracingLayer, si as cachedBackend, qo as can, qs as cancelWakeup, el as classifyShape, lo as clearConnectionRefreshFlights, Uo as clearResourcePolicies, i as clearRetentions, Ms as clearSystemStoreHandle, Hs as compileCron, Co as completeOAuthConnect, Gl as composeAnalytics, Wl as composeAnalyticsSinks, yo as connectionCallbackPath, Va as connectionLabel, rr as connectionSubjectsSnapshot, Nl as countRunningWorkflows, Sn as counter, yr as currentRoutingContext, ur as currentTraceContext, zi as dataStoreApiKeyStore, Si as dataStoreIdempotencyStore, Di as dataStoreKvStore, _i as decryptField, Yl as defineAggregate, Ba as defineConnection, ua as defineEventTrigger, wa as defineOutboxHandler, hl as defineReaction, Bo as defineResourcePolicy, Vs as defineSchedule, Il as defineSubscriber, zn as deliveredRowCount, ui as deriveKey, ku as diffChange, Ma as drainOutbox, ec as dueWakeups, Ko as effectiveRelations, ds as emptySchemaRegistry, q as encryptField, ti as envSecretsBackend, to as exchangeAuthorizationCode, sr as externalSpanFromTraceparent, Kt as extractDbCause, Pt as fingerprintFor, Za as forgetCredential, ar as formatTraceparent, Ac as forwardChangeFromCdc, Bi as frameworkApiKeyStrategy, Cn as gauge, Mi as generateApiKeyToken, Do as getConnectionResolver, Yn as getConnectionSubject, hi as getFieldCipher, Vo as getResourcePolicy, Mn as getRowFilter, Ns as getSystemStoreHandle, Xc as getTimelineRecorder, es as getTupleSource, $ as groupKeyOf, wn as histogramMetric, Du as historyProvenance, ci as httpSecretsBackend, St as inspectWorkflow, ts as installPolicyGuardResolver, er as interruptConnectionStreams, Tc as invertChange, Xl as isAggregateDefinition, qt as isForeignKeyViolation, El as isIdleNow, Fr as isInfraError, Oc as isSafeToApply, zs as isScheduleDefinition, da as isWorkflowEventTriggerDefinition, rl as ivmValue, Eu as lastWriteProvenance, Qa as listConnectionStates, Ho as listResourcePolicies, ee as listRetentions, ul as loadResourceTuples, pl as loadSubjectTuples, Fs as localityAwareSelector, xu as makeActionRunner, cc as makeAdvisoryLockCoordinator, di as makeAesCipher, Fi as makeApiKeyService, Jt as makeAppAccess, Oi as makeAsyncKv, ei as makeBufferingSpanProcessor, Ua as makeConnectionRegistry, ko as makeConnectionResolver, Ao as makeConnectionsFacade, mc as makeCoordinatedScheduler, rs as makeDataLoader, Io as makeDisconnectConnectionExecutor, Xi as makeEffectStoreLayer, _a as makeEventsFacade, fi as makeFieldCipher, bs as makeFluentStore, Dl as makeIdleGate, oa as makeLazyWorkflowFacade, No as makeListConnectionsExecutor, hu as makeMutationRunner, Ea as makeOutboxFacade, ia as makePostCommitWorkflowFacade, Cl as makeProcessAdapter, bu as makeQueryDescriptorProducer, yu as makeQueryReauthorizer, Ol as makeRouterActivity, cs as makeSchemaRegistry, Po as makeStartConnectionExecutor, Fo as makeSubmitTokenExecutor, Cc as makeUndoCapture, kl as makeWakeGate, Ml as makeWakeProxyServer, ra as makeWorkflowFacade, aa as makeWorkflowFacadeWithCallerContext, sa as makeWorkflowHandlers, ca as makeWorkflowLayers, $i as makeWorkflowRunHandle, Js as markWakeupFired, al as materializeIvm, Ii as memoryApiKeyStore, Ls as memoryReplicationAdapter, pr as memoryRywPositionStore, Us as nextFiring, tc as nextWakeup, Tl as nodeProcessSupervisor, Ul as noopAnalytics, Kl as noopAnalyticsSpec, ki as noopKv, Zn as onBindConnectionSubject, Ca as outboxAttemptsTable, ba as outboxTable, or as parseTraceparent, dr as powerOfTwoSelector, Mu as previewInRollback, qa as projectConnectionState, rc as pruneWakeups, Wo as rebacPolicyGraph, vn as recordSample, U as recordSubscriptionActive, bn as recordSubscriptionDelivery, Qc as recordTimelineEvent, Gc as redactRow, hr as redisRywPositionStore, Vc as redoUndoInvocation, no as refreshAccessToken, $n as registerConnectionStream, oe as registerRetention, Ks as registerWakeup, Zs as releaseWakeup, fr as replicaHealth, ii as resetSecretsBackend, po as resolveConnection, Oo as resolveConnectionForSubject, Is as resolveCurrentRegion, Yt as resolveDependentTables, xo as resolveRedirectUri, sl as resolveRescan, Pn as resolveRowFilterScope, Fn as resolveRowFilterScopeFor, ai as resolveSecret, oi as resolveSecretSync, li as resolveSecretsBackend, Hc as resolveTimelineMode, ce as retentionTtlMsFromEnv, qc as reverseEventOverRows, Xo as revokedIds, Ps as runAsSystem, Pl as runOrchestratorTick, iu as runProvidedEffect, yl as runReaction, Fl as runSingleNodeOrchestrator, Sl as runWakeLoop, mu as runWithDeadlockRetry, vr as runWithRoutingContext, lr as runWithTraceContext, bo as sanitizeRedirectTo, pc as scheduleCoordinated, Eo as setConnectionResolver, mi as setFieldCipher, jn as setRowFilter, ri as setSecretsBackend, js as setSystemStoreHandle, Zc as setTimelineRecorderForTest, $o as setTupleSource, ji as sha256Hex, oc as singleCoordinator, En as snapshotMetrics, Dn as snapshotMetricsSync, Br as startRpcServer, uc as startScheduler, Ya as storeCredential, wo as sweepExpiredGrants, ue as sweepRetention, Ec as synthesizeInverse, is as tracingHttpClientLayer, la as triggerWorkflow, Xs as tryClaimWakeup, Xn as unbindConnectionSubject, yc as undoCaptureEnabled, Rc as undoLogExecutor, tu as useAggregate, Vl as useAnalytics, Yo as visibleRows, xl as wakeDueOnce, su as withRowFilter, Zi as workflowToRpc, Sc as wrapCaptureStore, Es as wrapStoreWithMixinBehaviour };
+export { ji as API_KEYS_TABLE, zo as AccessDenied, eu as AggregateError, ll as AggregateMaintainer, $l as AggregateNotFound, tu as AggregateRegistry, Ql as AggregateStale, zl as AnalyticsCapabilityNotSupported, Rl as AnalyticsError, Bl as AnalyticsSink, X as CONNECTIONS_TABLE, La as CONNECTION_GRANTS_TABLE, As as CircuitBreaker, Os as CircuitOpen, oo as ConnectionNotConnected, Br as DEFAULT_MAX_RPC_BODY_BYTES, io as DEFAULT_REFRESH_SKEW_MS, An as DEFAULT_ROW_FILTER_RETRY, oc as DORMANCY_WAKEUP_TENANT, bs as DeleteBuilder, Hn as Dispatcher, Ji as EffectStore, yo as GRANT_TTL_MS, Gt as InMemoryDataStore, Nt as IndexedMatcher, Et as LinearScanMatcher, qe as MetricBoundaries, Ul as NOOP_ANALYTICS_PROVIDER, Pn as NO_ROW_FILTER, ps as NoRowFound, Sa as OUTBOX_ATTEMPTS_TABLE, ka as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, ms as OptimisticLockError, Ro as REBAC_ADMIN_SCOPE, ao as REFRESH_LEASE_MS, Pu as RUNTIME_NAME, yl as ReactionRateLimiter, xr as ReplicatedDataStore, kn as RowFilterUnavailable, ac as SCHEDULE_SUBJECT, Wi as SYSTEM_SUBJECT, vs as SelectBuilder, Ki as StoreOperationFailed, It as SubscriptionRegistry, qi as TableValidationFailed, Gi as TenantScopeViolation, Yc as TimelineRecorder, Oc as UndoBoundaryError, Ac as UndoStack, ys as UpdateBuilder, os as VOLTRO_AUDIT_MIXIN_ID, ss as VOLTRO_SOFT_DELETE_MIXIN_ID, cs as VOLTRO_TENANT_MIXIN_ID, nr as _connectionStreamCount, rr as _resetConnectionSubjectsForTest, za as _voltroConnectionGrantsTable, Ia as _voltroConnectionsTable, ul as _voltroRebacTuplesTable, _c as _voltroScheduleClaimsTable, gc as _voltroScheduleRunsTable, vc as _voltroTracesTable, yc as _voltroUndoLogTable, xl as _voltroWakeupsTable, _a as _voltroWorkflowEventDeliveriesTable, ga as _voltroWorkflowEventsTable, Ui as apiKeyManagementRoutes, ws as applyDefined, sl as applyDelta, Mc as applyInverse, Nc as applyInverses, Rn as applyRowFilter, zn as applyRowFilterToDescriptor, iu as applySoftDeleteScope, ru as applyTenantScope, Vc as applyUndoInvocation, Yo as assertCan, Ua as assertConnectionCipherConfigured, Yl as attachAnalyticsMirror, Hr as awaitServerListening, Oa as backoffMs, Co as beginOAuthConnect, Yn as bindConnectionSubject, zr as bindMutation, jr as bindStream, Ar as bindSubscription, Or as bindSubscriptionUntyped, al as buildIvmState, ju as buildPreview, pl as buildRebacInterceptor, hl as buildRebacReadFilter, hr as buildSubjectKey, qr as buildTracingLayer, ci as cachedBackend, Jo as can, Js as cancelWakeup, tl as classifyShape, uo as clearConnectionRefreshFlights, Wo as clearResourcePolicies, i as clearRetentions, Ns as clearSystemStoreHandle, Us as compileCron, wo as completeOAuthConnect, Kl as composeAnalytics, Gl as composeAnalyticsSinks, bo as connectionCallbackPath, Ha as connectionLabel, ir as connectionSubjectsSnapshot, Pl as countRunningWorkflows, Cn as counter, br as currentRoutingContext, dr as currentTraceContext, Bi as dataStoreApiKeyStore, Ci as dataStoreIdempotencyStore, Oi as dataStoreKvStore, vi as decryptField, Xl as defineAggregate, Va as defineConnection, da as defineEventTrigger, Ta as defineOutboxHandler, gl as defineReaction, Vo as defineResourcePolicy, Hs as defineSchedule, Ll as defineSubscriber, Bn as deliveredRowCount, di as deriveKey, Au as diffChange, Na as drainOutbox, tc as dueWakeups, qo as effectiveRelations, fs as emptySchemaRegistry, q as encryptField, ni as envSecretsBackend, no as exchangeAuthorizationCode, cr as externalSpanFromTraceparent, qt as extractDbCause, Ft as fingerprintFor, Qa as forgetCredential, or as formatTraceparent, jc as forwardChangeFromCdc, Vi as frameworkApiKeyStrategy, wn as gauge, Ni as generateApiKeyToken, Oo as getConnectionResolver, Xn as getConnectionSubject, gi as getFieldCipher, Ho as getResourcePolicy, Nn as getRowFilter, Ps as getSystemStoreHandle, Zc as getTimelineRecorder, ts as getTupleSource, $ as groupKeyOf, Tn as histogramMetric, Ou as historyProvenance, li as httpSecretsBackend, Ct as inspectWorkflow, ns as installPolicyGuardResolver, tr as interruptConnectionStreams, Ec as invertChange, Zl as isAggregateDefinition, Jt as isForeignKeyViolation, Dl as isIdleNow, Ir as isInfraError, kc as isSafeToApply, Bs as isScheduleDefinition, fa as isWorkflowEventTriggerDefinition, il as ivmValue, Du as lastWriteProvenance, $a as listConnectionStates, Uo as listResourcePolicies, ee as listRetentions, dl as loadResourceTuples, ml as loadSubjectTuples, Is as localityAwareSelector, Su as makeActionRunner, lc as makeAdvisoryLockCoordinator, fi as makeAesCipher, Ii as makeApiKeyService, Yt as makeAppAccess, ki as makeAsyncKv, ti as makeBufferingSpanProcessor, Wa as makeConnectionRegistry, Ao as makeConnectionResolver, jo as makeConnectionsFacade, hc as makeCoordinatedScheduler, is as makeDataLoader, Lo as makeDisconnectConnectionExecutor, Zi as makeEffectStoreLayer, va as makeEventsFacade, pi as makeFieldCipher, xs as makeFluentStore, Ol as makeIdleGate, sa as makeLazyWorkflowFacade, Po as makeListConnectionsExecutor, gu as makeMutationRunner, Da as makeOutboxFacade, aa as makePostCommitWorkflowFacade, wl as makeProcessAdapter, xu as makeQueryDescriptorProducer, bu as makeQueryReauthorizer, kl as makeRouterActivity, ls as makeSchemaRegistry, Fo as makeStartConnectionExecutor, Io as makeSubmitTokenExecutor, wc as makeUndoCapture, Al as makeWakeGate, Nl as makeWakeProxyServer, ia as makeWorkflowFacade, oa as makeWorkflowFacadeWithCallerContext, ca as makeWorkflowHandlers, la as makeWorkflowLayers, ea as makeWorkflowRunHandle, Ys as markWakeupFired, ol as materializeIvm, Li as memoryApiKeyStore, Rs as memoryReplicationAdapter, mr as memoryRywPositionStore, Ws as nextFiring, nc as nextWakeup, El as nodeProcessSupervisor, Wl as noopAnalytics, ql as noopAnalyticsSpec, Ai as noopKv, Qn as onBindConnectionSubject, wa as outboxAttemptsTable, xa as outboxTable, sr as parseTraceparent, fr as powerOfTwoSelector, Nu as previewInRollback, Ja as projectConnectionState, ic as pruneWakeups, Go as rebacPolicyGraph, yn as recordSample, U as recordSubscriptionActive, xn as recordSubscriptionDelivery, $c as recordTimelineEvent, Kc as redactRow, gr as redisRywPositionStore, Hc as redoUndoInvocation, ro as refreshAccessToken, er as registerConnectionStream, oe as registerRetention, qs as registerWakeup, Qs as releaseWakeup, pr as replicaHealth, ai as resetSecretsBackend, mo as resolveConnection, ko as resolveConnectionForSubject, Ls as resolveCurrentRegion, Xt as resolveDependentTables, So as resolveRedirectUri, cl as resolveRescan, Fn as resolveRowFilterScope, In as resolveRowFilterScopeFor, oi as resolveSecret, si as resolveSecretSync, ui as resolveSecretsBackend, Uc as resolveTimelineMode, ce as retentionTtlMsFromEnv, Jc as reverseEventOverRows, Zo as revokedIds, Fs as runAsSystem, Fl as runOrchestratorTick, au as runProvidedEffect, bl as runReaction, Il as runSingleNodeOrchestrator, Cl as runWakeLoop, hu as runWithDeadlockRetry, yr as runWithRoutingContext, ur as runWithTraceContext, xo as sanitizeRedirectTo, mc as scheduleCoordinated, Do as setConnectionResolver, hi as setFieldCipher, Mn as setRowFilter, ii as setSecretsBackend, Ms as setSystemStoreHandle, Qc as setTimelineRecorderForTest, es as setTupleSource, Mi as sha256Hex, sc as singleCoordinator, Dn as snapshotMetrics, On as snapshotMetricsSync, Vr as startRpcServer, dc as startScheduler, Xa as storeCredential, To as sweepExpiredGrants, de as sweepRetention, Dc as synthesizeInverse, as as tracingHttpClientLayer, ua as triggerWorkflow, Zs as tryClaimWakeup, Zn as unbindConnectionSubject, bc as undoCaptureEnabled, zc as undoLogExecutor, nu as useAggregate, Hl as useAnalytics, Xo as visibleRows, Sl as wakeDueOnce, cu as withRowFilter, Qi as workflowToRpc, Cc as wrapCaptureStore, Ds as wrapStoreWithMixinBehaviour };