@voltro/runtime 0.11.2 → 0.11.3

package/dist/index.js

@@ -1,24 +1,24 @@
-import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as ne, missingConflictColumns as w, missingRequiredColumns as re, neq as T, or as ie, queryFor as ae, raiseChangeListenerCeiling as oe, registerRetention as se, requireTable as ce, retentionTtlMsFromEnv as le, serializeArraysForWrite as ue, stampGeneratedId as de, sweepRetention as fe, table as E, text as D, timestamp as O, walkLeaves as pe } from "@voltro/database";
-import { createCipheriv as me, createDecipheriv as he, createHash as ge, randomBytes as _e, randomUUID as ve, scryptSync as ye } from "node:crypto";
-import { EventEmitter as be } from "node:events";
-import { ADMIN_SCOPE as xe, ConnectionHandshakeFailed as k, ConnectionInfo as Se, ConnectionKindMismatch as Ce, ConnectionNotDeclared as we, ConnectionSubjectRequired as Te, SubjectService as Ee, UndoConflict as De, UndoForbidden as Oe, UndoNotFound as ke, WorkflowRunHandleSchema as Ae, checkGuardsEffect as je, diffRows as Me, effectiveScopes as Ne, hasEffectiveScope as Pe, isIdKeyed as Fe, publishServerError as Ie, requireScope as Le, setPolicyGuardResolver as Re, systemSubject as ze, tsMs as Be } from "@voltro/protocol";
-import { createLogger as A } from "@voltro/logger";
-import { Cause as j, Clock as Ve, Context as He, Cron as M, Deferred as Ue, Duration as We, Effect as N, Either as Ge, Exit as Ke, Layer as P, ManagedRuntime as qe, Metric as F, MetricBoundaries as Je, MetricState as Ye, Option as I, Ref as L, Schedule as Xe, Schema as R, Stream as z, Tracer as Ze } from "effect";
-import * as Qe from "node:http";
-import { createServer as $e } from "node:http";
-import { HttpClient as et, HttpClientRequest as tt, HttpLayerRouter as B, HttpServer as nt, HttpServerRequest as rt, HttpServerResponse as V } from "@effect/platform";
-import { NodeContext as it, NodeHttpServer as at, NodeRuntime as ot } from "@effect/platform-node";
-import { Rpc as st, RpcSerialization as ct, RpcServer as lt } from "@effect/rpc";
-import { defineRestRoute as ut, dispatchSharedPath as dt, requireScope as ft } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as pt } from "node:async_hooks";
-import { SpanKind as mt, SpanStatusCode as ht } from "@opentelemetry/api";
-import { Kv as gt, KvError as _t, KvStore as vt, layerConnections as yt, layerMemory as bt, layerRedis as xt } from "@voltro/kv";
-import { apiKeyStrategy as St } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as Ct, inspectWorkflow as wt } from "@voltro/workflow";
-import { ArrayFormatter as Tt } from "effect/ParseResult";
-import { spawn as Et } from "node:child_process";
+import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as w, missingConflictColumns as T, missingRequiredColumns as ne, neq as re, or as E, queryFor as ie, raiseChangeListenerCeiling as ae, registerRetention as oe, requireTable as se, retentionTtlMsFromEnv as ce, serializeArraysForWrite as le, stampGeneratedId as ue, sweepRetention as de, table as D, text as O, timestamp as k, walkLeaves as fe } from "@voltro/database";
+import { createCipheriv as pe, createDecipheriv as me, createHash as he, randomBytes as ge, randomUUID as _e, scryptSync as ve } from "node:crypto";
+import { EventEmitter as ye } from "node:events";
+import { ADMIN_SCOPE as be, ConnectionHandshakeFailed as A, ConnectionInfo as xe, ConnectionKindMismatch as Se, ConnectionNotDeclared as Ce, ConnectionSubjectRequired as we, SubjectService as Te, UndoConflict as Ee, UndoForbidden as De, UndoNotFound as Oe, WorkflowRunHandleSchema as ke, checkGuardsEffect as Ae, diffRows as je, effectiveScopes as Me, hasEffectiveScope as Ne, isIdKeyed as Pe, publishServerError as Fe, requireScope as Ie, setPolicyGuardResolver as Le, systemSubject as Re, tsMs as ze } from "@voltro/protocol";
+import { createLogger as j } from "@voltro/logger";
+import { Cause as M, Clock as Be, Context as Ve, Cron as He, Deferred as Ue, Duration as We, Effect as N, Either as Ge, Exit as Ke, Layer as P, ManagedRuntime as qe, Metric as F, MetricBoundaries as Je, MetricState as Ye, Option as Xe, Ref as I, Schedule as Ze, Schema as L, Stream as R, Tracer as Qe } from "effect";
+import * as $e from "node:http";
+import { createServer as et } from "node:http";
+import { HttpClient as tt, HttpClientRequest as nt, HttpLayerRouter as z, HttpServer as rt, HttpServerRequest as it, HttpServerResponse as B } from "@effect/platform";
+import { NodeContext as at, NodeHttpServer as ot, NodeRuntime as st } from "@effect/platform-node";
+import { Rpc as ct, RpcSerialization as lt, RpcServer as ut } from "@effect/rpc";
+import { defineRestRoute as dt, dispatchSharedPath as ft, requireScope as pt } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as mt } from "node:async_hooks";
+import { SpanKind as ht, SpanStatusCode as gt } from "@opentelemetry/api";
+import { Kv as _t, KvError as vt, KvStore as yt, layerConnections as bt, layerMemory as xt, layerRedis as St } from "@voltro/kv";
+import { apiKeyStrategy as Ct } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as wt, inspectWorkflow as Tt } from "@voltro/workflow";
+import { ArrayFormatter as Et } from "effect/ParseResult";
+import { spawn as Dt } from "node:child_process";
 //#region src/matcher.ts
-var Dt = class {
+var Ot = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -59,9 +59,9 @@ var Dt = class {
 		});
 		return { perTable: e };
 	}
-}, Ot = (e) => {
+}, kt = (e) => {
 	let t = [];
-	for (let n of pe(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
+	for (let n of fe(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
 		values: [n.value]
 	}), n.op === "in" && t.push({
@@ -69,18 +69,18 @@ var Dt = class {
 		values: n.value
 	}));
 	return t;
-}, kt = (e) => {
+}, At = (e) => {
 	let t = [];
-	for (let n of pe(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
+	for (let n of fe(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
 		op: n.op,
 		threshold: n.value
 	});
 	return t;
-}, At = (e, t) => {
-	for (let n of pe(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
-	return null;
 }, jt = (e, t) => {
+	for (let n of fe(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
+	return null;
+}, Mt = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -88,8 +88,8 @@ var Dt = class {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, Mt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, Nt = (e, t, n) => {
-	let r = Mt(e, n);
+}, Nt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, Pt = (e, t, n) => {
+	let r = Nt(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -97,7 +97,7 @@ var Dt = class {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, Pt = class {
+}, Ft = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -105,9 +105,9 @@ var Dt = class {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = Ot(e.predicate), n = kt(e.predicate);
+		let t = kt(e.predicate), n = At(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = jt(r.fields, (t) => At(e.predicate, t));
+			let r = e.usingIndex, i = Mt(r.fields, (t) => jt(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -252,7 +252,7 @@ var Dt = class {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = jt(a, (e) => t[e]);
+				let i = Mt(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -266,7 +266,7 @@ var Dt = class {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) Nt(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) Pt(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -275,7 +275,7 @@ var Dt = class {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!Nt(e, n.op, n.threshold)) return !1;
+			} else if (!Pt(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -297,23 +297,23 @@ var Dt = class {
 		}
 		return i;
 	}
-}, Ft = (e) => {
+}, It = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(Ft);
+	if (Array.isArray(e)) return e.map(It);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = Ft(t[e]);
+		for (let e of n) r[e] = It(t[e]);
 		return r;
 	}
 	return e;
-}, It = (e, t, n) => {
-	let r = Ft({
+}, Lt = (e, t, n) => {
+	let r = It({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
-	return ge("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, Lt = class {
+	return he("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
+}, Rt = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -332,7 +332,7 @@ var Dt = class {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = It(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = Lt(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -390,7 +390,7 @@ var Dt = class {
 		});
 		return e;
 	}
-}, Rt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, zt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -400,7 +400,7 @@ var Dt = class {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), zt = (e, t, n) => {
+}), Bt = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -418,11 +418,11 @@ var Dt = class {
 		...e,
 		[i]: c
 	};
-}, Bt = (e, t, n) => !e || d(e, t, n), Vt = (e, t) => {
+}, Vt = (e, t, n) => !e || d(e, t, n), Ht = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of a(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = Vt(r.descriptor.predicate, t), a = Ht(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = Ht(r.descriptor.predicate, t), a = Ut(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -437,15 +437,15 @@ var Dt = class {
 		}
 	}
 	return n;
-}, Ht = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? Vt(e.predicate, n), a = [...t.values()].filter((t) => Bt(e.predicate, t, i));
+}, Ut = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? Ht(e.predicate, n), a = [...t.values()].filter((t) => Vt(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = Ut(a, e.aggregations, e.groupBy);
+		let t = Wt(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
-		let r = Vt(e.having, n);
-		return t.filter((t) => Bt(e.having, t, r));
+		let r = Ht(e.having, n);
+		return t.filter((t) => Vt(e.having, t, r));
 	}
-	let o = Rt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = zt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -453,7 +453,7 @@ var Dt = class {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, Ut = (e, t, n) => {
+}, Wt = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -471,11 +471,11 @@ var Dt = class {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = Wt(r, e.rows);
+		for (let r of t) n[r.alias] = Gt(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, Wt = (e, t) => {
+}, Gt = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -519,7 +519,7 @@ var Dt = class {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, Gt = "\0", Kt = (e, t) => e === null ? t : `${e}${Gt}${t}`, qt = class e {
+}, Kt = "\0", qt = (e, t) => e === null ? t : `${e}${Kt}${t}`, Jt = class e {
 	#e;
 	#t;
 	#n;
@@ -529,13 +529,13 @@ var Dt = class {
 		return r.#e = t.tables, r.#t = t.emitter, r.#n = t.numericCounters, r;
 	}
 	constructor(e, t = null) {
-		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new be(), oe(this.#t), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
+		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ye(), ae(this.#t), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
 			let e = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(Kt(t, n), e);
+			this.#e.set(qt(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -546,11 +546,11 @@ var Dt = class {
 		}, t);
 	}
 	#a(e) {
-		return Kt(this.#r, e);
+		return qt(this.#r, e);
 	}
 	#o() {
-		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Gt}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(Gt) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Kt}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(Kt) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#s(e) {
@@ -558,11 +558,11 @@ var Dt = class {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = Ht(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
-		return _(e) ? n(t, e.eager, ce(e.table), (e) => this.query(e)) : t;
+		let t = Ut(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
+		return _(e) ? n(t, e.eager, se(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
-		t = de(e, t);
+		t = ue(e, t);
 		let n = t;
 		if (n.id === void 0) {
 			let r = this.#c(e);
@@ -589,7 +589,7 @@ var Dt = class {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = zt(a, n, r);
+		let o = Bt(a, n, r);
 		return i.set(t, o), this.#t.emit("change", {
 			table: e,
 			op: "update",
@@ -631,7 +631,7 @@ var Dt = class {
 	async updateMany(e, t, n) {
 		let r = this.#e.get(this.#a(e));
 		if (!r) return 0;
-		let i = Vt(n.where, this.#o()), a = 0;
+		let i = Ht(n.where, this.#o()), a = 0;
 		for (let [o, s] of r) {
 			if (!d(n.where, s, i)) continue;
 			let c = {
@@ -650,7 +650,7 @@ var Dt = class {
 	async deleteMany(e, t) {
 		let n = this.#e.get(this.#a(e));
 		if (!n) return 0;
-		let r = Vt(t.where, this.#o()), i = [];
+		let r = Ht(t.where, this.#o()), i = [];
 		for (let [e, a] of n) d(t.where, a, r) && i.push([e, a]);
 		for (let [t, r] of i) n.delete(t), this.#t.emit("change", {
 			table: e,
@@ -689,7 +689,7 @@ var Dt = class {
 		}
 	}
 	async transactional(e) {
-		let t = new Jt(this.#u());
+		let t = new Yt(this.#u());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -725,7 +725,7 @@ var Dt = class {
 			allocateNumericId: (e) => this.#c(e)
 		};
 	}
-}, Jt = class {
+}, Yt = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -755,11 +755,11 @@ var Dt = class {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), r = Ht(e, this.materialise(e.table), t);
-		return _(e) ? n(r, e.eager, ce(e.table), (e) => this.query(e)) : r;
+		let t = this.buildTablesView(e), r = Ut(e, this.materialise(e.table), t);
+		return _(e) ? n(r, e.eager, se(e.table), (e) => this.query(e)) : r;
 	}
 	async insert(e, t) {
-		t = de(e, t);
+		t = ue(e, t);
 		let n = t;
 		n.id === void 0 && (n = {
 			...t,
@@ -795,7 +795,7 @@ var Dt = class {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = zt(i, n, r);
+		let a = Bt(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -816,7 +816,7 @@ var Dt = class {
 		}), !0;
 	}
 	async updateMany(e, t, n) {
-		let r = this.materialise(e), i = Vt(n.where, this.buildTablesViewForPred(n.where)), a = 0;
+		let r = this.materialise(e), i = Ht(n.where, this.buildTablesViewForPred(n.where)), a = 0;
 		for (let [o, s] of r) {
 			if (!d(n.where, s, i)) continue;
 			let r = {
@@ -833,7 +833,7 @@ var Dt = class {
 		return a;
 	}
 	async deleteMany(e, t) {
-		let n = this.materialise(e), r = Vt(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
+		let n = this.materialise(e), r = Ht(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
 		for (let [o, s] of n) d(t.where, s, r) && (this.overlay.get(e)?.delete(o), a || (a = /* @__PURE__ */ new Set(), this.tombstones.set(e, a)), a.add(o), this.events.push({
 			table: e,
 			op: "delete",
@@ -896,7 +896,7 @@ var Dt = class {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, Yt = (e) => {
+}, Xt = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -907,23 +907,23 @@ var Dt = class {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, Xt = (e) => {
+}, Zt = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, Zt = (e) => ({
-	has: (t) => Pe(e, t),
-	hasAny: (t) => t.some((t) => Pe(e, t)),
-	require: (t) => Le(e, t),
+}, Qt = (e) => ({
+	has: (t) => Ne(e, t),
+	hasAny: (t) => t.some((t) => Ne(e, t)),
+	require: (t) => Ie(e, t),
 	get scopes() {
-		return Ne(e);
+		return Me(e);
 	}
-}), Qt = (e) => {
+}), $t = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return $t(e, t), t;
-}, $t = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && en(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) $t(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) $t(n.descriptor, t);
-}, en = (e, t, n) => {
+	return en(e, t), t;
+}, en = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && tn(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) en(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) en(n.descriptor, t);
+}, tn = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -931,24 +931,24 @@ var Dt = class {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && en(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && tn(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && en(e, a.with, n);
+			n.add(e), a.with !== void 0 && tn(e, a.with, n);
 		}
 	}
-}, tn = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), nn = /* @__PURE__ */ new Set(["*"]), rn = (e, t) => {
+}, nn = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), rn = /* @__PURE__ */ new Set(["*"]), an = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			rn(e.not, t);
+			an(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) rn(n, t);
+			for (let n of e.and) an(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) rn(n, t);
+			for (let n of e.or) an(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -957,11 +957,11 @@ var Dt = class {
 		}
 		e.op === "exists" || e.op === "not-exists" || t.add(e.column);
 	}
-}, H = (e, t, n) => {
+}, V = (e, t, n) => {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, an = (e, t, n) => {
+}, on = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -969,64 +969,64 @@ var Dt = class {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), on(i.tableName, o, n), o.with !== void 0 && an(i.tableName, o.with, n);
+			V(n, r.tableName, [t.sourceKey, t.targetKey]), V(n, e, ["id"]), V(n, i.tableName, ["id"]), sn(i.tableName, o, n), o.with !== void 0 && on(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), on(s.tableName, o, n), o.with !== void 0 && an(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && V(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? V(n, e, ["id"]) : V(n, e, [t.sourceKey]), V(n, s.tableName, ["id"]), sn(s.tableName, o, n), o.with !== void 0 && on(s.tableName, o.with, n);
 	}
-}, on = (e, t, n) => {
+}, sn = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		rn(t.where, r), H(n, e, r);
+		an(t.where, r), V(n, e, r);
 	}
-	t.orderBy !== void 0 && H(n, e, t.orderBy.map((e) => e.column));
+	t.orderBy !== void 0 && V(n, e, t.orderBy.map((e) => e.column));
 	let r = m(e);
-	r === void 0 ? H(n, e, ["*"]) : H(n, e, Object.keys(r.fields));
-}, sn = (e) => {
+	r === void 0 ? V(n, e, ["*"]) : V(n, e, Object.keys(r.fields));
+}, cn = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (tn(e)) {
-		for (let n of Qt(e)) H(t, n, ["*"]);
+	if (nn(e)) {
+		for (let n of $t(e)) V(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	rn(e.predicate, n);
+	an(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return H(t, e.table, n), e.eager !== void 0 && an(e.table, e.eager, t), t;
-}, cn = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return nn;
+	return V(t, e.table, n), e.eager !== void 0 && on(e.table, e.eager, t), t;
+}, ln = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return rn;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, ln = (e, t) => {
+}, un = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = cn(e);
+	let r = ln(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, un = Je.exponential({
+}, dn = Je.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), dn = F.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), fn = F.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), pn = F.histogram("voltro_rpc_duration_seconds", un, "RPC handler duration in seconds."), mn = F.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), hn = F.histogram("voltro_http_duration_seconds", un, "HTTP route duration in seconds."), gn = F.histogram("voltro_plugin_hook_duration_seconds", un, "Plugin interceptor duration in seconds."), _n = F.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), vn = F.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), yn = F.histogram("voltro_subscription_delivery_seconds", un, "Subscription delivery produce→push latency in seconds."), bn = F.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), xn = (e) => {
-	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? N.zipRight(F.increment(dn).pipe(N.tagMetrics("tag", e.tag), N.tagMetrics("status", e.status)), N.zipRight(F.update(pn, t).pipe(N.tagMetrics("tag", e.tag)), e.status === "error" ? F.increment(fn).pipe(N.tagMetrics("tag", e.tag)) : N.void)) : e.kind === "request" ? N.zipRight(F.increment(mn).pipe(N.tagMetrics("route", e.tag), N.tagMetrics("status", e.status)), F.update(hn, t).pipe(N.tagMetrics("route", e.tag))) : N.zipRight(F.update(gn, t).pipe(N.tagMetrics("hook", e.tag)), e.status === "error" ? F.increment(_n).pipe(N.tagMetrics("hook", e.tag)) : N.void);
+}), fn = F.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), pn = F.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), mn = F.histogram("voltro_rpc_duration_seconds", dn, "RPC handler duration in seconds."), hn = F.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), gn = F.histogram("voltro_http_duration_seconds", dn, "HTTP route duration in seconds."), _n = F.histogram("voltro_plugin_hook_duration_seconds", dn, "Plugin interceptor duration in seconds."), vn = F.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), yn = F.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), bn = F.histogram("voltro_subscription_delivery_seconds", dn, "Subscription delivery produce→push latency in seconds."), xn = F.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), Sn = (e) => {
+	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? N.zipRight(F.increment(fn).pipe(N.tagMetrics("tag", e.tag), N.tagMetrics("status", e.status)), N.zipRight(F.update(mn, t).pipe(N.tagMetrics("tag", e.tag)), e.status === "error" ? F.increment(pn).pipe(N.tagMetrics("tag", e.tag)) : N.void)) : e.kind === "request" ? N.zipRight(F.increment(hn).pipe(N.tagMetrics("route", e.tag), N.tagMetrics("status", e.status)), F.update(gn, t).pipe(N.tagMetrics("route", e.tag))) : N.zipRight(F.update(_n, t).pipe(N.tagMetrics("hook", e.tag)), e.status === "error" ? F.increment(vn).pipe(N.tagMetrics("hook", e.tag)) : N.void);
 	N.runSync(n);
-}, Sn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, Cn = (e) => {
-	let t = Sn(e.label);
-	N.runSync(N.zipRight(F.increment(vn).pipe(N.tagMetrics("tag", t), N.tagMetrics("kind", e.kind)), F.update(yn, e.durationMs / 1e3).pipe(N.tagMetrics("tag", t), N.tagMetrics("kind", e.kind))));
-}, wn = /* @__PURE__ */ new Map(), U = (e, t) => {
-	let n = Sn(e), r = Math.max(0, (wn.get(n) ?? 0) + t);
-	r === 0 ? wn.delete(n) : wn.set(n, r), N.runSync(F.set(bn, r).pipe(N.tagMetrics("tag", n)));
-}, Tn = (e, t) => F.counter(e, t === void 0 ? {} : { description: t }), En = (e, t) => F.gauge(e, t === void 0 ? {} : { description: t }), Dn = (e, t = un, n) => F.histogram(e, t, n), On = (e) => {
+}, Cn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, wn = (e) => {
+	let t = Cn(e.label);
+	N.runSync(N.zipRight(F.increment(yn).pipe(N.tagMetrics("tag", t), N.tagMetrics("kind", e.kind)), F.update(bn, e.durationMs / 1e3).pipe(N.tagMetrics("tag", t), N.tagMetrics("kind", e.kind))));
+}, Tn = /* @__PURE__ */ new Map(), H = (e, t) => {
+	let n = Cn(e), r = Math.max(0, (Tn.get(n) ?? 0) + t);
+	r === 0 ? Tn.delete(n) : Tn.set(n, r), N.runSync(F.set(xn, r).pipe(N.tagMetrics("tag", n)));
+}, En = (e, t) => F.counter(e, t === void 0 ? {} : { description: t }), Dn = (e, t) => F.gauge(e, t === void 0 ? {} : { description: t }), On = (e, t = dn, n) => F.histogram(e, t, n), kn = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
-}, kn = F.snapshot.pipe(N.map((e) => e.map((e) => {
-	let t = e.metricKey.name, n = On(e.metricKey.tags), r = I.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
+}, An = F.snapshot.pipe(N.map((e) => e.map((e) => {
+	let t = e.metricKey.name, n = kn(e.metricKey.tags), r = Xe.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
 	if (Ye.isHistogramState(a)) return {
 		name: t,
 		labels: n,
@@ -1076,25 +1076,25 @@ var Dt = class {
 		type: "counter",
 		value: Number(a.count)
 	};
-}))), An = () => N.runSync(kn), jn = class extends R.TaggedError()("RowFilterUnavailable", { cause: R.String }) {}, Mn = Xe.exponential("20 millis").pipe(Xe.intersect(Xe.recurs(2))), Nn, Pn = (e) => {
-	Nn = e;
-}, Fn = () => Nn, In = () => void 0, Ln = (e, t) => Rn(Nn, e, t), Rn = (e, t, n) => {
-	if (e === void 0 || t.type === "system") return N.succeed(In);
-	let r = e.retry ?? Mn, i = e.load(t);
-	return (r === !1 ? i : N.retry(i, r)).pipe(N.map((t) => (n) => e.predicate(t, n)), N.catchAll((t) => N.suspend(() => (n?.(t), e.onLoadError === "deny" ? N.succeed(zn) : N.fail(new jn({ cause: String(t) }))))));
-}, zn = () => ({
+}))), jn = () => N.runSync(An), Mn = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, Nn = Ze.exponential("20 millis").pipe(Ze.intersect(Ze.recurs(2))), Pn, Fn = (e) => {
+	Pn = e;
+}, In = () => Pn, Ln = () => void 0, Rn = (e, t) => zn(Pn, e, t), zn = (e, t, n) => {
+	if (e === void 0 || t.type === "system") return N.succeed(Ln);
+	let r = e.retry ?? Nn, i = e.load(t);
+	return (r === !1 ? i : N.retry(i, r)).pipe(N.map((t) => (n) => e.predicate(t, n)), N.catchAll((t) => N.suspend(() => (n?.(t), e.onLoadError === "deny" ? N.succeed(Bn) : N.fail(new Mn({ cause: String(t) }))))));
+}, Bn = () => ({
 	column: "id",
 	op: "isNull"
-}), Bn = (e, n, r) => {
+}), Vn = (e, n, r) => {
 	let i = e(n);
 	return i === void 0 ? r : r ? t(r, i) : i;
-}, Vn = (e, t) => {
-	let n = Bn(e, t.table, t.predicate);
+}, Hn = (e, t) => {
+	let n = Vn(e, t.table, t.predicate);
 	return n === t.predicate ? t : {
 		...t,
 		predicate: n
 	};
-}, W = A({ scope: "voltro:dispatcher" }), Hn = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Un = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Wn = class {
+}, U = j({ scope: "voltro:dispatcher" }), Un = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Wn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Gn = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1104,12 +1104,12 @@ var Dt = class {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new Pt(), this.subscriptionRegistry = new Lt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new Ft(), this.subscriptionRegistry = new Rt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a, o, s) {
-		let c = `sub_${ve()}`, l = i ?? `subscription.${e.table}`, u = Qt(e), d = sn(e);
+		let c = `sub_${_e()}`, l = i ?? `subscription.${e.table}`, u = $t(e), d = cn(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(c, e.table, e.predicate, r);
 		for (let e of u) {
 			let t = this.dependentByTable.get(e);
@@ -1123,7 +1123,7 @@ var Dt = class {
 			}
 		}, h, g;
 		try {
-			h = s === void 0 ? e : Vn(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
+			h = s === void 0 ? e : Hn(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
 		} catch (e) {
 			throw m(), e;
 		}
@@ -1140,7 +1140,7 @@ var Dt = class {
 			cacheBinding: a,
 			reauthorize: o,
 			refilter: s
-		}), U(l, 1), t({
+		}), H(l, 1), t({
 			_tag: "snapshot",
 			revision: 0,
 			data: g
@@ -1156,16 +1156,16 @@ var Dt = class {
 			durationMs: _ - f,
 			rowCount: g.length
 		}), () => {
-			this.subscriptions.delete(c), U(l, -1), m();
+			this.subscriptions.delete(c), H(l, -1), m();
 		};
 	}
 	revokeSubscription(e, t, n = "guards no longer satisfied") {
-		this.subscriptions.delete(e.id), U(e.label, -1), this.subscriptionRegistry.unsubscribe(e.id);
+		this.subscriptions.delete(e.id), H(e.label, -1), this.subscriptionRegistry.unsubscribe(e.id);
 		for (let t of e.dependentTables) {
 			let n = this.dependentByTable.get(t);
 			n !== void 0 && (n.delete(e.id), n.size === 0 && this.dependentByTable.delete(t));
 		}
-		W.warn(`subscription revoked mid-stream — ${n}`, {
+		U.warn(`subscription revoked mid-stream — ${n}`, {
 			id: e.id,
 			label: e.label,
 			traceId: e.context.traceId
@@ -1175,12 +1175,12 @@ var Dt = class {
 		});
 	}
 	revokeComputed(e, t) {
-		this.computedSubs.delete(e.id), U(e.label, -1);
+		this.computedSubs.delete(e.id), H(e.label, -1);
 		for (let t of e.tables) {
 			let n = this.computedByTable.get(t);
 			n !== void 0 && (n.delete(e.id), n.size === 0 && this.computedByTable.delete(t));
 		}
-		W.warn("computed subscription revoked mid-stream — guards no longer satisfied", {
+		U.warn("computed subscription revoked mid-stream — guards no longer satisfied", {
 			id: e.id,
 			label: e.label,
 			traceId: e.context.traceId
@@ -1190,7 +1190,7 @@ var Dt = class {
 		});
 	}
 	async subscribeComputed(e, t, n, r) {
-		let i = `csub_${ve()}`, a = e.dependentTables, o = {
+		let i = `csub_${_e()}`, a = e.dependentTables, o = {
 			id: i,
 			recompute: e.recompute,
 			tenantId: e.tenantId,
@@ -1198,10 +1198,10 @@ var Dt = class {
 			context: n,
 			label: r ?? "subscription.computed",
 			tables: a,
-			lastJson: Gn(e.value),
+			lastJson: Kn(e.value),
 			revision: 0
 		};
-		this.computedSubs.set(i, o), U(o.label, 1);
+		this.computedSubs.set(i, o), H(o.label, 1);
 		for (let e of a) {
 			let t = this.computedByTable.get(e);
 			t === void 0 && (t = /* @__PURE__ */ new Set(), this.computedByTable.set(e, t)), t.add(i);
@@ -1219,9 +1219,9 @@ var Dt = class {
 			startMs: s,
 			endMs: Date.now(),
 			durationMs: Date.now() - s,
-			rowCount: Hn(e.value)
+			rowCount: Un(e.value)
 		}), () => {
-			this.computedSubs.delete(i), U(o.label, -1);
+			this.computedSubs.delete(i), H(o.label, -1);
 			for (let e of a) {
 				let t = this.computedByTable.get(e);
 				t !== void 0 && (t.delete(i), t.size === 0 && this.computedByTable.delete(e));
@@ -1231,7 +1231,7 @@ var Dt = class {
 	async recomputeComputed(e) {
 		let t = Date.now();
 		try {
-			let n = await e.recompute(), r = Gn(n);
+			let n = await e.recompute(), r = Kn(n);
 			if (r === e.lastJson) return;
 			e.lastJson = r, e.revision += 1;
 			let i = Date.now();
@@ -1247,14 +1247,14 @@ var Dt = class {
 				startMs: t,
 				endMs: i,
 				durationMs: i - t,
-				rowCount: Hn(n)
+				rowCount: Un(n)
 			});
 		} catch (t) {
-			if (Un(t)) {
+			if (Wn(t)) {
 				this.revokeComputed(e, t);
 				return;
 			}
-			W.warn("computed recompute failed; subscriber left on last value", {
+			U.warn("computed recompute failed; subscriber left on last value", {
 				id: e.id,
 				label: e.label,
 				traceId: e.context.traceId
@@ -1289,7 +1289,7 @@ var Dt = class {
 		for (let e of n) r.add(e.subscriberId);
 		let i = this.dependentByTable.get(e.table);
 		if (i !== void 0) for (let e of i) r.add(e);
-		if (W.trace("handleChange", {
+		if (U.trace("handleChange", {
 			table: e.table,
 			op: e.op,
 			matcher: n.length,
@@ -1300,10 +1300,10 @@ var Dt = class {
 		for (let t of r) {
 			let n = this.subscriptions.get(t);
 			if (!n) {
-				W.trace("missing subscription", { subscriberId: t });
+				U.trace("missing subscription", { subscriberId: t });
 				continue;
 			}
-			if (!ln(e, n.relevantFields)) {
+			if (!un(e, n.relevantFields)) {
 				o++;
 				continue;
 			}
@@ -1326,21 +1326,21 @@ var Dt = class {
 						this.revokeSubscription(n, e, "row filter unavailable");
 						continue;
 					}
-					i = Vn(e, n.baseDescriptor);
+					i = Hn(e, n.baseDescriptor);
 				}
 				let o = await this.deps.store.query(i), s = n.lastDelivered;
-				if (Kn(o, s)) {
-					W.trace("suppressed no-op delta", {
+				if (qn(o, s)) {
+					U.trace("suppressed no-op delta", {
 						subscriberId: t,
 						table: e.table
 					});
 					continue;
 				}
-				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), Fe(s) && Fe(o) ? n.emit({
+				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), Pe(s) && Pe(o) ? n.emit({
 					_tag: "delta",
 					revision: a,
 					emittedAt: a,
-					patch: Me(s, o)
+					patch: je(s, o)
 				}) : n.emit({
 					_tag: "snapshot",
 					revision: a,
@@ -1358,7 +1358,7 @@ var Dt = class {
 					rowCount: o.length
 				});
 			} catch (r) {
-				W.warn("reactive re-query failed; subscriber left on last snapshot", {
+				U.warn("reactive re-query failed; subscriber left on last snapshot", {
 					subscriberId: t,
 					label: n.label,
 					table: e.table,
@@ -1366,66 +1366,66 @@ var Dt = class {
 				}, r);
 			}
 		}
-		o > 0 && W.trace("handleChange/prefiltered", {
+		o > 0 && U.trace("handleChange/prefiltered", {
 			table: e.table,
 			op: e.op,
 			skipped: o
 		});
 	}
-}, Gn = (e) => {
+}, Kn = (e) => {
 	try {
 		return JSON.stringify(e) ?? "null";
 	} catch {
 		return String(e);
 	}
-}, Kn = (e, t) => {
+}, qn = (e, t) => {
 	if (e === t) return !0;
 	if (e.length !== t.length) return !1;
 	for (let n = 0; n < e.length; n++) if (JSON.stringify(e[n]) !== JSON.stringify(t[n])) return !1;
 	return !0;
-}, qn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Jn = 1440 * 60 * 1e3, Yn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), Xn = /* @__PURE__ */ new Set(), Zn = (e, t) => {
-	G.set(e, {
+}, Jn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Yn = 1440 * 60 * 1e3, Xn = 3600 * 1e3, W = /* @__PURE__ */ new Map(), Zn = /* @__PURE__ */ new Set(), Qn = (e, t) => {
+	W.set(e, {
 		subject: t,
 		touchedAt: Date.now()
 	});
-	for (let n of Xn) try {
+	for (let n of Zn) try {
 		n(e, t);
 	} catch {}
-}, Qn = (e) => {
-	let t = G.get(e);
-	if (t) return t.touchedAt = Date.now(), t.subject;
 }, $n = (e) => {
-	G.delete(e);
-}, er = (e) => (Xn.add(e), () => {
-	Xn.delete(e);
-}), tr = setInterval(() => {
-	let e = Date.now() - Jn;
-	for (let [t, n] of G) n.touchedAt < e && G.delete(t);
-}, Yn);
-typeof tr == "object" && tr && "unref" in tr && tr.unref();
-var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
-	let n = K.get(e);
-	return n || (n = /* @__PURE__ */ new Set(), K.set(e, n)), n.add(t), () => {
-		let n = K.get(e);
-		n && (n.delete(t), n.size === 0 && K.delete(e));
+	let t = W.get(e);
+	if (t) return t.touchedAt = Date.now(), t.subject;
+}, er = (e) => {
+	W.delete(e);
+}, tr = (e) => (Zn.add(e), () => {
+	Zn.delete(e);
+}), nr = setInterval(() => {
+	let e = Date.now() - Yn;
+	for (let [t, n] of W) n.touchedAt < e && W.delete(t);
+}, Xn);
+typeof nr == "object" && nr && "unref" in nr && nr.unref();
+var G = /* @__PURE__ */ new Map(), rr = (e, t) => {
+	let n = G.get(e);
+	return n || (n = /* @__PURE__ */ new Set(), G.set(e, n)), n.add(t), () => {
+		let n = G.get(e);
+		n && (n.delete(t), n.size === 0 && G.delete(e));
 	};
-}, rr = (e) => {
-	let t = K.get(e);
+}, ir = (e) => {
+	let t = G.get(e);
 	if (t) {
 		for (let e of [...t]) try {
 			e();
 		} catch {}
-		K.delete(e);
+		G.delete(e);
 	}
-}, ir = (e) => K.get(e)?.size ?? 0, ar = () => {
-	G.clear(), K.clear();
-}, or = () => [...G.entries()].map(([e, t]) => ({
+}, ar = (e) => G.get(e)?.size ?? 0, or = () => {
+	W.clear(), G.clear();
+}, sr = () => [...W.entries()].map(([e, t]) => ({
 	clientId: e,
 	subjectType: t.subject.type,
 	tenantId: t.subject.tenantId
-})), sr = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, cr = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, lr = (e) => {
+})), cr = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, lr = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, ur = (e) => {
 	if (typeof e != "string") return null;
-	let t = sr.exec(e.trim().toLowerCase());
+	let t = cr.exec(e.trim().toLowerCase());
 	if (t === null) return null;
 	let [, n, r, i] = t;
 	return n === "0".repeat(32) || r === "0".repeat(16) ? null : {
@@ -1433,14 +1433,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		spanId: r,
 		sampled: (parseInt(i, 16) & 1) == 1
 	};
-}, ur = (e) => {
-	let t = lr(e);
-	if (t !== null) return Ze.externalSpan({
+}, dr = (e) => {
+	let t = ur(e);
+	if (t !== null) return Qe.externalSpan({
 		traceId: t.traceId,
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, dr = new pt(), fr = (e, t) => dr.run(e, t), pr = () => dr.getStore(), mr = (e = {}) => {
+}, fr = new mt(), pr = (e, t) => fr.run(e, t), mr = () => fr.getStore(), hr = (e = {}) => {
 	let t = e.random ?? Math.random, n = /* @__PURE__ */ new Map(), r = (e) => n.get(e) ?? 0;
 	return {
 		pick(e) {
@@ -1465,7 +1465,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			}));
 		}
 	};
-}, hr = (e = {}) => {
+}, gr = (e = {}) => {
 	let t = e.thresholdFailures ?? 3, n = e.windowMs ?? 1e4, r = e.blackoutMs ?? 6e4, i = e.now ?? Date.now, a = /* @__PURE__ */ new Map(), o = (e) => {
 		let t = a.get(e);
 		return t === void 0 && (t = {
@@ -1499,7 +1499,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			}));
 		}
 	};
-}, gr = (e = {}) => {
+}, _r = (e = {}) => {
 	let t = e.now ?? Date.now, n = /* @__PURE__ */ new Map();
 	return {
 		get(e) {
@@ -1522,7 +1522,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			return n.size;
 		}
 	};
-}, _r = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, vr = (e) => {
+}, vr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, yr = (e) => {
 	let t = e.now ?? Date.now, n = e.keyPrefix ?? "voltro:ryw", r = e.channel ?? `${n}:bus`, i = e.onError ?? ((e, t) => {
 		process.stderr.write(`[voltro:ryw] redis ${t} failed: ${String(e)}\n`);
 	}), a = `${process.pid ?? 0}:${Math.random() * 1e9 | 0}:${t()}`, o = /* @__PURE__ */ new Map(), s = (e) => {
@@ -1581,7 +1581,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			return o.size;
 		}
 	};
-}, yr = A({ scope: "voltro:replication" }), br = new pt(), xr = (e, t) => br.run(e, t), Sr = () => br.getStore(), Cr = class {
+}, br = j({ scope: "voltro:replication" }), xr = new mt(), Sr = (e, t) => xr.run(e, t), Cr = () => xr.getStore(), wr = class {
 	primary;
 	replicas;
 	adapter;
@@ -1594,10 +1594,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	recordRouting;
 	now;
 	constructor(e) {
-		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? gr({ now: this.now }), this.selector = e.replicaSelector ?? mr(), this.health = e.replicaHealth ?? hr({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
+		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? _r({ now: this.now }), this.selector = e.replicaSelector ?? hr(), this.health = e.replicaHealth ?? gr({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
 	}
 	async query(e) {
-		let t = br.getStore(), n = t?.subjectKey ?? "anon:bg";
+		let t = xr.getStore(), n = t?.subjectKey ?? "anon:bg";
 		if (t?.forcePrimary === !0) return this.emitRouting({
 			target: "primary",
 			replicaIndex: null,
@@ -1661,7 +1661,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				waitMs: 0
 			}), r;
 		} catch (r) {
-			return this.health.reportFailure(i, String(r)), yr.warn("replica query failed; falling back to primary", {
+			return this.health.reportFailure(i, String(r)), br.warn("replica query failed; falling back to primary", {
 				idx: a,
 				err: r
 			}), this.emitRouting({
@@ -1730,7 +1730,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 					fallbackReason: "wait-timeout"
 				}), this.primary.query(e);
 			}
-			await wr(10);
+			await Tr(10);
 		}
 	}
 	async insert(e, t) {
@@ -1770,8 +1770,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		return await this.stampPostWrite(), r;
 	}
 	async transactional(e) {
-		let t = await xr({
-			subjectKey: br.getStore()?.subjectKey ?? "anon:bg",
+		let t = await Sr({
+			subjectKey: xr.getStore()?.subjectKey ?? "anon:bg",
 			forcePrimary: !0
 		}, () => this.primary.transactional(e));
 		return await this.stampPostWrite(), t;
@@ -1787,7 +1787,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	async stampPostWrite() {
 		if (this.replicas.length === 0) return;
-		let e = br.getStore()?.subjectKey ?? "anon:bg";
+		let e = xr.getStore()?.subjectKey ?? "anon:bg";
 		try {
 			let t = await this.adapter.capturePrimaryPosition(this.primary);
 			this.rywStore.set(e, {
@@ -1795,37 +1795,37 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				expiresAt: this.now() + this.rywTtlMs
 			});
 		} catch (e) {
-			yr.warn("failed to capture primary position; RYW skipped", { err: e });
+			br.warn("failed to capture primary position; RYW skipped", { err: e });
 		}
 	}
 	emitRouting(e) {
 		this.recordRouting?.(e);
 	}
-}, wr = (e) => new Promise((t) => setTimeout(t, e)), Tr = (e, t, n) => ({
+}, Tr = (e) => new Promise((t) => setTimeout(t, e)), Er = (e, t, n) => ({
 	subject: e,
-	traceId: t?.traceId ?? ve(),
+	traceId: t?.traceId ?? _e(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), Er = N.currentSpan.pipe(N.catchAll(() => N.succeed(void 0))), Dr = (e) => ({
+}), Dr = N.currentSpan.pipe(N.catchAll(() => N.succeed(void 0))), Or = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Or = (e, t, n) => {
+}), kr = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, kr = (e) => {
-	if (Fn() !== void 0) return async () => {
-		let t = await N.runPromise(N.either(Ln(e, (e) => {
+}, Ar = (e) => {
+	if (In() !== void 0) return async () => {
+		let t = await N.runPromise(N.either(Rn(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
 		})));
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, Ar = (e, t, n, r, i, a, o, s) => z.asyncScoped((c) => N.gen(function* () {
+}, jr = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => N.gen(function* () {
 	let l = yield* N.tryPromise(() => t.subscribe(e, (e) => {
 		c.single(e);
 	}, n, r, i, a, o, s)).pipe(N.matchCause({
-		onFailure: (e) => (Ir(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (Lr(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Br(e)
+			error: Vr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1841,21 +1841,21 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	let u = l.unsubscribe;
 	if (yield* N.addFinalizer(() => N.sync(() => u())), n.clientId !== void 0) {
-		let e = nr(n.clientId, () => {
+		let e = rr(n.clientId, () => {
 			c.end();
 		});
 		yield* N.addFinalizer(() => N.sync(() => e()));
 	}
-})), jr = (e, t, n, r) => z.asyncScoped((i) => N.gen(function* () {
+})), Mr = (e, t, n, r) => R.asyncScoped((i) => N.gen(function* () {
 	let a = yield* N.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(N.matchCause({
-		onFailure: (e) => (Ir(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (Lr(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Br(e)
+			error: Vr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1871,21 +1871,21 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	let o = a.unsubscribe;
 	if (yield* N.addFinalizer(() => N.sync(() => o())), n.clientId !== void 0) {
-		let e = nr(n.clientId, () => {
+		let e = rr(n.clientId, () => {
 			i.end();
 		});
 		yield* N.addFinalizer(() => N.sync(() => e()));
 	}
-})), Mr = (e, t, n = "rpc.subscription", r, i, a, o) => z.unwrap(N.gen(function* () {
-	let s = yield* Ee, c = yield* Se, l = yield* Er;
-	Or(l, n, s);
-	let u = Tr(s, l, c.clientId), d = _r(s.id, c.clientId), f = xr({ subjectKey: d }, () => fr({
+})), Nr = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(N.gen(function* () {
+	let s = yield* Te, c = yield* xe, l = yield* Dr;
+	kr(l, n, s);
+	let u = Er(s, l, c.clientId), d = vr(s.id, c.clientId), f = Sr({ subjectKey: d }, () => pr({
 		traceId: u.traceId,
 		...u.spanId === void 0 ? {} : { spanId: u.spanId }
 	}, () => e(u))), p = N.isEffect(f) ? yield* f.pipe(N.matchCause({
-		onFailure: (e) => (Ir(`subscription.${n}`, u.traceId, e), {
+		onFailure: (e) => (Lr(`subscription.${n}`, u.traceId, e), {
 			ok: !1,
-			error: Br(e)
+			error: Vr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1895,49 +1895,49 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		ok: !0,
 		value: f
 	};
-	if (!p.ok) return z.make({
+	if (!p.ok) return R.make({
 		_tag: "error",
 		error: p.error
 	});
 	let m = p.value;
-	if (qn(m)) return jr(m, t, u, n);
+	if (Jn(m)) return Mr(m, t, u, n);
 	let h = m, g = r?.(h);
-	return Ar(h, t, u, g, n, i === void 0 ? void 0 : {
+	return jr(h, t, u, g, n, i === void 0 ? void 0 : {
 		key: i.scope === "subject" ? `${i.baseKey}:s:${d}` : `${i.baseKey}:global`,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(s), o?.(s) ?? kr(s));
-}).pipe(N.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Nr = (e, t = "rpc.stream") => z.unwrap(N.gen(function* () {
-	let n = yield* Ee, r = yield* Se, i = yield* Er;
-	Or(i, t, n);
-	let a = Tr(n, i, r.clientId), o = e(a), s = N.isEffect(o) ? yield* o.pipe(N.orDie) : o;
+	}, a?.(s), o?.(s) ?? Ar(s));
+}).pipe(N.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Pr = (e, t = "rpc.stream") => R.unwrap(N.gen(function* () {
+	let n = yield* Te, r = yield* xe, i = yield* Dr;
+	kr(i, t, n);
+	let a = Er(n, i, r.clientId), o = e(a), s = N.isEffect(o) ? yield* o.pipe(N.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
-	return z.unwrapScoped(N.gen(function* () {
-		let e = yield* Ue.make(), t = nr(c, () => {
+	return R.unwrapScoped(N.gen(function* () {
+		let e = yield* Ue.make(), t = rr(c, () => {
 			Ue.unsafeDone(e, N.void);
 		});
-		return yield* N.addFinalizer(() => N.sync(() => t())), s.pipe(z.interruptWhen(Ue.await(e)));
+		return yield* N.addFinalizer(() => N.sync(() => t())), s.pipe(R.interruptWhen(Ue.await(e)));
 	}));
-}).pipe(N.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Pr = A({ scope: "voltro:rpc" }), Fr = A({ scope: "voltro:http" }), Ir = (e, t, n) => {
-	if (j.isInterruptedOnly(n)) return;
-	let r = j.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = j.dieOption(n)._tag === "Some", s = Yt(r), c = {
+}).pipe(N.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Fr = j({ scope: "voltro:rpc" }), Ir = j({ scope: "voltro:http" }), Lr = (e, t, n) => {
+	if (M.isInterruptedOnly(n)) return;
+	let r = M.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = M.dieOption(n)._tag === "Some", s = Xt(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? Pr.error(`${e} failed: ${l}`, c) : Pr.warn(`${e} failed: ${l}`, c);
-}, Lr = /* @__PURE__ */ new Set([
+	o ? Fr.error(`${e} failed: ${l}`, c) : Fr.warn(`${e} failed: ${l}`, c);
+}, Rr = /* @__PURE__ */ new Set([
 	"SqlError",
 	"ResultLengthMismatch",
 	"FieldDecryptionError"
-]), Rr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Lr.has(e._tag), zr = (e) => ({
+]), zr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Rr.has(e._tag), Br = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Br = (e) => {
-	let t = j.squash(e);
-	if (t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t), Rr(t)) return {
+}), Vr = (e) => {
+	let t = M.squash(e);
+	if (t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t), zr(t)) return {
 		_tag: "InternalError",
 		message: "internal server error"
 	};
@@ -1949,43 +1949,43 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, Vr = (e, t, n = "rpc.mutation") => N.gen(function* () {
-	let r = yield* Ee, i = yield* Se, a = yield* Er;
-	Or(a, n, r);
-	let o = Tr(r, a, i.clientId), s = xr({ subjectKey: _r(r.id, i.clientId) }, () => fr({
+}, Hr = (e, t, n = "rpc.mutation") => N.gen(function* () {
+	let r = yield* Te, i = yield* xe, a = yield* Dr;
+	kr(a, n, r);
+	let o = Er(r, a, i.clientId), s = Sr({ subjectKey: vr(r.id, i.clientId) }, () => pr({
 		traceId: o.traceId,
 		...o.spanId === void 0 ? {} : { spanId: o.spanId }
 	}, () => e(t, o)));
 	return yield* (N.isEffect(s) ? s : N.tryPromise({
 		try: () => Promise.resolve(s),
 		catch: (e) => e
-	})).pipe(N.tapErrorCause((e) => N.sync(() => Ir(n, o.traceId, e))), N.catchIf(Rr, () => N.die(zr(o.traceId))), N.annotateLogs(Dr(o)));
-}).pipe(N.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Hr = 8 * 1024 * 1024, Ur = (e) => {
-	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = $e(), i = (t) => rt.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
-		if (!e.inspectRoute) return V.text("inspect route not configured", { status: 404 });
+	})).pipe(N.tapErrorCause((e) => N.sync(() => Lr(n, o.traceId, e))), N.catchIf(zr, () => N.die(Br(o.traceId))), N.annotateLogs(Or(o)));
+}).pipe(N.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Ur = 8 * 1024 * 1024, Wr = (e) => {
+	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = et(), i = (t) => it.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
+		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
 		t.method !== "GET" && t.method !== "HEAD" && t.method !== "OPTIONS" && (r = yield* t.text.pipe(N.orElseSucceed(() => "")));
 		let i = e.inspectRoute.handle(t.url, n, t.method, r), a = i instanceof Promise ? yield* N.promise(() => i) : i;
-		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
+		return a === null ? B.text("inspect route not found", { status: 404 }) : B.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	}))), a = () => rt.HttpServerRequest.pipe(N.flatMap((t) => {
+	}))), a = () => it.HttpServerRequest.pipe(N.flatMap((t) => {
 		let n = e.inspectStream;
-		if (!n) return N.succeed(V.text("inspect stream not configured", { status: 404 }));
+		if (!n) return N.succeed(B.text("inspect stream not configured", { status: 404 }));
 		let r = {};
 		for (let [e, n] of Object.entries(t.headers)) n !== void 0 && (r[e.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
 		let i = n.corsHeaders(r.origin);
-		if (n.isDisabled()) return N.succeed(V.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
+		if (n.isDisabled()) return N.succeed(B.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
 			status: 503,
 			contentType: "application/json; charset=utf-8",
 			headers: i
 		}));
 		let a = n.authorize(r);
-		if (!a.ok) return N.succeed(V.text(JSON.stringify({
+		if (!a.ok) return N.succeed(B.text(JSON.stringify({
 			error: "unauthorized",
 			reason: a.reason
 		}), {
@@ -1997,7 +1997,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			if (!f || e.indexOf("event: ") !== 0) return !0;
 			let t = e.indexOf("\n", 7);
 			return t < 0 || f.has(e.slice(7, t).trim());
-		}, m = z.asyncScoped((e) => N.gen(function* () {
+		}, m = R.asyncScoped((e) => N.gen(function* () {
 			if (e.single(o.encode("retry: 5000\n\n")), !u) for (let t of n.replay()) p(t) && e.single(o.encode(t));
 			let t = n.subscribe((t) => {
 				p(t) && e.single(o.encode(t));
@@ -2008,7 +2008,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				clearInterval(r), t();
 			}));
 		}));
-		return N.succeed(V.stream(m, {
+		return N.succeed(B.stream(m, {
 			status: 200,
 			headers: {
 				"content-type": "text/event-stream; charset=utf-8",
@@ -2018,26 +2018,26 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				...i
 			}
 		}));
-	})), o = B.add("*", "/_voltro/inspect/*", rt.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
-		if (!e.inspectRoute) return V.text("inspect route not configured", { status: 404 });
+	})), o = z.add("*", "/_voltro/inspect/*", it.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
+		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
 		t.method !== "GET" && t.method !== "HEAD" && t.method !== "OPTIONS" && (r = yield* t.text.pipe(N.orElseSucceed(() => "")));
 		let i = e.inspectRoute.handle(t.url, n, t.method, r), a = i instanceof Promise ? yield* N.promise(() => i) : i;
-		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
+		return a === null ? B.text("inspect route not found", { status: 404 }) : B.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
 	})))), s = P.empty;
-	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? P.mergeAll(B.add("*", "/_voltro/inspect", i(!0)), o) : P.mergeAll(B.add("GET", "/_voltro/inspect/stream", a()), B.add("*", "/_voltro/inspect", i(!0)), o));
+	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? P.mergeAll(z.add("*", "/_voltro/inspect", i(!0)), o) : P.mergeAll(z.add("GET", "/_voltro/inspect/stream", a()), z.add("*", "/_voltro/inspect", i(!0)), o));
 	let c = P.empty;
 	if (e.webhookRoutes !== void 0 && e.webhookRoutes.size > 0) {
-		let t = (e) => rt.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
+		let t = (e) => it.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
-			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(N.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = ur(n.traceparent), s = yield* N.promise(() => e.handle({
+			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(N.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = dr(n.traceparent), s = yield* N.promise(() => e.handle({
 				method: t.method,
 				path: a,
 				headers: n,
@@ -2049,16 +2049,16 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				},
 				...o ? { parent: o } : {}
 			}));
-			return V.text(s.body, {
+			return B.text(s.body, {
 				status: s.status,
 				contentType: s.contentType
 			});
-		}))), n = Array.from(e.webhookRoutes.entries()).map(([e, n]) => B.add("*", e, t(n)));
+		}))), n = Array.from(e.webhookRoutes.entries()).map(([e, n]) => z.add("*", e, t(n)));
 		c = P.mergeAll(...n);
 	}
 	let l = P.empty;
 	if (e.httpRoutes !== void 0 && e.httpRoutes.length > 0) {
-		let t = (e) => rt.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
+		let t = (e) => it.HttpServerRequest.pipe(N.flatMap((t) => N.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 			let r = t.url.indexOf("?"), i = r >= 0 ? t.url.slice(0, r) : t.url, a = r >= 0 ? t.url.slice(r + 1) : "", o = t.method !== "GET" && t.method !== "HEAD" ? new Uint8Array(yield* t.arrayBuffer.pipe(N.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), s = {
@@ -2067,8 +2067,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				query: a,
 				headers: n,
 				rawBody: o
-			}, c = yield* N.promise(() => dt(e, s));
-			c.status >= 500 && Fr.warn(`${t.method} ${i} → ${c.status}`, {
+			}, c = yield* N.promise(() => ft(e, s));
+			c.status >= 500 && Ir.warn(`${t.method} ${i} → ${c.status}`, {
 				method: t.method,
 				path: i,
 				status: c.status,
@@ -2079,45 +2079,45 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				...c.contentType ? { contentType: c.contentType } : {},
 				headers: l
 			};
-			return c.body instanceof Uint8Array ? V.uint8Array(c.body, u) : V.text(c.body ?? "", u);
-		})), N.tapErrorCause((t) => j.isInterruptedOnly(t) ? N.void : N.sync(() => Fr.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, j.squash(t))))), n = /* @__PURE__ */ new Map();
+			return c.body instanceof Uint8Array ? B.uint8Array(c.body, u) : B.text(c.body ?? "", u);
+		})), N.tapErrorCause((t) => M.isInterruptedOnly(t) ? N.void : N.sync(() => Ir.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, M.squash(t))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
 		}
 		let r = [...n.entries()].flatMap(([e, n]) => {
 			let r = n.length === 1 ? n[0].method : "*", i = t(n);
-			return [B.add(r, e, i), B.add(r, `${e}/*`, i)];
+			return [z.add(r, e, i), z.add(r, `${e}/*`, i)];
 		});
 		l = P.mergeAll(...r);
 	}
-	let u = lt.layerProtocolWebsocketRouter({ path: n }), d = lt.layer(e.group), f = lt.layer(e.group).pipe(P.provide(lt.layerProtocolHttpRouter({ path: "/rpc" })), P.provide(ct.layerJson), P.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = P.scopedDiscard(N.gen(function* () {
-		let e = yield* lt.Protocol;
+	let u = ut.layerProtocolWebsocketRouter({ path: n }), d = ut.layer(e.group), f = ut.layer(e.group).pipe(P.provide(ut.layerProtocolHttpRouter({ path: "/rpc" })), P.provide(lt.layerJson), P.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = P.scopedDiscard(N.gen(function* () {
+		let e = yield* ut.Protocol;
 		yield* N.forkScoped(N.gen(function* () {
 			let t = yield* e.disconnects.take;
-			$n(t), rr(t);
+			er(t), ir(t);
 		}).pipe(N.forever));
-	})), m = P.mergeAll(d, p).pipe(P.provide(u), P.provide(ct.layerJson), P.provide(e.handlersLayer)), h = P.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => N.gen(function* () {
-		let t = yield* rt.HttpServerRequest, n = {};
+	})), m = P.mergeAll(d, p).pipe(P.provide(u), P.provide(lt.layerJson), P.provide(e.handlersLayer)), h = P.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => N.gen(function* () {
+		let t = yield* it.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
 		if (t.method === "POST" && i === "/rpc") {
 			let e = n["content-length"];
-			if (e !== void 0 && Number(e) > y) return V.text("rpc payload too large", {
+			if (e !== void 0 && Number(e) > y) return B.text("rpc payload too large", {
 				status: 413,
 				headers: b
 			});
 		}
-		if (_ && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? V.text("ok", {
+		if (_ && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? B.text("ok", {
 			status: 200,
 			headers: b
-		}) : _.isReady() ? _.ping && !(yield* N.tryPromise(() => _.ping()).pipe(N.orElseSucceed(() => !1))) ? V.text("not-ready: dependency", {
+		}) : _.isReady() ? _.ping && !(yield* N.tryPromise(() => _.ping()).pipe(N.orElseSucceed(() => !1))) ? B.text("not-ready: dependency", {
 			status: 503,
 			headers: b
-		}) : V.text("ready", {
+		}) : B.text("ready", {
 			status: 200,
 			headers: b
-		}) : V.text("not-ready", {
+		}) : B.text("not-ready", {
 			status: 503,
 			headers: b
 		});
@@ -2134,17 +2134,17 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			headers: n,
 			remoteAddr: c
 		})).pipe(N.orElseSucceed(() => null));
-		return l === null ? yield* e : V.text(l.body ?? "", {
+		return l === null ? yield* e : B.text(l.body ?? "", {
 			status: l.status,
 			...l.headers ? { headers: l.headers } : {}
 		});
-	}), S = P.unwrapEffect(B.toHttpEffect(h).pipe(N.map((e) => nt.serve(x(e))))).pipe(P.provide(at.layer(() => r, { port: t })), P.provide(it.layer));
+	}), S = P.unwrapEffect(z.toHttpEffect(h).pipe(N.map((e) => rt.serve(x(e))))).pipe(P.provide(ot.layer(() => r, { port: t })), P.provide(at.layer));
 	e.tracerLayer && (S = S.pipe(P.provide(e.tracerLayer)));
-	let C = A({ scope: "voltro:rpc" }), ee = P.launch(S).pipe(N.catchAllCause((e) => N.sync(() => {
-		C.error("rpc server crashed", {}, j.squash(e)), process.exit(1);
+	let C = j({ scope: "voltro:rpc" }), ee = P.launch(S).pipe(N.catchAllCause((e) => N.sync(() => {
+		C.error("rpc server crashed", {}, M.squash(e)), process.exit(1);
 	})));
-	return ot.runMain(ee, { disableErrorReporting: !0 }), r;
-}, Wr = (e, t = 1e4) => new Promise((n, r) => {
+	return st.runMain(ee, { disableErrorReporting: !0 }), r;
+}, Gr = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2160,13 +2160,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Gr = () => {
+}), Kr = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Kr = () => {
+}, qr = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, qr = async () => {
+}, Jr = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2181,7 +2181,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, Jr = (e, t, n) => {
+}, Yr = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2204,8 +2204,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, Yr = async (e = {}) => {
-	let t = e.mode ?? Gr(), n = e.metricsMode ?? Kr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, Xr = async (e = {}) => {
+	let t = e.mode ?? Kr(), n = e.metricsMode ?? qr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: P.empty,
 		mode: t,
@@ -2214,13 +2214,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await qr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await Jr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Jr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Yr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2238,18 +2238,18 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, Xr = {
-	[mt.INTERNAL]: "internal",
-	[mt.SERVER]: "server",
-	[mt.CLIENT]: "client",
-	[mt.PRODUCER]: "producer",
-	[mt.CONSUMER]: "consumer"
-}, Zr = (e) => e[0] * 1e3 + e[1] / 1e6, Qr = 512, $r = 48, ei = (e) => {
+}, Zr = {
+	[ht.INTERNAL]: "internal",
+	[ht.SERVER]: "server",
+	[ht.CLIENT]: "client",
+	[ht.PRODUCER]: "producer",
+	[ht.CONSUMER]: "consumer"
+}, Qr = (e) => e[0] * 1e3 + e[1] / 1e6, $r = 512, ei = 48, ti = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= $r) break;
+		if (n >= ei) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > Qr ? `${i.slice(0, Qr)}…` : i;
+		if (typeof i == "string") t[r] = i.length > $r ? `${i.slice(0, $r)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2258,49 +2258,49 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > Qr ? `${e.slice(0, Qr)}…` : e;
+			t[r] = e.length > $r ? `${e.slice(0, $r)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, ti = {
-	[ht.UNSET]: "unset",
-	[ht.OK]: "ok",
-	[ht.ERROR]: "error"
-}, ni = (e) => {
+}, ni = {
+	[gt.UNSET]: "unset",
+	[gt.OK]: "ok",
+	[gt.ERROR]: "error"
+}, ri = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: Zr(e.time),
-		...e.attributes ? { attributes: ei(e.attributes) } : {}
+		tsMs: Qr(e.time),
+		...e.attributes ? { attributes: ti(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: Xr[e.kind] ?? "internal",
-		attributes: ei(e.attributes),
-		startMs: Zr(e.startTime),
-		endMs: Zr(e.endTime),
-		durationMs: Zr(e.duration),
-		status: ti[e.status.code] ?? "unset",
+		kind: Zr[e.kind] ?? "internal",
+		attributes: ti(e.attributes),
+		startMs: Qr(e.startTime),
+		endMs: Qr(e.endTime),
+		durationMs: Qr(e.duration),
+		status: ni[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, ri = (e) => ({
+}, ii = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(ni(t));
+			e(ri(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), ii = { get: (e) => Promise.resolve(process.env[e]) }, ai = ii, oi = (e) => {
-	ai = e;
-}, si = () => {
-	ai = ii;
-}, ci = async (e) => await ai.get(e) ?? process.env[e], li = (e) => process.env[e], ui = (e, t = 6e4, n = () => Date.now()) => {
+}), ai = { get: (e) => Promise.resolve(process.env[e]) }, oi = ai, si = (e) => {
+	oi = e;
+}, ci = () => {
+	oi = ai;
+}, li = async (e) => await oi.get(e) ?? process.env[e], ui = (e) => process.env[e], di = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2311,12 +2311,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, di = (e) => {
+}, fi = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return ui({ get: async (n) => {
+	if (e.perKey) return di({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -2327,59 +2327,59 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, fi = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ii : e.kind === "custom" ? e.backend : e.kind === "http" ? di(e) : ii, pi = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ye(e, "voltro:field-encryption:v1", 32), mi = (t) => {
+}, pi = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ai : e.kind === "custom" ? e.backend : e.kind === "http" ? fi(e) : ai, mi = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ve(e, "voltro:field-encryption:v1", 32), hi = (t) => {
 	if (t.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${t.length}`);
 	return {
 		encrypt: (n) => {
-			let r = _e(12), i = me("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
+			let r = ge(12), i = pe("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
 			return `${e}${r.toString("base64")}:${o.toString("base64")}:${a.toString("base64")}`;
 		},
 		decrypt: (n) => {
 			let [r, i, a] = n.slice(e.length).split(":");
 			if (!r || !i || a === void 0) throw Error("field cipher: malformed ciphertext");
-			let o = he("aes-256-gcm", t, Buffer.from(r, "base64"));
+			let o = me("aes-256-gcm", t, Buffer.from(r, "base64"));
 			return o.setAuthTag(Buffer.from(i, "base64")), Buffer.concat([o.update(Buffer.from(a, "base64")), o.final()]).toString("utf8");
 		}
 	};
-}, hi = (e) => mi(pi(e)), gi, _i = (e) => {
-	gi = e;
-}, vi = () => gi, yi = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
-	let t = vi();
-	if (!t) throw Error(`encryptField: ${yi}`);
+}, gi = (e) => hi(mi(e)), _i, vi = (e) => {
+	_i = e;
+}, yi = () => _i, bi = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", K = (e) => {
+	let t = yi();
+	if (!t) throw Error(`encryptField: ${bi}`);
 	return t.encrypt(e);
-}, bi = (e) => {
+}, xi = (e) => {
 	if (!x(e)) return e;
-	let t = vi();
-	if (!t) throw Error(`decryptField: ${yi}`);
+	let t = yi();
+	if (!t) throw Error(`decryptField: ${bi}`);
 	return t.decrypt(e);
-}, xi = "_voltro_idempotency", Si = (e) => {
+}, Si = "_voltro_idempotency", Ci = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, Ci = (e) => ({
+}, wi = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: Si(e.response),
-	createdAt: Be(e.createdAt)
-}), wi = async (e, n, r) => (await e.query({
-	table: xi,
+	response: Ci(e.response),
+	createdAt: ze(e.createdAt)
+}), Ti = async (e, n, r) => (await e.query({
+	table: Si,
 	predicate: t(u("scope", n), u("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Ti = (e) => ({
+}))[0] ?? null, Ei = (e) => ({
 	get: async (t, n) => {
-		let r = await wi(e, t, n);
-		return r ? Ci(r) : null;
+		let r = await Ti(e, t, n);
+		return r ? wi(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = f({
 				kind: "typeid",
 				prefix: "idem"
-			}, xi), o = await e.insertIgnore(xi, {
+			}, Si), o = await e.insertIgnore(Si, {
 				id: a,
 				scope: t,
 				key: n,
@@ -2388,11 +2388,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - Be(o.createdAt) < i) return Ci(o);
-			await e.delete(xi, o.id);
+			if (r - ze(o.createdAt) < i) return wi(o);
+			await e.delete(Si, o.id);
 		}
-		let a = await wi(e, t, n);
-		return a ? Ci(a) : {
+		let a = await Ti(e, t, n);
+		return a ? wi(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -2401,36 +2401,36 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await wi(e, t, n);
-		a && await e.update(xi, a.id, {
+		let a = await Ti(e, t, n);
+		a && await e.update(Si, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await wi(e, t, n);
-		r && await e.delete(xi, r.id);
+		let r = await Ti(e, t, n);
+		r && await e.delete(Si, r.id);
 	}
-}), J = "_voltro_kv", Ei = (e) => {
+}), q = "_voltro_kv", Di = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, Di = (e, t) => {
-	let n = Ei(e.expiresAt);
+}, Oi = (e, t) => {
+	let n = Di(e.expiresAt);
 	return n !== null && n <= t;
-}, Oi = (e) => e === null ? null : JSON.parse(e), ki = async (e, t) => (await e.query({
-	table: J,
+}, ki = (e) => e === null ? null : JSON.parse(e), Ai = async (e, t) => (await e.query({
+	table: q,
 	predicate: u("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Ai = (e) => {
+}))[0] ?? null, ji = (e) => {
 	let n = (e, t, n) => N.tryPromise({
 		try: n,
-		catch: (n) => new _t({
+		catch: (n) => new vt({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -2438,15 +2438,15 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await ki(e, t);
-			return n === null ? I.none() : Di(n, Date.now()) ? (await e.delete(J, n.id), I.none()) : I.some(Oi(n.value));
+			let n = await Ai(e, t);
+			return n === null ? Xe.none() : Oi(n, Date.now()) ? (await e.delete(q, n.id), Xe.none()) : Xe.some(ki(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = f({
 				kind: "typeid",
 				prefix: "kv"
-			}, J);
-			await e.upsert(J, {
+			}, q);
+			await e.upsert(q, {
 				id: o,
 				key: t,
 				value: JSON.stringify(r),
@@ -2462,39 +2462,39 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await ki(e, t);
+			let n = await Ai(e, t);
 			if (n === null) return !1;
-			let r = !Di(n, Date.now());
-			return await e.delete(J, n.id), r;
+			let r = !Oi(n, Date.now());
+			return await e.delete(q, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await ki(e, t);
-			return n === null ? !1 : Di(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
+			let n = await Ai(e, t);
+			return n === null ? !1 : Oi(n, Date.now()) ? (await e.delete(q, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
-			let n = Date.now(), i = ie(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
-				table: J,
+			let n = Date.now(), i = E(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
+				table: q,
 				predicate: a,
 				order: [],
 				take: void 0,
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of s) Di(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of s) Oi(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
-			await e.deleteMany(J, { where: {
+			await e.deleteMany(q, { where: {
 				column: "id",
 				op: "isNotNull"
 			} });
 		})
 	};
-}, ji = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? xt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(P.provide(yt)) : r === "memory" ? bt() : P.succeed(vt, vt.of(Ai(e))), a = qe.make(gt.Default.pipe(P.provide(i))), o = await a.runPromise(gt);
+}, Mi = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? St(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(P.provide(bt)) : r === "memory" ? xt() : P.succeed(yt, yt.of(ji(e))), a = qe.make(_t.Default.pipe(P.provide(i))), o = await a.runPromise(_t);
 	return {
 		kv: {
-			get: (e) => a.runPromise(o.get(e)).then((e) => I.getOrUndefined(e)),
+			get: (e) => a.runPromise(o.get(e)).then((e) => Xe.getOrUndefined(e)),
 			getOrElse: (e, t) => a.runPromise(o.getOrElse(e, t)),
 			set: (e, t, n) => a.runPromise(o.set(e, t, n)),
 			delete: (e) => a.runPromise(o.delete(e)),
@@ -2506,7 +2506,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, Mi = {
+}, Ni = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -2514,7 +2514,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, Ni = "_voltro_api_keys", Pi = (e) => ge("sha256").update(e, "utf8").digest("hex"), Fi = (e = "voltro_") => `${e}${_e(30).toString("base64url")}`, Ii = (e) => ({
+}, Pi = "_voltro_api_keys", Fi = (e) => he("sha256").update(e, "utf8").digest("hex"), Ii = (e = "voltro_") => `${e}${ge(30).toString("base64url")}`, Li = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -2524,17 +2524,17 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	expiresAt: e.expiresAt,
 	revokedAt: e.revokedAt,
 	createdAt: e.createdAt
-}), Li = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ri = (e, t = {}) => {
+}), Ri = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), zi = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = async (t) => {
-		let r = Fi(n), i = f({
+		let r = Ii(n), i = f({
 			kind: "typeid",
 			prefix: "apikey"
-		}, Ni), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, Pi), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
-			hashedKey: Pi(r),
+			hashedKey: Fi(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -2552,7 +2552,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		};
 	}, i = async (t, n = Date.now()) => {
 		let r = await e.findByHash(t);
-		return !r || !Li(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
+		return !r || !Ri(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
 			id: r.id,
 			tenantId: r.tenantId ?? "",
 			createdBy: r.createdBy ?? null,
@@ -2562,7 +2562,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	return {
 		issue: r,
 		resolveByHash: i,
-		verify: (e, t) => i(Pi(e), t),
+		verify: (e, t) => i(Fi(e), t),
 		revoke: async (t, n = Date.now()) => await e.findById(t) ? (await e.patch(t, { revokedAt: n }), !0) : !1,
 		rotate: async (t, n = Date.now()) => {
 			let i = await e.findById(t);
@@ -2573,9 +2573,9 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				createdBy: i.createdBy
 			})) : null;
 		},
-		list: async (t) => (await e.listByTenant(t)).map(Ii)
+		list: async (t) => (await e.listByTenant(t)).map(Li)
 	};
-}, zi = () => {
+}, Bi = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -2592,21 +2592,21 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			});
 		}
 	};
-}, Bi = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Vi = (e) => ({
+}, Vi = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Hi = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: Bi(e.lastUsedAt),
-	expiresAt: Bi(e.expiresAt),
-	revokedAt: Bi(e.revokedAt),
+	lastUsedAt: Vi(e.lastUsedAt),
+	expiresAt: Vi(e.expiresAt),
+	revokedAt: Vi(e.revokedAt),
 	createdBy: e.createdBy ?? null,
-	createdAt: Bi(e.createdAt) ?? 0
-}), Hi = (e) => {
+	createdAt: Vi(e.createdAt) ?? 0
+}), Ui = (e) => {
 	let t = async (t) => await e.query({
-		table: Ni,
+		table: Pi,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -2624,61 +2624,61 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(Ni, n(t));
+			await e.insert(Pi, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(u("hashedKey", e));
-			return n[0] ? Vi(n[0]) : null;
+			return n[0] ? Hi(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(u("id", e));
-			return n[0] ? Vi(n[0]) : null;
+			return n[0] ? Hi(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(Vi).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(Hi).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(Ni, t, n(r));
+			await e.update(Pi, t, n(r));
 		}
 	};
-}, Ui = (e, t = {}) => St({
+}, Wi = (e, t = {}) => Ct({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), Wi = (e) => {
+}), Gi = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null
 	};
-}, Gi = (e, t = "/v1/api-keys") => {
-	let n = R.Struct({
-		id: R.String,
-		name: R.String,
-		keyPrefix: R.String,
-		tenantId: R.NullOr(R.String),
-		scopes: R.Array(R.String),
-		lastUsedAt: R.NullOr(R.Number),
-		expiresAt: R.NullOr(R.Number),
-		revokedAt: R.NullOr(R.Number),
-		createdAt: R.Number
+}, Ki = (e, t = "/v1/api-keys") => {
+	let n = L.Struct({
+		id: L.String,
+		name: L.String,
+		keyPrefix: L.String,
+		tenantId: L.NullOr(L.String),
+		scopes: L.Array(L.String),
+		lastUsedAt: L.NullOr(L.Number),
+		expiresAt: L.NullOr(L.Number),
+		revokedAt: L.NullOr(L.Number),
+		createdAt: L.Number
 	});
 	return [
-		ut({
+		dt({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [ft(xe)],
-			input: R.Struct({ body: R.Struct({
-				name: R.String,
-				scopes: R.optional(R.Array(R.String)),
-				expiresInDays: R.optional(R.Number)
+			guards: [pt(be)],
+			input: L.Struct({ body: L.Struct({
+				name: L.String,
+				scopes: L.optional(L.Array(L.String)),
+				expiresInDays: L.optional(L.Number)
 			}) }),
-			output: R.Struct({
-				id: R.String,
-				token: R.String,
-				keyPrefix: R.String
+			output: L.Struct({
+				id: L.String,
+				token: L.String,
+				keyPrefix: L.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = Wi(n), a = await e.issue({
+				let r = t.body, i = Gi(n), a = await e.issue({
 					tenantId: i.tenantId,
 					name: r.name,
 					...r.scopes ? { scopes: r.scopes } : {},
@@ -2692,72 +2692,72 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				};
 			}
 		}),
-		ut({
+		dt({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [ft(xe)],
-			input: R.Struct({}),
-			output: R.Struct({ keys: R.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(Wi(n).tenantId)] })
+			guards: [pt(be)],
+			input: L.Struct({}),
+			output: L.Struct({ keys: L.Array(n) }),
+			handler: async (t, n) => ({ keys: [...await e.list(Gi(n).tenantId)] })
 		}),
-		ut({
+		dt({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [ft(xe)],
-			input: R.Struct({ body: R.Struct({ id: R.String }) }),
-			output: R.Struct({ ok: R.Boolean }),
+			guards: [pt(be)],
+			input: L.Struct({ body: L.Struct({ id: L.String }) }),
+			output: L.Struct({ ok: L.Boolean }),
 			handler: async (t, n) => ({ ok: await e.revoke(t.body.id) })
 		})
 	];
-}, Ki = {
+}, qi = {
 	type: "anonymous",
 	id: null,
 	tenantId: null
-}, qi = class extends R.TaggedError()("TenantScopeViolation", {
-	table: R.String,
-	reason: R.String
-}) {}, Ji = class extends R.TaggedError()("StoreOperationFailed", {
-	operation: R.String,
-	table: R.String,
-	cause: R.String
-}) {}, Yi = class extends R.TaggedError()("TableValidationFailed", {
-	table: R.String,
-	summary: R.String,
-	issues: R.Array(R.Struct({
-		path: R.String,
-		message: R.String
+}, Ji = class extends L.TaggedError()("TenantScopeViolation", {
+	table: L.String,
+	reason: L.String
+}) {}, Yi = class extends L.TaggedError()("StoreOperationFailed", {
+	operation: L.String,
+	table: L.String,
+	cause: L.String
+}) {}, Xi = class extends L.TaggedError()("TableValidationFailed", {
+	table: L.String,
+	summary: L.String,
+	issues: L.Array(L.Struct({
+		path: L.String,
+		message: L.String
 	}))
-}) {}, Xi = class extends He.Tag("@voltro/EffectStore")() {}, Zi = (e, t) => (n) => n instanceof qi ? n : new Ji({
+}) {}, Zi = class extends Ve.Tag("@voltro/EffectStore")() {}, Qi = (e, t) => (n) => n instanceof Ji ? n : new Yi({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), Qi = (e, t, n) => N.tryPromise({
+}), $i = (e, t, n) => N.tryPromise({
 	try: n,
-	catch: Zi(e, t)
-}), $i = (e) => P.succeed(Xi, {
-	query: ((t) => Qi("query", t.table, () => e.query(t))),
-	insert: (t, n) => Qi("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => Qi("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => Qi("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => Qi("hardDelete", t, () => e.hardDelete(t, n))
-}), ea = (e) => st.make(e.name, {
+	catch: Qi(e, t)
+}), ea = (e) => P.succeed(Zi, {
+	query: ((t) => $i("query", t.table, () => e.query(t))),
+	insert: (t, n) => $i("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => $i("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => $i("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => $i("hardDelete", t, () => e.hardDelete(t, n))
+}), ta = (e) => ct.make(e.name, {
 	payload: e.payloadSchema,
-	success: Ae,
+	success: ke,
 	error: e.errorSchema
-}), ta = (e, t) => ({
+}), na = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), na = ta, ra = (e) => {
-	let t = j.failureOption(e), n = t._tag === "Some" ? t.value : j.squash(e);
+}), ra = na, ia = (e) => {
+	let t = M.failureOption(e), n = t._tag === "Some" ? t.value : M.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, ia = (e, t, n) => {
+}, aa = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -2783,7 +2783,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: ra(r.cause)
+			error: ia(r.cause)
 		};
 	}
 	return {
@@ -2792,17 +2792,17 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, aa = (e) => new Promise((t) => setTimeout(t, e)), oa = (e) => {
+}, oa = (e) => new Promise((t) => setTimeout(t, e)), sa = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) throw Error(`Unknown workflow: ${e}`);
 		return n;
 	}, r = async (t, r) => {
 		let i = n(t);
-		return ia(t, r, await e.runEffect(i.poll(r)));
-	}, i = async () => e.runEffect(Ct()), a = async (t, r, i) => {
+		return aa(t, r, await e.runEffect(i.poll(r)));
+	}, i = async () => e.runEffect(wt()), a = async (t, r, i) => {
 		let a = n(t), o;
-		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), ta(t, o ?? await e.runEffect(a.executionId(r)))) : ta(t, await e.runEffect(a.execute(r, { discard: !0 })));
+		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), na(t, o ?? await e.runEffect(a.executionId(r)))) : na(t, await e.runEffect(a.execute(r, { discard: !0 })));
 	};
 	return {
 		start: a,
@@ -2840,7 +2840,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				let e = await r(i, a);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' run '${a}'`);
-				await aa(c);
+				await oa(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -2878,22 +2878,22 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, sa = (e, t) => ({
+}, ca = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), ta(n, a);
+		return t(() => e.start(n, r)), na(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), ta(n, a);
+		return t(() => e.child(n, r, i)), na(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), ca = (e, t) => ({
+}), la = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -2907,7 +2907,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), la = (e) => {
+}), ua = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -2928,16 +2928,16 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, ua = (e, t) => {
+}, da = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? N.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(N.map((e) => ta(r.definition.name, e)))).pipe(N.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? N.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(N.map((e) => na(r.definition.name, e)))).pipe(N.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, da = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, fa = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? N.succeed(void 0) : N.promise(() => Promise.resolve(a))).pipe(N.flatMap((a) => {
 		let o = {
 			...a,
-			subject: a?.subject ?? Ki,
+			subject: a?.subject ?? qi,
 			traceId: a?.traceId ?? "workflow-bootstrap"
 		}, s = t.buildContext(o, {
 			workflowName: e.definition.name,
@@ -2945,42 +2945,42 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
 		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = s?.store;
-		return u === void 0 ? l : N.provide(l, $i(u));
+		return u === void 0 ? l : N.provide(l, ea(u));
 	}));
-}))), fa = (e) => ({
+}))), pa = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), pa = fa, ma = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", ha = () => {
+}), ma = pa, ha = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", ga = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, ga = (e) => `${e}_${ha()}`, _a = (e) => e.id ?? `${e.event}->${e.workflow}`, va = E("_voltro_workflow_events", {
+}, _a = (e) => `${e}_${ga()}`, va = (e) => e.id ?? `${e.event}->${e.workflow}`, ya = D("_voltro_workflow_events", {
 	id: v({ prefix: "wfe" }),
-	name: D(),
+	name: O(),
 	payload: C(),
-	source: D(),
+	source: O(),
 	subject: C().nullable(),
-	traceId: D().nullable(),
-	occurredAt: O().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), ya = E("_voltro_workflow_event_deliveries", {
+	traceId: O().nullable(),
+	occurredAt: k().default("now")
+}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), ba = D("_voltro_workflow_event_deliveries", {
 	id: v({ prefix: "wfed" }),
-	eventId: D(),
-	eventName: D(),
-	triggerId: D(),
-	workflowName: D(),
-	executionId: D().nullable(),
-	status: D().oneOf([
+	eventId: O(),
+	eventName: O(),
+	triggerId: O(),
+	workflowName: O(),
+	executionId: O().nullable(),
+	status: O().oneOf([
 		"starting",
 		"started",
 		"skipped",
 		"failed"
 	]).default("starting"),
-	idempotencyKey: D().unique(),
+	idempotencyKey: O().unique(),
 	skipped: r().default(!1),
-	errorMessage: D().nullable(),
-	createdAt: O().default("now"),
-	completedAt: O().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), ba = (e) => {
-	let t = e.makeId ?? ga, n = /* @__PURE__ */ new Map();
+	errorMessage: O().nullable(),
+	createdAt: k().default("now"),
+	completedAt: k().nullable()
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), xa = (e) => {
+	let t = e.makeId ?? _a, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3021,7 +3021,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = _a(o), l = o.workflow, d;
+			let s = va(o), l = o.workflow, d;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -3124,61 +3124,61 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			triggered: m
 		};
 	} };
-}, xa = A({ scope: "voltro:outbox" }), Y = "_voltro_outbox", Sa = {
+}, Sa = j({ scope: "voltro:outbox" }), J = "_voltro_outbox", Ca = {
 	kind: "typeid",
 	prefix: "obx"
-}, Ca = E(Y, {
+}, wa = D(J, {
 	id: v({ prefix: "obx" }),
-	effect: D(),
+	effect: O(),
 	payload: C(),
-	status: D(),
+	status: O(),
 	attempts: b(),
 	maxAttempts: b(),
-	nextAttemptAt: O(),
-	idempotencyKey: D().nullable(),
-	lastError: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	createdAt: O(),
-	deliveredAt: O().nullable(),
-	resendRequestedBy: D().nullable(),
-	resendReason: D().nullable(),
+	nextAttemptAt: k(),
+	idempotencyKey: O().nullable(),
+	lastError: O().nullable(),
+	subjectId: O().nullable(),
+	tenantId: O().nullable(),
+	traceId: O().nullable(),
+	createdAt: k(),
+	deliveredAt: k().nullable(),
+	resendRequestedBy: O().nullable(),
+	resendReason: O().nullable(),
 	resendCount: b()
-}), wa = "_voltro_outbox_attempts", Ta = {
+}), Ta = "_voltro_outbox_attempts", Ea = {
 	kind: "typeid",
 	prefix: "obxa"
-}, Ea = E(wa, {
+}, Da = D(Ta, {
 	id: v({ prefix: "obxa" }),
-	outboxId: D(),
-	effect: D(),
+	outboxId: O(),
+	effect: O(),
 	attempt: b(),
-	trigger: D().oneOf(["automatic", "manual"]),
-	triggeredBy: D().nullable(),
-	reason: D().nullable(),
-	outcome: D().oneOf([
+	trigger: O().oneOf(["automatic", "manual"]),
+	triggeredBy: O().nullable(),
+	reason: O().nullable(),
+	outcome: O().oneOf([
 		"delivered",
 		"failed",
 		"dead"
 	]),
-	startedAt: O(),
-	finishedAt: O(),
+	startedAt: k(),
+	finishedAt: k(),
 	durationMs: b(),
-	error: D().nullable(),
+	error: O().nullable(),
 	response: C().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Da = (e) => {
+	subjectId: O().nullable(),
+	tenantId: O().nullable(),
+	traceId: O().nullable()
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Oa = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Oa = 8, ka = (e) => ({
+}, ka = 8, Aa = (e) => ({
 	enqueue: async (n, r, i) => {
 		let a = (e.now ?? (() => /* @__PURE__ */ new Date()))(), o = i?.idempotencyKey;
 		if (o !== void 0) {
 			let n = (await e.store.query({
-				table: Y,
+				table: J,
 				predicate: t(u("idempotencyKey", o), u("status", "pending")),
 				order: [],
 				take: 1,
@@ -3188,12 +3188,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			if (n !== void 0) return n.id;
 		}
 		let s = {
-			id: f(Sa, Y),
+			id: f(Ca, J),
 			effect: n,
 			payload: r,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: i?.maxAttempts ?? Oa,
+			maxAttempts: i?.maxAttempts ?? ka,
 			nextAttemptAt: new Date(a.getTime() + (i?.delayMs ?? 0)),
 			idempotencyKey: o ?? null,
 			lastError: null,
@@ -3205,7 +3205,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			resendRequestedBy: null,
 			resendReason: null,
 			resendCount: 0
-		}, c = await e.store.insert(Y, s);
+		}, c = await e.store.insert(J, s);
 		if (e.afterCommit !== void 0 && e.nudge !== void 0) {
 			let t = e.nudge;
 			e.afterCommit(async () => {
@@ -3216,7 +3216,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	},
 	resend: async (t, n) => {
 		let r = (e.now ?? (() => /* @__PURE__ */ new Date()))(), i = (await e.store.query({
-			table: Y,
+			table: J,
 			predicate: u("id", t),
 			order: [],
 			take: 1,
@@ -3226,7 +3226,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		if (i === void 0) throw Error(`outbox.resend: no entry "${t}"`);
 		if (i.status === "delivering") throw Error(`outbox.resend("${t}"): an attempt is in flight — retry once it settles`);
 		let a = i.attempts ?? 0, o = Math.max(1, Math.floor(n?.attempts ?? 1));
-		if (await e.store.update(Y, t, {
+		if (await e.store.update(J, t, {
 			status: "pending",
 			nextAttemptAt: r,
 			maxAttempts: a + o,
@@ -3240,7 +3240,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), Aa = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), ja = 50, Ma = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Na = (e) => {
+}), ja = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Ma = 50, Na = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Pa = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -3250,13 +3250,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: Ma(n, 8192)
+		preview: Na(n, 8192)
 	} : t;
-}, Pa = async (e, t, n) => {
+}, Fa = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(wa, {
-			id: f(Ta, wa),
+		await e.insert(Ta, {
+			id: f(Ea, Ta),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -3267,14 +3267,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : Ma(t.error, 4e3),
-			response: Na(t.response),
+			error: t.error === null ? null : Na(t.error, 4e3),
+			response: Pa(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		xa.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		Sa.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -3282,7 +3282,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: wa,
+			table: Ta,
 			predicate: u("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -3292,14 +3292,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(wa, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Ta, r.id);
 	} catch (e) {
-		xa.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		Sa.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, Fa = async (e) => {
+}, Ia = async (e) => {
 	let n = (e.now ?? (() => /* @__PURE__ */ new Date()))(), r = await e.store.query({
-		table: Y,
-		predicate: t(u("status", "pending"), ne("nextAttemptAt", n)),
+		table: J,
+		predicate: t(u("status", "pending"), w("nextAttemptAt", n)),
 		order: [{
 			column: "nextAttemptAt",
 			direction: "asc"
@@ -3314,7 +3314,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			s++;
 			continue;
 		}
-		let u = t.attempts + 1, d = t.maxAttempts ?? Oa, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = t.attempts + 1, d = t.maxAttempts ?? ka, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let n = await l.handler({
 				payload: t.payload ?? {},
@@ -3323,7 +3323,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
 			});
-			await Pa(e.store, {
+			await Fa(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: "delivered",
@@ -3331,7 +3331,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				finishedAt: /* @__PURE__ */ new Date(),
 				error: null,
 				response: n
-			}, p), await e.store.update(Y, r, {
+			}, p), await e.store.update(J, r, {
 				status: "delivered",
 				attempts: u,
 				deliveredAt: /* @__PURE__ */ new Date(),
@@ -3341,7 +3341,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			}), i++;
 		} catch (i) {
 			let s = i instanceof Error ? i.message : String(i), l = u >= d;
-			await Pa(e.store, {
+			await Fa(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -3349,24 +3349,24 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				finishedAt: /* @__PURE__ */ new Date(),
 				error: s,
 				response: null
-			}, p), await e.store.update(Y, r, {
+			}, p), await e.store.update(J, r, {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: s,
-				nextAttemptAt: new Date(n.getTime() + Aa(u)),
+				nextAttemptAt: new Date(n.getTime() + ja(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (o++, xa.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (o++, Sa.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, i)) : (a++, xa.warn("outbox delivery failed; will retry", {
+			}, i)) : (a++, Sa.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: Aa(u)
+				retryInMs: ja(u)
 			}));
 		}
 	}
@@ -3376,45 +3376,45 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		dead: o,
 		skipped: s
 	};
-}, Ia = A({ scope: "voltro:connections" }), X = "_voltro_connections", La = {
+}, La = j({ scope: "voltro:connections" }), Y = "_voltro_connections", Ra = {
 	kind: "typeid",
 	prefix: "conn"
-}, Ra = E(X, {
+}, za = D(Y, {
 	id: v({ prefix: "conn" }),
-	connectionId: D(),
-	subjectId: D(),
-	tenantId: D().nullable(),
-	kind: D().oneOf(["oauth2", "pat"]),
-	status: D().oneOf([
+	connectionId: O(),
+	subjectId: O(),
+	tenantId: O().nullable(),
+	kind: O().oneOf(["oauth2", "pat"]),
+	status: O().oneOf([
 		"connected",
 		"expired",
 		"revoked",
 		"error"
 	]),
-	accessToken: D(),
-	refreshToken: D().nullable(),
-	expiresAt: O().nullable(),
-	scopes: D().nullable(),
-	accountId: D().nullable(),
-	accountLabel: D().nullable(),
-	lastError: D().nullable(),
-	refreshLockedUntil: O(),
+	accessToken: O(),
+	refreshToken: O().nullable(),
+	expiresAt: k().nullable(),
+	scopes: O().nullable(),
+	accountId: O().nullable(),
+	accountLabel: O().nullable(),
+	lastError: O().nullable(),
+	refreshLockedUntil: k(),
 	metadata: C().nullable(),
-	connectedAt: O(),
-	updatedAt: O()
-}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), za = "_voltro_connection_grants", Ba = {
+	connectedAt: k(),
+	updatedAt: k()
+}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), X = "_voltro_connection_grants", Ba = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Va = E(za, {
+}, Va = D(X, {
 	id: v({ prefix: "cgrant" }),
-	state: D().unique(),
-	connectionId: D(),
-	subjectId: D(),
-	tenantId: D().nullable(),
-	codeVerifier: D().nullable(),
-	redirectTo: D(),
-	createdAt: O(),
-	expiresAt: O()
+	state: O().unique(),
+	connectionId: O(),
+	subjectId: O(),
+	tenantId: O().nullable(),
+	codeVerifier: O().nullable(),
+	redirectTo: O(),
+	createdAt: k(),
+	expiresAt: k()
 }).index(["expiresAt"]), Ha = /^[a-z][a-z0-9-]*$/, Ua = (e) => {
 	if (!Ha.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
@@ -3427,7 +3427,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	return e;
 }, Wa = (e) => e.label ?? e.id, Ga = (e) => {
-	if (e.length !== 0 && vi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
+	if (e.length !== 0 && yi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
 }, Ka = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
@@ -3465,7 +3465,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	lastError: t.lastError ?? null,
 	connectedAt: Ja(t.connectedAt)
 }, Za = async (e, n, r) => (await e.query({
-	table: X,
+	table: Y,
 	predicate: t(u("connectionId", n), u("subjectId", r)),
 	order: [],
 	take: 1,
@@ -3473,14 +3473,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	projection: void 0
 }))[0], Qa = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: f(La, X),
+		id: f(Ra, Y),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		kind: e.definition.kind,
 		status: "connected",
-		accessToken: q(e.tokens.accessToken),
-		refreshToken: e.tokens.refreshToken === void 0 ? null : q(e.tokens.refreshToken),
+		accessToken: K(e.tokens.accessToken),
+		refreshToken: e.tokens.refreshToken === void 0 ? null : K(e.tokens.refreshToken),
 		expiresAt: n,
 		scopes: e.tokens.scopes.length > 0 ? e.tokens.scopes.join(" ") : null,
 		accountId: e.account?.accountId ?? null,
@@ -3492,7 +3492,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		updatedAt: t
 	};
 	return $a(e.store, r);
-}, $a = (e, t) => e.upsert(X, t, {
+}, $a = (e, t) => e.upsert(Y, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -3510,10 +3510,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	]
 }), eo = async (e, t, n) => {
 	let r = await Za(e, t, n);
-	return r !== void 0 && e.delete(X, r.id);
+	return r !== void 0 && e.delete(Y, r.id);
 }, to = async (e, t, n) => {
 	let r = await e.query({
-		table: X,
+		table: Y,
 		predicate: u("subjectId", n),
 		order: [],
 		take: void 0,
@@ -3534,7 +3534,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		});
 		i = n.status, a = await n.text();
 	} catch (t) {
-		throw new k({
+		throw new A({
 			connectionId: e.id,
 			reason: `token endpoint unreachable: ${String(t)}`,
 			transient: !0
@@ -3546,12 +3546,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	} catch {
 		o = {};
 	}
-	if (i < 200 || i >= 300) throw new k({
+	if (i < 200 || i >= 300) throw new A({
 		connectionId: e.id,
 		reason: `token endpoint ${i}: ${o.error ?? ""} ${o.error_description ?? a.slice(0, 200)}`.trim(),
 		transient: i >= 500
 	});
-	if (typeof o.access_token != "string" || o.access_token.length === 0) throw new k({
+	if (typeof o.access_token != "string" || o.access_token.length === 0) throw new A({
 		connectionId: e.id,
 		reason: "token response carried no access_token",
 		transient: !1
@@ -3588,7 +3588,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 }, mo = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
-	accessToken: bi(String(t.accessToken)),
+	accessToken: xi(String(t.accessToken)),
 	expiresAt: qa(t.expiresAt),
 	scopes: Ya(t.scopes),
 	accountId: t.accountId ?? null,
@@ -3612,50 +3612,50 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	return uo.set(o, c), c;
 }, _o = async (e) => {
 	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? lo, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
-	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), ne("refreshLockedUntil", new Date(i()))) }) === 0) {
+	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), w("refreshLockedUntil", new Date(i()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await o(200);
 			let e = await Za(n, a.id, r);
 			if (e === void 0) throw new co(a.id, r);
 			if (!ho(e, s, i())) return mo(a, e);
 		}
-		throw new k({
+		throw new A({
 			connectionId: a.id,
 			reason: "another replica held the refresh lease and did not publish a fresh token in time",
 			transient: !0
 		});
 	}
 	let l = e.row.refreshToken;
-	if (l == null) throw await n.update(X, c, {
+	if (l == null) throw await n.update(Y, c, {
 		status: "expired",
 		lastError: "access token expired and no refresh token is on file — reconnect required",
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
-	}), new k({
+	}), new A({
 		connectionId: a.id,
 		reason: "access token expired and no refresh token is on file — reconnect required",
 		transient: !1
 	});
 	let d;
 	try {
-		d = await ao(a, bi(String(l)), i);
+		d = await ao(a, xi(String(l)), i);
 	} catch (e) {
-		let t = e instanceof k ? e : new k({
+		let t = e instanceof A ? e : new A({
 			connectionId: a.id,
 			reason: String(e),
 			transient: !0
 		});
-		throw await n.update(X, c, {
+		throw await n.update(Y, c, {
 			status: t.transient ? "error" : "revoked",
 			lastError: t.reason,
 			refreshLockedUntil: /* @__PURE__ */ new Date(0),
 			updatedAt: new Date(i()),
 			...t.transient ? {} : {
-				accessToken: q(""),
+				accessToken: K(""),
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Ia.warn("connection refresh failed", {
+		}), La.warn("connection refresh failed", {
 			connectionId: a.id,
 			transient: t.transient,
 			reason: t.reason
@@ -3663,15 +3663,15 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	let f = {
 		status: "connected",
-		accessToken: q(d.accessToken),
-		...d.refreshToken === void 0 ? {} : { refreshToken: q(d.refreshToken) },
+		accessToken: K(d.accessToken),
+		...d.refreshToken === void 0 ? {} : { refreshToken: K(d.refreshToken) },
 		expiresAt: d.expiresAt === void 0 ? null : new Date(d.expiresAt),
 		...d.scopes.length > 0 ? { scopes: d.scopes.join(" ") } : {},
 		lastError: null,
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
 	};
-	return mo(a, await n.update(X, c, f) ?? {
+	return mo(a, await n.update(Y, c, f) ?? {
 		...e.row,
 		...f
 	});
@@ -3687,13 +3687,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	return yo(new Uint8Array(t));
 }, xo = 10 * 6e4, So = (e) => `/_voltro/connections/${e}/callback`, Co = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, wo = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${So(e.id)}`, To = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = vo(), i = n.pkce === !1 ? null : vo(48), a = wo(n, e.publicUrl);
-	await e.store.insert(za, {
-		id: f(Ba, za),
+	await e.store.insert(X, {
+		id: f(Ba, X),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
-		codeVerifier: i === null ? null : q(i),
+		codeVerifier: i === null ? null : K(i),
 		redirectTo: Co(e.redirectTo),
 		createdAt: t,
 		expiresAt: new Date(t.getTime() + xo)
@@ -3714,37 +3714,37 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	};
 }, Eo = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: za,
+		table: X,
 		predicate: u("state", e.state),
 		order: [],
 		take: 1,
 		skip: void 0,
 		projection: void 0
 	}))[0];
-	if (n === void 0) throw new k({
+	if (n === void 0) throw new A({
 		connectionId: "unknown",
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(za, n.id);
+	await e.store.delete(X, n.id);
 	let r = String(n.connectionId), i = qa(n.expiresAt);
-	if (i !== null && i.getTime() < t.getTime()) throw new k({
+	if (i !== null && i.getTime() < t.getTime()) throw new A({
 		connectionId: r,
 		reason: "handshake expired — start again",
 		transient: !1
 	});
 	let a = e.registry.get(r);
-	if (a === void 0 || a.kind !== "oauth2") throw new k({
+	if (a === void 0 || a.kind !== "oauth2") throw new A({
 		connectionId: r,
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : bi(String(n.codeVerifier)), s = await io(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : xi(String(n.codeVerifier)), s = await io(a, {
 		code: e.code,
 		redirectUri: wo(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Ia.warn("connection identify failed; storing without account details", {
+		La.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
@@ -3763,8 +3763,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	};
 }, Do = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: za,
-		predicate: ne("expiresAt", t),
+		table: X,
+		predicate: w("expiresAt", t),
 		order: [],
 		take: void 0,
 		skip: void 0,
@@ -3823,11 +3823,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	};
 }, Po = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
-	if (n === null || n === "") throw new Te({ connectionId: t });
+	if (n === null || n === "") throw new we({ connectionId: t });
 	return n;
 }, Fo = (e, t) => {
 	let n = e.registry.get(t);
-	if (n === void 0) throw new we({ connectionId: t });
+	if (n === void 0) throw new Ce({ connectionId: t });
 	return n;
 }, Io = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
@@ -3845,7 +3845,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	})) : to(n.store, e.registry, r);
 }, Lo = (e) => async (t, n) => {
 	let r = Fo(e, t.connectionId), i = Po(n, t.connectionId);
-	if (r.kind !== "oauth2") throw new Ce({
+	if (r.kind !== "oauth2") throw new Se({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
@@ -3860,13 +3860,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	});
 }, Ro = (e) => async (t, n) => {
 	let r = Fo(e, t.connectionId), i = Po(n, t.connectionId);
-	if (r.kind !== "pat") throw new Ce({
+	if (r.kind !== "pat") throw new Se({
 		connectionId: t.connectionId,
 		expected: "pat",
 		actual: r.kind
 	});
 	let a = t.token.trim();
-	if (a.length === 0) throw new k({
+	if (a.length === 0) throw new A({
 		connectionId: t.connectionId,
 		reason: "token is empty",
 		transient: !1
@@ -3875,7 +3875,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	if (r.validate !== void 0) try {
 		o = await r.validate(a);
 	} catch (e) {
-		throw new k({
+		throw new A({
 			connectionId: t.connectionId,
 			reason: `the provider rejected that token: ${e instanceof Error ? e.message : String(e)}`,
 			transient: !1
@@ -3896,10 +3896,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	Fo(e, t.connectionId);
 	let r = Po(n, t.connectionId);
 	return { ok: await eo(n.store, t.connectionId, r) };
-}, Bo = "admin:full", Vo = class extends R.TaggedError()("AccessDenied", {
-	action: R.String,
-	resourceType: R.String,
-	resourceId: R.String
+}, Bo = "admin:full", Vo = class extends L.TaggedError()("AccessDenied", {
+	action: L.String,
+	resourceType: L.String,
+	resourceId: L.String
 }) {}, Ho = /* @__PURE__ */ new Map(), Uo = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
@@ -3947,10 +3947,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 }, i)), $o = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, es = A({ scope: "voltro:policy" }), ts, ns = (e) => {
+}, es = j({ scope: "voltro:policy" }), ts, ns = (e) => {
 	ts = e;
 }, rs = () => ts, is = () => {
-	Re((e) => N.gen(function* () {
+	Le((e) => N.gen(function* () {
 		let t = Wo(e.resourceType);
 		if (t === void 0) return es.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
@@ -4034,7 +4034,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, ss = P.effect(et.HttpClient, N.map(et.HttpClient, (e) => e.pipe(et.mapRequestEffect((e) => N.currentSpan.pipe(N.map((t) => e.headers.traceparent === void 0 ? tt.setHeader(e, "traceparent", cr({
+}, ss = P.effect(tt.HttpClient, N.map(tt.HttpClient, (e) => e.pipe(tt.mapRequestEffect((e) => N.currentSpan.pipe(N.map((t) => e.headers.traceparent === void 0 ? nt.setHeader(e, "traceparent", lr({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
@@ -4088,16 +4088,16 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, fs = /* @__PURE__ */ new Map(), ps = /* @__PURE__ */ new Map(), ms = /* @__PURE__ */ new Set(), hs = ds([]), gs = class extends R.TaggedError()("NoRowFound", {
-	table: R.String,
-	found: R.Number
+}, fs = /* @__PURE__ */ new Map(), ps = /* @__PURE__ */ new Map(), ms = /* @__PURE__ */ new Set(), hs = ds([]), gs = class extends L.TaggedError()("NoRowFound", {
+	table: L.String,
+	found: L.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, _s = class extends R.TaggedError()("OptimisticLockError", {
-	table: R.String,
-	expected: R.Number
+}, _s = class extends L.TaggedError()("OptimisticLockError", {
+	table: L.String,
+	expected: L.Number
 }) {
 	get message() {
 		return `optimistic lock failed on '${this.table}': expected version ${this.expected}`;
@@ -4110,11 +4110,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	switch (n) {
 		case "=": return u(t, r);
 		case "!=":
-		case "<>": return T(t, r);
+		case "<>": return re(t, r);
 		case ">": return h(t, r);
 		case ">=": return g(t, r);
 		case "<": return te(t, r);
-		case "<=": return ne(t, r);
+		case "<=": return w(t, r);
 		case "in": return y(t, r);
 		case "like":
 		case "contains":
@@ -4124,7 +4124,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 }, bs = (e) => {
 	let t = m(e);
 	if (t === void 0) throw Error(`unknown table '${e}' — is it declared with table()?`);
-	return ae(t);
+	return ie(t);
 }, xs = class e {
 	backend;
 	scope;
@@ -4174,7 +4174,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	scopedQuery() {
 		let e = this.query, { subject: t, schemaRegistry: n } = this.scope;
 		!this.skipTenant && n.hasTenant(this.table) && t.tenantId != null && (e = e.where(u("tenantId", t.tenantId))), !this.skipSoftDelete && n.hasSoftDelete(this.table) && (e = e.where(S("deletedAt")));
-		let r = (this.scope.rowFilter ?? In)(this.table);
+		let r = (this.scope.rowFilter ?? Ln)(this.table);
 		return r !== void 0 && (e = e.where(r)), e;
 	}
 	async all() {
@@ -4292,12 +4292,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	for (let r of t) e[r] !== void 0 && (n[r] = e[r]);
 	return n;
 }, Os = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", ks = (e) => {
-	throw new qi({
+	throw new Ji({
 		table: e,
 		reason: Os
 	});
 }, As = (e, n) => {
-	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? In, o = (e, t) => {
+	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Ln, o = (e, t) => {
 		let a = { ...t }, o = n.schemaRegistry, s = o.idScheme(e);
 		if (s !== void 0 && a[Ts] == null) if (s.kind === "numeric") delete a[Ts];
 		else {
@@ -4325,10 +4325,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		try {
 			return await r();
 		} catch (n) {
-			let r = Yt(n);
-			if (Xt(r)) {
+			let r = Xt(n);
+			if (Zt(r)) {
 				let n = t.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
-				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new qi({
+				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Ji({
 					table: e,
 					reason: n == null ? "write references a tenant that does not exist" : `tenant '${String(n)}' does not exist — seed the row in \`tenants\`, or fix how the request resolved this tenant (subject.tenantId / the x-tenant header / the dev TENANT fallback)`
 				});
@@ -4347,13 +4347,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}, g = (e, t) => {
 		let r = n.schemaRegistry.validatePatchSchema(e);
 		if (r === void 0) return t;
-		let i = R.decodeUnknownEither(r)(t);
+		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = Tt.formatErrorSync(i.left).map((e) => ({
+		let a = Et.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Yi({
+		throw new Xi({
 			table: e,
 			summary: o === void 0 ? "patch validation failed" : `${o.path}: ${o.message}`,
 			issues: a
@@ -4362,8 +4362,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		let e = { deletedAt: /* @__PURE__ */ new Date() };
 		return r !== null && (e.deletedBy = r), e;
 	}, v = (e, t, n) => {
-		let r = w(n, t);
-		if (r.length !== 0) throw new Yi({
+		let r = T(n, t);
+		if (r.length !== 0) throw new Xi({
 			table: e,
 			summary: `upsert conflictColumns [${n.map((e) => `'${e}'`).join(", ")}] but the payload is missing ${r.map((e) => `'${e}'`).join(", ")}`,
 			issues: r.map((e) => ({
@@ -4371,11 +4371,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				message: "named in conflictColumns but absent from the payload"
 			}))
 		});
-	}, y = (e, t) => {
+	}, b = (e, t) => {
 		let r = m(e);
 		if (r !== void 0) {
-			let n = re(r, t);
-			if (n.length > 0) throw new Yi({
+			let n = ne(r, t);
+			if (n.length > 0) throw new Xi({
 				table: e,
 				summary: `missing required column${n.length > 1 ? "s" : ""} ${n.map((e) => `'${e}'`).join(", ")} — NOT NULL with no default and not auto-stamped`,
 				issues: n.map((e) => ({
@@ -4386,34 +4386,34 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}
 		let i = n.schemaRegistry.insertSchema(e);
 		if (i === void 0) return t;
-		let a = R.decodeUnknownEither(i)(t);
+		let a = L.decodeUnknownEither(i)(t);
 		if (a._tag === "Right") return t;
-		let o = Tt.formatErrorSync(a.left).map((e) => ({
+		let o = Et.formatErrorSync(a.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), s = o[0];
-		throw new Yi({
+		throw new Xi({
 			table: e,
 			summary: s === void 0 ? "row validation failed" : `${s.path}: ${s.message}`,
 			issues: o
 		});
-	}, b = n.dialect, x = (e, t) => {
+	}, x = n.dialect, C = (e, t) => {
 		let n = m(e);
-		return l(b ? ue(t, n, b) : t, n, vi());
-	}, C = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", ee = A({ scope: "store.fieldEncryption" }), te = /* @__PURE__ */ new Set(), ne = (e) => {
+		return l(x ? le(t, n, x) : t, n, yi());
+	}, ee = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", te = j({ scope: "store.fieldEncryption" }), w = /* @__PURE__ */ new Set(), re = (e) => {
 		let t = `${e.table}.${e.column}`;
-		te.has(t) || (te.add(t), ee.warn("encrypted column degraded to null — could not decrypt with the active key", {
+		w.has(t) || (w.add(t), te.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
 			column: e.column,
 			reason: e.reason,
 			hint: "VOLTRO_FIELD_DECRYPT_ON_ERROR=null is set — this row was likely encrypted under a different key"
 		}));
-	}, T = (e, t) => {
-		let n = m(e), r = s(t, n, vi(), {
-			onError: C,
-			...C === "null" ? { warn: ne } : {}
+	}, E = (e, t) => {
+		let n = m(e), r = s(t, n, yi(), {
+			onError: ee,
+			...ee === "null" ? { warn: re } : {}
 		});
-		return b ? c(r, n, b) : r;
+		return x ? c(r, n, x) : r;
 	}, ie = (e) => {
 		let r = e.table, o = e.predicate;
 		if (!e.crossTenant && i != null && n.schemaRegistry.hasTenant(r)) {
@@ -4424,13 +4424,13 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			let e = S("deletedAt");
 			o = o ? t(o, e) : e;
 		}
-		return o = Bn(a, r, o), o === e.predicate ? e : {
+		return o = Vn(a, r, o), o === e.predicate ? e : {
 			...e,
 			predicate: o
 		};
 	}, ae = async (t) => {
 		let n = await e.query(t);
-		return T(t.table, n);
+		return E(t.table, n);
 	}, oe = async (e) => ae(ie(e)), se = async (t, r, i) => {
 		let a = d(t, i);
 		if (n.schemaRegistry.computedFields(t).size > 0) {
@@ -4447,27 +4447,43 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				projection: void 0
 			}))[0];
 			if (n === void 0) return null;
-			a = h(t, T(t, [n])[0], a);
+			a = h(t, E(t, [n])[0], a);
 		}
 		a = g(t, a);
-		let o = await e.update(t, r, x(t, a));
-		return o === null ? null : T(t, [o])[0];
-	}, ce = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, _()) !== null : e.delete(t, r), le = async (t, n, r) => e.updateMany(t, x(t, d(t, n)), r), de = async (t, n) => e.deleteMany(t, n), fe = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, E = async (e, t, n) => le(e, t, {
+		let o = await e.update(t, r, C(t, a));
+		return o === null ? null : E(t, [o])[0];
+	}, ce = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, _()) !== null : e.delete(t, r), ue = async (t, n, r) => e.updateMany(t, C(t, d(t, n)), r), de = async (t, n) => e.deleteMany(t, n), D = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, O = async (e, t, n) => ue(e, t, {
 		...n,
-		where: fe(e, n.where)
-	}), D = async (e, t) => de(e, {
+		where: D(e, n.where)
+	}), k = async (e, t) => de(e, {
 		...t,
-		where: fe(e, t.where)
-	}), O = ws({
+		where: D(e, t.where)
+	}), fe = ws({
 		query: ae,
-		updateMany: le,
+		updateMany: ue,
 		deleteMany: de,
 		delete: (t, n) => e.delete(t, n)
 	}, {
 		subject: n.subject,
 		schemaRegistry: n.schemaRegistry,
 		rowFilter: a
-	});
+	}), pe = ((e, t, n) => t === void 0 ? fe.updateWhere(e) : se(e, t, n)), me = ((e, t) => t === void 0 ? fe.deleteWhere(e) : ce(e, t)), he = async (t, n) => {
+		let r = n.map((e) => o(t, e)), i = r.map((e) => C(t, b(t, e))), a = await p(t, r[0] ?? {}, () => e.insertMany(t, i));
+		return E(t, a);
+	}, ge = (e, t) => {
+		let n = Object.keys(t);
+		if (n.length !== 1) throw Error(`store.links('${e}'): anchor must name exactly one source column, got [${n.join(", ")}]`);
+		let r = n[0], i = t[r], a = m(e);
+		if (a === void 0) throw Error(`store.links('${e}'): unknown table (not registered) — declare it and its relation first`);
+		let o = Object.entries(a.fields).filter(([, e]) => e.type === "reference").map(([e]) => e);
+		if (o.length !== 2) throw Error(`store.links('${e}'): expected a junction with exactly two reference() columns, found ${o.length} [${o.join(", ")}]. Use plain insert/deleteMany for a non-standard junction.`);
+		if (!o.includes(r)) throw Error(`store.links('${e}'): '${r}' is not a reference column of the junction [${o.join(", ")}]`);
+		return {
+			sourceCol: r,
+			sourceId: i,
+			targetCol: o.find((e) => e !== r)
+		};
+	};
 	return {
 		query: oe,
 		one: (async (e) => {
@@ -4494,35 +4510,67 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			take: 1
 		}))[0] ?? null),
 		insert: async (t, n) => {
-			let r = o(t, n), i = await p(t, r, () => e.insert(t, x(t, y(t, r))));
-			return T(t, [i])[0];
+			let r = o(t, n), i = await p(t, r, () => e.insert(t, C(t, b(t, r))));
+			return E(t, [i])[0];
 		},
-		insertMany: async (t, n) => {
-			let r = n.map((e) => o(t, e)), i = r.map((e) => x(t, y(t, e))), a = await p(t, r[0] ?? {}, () => e.insertMany(t, i));
-			return T(t, a);
+		insertMany: (async (e, t) => he(e, t)),
+		links: (e, n) => {
+			let { sourceCol: r, sourceId: i, targetCol: a } = ge(e, n), o = async () => (await oe({
+				table: e,
+				predicate: u(r, i),
+				order: [],
+				projection: void 0,
+				skip: void 0,
+				take: void 0
+			})).map((e) => String(e[a])), s = async (t) => {
+				t.length !== 0 && await he(e, t.map((e) => ({
+					[r]: i,
+					[a]: e
+				})));
+			}, c = async (n) => {
+				n.length !== 0 && await k(e, { where: t(u(r, i), y(a, n)) });
+			};
+			return {
+				list: o,
+				set: async (e) => {
+					let t = new Set(e), n = new Set(await o()), r = [...t].filter((e) => !n.has(e)), i = [...n].filter((e) => !t.has(e));
+					return await c(i), await s(r), {
+						added: r,
+						removed: i
+					};
+				},
+				add: async (e) => {
+					let t = new Set(await o()), n = [...new Set(e)].filter((e) => !t.has(e));
+					return await s(n), n;
+				},
+				remove: async (e) => {
+					let t = new Set(await o()), n = [...new Set(e)].filter((e) => t.has(e));
+					return await c(n), n;
+				}
+			};
 		},
 		patchJson: async (t, n, r, i) => {
 			let a = await e.patchJson(t, n, r, i);
-			return a === null ? null : T(t, [a])[0];
+			return a === null ? null : E(t, [a])[0];
 		},
-		select: O.select,
-		update: ((e, t, n) => t === void 0 ? O.updateWhere(e) : se(e, t, n)),
-		delete: ((e, t) => t === void 0 ? O.deleteWhere(e) : ce(e, t)),
+		select: fe.select,
+		update: pe,
+		delete: me,
 		applyDefined: Ds,
 		hardDelete: async (t, n) => e.delete(t, n),
-		updateMany: E,
-		deleteMany: D,
+		updateMany: O,
+		deleteMany: k,
 		upsert: async (t, n, r) => {
 			let i = o(t, n);
 			v(t, i, r.conflictColumns);
-			let a = await p(t, i, () => e.upsert(t, x(t, y(t, i)), r));
-			return T(t, [a])[0];
+			let a = await p(t, i, () => e.upsert(t, C(t, b(t, i)), r));
+			return E(t, [a])[0];
 		},
 		insertIgnore: async (t, n, r) => {
 			let i = o(t, n);
 			v(t, i, r.conflictColumns);
-			let a = await p(t, i, () => e.insertIgnore(t, x(t, y(t, i)), r));
-			return T(t, [a])[0];
+			let a = await p(t, i, () => e.insertIgnore(t, C(t, b(t, i)), r));
+			return E(t, [a])[0];
 		},
 		transactional: (t) => e.transactional(async (e) => t(As(e, n))),
 		...e.raw ? { raw: e.raw.bind(e) } : {},
@@ -4530,30 +4578,47 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		injectExternalChange: (t) => e.injectExternalChange(t),
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope }
 	};
-}, js = class extends R.TaggedError()("CircuitOpen", {
-	name: R.String,
-	retryAfterMs: R.Number
-}) {}, Ms = {
+}, js = (e, t) => {
+	if (t === void 0 || t.length === 0) return e;
+	let n = { ...e };
+	for (let e of t) delete n[e];
+	return n;
+}, Ms = (e, t) => t.length === 0 ? e : e.map((e) => js(e, t)), Ns = {
+	list: (e, t = {}) => async (n, r) => Ms(await r.store.select(e).all(), t.redact ?? []),
+	getById: (e, t = {}) => async (n, r) => {
+		let i = await r.store.select(e).where("id", n.id).first();
+		return i === null ? null : js(i, t.redact);
+	},
+	create: (e, t = {}) => async (n, r) => js(await r.store.insert(e, n), t.redact),
+	update: (e, t = {}) => async (n, r) => {
+		let { id: i, ...a } = n, o = await r.store.update(e, i, a);
+		return o === null ? null : js(o, t.redact);
+	},
+	remove: (e) => async (t, n) => ({ deleted: await n.store.delete(e, t.id) })
+}, Ps = class extends L.TaggedError()("CircuitOpen", {
+	name: L.String,
+	retryAfterMs: L.Number
+}) {}, Fs = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, Ns = { make: (e) => N.gen(function* () {
-	let t = e.name ?? "circuit", n = We.toMillis(We.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* L.make(Ms), o = N.gen(function* () {
-		let e = yield* L.get(a);
+}, Is = { make: (e) => N.gen(function* () {
+	let t = e.name ?? "circuit", n = We.toMillis(We.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(Fs), o = N.gen(function* () {
+		let e = yield* I.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* L.set(a, t >= r ? Ms : {
+			yield* I.set(a, t >= r ? Fs : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* L.set(a, Ms));
+		e.failureCount !== 0 && (yield* I.set(a, Fs));
 	}), s = N.gen(function* () {
-		let t = yield* Ve.currentTimeMillis, n = yield* L.get(a);
+		let t = yield* Be.currentTimeMillis, n = yield* I.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
-			yield* L.set(a, {
+			yield* I.set(a, {
 				tag: "open",
 				failureCount: e.failureThreshold,
 				halfOpenSuccesses: 0,
@@ -4562,7 +4627,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			return;
 		}
 		let r = n.failureCount + 1;
-		yield* L.set(a, r >= e.failureThreshold ? {
+		yield* I.set(a, r >= e.failureThreshold ? {
 			tag: "open",
 			failureCount: r,
 			halfOpenSuccesses: 0,
@@ -4572,10 +4637,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			failureCount: r
 		});
 	}), c = N.gen(function* () {
-		let e = yield* L.get(a);
+		let e = yield* I.get(a);
 		if (e.tag !== "open") return null;
-		let t = (yield* Ve.currentTimeMillis) - e.openedAt;
-		return t >= n ? (yield* L.set(a, {
+		let t = (yield* Be.currentTimeMillis) - e.openedAt;
+		return t >= n ? (yield* I.set(a, {
 			tag: "half-open",
 			failureCount: 0,
 			halfOpenSuccesses: 0,
@@ -4584,27 +4649,27 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}), l = (e) => N.gen(function* () {
 		let n = yield* c;
 		return n === null ? yield* e.pipe(N.tap(() => o), N.tapErrorCause((e) => {
-			if (j.isInterruptedOnly(e)) return N.void;
-			let t = j.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
+			if (M.isInterruptedOnly(e)) return N.void;
+			let t = M.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
 			return i(n) ? s : N.void;
-		})) : yield* N.fail(new js({
+		})) : yield* N.fail(new Ps({
 			name: t,
 			retryAfterMs: n
 		}));
 	}), u = ((e) => l(e));
 	return Object.defineProperty(u, "state", {
-		value: L.get(a).pipe(N.map((e) => e.tag)),
+		value: I.get(a).pipe(N.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: L.set(a, Ms),
+		value: I.set(a, Fs),
 		enumerable: !0
 	}), u;
-}) }, Ps, Fs = (e) => {
-	Ps = e;
-}, Is = () => {
-	Ps = void 0;
-}, Ls = () => Ps, Rs = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? ze(t.id ?? "system") : ze(t.id ?? "system", t.scopes), r = t.store ?? Ps?.dataStore, i = t.schemaRegistry ?? Ps?.schemaRegistry, a = t.dialect ?? Ps?.dialect;
+}) }, Ls, Rs = (e) => {
+	Ls = e;
+}, zs = () => {
+	Ls = void 0;
+}, Bs = () => Ls, Vs = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Re(t.id ?? "system") : Re(t.id ?? "system", t.scopes), r = t.store ?? Ls?.dataStore, i = t.schemaRegistry ?? Ls?.schemaRegistry, a = t.dialect ?? Ls?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
@@ -4614,7 +4679,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, zs = (e) => {
+}, Hs = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -4642,7 +4707,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, Bs = (e = process.env) => {
+}, Us = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -4654,7 +4719,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, Vs = () => {
+}, Ws = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -4679,8 +4744,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, Hs = Symbol.for("@voltro/ScheduleDefinition"), Us = (e) => typeof e == "object" && !!e && Hs in e, Ws = 30 * 6e4, Gs = (e) => {
-	let t = M.parse(e.cron, e.timezone);
+}, Gs = Symbol.for("@voltro/ScheduleDefinition"), Ks = (e) => typeof e == "object" && !!e && Gs in e, qs = 30 * 6e4, Js = (e) => {
+	let t = He.parse(e.cron, e.timezone);
 	if (Ge.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
@@ -4688,18 +4753,18 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? Ws,
-		[Hs]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? qs,
+		[Gs]: !0
 	};
-}, Ks = (e) => M.unsafeParse(e.cron, e.timezone), qs = (e, t = /* @__PURE__ */ new Date()) => M.next(Ks(e), t), Z = "_voltro_wakeups", Js = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Ys = (e) => ({
+}, Ys = (e) => He.unsafeParse(e.cron, e.timezone), Xs = (e, t = /* @__PURE__ */ new Date()) => He.next(Ys(e), t), Z = "_voltro_wakeups", Zs = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Qs = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), Xs = async (e, t) => {
+}), $s = async (e, t) => {
 	await e.upsert(Z, {
-		id: Js(t),
+		id: Zs(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -4709,7 +4774,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, Zs = async (e, t) => e.delete(Z, Js(t)), Qs = async (e, t) => await e.update(Z, Js(t), { status: "fired" }) !== null, $s = (e, t) => ({ and: [{
+}, ec = async (e, t) => e.delete(Z, Zs(t)), tc = async (e, t) => await e.update(Z, Zs(t), { status: "fired" }) !== null, nc = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -4717,16 +4782,16 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), ec = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: $s(Js(t), "pending") }) > 0, tc = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: $s(Js(t), "fired") });
-}, nc = {
+}] }), rc = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: nc(Zs(t), "pending") }) > 0, ic = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: nc(Zs(t), "fired") });
+}, ac = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, rc = async (e, t) => {
+}, oc = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: nc,
+		predicate: ac,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4735,18 +4800,18 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Ys);
-}, ic = async (e, t, n = 500) => {
-	let r = await rc(e, n), i = t.getTime();
+	return (await e.query(n)).map(Qs);
+}, sc = async (e, t, n = 500) => {
+	let r = await oc(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, ac = async (e) => (await rc(e, 1))[0] ?? null, oc = {
+}, cc = async (e) => (await oc(e, 1))[0] ?? null, lc = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, sc = async (e, t = {}) => {
+}, uc = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: oc,
+		predicate: lc,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4757,12 +4822,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, cc = Ki, lc = "default", uc = {
+}, dc = qi, fc = "default", pc = {
 	kind: "single",
 	tryClaim: async () => !0
-}, dc = "_voltro_schedule_claims", fc = (e, t, n) => {
+}, mc = "_voltro_schedule_claims", hc = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: dc,
+		table: mc,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -4777,7 +4842,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(dc, {
+				return await e.insert(mc, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -4795,12 +4860,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			}
 		}
 	};
-}, pc = "_voltro_schedule_runs", mc = async (e, t) => {
+}, gc = "_voltro_schedule_runs", _c = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, gc(t));
+		s?.(e, yc(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${ve()}`, l = await n.insert(pc, {
+			let o = `sr_${_e()}`, l = await n.insert(gc, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -4825,7 +4890,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(pc, e, t);
+			let r = await n.update(gc, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -4836,7 +4901,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: pc,
+				table: gc,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -4871,7 +4936,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				scheduleName: e.name,
 				trigger: n,
 				runId: s,
-				subject: cc
+				subject: dc
 			})
 		};
 		try {
@@ -4902,7 +4967,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			let n = Q(t).includes("exceeded maxRuntimeMs");
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : hc(t),
+				errorTag: n ? "timeout" : vc(t),
 				errorMessage: Q(t),
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -4910,7 +4975,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n
-			}), Ie({
+			}), Fe({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -4959,8 +5024,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = M.next(Ks(e), /* @__PURE__ */ new Date());
-			await Xs(n, {
+			let t = He.next(Ys(e), /* @__PURE__ */ new Date());
+			await $s(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -4974,7 +5039,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}
 	}, ee = 2147483647, te = (e) => {
 		if (m) return;
-		let n = Ks(e), r = M.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = Ys(e), r = He.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
 			if (n > ee) {
@@ -4991,12 +5056,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			d.set(e.name, a);
 		};
 		i();
-	}, ne = async (e) => {
+	}, w = async (e) => {
 		if (e.backfill === "skip") return;
 		let r;
 		try {
 			let t = (await n.query({
-				table: pc,
+				table: gc,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -5015,8 +5080,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = Ks(e), a = [], s = M.next(i, r), c = Date.now();
-		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = M.next(i, s);
+		let i = Ys(e), a = [], s = He.next(i, r), c = Date.now();
+		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = He.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
 			missed: a.length,
@@ -5026,20 +5091,20 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			let n = a[a.length - 1];
 			await x(e, n, e.trigger ?? t.defaultTrigger);
 		} else for (let n of a) await x(e, n, e.trigger ?? t.defaultTrigger);
-	}, w = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
+	}, T = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
 	o.info("scheduler: starting", {
 		total: e.length,
-		self: w.length,
-		external: e.length - w.length,
+		self: T.length,
+		external: e.length - T.length,
 		coordinator: r.kind
 	});
-	let re = (t.armSelf ?? !0) && !l;
+	let ne = (t.armSelf ?? !0) && !l;
 	if (l) {
-		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: w.length });
-		for (let e of w) await C(e);
-	} else if (re) {
-		for (let e of w) await ne(e);
-		for (let e of w) te(e);
+		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: T.length });
+		for (let e of T) await C(e);
+	} else if (ne) {
+		for (let e of T) await w(e);
+		for (let e of T) te(e);
 	}
 	return {
 		fireNow: async (e, t) => {
@@ -5060,11 +5125,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), hc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, gc = (e) => {
+}, Q = (e) => e?.message ?? String(e), vc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, yc = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, _c = (e, t, n, r) => {
+}, bc = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -5094,96 +5159,96 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, vc = (e) => (t, n, r) => _c(t, n, r, e), yc = E("_voltro_schedule_runs", {
+}, xc = (e) => (t, n, r) => bc(t, n, r, e), Sc = D("_voltro_schedule_runs", {
 	id: v({ prefix: "schrun" }),
-	name: D(),
-	status: D().oneOf([
+	name: O(),
+	status: O().oneOf([
 		"running",
 		"succeeded",
 		"failed",
 		"skipped",
 		"missed"
 	]).default("running"),
-	trigger: D().oneOf([
+	trigger: O().oneOf([
 		"self",
 		"external",
 		"manual"
 	]).default("self"),
-	scheduledAt: O(),
-	firedAt: O().nullable(),
-	completedAt: O().nullable(),
+	scheduledAt: k(),
+	firedAt: k().nullable(),
+	completedAt: k().nullable(),
 	durationMs: b().nullable(),
-	errorTag: D().nullable(),
-	errorMessage: D().nullable(),
-	coordinationOutcome: D().oneOf([
+	errorTag: O().nullable(),
+	errorMessage: O().nullable(),
+	coordinationOutcome: O().oneOf([
 		"single",
 		"wonLock",
 		"lostLock",
 		"external",
 		"cluster"
 	]).nullable(),
-	replicaId: D().nullable(),
+	replicaId: O().nullable(),
 	result: C().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), bc = E("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), Cc = D("_voltro_schedule_claims", {
 	id: v({ prefix: "schclaim" }),
-	scheduleName: D(),
-	bucket: D(),
-	claimedBy: D(),
-	claimedAt: O()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), xc = E("_voltro_traces", {
+	scheduleName: O(),
+	bucket: O(),
+	claimedBy: O(),
+	claimedAt: k()
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), wc = D("_voltro_traces", {
 	id: v({ prefix: "span" }),
-	traceId: D(),
-	spanId: D(),
-	parentSpanId: D().nullable(),
-	name: D(),
-	kind: D().oneOf([
+	traceId: O(),
+	spanId: O(),
+	parentSpanId: O().nullable(),
+	name: O(),
+	kind: O().oneOf([
 		"internal",
 		"server",
 		"client",
 		"producer",
 		"consumer"
 	]).default("internal"),
-	status: D().oneOf([
+	status: O().oneOf([
 		"ok",
 		"error",
 		"unset"
 	]).default("unset"),
-	statusMessage: D().nullable(),
-	startedAt: O(),
-	endedAt: O(),
+	statusMessage: O().nullable(),
+	startedAt: k(),
+	endedAt: k(),
 	durationMs: b(),
 	attributes: C().nullable(),
 	events: C().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Sc = E("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Tc = D("_voltro_undo_log", {
 	id: v({ prefix: "undo" }),
-	tag: D(),
-	label: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	changes: D(),
+	tag: O(),
+	label: O().nullable(),
+	subjectId: O().nullable(),
+	tenantId: O().nullable(),
+	traceId: O().nullable(),
+	changes: O(),
 	crossesAction: r().default(!1),
 	undone: r().default(!1),
-	createdAt: O().default("now")
-}).index(["subjectId", "createdAt"]).reactive(), Cc = (e = process.env) => {
+	createdAt: k().default("now")
+}).index(["subjectId", "createdAt"]).reactive(), Ec = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, wc = (e) => e.startsWith("_voltro"), Tc = async (e, t, n) => (await e.query({
+}, Dc = (e) => e.startsWith("_voltro"), Oc = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, Ec = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, kc = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return wc(n) || t({
+		return Dc(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = wc(n) ? null : await Tc(e, n, r), o = await e.update(n, r, i);
-		return wc(n) || t({
+		let a = Dc(n) ? null : await Oc(e, n, r), o = await e.update(n, r, i);
+		return Dc(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -5192,8 +5257,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = wc(n) ? null : await Tc(e, n, r), a = await e.delete(n, r);
-		return !wc(n) && a && t({
+		let i = Dc(n) ? null : await Oc(e, n, r), a = await e.delete(n, r);
+		return !Dc(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -5202,10 +5267,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), Dc = (e) => {
+} }), Ac = (e) => {
 	let t = [];
 	return {
-		tx: Ec(e, (e) => t.push(e)),
+		tx: kc(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -5221,14 +5286,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			});
 		}
 	};
-}, Oc = (e) => {
+}, jc = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, kc = (e) => {
-	let t = Oc(e);
+}, Mc = (e) => {
+	let t = jc(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -5252,28 +5317,28 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			row: e.prev
 		};
 	}
-}, Ac = (e) => {
-	if (e.crossesAction) throw new jc(e.invocationId, "action");
+}, Nc = (e) => {
+	if (e.crossesAction) throw new Pc(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = kc(e.changes[n]);
+		let r = Mc(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, jc = class extends Error {
+}, Pc = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Mc = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, Fc = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, Nc = class {
+}, Ic = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -5309,7 +5374,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, Pc = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, Lc = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -5326,7 +5391,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, Fc = async (e, t) => {
+}, Rc = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -5344,21 +5409,21 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, Ic = async (e, t) => {
-	for (let n of t) await Fc(e, n);
-}, Lc = (e) => e.request?.subject?.id ?? null, Rc = (e) => e === !0 || e === 1, zc = async (e, t, n) => (await e.query({
+}, zc = async (e, t) => {
+	for (let n of t) await Rc(e, n);
+}, Bc = (e) => e.request?.subject?.id ?? null, Vc = (e) => e === !0 || e === 1, Hc = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, Bc = (e) => {
+}))[0] ?? null, Uc = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Vc = (e) => e.id ?? e.next?.id ?? e.prev?.id, Hc = async (e, t) => {
-	let n = Lc(t);
+}, Wc = (e) => e.id ?? e.next?.id ?? e.prev?.id, Gc = async (e, t) => {
+	let n = Bc(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: u("subjectId", n),
@@ -5367,68 +5432,68 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: Rc(e.undone),
-		crossesAction: Rc(e.crossesAction),
+		undone: Vc(e.undone),
+		crossesAction: Vc(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, Uc = async (e, t) => {
-	let n = await zc(t.store, "_voltro_undo_log", e.invocationId);
-	if (!n) throw new ke({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== Lc(t)) throw new Oe({ invocationId: e.invocationId });
+}, Kc = async (e, t) => {
+	let n = await Hc(t.store, "_voltro_undo_log", e.invocationId);
+	if (!n) throw new Oe({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== Bc(t)) throw new De({ invocationId: e.invocationId });
 	return n;
-}, Wc = async (e, t) => {
-	let n = await Uc(e, t);
-	if (Rc(n.undone)) return { ok: !0 };
-	if (Rc(n.crossesAction)) throw new De({
+}, qc = async (e, t) => {
+	let n = await Kc(e, t);
+	if (Vc(n.undone)) return { ok: !0 };
+	if (Vc(n.crossesAction)) throw new Ee({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = Bc(n.changes);
+	let r = Uc(n.changes);
 	for (let n of r) {
-		let r = Vc(n);
-		if (r !== void 0 && !Mc(await zc(t.store, n.table, r), n.next ?? null)) throw new De({
+		let r = Wc(n);
+		if (r !== void 0 && !Fc(await Hc(t.store, n.table, r), n.next ?? null)) throw new Ee({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: Lc(t),
+		subject: Bc(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await Ic(t.store, Ac(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, Gc = async (e, t) => {
-	let n = await Uc(e, t);
-	if (!Rc(n.undone)) return { ok: !0 };
-	for (let e of Bc(n.changes)) {
-		let n = Vc(e);
+	return await zc(t.store, Nc(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Jc = async (e, t) => {
+	let n = await Kc(e, t);
+	if (!Vc(n.undone)) return { ok: !0 };
+	for (let e of Uc(n.changes)) {
+		let n = Wc(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Kc = (e = process.env) => {
+}, Yc = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, qc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Jc = "«redacted»", Yc = (e) => {
+}, Xc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Zc = "«redacted»", Qc = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = qc.test(n) ? Jc : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Xc.test(n) ? Zc : r;
 	return t;
-}, Xc = (e) => {
+}, $c = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, Zc = (e, t) => {
+}, el = (e, t) => {
 	if (t.op === "insert") {
-		let n = Xc(t.new);
+		let n = $c(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Xc(t.new) ?? Xc(t.old);
+		let n = $c(t.new) ?? $c(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, Qc = class {
+}, tl = class {
 	mode;
 	capacity;
 	now;
@@ -5448,8 +5513,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Yc(e.old),
-			new: Yc(e.new),
+			old: Qc(e.old),
+			new: Qc(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -5462,23 +5527,23 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = Zc(i, e);
+		for (let e of r) i = el(i, e);
 		return i;
 	}
-}, $c, el = () => ($c === void 0 && ($c = new Qc(Kc())), $c), tl = (e) => {
-	$c = e;
-}, nl = (e) => {
-	let t = el();
+}, nl, rl = () => (nl === void 0 && (nl = new tl(Yc())), nl), il = (e) => {
+	nl = e;
+}, al = (e) => {
+	let t = rl();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, rl = /* @__PURE__ */ new Set([
+}, ol = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), il = (e) => {
+]), sl = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -5500,7 +5565,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return rl.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return ol.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -5514,7 +5579,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, al = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(al), ol = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), sl = (e, t) => {
+}, cl = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(cl), ll = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), ul = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -5522,10 +5587,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, cl = (e, t) => {
+}, dl = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = ol(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = ll(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -5541,10 +5606,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		}
 	}
 	return n;
-}, ll = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, fl = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: sl(e, n)
-})), ul = (e, t, n) => {
+	value: ul(e, n)
+})), pl = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -5553,7 +5618,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = ol(t, e.column);
+		let s = ll(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -5562,7 +5627,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = ol(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = ll(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -5582,15 +5647,15 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, dl = (e, t, n, r) => {
+}, ml = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = cl(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = dl(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, fl = class {
+}, hl = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -5598,7 +5663,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = cl(this.shape, e), this.groups.clear();
+		this.state = dl(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -5610,14 +5675,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = ul(this.shape, this.state, e);
+		let n = pl(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = dl(this.shape, this.state, e, t);
+		this.state = ml(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -5626,7 +5691,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return ll(this.shape, this.state).map((e) => ({
+		return fl(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -5639,19 +5704,19 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, pl = E("_voltro_rebac_tuples", {
+}, gl = D("_voltro_rebac_tuples", {
 	id: v({ prefix: "rbct" }),
-	subjectId: D(),
-	relation: D(),
-	resourceType: D(),
-	resourceId: D(),
-	tenantId: D().nullable(),
-	createdAt: O().default("now")
+	subjectId: O(),
+	relation: O(),
+	resourceType: O(),
+	resourceId: O(),
+	tenantId: O().nullable(),
+	createdAt: k().default("now")
 }).index([
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]).reactive(), ml = async (e, n, r, i) => n === null ? [] : (await e.query({
+]).reactive(), _l = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r), u("resourceId", i)),
 	order: [],
@@ -5663,11 +5728,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), hl = (e) => ({
+})), vl = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), gl = (e, t) => {
+}), yl = (e, t) => {
 	let n = t.getPolicy ?? Wo;
 	return (r, i) => {
 		let a = e[i.tag];
@@ -5680,7 +5745,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = hl(i.subject), u = {
+		let l = vl(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
@@ -5690,7 +5755,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			tuples: e
 		}) ? r : s(c));
 	};
-}, _l = async (e, n, r) => n === null ? [] : (await e.query({
+}, bl = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r)),
 	order: [],
@@ -5702,18 +5767,18 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), vl = (e) => {
+})), xl = (e) => {
 	let t = e.getPolicy ?? Wo;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = hl(n);
+		let s = vl(n);
 		return Qo(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, yl = (e) => {
+}, Sl = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -5721,14 +5786,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, bl = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, xl = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Sl = class {
+}, Cl = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, wl = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Tl = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, Cl = async (e, t, n) => {
-	if (t.table !== e.watch.table || !bl(e.watch.on, t.op)) return "skipped-op";
+}, El = async (e, t, n) => {
+	if (t.table !== e.watch.table || !Cl(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -5737,26 +5802,26 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = xl(t);
+	let a = wl(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, wl = E("_voltro_wakeups", {
+}, Dl = D("_voltro_wakeups", {
 	id: v({ prefix: "wakeup" }),
-	tenantId: D(),
-	kind: D(),
-	refId: D(),
-	wakeAt: O(),
-	status: D()
-}).index(["status", "wakeAt"]).index(["tenantId"]), Tl = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await ic(e.store, t, e.batchLimit ?? 100);
+	tenantId: O(),
+	kind: O(),
+	refId: O(),
+	wakeAt: k(),
+	status: O()
+}).index(["status", "wakeAt"]).index(["tenantId"]), Ol = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await sc(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await ec(e.store, t)) try {
+	for (let t of n) if (await rc(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await tc(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await ic(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -5764,11 +5829,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, El = (e, t = 1e3) => {
+}, kl = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await Tl(e);
+				await Ol(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -5778,10 +5843,10 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, Dl = (e) => ({ wake: async () => {
+}, Al = (e) => ({ wake: async () => {
 	await e.start();
-} }), Ol = (e) => new Promise((t) => setTimeout(t, e)), kl = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Ol, i = e.spawnImpl ?? Et, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), jl = (e) => new Promise((t) => setTimeout(t, e)), Ml = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? jl, i = e.spawnImpl ?? Dt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -5835,11 +5900,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		},
 		stop: m
 	};
-}, Al = async (e) => {
+}, Nl = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await ac(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await cc(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, jl = (e, t = Date.now) => {
+}, Pl = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -5851,7 +5916,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Ml = () => {
+}, Fl = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -5869,8 +5934,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, Nl = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Pl = (e, t, n, r) => new Promise((i, a) => {
-	let o = Qe.request({
+}, Il = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Ll = (e, t, n, r) => new Promise((i, a) => {
+	let o = $e.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -5880,8 +5945,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), Fl = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = Qe.request({
+}), Rl = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = $e.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -5895,21 +5960,21 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Il = (e) => {
-	let t = Nl({
+}), zl = (e) => {
+	let t = Il({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = Qe.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Pl(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = $e.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Ll(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Fl(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Rl(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Ll = async (e) => {
+}, Bl = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -5926,15 +5991,15 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, Rl = async (e) => {
-	let t = Dl(e.supervisor), n = await Tl({
+}, Vl = async (e) => {
+	let t = Al(e.supervisor), n = await Ol({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await Al({
+	let r = await Nl({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -5944,12 +6009,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, zl = async (e) => {
-	let t = jl(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Ml(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Hl = async (e) => {
+	let t = Pl(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Fl(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Il({
+	}, s = zl({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -5968,7 +6033,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Ll(e.store)), await Rl({
+				if (a && (i = await Bl(e.store)), await Vl({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -5976,7 +6041,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await sc(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await uc(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -5991,14 +6056,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Bl = (e) => e, Vl = class extends R.TaggedError()("AnalyticsError", {
-	provider: R.String,
-	operation: R.String,
-	cause: R.String
-}) {}, Hl = class extends R.TaggedError()("AnalyticsCapabilityNotSupported", {
-	provider: R.String,
-	capability: R.String
-}) {}, Ul = class extends He.Tag("@voltro/AnalyticsSink")() {}, Wl = (e, t) => ({
+}, Ul = (e) => e, Wl = class extends L.TaggedError()("AnalyticsError", {
+	provider: L.String,
+	operation: L.String,
+	cause: L.String
+}) {}, Gl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
+	provider: L.String,
+	capability: L.String
+}) {}, Kl = class extends Ve.Tag("@voltro/AnalyticsSink")() {}, ql = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -6017,20 +6082,20 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Gl = () => N.gen(function* () {
-	let e = yield* Ul, t = yield* N.serviceOption(Ee), n = I.match(t, {
+}), Jl = () => N.gen(function* () {
+	let e = yield* Kl, t = yield* N.serviceOption(Te), n = Xe.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : Wl(e, n);
-}), Kl = "noop", ql = () => {
-	let e = (e) => N.fail(new Hl({
-		provider: Kl,
+	return n === null ? e : ql(e, n);
+}), Yl = "noop", Xl = () => {
+	let e = (e) => N.fail(new Gl({
+		provider: Yl,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Kl,
+			provider: Yl,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -6044,8 +6109,8 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, Jl = (e) => {
-	if (e.length === 0) return ql();
+}, Zl = (e) => {
+	if (e.length === 0) return Xl();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -6062,7 +6127,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? N.fail(new Hl({
+		return r === void 0 ? N.fail(new Gl({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -6085,11 +6150,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Yl = (e) => {
+}, Ql = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => Jl(e.map((e) => e.build(t))),
+		build: (t) => Zl(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => N.forEach(e, (e) => e.initialize ? e.initialize(t) : N.void, {
 			concurrency: 1,
@@ -6100,15 +6165,15 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, Xl = {
+}, $l = {
 	kind: "noop",
-	build: () => ql()
-}, Zl = {
+	build: () => Xl()
+}, eu = {
 	tables: [],
 	detach: () => {}
-}, Ql = (e) => {
+}, tu = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return Zl;
+	if (i === void 0 || i.tables.length === 0) return eu;
 	let a = e.run ?? ((e) => N.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -6132,11 +6197,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, $l = (e) => {
+}, nu = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = il({
+		let t = sl({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -6158,47 +6223,47 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, eu = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, tu = class extends R.TaggedError()("AggregateStale", {
-	name: R.String,
-	ageMs: R.Number,
-	maxAgeMs: R.Number
-}) {}, nu = class extends R.TaggedError()("AggregateNotFound", { name: R.String }) {}, ru = class extends R.TaggedError()("AggregateError", {
-	name: R.String,
-	operation: R.String,
-	cause: R.String
-}) {}, iu = class extends He.Tag("@voltro/AggregateRegistry")() {}, au = (e) => N.gen(function* () {
-	return (yield* iu).getHandle(e);
-}), ou = (e, n, r) => {
+}, ru = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, iu = class extends L.TaggedError()("AggregateStale", {
+	name: L.String,
+	ageMs: L.Number,
+	maxAgeMs: L.Number
+}) {}, au = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, ou = class extends L.TaggedError()("AggregateError", {
+	name: L.String,
+	operation: L.String,
+	cause: L.String
+}) {}, su = class extends Ve.Tag("@voltro/AggregateRegistry")() {}, cu = (e) => N.gen(function* () {
+	return (yield* su).getHandle(e);
+}), lu = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = u("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, su = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), cu = (e) => e?.type === "user" && e.tenantId === "", lu = (e, n) => {
+}, uu = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), du = (e) => e?.type === "user" && e.tenantId === "", fu = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
 	let r = S("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, uu = (e, t) => t, du = (e) => N.runPromiseExit(e).then((e) => {
+}, pu = (e, t) => t, mu = (e) => N.runPromiseExit(e).then((e) => {
 	if (Ke.isSuccess(e)) return e.value;
-	let t = j.failureOption(e.cause);
-	throw I.isSome(t) ? t.value : j.squash(e.cause);
-}), fu = (e, t) => e.pipe(N.provideService(Ee, t)), pu = async (e, t, n) => {
-	let r = await N.runPromise(je(t, e.guards, n));
+	let t = M.failureOption(e.cause);
+	throw Xe.isSome(t) ? t.value : M.squash(e.cause);
+}), hu = (e, t) => e.pipe(N.provideService(Te, t)), gu = async (e, t, n) => {
+	let r = await N.runPromise(Ae(t, e.guards, n));
 	if (r) throw r;
-}, mu = async (e) => {
-	if (Fn() === void 0) return e;
-	let t = await du(Ln(e.subject, (e) => {
+}, _u = async (e) => {
+	if (In() === void 0) return e;
+	let t = await mu(Rn(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, hu = async (e) => {
+}, vu = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
@@ -6214,7 +6279,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId }
 			}), r = await N.runPromiseExit(n);
 			if (Ke.isSuccess(r)) return r.value;
-			throw j.squash(r.cause);
+			throw M.squash(r.cause);
 		}
 		return await e.runExecutor();
 	} catch (e) {
@@ -6227,28 +6292,28 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			status: r
 		});
 	}
-}, gu = /* @__PURE__ */ new Set([1213, 1205]), _u = /* @__PURE__ */ new Set([
+}, yu = /* @__PURE__ */ new Set([1213, 1205]), bu = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), vu = (e) => {
+]), xu = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && gu.has(e.errno) || typeof e.code == "string" && _u.has(e.code) || typeof e.sqlState == "string" && _u.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && yu.has(e.errno) || typeof e.code == "string" && bu.has(e.code) || typeof e.sqlState == "string" && bu.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, yu = 3, bu = (e) => new Promise((t) => setTimeout(t, e)), xu = async (e, t) => {
-	let n = t?.delay ?? ((e) => bu(e * 20 + Math.floor(Math.random() * 30)));
+}, Su = 3, Cu = (e) => new Promise((t) => setTimeout(t, e)), wu = async (e, t) => {
+	let n = t?.delay ?? ((e) => Cu(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= yu || !vu(e)) throw e;
+		if (t >= Su || !xu(e)) throw e;
 		await n(t);
 	}
-}, Su = (e) => (t, n, r) => hu({
+}, Tu = (e) => (t, n, r) => vu({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -6256,11 +6321,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await pu(t.descriptor, r.subject, n);
-		let i = await mu(r), a = [], o = await xu(async () => (a.length = 0, e.store.transactional(async (o) => {
+		await gu(t.descriptor, r.subject, n);
+		let i = await _u(r), a = [], o = await wu(async () => (a.length = 0, e.store.transactional(async (o) => {
 			let s = e.undoCapture?.(o), c = s ? s.tx : o, l = e.buildContext(i, c, { afterCommit: (e) => {
 				a.push(e);
-			} }), u = t.executor(n, l), d = N.isEffect(u) ? await e.runEffect(fu(u, r.subject), l.store) : await u;
+			} }), u = t.executor(n, l), d = N.isEffect(u) ? await e.runEffect(hu(u, r.subject), l.store) : await u;
 			return s && await s.persist(l.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -6270,33 +6335,33 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		for (let e of a) await e();
 		return o;
 	}
-}), Cu = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, wu = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Tu = (e) => {
+}), Eu = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Du = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Ou = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, Eu = (e, t) => (n) => () => {
+}, ku = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
-	return !r || r.length === 0 ? Promise.resolve(null) : N.runPromise(je(n, r, t));
-}, Du = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = Eu(t, n)(r.subject), o = async () => {
+	return !r || r.length === 0 ? Promise.resolve(null) : N.runPromise(Ae(n, r, t));
+}, Au = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = ku(t, n)(r.subject), o = async () => {
 		let i = await a();
 		if (i) throw i;
-		let o = e.buildContext(await mu(r)), s = t.executor(n, o);
-		return N.isEffect(s) ? N.runPromise(e.provideEffect(fu(s, r.subject), o.store)) : Cu(await Promise.resolve(s));
+		let o = e.buildContext(await _u(r)), s = t.executor(n, o);
+		return N.isEffect(s) ? N.runPromise(e.provideEffect(hu(s, r.subject), o.store)) : Eu(await Promise.resolve(s));
 	}, s = (n) => {
-		let i = Cu(n);
-		return wu(i) ? e.finalize(i, r) : {
+		let i = Eu(n);
+		return Du(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: Tu(t),
+			dependentTables: Ou(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: o
 		};
 	}, c = () => {
 		let a = t.executor(n, i);
-		return N.isEffect(a) ? e.provideEffect(fu(a, r.subject), i.store).pipe(N.map(s)) : a instanceof Promise ? N.promise(() => a).pipe(N.map(s)) : s(a);
+		return N.isEffect(a) ? e.provideEffect(hu(a, r.subject), i.store).pipe(N.map(s)) : a instanceof Promise ? N.promise(() => a).pipe(N.map(s)) : s(a);
 	}, l = () => {
 		let e = t.descriptor.guards;
-		return !e || e.length === 0 ? c() : je(r.subject, e, n).pipe(N.flatMap((e) => {
+		return !e || e.length === 0 ? c() : Ae(r.subject, e, n).pipe(N.flatMap((e) => {
 			if (e) return N.fail(e);
 			let t = c();
 			return N.isEffect(t) ? t : N.succeed(t);
@@ -6315,7 +6380,7 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, Ou = (e) => (t, n, r) => hu({
+}, ju = (e) => (t, n, r) => vu({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -6323,16 +6388,16 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await pu(t.descriptor, r.subject, n);
-		let i = e.buildContext(await mu(r)), a = t.executor(n, i);
-		return N.isEffect(a) ? e.runEffect(fu(a, r.subject), i.store) : a;
+		await gu(t.descriptor, r.subject, n);
+		let i = e.buildContext(await _u(r)), a = t.executor(n, i);
+		return N.isEffect(a) ? e.runEffect(hu(a, r.subject), i.store) : a;
 	}
-}), ku = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Au = (e) => typeof e == "string" && e.length > 0 ? e : null, ju = [
+}), Mu = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Nu = (e) => typeof e == "string" && e.length > 0 ? e : null, Pu = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], Mu = (e) => ju.some((t) => t in e), Nu = (e, t, n) => {
+], Fu = (e) => Pu.some((t) => t in e), Iu = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -6347,14 +6412,14 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!Mu(e)) return {
+	if (!Fu(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = Au(e.updatedBy) ?? Au(e.createdBy), o = ku(e.updatedAt) ?? ku(e.createdAt);
+	let a = Nu(e.updatedBy) ?? Nu(e.createdBy), o = Mu(e.updatedAt) ?? Mu(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -6366,12 +6431,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, Pu = (e, t) => {
+}, Lu = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: Au(e.actor) ?? Au(e.changedBy) },
-			at: ku(e.at) ?? ku(e.changedAt),
+			actor: { id: Nu(e.actor) ?? Nu(e.changedBy) },
+			at: Mu(e.at) ?? Mu(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -6386,12 +6451,12 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, Fu = (e) => {
+}, Ru = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, Iu = (e) => {
+}, zu = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -6411,11 +6476,11 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: Fu(e),
+		id: Ru(e),
 		fields: t
 	};
-}, Lu = (e) => {
-	let t = e.map(Iu);
+}, Bu = (e) => {
+	let t = e.map(zu);
 	return {
 		rows: t,
 		summary: {
@@ -6424,21 +6489,21 @@ var K = /* @__PURE__ */ new Map(), nr = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, Ru = class extends Error {
+}, Vu = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, zu = async (e, t) => {
+}, Hu = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new Ru();
+			throw n = await t(e), r = !0, new Vu();
 		});
 	} catch (e) {
-		if (!(e instanceof Ru)) throw e;
+		if (!(e instanceof Vu)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, Bu = "framework-runtime";
+}, Uu = "framework-runtime";
 //#endregion
-export { Ni as API_KEYS_TABLE, Vo as AccessDenied, ru as AggregateError, fl as AggregateMaintainer, nu as AggregateNotFound, iu as AggregateRegistry, tu as AggregateStale, Hl as AnalyticsCapabilityNotSupported, Vl as AnalyticsError, Ul as AnalyticsSink, X as CONNECTIONS_TABLE, za as CONNECTION_GRANTS_TABLE, Ns as CircuitBreaker, js as CircuitOpen, co as ConnectionNotConnected, Hr as DEFAULT_MAX_RPC_BODY_BYTES, oo as DEFAULT_REFRESH_SKEW_MS, Mn as DEFAULT_ROW_FILTER_RETRY, lc as DORMANCY_WAKEUP_TENANT, Cs as DeleteBuilder, Wn as Dispatcher, Xi as EffectStore, xo as GRANT_TTL_MS, qt as InMemoryDataStore, Pt as IndexedMatcher, Dt as LinearScanMatcher, Je as MetricBoundaries, Kl as NOOP_ANALYTICS_PROVIDER, In as NO_ROW_FILTER, gs as NoRowFound, wa as OUTBOX_ATTEMPTS_TABLE, ja as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, _s as OptimisticLockError, Bo as REBAC_ADMIN_SCOPE, so as REFRESH_LEASE_MS, Bu as RUNTIME_NAME, Sl as ReactionRateLimiter, Cr as ReplicatedDataStore, jn as RowFilterUnavailable, cc as SCHEDULE_SUBJECT, Ki as SYSTEM_SUBJECT, xs as SelectBuilder, Ji as StoreOperationFailed, Lt as SubscriptionRegistry, Yi as TableValidationFailed, qi as TenantScopeViolation, Qc as TimelineRecorder, jc as UndoBoundaryError, Nc as UndoStack, Ss as UpdateBuilder, cs as VOLTRO_AUDIT_MIXIN_ID, ls as VOLTRO_SOFT_DELETE_MIXIN_ID, us as VOLTRO_TENANT_MIXIN_ID, ir as _connectionStreamCount, ar as _resetConnectionSubjectsForTest, Va as _voltroConnectionGrantsTable, Ra as _voltroConnectionsTable, pl as _voltroRebacTuplesTable, bc as _voltroScheduleClaimsTable, yc as _voltroScheduleRunsTable, xc as _voltroTracesTable, Sc as _voltroUndoLogTable, wl as _voltroWakeupsTable, ya as _voltroWorkflowEventDeliveriesTable, va as _voltroWorkflowEventsTable, Gi as apiKeyManagementRoutes, Ds as applyDefined, ul as applyDelta, Fc as applyInverse, Ic as applyInverses, Bn as applyRowFilter, Vn as applyRowFilterToDescriptor, lu as applySoftDeleteScope, ou as applyTenantScope, Wc as applyUndoInvocation, Zo as assertCan, Ga as assertConnectionCipherConfigured, Ql as attachAnalyticsMirror, Wr as awaitServerListening, Aa as backoffMs, To as beginOAuthConnect, Zn as bindConnectionSubject, Vr as bindMutation, Nr as bindStream, Mr as bindSubscription, Ar as bindSubscriptionUntyped, cl as buildIvmState, Lu as buildPreview, gl as buildRebacInterceptor, vl as buildRebacReadFilter, _r as buildSubjectKey, Yr as buildTracingLayer, ui as cachedBackend, Xo as can, Zs as cancelWakeup, il as classifyShape, po as clearConnectionRefreshFlights, Ko as clearResourcePolicies, i as clearRetentions, Is as clearSystemStoreHandle, Ks as compileCron, Eo as completeOAuthConnect, Yl as composeAnalytics, Jl as composeAnalyticsSinks, So as connectionCallbackPath, Wa as connectionLabel, or as connectionSubjectsSnapshot, Ll as countRunningWorkflows, Tn as counter, Sr as currentRoutingContext, pr as currentTraceContext, Hi as dataStoreApiKeyStore, Ti as dataStoreIdempotencyStore, Ai as dataStoreKvStore, bi as decryptField, $l as defineAggregate, Ua as defineConnection, pa as defineEventTrigger, uu as defineExecutor, Da as defineOutboxHandler, yl as defineReaction, Uo as defineResourcePolicy, Gs as defineSchedule, Bl as defineSubscriber, Hn as deliveredRowCount, pi as deriveKey, Iu as diffChange, Fa as drainOutbox, ic as dueWakeups, Yo as effectiveRelations, hs as emptySchemaRegistry, q as encryptField, ii as envSecretsBackend, io as exchangeAuthorizationCode, ur as externalSpanFromTraceparent, Yt as extractDbCause, It as fingerprintFor, eo as forgetCredential, cr as formatTraceparent, Pc as forwardChangeFromCdc, Ui as frameworkApiKeyStrategy, En as gauge, Fi as generateApiKeyToken, Ao as getConnectionResolver, Qn as getConnectionSubject, vi as getFieldCipher, Wo as getResourcePolicy, Fn as getRowFilter, Ls as getSystemStoreHandle, el as getTimelineRecorder, rs as getTupleSource, $ as groupKeyOf, Dn as histogramMetric, Pu as historyProvenance, di as httpSecretsBackend, wt as inspectWorkflow, is as installPolicyGuardResolver, rr as interruptConnectionStreams, kc as invertChange, eu as isAggregateDefinition, su as isEmptyTenantScopedRead, Xt as isForeignKeyViolation, Al as isIdleNow, Rr as isInfraError, cu as isOrglessUserSubject, Mc as isSafeToApply, Us as isScheduleDefinition, ma as isWorkflowEventTriggerDefinition, sl as ivmValue, Nu as lastWriteProvenance, to as listConnectionStates, Go as listResourcePolicies, ee as listRetentions, ml as loadResourceTuples, _l as loadSubjectTuples, zs as localityAwareSelector, Ou as makeActionRunner, fc as makeAdvisoryLockCoordinator, mi as makeAesCipher, Ri as makeApiKeyService, Zt as makeAppAccess, ji as makeAsyncKv, ri as makeBufferingSpanProcessor, Ka as makeConnectionRegistry, Mo as makeConnectionResolver, No as makeConnectionsFacade, vc as makeCoordinatedScheduler, os as makeDataLoader, zo as makeDisconnectConnectionExecutor, $i as makeEffectStoreLayer, ba as makeEventsFacade, hi as makeFieldCipher, ws as makeFluentStore, jl as makeIdleGate, la as makeLazyWorkflowFacade, Io as makeListConnectionsExecutor, Su as makeMutationRunner, ka as makeOutboxFacade, sa as makePostCommitWorkflowFacade, Dl as makeProcessAdapter, Du as makeQueryDescriptorProducer, Eu as makeQueryReauthorizer, Ml as makeRouterActivity, ds as makeSchemaRegistry, Lo as makeStartConnectionExecutor, Ro as makeSubmitTokenExecutor, Dc as makeUndoCapture, Nl as makeWakeGate, Il as makeWakeProxyServer, oa as makeWorkflowFacade, ca as makeWorkflowFacadeWithCallerContext, ua as makeWorkflowHandlers, da as makeWorkflowLayers, na as makeWorkflowRunHandle, Qs as markWakeupFired, ll as materializeIvm, zi as memoryApiKeyStore, Vs as memoryReplicationAdapter, gr as memoryRywPositionStore, qs as nextFiring, ac as nextWakeup, kl as nodeProcessSupervisor, ql as noopAnalytics, Xl as noopAnalyticsSpec, Mi as noopKv, er as onBindConnectionSubject, Ea as outboxAttemptsTable, Ca as outboxTable, lr as parseTraceparent, mr as powerOfTwoSelector, zu as previewInRollback, Xa as projectConnectionState, sc as pruneWakeups, qo as rebacPolicyGraph, xn as recordSample, U as recordSubscriptionActive, Cn as recordSubscriptionDelivery, nl as recordTimelineEvent, Yc as redactRow, vr as redisRywPositionStore, Gc as redoUndoInvocation, ao as refreshAccessToken, nr as registerConnectionStream, se as registerRetention, Xs as registerWakeup, tc as releaseWakeup, hr as replicaHealth, si as resetSecretsBackend, go as resolveConnection, jo as resolveConnectionForSubject, Bs as resolveCurrentRegion, Qt as resolveDependentTables, wo as resolveRedirectUri, dl as resolveRescan, Ln as resolveRowFilterScope, Rn as resolveRowFilterScopeFor, ci as resolveSecret, li as resolveSecretSync, fi as resolveSecretsBackend, Kc as resolveTimelineMode, le as retentionTtlMsFromEnv, Zc as reverseEventOverRows, $o as revokedIds, Rs as runAsSystem, Rl as runOrchestratorTick, du as runProvidedEffect, Cl as runReaction, zl as runSingleNodeOrchestrator, El as runWakeLoop, xu as runWithDeadlockRetry, xr as runWithRoutingContext, fr as runWithTraceContext, Co as sanitizeRedirectTo, _c as scheduleCoordinated, ko as setConnectionResolver, _i as setFieldCipher, Pn as setRowFilter, oi as setSecretsBackend, Fs as setSystemStoreHandle, tl as setTimelineRecorderForTest, ns as setTupleSource, Pi as sha256Hex, uc as singleCoordinator, kn as snapshotMetrics, An as snapshotMetricsSync, Ur as startRpcServer, mc as startScheduler, Qa as storeCredential, Do as sweepExpiredGrants, fe as sweepRetention, Ac as synthesizeInverse, ss as tracingHttpClientLayer, fa as triggerWorkflow, ec as tryClaimWakeup, $n as unbindConnectionSubject, Cc as undoCaptureEnabled, Hc as undoLogExecutor, au as useAggregate, Gl as useAnalytics, Qo as visibleRows, Tl as wakeDueOnce, mu as withRowFilter, ea as workflowToRpc, Ec as wrapCaptureStore, As as wrapStoreWithMixinBehaviour };
+export { Pi as API_KEYS_TABLE, Vo as AccessDenied, ou as AggregateError, hl as AggregateMaintainer, au as AggregateNotFound, su as AggregateRegistry, iu as AggregateStale, Gl as AnalyticsCapabilityNotSupported, Wl as AnalyticsError, Kl as AnalyticsSink, Y as CONNECTIONS_TABLE, X as CONNECTION_GRANTS_TABLE, Is as CircuitBreaker, Ps as CircuitOpen, co as ConnectionNotConnected, Ur as DEFAULT_MAX_RPC_BODY_BYTES, oo as DEFAULT_REFRESH_SKEW_MS, Nn as DEFAULT_ROW_FILTER_RETRY, fc as DORMANCY_WAKEUP_TENANT, Cs as DeleteBuilder, Gn as Dispatcher, Zi as EffectStore, xo as GRANT_TTL_MS, Jt as InMemoryDataStore, Ft as IndexedMatcher, Ot as LinearScanMatcher, Je as MetricBoundaries, Yl as NOOP_ANALYTICS_PROVIDER, Ln as NO_ROW_FILTER, gs as NoRowFound, Ta as OUTBOX_ATTEMPTS_TABLE, Ma as OUTBOX_ATTEMPT_LOG_CAP, J as OUTBOX_TABLE, _s as OptimisticLockError, Bo as REBAC_ADMIN_SCOPE, so as REFRESH_LEASE_MS, Uu as RUNTIME_NAME, Tl as ReactionRateLimiter, wr as ReplicatedDataStore, Mn as RowFilterUnavailable, dc as SCHEDULE_SUBJECT, qi as SYSTEM_SUBJECT, xs as SelectBuilder, Yi as StoreOperationFailed, Rt as SubscriptionRegistry, Xi as TableValidationFailed, Ji as TenantScopeViolation, tl as TimelineRecorder, Pc as UndoBoundaryError, Ic as UndoStack, Ss as UpdateBuilder, cs as VOLTRO_AUDIT_MIXIN_ID, ls as VOLTRO_SOFT_DELETE_MIXIN_ID, us as VOLTRO_TENANT_MIXIN_ID, ar as _connectionStreamCount, or as _resetConnectionSubjectsForTest, Va as _voltroConnectionGrantsTable, za as _voltroConnectionsTable, gl as _voltroRebacTuplesTable, Cc as _voltroScheduleClaimsTable, Sc as _voltroScheduleRunsTable, wc as _voltroTracesTable, Tc as _voltroUndoLogTable, Dl as _voltroWakeupsTable, ba as _voltroWorkflowEventDeliveriesTable, ya as _voltroWorkflowEventsTable, Ki as apiKeyManagementRoutes, Ds as applyDefined, pl as applyDelta, Rc as applyInverse, zc as applyInverses, Vn as applyRowFilter, Hn as applyRowFilterToDescriptor, fu as applySoftDeleteScope, lu as applyTenantScope, qc as applyUndoInvocation, Zo as assertCan, Ga as assertConnectionCipherConfigured, tu as attachAnalyticsMirror, Gr as awaitServerListening, ja as backoffMs, To as beginOAuthConnect, Qn as bindConnectionSubject, Hr as bindMutation, Pr as bindStream, Nr as bindSubscription, jr as bindSubscriptionUntyped, dl as buildIvmState, Bu as buildPreview, yl as buildRebacInterceptor, xl as buildRebacReadFilter, vr as buildSubjectKey, Xr as buildTracingLayer, di as cachedBackend, Xo as can, ec as cancelWakeup, sl as classifyShape, po as clearConnectionRefreshFlights, Ko as clearResourcePolicies, i as clearRetentions, zs as clearSystemStoreHandle, Ys as compileCron, Eo as completeOAuthConnect, Ql as composeAnalytics, Zl as composeAnalyticsSinks, So as connectionCallbackPath, Wa as connectionLabel, sr as connectionSubjectsSnapshot, Bl as countRunningWorkflows, En as counter, Ns as crud, Cr as currentRoutingContext, mr as currentTraceContext, Ui as dataStoreApiKeyStore, Ei as dataStoreIdempotencyStore, ji as dataStoreKvStore, xi as decryptField, nu as defineAggregate, Ua as defineConnection, ma as defineEventTrigger, pu as defineExecutor, Oa as defineOutboxHandler, Sl as defineReaction, Uo as defineResourcePolicy, Js as defineSchedule, Ul as defineSubscriber, Un as deliveredRowCount, mi as deriveKey, zu as diffChange, Ia as drainOutbox, sc as dueWakeups, Yo as effectiveRelations, hs as emptySchemaRegistry, K as encryptField, ai as envSecretsBackend, io as exchangeAuthorizationCode, dr as externalSpanFromTraceparent, Xt as extractDbCause, Lt as fingerprintFor, eo as forgetCredential, lr as formatTraceparent, Lc as forwardChangeFromCdc, Wi as frameworkApiKeyStrategy, Dn as gauge, Ii as generateApiKeyToken, Ao as getConnectionResolver, $n as getConnectionSubject, yi as getFieldCipher, Wo as getResourcePolicy, In as getRowFilter, Bs as getSystemStoreHandle, rl as getTimelineRecorder, rs as getTupleSource, $ as groupKeyOf, On as histogramMetric, Lu as historyProvenance, fi as httpSecretsBackend, Tt as inspectWorkflow, is as installPolicyGuardResolver, ir as interruptConnectionStreams, Mc as invertChange, ru as isAggregateDefinition, uu as isEmptyTenantScopedRead, Zt as isForeignKeyViolation, Nl as isIdleNow, zr as isInfraError, du as isOrglessUserSubject, Fc as isSafeToApply, Ks as isScheduleDefinition, ha as isWorkflowEventTriggerDefinition, ul as ivmValue, Iu as lastWriteProvenance, to as listConnectionStates, Go as listResourcePolicies, ee as listRetentions, _l as loadResourceTuples, bl as loadSubjectTuples, Hs as localityAwareSelector, ju as makeActionRunner, hc as makeAdvisoryLockCoordinator, hi as makeAesCipher, zi as makeApiKeyService, Qt as makeAppAccess, Mi as makeAsyncKv, ii as makeBufferingSpanProcessor, Ka as makeConnectionRegistry, Mo as makeConnectionResolver, No as makeConnectionsFacade, xc as makeCoordinatedScheduler, os as makeDataLoader, zo as makeDisconnectConnectionExecutor, ea as makeEffectStoreLayer, xa as makeEventsFacade, gi as makeFieldCipher, ws as makeFluentStore, Pl as makeIdleGate, ua as makeLazyWorkflowFacade, Io as makeListConnectionsExecutor, Tu as makeMutationRunner, Aa as makeOutboxFacade, ca as makePostCommitWorkflowFacade, Al as makeProcessAdapter, Au as makeQueryDescriptorProducer, ku as makeQueryReauthorizer, Fl as makeRouterActivity, ds as makeSchemaRegistry, Lo as makeStartConnectionExecutor, Ro as makeSubmitTokenExecutor, Ac as makeUndoCapture, Il as makeWakeGate, zl as makeWakeProxyServer, sa as makeWorkflowFacade, la as makeWorkflowFacadeWithCallerContext, da as makeWorkflowHandlers, fa as makeWorkflowLayers, ra as makeWorkflowRunHandle, tc as markWakeupFired, fl as materializeIvm, Bi as memoryApiKeyStore, Ws as memoryReplicationAdapter, _r as memoryRywPositionStore, Xs as nextFiring, cc as nextWakeup, Ml as nodeProcessSupervisor, Xl as noopAnalytics, $l as noopAnalyticsSpec, Ni as noopKv, tr as onBindConnectionSubject, Da as outboxAttemptsTable, wa as outboxTable, ur as parseTraceparent, hr as powerOfTwoSelector, Hu as previewInRollback, Xa as projectConnectionState, uc as pruneWakeups, qo as rebacPolicyGraph, Sn as recordSample, H as recordSubscriptionActive, wn as recordSubscriptionDelivery, al as recordTimelineEvent, Ms as redactColumns, Qc as redactRow, yr as redisRywPositionStore, Jc as redoUndoInvocation, ao as refreshAccessToken, rr as registerConnectionStream, oe as registerRetention, $s as registerWakeup, ic as releaseWakeup, gr as replicaHealth, ci as resetSecretsBackend, go as resolveConnection, jo as resolveConnectionForSubject, Us as resolveCurrentRegion, $t as resolveDependentTables, wo as resolveRedirectUri, ml as resolveRescan, Rn as resolveRowFilterScope, zn as resolveRowFilterScopeFor, li as resolveSecret, ui as resolveSecretSync, pi as resolveSecretsBackend, Yc as resolveTimelineMode, ce as retentionTtlMsFromEnv, el as reverseEventOverRows, $o as revokedIds, Vs as runAsSystem, Vl as runOrchestratorTick, mu as runProvidedEffect, El as runReaction, Hl as runSingleNodeOrchestrator, kl as runWakeLoop, wu as runWithDeadlockRetry, Sr as runWithRoutingContext, pr as runWithTraceContext, Co as sanitizeRedirectTo, bc as scheduleCoordinated, ko as setConnectionResolver, vi as setFieldCipher, Fn as setRowFilter, si as setSecretsBackend, Rs as setSystemStoreHandle, il as setTimelineRecorderForTest, ns as setTupleSource, Fi as sha256Hex, pc as singleCoordinator, An as snapshotMetrics, jn as snapshotMetricsSync, Wr as startRpcServer, _c as startScheduler, Qa as storeCredential, Do as sweepExpiredGrants, de as sweepRetention, Nc as synthesizeInverse, ss as tracingHttpClientLayer, pa as triggerWorkflow, rc as tryClaimWakeup, er as unbindConnectionSubject, Ec as undoCaptureEnabled, Gc as undoLogExecutor, cu as useAggregate, Jl as useAnalytics, Qo as visibleRows, Ol as wakeDueOnce, _u as withRowFilter, ta as workflowToRpc, kc as wrapCaptureStore, As as wrapStoreWithMixinBehaviour };