@voltro/runtime 0.19.0 → 0.20.0

package/dist/index.js

@@ -2431,17 +2431,22 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 }, Si = (e, t) => {
 	let n = xi(e);
 	return n === void 0 ? t() : Br(n, t);
-}, Ci = (e, t, n) => ({
+}, Ci = (e, t) => F.async((n) => {
+	let r = ue(t, () => F.runFork(e));
+	return r.addObserver((e) => {
+		n(e);
+	}), F.asVoid(et.interrupt(r));
+}), wi = (e, t, n) => ({
 	subject: e,
 	traceId: t?.traceId ?? xe(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), wi = F.currentSpan.pipe(F.catchAll(() => F.succeed(void 0))), Ti = (e) => ({
+}), Ti = F.currentSpan.pipe(F.catchAll(() => F.succeed(void 0))), Ei = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Ei = (e, t, n) => {
+}), Di = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, Di = (e) => {
+}, Oi = (e) => {
 	if (Gn() !== void 0) return async () => {
 		let t = await F.runPromise(F.either(qn(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
@@ -2449,13 +2454,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, Oi = (e, t, n, r, i, a, o, s) => B.asyncScoped((c) => F.gen(function* () {
+}, ki = (e, t, n, r, i, a, o, s) => B.asyncScoped((c) => F.gen(function* () {
 	let l = yield* F.tryPromise(() => t.subscribe(e, (e) => {
 		c.single(e);
 	}, n, r, i, a, o, s)).pipe(F.matchCause({
-		onFailure: (e) => (Li(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (Ri(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Vi(e)
+			error: Hi(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2476,20 +2481,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 		yield* F.addFinalizer(() => F.sync(() => e()));
 	}
-})), ki = /* @__PURE__ */ new Set(), Ai = () => {
-	ki.clear();
-}, ji = (e) => {
-	ki.has(e) || (ki.add(e), process.stderr.write(`[voltro] ${e}: \`cache:\` is declared but NOT applied — this query's handler returns a computed value, and the snapshot cache only wraps a store read. Every subscriber re-runs the handler. Either return a query descriptor (so the read can be cached), or drop \`cache:\` so the declaration matches what happens.\n`));
-}, Mi = (e, t, n, r) => B.asyncScoped((i) => F.gen(function* () {
+})), Ai = /* @__PURE__ */ new Set(), ji = () => {
+	Ai.clear();
+}, Mi = (e) => {
+	Ai.has(e) || (Ai.add(e), process.stderr.write(`[voltro] ${e}: \`cache:\` is declared but NOT applied — this query's handler returns a computed value, and the snapshot cache only wraps a store read. Every subscriber re-runs the handler. Either return a query descriptor (so the read can be cached), or drop \`cache:\` so the declaration matches what happens.\n`));
+}, Ni = (e, t, n, r) => B.asyncScoped((i) => F.gen(function* () {
 	let a = yield* F.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(F.matchCause({
-		onFailure: (e) => (Li(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (Ri(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Vi(e)
+			error: Hi(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2510,16 +2515,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 		yield* F.addFinalizer(() => F.sync(() => e()));
 	}
-})), Ni = (e, t, n = "rpc.subscription", r, i, a, o) => B.unwrap(F.gen(function* () {
-	let s = yield* Ne, c = yield* Oe, l = yield* wi;
-	Ei(l, n, s);
-	let u = Ci(s, l, c.clientId), d = pi(s.id, c.clientId), f = _i({ subjectKey: d }, () => Cr({
+})), Pi = (e, t, n = "rpc.subscription", r, i, a, o) => B.unwrap(F.gen(function* () {
+	let s = yield* Ne, c = yield* Oe, l = yield* Ti;
+	Di(l, n, s);
+	let u = wi(s, l, c.clientId), d = pi(s.id, c.clientId), f = _i({ subjectKey: d }, () => Cr({
 		traceId: u.traceId,
 		...u.spanId === void 0 ? {} : { spanId: u.spanId }
 	}, () => Si(n, () => e(u)))), p = F.isEffect(f) ? yield* f.pipe(F.matchCause({
-		onFailure: (e) => (Li(`subscription.${n}`, u.traceId, e), {
+		onFailure: (e) => (Ri(`subscription.${n}`, u.traceId, e), {
 			ok: !1,
-			error: Vi(e)
+			error: Hi(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2534,17 +2539,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		error: p.error
 	});
 	let m = p.value;
-	if (rr(m)) return i !== void 0 && ji(n), Mi(m, t, u, n);
+	if (rr(m)) return i !== void 0 && Mi(n), Ni(m, t, u, n);
 	let h = m, g = r?.(h);
-	return Oi(h, t, u, g, n, i === void 0 ? void 0 : {
+	return ki(h, t, u, g, n, i === void 0 ? void 0 : {
 		key: i.scope === "subject" ? `${i.baseKey}:s:${d}` : `${i.baseKey}:global`,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(s), o?.(s) ?? Di(s));
-}).pipe(F.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Pi = (e, t = "rpc.stream") => B.unwrap(F.gen(function* () {
-	let n = yield* Ne, r = yield* Oe, i = yield* wi;
-	Ei(i, t, n);
-	let a = Ci(n, i, r.clientId), o = Si(t, () => e(a)), s = F.isEffect(o) ? yield* o.pipe(F.orDie) : o;
+	}, a?.(s), o?.(s) ?? Oi(s));
+}).pipe(F.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Fi = (e, t = "rpc.stream") => B.unwrap(F.gen(function* () {
+	let n = yield* Ne, r = yield* Oe, i = yield* Ti;
+	Di(i, t, n);
+	let a = wi(n, i, r.clientId), o = Si(t, () => e(a)), s = F.isEffect(o) ? yield* o.pipe(F.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
 	return B.unwrapScoped(F.gen(function* () {
@@ -2553,25 +2558,25 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 		return yield* F.addFinalizer(() => F.sync(() => t())), s.pipe(B.interruptWhen(Xe.await(e)));
 	}));
-}).pipe(F.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Fi = M({ scope: "voltro:rpc" }), Ii = M({ scope: "voltro:http" }), Li = (e, t, n) => {
+}).pipe(F.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Ii = M({ scope: "voltro:rpc" }), Li = M({ scope: "voltro:http" }), Ri = (e, t, n) => {
 	if (N.isInterruptedOnly(n)) return;
 	let r = N.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = N.dieOption(n)._tag === "Some", s = an(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? Fi.error(`${e} failed: ${l}`, c) : Fi.warn(`${e} failed: ${l}`, c);
-}, Ri = /* @__PURE__ */ new Set([
+	o ? Ii.error(`${e} failed: ${l}`, c) : Ii.warn(`${e} failed: ${l}`, c);
+}, zi = /* @__PURE__ */ new Set([
 	"SqlError",
 	"ResultLengthMismatch",
 	"FieldDecryptionError"
-]), zi = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Ri.has(e._tag), Bi = (e) => ({
+]), Bi = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && zi.has(e._tag), Vi = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Vi = (e) => {
+}), Hi = (e) => {
 	let t = N.squash(e);
-	if (t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t), zi(t)) return {
+	if (t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t), Bi(t)) return {
 		_tag: "InternalError",
 		message: "internal server error"
 	};
@@ -2583,21 +2588,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, Hi = (e, t, n = "rpc.mutation") => F.gen(function* () {
-	let r = yield* Ne, i = yield* Oe, a = yield* wi;
-	Ei(a, n, r);
-	let o = Ci(r, a, i.clientId), s = _i({ subjectKey: pi(r.id, i.clientId) }, () => Cr({
-		traceId: o.traceId,
-		...o.spanId === void 0 ? {} : { spanId: o.spanId }
-	}, () => ue({
+}, Ui = (e, t, n = "rpc.mutation") => F.gen(function* () {
+	let r = yield* Ne, i = yield* Oe, a = yield* Ti;
+	Di(a, n, r);
+	let o = wi(r, a, i.clientId), s = pi(r.id, i.clientId), c = {
 		traceId: o.traceId,
 		subjectId: ci(r)
-	}, () => Si(n, () => e(t, o)))));
-	return yield* (F.isEffect(s) ? s : F.tryPromise({
-		try: () => Promise.resolve(s),
+	}, l = _i({ subjectKey: s }, () => Cr({
+		traceId: o.traceId,
+		...o.spanId === void 0 ? {} : { spanId: o.spanId }
+	}, () => ue(c, () => Si(n, () => e(t, o)))));
+	return yield* (F.isEffect(l) ? Ci(l, c) : F.tryPromise({
+		try: () => Promise.resolve(l),
 		catch: (e) => e
-	})).pipe(F.tapErrorCause((e) => F.sync(() => Li(n, o.traceId, e))), F.catchIf(zi, () => F.die(Bi(o.traceId))), F.annotateLogs(Ti(o)));
-}).pipe(F.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Ui = 8 * 1024 * 1024, Wi = (e) => {
+	})).pipe(F.tapErrorCause((e) => F.sync(() => Ri(n, o.traceId, e))), F.catchIf(Bi, () => F.die(Vi(o.traceId))), F.annotateLogs(Ei(o)));
+}).pipe(F.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Wi = 8 * 1024 * 1024, Gi = (e) => {
 	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = ct(), i = (t) => ft.HttpServerRequest.pipe(F.flatMap((t) => F.gen(function* () {
 		if (!e.inspectRoute) return H.text("inspect route not configured", { status: 404 });
 		let n = {};
@@ -2706,7 +2711,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				rawBody: s,
 				...c === void 0 ? {} : { store: c }
 			}, u = yield* F.promise(() => yt(t, l));
-			u.status >= 500 && Ii.warn(`${n.method} ${a} → ${u.status}`, {
+			u.status >= 500 && Li.warn(`${n.method} ${a} → ${u.status}`, {
 				method: n.method,
 				path: a,
 				status: u.status,
@@ -2741,7 +2746,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				});
 			}
 			return u.body instanceof Uint8Array ? H.uint8Array(u.body, f) : H.text(u.body ?? "", f);
-		})), F.tapErrorCause((e) => N.isInterruptedOnly(e) ? F.void : F.sync(() => Ii.error(`${t.map((e) => e.method).join("|")} ${t[0].path} threw`, { path: t[0].path }, N.squash(e))))), n = /* @__PURE__ */ new Map();
+		})), F.tapErrorCause((e) => N.isInterruptedOnly(e) ? F.void : F.sync(() => Li.error(`${t.map((e) => e.method).join("|")} ${t[0].path} threw`, { path: t[0].path }, N.squash(e))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
@@ -2804,21 +2809,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	let C = M({ scope: "voltro:rpc" }), w = I.launch(S).pipe(F.catchAllCause((e) => F.sync(() => {
 		C.error("rpc server crashed", {}, N.squash(e)), process.exit(1);
 	}))), T = F.runFork(w);
-	return Gi.add(T), qi(), {
+	return Ki.add(T), Ji(), {
 		server: r,
 		shutdown: async () => {
-			Gi.delete(T), await F.runPromise(et.interrupt(T)).then(() => void 0, () => void 0);
+			Ki.delete(T), await F.runPromise(et.interrupt(T)).then(() => void 0, () => void 0);
 		}
 	};
-}, Gi = /* @__PURE__ */ new Set(), Ki = !1, qi = () => {
-	if (Ki) return;
-	Ki = !0;
+}, Ki = /* @__PURE__ */ new Set(), qi = !1, Ji = () => {
+	if (qi) return;
+	qi = !0;
 	let e = () => {
-		let e = [...Gi];
-		Gi.clear(), Promise.all(e.map((e) => F.runPromise(et.interrupt(e)).then(() => void 0, () => void 0))).then(() => process.exit(0), () => process.exit(0));
+		let e = [...Ki];
+		Ki.clear(), Promise.all(e.map((e) => F.runPromise(et.interrupt(e)).then(() => void 0, () => void 0))).then(() => process.exit(0), () => process.exit(0));
 	};
 	process.once("SIGINT", e), process.once("SIGTERM", e);
-}, Ji = (e, t = 1e4) => new Promise((n, r) => {
+}, Yi = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2834,13 +2839,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Yi = () => {
+}), Xi = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Xi = () => {
+}, Zi = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, Zi = async () => {
+}, Qi = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2855,7 +2860,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, Qi = (e, t, n) => {
+}, $i = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2878,8 +2883,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, $i = async (e = {}) => {
-	let t = e.mode ?? Yi(), n = e.metricsMode ?? Xi(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, ea = async (e = {}) => {
+	let t = e.mode ?? Xi(), n = e.metricsMode ?? Zi(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: I.empty,
 		mode: t,
@@ -2888,13 +2893,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await Zi(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await Qi(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Qi(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = $i(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2912,18 +2917,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, ea = {
+}, ta = {
 	[Tt.INTERNAL]: "internal",
 	[Tt.SERVER]: "server",
 	[Tt.CLIENT]: "client",
 	[Tt.PRODUCER]: "producer",
 	[Tt.CONSUMER]: "consumer"
-}, ta = (e) => e[0] * 1e3 + e[1] / 1e6, na = 512, ra = 48, ia = (e) => {
+}, na = (e) => e[0] * 1e3 + e[1] / 1e6, ra = 512, ia = 48, aa = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= ra) break;
+		if (n >= ia) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > na ? `${i.slice(0, na)}…` : i;
+		if (typeof i == "string") t[r] = i.length > ra ? `${i.slice(0, ra)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2932,49 +2937,49 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > na ? `${e.slice(0, na)}…` : e;
+			t[r] = e.length > ra ? `${e.slice(0, ra)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, aa = {
+}, oa = {
 	[Et.UNSET]: "unset",
 	[Et.OK]: "ok",
 	[Et.ERROR]: "error"
-}, oa = (e) => {
+}, sa = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: ta(e.time),
-		...e.attributes ? { attributes: ia(e.attributes) } : {}
+		tsMs: na(e.time),
+		...e.attributes ? { attributes: aa(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: ea[e.kind] ?? "internal",
-		attributes: ia(e.attributes),
-		startMs: ta(e.startTime),
-		endMs: ta(e.endTime),
-		durationMs: ta(e.duration),
-		status: aa[e.status.code] ?? "unset",
+		kind: ta[e.kind] ?? "internal",
+		attributes: aa(e.attributes),
+		startMs: na(e.startTime),
+		endMs: na(e.endTime),
+		durationMs: na(e.duration),
+		status: oa[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, sa = (e) => ({
+}, ca = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(oa(t));
+			e(sa(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), ca = { get: (e) => Promise.resolve(process.env[e]) }, la = ca, ua = (e) => {
-	la = e;
-}, da = () => {
-	la = ca;
-}, fa = async (e) => await la.get(e) ?? process.env[e], pa = (e) => process.env[e], ma = (e, t = 6e4, n = () => Date.now()) => {
+}), la = { get: (e) => Promise.resolve(process.env[e]) }, ua = la, da = (e) => {
+	ua = e;
+}, fa = () => {
+	ua = la;
+}, pa = async (e) => await ua.get(e) ?? process.env[e], ma = (e) => process.env[e], ha = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2985,12 +2990,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, ha = (e) => {
+}, ga = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return ma({ get: async (n) => {
+	if (e.perKey) return ha({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -3001,34 +3006,34 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, ga = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ca : e.kind === "custom" ? e.backend : e.kind === "http" ? ha(e) : ca, _a = "_voltro_idempotency", va = (e) => {
+}, _a = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? la : e.kind === "custom" ? e.backend : e.kind === "http" ? ga(e) : la, va = "_voltro_idempotency", ya = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, ya = (e) => ({
+}, ba = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: va(e.response),
+	response: ya(e.response),
 	createdAt: qe(e.createdAt)
-}), ba = async (e, n, r) => (await e.query({
-	table: _a,
+}), xa = async (e, n, r) => (await e.query({
+	table: va,
 	predicate: t(d("scope", n), d("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, xa = (e) => ({
+}))[0] ?? null, Sa = (e) => ({
 	get: async (t, n) => {
-		let r = await ba(e, t, n);
-		return r ? ya(r) : null;
+		let r = await xa(e, t, n);
+		return r ? ba(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = p({
 				kind: "typeid",
 				prefix: "idem"
-			}, _a), o = await e.insertIgnore(_a, {
+			}, va), o = await e.insertIgnore(va, {
 				id: a,
 				scope: t,
 				key: n,
@@ -3037,11 +3042,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - qe(o.createdAt) < i) return ya(o);
-			await e.delete(_a, o.id);
+			if (r - qe(o.createdAt) < i) return ba(o);
+			await e.delete(va, o.id);
 		}
-		let a = await ba(e, t, n);
-		return a ? ya(a) : {
+		let a = await xa(e, t, n);
+		return a ? ba(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -3050,33 +3055,33 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await ba(e, t, n);
-		a && await e.update(_a, a.id, {
+		let a = await xa(e, t, n);
+		a && await e.update(va, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await ba(e, t, n);
-		r && await e.delete(_a, r.id);
+		let r = await xa(e, t, n);
+		r && await e.delete(va, r.id);
 	}
-}), J = "_voltro_kv", Sa = (e) => {
+}), J = "_voltro_kv", Ca = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, Ca = (e, t) => {
-	let n = Sa(e.expiresAt);
+}, wa = (e, t) => {
+	let n = Ca(e.expiresAt);
 	return n !== null && n <= t;
-}, wa = (e) => e === null ? null : JSON.parse(e), Ta = async (e, t) => (await e.query({
+}, Ta = (e) => e === null ? null : JSON.parse(e), Ea = async (e, t) => (await e.query({
 	table: J,
 	predicate: d("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Ea = (e) => {
+}))[0] ?? null, Da = (e) => {
 	let n = (e, t, n) => F.tryPromise({
 		try: n,
 		catch: (n) => new Ot({
@@ -3087,8 +3092,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await Ta(e, t);
-			return n === null ? it.none() : Ca(n, Date.now()) ? (await e.delete(J, n.id), it.none()) : it.some(wa(n.value));
+			let n = await Ea(e, t);
+			return n === null ? it.none() : wa(n, Date.now()) ? (await e.delete(J, n.id), it.none()) : it.some(Ta(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = p({
@@ -3111,14 +3116,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await Ta(e, t);
+			let n = await Ea(e, t);
 			if (n === null) return !1;
-			let r = !Ca(n, Date.now());
+			let r = !wa(n, Date.now());
 			return await e.delete(J, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await Ta(e, t);
-			return n === null ? !1 : Ca(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
+			let n = await Ea(e, t);
+			return n === null ? !1 : wa(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
 			let n = Date.now(), i = ie(C("expiresAt"), g("expiresAt", new Date(n))), a = r === "" ? i : t(s("key", r), i), o = await e.query({
@@ -3129,7 +3134,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of o) Ca(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of o) wa(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
@@ -3139,8 +3144,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			} });
 		})
 	};
-}, Da = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? Mt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(I.provide(At)) : r === "memory" ? jt() : I.succeed(kt, kt.of(Ea(e))), a = tt.make(Dt.Default.pipe(I.provide(i))), o = await a.runPromise(Dt);
+}, Oa = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? Mt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(I.provide(At)) : r === "memory" ? jt() : I.succeed(kt, kt.of(Da(e))), a = tt.make(Dt.Default.pipe(I.provide(i))), o = await a.runPromise(Dt);
 	return {
 		kv: {
 			get: (e) => a.runPromise(o.get(e)).then((e) => it.getOrUndefined(e)),
@@ -3155,7 +3160,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, Oa = {
+}, ka = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -3163,7 +3168,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, ka = "_voltro_api_keys", Aa = (e) => ye("sha256").update(e, "utf8").digest("hex"), ja = (e = "voltro_") => `${e}${be(30).toString("base64url")}`, Ma = (e) => ({
+}, Aa = "_voltro_api_keys", ja = (e) => ye("sha256").update(e, "utf8").digest("hex"), Ma = (e = "voltro_") => `${e}${be(30).toString("base64url")}`, Na = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -3176,18 +3181,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	createdBy: e.createdBy ?? null,
 	onBehalfOf: e.onBehalfOf ?? null,
 	...e.metadata == null ? {} : { metadata: e.metadata }
-}), Na = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Pa = (e, t = {}) => {
+}), Pa = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Fa = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = t.usage, i = async (t) => {
-		let r = ja(n), i = p({
+		let r = Ma(n), i = p({
 			kind: "typeid",
 			prefix: "apikey"
-		}, ka), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, Aa), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
 			onBehalfOf: t.onBehalfOf ?? null,
-			hashedKey: Aa(r),
+			hashedKey: ja(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -3206,7 +3211,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		};
 	}, a = async (t, n = Date.now()) => {
 		let i = await e.findByHash(t);
-		return !i || !Na(i, n) ? null : (r === void 0 ? await e.patch(i.id, { lastUsedAt: n }) : r.touch(i.id, n), {
+		return !i || !Pa(i, n) ? null : (r === void 0 ? await e.patch(i.id, { lastUsedAt: n }) : r.touch(i.id, n), {
 			id: i.id,
 			tenantId: i.tenantId ?? "",
 			createdBy: i.createdBy ?? null,
@@ -3218,7 +3223,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	return {
 		issue: i,
 		resolveByHash: a,
-		verify: (e, t) => a(Aa(e), t),
+		verify: (e, t) => a(ja(e), t),
 		revoke: async (t, n, r = Date.now()) => {
 			let i = await e.findById(t);
 			return !i || (i.tenantId ?? null) !== n ? !1 : (await e.patch(t, { revokedAt: r }), !0);
@@ -3234,9 +3239,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				...a.metadata == null ? {} : { metadata: a.metadata }
 			}));
 		},
-		list: async (t) => (await e.listByTenant(t)).map(Ma)
+		list: async (t) => (await e.listByTenant(t)).map(Na)
 	};
-}, Fa = () => {
+}, Ia = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -3253,21 +3258,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		}
 	};
-}, Ia = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, La = (e) => ({
+}, La = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ra = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: Ia(e.lastUsedAt),
-	expiresAt: Ia(e.expiresAt),
-	revokedAt: Ia(e.revokedAt),
+	lastUsedAt: La(e.lastUsedAt),
+	expiresAt: La(e.expiresAt),
+	revokedAt: La(e.revokedAt),
 	createdBy: e.createdBy ?? null,
 	onBehalfOf: e.onBehalfOf ?? null,
-	createdAt: Ia(e.createdAt) ?? 0,
+	createdAt: La(e.createdAt) ?? 0,
 	...e.metadata == null ? {} : { metadata: e.metadata }
-}), Ra = (e) => async (t, n) => {
+}), za = (e) => async (t, n) => {
 	let r = await e.findById(t);
 	if (r === null) return;
 	let i = r.requestCount ?? 0, a = r.lastUsedAt ?? 0;
@@ -3275,9 +3280,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		requestCount: i + n.requests,
 		lastUsedAt: Math.max(a, n.lastUsedAt)
 	});
-}, za = (e) => {
+}, Ba = (e) => {
 	let t = async (t) => await e.query({
-		table: ka,
+		table: Aa,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -3295,33 +3300,33 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(ka, n(t));
+			await e.insert(Aa, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(d("hashedKey", e));
-			return n[0] ? La(n[0]) : null;
+			return n[0] ? Ra(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(d("id", e));
-			return n[0] ? La(n[0]) : null;
+			return n[0] ? Ra(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : d("tenantId", e))).map(La).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : d("tenantId", e))).map(Ra).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(ka, t, n(r));
+			await e.update(Aa, t, n(r));
 		}
 	};
-}, Ba = (e, t = {}) => Nt({
+}, Va = (e, t = {}) => Nt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), Va = (e) => {
+}), Ha = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null,
 		scopes: t.scopes ?? []
 	};
-}, Ha = (e, t = "/v1/api-keys") => {
+}, Ua = (e, t = "/v1/api-keys") => {
 	let n = z.Struct({
 		id: z.String,
 		name: z.String,
@@ -3362,7 +3367,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				keyPrefix: z.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = Va(n), a = new Set(i.scopes), o = (e) => a.has(we) || a.has(e), s = r.onBehalfOf === void 0 ? i.id : r.onBehalfOf;
+				let r = t.body, i = Ha(n), a = new Set(i.scopes), o = (e) => a.has(we) || a.has(e), s = r.onBehalfOf === void 0 ? i.id : r.onBehalfOf;
 				if (s === null) {
 					if (!o(Te)) throw new Me({
 						required: Te,
@@ -3407,7 +3412,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			guards: [xt(we)],
 			input: z.Struct({}),
 			output: z.Struct({ keys: z.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(Va(n).tenantId)] })
+			handler: async (t, n) => ({ keys: [...await e.list(Ha(n).tenantId)] })
 		}),
 		vt({
 			method: "POST",
@@ -3416,42 +3421,42 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			guards: [xt(we)],
 			input: z.Struct({ body: z.Struct({ id: z.String }) }),
 			output: z.Struct({ ok: z.Boolean }),
-			handler: async (t, n) => ({ ok: await e.revoke(t.body.id, Va(n).tenantId) })
+			handler: async (t, n) => ({ ok: await e.revoke(t.body.id, Ha(n).tenantId) })
 		})
 	];
-}, Ua = {
+}, Wa = {
 	type: "anonymous",
 	id: null,
 	tenantId: null
-}, Wa = class extends Ye.Tag("@voltro/EffectStore")() {}, Ga = (e, t) => (n) => n instanceof ei ? n : new ti({
+}, Ga = class extends Ye.Tag("@voltro/EffectStore")() {}, Ka = (e, t) => (n) => n instanceof ei ? n : new ti({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), Ka = (e, t, n) => F.tryPromise({
+}), qa = (e, t, n) => F.tryPromise({
 	try: n,
-	catch: Ga(e, t)
-}), qa = (e) => I.succeed(Wa, {
-	query: ((t) => Ka("query", t.table, () => e.query(t))),
-	insert: (t, n) => Ka("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => Ka("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => Ka("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => Ka("hardDelete", t, () => e.hardDelete(t, n))
-}), Ja = (e) => ht.make(e.name, {
+	catch: Ka(e, t)
+}), Ja = (e) => I.succeed(Ga, {
+	query: ((t) => qa("query", t.table, () => e.query(t))),
+	insert: (t, n) => qa("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => qa("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => qa("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => qa("hardDelete", t, () => e.hardDelete(t, n))
+}), Ya = (e) => ht.make(e.name, {
 	payload: e.payloadSchema,
 	success: Le,
 	error: e.errorSchema
-}), Ya = (e, t) => ({
+}), Xa = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), Xa = Ya, Za = (e) => {
+}), Za = Xa, Qa = (e) => {
 	let t = N.failureOption(e), n = t._tag === "Some" ? t.value : N.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, Qa = (e, t, n) => {
+}, $a = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -3477,7 +3482,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: Za(r.cause)
+			error: Qa(r.cause)
 		};
 	}
 	return {
@@ -3486,7 +3491,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, $a = (e) => new Promise((t) => setTimeout(t, e)), eo = class extends Error {
+}, eo = (e) => new Promise((t) => setTimeout(t, e)), to = class extends Error {
 	workflowName;
 	missingFields;
 	detail;
@@ -3495,7 +3500,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let r = t.length > 0 ? ` missing required field(s): ${t.join(", ")}.` : "";
 		super(`Workflow "${e}" was started with an invalid payload.${r} ${n}`), this.workflowName = e, this.missingFields = t, this.detail = n, this.name = "WorkflowPayloadError";
 	}
-}, to = (e) => {
+}, no = (e) => {
 	let t = e.ast;
 	if (!Array.isArray(t.propertySignatures)) return {
 		required: [],
@@ -3506,10 +3511,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		required: n.filter((e) => !e.isOptional).map((e) => String(e.name)),
 		optional: n.filter((e) => e.isOptional).map((e) => String(e.name))
 	};
-}, no = (e) => {
+}, ro = (e) => {
 	let t = e.ast;
 	return Array.isArray(t.propertySignatures) ? t.propertySignatures.filter((e) => !e.isOptional && typeof e.name == "string").map((e) => String(e.name)) : [];
-}, ro = (e) => {
+}, io = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) {
@@ -3520,17 +3525,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}, r = (e, t) => {
 		let n = z.validateEither(e.payloadSchema)(t);
 		if (n._tag === "Right") return;
-		let r = typeof t == "object" && t ? Object.keys(t) : [], i = no(e.payloadSchema).filter((e) => !r.includes(e));
-		throw new eo(e.name, i, wt.formatErrorSync(n.left));
+		let r = typeof t == "object" && t ? Object.keys(t) : [], i = ro(e.payloadSchema).filter((e) => !r.includes(e));
+		throw new to(e.name, i, wt.formatErrorSync(n.left));
 	}, i = (e, t) => {
 		let i = n(e);
 		return r(i, t), i;
 	}, a = async (t, r) => {
 		let i = n(t);
-		return Qa(t, r, await e.runEffect(i.poll(r)));
+		return $a(t, r, await e.runEffect(i.poll(r)));
 	}, o = async () => e.runEffect(Pt()), s = async (t, n, r) => {
 		let a = i(t, n), o;
-		return r?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(n)), await e.rememberStartContext?.(t, o, r.callerContext)), r?.wait ? (await e.runEffect(a.execute(n)), Ya(t, o ?? await e.runEffect(a.executionId(n)))) : Ya(t, await e.runEffect(a.execute(n, { discard: !0 })));
+		return r?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(n)), await e.rememberStartContext?.(t, o, r.callerContext)), r?.wait ? (await e.runEffect(a.execute(n)), Xa(t, o ?? await e.runEffect(a.executionId(n)))) : Xa(t, await e.runEffect(a.execute(n, { discard: !0 })));
 	};
 	return {
 		start: s,
@@ -3568,7 +3573,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				let e = await a(r, i);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${r}' run '${i}'`);
-				await $a(c);
+				await eo(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -3606,22 +3611,22 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, io = (e, t) => ({
+}, ao = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), Ya(n, a);
+		return t(() => e.start(n, r)), Xa(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), Ya(n, a);
+		return t(() => e.child(n, r, i)), Xa(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), ao = (e, t) => ({
+}), oo = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -3635,7 +3640,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), oo = (e) => {
+}), so = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -3656,32 +3661,32 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, so = (e, t) => {
+}, co = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? F.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(F.map((e) => Ya(r.definition.name, e)))).pipe(F.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? F.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(F.map((e) => Xa(r.definition.name, e)))).pipe(F.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, co = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, lo = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? F.succeed(void 0) : F.promise(() => Promise.resolve(a))).pipe(F.flatMap((a) => {
 		let o = {
 			...a,
-			subject: a?.subject ?? Ua,
+			subject: a?.subject ?? Wa,
 			traceId: a?.traceId ?? "workflow-bootstrap"
 		}, s = t.buildContext(o, {
 			workflowName: e.definition.name,
 			executionId: i,
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
-		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = I.succeed(Ne, o.subject), d = s?.store, f = d === void 0 ? l : F.provide(l, qa(d));
+		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = I.succeed(Ne, o.subject), d = s?.store, f = d === void 0 ? l : F.provide(l, Ja(d));
 		return F.provide(f, u);
 	}));
-}))), lo = (e) => ({
+}))), uo = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), uo = lo, fo = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", po = () => {
+}), fo = uo, po = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", mo = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, mo = (e) => `${e}_${po()}`, ho = (e) => e.id ?? `${e.event}->${e.workflow}`, go = O("_voltro_workflow_events", {
+}, ho = (e) => `${e}_${mo()}`, go = (e) => e.id ?? `${e.event}->${e.workflow}`, _o = O("_voltro_workflow_events", {
 	id: y({ prefix: "wfe" }),
 	name: k(),
 	payload: T(),
@@ -3689,7 +3694,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	subject: T().nullable(),
 	traceId: k().nullable(),
 	occurredAt: A().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]), _o = O("_voltro_workflow_event_deliveries", {
+}).index(["name"]).index(["source"]).index(["occurredAt"]), vo = O("_voltro_workflow_event_deliveries", {
 	id: y({ prefix: "wfed" }),
 	eventId: k(),
 	eventName: k(),
@@ -3707,8 +3712,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	errorMessage: k().nullable(),
 	createdAt: A().default("now"),
 	completedAt: A().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), vo = (e) => {
-	let t = e.makeId ?? mo, n = /* @__PURE__ */ new Map();
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), yo = (e) => {
+	let t = e.makeId ?? ho, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3749,7 +3754,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = ho(o), l = o.workflow, u;
+			let s = go(o), l = o.workflow, u;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -3852,10 +3857,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			triggered: m
 		};
 	} };
-}, yo = M({ scope: "voltro:outbox" }), Y = "_voltro_outbox", bo = {
+}, bo = M({ scope: "voltro:outbox" }), Y = "_voltro_outbox", xo = {
 	kind: "typeid",
 	prefix: "obx"
-}, xo = O(Y, {
+}, So = O(Y, {
 	id: y({ prefix: "obx" }),
 	effect: k(),
 	payload: T(),
@@ -3873,10 +3878,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	resendRequestedBy: k().nullable(),
 	resendReason: k().nullable(),
 	resendCount: x()
-}), So = "_voltro_outbox_attempts", Co = {
+}), Co = "_voltro_outbox_attempts", wo = {
 	kind: "typeid",
 	prefix: "obxa"
-}, wo = O(So, {
+}, To = O(Co, {
 	id: y({ prefix: "obxa" }),
 	outboxId: k(),
 	effect: k(),
@@ -3897,11 +3902,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	subjectId: k().nullable(),
 	tenantId: k().nullable(),
 	traceId: k().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), To = (e) => {
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Eo = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Eo = 8, Do = (e) => ({
+}, Do = 8, Oo = (e) => ({
 	enqueue: async (n, r, i) => {
 		let a = (e.now ?? (() => /* @__PURE__ */ new Date()))(), o = i?.idempotencyKey;
 		if (o !== void 0) {
@@ -3916,12 +3921,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			if (n !== void 0) return n.id;
 		}
 		let s = {
-			id: p(bo, Y),
+			id: p(xo, Y),
 			effect: n,
 			payload: r,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: i?.maxAttempts ?? Eo,
+			maxAttempts: i?.maxAttempts ?? Do,
 			nextAttemptAt: new Date(a.getTime() + (i?.delayMs ?? 0)),
 			idempotencyKey: o ?? null,
 			lastError: null,
@@ -3968,7 +3973,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), Oo = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), ko = 50, Ao = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, jo = (e) => {
+}), ko = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Ao = 50, jo = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Mo = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -3978,13 +3983,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: Ao(n, 8192)
+		preview: jo(n, 8192)
 	} : t;
-}, Mo = async (e, t, n) => {
+}, No = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(So, {
-			id: p(Co, So),
+		await e.insert(Co, {
+			id: p(wo, Co),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -3995,14 +4000,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : Ao(t.error, 4e3),
-			response: jo(t.response),
+			error: t.error === null ? null : jo(t.error, 4e3),
+			response: Mo(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		yo.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		bo.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -4010,7 +4015,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: So,
+			table: Co,
 			predicate: d("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -4020,11 +4025,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(So, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Co, r.id);
 	} catch (e) {
-		yo.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		bo.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, No = async (e) => {
+}, Po = async (e) => {
 	let n = (e.now ?? (() => /* @__PURE__ */ new Date()))(), r = await e.store.query({
 		table: Y,
 		predicate: t(d("status", "pending"), te("nextAttemptAt", n)),
@@ -4042,7 +4047,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			s++;
 			continue;
 		}
-		let u = t.attempts + 1, d = t.maxAttempts ?? Eo, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = t.attempts + 1, d = t.maxAttempts ?? Do, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let n = await l.handler({
 				payload: t.payload ?? {},
@@ -4051,7 +4056,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
 			});
-			await Mo(e.store, {
+			await No(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: "delivered",
@@ -4069,7 +4074,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			}), i++;
 		} catch (i) {
 			let s = i instanceof Error ? i.message : String(i), l = u >= d;
-			await Mo(e.store, {
+			await No(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -4081,20 +4086,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: s,
-				nextAttemptAt: new Date(n.getTime() + Oo(u)),
+				nextAttemptAt: new Date(n.getTime() + ko(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (o++, yo.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (o++, bo.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, i)) : (a++, yo.warn("outbox delivery failed; will retry", {
+			}, i)) : (a++, bo.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: Oo(u)
+				retryInMs: ko(u)
 			}));
 		}
 	}
@@ -4104,10 +4109,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		dead: o,
 		skipped: s
 	};
-}, Po = M({ scope: "voltro:connections" }), X = "_voltro_connections", Fo = {
+}, Fo = M({ scope: "voltro:connections" }), X = "_voltro_connections", Io = {
 	kind: "typeid",
 	prefix: "conn"
-}, Io = O(X, {
+}, Lo = O(X, {
 	id: y({ prefix: "conn" }),
 	connectionId: k(),
 	subjectId: k(),
@@ -4130,10 +4135,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	metadata: T().nullable(),
 	connectedAt: A(),
 	updatedAt: A()
-}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]), Lo = "_voltro_connection_grants", Ro = {
+}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]), Ro = "_voltro_connection_grants", zo = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, zo = O(Lo, {
+}, Bo = O(Ro, {
 	id: y({ prefix: "cgrant" }),
 	state: k().unique(),
 	connectionId: k(),
@@ -4143,8 +4148,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	redirectTo: k(),
 	createdAt: A(),
 	expiresAt: A()
-}).index(["expiresAt"]), Bo = /^[a-z][a-z0-9-]*$/, Vo = (e) => {
-	if (!Bo.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+}).index(["expiresAt"]), Vo = /^[a-z][a-z0-9-]*$/, Ho = (e) => {
+	if (!Vo.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of [
 			"authorizeUrl",
@@ -4154,9 +4159,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 	}
 	return e;
-}, Ho = (e) => e.label ?? e.id, Uo = (e) => {
+}, Uo = (e) => e.label ?? e.id, Wo = (e) => {
 	if (e.length !== 0 && q() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, Wo = (e) => {
+}, Go = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -4166,14 +4171,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, Go = (e) => {
+}, Ko = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, Ko = (e) => Go(e)?.toISOString() ?? null, qo = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Jo = (e, t) => t === void 0 ? {
+}, qo = (e) => Ko(e)?.toISOString() ?? null, Jo = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Yo = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Ho(e),
+	label: Uo(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -4184,24 +4189,24 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Ho(e),
+	label: Uo(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: qo(t.scopes),
-	expiresAt: Ko(t.expiresAt),
+	scopes: Jo(t.scopes),
+	expiresAt: qo(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: Ko(t.connectedAt)
-}, Yo = async (e, n, r) => (await e.query({
+	connectedAt: qo(t.connectedAt)
+}, Xo = async (e, n, r) => (await e.query({
 	table: X,
 	predicate: t(d("connectionId", n), d("subjectId", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], Xo = async (e) => {
+}))[0], Zo = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: p(Fo, X),
+		id: p(Io, X),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -4219,8 +4224,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return Zo(e.store, r);
-}, Zo = (e, t) => e.upsert(X, t, {
+	return Qo(e.store, r);
+}, Qo = (e, t) => e.upsert(X, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -4236,10 +4241,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), Qo = async (e, t, n) => {
-	let r = await Yo(e, t, n);
+}), $o = async (e, t, n) => {
+	let r = await Xo(e, t, n);
 	return r !== void 0 && e.delete(X, r.id);
-}, $o = async (e, t, n) => {
+}, es = async (e, t, n) => {
 	let r = await e.query({
 		table: X,
 		predicate: d("subjectId", n),
@@ -4248,9 +4253,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => Jo(e, i.get(e.id)));
-}, es = (e, t) => globalThis.fetch(e, t), ts = async (e, t, n) => {
-	let r = e.fetchImpl ?? es, i, a;
+	return t.list().map((e) => Yo(e, i.get(e.id)));
+}, ts = (e, t) => globalThis.fetch(e, t), ns = async (e, t, n) => {
+	let r = e.fetchImpl ?? ts, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -4290,62 +4295,62 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, ns = (e, t, n = Date.now) => ts(e, {
+}, rs = (e, t, n = Date.now) => ns(e, {
 	grant_type: "authorization_code",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), rs = (e, t, n = Date.now) => ts(e, {
+}, n), is = (e, t, n = Date.now) => ns(e, {
 	grant_type: "refresh_token",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	refresh_token: t
-}, n), is = 6e4, as = 3e4, os = class extends Error {
+}, n), as = 6e4, os = 3e4, ss = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, ss = (e) => new Promise((t) => {
+}, cs = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), cs = /* @__PURE__ */ new Map(), ls = (e, t) => `${e}${t}`, us = () => {
-	cs.clear();
-}, ds = (e, t) => ({
+}), ls = /* @__PURE__ */ new Map(), us = (e, t) => `${e}${t}`, ds = () => {
+	ls.clear();
+}, fs = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
 	accessToken: Mr(String(t.accessToken)),
-	expiresAt: Go(t.expiresAt),
-	scopes: qo(t.scopes),
+	expiresAt: Ko(t.expiresAt),
+	scopes: Jo(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), fs = (e, t, n) => {
-	let r = Go(e.expiresAt);
+}), ps = (e, t, n) => {
+	let r = Ko(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, ps = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Yo(n, r.id, i);
-	if (a === void 0) throw new os(r.id, i);
-	if (r.kind === "pat" || !fs(a, r.refreshSkewMs ?? 6e4, t())) return ds(r, a);
-	let o = ls(r.id, i), s = cs.get(o);
+}, ms = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Xo(n, r.id, i);
+	if (a === void 0) throw new ss(r.id, i);
+	if (r.kind === "pat" || !ps(a, r.refreshSkewMs ?? 6e4, t())) return fs(r, a);
+	let o = us(r.id, i), s = ls.get(o);
 	if (s !== void 0) return s;
-	let c = ms({
+	let c = hs({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		cs.delete(o);
+		ls.delete(o);
 	});
-	return cs.set(o, c), c;
-}, ms = async (e) => {
-	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? ss, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
+	return ls.set(o, c), c;
+}, hs = async (e) => {
+	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? cs, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
 	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(d("id", c), te("refreshLockedUntil", new Date(i()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await o(200);
-			let e = await Yo(n, a.id, r);
-			if (e === void 0) throw new os(a.id, r);
-			if (!fs(e, s, i())) return ds(a, e);
+			let e = await Xo(n, a.id, r);
+			if (e === void 0) throw new ss(a.id, r);
+			if (!ps(e, s, i())) return fs(a, e);
 		}
 		throw new j({
 			connectionId: a.id,
@@ -4366,7 +4371,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	});
 	let u;
 	try {
-		u = await rs(a, Mr(String(l)), i);
+		u = await is(a, Mr(String(l)), i);
 	} catch (e) {
 		let t = e instanceof j ? e : new j({
 			connectionId: a.id,
@@ -4383,7 +4388,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Po.warn("connection refresh failed", {
+		}), Fo.warn("connection refresh failed", {
 			connectionId: a.id,
 			transient: t.transient,
 			reason: t.reason
@@ -4399,32 +4404,32 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
 	};
-	return ds(a, await n.update(X, c, f) ?? {
+	return fs(a, await n.update(X, c, f) ?? {
 		...e.row,
 		...f
 	});
-}, hs = (e = 32) => {
+}, gs = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, gs = (e) => {
+}, _s = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, _s = async (e) => {
+}, vs = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return gs(new Uint8Array(t));
-}, vs = 10 * 6e4, ys = (e) => `/_voltro/connections/${e}/callback`, bs = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, xs = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${ys(e.id)}`, Ss = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = hs(), i = n.pkce === !1 ? null : hs(48), a = xs(n, e.publicUrl);
-	await e.store.insert(Lo, {
-		id: p(Ro, Lo),
+	return _s(new Uint8Array(t));
+}, ys = 10 * 6e4, bs = (e) => `/_voltro/connections/${e}/callback`, xs = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, Ss = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${bs(e.id)}`, Cs = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = gs(), i = n.pkce === !1 ? null : gs(48), a = Ss(n, e.publicUrl);
+	await e.store.insert(Ro, {
+		id: p(zo, Ro),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		codeVerifier: i === null ? null : jr(i),
-		redirectTo: bs(e.redirectTo),
+		redirectTo: xs(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + vs)
+		expiresAt: new Date(t.getTime() + ys)
 	});
 	let o = new URLSearchParams({
 		response_type: "code",
@@ -4434,15 +4439,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (o.set("code_challenge", await _s(i)), o.set("code_challenge_method", "S256"));
+	i !== null && (o.set("code_challenge", await vs(i)), o.set("code_challenge_method", "S256"));
 	let s = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${s}${o.toString()}`,
 		state: r
 	};
-}, Cs = async (e) => {
+}, ws = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: Lo,
+		table: Ro,
 		predicate: d("state", e.state),
 		order: [],
 		take: 1,
@@ -4454,8 +4459,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(Lo, n.id);
-	let r = String(n.connectionId), i = Go(n.expiresAt);
+	await e.store.delete(Ro, n.id);
+	let r = String(n.connectionId), i = Ko(n.expiresAt);
 	if (i !== null && i.getTime() < t.getTime()) throw new j({
 		connectionId: r,
 		reason: "handshake expired — start again",
@@ -4467,17 +4472,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : Mr(String(n.codeVerifier)), s = await ns(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : Mr(String(n.codeVerifier)), s = await rs(a, {
 		code: e.code,
-		redirectUri: xs(a, e.publicUrl),
+		redirectUri: Ss(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Po.warn("connection identify failed; storing without account details", {
+		Fo.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await Xo({
+	return await Zo({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -4487,11 +4492,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: bs(String(n.redirectTo ?? "/"))
+		redirectTo: xs(String(n.redirectTo ?? "/"))
 	};
-}, ws = async (e, t = /* @__PURE__ */ new Date()) => {
+}, Ts = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: Lo,
+		table: Ro,
 		predicate: te("expiresAt", t),
 		order: [],
 		take: void 0,
@@ -4500,27 +4505,27 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, Ts, Es = (e) => {
-	Ts = e;
-}, Ds = () => Ts, Os = (e, t) => {
-	let n = Ts;
+}, Es, Ds = (e) => {
+	Es = e;
+}, Os = () => Es, ks = (e, t) => {
+	let n = Es;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, ks = (e) => async (t, n) => {
+}, As = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new os(n, "<anonymous>");
-	return ps({
+	if (i === null || i === "") throw new ss(n, "<anonymous>");
+	return ms({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, As = (e) => {
+}, js = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new os(n, "<anonymous>");
-		return ps({
+		if (t === null || t === "") throw new ss(n, "<anonymous>");
+		return ms({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -4532,7 +4537,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof os) return null;
+				if (e instanceof ss) return null;
 				throw e;
 			}
 		},
@@ -4547,17 +4552,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : $o(e.store, e.registry, t)
+		})) : es(e.store, e.registry, t)
 	};
-}, js = (e, t) => {
+}, Ms = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
 	if (n === null || n === "") throw new je({ connectionId: t });
 	return n;
-}, Ms = (e, t) => {
+}, Ns = (e, t) => {
 	let n = e.registry.get(t);
 	if (n === void 0) throw new Ae({ connectionId: t });
 	return n;
-}, Ns = (e) => async (t, n) => {
+}, Ps = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -4570,15 +4575,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : $o(n.store, e.registry, r);
-}, Ps = (e) => async (t, n) => {
-	let r = Ms(e, t.connectionId), i = js(n, t.connectionId);
+	})) : es(n.store, e.registry, r);
+}, Fs = (e) => async (t, n) => {
+	let r = Ns(e, t.connectionId), i = Ms(n, t.connectionId);
 	if (r.kind !== "oauth2") throw new ke({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return Ss({
+	return Cs({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -4586,8 +4591,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Fs = (e) => async (t, n) => {
-	let r = Ms(e, t.connectionId), i = js(n, t.connectionId);
+}, Is = (e) => async (t, n) => {
+	let r = Ns(e, t.connectionId), i = Ms(n, t.connectionId);
 	if (r.kind !== "pat") throw new ke({
 		connectionId: t.connectionId,
 		expected: "pat",
@@ -4609,7 +4614,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			transient: !1
 		});
 	}
-	return await Xo({
+	return await Zo({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -4620,20 +4625,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, Is = (e) => async (t, n) => {
-	Ms(e, t.connectionId);
-	let r = js(n, t.connectionId);
-	return { ok: await Qo(n.store, t.connectionId, r) };
-}, Ls = "admin:full", Rs = class extends z.TaggedError()("AccessDenied", {
+}, Ls = (e) => async (t, n) => {
+	Ns(e, t.connectionId);
+	let r = Ms(n, t.connectionId);
+	return { ok: await $o(n.store, t.connectionId, r) };
+}, Rs = "admin:full", zs = class extends z.TaggedError()("AccessDenied", {
 	action: z.String,
 	resourceType: z.String,
 	resourceId: z.String
-}) {}, zs = /* @__PURE__ */ new Map(), Bs = (e) => {
+}) {}, Bs = /* @__PURE__ */ new Map(), Vs = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (zs.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return zs.set(e.resourceType, e), e;
-}, Vs = (e) => zs.get(e), Hs = () => [...zs.values()], Us = () => zs.clear(), Ws = () => Hs().map((e) => {
+	if (Bs.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Bs.set(e.resourceType, e), e;
+}, Hs = (e) => Bs.get(e), Us = () => [...Bs.values()], Ws = () => Bs.clear(), Gs = () => Us().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -4646,7 +4651,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Gs = (e, t) => {
+}), Ks = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -4655,37 +4660,37 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, Ks = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Gs(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), qs = (e, t, n, r) => {
+}, qs = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Ks(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Js = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = Ks(e, n, r.tuples, r.policy);
+	let a = qs(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Js = (e, t, n, r) => {
-	if (!qs(e, t, n, r)) throw new Rs({
+}, Ys = (e, t, n, r) => {
+	if (!Js(e, t, n, r)) throw new zs({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Ys = (e, t, n, r, i) => r.filter((r) => qs(e, t, {
+}, Xs = (e, t, n, r, i) => r.filter((r) => Js(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), Xs = (e, t) => {
+}, i)), Zs = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, Zs = M({ scope: "voltro:policy" }), Qs, $s = (e) => {
-	Qs = e;
-}, ec = () => Qs, tc = () => {
+}, Qs = M({ scope: "voltro:policy" }), $s, ec = (e) => {
+	$s = e;
+}, tc = () => $s, nc = () => {
 	Ge((e) => F.gen(function* () {
-		let t = Vs(e.resourceType);
-		if (t === void 0) return Zs.warn("policy guard denied — no resource policy registered for this type", {
+		let t = Hs(e.resourceType);
+		if (t === void 0) return Qs.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = Qs;
-		if (n === void 0) return Zs.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = $s;
+		if (n === void 0) return Qs.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
@@ -4696,11 +4701,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				resourceId: e.resourceId
 			}),
 			catch: (e) => e
-		}).pipe(F.catchAll((t) => (Zs.error("policy guard denied — tuple source failed", {
+		}).pipe(F.catchAll((t) => (Qs.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
 		}, t), F.succeed([])))), i = e.subject;
-		return qs({
+		return Js({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -4713,10 +4718,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			tuples: r
 		});
 	}));
-}, nc = (e) => {
-	Promise.resolve().then(e);
 }, rc = (e) => {
-	let t = e.schedule ?? nc, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
+	Promise.resolve().then(e);
+}, ic = (e) => {
+	let t = e.schedule ?? rc, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -4762,23 +4767,23 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, ic = I.effect(lt.HttpClient, F.map(lt.HttpClient, (e) => e.pipe(lt.mapRequestEffect((e) => F.currentSpan.pipe(F.map((t) => e.headers.traceparent === void 0 ? ut.setHeader(e, "traceparent", yr({
+}, ac = I.effect(lt.HttpClient, F.map(lt.HttpClient, (e) => e.pipe(lt.mapRequestEffect((e) => F.currentSpan.pipe(F.map((t) => e.headers.traceparent === void 0 ? ut.setHeader(e, "traceparent", yr({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), F.catchAll(() => F.succeed(e))))))), ac = class extends Error {
+})) : e), F.catchAll(() => F.succeed(e))))))), oc = class extends Error {
 	url;
 	reason;
 	_tag = "SsrfBlockedError";
 	constructor(e, t) {
 		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
 	}
-}, oc = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, sc = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), cc = (e, t, n) => n.some((n) => {
+}, sc = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, cc = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), lc = (e, t, n) => n.some((n) => {
 	let r = n.trim().toLowerCase();
 	if (r === "") return !1;
 	let i = t === "" ? e : `${e}:${t}`;
 	return r === e || r === i ? !0 : r.startsWith("*.") ? e.endsWith(r.slice(1)) : !1;
-}), lc = (e, t = {}) => {
+}), uc = (e, t = {}) => {
 	let n;
 	try {
 		n = new URL(e);
@@ -4787,25 +4792,25 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	if (n.protocol !== "http:" && n.protocol !== "https:") return `blocked scheme "${n.protocol}"`;
 	let r = n.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-	if (cc(r, n.port, t.allowHosts ?? [])) return null;
+	if (lc(r, n.port, t.allowHosts ?? [])) return null;
 	if (r === "localhost" || r.endsWith(".localhost") || r.endsWith(".internal") || r.endsWith(".local")) return `blocked host "${r}"`;
 	let i = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(r);
 	if (i) {
 		let e = Number(i[1]), t = Number(i[2]);
-		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : oc(e, t) ? `blocked private/reserved address ${r}` : null;
+		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : sc(e, t) ? `blocked private/reserved address ${r}` : null;
 	}
 	if (r.includes(":")) {
 		let e = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(r);
-		return e ? lc(`${n.protocol}//${e[1]}`, t) : sc(r) ? `blocked private/reserved address ${r}` : null;
+		return e ? uc(`${n.protocol}//${e[1]}`, t) : cc(r) ? `blocked private/reserved address ${r}` : null;
 	}
 	return null;
-}, uc = (e = {}) => I.effect(lt.HttpClient, F.map(lt.HttpClient, (t) => {
+}, dc = (e = {}) => I.effect(lt.HttpClient, F.map(lt.HttpClient, (t) => {
 	let n = lt.transform(t, (t, n) => F.suspend(() => {
-		let r = lc(n.url, e);
-		return r === null ? t : F.die(new ac(n.url, r));
+		let r = uc(n.url, e);
+		return r === null ? t : F.die(new oc(n.url, r));
 	}));
 	return lt.followRedirects(n, e.maxRedirects ?? 5);
-})), dc = (e) => {
+})), fc = (e) => {
 	let t = e.now ?? Date.now, n = e.intervalMs ?? 3e4, r = e.maxPending ?? 500, i = /* @__PURE__ */ new Map(), a = !1, o = async () => {
 		if (i.size === 0) return;
 		let t = i;
@@ -4834,7 +4839,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		},
 		pending: () => i.size
 	};
-}, fc = "voltro/audit", pc = "voltro/softDelete", mc = "voltro/tenant", hc = (e) => {
+}, pc = "voltro/audit", mc = "voltro/softDelete", hc = "voltro/tenant", gc = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -4878,16 +4883,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? gc,
-		computedFields: (e) => t.get(e)?.computedFields ?? _c,
-		generatedColumns: (e) => t.get(e)?.generatedColumns ?? vc,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? _c,
+		computedFields: (e) => t.get(e)?.computedFields ?? vc,
+		generatedColumns: (e) => t.get(e)?.generatedColumns ?? yc,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, gc = /* @__PURE__ */ new Map(), _c = /* @__PURE__ */ new Map(), vc = /* @__PURE__ */ new Set(), yc = hc([]), bc = M({ scope: "store.fieldEncryption" }), xc = (e, t) => {
+}, _c = /* @__PURE__ */ new Map(), vc = /* @__PURE__ */ new Map(), yc = /* @__PURE__ */ new Set(), bc = gc([]), xc = M({ scope: "store.fieldEncryption" }), Sc = (e, t) => {
 	let n = t, r = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", i = /* @__PURE__ */ new Set(), a = (e) => {
 		let t = `${e.table}.${e.column}`;
-		i.has(t) || (i.add(t), bc.warn("encrypted column degraded to null — could not decrypt with the active key", {
+		i.has(t) || (i.add(t), xc.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
 			column: e.column,
 			reason: e.reason,
@@ -4911,7 +4916,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			e.injectExternalChange(t);
 		},
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope },
-		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => xc(e.withNamespace(n), t) },
+		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => Sc(e.withNamespace(n), t) },
 		...e.raw === void 0 ? {} : { raw: ((...t) => e.raw(...t)) },
 		...e.close === void 0 ? {} : { close: (t) => e.close(t) },
 		...e.ping === void 0 ? {} : { ping: () => e.ping() },
@@ -4923,24 +4928,24 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		upsert: async (t, n, r) => d(t, await e.upsert(t, o(t, n), r)),
 		insertIgnore: async (t, n, r) => d(t, await e.insertIgnore(t, o(t, n), r)),
 		patchJson: async (t, n, r, i) => d(t, await e.patchJson(t, n, r, i)),
-		transactional: (n) => e.transactional((e) => n(xc(e, t)))
+		transactional: (n) => e.transactional((e) => n(Sc(e, t)))
 	};
-}, Sc = (e, t) => {
+}, Cc = (e, t) => {
 	if (t === void 0 || t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, Cc = (e, t) => {
+}, wc = (e, t) => {
 	let n = h(e), r = n === void 0 ? [] : fe(n);
 	return r.length === 0 ? t ?? [] : t === void 0 ? r : [...t, ...r];
-}, wc = (e, t) => t.length === 0 ? e : e.map((e) => Sc(e, t)), Tc = (e, t, n, r, i) => {
+}, Tc = (e, t) => t.length === 0 ? e : e.map((e) => Cc(e, t)), Ec = (e, t, n, r, i) => {
 	let a = {
 		...t?.(r) ?? {},
 		...n?.(i) ?? {}
 	}, o = e;
 	for (let [e, t] of Object.entries(a)) t !== void 0 && (o = o.where(e, t));
 	return o;
-}, Ec = 1e3, Dc = (e, t = Ec) => {
+}, Dc = 1e3, Oc = (e, t = Dc) => {
 	let n = (e) => typeof e == "number" && Number.isFinite(e) ? e : void 0, r = (e) => Math.max(1, Math.min(Math.floor(e), t)), i = n(e.page);
 	if (i !== void 0) {
 		let t = r(n(e.pageSize) ?? 100);
@@ -4953,35 +4958,35 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		limit: r(n(e.limit) ?? 100),
 		offset: Math.max(0, Math.floor(n(e.offset) ?? 0))
 	};
-}, Oc = {
+}, kc = {
 	list: (e, t = {}) => async (n, r) => {
 		let i = n ?? {}, a = r.store.select(e);
 		if (t.columns !== void 0 && t.columns.length > 0) {
-			let n = new Set(Cc(e, void 0)), r = t.columns.filter((e) => !n.has(e));
+			let n = new Set(wc(e, void 0)), r = t.columns.filter((e) => !n.has(e));
 			r.length > 0 && (a = a.select(...r));
 		}
-		t.include !== void 0 && (a = a.with(t.include)), a = Tc(a, t.filter, t.scope, i, r);
+		t.include !== void 0 && (a = a.with(t.include)), a = Ec(a, t.filter, t.scope, i, r);
 		for (let e of t.sort ?? []) a = a.orderBy(e.column, e.direction ?? "asc");
 		if (t.paginate === !0) {
-			let { limit: e, offset: n } = Dc(i, t.maxPageSize);
+			let { limit: e, offset: n } = Oc(i, t.maxPageSize);
 			a = a.limit(e).offset(n);
 		}
-		return wc(await a.all(), Cc(e, t.redact));
+		return Tc(await a.all(), wc(e, t.redact));
 	},
 	getById: (e, t = {}) => async (n, r) => {
 		let i = r.store.select(e).where("id", n.id);
 		t.include !== void 0 && (i = i.with(t.include));
 		let a = await i.first();
-		return a === null ? null : Sc(a, Cc(e, t.redact));
+		return a === null ? null : Cc(a, wc(e, t.redact));
 	},
-	create: (e, t = {}) => async (n, r) => Sc(await r.store.insert(e, n), Cc(e, t.redact)),
+	create: (e, t = {}) => async (n, r) => Cc(await r.store.insert(e, n), wc(e, t.redact)),
 	update: (e, t = {}) => async (n, r) => {
 		let { id: i, ...a } = n, o = await r.store.update(e, i, a);
-		return o === null ? null : Sc(o, Cc(e, t.redact));
+		return o === null ? null : Cc(o, wc(e, t.redact));
 	},
-	count: (e, t = {}) => async (n, r) => Tc(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
+	count: (e, t = {}) => async (n, r) => Ec(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
 	remove: (e) => async (t, n) => ({ deleted: await n.store.delete(e, t.id) })
-}, kc = (e) => {
+}, Ac = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		if (!n.has(e)) switch (n.add(e), e._tag) {
 			case "TypeLiteral":
@@ -5008,7 +5013,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	};
 	return r(e.ast), t;
-}, Ac = (e) => {
+}, jc = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		switch (e._tag) {
 			case "Literal": return e.literal === null;
@@ -5043,38 +5048,38 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	};
 	return i(e.ast), t;
-}, jc = (e, t) => {
+}, Mc = (e, t) => {
 	let n = e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source];
 	if (n.length === 0) return [];
-	let r = kc(e.output), i = Ac(e.output), a = [];
+	let r = Ac(e.output), i = jc(e.output), a = [];
 	for (let o of n) for (let n of t.get(o) ?? []) r.has(n) && !i.has(n) && a.push({
 		query: e.name,
 		table: o,
 		column: n
 	});
 	return a;
-}, Mc = (e) => {
+}, Nc = (e) => {
 	if (e.length !== 0) return `A wire-reachable query exposes a server-only column:\n${e.map((e) => `  • query '${e.query}' output declares '${e.column}' — a .serverOnly() column of '${e.table}'`).join("\n")}\nThree ways out, in order of preference:\n  1. Omit the column from the query's output schema. The crud.* read helpers strip these automatically.\n  2. Keep the KEY but type it \`Schema.Null\` — for a view that must stay wire-compatible (an importer that breaks if the key vanishes) while never sending a value. The audit accepts that, because the schema then PROVES no value can flow instead of promising it. Pair it with a \`hasX\` boolean.\n  3. Drop the .serverOnly() marker, if the column may in fact reach a client.\nNote the audit reads the DECLARED shape, not what your handler emits: a field typed \`string\` that you always set to null still fails, and should — the next edit to that handler is one line away from sending it.`;
-}, Nc = class extends z.TaggedError()("CircuitOpen", {
+}, Pc = class extends z.TaggedError()("CircuitOpen", {
 	name: z.String,
 	retryAfterMs: z.Number
-}) {}, Pc = {
+}) {}, Fc = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, Fc = { make: (e) => F.gen(function* () {
-	let t = e.name ?? "circuit", n = Ze.toMillis(Ze.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* R.make(Pc), o = F.gen(function* () {
+}, Ic = { make: (e) => F.gen(function* () {
+	let t = e.name ?? "circuit", n = Ze.toMillis(Ze.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* R.make(Fc), o = F.gen(function* () {
 		let e = yield* R.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* R.set(a, t >= r ? Pc : {
+			yield* R.set(a, t >= r ? Fc : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* R.set(a, Pc));
+		e.failureCount !== 0 && (yield* R.set(a, Fc));
 	}), s = F.gen(function* () {
 		let t = yield* Je.currentTimeMillis, n = yield* R.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
@@ -5112,7 +5117,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			if (N.isInterruptedOnly(e)) return F.void;
 			let t = N.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
 			return i(n) ? s : F.void;
-		})) : yield* F.fail(new Nc({
+		})) : yield* F.fail(new Pc({
 			name: t,
 			retryAfterMs: n
 		}));
@@ -5121,15 +5126,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		value: R.get(a).pipe(F.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: R.set(a, Pc),
+		value: R.set(a, Fc),
 		enumerable: !0
 	}), u;
-}) }, Ic, Lc = (e) => {
-	Ic = e;
-}, Rc = () => {
-	Ic = void 0;
-}, zc = () => Ic, Bc = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? Ke(t.id ?? "system") : Ke(t.id ?? "system", t.scopes), r = t.store ?? Ic?.dataStore, i = t.schemaRegistry ?? Ic?.schemaRegistry, a = t.dialect ?? Ic?.dialect;
+}) }, Lc, Rc = (e) => {
+	Lc = e;
+}, zc = () => {
+	Lc = void 0;
+}, Bc = () => Lc, Vc = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Ke(t.id ?? "system") : Ke(t.id ?? "system", t.scopes), r = t.store ?? Lc?.dataStore, i = t.schemaRegistry ?? Lc?.schemaRegistry, a = t.dialect ?? Lc?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
@@ -5139,7 +5144,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, Vc = (e) => {
+}, Hc = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -5167,7 +5172,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, Hc = (e = process.env) => {
+}, Uc = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -5179,7 +5184,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, Uc = () => {
+}, Wc = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -5204,7 +5209,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, Wc = Symbol.for("@voltro/ScheduleDefinition"), Gc = (e) => typeof e == "object" && !!e && Wc in e, Kc = 30 * 6e4, qc = (e) => {
+}, Gc = Symbol.for("@voltro/ScheduleDefinition"), Kc = (e) => typeof e == "object" && !!e && Gc in e, qc = 30 * 6e4, Jc = (e) => {
 	let t = P.parse(e.cron, e.timezone);
 	if (Qe.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
@@ -5213,18 +5218,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? Kc,
-		[Wc]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? qc,
+		[Gc]: !0
 	};
-}, Jc = (e) => P.unsafeParse(e.cron, e.timezone), Yc = (e, t = /* @__PURE__ */ new Date()) => P.next(Jc(e), t), Z = "_voltro_wakeups", Xc = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Zc = (e) => ({
+}, Yc = (e) => P.unsafeParse(e.cron, e.timezone), Xc = (e, t = /* @__PURE__ */ new Date()) => P.next(Yc(e), t), Z = "_voltro_wakeups", Zc = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Qc = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), Qc = async (e, t) => {
+}), $c = async (e, t) => {
 	await e.upsert(Z, {
-		id: Xc(t),
+		id: Zc(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -5234,7 +5239,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, $c = async (e, t) => e.delete(Z, Xc(t)), el = async (e, t) => await e.update(Z, Xc(t), { status: "fired" }) !== null, tl = (e, t) => ({ and: [{
+}, el = async (e, t) => e.delete(Z, Zc(t)), tl = async (e, t) => await e.update(Z, Zc(t), { status: "fired" }) !== null, nl = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -5242,16 +5247,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), nl = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: tl(Xc(t), "pending") }) > 0, rl = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: tl(Xc(t), "fired") });
-}, il = {
+}] }), rl = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: nl(Zc(t), "pending") }) > 0, il = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: nl(Zc(t), "fired") });
+}, al = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, al = async (e, t) => {
+}, ol = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: il,
+		predicate: al,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5260,18 +5265,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Zc);
-}, ol = async (e, t, n = 500) => {
-	let r = await al(e, n), i = t.getTime();
+	return (await e.query(n)).map(Qc);
+}, sl = async (e, t, n = 500) => {
+	let r = await ol(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, sl = async (e) => (await al(e, 1))[0] ?? null, cl = {
+}, cl = async (e) => (await ol(e, 1))[0] ?? null, ll = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, ll = async (e, t = {}) => {
+}, ul = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: cl,
+		predicate: ll,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5282,12 +5287,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, ul = Ua, dl = "default", fl = {
+}, dl = Wa, fl = "default", pl = {
 	kind: "single",
 	tryClaim: async () => !0
-}, pl = "_voltro_schedule_claims", ml = (e, t, n) => {
+}, ml = "_voltro_schedule_claims", hl = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: pl,
+		table: ml,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -5302,7 +5307,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(pl, {
+				return await e.insert(ml, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -5320,12 +5325,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			}
 		}
 	};
-}, hl = "_voltro_schedule_runs", gl = async (e, t) => {
+}, gl = "_voltro_schedule_runs", _l = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, vl(t));
+		s?.(e, yl(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${xe()}`, l = await n.insert(hl, {
+			let o = `sr_${xe()}`, l = await n.insert(gl, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -5350,7 +5355,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(hl, e, t);
+			let r = await n.update(gl, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -5361,7 +5366,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: hl,
+				table: gl,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -5396,7 +5401,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				scheduleName: e.name,
 				trigger: n,
 				runId: s,
-				subject: ul
+				subject: dl
 			})
 		};
 		try {
@@ -5427,7 +5432,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			let n = Q(t).includes("exceeded maxRuntimeMs"), r = an(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Q(t)} — ${r}` : Q(t);
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : _l(t),
+				errorTag: n ? "timeout" : vl(t),
 				errorMessage: i,
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -5487,8 +5492,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = P.next(Jc(e), /* @__PURE__ */ new Date());
-			await Qc(n, {
+			let t = P.next(Yc(e), /* @__PURE__ */ new Date());
+			await $c(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -5502,7 +5507,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}, w = 2147483647, T = (e) => {
 		if (m) return;
-		let n = Jc(e), r = P.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = Yc(e), r = P.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
 			if (n > w) {
@@ -5524,7 +5529,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let r;
 		try {
 			let t = (await n.query({
-				table: hl,
+				table: gl,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -5543,7 +5548,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = Jc(e), a = [], s = P.next(i, r), c = Date.now();
+		let i = Yc(e), a = [], s = P.next(i, r), c = Date.now();
 		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = P.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
@@ -5588,11 +5593,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), _l = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, vl = (e) => {
+}, Q = (e) => e?.message ?? String(e), vl = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, yl = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, yl = (e, t, n, r) => {
+}, bl = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -5622,7 +5627,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, bl = (e) => (t, n, r) => yl(t, n, r, e), xl = O("_voltro_schedule_runs", {
+}, xl = (e) => (t, n, r) => bl(t, n, r, e), Sl = O("_voltro_schedule_runs", {
 	id: y({ prefix: "schrun" }),
 	name: k(),
 	status: k().oneOf([
@@ -5652,13 +5657,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	]).nullable(),
 	replicaId: k().nullable(),
 	result: T().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), Sl = O("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), Cl = O("_voltro_schedule_claims", {
 	id: y({ prefix: "schclaim" }),
 	scheduleName: k(),
 	bucket: k(),
 	claimedBy: k(),
 	claimedAt: A()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), Cl = O("_voltro_traces", {
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), wl = O("_voltro_traces", {
 	id: y({ prefix: "span" }),
 	traceId: k(),
 	spanId: k(),
@@ -5682,7 +5687,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	durationMs: x(),
 	attributes: T().nullable(),
 	events: T().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), wl = O("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Tl = O("_voltro_undo_log", {
 	id: y({ prefix: "undo" }),
 	tag: k(),
 	label: k().nullable(),
@@ -5693,25 +5698,25 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	crossesAction: i().default(!1),
 	undone: i().default(!1),
 	createdAt: A().default("now")
-}).index(["subjectId", "createdAt"]), Tl = (e = process.env) => {
+}).index(["subjectId", "createdAt"]), El = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, El = (e) => e.startsWith("_voltro"), Dl = async (e, t, n) => (await e.query({
+}, Dl = (e) => e.startsWith("_voltro"), Ol = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: d("id", n),
 	order: []
-}))[0] ?? null, Ol = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, kl = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return El(n) || t({
+		return Dl(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = El(n) ? null : await Dl(e, n, r), o = await e.update(n, r, i);
-		return El(n) || t({
+		let a = Dl(n) ? null : await Ol(e, n, r), o = await e.update(n, r, i);
+		return Dl(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -5720,8 +5725,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = El(n) ? null : await Dl(e, n, r), a = await e.delete(n, r);
-		return !El(n) && a && t({
+		let i = Dl(n) ? null : await Ol(e, n, r), a = await e.delete(n, r);
+		return !Dl(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -5730,10 +5735,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), kl = (e) => {
+} }), Al = (e) => {
 	let t = [];
 	return {
-		tx: Ol(e, (e) => t.push(e)),
+		tx: kl(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -5749,14 +5754,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		}
 	};
-}, Al = (e) => {
+}, jl = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, jl = (e) => {
-	let t = Al(e);
+}, Ml = (e) => {
+	let t = jl(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -5780,28 +5785,28 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			row: e.prev
 		};
 	}
-}, Ml = (e) => {
-	if (e.crossesAction) throw new Nl(e.invocationId, "action");
+}, Nl = (e) => {
+	if (e.crossesAction) throw new Pl(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = jl(e.changes[n]);
+		let r = Ml(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, Nl = class extends Error {
+}, Pl = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Pl = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, Fl = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, Fl = class {
+}, Il = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -5837,7 +5842,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, Il = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, Ll = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -5854,7 +5859,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, Ll = async (e, t) => {
+}, Rl = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -5872,21 +5877,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, Rl = async (e, t) => {
-	for (let n of t) await Ll(e, n);
-}, zl = (e) => e.request?.subject?.id ?? null, Bl = (e) => e === !0 || e === 1, Vl = async (e, t, n) => (await e.query({
+}, zl = async (e, t) => {
+	for (let n of t) await Rl(e, n);
+}, Bl = (e) => e.request?.subject?.id ?? null, Vl = (e) => e === !0 || e === 1, Hl = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: d("id", n),
 	order: []
-}))[0] ?? null, Hl = (e) => {
+}))[0] ?? null, Ul = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Ul = (e) => e.id ?? e.next?.id ?? e.prev?.id, Wl = async (e, t) => {
-	let n = zl(t);
+}, Wl = (e) => e.id ?? e.next?.id ?? e.prev?.id, Gl = async (e, t) => {
+	let n = Bl(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: d("subjectId", n),
@@ -5895,68 +5900,68 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: Bl(e.undone),
-		crossesAction: Bl(e.crossesAction),
+		undone: Vl(e.undone),
+		crossesAction: Vl(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, Gl = async (e, t) => {
-	let n = await Vl(t.store, "_voltro_undo_log", e.invocationId);
+}, Kl = async (e, t) => {
+	let n = await Hl(t.store, "_voltro_undo_log", e.invocationId);
 	if (!n) throw new Ie({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== zl(t)) throw new Fe({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== Bl(t)) throw new Fe({ invocationId: e.invocationId });
 	return n;
-}, Kl = async (e, t) => {
-	let n = await Gl(e, t);
-	if (Bl(n.undone)) return { ok: !0 };
-	if (Bl(n.crossesAction)) throw new Pe({
+}, ql = async (e, t) => {
+	let n = await Kl(e, t);
+	if (Vl(n.undone)) return { ok: !0 };
+	if (Vl(n.crossesAction)) throw new Pe({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = Hl(n.changes);
+	let r = Ul(n.changes);
 	for (let n of r) {
-		let r = Ul(n);
-		if (r !== void 0 && !Pl(await Vl(t.store, n.table, r), n.next ?? null)) throw new Pe({
+		let r = Wl(n);
+		if (r !== void 0 && !Fl(await Hl(t.store, n.table, r), n.next ?? null)) throw new Pe({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: zl(t),
+		subject: Bl(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await Rl(t.store, Ml(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, ql = async (e, t) => {
-	let n = await Gl(e, t);
-	if (!Bl(n.undone)) return { ok: !0 };
-	for (let e of Hl(n.changes)) {
-		let n = Ul(e);
+	return await zl(t.store, Nl(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Jl = async (e, t) => {
+	let n = await Kl(e, t);
+	if (!Vl(n.undone)) return { ok: !0 };
+	for (let e of Ul(n.changes)) {
+		let n = Wl(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Jl = (e = process.env) => {
+}, Yl = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, Yl = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Xl = "«redacted»", Zl = (e) => {
+}, Xl = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Zl = "«redacted»", Ql = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = Yl.test(n) ? Xl : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Xl.test(n) ? Zl : r;
 	return t;
-}, Ql = (e) => {
+}, $l = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, $l = (e, t) => {
+}, eu = (e, t) => {
 	if (t.op === "insert") {
-		let n = Ql(t.new);
+		let n = $l(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Ql(t.new) ?? Ql(t.old);
+		let n = $l(t.new) ?? $l(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, eu = class {
+}, tu = class {
 	mode;
 	capacity;
 	now;
@@ -5976,8 +5981,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Zl(e.old),
-			new: Zl(e.new),
+			old: Ql(e.old),
+			new: Ql(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -5990,23 +5995,23 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = $l(i, e);
+		for (let e of r) i = eu(i, e);
 		return i;
 	}
-}, tu, nu = () => (tu === void 0 && (tu = new eu(Jl())), tu), ru = (e) => {
-	tu = e;
-}, iu = (e) => {
-	let t = nu();
+}, nu, ru = () => (nu === void 0 && (nu = new tu(Yl())), nu), iu = (e) => {
+	nu = e;
+}, au = (e) => {
+	let t = ru();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, au = /* @__PURE__ */ new Set([
+}, ou = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), ou = (e) => {
+]), su = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -6028,7 +6033,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return au.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return ou.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -6042,7 +6047,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, su = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(su), cu = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), lu = (e, t) => {
+}, cu = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(cu), lu = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), uu = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -6050,10 +6055,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, uu = (e, t) => {
+}, du = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = cu(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = lu(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -6069,10 +6074,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}
 	return n;
-}, du = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, fu = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: lu(e, n)
-})), fu = (e, t, n) => {
+	value: uu(e, n)
+})), pu = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -6081,7 +6086,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = cu(t, e.column);
+		let s = lu(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -6090,7 +6095,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = cu(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = lu(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -6110,15 +6115,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, pu = (e, t, n, r) => {
+}, mu = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = uu(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = du(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, mu = class {
+}, hu = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -6126,7 +6131,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = uu(this.shape, e), this.groups.clear();
+		this.state = du(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -6138,14 +6143,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = fu(this.shape, this.state, e);
+		let n = pu(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = pu(this.shape, this.state, e, t);
+		this.state = mu(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -6154,7 +6159,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return du(this.shape, this.state).map((e) => ({
+		return fu(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -6167,7 +6172,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, hu = O("_voltro_rebac_tuples", {
+}, gu = O("_voltro_rebac_tuples", {
 	id: y({ prefix: "rbct" }),
 	subjectId: k(),
 	relation: k(),
@@ -6179,7 +6184,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]), gu = async (e, n, r, i) => n === null ? [] : (await e.query({
+]), _u = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(d("subjectId", n), d("resourceType", r), d("resourceId", i)),
 	order: [],
@@ -6191,16 +6196,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), _u = (e) => ({
+})), vu = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), vu = (e, t) => {
-	let n = t.getPolicy ?? Vs;
+}), yu = (e, t) => {
+	let n = t.getPolicy ?? Hs;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let o = n(a.resourceType), s = (e) => F.fail(new Rs({
+		let o = n(a.resourceType), s = (e) => F.fail(new zs({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -6208,17 +6213,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = _u(i.subject), u = {
+		let l = vu(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
 		};
-		return F.flatMap(F.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => qs(l, a.action, u, {
+		return F.flatMap(F.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Js(l, a.action, u, {
 			policy: o,
 			tuples: e
 		}) ? r : s(c));
 	};
-}, yu = async (e, n, r) => n === null ? [] : (await e.query({
+}, bu = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(d("subjectId", n), d("resourceType", r)),
 	order: [],
@@ -6230,18 +6235,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), bu = (e) => {
-	let t = e.getPolicy ?? Vs;
+})), xu = (e) => {
+	let t = e.getPolicy ?? Hs;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = _u(n);
-		return Ys(s, i, r, a, {
+		let s = vu(n);
+		return Xs(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, xu = (e) => {
+}, Su = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -6249,14 +6254,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, Su = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Cu = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, wu = class {
+}, Cu = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, wu = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Tu = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, Tu = async (e, t, n) => {
-	if (t.table !== e.watch.table || !Su(e.watch.on, t.op)) return "skipped-op";
+}, Eu = async (e, t, n) => {
+	if (t.table !== e.watch.table || !Cu(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -6265,26 +6270,26 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = Cu(t);
+	let a = wu(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, Eu = O("_voltro_wakeups", {
+}, Du = O("_voltro_wakeups", {
 	id: y({ prefix: "wakeup" }),
 	tenantId: k(),
 	kind: k(),
 	refId: k(),
 	wakeAt: A(),
 	status: k()
-}).index(["status", "wakeAt"]).index(["tenantId"]), Du = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await ol(e.store, t, e.batchLimit ?? 100);
+}).index(["status", "wakeAt"]).index(["tenantId"]), Ou = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await sl(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await nl(e.store, t)) try {
+	for (let t of n) if (await rl(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await rl(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await il(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -6292,11 +6297,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, Ou = (e, t = 1e3) => {
+}, ku = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await Du(e);
+				await Ou(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -6306,10 +6311,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, ku = (e) => ({ wake: async () => {
+}, Au = (e) => ({ wake: async () => {
 	await e.start();
-} }), Au = (e) => new Promise((t) => setTimeout(t, e)), ju = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Au, i = e.spawnImpl ?? It, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), ju = (e) => new Promise((t) => setTimeout(t, e)), Mu = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? ju, i = e.spawnImpl ?? It, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -6363,11 +6368,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		},
 		stop: m
 	};
-}, Mu = async (e) => {
+}, Nu = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await sl(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await cl(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Nu = (e, t = Date.now) => {
+}, Pu = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -6379,7 +6384,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Pu = () => {
+}, Fu = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -6397,7 +6402,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, Fu = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Iu = (e, t, n, r) => new Promise((i, a) => {
+}, Iu = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Lu = (e, t, n, r) => new Promise((i, a) => {
 	let o = st.request({
 		host: n,
 		port: r,
@@ -6408,7 +6413,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), Lu = (e, t, n, r, i) => new Promise((a, o) => {
+}), Ru = (e, t, n, r, i) => new Promise((a, o) => {
 	let s = st.request({
 		host: r,
 		port: i,
@@ -6423,21 +6428,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Ru = (e) => {
-	let t = Fu({
+}), zu = (e) => {
+	let t = Iu({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
 	}), n = e.activity, r = st.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Iu(r, i, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Lu(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Lu(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Ru(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, zu = async (e) => {
+}, Bu = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -6454,15 +6459,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, Bu = async (e) => {
-	let t = ku(e.supervisor), n = await Du({
+}, Vu = async (e) => {
+	let t = Au(e.supervisor), n = await Ou({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await Mu({
+	let r = await Nu({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -6472,12 +6477,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, Vu = async (e) => {
-	let t = Nu(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Pu(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Hu = async (e) => {
+	let t = Pu(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Fu(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Ru({
+	}, s = zu({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -6496,7 +6501,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await zu(e.store)), await Bu({
+				if (a && (i = await Bu(e.store)), await Vu({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -6504,7 +6509,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await ll(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await ul(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -6519,14 +6524,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Hu = (e) => e, Uu = class extends z.TaggedError()("AnalyticsError", {
+}, Uu = (e) => e, Wu = class extends z.TaggedError()("AnalyticsError", {
 	provider: z.String,
 	operation: z.String,
 	cause: z.String
-}) {}, Wu = class extends z.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, Gu = class extends z.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: z.String,
 	capability: z.String
-}) {}, Gu = class extends Ye.Tag("@voltro/AnalyticsSink")() {}, Ku = (e, t) => ({
+}) {}, Ku = class extends Ye.Tag("@voltro/AnalyticsSink")() {}, qu = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -6545,20 +6550,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), qu = () => F.gen(function* () {
-	let e = yield* Gu, t = yield* F.serviceOption(Ne), n = it.match(t, {
+}), Ju = () => F.gen(function* () {
+	let e = yield* Ku, t = yield* F.serviceOption(Ne), n = it.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : Ku(e, n);
-}), Ju = "noop", Yu = () => {
-	let e = (e) => F.fail(new Wu({
-		provider: Ju,
+	return n === null ? e : qu(e, n);
+}), Yu = "noop", Xu = () => {
+	let e = (e) => F.fail(new Gu({
+		provider: Yu,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Ju,
+			provider: Yu,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -6572,8 +6577,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, Xu = (e) => {
-	if (e.length === 0) return Yu();
+}, Zu = (e) => {
+	if (e.length === 0) return Xu();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -6590,7 +6595,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? F.fail(new Wu({
+		return r === void 0 ? F.fail(new Gu({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -6613,11 +6618,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Zu = (e) => {
+}, Qu = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => Xu(e.map((e) => e.build(t))),
+		build: (t) => Zu(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => F.forEach(e, (e) => e.initialize ? e.initialize(t) : F.void, {
 			concurrency: 1,
@@ -6628,15 +6633,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, Qu = {
-	kind: "noop",
-	build: () => Yu()
 }, $u = {
+	kind: "noop",
+	build: () => Xu()
+}, ed = {
 	tables: [],
 	detach: () => {}
-}, ed = (e) => {
+}, td = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return $u;
+	if (i === void 0 || i.tables.length === 0) return ed;
 	let a = e.run ?? ((e) => F.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -6660,11 +6665,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, td = (e) => {
+}, nd = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = ou({
+		let t = su({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -6686,47 +6691,47 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, nd = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, rd = class extends z.TaggedError()("AggregateStale", {
+}, rd = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, id = class extends z.TaggedError()("AggregateStale", {
 	name: z.String,
 	ageMs: z.Number,
 	maxAgeMs: z.Number
-}) {}, id = class extends z.TaggedError()("AggregateNotFound", { name: z.String }) {}, ad = class extends z.TaggedError()("AggregateError", {
+}) {}, ad = class extends z.TaggedError()("AggregateNotFound", { name: z.String }) {}, od = class extends z.TaggedError()("AggregateError", {
 	name: z.String,
 	operation: z.String,
 	cause: z.String
-}) {}, od = class extends Ye.Tag("@voltro/AggregateRegistry")() {}, sd = (e) => F.gen(function* () {
-	return (yield* od).getHandle(e);
-}), cd = (e, n, r) => {
+}) {}, sd = class extends Ye.Tag("@voltro/AggregateRegistry")() {}, cd = (e) => F.gen(function* () {
+	return (yield* sd).getHandle(e);
+}), ld = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = d("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, ld = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), ud = (e) => e?.type === "user" && e.tenantId === "", dd = (e, n) => {
+}, ud = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), dd = (e) => e?.type === "user" && e.tenantId === "", fd = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
 	let r = C("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, fd = (e, t) => t, pd = (e) => F.runPromiseExit(e).then((e) => {
+}, pd = (e, t) => t, md = (e) => F.runPromiseExit(e).then((e) => {
 	if ($e.isSuccess(e)) return e.value;
 	let t = N.failureOption(e.cause);
 	throw it.isSome(t) ? t.value : N.squash(e.cause);
-}), md = (e, t) => e.pipe(F.provideService(Ne, t)), hd = async (e, t, n) => {
+}), hd = (e, t) => e.pipe(F.provideService(Ne, t)), gd = async (e, t, n) => {
 	let r = await F.runPromise(Re(t, e.guards, n));
 	if (r) throw r;
-}, gd = async (e) => {
+}, _d = async (e) => {
 	if (Gn() === void 0) return e;
-	let t = await pd(qn(e.subject, (e) => {
+	let t = await md(qn(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, _d = async (e) => {
+}, vd = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
@@ -6755,28 +6760,28 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			status: r
 		});
 	}
-}, vd = /* @__PURE__ */ new Set([1213, 1205]), yd = /* @__PURE__ */ new Set([
+}, yd = /* @__PURE__ */ new Set([1213, 1205]), bd = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), bd = (e) => {
+]), xd = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && vd.has(e.errno) || typeof e.code == "string" && yd.has(e.code) || typeof e.sqlState == "string" && yd.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && yd.has(e.errno) || typeof e.code == "string" && bd.has(e.code) || typeof e.sqlState == "string" && bd.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, xd = 3, Sd = (e) => new Promise((t) => setTimeout(t, e)), Cd = async (e, t) => {
-	let n = t?.delay ?? ((e) => Sd(e * 20 + Math.floor(Math.random() * 30)));
+}, Sd = 3, Cd = (e) => new Promise((t) => setTimeout(t, e)), wd = async (e, t) => {
+	let n = t?.delay ?? ((e) => Cd(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= xd || !bd(e)) throw e;
+		if (t >= Sd || !xd(e)) throw e;
 		await n(t);
 	}
-}, wd = (e) => (t, n, r) => _d({
+}, Td = (e) => (t, n, r) => vd({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -6784,11 +6789,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await hd(t.descriptor, r.subject, n);
-		let i = await gd(r), a = [], o = await Cd(async () => (a.length = 0, e.store.transactional(async (o) => {
+		await gd(t.descriptor, r.subject, n);
+		let i = await _d(r), a = [], o = await wd(async () => (a.length = 0, e.store.transactional(async (o) => {
 			let s = e.undoCapture?.(o), c = s ? s.tx : o, l = e.buildContext(i, c, { afterCommit: (e) => {
 				a.push(e);
-			} }), u = t.executor(n, l), d = F.isEffect(u) ? await e.runEffect(md(u, r.subject), l.store) : await u;
+			} }), u = t.executor(n, l), d = F.isEffect(u) ? await e.runEffect(hd(u, r.subject), l.store) : await u;
 			return s && await s.persist(l.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -6798,30 +6803,30 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let e of a) await e();
 		return o;
 	}
-}), Td = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Ed = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Dd = (e) => {
+}), Ed = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Dd = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Od = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, Od = (e, t) => (n) => () => {
+}, kd = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
 	return !r || r.length === 0 ? Promise.resolve(null) : F.runPromise(Re(n, r, t));
-}, kd = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = Od(t, n)(r.subject), o = async () => {
+}, Ad = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = kd(t, n)(r.subject), o = async () => {
 		let i = await a();
 		if (i) throw i;
-		let o = e.buildContext(await gd(r)), s = t.executor(n, o);
-		return F.isEffect(s) ? F.runPromise(e.provideEffect(md(s, r.subject), o.store)) : Td(await Promise.resolve(s));
+		let o = e.buildContext(await _d(r)), s = t.executor(n, o);
+		return F.isEffect(s) ? F.runPromise(e.provideEffect(hd(s, r.subject), o.store)) : Ed(await Promise.resolve(s));
 	}, s = (n) => {
-		let i = Td(n);
-		return Ed(i) ? e.finalize(i, r) : {
+		let i = Ed(n);
+		return Dd(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: Dd(t),
+			dependentTables: Od(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: o
 		};
 	}, c = () => {
 		let a = t.executor(n, i);
-		return F.isEffect(a) ? e.provideEffect(md(a, r.subject), i.store).pipe(F.map(s)) : a instanceof Promise ? F.promise(() => a).pipe(F.map(s)) : s(a);
+		return F.isEffect(a) ? e.provideEffect(hd(a, r.subject), i.store).pipe(F.map(s)) : a instanceof Promise ? F.promise(() => a).pipe(F.map(s)) : s(a);
 	}, l = () => {
 		let e = t.descriptor.guards;
 		return !e || e.length === 0 ? c() : Re(r.subject, e, n).pipe(F.flatMap((e) => {
@@ -6843,14 +6848,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, Ad = (e) => async (t, n, r) => {
-	let i = await gd(r), a = kd(e)(t, n)(i), o = F.isEffect(a) ? await pd(a) : a;
+}, jd = (e) => async (t, n, r) => {
+	let i = await _d(r), a = Ad(e)(t, n)(i), o = F.isEffect(a) ? await md(a) : a;
 	return rr(o) ? o.value : e.queryRows(o);
-}, jd = (e) => (t, n, r, i) => {
+}, Md = (e) => (t, n, r, i) => {
 	let a = !1, o;
 	return (async () => {
 		try {
-			let s = await gd(r), c = kd(e)(t, n)(s), l = F.isEffect(c) ? await pd(c) : c, u = (e) => i(e), d = rr(l) ? await e.subscribeComputed(l, u, s) : await e.subscribeDescriptor(l, u, s);
+			let s = await _d(r), c = Ad(e)(t, n)(s), l = F.isEffect(c) ? await md(c) : c, u = (e) => i(e), d = rr(l) ? await e.subscribeComputed(l, u, s) : await e.subscribeDescriptor(l, u, s);
 			a ? d() : o = d;
 		} catch (e) {
 			i({
@@ -6861,7 +6866,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	})(), () => {
 		a = !0, o?.();
 	};
-}, Md = (e) => (t, n, r) => _d({
+}, Nd = (e) => (t, n, r) => vd({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -6869,16 +6874,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await hd(t.descriptor, r.subject, n);
-		let i = e.buildContext(await gd(r)), a = t.executor(n, i);
-		return F.isEffect(a) ? e.runEffect(md(a, r.subject), i.store) : a;
+		await gd(t.descriptor, r.subject, n);
+		let i = e.buildContext(await _d(r)), a = t.executor(n, i);
+		return F.isEffect(a) ? e.runEffect(hd(a, r.subject), i.store) : a;
 	}
-}), Nd = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Pd = (e) => typeof e == "string" && e.length > 0 ? e : null, Fd = [
+}), Pd = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Fd = (e) => typeof e == "string" && e.length > 0 ? e : null, Id = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], Id = (e) => Fd.some((t) => t in e), Ld = (e, t, n) => {
+], Ld = (e) => Id.some((t) => t in e), Rd = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -6893,14 +6898,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!Id(e)) return {
+	if (!Ld(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = Pd(e.updatedBy) ?? Pd(e.createdBy), o = Nd(e.updatedAt) ?? Nd(e.createdAt);
+	let a = Fd(e.updatedBy) ?? Fd(e.createdBy), o = Pd(e.updatedAt) ?? Pd(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -6912,12 +6917,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, Rd = (e, t) => {
+}, zd = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: Pd(e.actor) ?? Pd(e.changedBy) },
-			at: Nd(e.at) ?? Nd(e.changedAt),
+			actor: { id: Fd(e.actor) ?? Fd(e.changedBy) },
+			at: Pd(e.at) ?? Pd(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -6932,12 +6937,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, zd = (e) => {
+}, Bd = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, Bd = (e) => {
+}, Vd = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -6957,11 +6962,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: zd(e),
+		id: Bd(e),
 		fields: t
 	};
-}, Vd = (e) => {
-	let t = e.map(Bd);
+}, Hd = (e) => {
+	let t = e.map(Vd);
 	return {
 		rows: t,
 		summary: {
@@ -6970,21 +6975,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, Hd = class extends Error {
+}, Ud = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, Ud = async (e, t) => {
+}, Wd = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new Hd();
+			throw n = await t(e), r = !0, new Ud();
 		});
 	} catch (e) {
-		if (!(e instanceof Hd)) throw e;
+		if (!(e instanceof Ud)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, Wd = "framework-runtime";
+}, Gd = "framework-runtime";
 //#endregion
-export { ka as API_KEYS_TABLE, Rs as AccessDenied, ad as AggregateError, mu as AggregateMaintainer, id as AggregateNotFound, od as AggregateRegistry, rd as AggregateStale, Wu as AnalyticsCapabilityNotSupported, Uu as AnalyticsError, Gu as AnalyticsSink, X as CONNECTIONS_TABLE, Lo as CONNECTION_GRANTS_TABLE, Fc as CircuitBreaker, Nc as CircuitOpen, os as ConnectionNotConnected, Ui as DEFAULT_MAX_RPC_BODY_BYTES, is as DEFAULT_REFRESH_SKEW_MS, Hn as DEFAULT_ROW_FILTER_RETRY, dl as DORMANCY_WAKEUP_TENANT, Qr as DeleteBuilder, er as Dispatcher, Wa as EffectStore, vs as GRANT_TTL_MS, nn as InMemoryDataStore, Wt as IndexedMatcher, Lt as LinearScanMatcher, nt as MetricBoundaries, Ju as NOOP_ANALYTICS_PROVIDER, Kn as NO_ROW_FILTER, Gr as NoRowFound, So as OUTBOX_ATTEMPTS_TABLE, ko as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, Kr as OptimisticLockError, Ls as REBAC_ADMIN_SCOPE, as as REFRESH_LEASE_MS, Wd as RUNTIME_NAME, wu as ReactionRateLimiter, yi as ReplicatedDataStore, Vn as RowFilterUnavailable, ul as SCHEDULE_SUBJECT, Ua as SYSTEM_SUBJECT, Xr as SelectBuilder, ac as SsrfBlockedError, ti as StoreOperationFailed, qt as SubscriptionRegistry, ni as TableValidationFailed, ei as TenantScopeViolation, eu as TimelineRecorder, Nl as UndoBoundaryError, Fl as UndoStack, Zr as UpdateBuilder, fc as VOLTRO_AUDIT_MIXIN_ID, pc as VOLTRO_SOFT_DELETE_MIXIN_ID, mc as VOLTRO_TENANT_MIXIN_ID, eo as WorkflowPayloadError, hr as _connectionStreamCount, gr as _resetConnectionSubjectsForTest, zo as _voltroConnectionGrantsTable, Io as _voltroConnectionsTable, hu as _voltroRebacTuplesTable, Sl as _voltroScheduleClaimsTable, xl as _voltroScheduleRunsTable, Cl as _voltroTracesTable, wl as _voltroUndoLogTable, Eu as _voltroWakeupsTable, _o as _voltroWorkflowEventDeliveriesTable, go as _voltroWorkflowEventsTable, ci as actingUserId, Ha as apiKeyManagementRoutes, ai as applyDefined, fu as applyDelta, Ll as applyInverse, Rl as applyInverses, Xn as applyRowFilter, Zn as applyRowFilterToDescriptor, dd as applySoftDeleteScope, cd as applyTenantScope, Kl as applyUndoInvocation, Js as assertCan, Uo as assertConnectionCipherConfigured, ed as attachAnalyticsMirror, Ji as awaitServerListening, Oo as backoffMs, Ss as beginOAuthConnect, cr as bindConnectionSubject, Hi as bindMutation, Pi as bindStream, Ni as bindSubscription, Oi as bindSubscriptionUntyped, uu as buildIvmState, Vd as buildPreview, vu as buildRebacInterceptor, bu as buildRebacReadFilter, pi as buildSubjectKey, $i as buildTracingLayer, ma as cachedBackend, qs as can, $c as cancelWakeup, ou as classifyShape, us as clearConnectionRefreshFlights, Us as clearResourcePolicies, a as clearRetentions, Rc as clearSystemStoreHandle, Jc as compileCron, Cs as completeOAuthConnect, Zu as composeAnalytics, Xu as composeAnalyticsSinks, ys as connectionCallbackPath, Ho as connectionLabel, _r as connectionSubjectsSnapshot, zu as countRunningWorkflows, Fn as counter, Oc as crud, vi as currentRoutingContext, wr as currentTraceContext, za as dataStoreApiKeyStore, xa as dataStoreIdempotencyStore, Ea as dataStoreKvStore, Mr as decryptField, td as defineAggregate, Vo as defineConnection, uo as defineEventTrigger, fd as defineExecutor, To as defineOutboxHandler, xu as defineReaction, Bs as defineResourcePolicy, qc as defineSchedule, Hu as defineSubscriber, Qn as deliveredRowCount, Tr as deriveKey, Bd as diffChange, No as drainOutbox, ol as dueWakeups, Ks as effectiveRelations, yc as emptySchemaRegistry, Rr as enableGraphObservation, jr as encryptField, ca as envSecretsBackend, ns as exchangeAuthorizationCode, xr as externalSpanFromTraceparent, an as extractDbCause, Kt as fingerprintFor, Qo as forgetCredential, Mc as formatServerOnlyLeaks, yr as formatTraceparent, Il as forwardChangeFromCdc, Ba as frameworkApiKeyStrategy, In as gauge, ja as generateApiKeyToken, Ds as getConnectionResolver, lr as getConnectionSubject, q as getFieldCipher, Vs as getResourcePolicy, Gn as getRowFilter, zc as getSystemStoreHandle, nu as getTimelineRecorder, ec as getTupleSource, $ as groupKeyOf, Ln as histogramMetric, Rd as historyProvenance, ha as httpSecretsBackend, Ft as inspectWorkflow, tc as installPolicyGuardResolver, mr as interruptConnectionStreams, jl as invertChange, nd as isAggregateDefinition, ld as isEmptyTenantScopedRead, on as isForeignKeyViolation, Mu as isIdleNow, zi as isInfraError, zr as isObservingGraph, ud as isOrglessUserSubject, Pl as isSafeToApply, Gc as isScheduleDefinition, fo as isWorkflowEventTriggerDefinition, lu as ivmValue, Ld as lastWriteProvenance, $o as listConnectionStates, Hs as listResourcePolicies, ee as listRetentions, gu as loadResourceTuples, yu as loadSubjectTuples, Vc as localityAwareSelector, Md as makeActionRunner, ml as makeAdvisoryLockCoordinator, Er as makeAesCipher, Pa as makeApiKeyService, dc as makeApiKeyUsageBuffer, Ra as makeApiKeyUsageFlusher, sn as makeAppAccess, Da as makeAsyncKv, sa as makeBufferingSpanProcessor, Wo as makeConnectionRegistry, ks as makeConnectionResolver, As as makeConnectionsFacade, bl as makeCoordinatedScheduler, rc as makeDataLoader, Is as makeDisconnectConnectionExecutor, qa as makeEffectStoreLayer, vo as makeEventsFacade, Dr as makeFieldCipher, $r as makeFluentStore, Nu as makeIdleGate, oo as makeLazyWorkflowFacade, Ns as makeListConnectionsExecutor, wd as makeMutationRunner, Ad as makeOneShotQueryRunner, Do as makeOutboxFacade, io as makePostCommitWorkflowFacade, ku as makeProcessAdapter, kd as makeQueryDescriptorProducer, Od as makeQueryReauthorizer, jd as makeQuerySubscriber, Pu as makeRouterActivity, hc as makeSchemaRegistry, Ps as makeStartConnectionExecutor, Fs as makeSubmitTokenExecutor, kl as makeUndoCapture, Fu as makeWakeGate, Ru as makeWakeProxyServer, ro as makeWorkflowFacade, ao as makeWorkflowFacadeWithCallerContext, so as makeWorkflowHandlers, co as makeWorkflowLayers, Xa as makeWorkflowRunHandle, el as markWakeupFired, du as materializeIvm, Fa as memoryApiKeyStore, Uc as memoryReplicationAdapter, fi as memoryRywPositionStore, Yc as nextFiring, sl as nextWakeup, ju as nodeProcessSupervisor, Yu as noopAnalytics, Qu as noopAnalyticsSpec, Oa as noopKv, Wr as observeStore, Hr as observedGraph, dr as onBindConnectionSubject, wo as outboxAttemptsTable, xo as outboxTable, br as parseTraceparent, to as payloadPropertyNames, ui as powerOfTwoSelector, Ud as previewInRollback, Jo as projectConnectionState, ll as pruneWakeups, Ws as rebacPolicyGraph, An as recordSample, Pn as recordSubscriptionActive, Mn as recordSubscriptionDelivery, Vr as recordTableAccess, iu as recordTimelineEvent, wc as redactColumns, Zl as redactRow, mi as redisRywPositionStore, ql as redoUndoInvocation, rs as refreshAccessToken, pr as registerConnectionStream, se as registerRetention, Qc as registerWakeup, rl as releaseWakeup, di as replicaHealth, Ai as resetComputedQueryCacheWarnings, Ur as resetObservedGraph, da as resetSecretsBackend, ps as resolveConnection, Os as resolveConnectionForSubject, Hc as resolveCurrentRegion, cn as resolveDependentTables, xs as resolveRedirectUri, pu as resolveRescan, qn as resolveRowFilterScope, Jn as resolveRowFilterScopeFor, fa as resolveSecret, pa as resolveSecretSync, ga as resolveSecretsBackend, Jl as resolveTimelineMode, le as retentionTtlMsFromEnv, $l as reverseEventOverRows, Xs as revokedIds, Bc as runAsSystem, Bu as runOrchestratorTick, pd as runProvidedEffect, Tu as runReaction, Vu as runSingleNodeOrchestrator, Ou as runWakeLoop, Cd as runWithDeadlockRetry, Br as runWithObservedProcedure, _i as runWithRoutingContext, Cr as runWithTraceContext, bs as sanitizeRedirectTo, yl as scheduleCoordinated, kc as schemaPropertyNames, jc as serverOnlyLeaks, Es as setConnectionResolver, kr as setFieldCipher, Wn as setRowFilter, ua as setSecretsBackend, Lc as setSystemStoreHandle, ru as setTimelineRecorderForTest, $s as setTupleSource, Aa as sha256Hex, fl as singleCoordinator, zn as snapshotMetrics, Bn as snapshotMetricsSync, uc as ssrfGuardHttpClientLayer, lc as ssrfReason, Wi as startRpcServer, gl as startScheduler, Xo as storeCredential, ws as sweepExpiredGrants, he as sweepRetention, Ml as synthesizeInverse, ic as tracingHttpClientLayer, lo as triggerWorkflow, nl as tryClaimWakeup, ur as unbindConnectionSubject, Tl as undoCaptureEnabled, Wl as undoLogExecutor, sd as useAggregate, qu as useAnalytics, Ys as visibleRows, Du as wakeDueOnce, gd as withRowFilter, Ja as workflowToRpc, Ol as wrapCaptureStore, xc as wrapStoreWithBootCodec, li as wrapStoreWithMixinBehaviour };
+export { Aa as API_KEYS_TABLE, zs as AccessDenied, od as AggregateError, hu as AggregateMaintainer, ad as AggregateNotFound, sd as AggregateRegistry, id as AggregateStale, Gu as AnalyticsCapabilityNotSupported, Wu as AnalyticsError, Ku as AnalyticsSink, X as CONNECTIONS_TABLE, Ro as CONNECTION_GRANTS_TABLE, Ic as CircuitBreaker, Pc as CircuitOpen, ss as ConnectionNotConnected, Wi as DEFAULT_MAX_RPC_BODY_BYTES, as as DEFAULT_REFRESH_SKEW_MS, Hn as DEFAULT_ROW_FILTER_RETRY, fl as DORMANCY_WAKEUP_TENANT, Qr as DeleteBuilder, er as Dispatcher, Ga as EffectStore, ys as GRANT_TTL_MS, nn as InMemoryDataStore, Wt as IndexedMatcher, Lt as LinearScanMatcher, nt as MetricBoundaries, Yu as NOOP_ANALYTICS_PROVIDER, Kn as NO_ROW_FILTER, Gr as NoRowFound, Co as OUTBOX_ATTEMPTS_TABLE, Ao as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, Kr as OptimisticLockError, Rs as REBAC_ADMIN_SCOPE, os as REFRESH_LEASE_MS, Gd as RUNTIME_NAME, Tu as ReactionRateLimiter, yi as ReplicatedDataStore, Vn as RowFilterUnavailable, dl as SCHEDULE_SUBJECT, Wa as SYSTEM_SUBJECT, Xr as SelectBuilder, oc as SsrfBlockedError, ti as StoreOperationFailed, qt as SubscriptionRegistry, ni as TableValidationFailed, ei as TenantScopeViolation, tu as TimelineRecorder, Pl as UndoBoundaryError, Il as UndoStack, Zr as UpdateBuilder, pc as VOLTRO_AUDIT_MIXIN_ID, mc as VOLTRO_SOFT_DELETE_MIXIN_ID, hc as VOLTRO_TENANT_MIXIN_ID, to as WorkflowPayloadError, hr as _connectionStreamCount, gr as _resetConnectionSubjectsForTest, Bo as _voltroConnectionGrantsTable, Lo as _voltroConnectionsTable, gu as _voltroRebacTuplesTable, Cl as _voltroScheduleClaimsTable, Sl as _voltroScheduleRunsTable, wl as _voltroTracesTable, Tl as _voltroUndoLogTable, Du as _voltroWakeupsTable, vo as _voltroWorkflowEventDeliveriesTable, _o as _voltroWorkflowEventsTable, ci as actingUserId, Ua as apiKeyManagementRoutes, ai as applyDefined, pu as applyDelta, Rl as applyInverse, zl as applyInverses, Xn as applyRowFilter, Zn as applyRowFilterToDescriptor, fd as applySoftDeleteScope, ld as applyTenantScope, ql as applyUndoInvocation, Ys as assertCan, Wo as assertConnectionCipherConfigured, td as attachAnalyticsMirror, Yi as awaitServerListening, ko as backoffMs, Cs as beginOAuthConnect, cr as bindConnectionSubject, Ui as bindMutation, Fi as bindStream, Pi as bindSubscription, ki as bindSubscriptionUntyped, du as buildIvmState, Hd as buildPreview, yu as buildRebacInterceptor, xu as buildRebacReadFilter, pi as buildSubjectKey, ea as buildTracingLayer, ha as cachedBackend, Js as can, el as cancelWakeup, su as classifyShape, ds as clearConnectionRefreshFlights, Ws as clearResourcePolicies, a as clearRetentions, zc as clearSystemStoreHandle, Yc as compileCron, ws as completeOAuthConnect, Qu as composeAnalytics, Zu as composeAnalyticsSinks, bs as connectionCallbackPath, Uo as connectionLabel, _r as connectionSubjectsSnapshot, Bu as countRunningWorkflows, Fn as counter, kc as crud, vi as currentRoutingContext, wr as currentTraceContext, Ba as dataStoreApiKeyStore, Sa as dataStoreIdempotencyStore, Da as dataStoreKvStore, Mr as decryptField, nd as defineAggregate, Ho as defineConnection, fo as defineEventTrigger, pd as defineExecutor, Eo as defineOutboxHandler, Su as defineReaction, Vs as defineResourcePolicy, Jc as defineSchedule, Uu as defineSubscriber, Qn as deliveredRowCount, Tr as deriveKey, Vd as diffChange, Po as drainOutbox, sl as dueWakeups, qs as effectiveRelations, bc as emptySchemaRegistry, Rr as enableGraphObservation, jr as encryptField, la as envSecretsBackend, rs as exchangeAuthorizationCode, xr as externalSpanFromTraceparent, an as extractDbCause, Kt as fingerprintFor, $o as forgetCredential, Nc as formatServerOnlyLeaks, yr as formatTraceparent, Ll as forwardChangeFromCdc, Va as frameworkApiKeyStrategy, In as gauge, Ma as generateApiKeyToken, Os as getConnectionResolver, lr as getConnectionSubject, q as getFieldCipher, Hs as getResourcePolicy, Gn as getRowFilter, Bc as getSystemStoreHandle, ru as getTimelineRecorder, tc as getTupleSource, $ as groupKeyOf, Ln as histogramMetric, zd as historyProvenance, ga as httpSecretsBackend, Ft as inspectWorkflow, nc as installPolicyGuardResolver, mr as interruptConnectionStreams, Ml as invertChange, rd as isAggregateDefinition, ud as isEmptyTenantScopedRead, on as isForeignKeyViolation, Nu as isIdleNow, Bi as isInfraError, zr as isObservingGraph, dd as isOrglessUserSubject, Fl as isSafeToApply, Kc as isScheduleDefinition, po as isWorkflowEventTriggerDefinition, uu as ivmValue, Rd as lastWriteProvenance, es as listConnectionStates, Us as listResourcePolicies, ee as listRetentions, _u as loadResourceTuples, bu as loadSubjectTuples, Hc as localityAwareSelector, Nd as makeActionRunner, hl as makeAdvisoryLockCoordinator, Er as makeAesCipher, Fa as makeApiKeyService, fc as makeApiKeyUsageBuffer, za as makeApiKeyUsageFlusher, sn as makeAppAccess, Oa as makeAsyncKv, ca as makeBufferingSpanProcessor, Go as makeConnectionRegistry, As as makeConnectionResolver, js as makeConnectionsFacade, xl as makeCoordinatedScheduler, ic as makeDataLoader, Ls as makeDisconnectConnectionExecutor, Ja as makeEffectStoreLayer, yo as makeEventsFacade, Dr as makeFieldCipher, $r as makeFluentStore, Pu as makeIdleGate, so as makeLazyWorkflowFacade, Ps as makeListConnectionsExecutor, Td as makeMutationRunner, jd as makeOneShotQueryRunner, Oo as makeOutboxFacade, ao as makePostCommitWorkflowFacade, Au as makeProcessAdapter, Ad as makeQueryDescriptorProducer, kd as makeQueryReauthorizer, Md as makeQuerySubscriber, Fu as makeRouterActivity, gc as makeSchemaRegistry, Fs as makeStartConnectionExecutor, Is as makeSubmitTokenExecutor, Al as makeUndoCapture, Iu as makeWakeGate, zu as makeWakeProxyServer, io as makeWorkflowFacade, oo as makeWorkflowFacadeWithCallerContext, co as makeWorkflowHandlers, lo as makeWorkflowLayers, Za as makeWorkflowRunHandle, tl as markWakeupFired, fu as materializeIvm, Ia as memoryApiKeyStore, Wc as memoryReplicationAdapter, fi as memoryRywPositionStore, Xc as nextFiring, cl as nextWakeup, Mu as nodeProcessSupervisor, Xu as noopAnalytics, $u as noopAnalyticsSpec, ka as noopKv, Wr as observeStore, Hr as observedGraph, dr as onBindConnectionSubject, To as outboxAttemptsTable, So as outboxTable, br as parseTraceparent, no as payloadPropertyNames, ui as powerOfTwoSelector, Wd as previewInRollback, Yo as projectConnectionState, ul as pruneWakeups, Gs as rebacPolicyGraph, An as recordSample, Pn as recordSubscriptionActive, Mn as recordSubscriptionDelivery, Vr as recordTableAccess, au as recordTimelineEvent, Tc as redactColumns, Ql as redactRow, mi as redisRywPositionStore, Jl as redoUndoInvocation, is as refreshAccessToken, pr as registerConnectionStream, se as registerRetention, $c as registerWakeup, il as releaseWakeup, di as replicaHealth, ji as resetComputedQueryCacheWarnings, Ur as resetObservedGraph, fa as resetSecretsBackend, ms as resolveConnection, ks as resolveConnectionForSubject, Uc as resolveCurrentRegion, cn as resolveDependentTables, Ss as resolveRedirectUri, mu as resolveRescan, qn as resolveRowFilterScope, Jn as resolveRowFilterScopeFor, pa as resolveSecret, ma as resolveSecretSync, _a as resolveSecretsBackend, Yl as resolveTimelineMode, le as retentionTtlMsFromEnv, eu as reverseEventOverRows, Zs as revokedIds, Vc as runAsSystem, Vu as runOrchestratorTick, md as runProvidedEffect, Eu as runReaction, Hu as runSingleNodeOrchestrator, ku as runWakeLoop, wd as runWithDeadlockRetry, Br as runWithObservedProcedure, _i as runWithRoutingContext, Cr as runWithTraceContext, xs as sanitizeRedirectTo, bl as scheduleCoordinated, Ac as schemaPropertyNames, Mc as serverOnlyLeaks, Ds as setConnectionResolver, kr as setFieldCipher, Wn as setRowFilter, da as setSecretsBackend, Rc as setSystemStoreHandle, iu as setTimelineRecorderForTest, ec as setTupleSource, ja as sha256Hex, pl as singleCoordinator, zn as snapshotMetrics, Bn as snapshotMetricsSync, dc as ssrfGuardHttpClientLayer, uc as ssrfReason, Gi as startRpcServer, _l as startScheduler, Zo as storeCredential, Ts as sweepExpiredGrants, he as sweepRetention, Nl as synthesizeInverse, ac as tracingHttpClientLayer, uo as triggerWorkflow, rl as tryClaimWakeup, ur as unbindConnectionSubject, El as undoCaptureEnabled, Gl as undoLogExecutor, cd as useAggregate, Ju as useAnalytics, Xs as visibleRows, Ou as wakeDueOnce, _d as withRowFilter, Ya as workflowToRpc, kl as wrapCaptureStore, Sc as wrapStoreWithBootCodec, li as wrapStoreWithMixinBehaviour };