@voltro/runtime 0.2.2 → 0.4.0

package/dist/index.js

@@ -1,24 +1,24 @@
-import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isNull as x, json as S, listRetentions as C, lt as w, lte as ee, neq as te, or as T, queryFor as ne, registerRetention as re, requireTable as ie, retentionTtlMsFromEnv as ae, serializeArraysForWrite as oe, sweepRetention as se, table as E, text as D, timestamp as O, walkLeaves as ce } from "@voltro/database";
-import { createCipheriv as le, createDecipheriv as ue, createHash as de, randomBytes as fe, randomUUID as pe, scryptSync as me } from "node:crypto";
-import { EventEmitter as he } from "node:events";
-import { createLogger as ge } from "@voltro/logger";
-import { ADMIN_SCOPE as _e, ConnectionInfo as ve, SubjectService as ye, UndoConflict as be, UndoForbidden as xe, UndoNotFound as Se, WorkflowRunHandleSchema as Ce, diffRows as we, isIdKeyed as Te, publishServerError as Ee, systemSubject as De, tsMs as Oe } from "@voltro/protocol";
-import { Cause as k, Clock as ke, Context as Ae, Cron as A, Deferred as je, Duration as Me, Effect as j, Either as Ne, Exit as Pe, Layer as M, ManagedRuntime as Fe, Metric as N, MetricBoundaries as Ie, MetricState as Le, Option as P, Ref as F, Schema as I, Stream as L, Tracer as Re } from "effect";
-import * as ze from "node:http";
-import { createServer as Be } from "node:http";
-import { HttpClient as Ve, HttpClientRequest as He, HttpLayerRouter as R, HttpServer as Ue, HttpServerRequest as z, HttpServerResponse as B } from "@effect/platform";
-import { NodeContext as We, NodeHttpServer as Ge, NodeRuntime as Ke } from "@effect/platform-node";
-import { Rpc as qe, RpcSerialization as Je, RpcServer as V } from "@effect/rpc";
-import { defineRestRoute as Ye, dispatchSharedPath as Xe, requireScope as Ze } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as Qe } from "node:async_hooks";
-import { SpanKind as H, SpanStatusCode as $e } from "@opentelemetry/api";
-import { Kv as et, KvError as tt, KvStore as nt, layerConnections as rt, layerMemory as it, layerRedis as at } from "@voltro/kv";
-import { apiKeyStrategy as ot } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as st, inspectWorkflow as ct } from "@voltro/workflow";
-import { ArrayFormatter as lt } from "effect/ParseResult";
-import { spawn as ut } from "node:child_process";
+import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as ne, neq as w, or as re, queryFor as ie, registerRetention as ae, requireTable as oe, retentionTtlMsFromEnv as se, serializeArraysForWrite as ce, sweepRetention as le, table as T, text as E, timestamp as D, walkLeaves as ue } from "@voltro/database";
+import { createCipheriv as de, createDecipheriv as fe, createHash as pe, randomBytes as me, randomUUID as he, scryptSync as ge } from "node:crypto";
+import { EventEmitter as _e } from "node:events";
+import { ADMIN_SCOPE as ve, ConnectionInfo as ye, SubjectService as O, UndoConflict as be, UndoForbidden as xe, UndoNotFound as Se, WorkflowRunHandleSchema as Ce, checkGuardsEffect as we, diffRows as Te, effectiveScopes as Ee, hasEffectiveScope as De, isIdKeyed as Oe, publishServerError as ke, requireScope as Ae, systemSubject as je, tsMs as Me } from "@voltro/protocol";
+import { createLogger as Ne } from "@voltro/logger";
+import { Cause as k, Clock as Pe, Context as Fe, Cron as A, Deferred as Ie, Duration as Le, Effect as j, Either as Re, Exit as ze, Layer as M, ManagedRuntime as Be, Metric as N, MetricBoundaries as Ve, MetricState as He, Option as P, Ref as F, Schema as I, Stream as L, Tracer as Ue } from "effect";
+import * as We from "node:http";
+import { createServer as Ge } from "node:http";
+import { HttpClient as Ke, HttpClientRequest as qe, HttpLayerRouter as R, HttpServer as Je, HttpServerRequest as z, HttpServerResponse as B } from "@effect/platform";
+import { NodeContext as Ye, NodeHttpServer as Xe, NodeRuntime as Ze } from "@effect/platform-node";
+import { Rpc as Qe, RpcSerialization as $e, RpcServer as et } from "@effect/rpc";
+import { defineRestRoute as tt, dispatchSharedPath as nt, requireScope as rt } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as it } from "node:async_hooks";
+import { SpanKind as at, SpanStatusCode as ot } from "@opentelemetry/api";
+import { Kv as st, KvError as ct, KvStore as lt, layerConnections as ut, layerMemory as dt, layerRedis as ft } from "@voltro/kv";
+import { apiKeyStrategy as pt } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as mt, inspectWorkflow as ht } from "@voltro/workflow";
+import { ArrayFormatter as gt } from "effect/ParseResult";
+import { spawn as _t } from "node:child_process";
 //#region src/matcher.ts
-var dt = class {
+var vt = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -59,9 +59,9 @@ var dt = class {
 		});
 		return { perTable: e };
 	}
-}, ft = (e) => {
+}, yt = (e) => {
 	let t = [];
-	for (let n of ce(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
+	for (let n of ue(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
 		values: [n.value]
 	}), n.op === "in" && t.push({
@@ -69,18 +69,18 @@ var dt = class {
 		values: n.value
 	}));
 	return t;
-}, pt = (e) => {
+}, bt = (e) => {
 	let t = [];
-	for (let n of ce(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
+	for (let n of ue(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
 		op: n.op,
 		threshold: n.value
 	});
 	return t;
-}, mt = (e, t) => {
-	for (let n of ce(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
+}, xt = (e, t) => {
+	for (let n of ue(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
 	return null;
-}, ht = (e, t) => {
+}, St = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -88,8 +88,8 @@ var dt = class {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, gt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, _t = (e, t, n) => {
-	let r = gt(e, n);
+}, Ct = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, wt = (e, t, n) => {
+	let r = Ct(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -97,7 +97,7 @@ var dt = class {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, vt = class {
+}, Tt = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -105,9 +105,9 @@ var dt = class {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = ft(e.predicate), n = pt(e.predicate);
+		let t = yt(e.predicate), n = bt(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = ht(r.fields, (t) => mt(e.predicate, t));
+			let r = e.usingIndex, i = St(r.fields, (t) => xt(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -252,7 +252,7 @@ var dt = class {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = ht(a, (e) => t[e]);
+				let i = St(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -266,7 +266,7 @@ var dt = class {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) _t(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) wt(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -275,7 +275,7 @@ var dt = class {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!_t(e, n.op, n.threshold)) return !1;
+			} else if (!wt(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -297,23 +297,23 @@ var dt = class {
 		}
 		return i;
 	}
-}, yt = (e) => {
+}, Et = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(yt);
+	if (Array.isArray(e)) return e.map(Et);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = yt(t[e]);
+		for (let e of n) r[e] = Et(t[e]);
 		return r;
 	}
 	return e;
-}, bt = (e, t, n) => {
-	let r = yt({
+}, Dt = (e, t, n) => {
+	let r = Et({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
-	return de("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, xt = class {
+	return pe("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
+}, Ot = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -332,7 +332,7 @@ var dt = class {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = bt(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = Dt(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -390,7 +390,7 @@ var dt = class {
 		});
 		return e;
 	}
-}, St = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, kt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -400,7 +400,7 @@ var dt = class {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), Ct = (e, t, n) => {
+}), At = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -418,11 +418,11 @@ var dt = class {
 		...e,
 		[i]: c
 	};
-}, wt = (e, t, n) => !e || d(e, t, n), U = (e, t) => {
+}, jt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of a(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = U(r.descriptor.predicate, t), a = Tt(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = Mt(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -437,15 +437,15 @@ var dt = class {
 		}
 	}
 	return n;
-}, Tt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? U(e.predicate, n), a = [...t.values()].filter((t) => wt(e.predicate, t, i));
+}, Mt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => jt(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = Et(a, e.aggregations, e.groupBy);
+		let t = Nt(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
-		let r = U(e.having, n);
-		return t.filter((t) => wt(e.having, t, r));
+		let r = V(e.having, n);
+		return t.filter((t) => jt(e.having, t, r));
 	}
-	let o = St(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = kt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -453,7 +453,7 @@ var dt = class {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, Et = (e, t, n) => {
+}, Nt = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -471,11 +471,11 @@ var dt = class {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = Dt(r, e.rows);
+		for (let r of t) n[r.alias] = Pt(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, Dt = (e, t) => {
+}, Pt = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -519,7 +519,7 @@ var dt = class {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, Ot = "\0", kt = (e, t) => e === null ? t : `${e}${Ot}${t}`, At = class e {
+}, Ft = "\0", It = (e, t) => e === null ? t : `${e}${Ft}${t}`, Lt = class e {
 	#e;
 	#t;
 	#n;
@@ -529,13 +529,13 @@ var dt = class {
 		return r.#e = t.tables, r.#t = t.emitter, r.#n = t.numericCounters, r;
 	}
 	constructor(e, t = null) {
-		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new he(), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
+		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new _e(), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
 			let e = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(kt(t, n), e);
+			this.#e.set(It(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -546,11 +546,11 @@ var dt = class {
 		}, t);
 	}
 	#a(e) {
-		return kt(this.#r, e);
+		return It(this.#r, e);
 	}
 	#o() {
-		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Ot}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(Ot) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Ft}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(Ft) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#s(e) {
@@ -558,8 +558,8 @@ var dt = class {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = Tt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
-		return _(e) ? n(t, e.eager, ie(e.table), (e) => this.query(e)) : t;
+		let t = Mt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
+		return _(e) ? n(t, e.eager, oe(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
 		let n = t;
@@ -588,7 +588,7 @@ var dt = class {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = Ct(a, n, r);
+		let o = At(a, n, r);
 		return i.set(t, o), this.#t.emit("change", {
 			table: e,
 			op: "update",
@@ -630,7 +630,7 @@ var dt = class {
 	async updateMany(e, t, n) {
 		let r = this.#e.get(this.#a(e));
 		if (!r) return 0;
-		let i = U(n.where, this.#o()), a = 0;
+		let i = V(n.where, this.#o()), a = 0;
 		for (let [o, s] of r) {
 			if (!d(n.where, s, i)) continue;
 			let c = {
@@ -649,7 +649,7 @@ var dt = class {
 	async deleteMany(e, t) {
 		let n = this.#e.get(this.#a(e));
 		if (!n) return 0;
-		let r = U(t.where, this.#o()), i = [];
+		let r = V(t.where, this.#o()), i = [];
 		for (let [e, a] of n) d(t.where, a, r) && i.push([e, a]);
 		for (let [t, r] of i) n.delete(t), this.#t.emit("change", {
 			table: e,
@@ -688,7 +688,7 @@ var dt = class {
 		}
 	}
 	async transactional(e) {
-		let t = new jt(this.#u());
+		let t = new Rt(this.#u());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -724,7 +724,7 @@ var dt = class {
 			allocateNumericId: (e) => this.#c(e)
 		};
 	}
-}, jt = class {
+}, Rt = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -754,8 +754,8 @@ var dt = class {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), r = Tt(e, this.materialise(e.table), t);
-		return _(e) ? n(r, e.eager, ie(e.table), (e) => this.query(e)) : r;
+		let t = this.buildTablesView(e), r = Mt(e, this.materialise(e.table), t);
+		return _(e) ? n(r, e.eager, oe(e.table), (e) => this.query(e)) : r;
 	}
 	async insert(e, t) {
 		let n = t;
@@ -793,7 +793,7 @@ var dt = class {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = Ct(i, n, r);
+		let a = At(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -814,7 +814,7 @@ var dt = class {
 		}), !0;
 	}
 	async updateMany(e, t, n) {
-		let r = this.materialise(e), i = U(n.where, this.buildTablesViewForPred(n.where)), a = 0;
+		let r = this.materialise(e), i = V(n.where, this.buildTablesViewForPred(n.where)), a = 0;
 		for (let [o, s] of r) {
 			if (!d(n.where, s, i)) continue;
 			let r = {
@@ -831,7 +831,7 @@ var dt = class {
 		return a;
 	}
 	async deleteMany(e, t) {
-		let n = this.materialise(e), r = U(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
+		let n = this.materialise(e), r = V(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
 		for (let [o, s] of n) d(t.where, s, r) && (this.overlay.get(e)?.delete(o), a || (a = /* @__PURE__ */ new Set(), this.tombstones.set(e, a)), a.add(o), this.events.push({
 			table: e,
 			op: "delete",
@@ -894,7 +894,7 @@ var dt = class {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, Mt = (e) => {
+}, zt = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -905,16 +905,23 @@ var dt = class {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, Nt = (e) => {
+}, Bt = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, Pt = (e) => {
+}, Vt = (e) => ({
+	has: (t) => De(e, t),
+	hasAny: (t) => t.some((t) => De(e, t)),
+	require: (t) => Ae(e, t),
+	get scopes() {
+		return Ee(e);
+	}
+}), Ht = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return Ft(e, t), t;
-}, Ft = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && It(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Ft(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) Ft(n.descriptor, t);
-}, It = (e, t, n) => {
+	return Ut(e, t), t;
+}, Ut = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && Wt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Ut(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) Ut(n.descriptor, t);
+}, Wt = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -922,24 +929,24 @@ var dt = class {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && It(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && Wt(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && It(e, a.with, n);
+			n.add(e), a.with !== void 0 && Wt(e, a.with, n);
 		}
 	}
-}, Lt = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), Rt = /* @__PURE__ */ new Set(["*"]), zt = (e, t) => {
+}, Gt = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), Kt = /* @__PURE__ */ new Set(["*"]), H = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			zt(e.not, t);
+			H(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) zt(n, t);
+			for (let n of e.and) H(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) zt(n, t);
+			for (let n of e.or) H(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -948,11 +955,11 @@ var dt = class {
 		}
 		e.op === "exists" || e.op === "not-exists" || t.add(e.column);
 	}
-}, W = (e, t, n) => {
+}, U = (e, t, n) => {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, Bt = (e, t, n) => {
+}, qt = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -960,65 +967,65 @@ var dt = class {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			W(n, r.tableName, [t.sourceKey, t.targetKey]), W(n, e, ["id"]), W(n, i.tableName, ["id"]), Vt(i.tableName, o, n), o.with !== void 0 && Bt(i.tableName, o.with, n);
+			U(n, r.tableName, [t.sourceKey, t.targetKey]), U(n, e, ["id"]), U(n, i.tableName, ["id"]), Jt(i.tableName, o, n), o.with !== void 0 && qt(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && W(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? W(n, e, ["id"]) : W(n, e, [t.sourceKey]), W(n, s.tableName, ["id"]), Vt(s.tableName, o, n), o.with !== void 0 && Bt(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && U(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? U(n, e, ["id"]) : U(n, e, [t.sourceKey]), U(n, s.tableName, ["id"]), Jt(s.tableName, o, n), o.with !== void 0 && qt(s.tableName, o.with, n);
 	}
-}, Vt = (e, t, n) => {
+}, Jt = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		zt(t.where, r), W(n, e, r);
+		H(t.where, r), U(n, e, r);
 	}
-	t.orderBy !== void 0 && W(n, e, t.orderBy.map((e) => e.column));
+	t.orderBy !== void 0 && U(n, e, t.orderBy.map((e) => e.column));
 	let r = m(e);
-	r === void 0 ? W(n, e, ["*"]) : W(n, e, Object.keys(r.fields));
-}, Ht = (e) => {
+	r === void 0 ? U(n, e, ["*"]) : U(n, e, Object.keys(r.fields));
+}, Yt = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (Lt(e)) {
-		for (let n of Pt(e)) W(t, n, ["*"]);
+	if (Gt(e)) {
+		for (let n of Ht(e)) U(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	zt(e.predicate, n);
+	H(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return W(t, e.table, n), e.eager !== void 0 && Bt(e.table, e.eager, t), t;
-}, Ut = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return Rt;
+	return U(t, e.table, n), e.eager !== void 0 && qt(e.table, e.eager, t), t;
+}, Xt = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return Kt;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, Wt = (e, t) => {
+}, Zt = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = Ut(e);
+	let r = Xt(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, Gt = Ie.exponential({
+}, W = Ve.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), Kt = N.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), qt = N.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), Jt = N.histogram("voltro_rpc_duration_seconds", Gt, "RPC handler duration in seconds."), Yt = N.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), Xt = N.histogram("voltro_http_duration_seconds", Gt, "HTTP route duration in seconds."), Zt = N.histogram("voltro_plugin_hook_duration_seconds", Gt, "Plugin interceptor duration in seconds."), Qt = N.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), $t = N.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), en = N.histogram("voltro_subscription_delivery_seconds", Gt, "Subscription delivery produce→push latency in seconds."), tn = N.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), nn = (e) => {
-	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? j.zipRight(N.increment(Kt).pipe(j.tagMetrics("tag", e.tag), j.tagMetrics("status", e.status)), j.zipRight(N.update(Jt, t).pipe(j.tagMetrics("tag", e.tag)), e.status === "error" ? N.increment(qt).pipe(j.tagMetrics("tag", e.tag)) : j.void)) : e.kind === "request" ? j.zipRight(N.increment(Yt).pipe(j.tagMetrics("route", e.tag), j.tagMetrics("status", e.status)), N.update(Xt, t).pipe(j.tagMetrics("route", e.tag))) : j.zipRight(N.update(Zt, t).pipe(j.tagMetrics("hook", e.tag)), e.status === "error" ? N.increment(Qt).pipe(j.tagMetrics("hook", e.tag)) : j.void);
+}), Qt = N.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), $t = N.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), en = N.histogram("voltro_rpc_duration_seconds", W, "RPC handler duration in seconds."), tn = N.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), nn = N.histogram("voltro_http_duration_seconds", W, "HTTP route duration in seconds."), rn = N.histogram("voltro_plugin_hook_duration_seconds", W, "Plugin interceptor duration in seconds."), an = N.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), on = N.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), sn = N.histogram("voltro_subscription_delivery_seconds", W, "Subscription delivery produce→push latency in seconds."), cn = N.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), ln = (e) => {
+	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? j.zipRight(N.increment(Qt).pipe(j.tagMetrics("tag", e.tag), j.tagMetrics("status", e.status)), j.zipRight(N.update(en, t).pipe(j.tagMetrics("tag", e.tag)), e.status === "error" ? N.increment($t).pipe(j.tagMetrics("tag", e.tag)) : j.void)) : e.kind === "request" ? j.zipRight(N.increment(tn).pipe(j.tagMetrics("route", e.tag), j.tagMetrics("status", e.status)), N.update(nn, t).pipe(j.tagMetrics("route", e.tag))) : j.zipRight(N.update(rn, t).pipe(j.tagMetrics("hook", e.tag)), e.status === "error" ? N.increment(an).pipe(j.tagMetrics("hook", e.tag)) : j.void);
 	j.runSync(n);
-}, rn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, an = (e) => {
-	let t = rn(e.label);
-	j.runSync(j.zipRight(N.increment($t).pipe(j.tagMetrics("tag", t), j.tagMetrics("kind", e.kind)), N.update(en, e.durationMs / 1e3).pipe(j.tagMetrics("tag", t), j.tagMetrics("kind", e.kind))));
-}, on = /* @__PURE__ */ new Map(), sn = (e, t) => {
-	let n = rn(e), r = Math.max(0, (on.get(n) ?? 0) + t);
-	r === 0 ? on.delete(n) : on.set(n, r), j.runSync(N.set(tn, r).pipe(j.tagMetrics("tag", n)));
-}, cn = (e, t) => N.counter(e, t === void 0 ? {} : { description: t }), ln = (e, t) => N.gauge(e, t === void 0 ? {} : { description: t }), un = (e, t = Gt, n) => N.histogram(e, t, n), dn = (e) => {
+}, un = (e) => e.startsWith("subscription.") ? e.slice(13) : e, dn = (e) => {
+	let t = un(e.label);
+	j.runSync(j.zipRight(N.increment(on).pipe(j.tagMetrics("tag", t), j.tagMetrics("kind", e.kind)), N.update(sn, e.durationMs / 1e3).pipe(j.tagMetrics("tag", t), j.tagMetrics("kind", e.kind))));
+}, fn = /* @__PURE__ */ new Map(), pn = (e, t) => {
+	let n = un(e), r = Math.max(0, (fn.get(n) ?? 0) + t);
+	r === 0 ? fn.delete(n) : fn.set(n, r), j.runSync(N.set(cn, r).pipe(j.tagMetrics("tag", n)));
+}, mn = (e, t) => N.counter(e, t === void 0 ? {} : { description: t }), hn = (e, t) => N.gauge(e, t === void 0 ? {} : { description: t }), gn = (e, t = W, n) => N.histogram(e, t, n), _n = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
-}, fn = N.snapshot.pipe(j.map((e) => e.map((e) => {
-	let t = e.metricKey.name, n = dn(e.metricKey.tags), r = P.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
-	if (Le.isHistogramState(a)) return {
+}, vn = N.snapshot.pipe(j.map((e) => e.map((e) => {
+	let t = e.metricKey.name, n = _n(e.metricKey.tags), r = P.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
+	if (He.isHistogramState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1030,14 +1037,14 @@ var dt = class {
 		sum: a.sum,
 		count: a.count
 	};
-	if (Le.isGaugeState(a)) return {
+	if (He.isGaugeState(a)) return {
 		name: t,
 		labels: n,
 		...i,
 		type: "gauge",
 		value: Number(a.value)
 	};
-	if (Le.isSummaryState(a)) return {
+	if (He.isSummaryState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1049,7 +1056,7 @@ var dt = class {
 			value: t.value
 		}] : [])
 	};
-	if (Le.isFrequencyState(a)) {
+	if (He.isFrequencyState(a)) {
 		let e = {};
 		for (let [t, n] of a.occurrences) e[t] = n;
 		return {
@@ -1067,7 +1074,7 @@ var dt = class {
 		type: "counter",
 		value: Number(a.count)
 	};
-}))), pn = () => j.runSync(fn), G = ge({ scope: "voltro:dispatcher" }), mn = class {
+}))), yn = () => j.runSync(vn), G = Ne({ scope: "voltro:dispatcher" }), bn = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1077,12 +1084,12 @@ var dt = class {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new vt(), this.subscriptionRegistry = new xt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new Tt(), this.subscriptionRegistry = new Ot(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a) {
-		let o = `sub_${pe()}`, s = i ?? `subscription.${e.table}`, c = Pt(e), l = Ht(e);
+		let o = `sub_${he()}`, s = i ?? `subscription.${e.table}`, c = Ht(e), l = Yt(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(o, e.table, e.predicate, r);
 		for (let e of c) {
 			let t = this.dependentByTable.get(e);
@@ -1099,7 +1106,7 @@ var dt = class {
 			relevantFields: l,
 			lastDelivered: f,
 			cacheBinding: a
-		}), sn(s, 1), t({
+		}), pn(s, 1), t({
 			_tag: "snapshot",
 			revision: 0,
 			data: f
@@ -1115,7 +1122,7 @@ var dt = class {
 			durationMs: p - u,
 			rowCount: f.length
 		}), () => {
-			this.subscriptions.delete(o), sn(s, -1), this.subscriptionRegistry.unsubscribe(o);
+			this.subscriptions.delete(o), pn(s, -1), this.subscriptionRegistry.unsubscribe(o);
 			for (let e of c) {
 				let t = this.dependentByTable.get(e);
 				t !== void 0 && (t.delete(o), t.size === 0 && this.dependentByTable.delete(e));
@@ -1123,17 +1130,17 @@ var dt = class {
 		};
 	}
 	async subscribeComputed(e, t, n, r) {
-		let i = `csub_${pe()}`, a = e.dependentTables, o = {
+		let i = `csub_${he()}`, a = e.dependentTables, o = {
 			id: i,
 			recompute: e.recompute,
 			tenantId: e.tenantId,
 			emit: t,
 			context: n,
 			label: r ?? "subscription.computed",
-			lastJson: hn(e.value),
+			lastJson: xn(e.value),
 			revision: 0
 		};
-		this.computedSubs.set(i, o), sn(o.label, 1);
+		this.computedSubs.set(i, o), pn(o.label, 1);
 		for (let e of a) {
 			let t = this.computedByTable.get(e);
 			t === void 0 && (t = /* @__PURE__ */ new Set(), this.computedByTable.set(e, t)), t.add(i);
@@ -1153,7 +1160,7 @@ var dt = class {
 			durationMs: Date.now() - s,
 			rowCount: 1
 		}), () => {
-			this.computedSubs.delete(i), sn(o.label, -1);
+			this.computedSubs.delete(i), pn(o.label, -1);
 			for (let e of a) {
 				let t = this.computedByTable.get(e);
 				t !== void 0 && (t.delete(i), t.size === 0 && this.computedByTable.delete(e));
@@ -1163,7 +1170,7 @@ var dt = class {
 	async recomputeComputed(e) {
 		let t = Date.now();
 		try {
-			let n = await e.recompute(), r = hn(n);
+			let n = await e.recompute(), r = xn(n);
 			if (r === e.lastJson) return;
 			e.lastJson = r, e.revision += 1;
 			let i = Date.now();
@@ -1231,25 +1238,25 @@ var dt = class {
 				G.trace("missing subscription", { subscriberId: t });
 				continue;
 			}
-			if (!Wt(e, n.relevantFields)) {
+			if (!Zt(e, n.relevantFields)) {
 				o++;
 				continue;
 			}
 			let r = Date.now();
 			try {
 				let i = await this.deps.store.query(n.descriptor), o = n.lastDelivered;
-				if (gn(i, o)) {
+				if (Sn(i, o)) {
 					G.trace("suppressed no-op delta", {
 						subscriberId: t,
 						table: e.table
 					});
 					continue;
 				}
-				n.lastDelivered = i, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), i), Te(o) && Te(i) ? n.emit({
+				n.lastDelivered = i, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), i), Oe(o) && Oe(i) ? n.emit({
 					_tag: "delta",
 					revision: a,
 					emittedAt: a,
-					patch: we(o, i)
+					patch: Te(o, i)
 				}) : n.emit({
 					_tag: "snapshot",
 					revision: a,
@@ -1281,44 +1288,44 @@ var dt = class {
 			skipped: o
 		});
 	}
-}, hn = (e) => {
+}, xn = (e) => {
 	try {
 		return JSON.stringify(e) ?? "null";
 	} catch {
 		return String(e);
 	}
-}, gn = (e, t) => {
+}, Sn = (e, t) => {
 	if (e === t) return !0;
 	if (e.length !== t.length) return !1;
 	for (let n = 0; n < e.length; n++) if (JSON.stringify(e[n]) !== JSON.stringify(t[n])) return !1;
 	return !0;
-}, _n = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, vn = 1440 * 60 * 1e3, yn = 3600 * 1e3, K = /* @__PURE__ */ new Map(), bn = /* @__PURE__ */ new Set(), xn = (e, t) => {
+}, Cn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, wn = 1440 * 60 * 1e3, Tn = 3600 * 1e3, K = /* @__PURE__ */ new Map(), En = /* @__PURE__ */ new Set(), Dn = (e, t) => {
 	K.set(e, {
 		subject: t,
 		touchedAt: Date.now()
 	});
-	for (let n of bn) try {
+	for (let n of En) try {
 		n(e, t);
 	} catch {}
-}, Sn = (e) => {
+}, On = (e) => {
 	let t = K.get(e);
 	if (t) return t.touchedAt = Date.now(), t.subject;
-}, Cn = (e) => {
+}, kn = (e) => {
 	K.delete(e);
-}, wn = (e) => (bn.add(e), () => {
-	bn.delete(e);
-}), Tn = setInterval(() => {
-	let e = Date.now() - vn;
+}, An = (e) => (En.add(e), () => {
+	En.delete(e);
+}), jn = setInterval(() => {
+	let e = Date.now() - wn;
 	for (let [t, n] of K) n.touchedAt < e && K.delete(t);
-}, yn);
-typeof Tn == "object" && Tn && "unref" in Tn && Tn.unref();
-var q = /* @__PURE__ */ new Map(), En = (e, t) => {
+}, Tn);
+typeof jn == "object" && jn && "unref" in jn && jn.unref();
+var q = /* @__PURE__ */ new Map(), Mn = (e, t) => {
 	let n = q.get(e);
 	return n || (n = /* @__PURE__ */ new Set(), q.set(e, n)), n.add(t), () => {
 		let n = q.get(e);
 		n && (n.delete(t), n.size === 0 && q.delete(e));
 	};
-}, Dn = (e) => {
+}, Nn = (e) => {
 	let t = q.get(e);
 	if (t) {
 		for (let e of [...t]) try {
@@ -1326,15 +1333,15 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		} catch {}
 		q.delete(e);
 	}
-}, On = (e) => q.get(e)?.size ?? 0, kn = () => {
+}, Pn = (e) => q.get(e)?.size ?? 0, Fn = () => {
 	K.clear(), q.clear();
-}, An = () => [...K.entries()].map(([e, t]) => ({
+}, In = () => [...K.entries()].map(([e, t]) => ({
 	clientId: e,
 	subjectType: t.subject.type,
 	tenantId: t.subject.tenantId
-})), jn = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, Mn = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, Nn = (e) => {
+})), Ln = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, Rn = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, zn = (e) => {
 	if (typeof e != "string") return null;
-	let t = jn.exec(e.trim().toLowerCase());
+	let t = Ln.exec(e.trim().toLowerCase());
 	if (t === null) return null;
 	let [, n, r, i] = t;
 	return n === "0".repeat(32) || r === "0".repeat(16) ? null : {
@@ -1342,14 +1349,14 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		spanId: r,
 		sampled: (parseInt(i, 16) & 1) == 1
 	};
-}, Pn = (e) => {
-	let t = Nn(e);
-	if (t !== null) return Re.externalSpan({
+}, Bn = (e) => {
+	let t = zn(e);
+	if (t !== null) return Ue.externalSpan({
 		traceId: t.traceId,
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, Fn = new Qe(), In = (e, t) => Fn.run(e, t), Ln = () => Fn.getStore(), Rn = (e = {}) => {
+}, Vn = new it(), Hn = (e, t) => Vn.run(e, t), Un = () => Vn.getStore(), Wn = (e = {}) => {
 	let t = e.random ?? Math.random, n = /* @__PURE__ */ new Map(), r = (e) => n.get(e) ?? 0;
 	return {
 		pick(e) {
@@ -1374,7 +1381,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			}));
 		}
 	};
-}, zn = (e = {}) => {
+}, Gn = (e = {}) => {
 	let t = e.thresholdFailures ?? 3, n = e.windowMs ?? 1e4, r = e.blackoutMs ?? 6e4, i = e.now ?? Date.now, a = /* @__PURE__ */ new Map(), o = (e) => {
 		let t = a.get(e);
 		return t === void 0 && (t = {
@@ -1408,7 +1415,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			}));
 		}
 	};
-}, Bn = (e = {}) => {
+}, Kn = (e = {}) => {
 	let t = e.now ?? Date.now, n = /* @__PURE__ */ new Map();
 	return {
 		get(e) {
@@ -1431,7 +1438,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return n.size;
 		}
 	};
-}, Vn = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, Hn = (e) => {
+}, qn = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, Jn = (e) => {
 	let t = e.now ?? Date.now, n = e.keyPrefix ?? "voltro:ryw", r = e.channel ?? `${n}:bus`, i = e.onError ?? ((e, t) => {
 		process.stderr.write(`[voltro:ryw] redis ${t} failed: ${String(e)}\n`);
 	}), a = `${process.pid ?? 0}:${Math.random() * 1e9 | 0}:${t()}`, o = /* @__PURE__ */ new Map(), s = (e) => {
@@ -1490,7 +1497,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return o.size;
 		}
 	};
-}, Un = ge({ scope: "voltro:replication" }), Wn = new Qe(), Gn = (e, t) => Wn.run(e, t), Kn = () => Wn.getStore(), qn = class {
+}, Yn = Ne({ scope: "voltro:replication" }), Xn = new it(), Zn = (e, t) => Xn.run(e, t), Qn = () => Xn.getStore(), $n = class {
 	primary;
 	replicas;
 	adapter;
@@ -1503,10 +1510,10 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	recordRouting;
 	now;
 	constructor(e) {
-		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? Bn({ now: this.now }), this.selector = e.replicaSelector ?? Rn(), this.health = e.replicaHealth ?? zn({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
+		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? Kn({ now: this.now }), this.selector = e.replicaSelector ?? Wn(), this.health = e.replicaHealth ?? Gn({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
 	}
 	async query(e) {
-		let t = Wn.getStore(), n = t?.subjectKey ?? "anon:bg";
+		let t = Xn.getStore(), n = t?.subjectKey ?? "anon:bg";
 		if (t?.forcePrimary === !0) return this.emitRouting({
 			target: "primary",
 			replicaIndex: null,
@@ -1570,7 +1577,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				waitMs: 0
 			}), r;
 		} catch (r) {
-			return this.health.reportFailure(i, String(r)), Un.warn("replica query failed; falling back to primary", {
+			return this.health.reportFailure(i, String(r)), Yn.warn("replica query failed; falling back to primary", {
 				idx: a,
 				err: r
 			}), this.emitRouting({
@@ -1639,7 +1646,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 					fallbackReason: "wait-timeout"
 				}), this.primary.query(e);
 			}
-			await Jn(10);
+			await er(10);
 		}
 	}
 	async insert(e, t) {
@@ -1679,8 +1686,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		return await this.stampPostWrite(), r;
 	}
 	async transactional(e) {
-		let t = await Gn({
-			subjectKey: Wn.getStore()?.subjectKey ?? "anon:bg",
+		let t = await Zn({
+			subjectKey: Xn.getStore()?.subjectKey ?? "anon:bg",
 			forcePrimary: !0
 		}, () => this.primary.transactional(e));
 		return await this.stampPostWrite(), t;
@@ -1696,7 +1703,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	async stampPostWrite() {
 		if (this.replicas.length === 0) return;
-		let e = Wn.getStore()?.subjectKey ?? "anon:bg";
+		let e = Xn.getStore()?.subjectKey ?? "anon:bg";
 		try {
 			let t = await this.adapter.capturePrimaryPosition(this.primary);
 			this.rywStore.set(e, {
@@ -1704,29 +1711,29 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				expiresAt: this.now() + this.rywTtlMs
 			});
 		} catch (e) {
-			Un.warn("failed to capture primary position; RYW skipped", { err: e });
+			Yn.warn("failed to capture primary position; RYW skipped", { err: e });
 		}
 	}
 	emitRouting(e) {
 		this.recordRouting?.(e);
 	}
-}, Jn = (e) => new Promise((t) => setTimeout(t, e)), Yn = (e, t, n) => ({
+}, er = (e) => new Promise((t) => setTimeout(t, e)), tr = (e, t, n) => ({
 	subject: e,
-	traceId: t?.traceId ?? pe(),
+	traceId: t?.traceId ?? he(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), Xn = j.currentSpan.pipe(j.catchAll(() => j.succeed(void 0))), Zn = (e) => ({
+}), nr = j.currentSpan.pipe(j.catchAll(() => j.succeed(void 0))), rr = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Qn = (e, t, n) => {
+}), ir = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, $n = (e, t, n, r, i, a) => L.asyncScoped((o) => j.gen(function* () {
+}, ar = (e, t, n, r, i, a) => L.asyncScoped((o) => j.gen(function* () {
 	let s = yield* j.tryPromise(() => t.subscribe(e, (e) => {
 		o.single(e);
 	}, n, r, i, a)).pipe(j.matchCause({
-		onFailure: (e) => (ar(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (dr(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: lr(e)
+			error: hr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1742,21 +1749,21 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	let c = s.unsubscribe;
 	if (yield* j.addFinalizer(() => j.sync(() => c())), n.clientId !== void 0) {
-		let e = En(n.clientId, () => {
+		let e = Mn(n.clientId, () => {
 			o.end();
 		});
 		yield* j.addFinalizer(() => j.sync(() => e()));
 	}
-})), er = (e, t, n, r) => L.asyncScoped((i) => j.gen(function* () {
+})), or = (e, t, n, r) => L.asyncScoped((i) => j.gen(function* () {
 	let a = yield* j.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(j.matchCause({
-		onFailure: (e) => (ar(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (dr(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: lr(e)
+			error: hr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1772,21 +1779,21 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	let o = a.unsubscribe;
 	if (yield* j.addFinalizer(() => j.sync(() => o())), n.clientId !== void 0) {
-		let e = En(n.clientId, () => {
+		let e = Mn(n.clientId, () => {
 			i.end();
 		});
 		yield* j.addFinalizer(() => j.sync(() => e()));
 	}
-})), tr = (e, t, n = "rpc.subscription", r, i) => L.unwrap(j.gen(function* () {
-	let a = yield* ye, o = yield* ve, s = yield* Xn;
-	Qn(s, n, a);
-	let c = Yn(a, s, o.clientId), l = Vn(a.id, o.clientId), u = Gn({ subjectKey: l }, () => In({
+})), sr = (e, t, n = "rpc.subscription", r, i) => L.unwrap(j.gen(function* () {
+	let a = yield* O, o = yield* ye, s = yield* nr;
+	ir(s, n, a);
+	let c = tr(a, s, o.clientId), l = qn(a.id, o.clientId), u = Zn({ subjectKey: l }, () => Hn({
 		traceId: c.traceId,
 		...c.spanId === void 0 ? {} : { spanId: c.spanId }
 	}, () => e(c))), d = j.isEffect(u) ? yield* u.pipe(j.matchCause({
-		onFailure: (e) => (ar(`subscription.${n}`, c.traceId, e), {
+		onFailure: (e) => (dr(`subscription.${n}`, c.traceId, e), {
 			ok: !1,
-			error: lr(e)
+			error: hr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1801,38 +1808,38 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		error: d.error
 	});
 	let f = d.value;
-	if (_n(f)) return er(f, t, c, n);
+	if (Cn(f)) return or(f, t, c, n);
 	let p = f, m = r?.(p);
-	return $n(p, t, c, m, n, i === void 0 ? void 0 : {
+	return ar(p, t, c, m, n, i === void 0 ? void 0 : {
 		key: i.scope === "subject" ? `${i.baseKey}:s:${l}` : `${i.baseKey}:global`,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
 	});
-}).pipe(j.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), nr = (e, t = "rpc.stream") => L.unwrap(j.gen(function* () {
-	let n = yield* ye, r = yield* ve, i = yield* Xn;
-	Qn(i, t, n);
-	let a = Yn(n, i, r.clientId), o = e(a), s = j.isEffect(o) ? yield* o.pipe(j.orDie) : o;
+}).pipe(j.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), cr = (e, t = "rpc.stream") => L.unwrap(j.gen(function* () {
+	let n = yield* O, r = yield* ye, i = yield* nr;
+	ir(i, t, n);
+	let a = tr(n, i, r.clientId), o = e(a), s = j.isEffect(o) ? yield* o.pipe(j.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
 	return L.unwrapScoped(j.gen(function* () {
-		let e = yield* je.make(), t = En(c, () => {
-			je.unsafeDone(e, j.void);
+		let e = yield* Ie.make(), t = Mn(c, () => {
+			Ie.unsafeDone(e, j.void);
 		});
-		return yield* j.addFinalizer(() => j.sync(() => t())), s.pipe(L.interruptWhen(je.await(e)));
+		return yield* j.addFinalizer(() => j.sync(() => t())), s.pipe(L.interruptWhen(Ie.await(e)));
 	}));
-}).pipe(j.withSpan(t, { attributes: { "framework.kind": "stream" } }))), rr = ge({ scope: "voltro:rpc" }), ir = ge({ scope: "voltro:http" }), ar = (e, t, n) => {
+}).pipe(j.withSpan(t, { attributes: { "framework.kind": "stream" } }))), lr = Ne({ scope: "voltro:rpc" }), ur = Ne({ scope: "voltro:http" }), dr = (e, t, n) => {
 	if (k.isInterruptedOnly(n)) return;
-	let r = k.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = k.dieOption(n)._tag === "Some", s = Mt(r), c = {
+	let r = k.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = k.dieOption(n)._tag === "Some", s = zt(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? rr.error(`${e} failed: ${l}`, c) : rr.warn(`${e} failed: ${l}`, c);
-}, or = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), sr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && or.has(e._tag), cr = (e) => ({
+	o ? lr.error(`${e} failed: ${l}`, c) : lr.warn(`${e} failed: ${l}`, c);
+}, fr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), pr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && fr.has(e._tag), mr = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), lr = (e) => {
+}), hr = (e) => {
 	let t = k.squash(e);
 	t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t);
 	let n = t && typeof t == "object" ? t : {}, r = {};
@@ -1843,19 +1850,19 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, ur = (e, t, n = "rpc.mutation") => j.gen(function* () {
-	let r = yield* ye, i = yield* ve, a = yield* Xn;
-	Qn(a, n, r);
-	let o = Yn(r, a, i.clientId), s = Gn({ subjectKey: Vn(r.id, i.clientId) }, () => In({
+}, gr = (e, t, n = "rpc.mutation") => j.gen(function* () {
+	let r = yield* O, i = yield* ye, a = yield* nr;
+	ir(a, n, r);
+	let o = tr(r, a, i.clientId), s = Zn({ subjectKey: qn(r.id, i.clientId) }, () => Hn({
 		traceId: o.traceId,
 		...o.spanId === void 0 ? {} : { spanId: o.spanId }
 	}, () => e(t, o)));
 	return yield* (j.isEffect(s) ? s : j.tryPromise({
 		try: () => Promise.resolve(s),
 		catch: (e) => e
-	})).pipe(j.tapErrorCause((e) => j.sync(() => ar(n, o.traceId, e))), j.catchIf(sr, () => j.die(cr(o.traceId))), j.annotateLogs(Zn(o)));
-}).pipe(j.withSpan(n, { attributes: { "framework.kind": "mutation" } })), dr = 8 * 1024 * 1024, fr = (e) => {
-	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Be(), i = (t) => z.HttpServerRequest.pipe(j.flatMap((t) => j.gen(function* () {
+	})).pipe(j.tapErrorCause((e) => j.sync(() => dr(n, o.traceId, e))), j.catchIf(pr, () => j.die(mr(o.traceId))), j.annotateLogs(rr(o)));
+}).pipe(j.withSpan(n, { attributes: { "framework.kind": "mutation" } })), _r = 8 * 1024 * 1024, vr = (e) => {
+	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Ge(), i = (t) => z.HttpServerRequest.pipe(j.flatMap((t) => j.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -1931,7 +1938,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		let t = (e) => z.HttpServerRequest.pipe(j.flatMap((t) => j.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
-			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(j.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = Pn(n.traceparent), s = yield* j.promise(() => e.handle({
+			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(j.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = Bn(n.traceparent), s = yield* j.promise(() => e.handle({
 				method: t.method,
 				path: a,
 				headers: n,
@@ -1961,8 +1968,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				query: a,
 				headers: n,
 				rawBody: o
-			}, c = yield* j.promise(() => Xe(e, s));
-			c.status >= 500 && ir.warn(`${t.method} ${i} → ${c.status}`, {
+			}, c = yield* j.promise(() => nt(e, s));
+			c.status >= 500 && ur.warn(`${t.method} ${i} → ${c.status}`, {
 				method: t.method,
 				path: i,
 				status: c.status,
@@ -1974,7 +1981,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				headers: l
 			};
 			return c.body instanceof Uint8Array ? B.uint8Array(c.body, u) : B.text(c.body ?? "", u);
-		})), j.tapErrorCause((t) => k.isInterruptedOnly(t) ? j.void : j.sync(() => ir.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, k.squash(t))))), n = /* @__PURE__ */ new Map();
+		})), j.tapErrorCause((t) => k.isInterruptedOnly(t) ? j.void : j.sync(() => ur.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, k.squash(t))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
@@ -1985,13 +1992,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		});
 		l = M.mergeAll(...r);
 	}
-	let u = V.layerProtocolWebsocketRouter({ path: n }), d = V.layer(e.group), f = V.layer(e.group).pipe(M.provide(V.layerProtocolHttpRouter({ path: "/rpc" })), M.provide(Je.layerJson), M.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = M.scopedDiscard(j.gen(function* () {
-		let e = yield* V.Protocol;
+	let u = et.layerProtocolWebsocketRouter({ path: n }), d = et.layer(e.group), f = et.layer(e.group).pipe(M.provide(et.layerProtocolHttpRouter({ path: "/rpc" })), M.provide($e.layerJson), M.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = M.scopedDiscard(j.gen(function* () {
+		let e = yield* et.Protocol;
 		yield* j.forkScoped(j.gen(function* () {
 			let t = yield* e.disconnects.take;
-			Cn(t), Dn(t);
+			kn(t), Nn(t);
 		}).pipe(j.forever));
-	})), m = M.mergeAll(d, p).pipe(M.provide(u), M.provide(Je.layerJson), M.provide(e.handlersLayer)), h = M.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => j.gen(function* () {
+	})), m = M.mergeAll(d, p).pipe(M.provide(u), M.provide($e.layerJson), M.provide(e.handlersLayer)), h = M.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => j.gen(function* () {
 		let t = yield* z.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
@@ -2032,13 +2039,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			status: l.status,
 			...l.headers ? { headers: l.headers } : {}
 		});
-	}), S = M.unwrapEffect(R.toHttpEffect(h).pipe(j.map((e) => Ue.serve(x(e))))).pipe(M.provide(Ge.layer(() => r, { port: t })), M.provide(We.layer));
+	}), S = M.unwrapEffect(R.toHttpEffect(h).pipe(j.map((e) => Je.serve(x(e))))).pipe(M.provide(Xe.layer(() => r, { port: t })), M.provide(Ye.layer));
 	e.tracerLayer && (S = S.pipe(M.provide(e.tracerLayer)));
-	let C = ge({ scope: "voltro:rpc" }), w = M.launch(S).pipe(j.catchAllCause((e) => j.sync(() => {
+	let C = Ne({ scope: "voltro:rpc" }), ee = M.launch(S).pipe(j.catchAllCause((e) => j.sync(() => {
 		C.error("rpc server crashed", {}, k.squash(e)), process.exit(1);
 	})));
-	return Ke.runMain(w, { disableErrorReporting: !0 }), r;
-}, pr = (e, t = 1e4) => new Promise((n, r) => {
+	return Ze.runMain(ee, { disableErrorReporting: !0 }), r;
+}, yr = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2054,13 +2061,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), mr = () => {
+}), br = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, hr = () => {
+}, xr = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, gr = async () => {
+}, Sr = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2075,7 +2082,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, _r = (e, t, n) => {
+}, Cr = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2098,8 +2105,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, vr = async (e = {}) => {
-	let t = e.mode ?? mr(), n = e.metricsMode ?? hr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, wr = async (e = {}) => {
+	let t = e.mode ?? br(), n = e.metricsMode ?? xr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: M.empty,
 		mode: t,
@@ -2108,13 +2115,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await gr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await Sr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = _r(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Cr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2132,18 +2139,18 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, yr = {
-	[H.INTERNAL]: "internal",
-	[H.SERVER]: "server",
-	[H.CLIENT]: "client",
-	[H.PRODUCER]: "producer",
-	[H.CONSUMER]: "consumer"
-}, br = (e) => e[0] * 1e3 + e[1] / 1e6, xr = 512, Sr = 48, Cr = (e) => {
+}, Tr = {
+	[at.INTERNAL]: "internal",
+	[at.SERVER]: "server",
+	[at.CLIENT]: "client",
+	[at.PRODUCER]: "producer",
+	[at.CONSUMER]: "consumer"
+}, Er = (e) => e[0] * 1e3 + e[1] / 1e6, Dr = 512, Or = 48, kr = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= Sr) break;
+		if (n >= Or) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > xr ? `${i.slice(0, xr)}…` : i;
+		if (typeof i == "string") t[r] = i.length > Dr ? `${i.slice(0, Dr)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2152,49 +2159,49 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > xr ? `${e.slice(0, xr)}…` : e;
+			t[r] = e.length > Dr ? `${e.slice(0, Dr)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, wr = {
-	[$e.UNSET]: "unset",
-	[$e.OK]: "ok",
-	[$e.ERROR]: "error"
-}, Tr = (e) => {
+}, Ar = {
+	[ot.UNSET]: "unset",
+	[ot.OK]: "ok",
+	[ot.ERROR]: "error"
+}, jr = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: br(e.time),
-		...e.attributes ? { attributes: Cr(e.attributes) } : {}
+		tsMs: Er(e.time),
+		...e.attributes ? { attributes: kr(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: yr[e.kind] ?? "internal",
-		attributes: Cr(e.attributes),
-		startMs: br(e.startTime),
-		endMs: br(e.endTime),
-		durationMs: br(e.duration),
-		status: wr[e.status.code] ?? "unset",
+		kind: Tr[e.kind] ?? "internal",
+		attributes: kr(e.attributes),
+		startMs: Er(e.startTime),
+		endMs: Er(e.endTime),
+		durationMs: Er(e.duration),
+		status: Ar[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, Er = (e) => ({
+}, Mr = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(Tr(t));
+			e(jr(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), Dr = { get: (e) => Promise.resolve(process.env[e]) }, Or = Dr, kr = (e) => {
-	Or = e;
-}, Ar = () => {
-	Or = Dr;
-}, jr = async (e) => await Or.get(e) ?? process.env[e], Mr = (e) => process.env[e], Nr = (e, t = 6e4, n = () => Date.now()) => {
+}), Nr = { get: (e) => Promise.resolve(process.env[e]) }, Pr = Nr, Fr = (e) => {
+	Pr = e;
+}, Ir = () => {
+	Pr = Nr;
+}, Lr = async (e) => await Pr.get(e) ?? process.env[e], Rr = (e) => process.env[e], zr = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2205,12 +2212,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, Pr = (e) => {
+}, Br = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return Nr({ get: async (n) => {
+	if (e.perKey) return zr({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -2221,43 +2228,52 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, Fr = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? Dr : e.kind === "custom" ? e.backend : e.kind === "http" ? Pr(e) : Dr, Ir = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : me(e, "voltro:field-encryption:v1", 32), Lr = (t) => {
+}, Vr = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? Nr : e.kind === "custom" ? e.backend : e.kind === "http" ? Br(e) : Nr, Hr = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ge(e, "voltro:field-encryption:v1", 32), Ur = (t) => {
 	if (t.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${t.length}`);
 	return {
 		encrypt: (n) => {
-			let r = fe(12), i = le("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
+			let r = me(12), i = de("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
 			return `${e}${r.toString("base64")}:${o.toString("base64")}:${a.toString("base64")}`;
 		},
 		decrypt: (n) => {
 			let [r, i, a] = n.slice(e.length).split(":");
 			if (!r || !i || a === void 0) throw Error("field cipher: malformed ciphertext");
-			let o = ue("aes-256-gcm", t, Buffer.from(r, "base64"));
+			let o = fe("aes-256-gcm", t, Buffer.from(r, "base64"));
 			return o.setAuthTag(Buffer.from(i, "base64")), Buffer.concat([o.update(Buffer.from(a, "base64")), o.final()]).toString("utf8");
 		}
 	};
-}, Rr = (e) => Lr(Ir(e)), zr, Br = (e) => {
-	zr = e;
-}, Vr = () => zr, J = "_voltro_idempotency", Hr = (e) => {
+}, Wr = (e) => Ur(Hr(e)), Gr, Kr = (e) => {
+	Gr = e;
+}, qr = () => Gr, Jr = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", Yr = (e) => {
+	let t = qr();
+	if (!t) throw Error(`encryptField: ${Jr}`);
+	return t.encrypt(e);
+}, Xr = (e) => {
+	if (!x(e)) return e;
+	let t = qr();
+	if (!t) throw Error(`decryptField: ${Jr}`);
+	return t.decrypt(e);
+}, J = "_voltro_idempotency", Zr = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, Ur = (e) => ({
+}, Qr = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: Hr(e.response),
-	createdAt: Oe(e.createdAt)
-}), Wr = async (e, n, r) => (await e.query({
+	response: Zr(e.response),
+	createdAt: Me(e.createdAt)
+}), $r = async (e, n, r) => (await e.query({
 	table: J,
 	predicate: t(u("scope", n), u("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Gr = (e) => ({
+}))[0] ?? null, ei = (e) => ({
 	get: async (t, n) => {
-		let r = await Wr(e, t, n);
-		return r ? Ur(r) : null;
+		let r = await $r(e, t, n);
+		return r ? Qr(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
@@ -2273,11 +2289,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - Oe(o.createdAt) < i) return Ur(o);
+			if (r - Me(o.createdAt) < i) return Qr(o);
 			await e.delete(J, o.id);
 		}
-		let a = await Wr(e, t, n);
-		return a ? Ur(a) : {
+		let a = await $r(e, t, n);
+		return a ? Qr(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -2286,36 +2302,36 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await Wr(e, t, n);
+		let a = await $r(e, t, n);
 		a && await e.update(J, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await Wr(e, t, n);
+		let r = await $r(e, t, n);
 		r && await e.delete(J, r.id);
 	}
-}), Y = "_voltro_kv", Kr = (e) => {
+}), Y = "_voltro_kv", ti = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, qr = (e, t) => {
-	let n = Kr(e.expiresAt);
+}, ni = (e, t) => {
+	let n = ti(e.expiresAt);
 	return n !== null && n <= t;
-}, Jr = (e) => e === null ? null : JSON.parse(e), Yr = async (e, t) => (await e.query({
+}, ri = (e) => e === null ? null : JSON.parse(e), ii = async (e, t) => (await e.query({
 	table: Y,
 	predicate: u("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Xr = (e) => {
+}))[0] ?? null, ai = (e) => {
 	let n = (e, t, n) => j.tryPromise({
 		try: n,
-		catch: (n) => new tt({
+		catch: (n) => new ct({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -2323,8 +2339,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await Yr(e, t);
-			return n === null ? P.none() : qr(n, Date.now()) ? (await e.delete(Y, n.id), P.none()) : P.some(Jr(n.value));
+			let n = await ii(e, t);
+			return n === null ? P.none() : ni(n, Date.now()) ? (await e.delete(Y, n.id), P.none()) : P.some(ri(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = f({
@@ -2347,17 +2363,17 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await Yr(e, t);
+			let n = await ii(e, t);
 			if (n === null) return !1;
-			let r = !qr(n, Date.now());
+			let r = !ni(n, Date.now());
 			return await e.delete(Y, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await Yr(e, t);
-			return n === null ? !1 : qr(n, Date.now()) ? (await e.delete(Y, n.id), !1) : !0;
+			let n = await ii(e, t);
+			return n === null ? !1 : ni(n, Date.now()) ? (await e.delete(Y, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
-			let n = Date.now(), i = T(x("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
+			let n = Date.now(), i = re(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
 				table: Y,
 				predicate: a,
 				order: [],
@@ -2365,7 +2381,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of s) qr(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of s) ni(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
@@ -2375,8 +2391,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			} });
 		})
 	};
-}, Zr = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? at(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(M.provide(rt)) : r === "memory" ? it() : M.succeed(nt, nt.of(Xr(e))), a = Fe.make(et.Default.pipe(M.provide(i))), o = await a.runPromise(et);
+}, oi = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? ft(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(M.provide(ut)) : r === "memory" ? dt() : M.succeed(lt, lt.of(ai(e))), a = Be.make(st.Default.pipe(M.provide(i))), o = await a.runPromise(st);
 	return {
 		kv: {
 			get: (e) => a.runPromise(o.get(e)).then((e) => P.getOrUndefined(e)),
@@ -2391,7 +2407,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, Qr = {
+}, si = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -2399,7 +2415,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, $r = "_voltro_api_keys", ei = (e) => de("sha256").update(e, "utf8").digest("hex"), ti = (e = "voltro_") => `${e}${fe(30).toString("base64url")}`, ni = (e) => ({
+}, ci = "_voltro_api_keys", li = (e) => pe("sha256").update(e, "utf8").digest("hex"), ui = (e = "voltro_") => `${e}${me(30).toString("base64url")}`, di = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -2409,17 +2425,17 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	expiresAt: e.expiresAt,
 	revokedAt: e.revokedAt,
 	createdAt: e.createdAt
-}), ri = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), ii = (e, t = {}) => {
+}), fi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), pi = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = async (t) => {
-		let r = ti(n), i = f({
+		let r = ui(n), i = f({
 			kind: "typeid",
 			prefix: "apikey"
-		}, $r), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, ci), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
-			hashedKey: ei(r),
+			hashedKey: li(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -2437,7 +2453,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		};
 	}, i = async (t, n = Date.now()) => {
 		let r = await e.findByHash(t);
-		return !r || !ri(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
+		return !r || !fi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
 			id: r.id,
 			tenantId: r.tenantId ?? "",
 			scopes: r.scopes ?? []
@@ -2446,7 +2462,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	return {
 		issue: r,
 		resolveByHash: i,
-		verify: (e, t) => i(ei(e), t),
+		verify: (e, t) => i(li(e), t),
 		revoke: async (t, n = Date.now()) => await e.findById(t) ? (await e.patch(t, { revokedAt: n }), !0) : !1,
 		rotate: async (t, n = Date.now()) => {
 			let i = await e.findById(t);
@@ -2457,9 +2473,9 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				createdBy: i.createdBy
 			})) : null;
 		},
-		list: async (t) => (await e.listByTenant(t)).map(ni)
+		list: async (t) => (await e.listByTenant(t)).map(di)
 	};
-}, ai = () => {
+}, mi = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -2476,21 +2492,21 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			});
 		}
 	};
-}, oi = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, si = (e) => ({
+}, hi = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, gi = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: oi(e.lastUsedAt),
-	expiresAt: oi(e.expiresAt),
-	revokedAt: oi(e.revokedAt),
+	lastUsedAt: hi(e.lastUsedAt),
+	expiresAt: hi(e.expiresAt),
+	revokedAt: hi(e.revokedAt),
 	createdBy: e.createdBy ?? null,
-	createdAt: oi(e.createdAt) ?? 0
-}), ci = (e) => {
+	createdAt: hi(e.createdAt) ?? 0
+}), _i = (e) => {
 	let t = async (t) => await e.query({
-		table: $r,
+		table: ci,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -2508,32 +2524,32 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert($r, n(t));
+			await e.insert(ci, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(u("hashedKey", e));
-			return n[0] ? si(n[0]) : null;
+			return n[0] ? gi(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(u("id", e));
-			return n[0] ? si(n[0]) : null;
+			return n[0] ? gi(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(si).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(gi).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update($r, t, n(r));
+			await e.update(ci, t, n(r));
 		}
 	};
-}, li = (e, t = {}) => ot({
+}, vi = (e, t = {}) => pt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), ui = (e) => {
+}), yi = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null
 	};
-}, di = (e, t = "/v1/api-keys") => {
+}, bi = (e, t = "/v1/api-keys") => {
 	let n = I.Struct({
 		id: I.String,
 		name: I.String,
@@ -2546,11 +2562,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		createdAt: I.Number
 	});
 	return [
-		Ye({
+		tt({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [Ze(_e)],
+			guards: [rt(ve)],
 			input: I.Struct({ body: I.Struct({
 				name: I.String,
 				scopes: I.optional(I.Array(I.String)),
@@ -2562,7 +2578,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				keyPrefix: I.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = ui(n), a = await e.issue({
+				let r = t.body, i = yi(n), a = await e.issue({
 					tenantId: i.tenantId,
 					name: r.name,
 					...r.scopes ? { scopes: r.scopes } : {},
@@ -2576,26 +2592,26 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				};
 			}
 		}),
-		Ye({
+		tt({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [Ze(_e)],
+			guards: [rt(ve)],
 			input: I.Struct({}),
 			output: I.Struct({ keys: I.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(ui(n).tenantId)] })
+			handler: async (t, n) => ({ keys: [...await e.list(yi(n).tenantId)] })
 		}),
-		Ye({
+		tt({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [Ze(_e)],
+			guards: [rt(ve)],
 			input: I.Struct({ body: I.Struct({ id: I.String }) }),
 			output: I.Struct({ ok: I.Boolean }),
 			handler: async (t, n) => ({ ok: await e.revoke(t.body.id) })
 		})
 	];
-}, fi = (e) => qe.make(e.name, {
+}, xi = (e) => Qe.make(e.name, {
 	payload: e.payloadSchema,
 	success: Ce,
 	error: e.errorSchema
@@ -2604,13 +2620,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), pi = X, mi = (e) => {
+}), Si = X, Ci = (e) => {
 	let t = k.failureOption(e), n = t._tag === "Some" ? t.value : k.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, hi = (e, t, n) => {
+}, wi = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -2625,7 +2641,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	};
 	if (typeof n == "object" && n && n._tag === "Complete") {
 		let r = n.exit;
-		return Pe.isSuccess(r) ? {
+		return ze.isSuccess(r) ? {
 			id: t,
 			workflowName: e,
 			executionId: t,
@@ -2636,7 +2652,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: mi(r.cause)
+			error: Ci(r.cause)
 		};
 	}
 	return {
@@ -2645,15 +2661,15 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, gi = (e) => new Promise((t) => setTimeout(t, e)), _i = (e) => {
+}, Ti = (e) => new Promise((t) => setTimeout(t, e)), Ei = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) throw Error(`Unknown workflow: ${e}`);
 		return n;
 	}, r = async (t, r) => {
 		let i = n(t);
-		return hi(t, r, await e.runEffect(i.poll(r)));
-	}, i = async () => e.runEffect(st()), a = async (t, r, i) => {
+		return wi(t, r, await e.runEffect(i.poll(r)));
+	}, i = async () => e.runEffect(mt()), a = async (t, r, i) => {
 		let a = n(t), o;
 		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), X(t, o ?? await e.runEffect(a.executionId(r)))) : X(t, await e.runEffect(a.execute(r, { discard: !0 })));
 	};
@@ -2693,7 +2709,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				let e = await r(i, a);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' run '${a}'`);
-				await gi(c);
+				await Ti(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -2731,7 +2747,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, vi = (e, t) => ({
+}, Di = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
@@ -2746,7 +2762,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), yi = (e, t) => ({
+}), Oi = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -2760,7 +2776,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), bi = (e) => {
+}), ki = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -2781,11 +2797,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, xi = (e, t) => {
+}, Ai = (e, t) => {
 	let n = {};
 	for (let r of e) n[r.definition.name] = (e) => (t ? j.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(j.map((e) => X(r.definition.name, e)))).pipe(j.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, Si = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, ji = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? j.succeed(void 0) : j.promise(() => Promise.resolve(a))).pipe(j.flatMap((a) => {
 		let o = e.buildExecute(t.buildContext(a, {
@@ -2796,40 +2812,40 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		}));
 		return (n?.(e, o, a) ?? o)(r, i);
 	}));
-}))), Ci = (e) => ({
+}))), Mi = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), wi = Ci, Ti = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", Ei = () => {
+}), Ni = Mi, Pi = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", Fi = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, Di = (e) => `${e}_${Ei()}`, Oi = (e) => e.id ?? `${e.event}->${e.workflow}`, ki = E("_voltro_workflow_events", {
+}, Ii = (e) => `${e}_${Fi()}`, Li = (e) => e.id ?? `${e.event}->${e.workflow}`, Ri = T("_voltro_workflow_events", {
 	id: v({ prefix: "wfe" }),
-	name: D(),
-	payload: S(),
-	source: D(),
-	subject: S().nullable(),
-	traceId: D().nullable(),
-	occurredAt: O().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), Ai = E("_voltro_workflow_event_deliveries", {
+	name: E(),
+	payload: C(),
+	source: E(),
+	subject: C().nullable(),
+	traceId: E().nullable(),
+	occurredAt: D().default("now")
+}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), zi = T("_voltro_workflow_event_deliveries", {
 	id: v({ prefix: "wfed" }),
-	eventId: D(),
-	eventName: D(),
-	triggerId: D(),
-	workflowName: D(),
-	executionId: D().nullable(),
-	status: D().oneOf([
+	eventId: E(),
+	eventName: E(),
+	triggerId: E(),
+	workflowName: E(),
+	executionId: E().nullable(),
+	status: E().oneOf([
 		"starting",
 		"started",
 		"skipped",
 		"failed"
 	]).default("starting"),
-	idempotencyKey: D().unique(),
+	idempotencyKey: E().unique(),
 	skipped: r().default(!1),
-	errorMessage: D().nullable(),
-	createdAt: O().default("now"),
-	completedAt: O().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), ji = (e) => {
-	let t = e.makeId ?? Di, n = /* @__PURE__ */ new Map();
+	errorMessage: E().nullable(),
+	createdAt: D().default("now"),
+	completedAt: D().nullable()
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), Bi = (e) => {
+	let t = e.makeId ?? Ii, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -2870,7 +2886,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = Oi(o), l = o.workflow, d;
+			let s = Li(o), l = o.workflow, d;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -2973,11 +2989,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			triggered: m
 		};
 	} };
-}, Mi = M.effect(Ve.HttpClient, j.map(Ve.HttpClient, (e) => e.pipe(Ve.mapRequestEffect((e) => j.currentSpan.pipe(j.map((t) => e.headers.traceparent === void 0 ? He.setHeader(e, "traceparent", Mn({
+}, Vi = M.effect(Ke.HttpClient, j.map(Ke.HttpClient, (e) => e.pipe(Ke.mapRequestEffect((e) => j.currentSpan.pipe(j.map((t) => e.headers.traceparent === void 0 ? qe.setHeader(e, "traceparent", Rn({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), j.catchAll(() => j.succeed(e))))))), Ni = "voltro/audit", Pi = "voltro/softDelete", Fi = "voltro/tenant", Ii = (e) => {
+})) : e), j.catchAll(() => j.succeed(e))))))), Hi = "voltro/audit", Ui = "voltro/softDelete", Wi = "voltro/tenant", Gi = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -3020,48 +3036,48 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? Li,
-		computedFields: (e) => t.get(e)?.computedFields ?? Ri,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? Ki,
+		computedFields: (e) => t.get(e)?.computedFields ?? qi,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, Li = /* @__PURE__ */ new Map(), Ri = /* @__PURE__ */ new Map(), zi = Ii([]), Bi = class extends Error {
+}, Ki = /* @__PURE__ */ new Map(), qi = /* @__PURE__ */ new Map(), Ji = Gi([]), Yi = class extends Error {
 	table;
 	_tag = "NoRowFound";
 	constructor(e) {
 		super(`expected exactly one row in '${e}', found none`), this.table = e, this.name = "NoRowFound";
 	}
-}, Vi = class extends Error {
+}, Xi = class extends Error {
 	table;
 	expected;
 	_tag = "OptimisticLockError";
 	constructor(e, t) {
 		super(`optimistic lock failed on '${e}': expected version ${t}`), this.table = e, this.expected = t, this.name = "OptimisticLockError";
 	}
-}, Hi = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), Ui = (e) => {
-	if (e.length === 1 && Hi(e[0])) return e[0];
+}, Zi = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), Qi = (e) => {
+	if (e.length === 1 && Zi(e[0])) return e[0];
 	let t = e[0];
 	if (e.length === 2) return u(t, e[1]);
 	let n = e[1], r = e[2];
 	switch (n) {
 		case "=": return u(t, r);
 		case "!=":
-		case "<>": return te(t, r);
+		case "<>": return w(t, r);
 		case ">": return h(t, r);
 		case ">=": return g(t, r);
-		case "<": return w(t, r);
-		case "<=": return ee(t, r);
+		case "<": return te(t, r);
+		case "<=": return ne(t, r);
 		case "in": return y(t, r);
 		case "like":
 		case "contains":
 		case "fts": return o(t, r);
 		default: return u(t, r);
 	}
-}, Wi = (e) => {
+}, $i = (e) => {
 	let t = m(e);
 	if (t === void 0) throw Error(`unknown table '${e}' — is it declared with table()?`);
-	return ne(t);
-}, Gi = class e {
+	return ie(t);
+}, ea = class e {
 	backend;
 	scope;
 	table;
@@ -3075,7 +3091,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		return new e(this.backend, this.scope, this.table, t, this.skipTenant, this.skipSoftDelete);
 	}
 	where(...e) {
-		return this.clone(this.query.where(Ui(e)));
+		return this.clone(this.query.where(Qi(e)));
 	}
 	orderBy(e, t = "asc") {
 		return this.clone(this.query.orderBy(e, t));
@@ -3109,7 +3125,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	scopedQuery() {
 		let e = this.query, { subject: t, schemaRegistry: n } = this.scope;
-		return !this.skipTenant && n.hasTenant(this.table) && t.tenantId != null && (e = e.where(u("tenantId", t.tenantId))), !this.skipSoftDelete && n.hasSoftDelete(this.table) && (e = e.where(x("deletedAt"))), e;
+		return !this.skipTenant && n.hasTenant(this.table) && t.tenantId != null && (e = e.where(u("tenantId", t.tenantId))), !this.skipSoftDelete && n.hasSoftDelete(this.table) && (e = e.where(S("deletedAt"))), e;
 	}
 	async all() {
 		return this.backend.query(this.scopedQuery().descriptor);
@@ -3122,7 +3138,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	async one() {
 		let e = await this.maybeOne();
-		if (e === null) throw new Bi(this.table);
+		if (e === null) throw new Yi(this.table);
 		return e;
 	}
 	async count() {
@@ -3135,7 +3151,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	get descriptor() {
 		return this.scopedQuery().descriptor;
 	}
-}, Ki = class {
+}, ta = class {
 	backend;
 	scope;
 	table;
@@ -3146,7 +3162,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = Ui(e);
+		let n = Qi(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -3170,13 +3186,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	async set(e) {
 		let t = await this.backend.updateMany(this.table, e, { where: this.scopedWhere() });
-		if (this.expectedVersion !== void 0 && t === 0) throw new Vi(this.table, this.expectedVersion);
+		if (this.expectedVersion !== void 0 && t === 0) throw new Xi(this.table, this.expectedVersion);
 		return t;
 	}
 	async restore() {
 		return this.backend.updateMany(this.table, { deletedAt: null }, { where: this.scopedWhere() });
 	}
-}, qi = class {
+}, na = class {
 	backend;
 	scope;
 	table;
@@ -3186,7 +3202,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = Ui(e);
+		let n = Qi(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -3207,42 +3223,46 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	async hard() {
 		return this.backend.deleteMany(this.table, { where: this.scopedWhere() });
 	}
-}, Ji = (e, t) => ({
-	select: (n) => new Gi(e, t, n, Wi(n)),
-	updateWhere: (n) => new Ki(e, t, n),
-	deleteWhere: (n) => new qi(e, t, n)
-}), Yi = class extends I.TaggedError()("TenantScopeViolation", {
+}, ra = (e, t) => ({
+	select: (n) => new ea(e, t, n, $i(n)),
+	updateWhere: (n) => new ta(e, t, n),
+	deleteWhere: (n) => new na(e, t, n)
+}), ia = class extends I.TaggedError()("TenantScopeViolation", {
 	table: I.String,
 	reason: I.String
-}) {}, Xi = class extends I.TaggedError()("StoreOperationFailed", {
+}) {}, aa = class extends I.TaggedError()("StoreOperationFailed", {
 	operation: I.String,
 	table: I.String,
 	cause: I.String
-}) {}, Zi = class extends I.TaggedError()("TableValidationFailed", {
+}) {}, oa = class extends I.TaggedError()("TableValidationFailed", {
 	table: I.String,
 	summary: I.String,
 	issues: I.Array(I.Struct({
 		path: I.String,
 		message: I.String
 	}))
-}) {}, Qi = "id", $i = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", ea = (e) => {
-	throw new Yi({
+}) {}, sa = "id", ca = (e, t) => {
+	let n = {};
+	for (let r of t) e[r] !== void 0 && (n[r] = e[r]);
+	return n;
+}, la = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", ua = (e) => {
+	throw new ia({
 		table: e,
-		reason: $i
+		reason: la
 	});
-}, ta = (e, n) => {
+}, da = (e, n) => {
 	let r = n.subject.id, i = n.subject.tenantId, a = (e, t) => {
 		let a = { ...t }, o = n.schemaRegistry, s = o.idScheme(e);
-		if (s !== void 0 && a[Qi] == null) if (s.kind === "numeric") delete a[Qi];
+		if (s !== void 0 && a[sa] == null) if (s.kind === "numeric") delete a[sa];
 		else {
 			let t = f(s, e);
-			t !== null && (a[Qi] = t);
+			t !== null && (a[sa] = t);
 		}
 		if (o.hasAudit(e)) {
 			let e = /* @__PURE__ */ new Date();
 			"createdAt" in a || (a.createdAt = e), "updatedAt" in a || (a.updatedAt = e), r !== null && ("createdBy" in a || (a.createdBy = r), "updatedBy" in a || (a.updatedBy = r));
 		}
-		o.hasTenant(e) && ("tenantId" in a || (i === null && ea(e), a.tenantId = i));
+		o.hasTenant(e) && ("tenantId" in a || (i === null && ua(e), a.tenantId = i));
 		let c = o.defaultFactories(e);
 		if (c.size > 0) for (let [e, t] of c) (!(e in a) || a[e] === void 0) && (a[e] = t());
 		let l = o.computedFields(e);
@@ -3257,10 +3277,10 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		try {
 			return await r();
 		} catch (n) {
-			let r = Mt(n);
-			if (Nt(r)) {
+			let r = zt(n);
+			if (Bt(r)) {
 				let n = t.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
-				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Yi({
+				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new ia({
 					table: e,
 					reason: n == null ? "write references a tenant that does not exist" : `tenant '${String(n)}' does not exist — seed the row in \`tenants\`, or fix how the request resolved this tenant (subject.tenantId / the x-tenant header / the dev TENANT fallback)`
 				});
@@ -3281,11 +3301,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		if (r === void 0) return t;
 		let i = I.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = lt.formatErrorSync(i.left).map((e) => ({
+		let a = gt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Zi({
+		throw new oa({
 			table: e,
 			summary: o === void 0 ? "patch validation failed" : `${o.path}: ${o.message}`,
 			issues: a
@@ -3298,29 +3318,29 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		if (r === void 0) return t;
 		let i = I.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = lt.formatErrorSync(i.left).map((e) => ({
+		let a = gt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Zi({
+		throw new oa({
 			table: e,
 			summary: o === void 0 ? "row validation failed" : `${o.path}: ${o.message}`,
 			issues: a
 		});
 	}, v = n.dialect, y = (e, t) => {
 		let n = m(e);
-		return l(v ? oe(t, n, v) : t, n, Vr());
+		return l(v ? ce(t, n, v) : t, n, qr());
 	}, b = (e, t) => {
-		let n = m(e), r = s(t, n, Vr());
+		let n = m(e), r = s(t, n, qr());
 		return v ? c(r, n, v) : r;
-	}, S = (e) => {
+	}, x = (e) => {
 		let r = e.table, a = e.predicate;
 		if (!e.crossTenant && i != null && n.schemaRegistry.hasTenant(r)) {
 			let e = u("tenantId", i);
 			a = a ? t(a, e) : e;
 		}
 		if (!e.includeDeleted && n.schemaRegistry.hasSoftDelete(r)) {
-			let e = x("deletedAt");
+			let e = S("deletedAt");
 			a = a ? t(a, e) : e;
 		}
 		return a === e.predicate ? e : {
@@ -3330,13 +3350,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}, C = async (t) => {
 		let n = await e.query(t);
 		return b(t.table, n);
-	}, w = async (e) => C(S(e)), ee = async (t, r, i) => {
+	}, ee = async (e) => C(x(e)), te = async (t, r, i) => {
 		let a = o(t, i);
 		if (n.schemaRegistry.computedFields(t).size > 0) {
 			let n = (await e.query({
 				table: t,
 				predicate: {
-					column: Qi,
+					column: sa,
 					op: "eq",
 					value: r
 				},
@@ -3351,23 +3371,23 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		a = h(t, a);
 		let s = await e.update(t, r, y(t, a));
 		return s === null ? null : b(t, [s])[0];
-	}, te = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, g()) !== null : e.delete(t, r), T = async (t, n, r) => e.updateMany(t, y(t, o(t, n)), r), ne = async (t, n) => e.deleteMany(t, n), re = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, ie = async (e, t, n) => T(e, t, {
+	}, ne = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, g()) !== null : e.delete(t, r), w = async (t, n, r) => e.updateMany(t, y(t, o(t, n)), r), re = async (t, n) => e.deleteMany(t, n), ie = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, ae = async (e, t, n) => w(e, t, {
 		...n,
-		where: re(e, n.where)
-	}), ae = async (e, t) => ne(e, {
+		where: ie(e, n.where)
+	}), oe = async (e, t) => re(e, {
 		...t,
-		where: re(e, t.where)
-	}), se = Ji({
+		where: ie(e, t.where)
+	}), se = ra({
 		query: C,
-		updateMany: T,
-		deleteMany: ne,
+		updateMany: w,
+		deleteMany: re,
 		delete: (t, n) => e.delete(t, n)
 	}, {
 		subject: n.subject,
 		schemaRegistry: n.schemaRegistry
 	});
 	return {
-		query: w,
+		query: ee,
 		insert: async (t, n) => {
 			let r = a(t, n), i = await d(t, r, () => e.insert(t, y(t, _(t, r))));
 			return b(t, [i])[0];
@@ -3381,11 +3401,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return a === null ? null : b(t, [a])[0];
 		},
 		select: se.select,
-		update: ((e, t, n) => t === void 0 ? se.updateWhere(e) : ee(e, t, n)),
-		delete: ((e, t) => t === void 0 ? se.deleteWhere(e) : te(e, t)),
+		update: ((e, t, n) => t === void 0 ? se.updateWhere(e) : te(e, t, n)),
+		delete: ((e, t) => t === void 0 ? se.deleteWhere(e) : ne(e, t)),
+		applyDefined: ca,
 		hardDelete: async (t, n) => e.delete(t, n),
-		updateMany: ie,
-		deleteMany: ae,
+		updateMany: ae,
+		deleteMany: oe,
 		upsert: async (t, n, r) => {
 			let i = a(t, n), o = await d(t, i, () => e.upsert(t, y(t, _(t, i)), r));
 			return b(t, [o])[0];
@@ -3394,34 +3415,34 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			let i = a(t, n), o = await d(t, i, () => e.insertIgnore(t, y(t, _(t, i)), r));
 			return b(t, [o])[0];
 		},
-		transactional: (t) => e.transactional(async (e) => t(ta(e, n))),
+		transactional: (t) => e.transactional(async (e) => t(da(e, n))),
 		...e.raw ? { raw: e.raw.bind(e) } : {},
 		onChange: (t) => e.onChange(t),
 		injectExternalChange: (t) => e.injectExternalChange(t),
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope }
 	};
-}, na = class extends I.TaggedError()("CircuitOpen", {
+}, fa = class extends I.TaggedError()("CircuitOpen", {
 	name: I.String,
 	retryAfterMs: I.Number
-}) {}, ra = {
+}) {}, pa = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, ia = { make: (e) => j.gen(function* () {
-	let t = e.name ?? "circuit", n = Me.toMillis(Me.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* F.make(ra), o = j.gen(function* () {
+}, ma = { make: (e) => j.gen(function* () {
+	let t = e.name ?? "circuit", n = Le.toMillis(Le.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* F.make(pa), o = j.gen(function* () {
 		let e = yield* F.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* F.set(a, t >= r ? ra : {
+			yield* F.set(a, t >= r ? pa : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* F.set(a, ra));
+		e.failureCount !== 0 && (yield* F.set(a, pa));
 	}), s = j.gen(function* () {
-		let t = yield* ke.currentTimeMillis, n = yield* F.get(a);
+		let t = yield* Pe.currentTimeMillis, n = yield* F.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
 			yield* F.set(a, {
 				tag: "open",
@@ -3444,7 +3465,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}), c = j.gen(function* () {
 		let e = yield* F.get(a);
 		if (e.tag !== "open") return null;
-		let t = (yield* ke.currentTimeMillis) - e.openedAt;
+		let t = (yield* Pe.currentTimeMillis) - e.openedAt;
 		return t >= n ? (yield* F.set(a, {
 			tag: "half-open",
 			failureCount: 0,
@@ -3457,7 +3478,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			if (k.isInterruptedOnly(e)) return j.void;
 			let t = k.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
 			return i(n) ? s : j.void;
-		})) : yield* j.fail(new na({
+		})) : yield* j.fail(new fa({
 			name: t,
 			retryAfterMs: n
 		}));
@@ -3466,38 +3487,38 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		value: F.get(a).pipe(j.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: F.set(a, ra),
+		value: F.set(a, pa),
 		enumerable: !0
 	}), u;
-}) }, aa, oa = (e) => {
-	aa = e;
-}, sa = () => {
-	aa = void 0;
-}, ca = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? De(t.id ?? "system") : De(t.id ?? "system", t.scopes), r = t.store ?? aa?.dataStore, i = t.schemaRegistry ?? aa?.schemaRegistry, a = t.dialect ?? aa?.dialect;
+}) }, ha, ga = (e) => {
+	ha = e;
+}, _a = () => {
+	ha = void 0;
+}, va = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? je(t.id ?? "system") : je(t.id ?? "system", t.scopes), r = t.store ?? ha?.dataStore, i = t.schemaRegistry ?? ha?.schemaRegistry, a = t.dialect ?? ha?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
-		store: ta(r, {
+		store: da(r, {
 			subject: n,
 			schemaRegistry: i,
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, la = class extends Ae.Tag("@voltro/EffectStore")() {}, ua = (e, t) => (n) => n instanceof Yi ? n : new Xi({
+}, ya = class extends Fe.Tag("@voltro/EffectStore")() {}, ba = (e, t) => (n) => n instanceof ia ? n : new aa({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), da = (e, t, n) => j.tryPromise({
+}), xa = (e, t, n) => j.tryPromise({
 	try: n,
-	catch: ua(e, t)
-}), fa = (e) => M.succeed(la, {
-	query: (t) => da("query", t.table, () => e.query(t)),
-	insert: (t, n) => da("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => da("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => da("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => da("hardDelete", t, () => e.hardDelete(t, n))
-}), pa = (e) => {
+	catch: ba(e, t)
+}), Sa = (e) => M.succeed(ya, {
+	query: (t) => xa("query", t.table, () => e.query(t)),
+	insert: (t, n) => xa("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => xa("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => xa("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => xa("hardDelete", t, () => e.hardDelete(t, n))
+}), Ca = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -3525,7 +3546,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, ma = (e = process.env) => {
+}, wa = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -3537,7 +3558,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, ha = () => {
+}, Ta = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -3562,27 +3583,27 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, ga = Symbol.for("@voltro/ScheduleDefinition"), _a = (e) => typeof e == "object" && !!e && ga in e, va = 30 * 6e4, ya = (e) => {
+}, Ea = Symbol.for("@voltro/ScheduleDefinition"), Da = (e) => typeof e == "object" && !!e && Ea in e, Oa = 30 * 6e4, ka = (e) => {
 	let t = A.parse(e.cron, e.timezone);
-	if (Ne.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
+	if (Re.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
 	return {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? va,
-		[ga]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? Oa,
+		[Ea]: !0
 	};
-}, ba = (e) => A.unsafeParse(e.cron, e.timezone), xa = (e, t = /* @__PURE__ */ new Date()) => A.next(ba(e), t), Z = "_voltro_wakeups", Sa = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Ca = (e) => ({
+}, Aa = (e) => A.unsafeParse(e.cron, e.timezone), ja = (e, t = /* @__PURE__ */ new Date()) => A.next(Aa(e), t), Z = "_voltro_wakeups", Ma = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Na = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), wa = async (e, t) => {
+}), Pa = async (e, t) => {
 	await e.upsert(Z, {
-		id: Sa(t),
+		id: Ma(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -3592,7 +3613,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, Ta = async (e, t) => e.delete(Z, Sa(t)), Ea = async (e, t) => await e.update(Z, Sa(t), { status: "fired" }) !== null, Da = (e, t) => ({ and: [{
+}, Fa = async (e, t) => e.delete(Z, Ma(t)), Ia = async (e, t) => await e.update(Z, Ma(t), { status: "fired" }) !== null, La = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -3600,16 +3621,16 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), Oa = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Da(Sa(t), "pending") }) > 0, ka = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: Da(Sa(t), "fired") });
-}, Aa = {
+}] }), Ra = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: La(Ma(t), "pending") }) > 0, za = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: La(Ma(t), "fired") });
+}, Ba = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, ja = async (e, t) => {
+}, Va = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: Aa,
+		predicate: Ba,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -3618,18 +3639,18 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Ca);
-}, Ma = async (e, t, n = 500) => {
-	let r = await ja(e, n), i = t.getTime();
+	return (await e.query(n)).map(Na);
+}, Ha = async (e, t, n = 500) => {
+	let r = await Va(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, Na = async (e) => (await ja(e, 1))[0] ?? null, Pa = {
+}, Ua = async (e) => (await Va(e, 1))[0] ?? null, Wa = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, Fa = async (e, t = {}) => {
+}, Ga = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: Pa,
+		predicate: Wa,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -3640,12 +3661,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, Ia = {
+}, Ka = {
 	kind: "single",
 	tryClaim: async () => !0
-}, La = "_voltro_schedule_claims", Ra = (e, t, n) => {
+}, qa = "_voltro_schedule_claims", Ja = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: La,
+		table: qa,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -3660,7 +3681,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(La, {
+				return await e.insert(qa, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -3678,12 +3699,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			}
 		}
 	};
-}, za = "_voltro_schedule_runs", Ba = async (e, t) => {
+}, Ya = "_voltro_schedule_runs", Xa = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, Ha(t));
+		s?.(e, Qa(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${pe()}`, l = await n.insert(za, {
+			let o = `sr_${he()}`, l = await n.insert(Ya, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -3708,7 +3729,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(za, e, t);
+			let r = await n.update(Ya, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -3719,7 +3740,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: za,
+				table: Ya,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -3784,7 +3805,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			let n = Q(t).includes("exceeded maxRuntimeMs");
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : Va(t),
+				errorTag: n ? "timeout" : Za(t),
 				errorMessage: Q(t),
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -3792,7 +3813,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n
-			}), Ee({
+			}), ke({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -3841,8 +3862,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = A.next(ba(e), /* @__PURE__ */ new Date());
-			await wa(n, {
+			let t = A.next(Aa(e), /* @__PURE__ */ new Date());
+			await Pa(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -3854,13 +3875,13 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				reason: Q(t)
 			});
 		}
-	}, w = 2147483647, ee = (e) => {
+	}, ee = 2147483647, te = (e) => {
 		if (m) return;
-		let n = ba(e), r = A.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = Aa(e), r = A.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
-			if (n > w) {
-				let t = setTimeout(i, w);
+			if (n > ee) {
+				let t = setTimeout(i, ee);
 				d.set(e.name, t);
 				return;
 			}
@@ -3868,17 +3889,17 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				x(e, r, e.trigger ?? t.defaultTrigger).catch((t) => o.warn("schedule: fire rejected", {
 					name: e.name,
 					reason: Q(t)
-				})).finally(() => ee(e));
+				})).finally(() => te(e));
 			}, Math.max(0, n));
 			d.set(e.name, a);
 		};
 		i();
-	}, te = async (e) => {
+	}, ne = async (e) => {
 		if (e.backfill === "skip") return;
 		let r;
 		try {
 			let t = (await n.query({
-				table: za,
+				table: Ya,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -3897,7 +3918,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = ba(e), a = [], s = A.next(i, r), c = Date.now();
+		let i = Aa(e), a = [], s = A.next(i, r), c = Date.now();
 		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = A.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
@@ -3908,20 +3929,20 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			let n = a[a.length - 1];
 			await x(e, n, e.trigger ?? t.defaultTrigger);
 		} else for (let n of a) await x(e, n, e.trigger ?? t.defaultTrigger);
-	}, T = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
+	}, w = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
 	o.info("scheduler: starting", {
 		total: e.length,
-		self: T.length,
-		external: e.length - T.length,
+		self: w.length,
+		external: e.length - w.length,
 		coordinator: r.kind
 	});
-	let ne = (t.armSelf ?? !0) && !l;
+	let re = (t.armSelf ?? !0) && !l;
 	if (l) {
-		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: T.length });
-		for (let e of T) await C(e);
-	} else if (ne) {
-		for (let e of T) await te(e);
-		for (let e of T) ee(e);
+		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: w.length });
+		for (let e of w) await C(e);
+	} else if (re) {
+		for (let e of w) await ne(e);
+		for (let e of w) te(e);
 	}
 	return {
 		fireNow: async (e, t) => {
@@ -3942,11 +3963,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), Va = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Ha = (e) => {
+}, Q = (e) => e?.message ?? String(e), Za = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Qa = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, Ua = (e, t, n, r) => {
+}, $a = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -3976,96 +3997,96 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, Wa = (e) => (t, n, r) => Ua(t, n, r, e), Ga = E("_voltro_schedule_runs", {
+}, eo = (e) => (t, n, r) => $a(t, n, r, e), to = T("_voltro_schedule_runs", {
 	id: v({ prefix: "schrun" }),
-	name: D(),
-	status: D().oneOf([
+	name: E(),
+	status: E().oneOf([
 		"running",
 		"succeeded",
 		"failed",
 		"skipped",
 		"missed"
 	]).default("running"),
-	trigger: D().oneOf([
+	trigger: E().oneOf([
 		"self",
 		"external",
 		"manual"
 	]).default("self"),
-	scheduledAt: O(),
-	firedAt: O().nullable(),
-	completedAt: O().nullable(),
+	scheduledAt: D(),
+	firedAt: D().nullable(),
+	completedAt: D().nullable(),
 	durationMs: b().nullable(),
-	errorTag: D().nullable(),
-	errorMessage: D().nullable(),
-	coordinationOutcome: D().oneOf([
+	errorTag: E().nullable(),
+	errorMessage: E().nullable(),
+	coordinationOutcome: E().oneOf([
 		"single",
 		"wonLock",
 		"lostLock",
 		"external",
 		"cluster"
 	]).nullable(),
-	replicaId: D().nullable(),
-	result: S().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), Ka = E("_voltro_schedule_claims", {
+	replicaId: E().nullable(),
+	result: C().nullable()
+}).index(["name", "scheduledAt"]).index(["status"]), no = T("_voltro_schedule_claims", {
 	id: v({ prefix: "schclaim" }),
-	scheduleName: D(),
-	bucket: D(),
-	claimedBy: D(),
-	claimedAt: O()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), qa = E("_voltro_traces", {
+	scheduleName: E(),
+	bucket: E(),
+	claimedBy: E(),
+	claimedAt: D()
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), ro = T("_voltro_traces", {
 	id: v({ prefix: "span" }),
-	traceId: D(),
-	spanId: D(),
-	parentSpanId: D().nullable(),
-	name: D(),
-	kind: D().oneOf([
+	traceId: E(),
+	spanId: E(),
+	parentSpanId: E().nullable(),
+	name: E(),
+	kind: E().oneOf([
 		"internal",
 		"server",
 		"client",
 		"producer",
 		"consumer"
 	]).default("internal"),
-	status: D().oneOf([
+	status: E().oneOf([
 		"ok",
 		"error",
 		"unset"
 	]).default("unset"),
-	statusMessage: D().nullable(),
-	startedAt: O(),
-	endedAt: O(),
+	statusMessage: E().nullable(),
+	startedAt: D(),
+	endedAt: D(),
 	durationMs: b(),
-	attributes: S().nullable(),
-	events: S().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Ja = E("_voltro_undo_log", {
+	attributes: C().nullable(),
+	events: C().nullable()
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), io = T("_voltro_undo_log", {
 	id: v({ prefix: "undo" }),
-	tag: D(),
-	label: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	changes: D(),
+	tag: E(),
+	label: E().nullable(),
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable(),
+	changes: E(),
 	crossesAction: r().default(!1),
 	undone: r().default(!1),
-	createdAt: O().default("now")
-}).index(["subjectId", "createdAt"]).reactive(), Ya = (e = process.env) => {
+	createdAt: D().default("now")
+}).index(["subjectId", "createdAt"]).reactive(), ao = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, Xa = (e) => e.startsWith("_voltro"), Za = async (e, t, n) => (await e.query({
+}, oo = (e) => e.startsWith("_voltro"), so = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, Qa = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, co = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return Xa(n) || t({
+		return oo(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = Xa(n) ? null : await Za(e, n, r), o = await e.update(n, r, i);
-		return Xa(n) || t({
+		let a = oo(n) ? null : await so(e, n, r), o = await e.update(n, r, i);
+		return oo(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -4074,8 +4095,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = Xa(n) ? null : await Za(e, n, r), a = await e.delete(n, r);
-		return !Xa(n) && a && t({
+		let i = oo(n) ? null : await so(e, n, r), a = await e.delete(n, r);
+		return !oo(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -4084,10 +4105,10 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), $a = (e) => {
+} }), lo = (e) => {
 	let t = [];
 	return {
-		tx: Qa(e, (e) => t.push(e)),
+		tx: co(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -4103,14 +4124,14 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			});
 		}
 	};
-}, eo = (e) => {
+}, uo = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, to = (e) => {
-	let t = eo(e);
+}, fo = (e) => {
+	let t = uo(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -4134,28 +4155,28 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			row: e.prev
 		};
 	}
-}, no = (e) => {
-	if (e.crossesAction) throw new ro(e.invocationId, "action");
+}, po = (e) => {
+	if (e.crossesAction) throw new mo(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = to(e.changes[n]);
+		let r = fo(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, ro = class extends Error {
+}, mo = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, io = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, ho = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, ao = class {
+}, go = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -4191,7 +4212,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, oo = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, _o = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -4208,7 +4229,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, so = async (e, t) => {
+}, vo = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -4226,21 +4247,21 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, co = async (e, t) => {
-	for (let n of t) await so(e, n);
-}, lo = (e) => e.request?.subject?.id ?? null, uo = (e) => e === !0 || e === 1, fo = async (e, t, n) => (await e.query({
+}, yo = async (e, t) => {
+	for (let n of t) await vo(e, n);
+}, bo = (e) => e.request?.subject?.id ?? null, xo = (e) => e === !0 || e === 1, So = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, po = (e) => {
+}))[0] ?? null, Co = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, mo = (e) => e.id ?? e.next?.id ?? e.prev?.id, ho = async (e, t) => {
-	let n = lo(t);
+}, wo = (e) => e.id ?? e.next?.id ?? e.prev?.id, To = async (e, t) => {
+	let n = bo(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: u("subjectId", n),
@@ -4249,68 +4270,68 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: uo(e.undone),
-		crossesAction: uo(e.crossesAction),
+		undone: xo(e.undone),
+		crossesAction: xo(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, go = async (e, t) => {
-	let n = await fo(t.store, "_voltro_undo_log", e.invocationId);
+}, Eo = async (e, t) => {
+	let n = await So(t.store, "_voltro_undo_log", e.invocationId);
 	if (!n) throw new Se({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== lo(t)) throw new xe({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== bo(t)) throw new xe({ invocationId: e.invocationId });
 	return n;
-}, _o = async (e, t) => {
-	let n = await go(e, t);
-	if (uo(n.undone)) return { ok: !0 };
-	if (uo(n.crossesAction)) throw new be({
+}, Do = async (e, t) => {
+	let n = await Eo(e, t);
+	if (xo(n.undone)) return { ok: !0 };
+	if (xo(n.crossesAction)) throw new be({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = po(n.changes);
+	let r = Co(n.changes);
 	for (let n of r) {
-		let r = mo(n);
-		if (r !== void 0 && !io(await fo(t.store, n.table, r), n.next ?? null)) throw new be({
+		let r = wo(n);
+		if (r !== void 0 && !ho(await So(t.store, n.table, r), n.next ?? null)) throw new be({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: lo(t),
+		subject: bo(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await co(t.store, no(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, vo = async (e, t) => {
-	let n = await go(e, t);
-	if (!uo(n.undone)) return { ok: !0 };
-	for (let e of po(n.changes)) {
-		let n = mo(e);
+	return await yo(t.store, po(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Oo = async (e, t) => {
+	let n = await Eo(e, t);
+	if (!xo(n.undone)) return { ok: !0 };
+	for (let e of Co(n.changes)) {
+		let n = wo(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, yo = (e = process.env) => {
+}, ko = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, bo = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, xo = "«redacted»", So = (e) => {
+}, Ao = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, jo = "«redacted»", Mo = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = bo.test(n) ? xo : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Ao.test(n) ? jo : r;
 	return t;
-}, Co = (e) => {
+}, No = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, wo = (e, t) => {
+}, Po = (e, t) => {
 	if (t.op === "insert") {
-		let n = Co(t.new);
+		let n = No(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Co(t.new) ?? Co(t.old);
+		let n = No(t.new) ?? No(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, To = class {
+}, Fo = class {
 	mode;
 	capacity;
 	now;
@@ -4330,8 +4351,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: So(e.old),
-			new: So(e.new),
+			old: Mo(e.old),
+			new: Mo(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -4344,23 +4365,23 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = wo(i, e);
+		for (let e of r) i = Po(i, e);
 		return i;
 	}
-}, Eo, Do = () => (Eo === void 0 && (Eo = new To(yo())), Eo), Oo = (e) => {
-	Eo = e;
-}, ko = (e) => {
-	let t = Do();
+}, Io, Lo = () => (Io === void 0 && (Io = new Fo(ko())), Io), Ro = (e) => {
+	Io = e;
+}, zo = (e) => {
+	let t = Lo();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, Ao = /* @__PURE__ */ new Set([
+}, Bo = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), jo = (e) => {
+]), Vo = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -4382,7 +4403,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return Ao.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return Bo.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -4396,7 +4417,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, Mo = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Mo), No = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Po = (e, t) => {
+}, Ho = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Ho), Uo = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Wo = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -4404,10 +4425,10 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, Fo = (e, t) => {
+}, Go = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = No(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = Uo(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -4423,10 +4444,10 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		}
 	}
 	return n;
-}, Io = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, Ko = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: Po(e, n)
-})), Lo = (e, t, n) => {
+	value: Wo(e, n)
+})), qo = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -4435,7 +4456,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = No(t, e.column);
+		let s = Uo(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -4444,7 +4465,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = No(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = Uo(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -4464,15 +4485,15 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, Ro = (e, t, n, r) => {
+}, Jo = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = Fo(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = Go(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, zo = class {
+}, Yo = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -4480,7 +4501,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = Fo(this.shape, e), this.groups.clear();
+		this.state = Go(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -4492,14 +4513,14 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = Lo(this.shape, this.state, e);
+		let n = qo(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = Ro(this.shape, this.state, e, t);
+		this.state = Jo(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -4508,7 +4529,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return Io(this.shape, this.state).map((e) => ({
+		return Ko(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -4521,16 +4542,16 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, Bo = "admin:full", Vo = class extends I.TaggedError()("AccessDenied", {
+}, Xo = "admin:full", Zo = class extends I.TaggedError()("AccessDenied", {
 	action: I.String,
 	resourceType: I.String,
 	resourceId: I.String
-}) {}, Ho = /* @__PURE__ */ new Map(), Uo = (e) => {
+}) {}, Qo = /* @__PURE__ */ new Map(), $o = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (Ho.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return Ho.set(e.resourceType, e), e;
-}, Wo = (e) => Ho.get(e), Go = () => [...Ho.values()], Ko = () => Ho.clear(), qo = () => Go().map((e) => {
+	if (Qo.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Qo.set(e.resourceType, e), e;
+}, es = (e) => Qo.get(e), ts = () => [...Qo.values()], ns = () => Qo.clear(), rs = () => ts().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -4543,7 +4564,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Jo = (e, t) => {
+}), is = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -4552,39 +4573,39 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, Yo = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Jo(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Xo = (e, t, n, r) => {
+}, as = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : is(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), os = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = Yo(e, n, r.tuples, r.policy);
+	let a = as(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Zo = (e, t, n, r) => {
-	if (!Xo(e, t, n, r)) throw new Vo({
+}, ss = (e, t, n, r) => {
+	if (!os(e, t, n, r)) throw new Zo({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Qo = (e, t, n, r, i) => r.filter((r) => Xo(e, t, {
+}, cs = (e, t, n, r, i) => r.filter((r) => os(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), $o = (e, t) => {
+}, i)), ls = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, es = E("_voltro_rebac_tuples", {
+}, us = T("_voltro_rebac_tuples", {
 	id: v({ prefix: "rbct" }),
-	subjectId: D(),
-	relation: D(),
-	resourceType: D(),
-	resourceId: D(),
-	tenantId: D().nullable(),
-	createdAt: O().default("now")
+	subjectId: E(),
+	relation: E(),
+	resourceType: E(),
+	resourceId: E(),
+	tenantId: E().nullable(),
+	createdAt: D().default("now")
 }).index([
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]).reactive(), ts = async (e, n, r, i) => n === null ? [] : (await e.query({
+]).reactive(), ds = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r), u("resourceId", i)),
 	order: [],
@@ -4596,16 +4617,16 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), ns = (e) => ({
+})), fs = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), rs = (e, t) => {
-	let n = t.getPolicy ?? Wo;
+}), ps = (e, t) => {
+	let n = t.getPolicy ?? es;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let o = n(a.resourceType), s = (e) => j.fail(new Vo({
+		let o = n(a.resourceType), s = (e) => j.fail(new Zo({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -4613,17 +4634,17 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = ns(i.subject), u = {
+		let l = fs(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
 		};
-		return j.flatMap(j.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Xo(l, a.action, u, {
+		return j.flatMap(j.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => os(l, a.action, u, {
 			policy: o,
 			tuples: e
 		}) ? r : s(c));
 	};
-}, is = async (e, n, r) => n === null ? [] : (await e.query({
+}, ms = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r)),
 	order: [],
@@ -4635,18 +4656,18 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), as = (e) => {
-	let t = e.getPolicy ?? Wo;
+})), hs = (e) => {
+	let t = e.getPolicy ?? es;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = ns(n);
-		return Qo(s, i, r, a, {
+		let s = fs(n);
+		return cs(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, os = (e) => {
+}, gs = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -4654,14 +4675,14 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, ss = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, cs = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, ls = class {
+}, _s = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, vs = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, ys = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, us = async (e, t, n) => {
-	if (t.table !== e.watch.table || !ss(e.watch.on, t.op)) return "skipped-op";
+}, bs = async (e, t, n) => {
+	if (t.table !== e.watch.table || !_s(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -4670,26 +4691,26 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = cs(t);
+	let a = vs(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, ds = E("_voltro_wakeups", {
+}, xs = T("_voltro_wakeups", {
 	id: v({ prefix: "wakeup" }),
-	tenantId: D(),
-	kind: D(),
-	refId: D(),
-	wakeAt: O(),
-	status: D()
-}).index(["status", "wakeAt"]).index(["tenantId"]), fs = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Ma(e.store, t, e.batchLimit ?? 100);
+	tenantId: E(),
+	kind: E(),
+	refId: E(),
+	wakeAt: D(),
+	status: E()
+}).index(["status", "wakeAt"]).index(["tenantId"]), Ss = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Ha(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await Oa(e.store, t)) try {
+	for (let t of n) if (await Ra(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await ka(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await za(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -4697,11 +4718,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, ps = (e, t = 1e3) => {
+}, Cs = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await fs(e);
+				await Ss(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -4711,10 +4732,10 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, ms = (e) => ({ wake: async () => {
+}, ws = (e) => ({ wake: async () => {
 	await e.start();
-} }), hs = (e) => new Promise((t) => setTimeout(t, e)), gs = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? hs, i = e.spawnImpl ?? ut, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), Ts = (e) => new Promise((t) => setTimeout(t, e)), Es = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Ts, i = e.spawnImpl ?? _t, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -4768,11 +4789,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		},
 		stop: m
 	};
-}, _s = async (e) => {
+}, Ds = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Na(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Ua(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, vs = (e, t = Date.now) => {
+}, Os = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -4784,7 +4805,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			n = void 0;
 		}
 	};
-}, ys = () => {
+}, ks = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -4802,8 +4823,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, bs = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), xs = (e, t, n, r) => new Promise((i, a) => {
-	let o = ze.request({
+}, As = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), js = (e, t, n, r) => new Promise((i, a) => {
+	let o = We.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -4813,8 +4834,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), Ss = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = ze.request({
+}), Ms = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = We.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -4828,21 +4849,21 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Cs = (e) => {
-	let t = bs({
+}), Ns = (e) => {
+	let t = As({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = ze.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => xs(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = We.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => js(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Ss(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Ms(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, ws = async (e) => {
+}, Ps = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -4859,15 +4880,15 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, Ts = async (e) => {
-	let t = ms(e.supervisor), n = await fs({
+}, Fs = async (e) => {
+	let t = ws(e.supervisor), n = await Ss({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await _s({
+	let r = await Ds({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -4877,12 +4898,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, Es = async (e) => {
-	let t = vs(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = ys(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Is = async (e) => {
+	let t = Os(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = ks(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Cs({
+	}, s = Ns({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -4901,7 +4922,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await ws(e.store)), await Ts({
+				if (a && (i = await Ps(e.store)), await Fs({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -4909,7 +4930,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await Fa(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await Ga(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -4924,14 +4945,14 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Ds = (e) => e, Os = class extends I.TaggedError()("AnalyticsError", {
+}, Ls = (e) => e, Rs = class extends I.TaggedError()("AnalyticsError", {
 	provider: I.String,
 	operation: I.String,
 	cause: I.String
-}) {}, ks = class extends I.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, zs = class extends I.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: I.String,
 	capability: I.String
-}) {}, As = class extends Ae.Tag("@voltro/AnalyticsSink")() {}, js = (e, t) => ({
+}) {}, Bs = class extends Fe.Tag("@voltro/AnalyticsSink")() {}, Vs = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -4950,20 +4971,20 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Ms = () => j.gen(function* () {
-	let e = yield* As, t = yield* j.serviceOption(ye), n = P.match(t, {
+}), Hs = () => j.gen(function* () {
+	let e = yield* Bs, t = yield* j.serviceOption(O), n = P.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : js(e, n);
-}), Ns = "noop", Ps = () => {
-	let e = (e) => j.fail(new ks({
-		provider: Ns,
+	return n === null ? e : Vs(e, n);
+}), Us = "noop", Ws = () => {
+	let e = (e) => j.fail(new zs({
+		provider: Us,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Ns,
+			provider: Us,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -4977,8 +4998,8 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, Fs = (e) => {
-	if (e.length === 0) return Ps();
+}, Gs = (e) => {
+	if (e.length === 0) return Ws();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -4995,7 +5016,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? j.fail(new ks({
+		return r === void 0 ? j.fail(new zs({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -5018,11 +5039,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Is = (e) => {
+}, Ks = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => Fs(e.map((e) => e.build(t))),
+		build: (t) => Gs(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => j.forEach(e, (e) => e.initialize ? e.initialize(t) : j.void, {
 			concurrency: 1,
@@ -5033,15 +5054,15 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, Ls = {
+}, qs = {
 	kind: "noop",
-	build: () => Ps()
-}, Rs = {
+	build: () => Ws()
+}, Js = {
 	tables: [],
 	detach: () => {}
-}, zs = (e) => {
+}, Ys = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return Rs;
+	if (i === void 0 || i.tables.length === 0) return Js;
 	let a = e.run ?? ((e) => j.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -5065,11 +5086,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, Bs = (e) => {
+}, Xs = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = jo({
+		let t = Vo({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -5091,35 +5112,38 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, Vs = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Hs = class extends I.TaggedError()("AggregateStale", {
+}, Zs = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Qs = class extends I.TaggedError()("AggregateStale", {
 	name: I.String,
 	ageMs: I.Number,
 	maxAgeMs: I.Number
-}) {}, Us = class extends I.TaggedError()("AggregateNotFound", { name: I.String }) {}, Ws = class extends I.TaggedError()("AggregateError", {
+}) {}, $s = class extends I.TaggedError()("AggregateNotFound", { name: I.String }) {}, ec = class extends I.TaggedError()("AggregateError", {
 	name: I.String,
 	operation: I.String,
 	cause: I.String
-}) {}, Gs = class extends Ae.Tag("@voltro/AggregateRegistry")() {}, Ks = (e) => j.gen(function* () {
-	return (yield* Gs).getHandle(e);
-}), qs = (e, n, r) => {
+}) {}, tc = class extends Fe.Tag("@voltro/AggregateRegistry")() {}, nc = (e) => j.gen(function* () {
+	return (yield* tc).getHandle(e);
+}), rc = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = u("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, Js = (e, n) => {
+}, ic = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
-	let r = x("deletedAt");
+	let r = S("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, Ys = (e) => j.runPromiseExit(e).then((e) => {
-	if (Pe.isSuccess(e)) return e.value;
+}, ac = (e) => j.runPromiseExit(e).then((e) => {
+	if (ze.isSuccess(e)) return e.value;
 	let t = k.failureOption(e.cause);
 	throw P.isSome(t) ? t.value : k.squash(e.cause);
-}), Xs = (e, t) => e.pipe(j.provideService(ye, t)), Zs = async (e) => {
+}), oc = (e, t) => e.pipe(j.provideService(O, t)), sc = async (e, t, n) => {
+	let r = await j.runPromise(we(t, e.guards, n));
+	if (r) throw r;
+}, cc = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
@@ -5134,7 +5158,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 				traceId: e.requestContext.traceId,
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId }
 			}), r = await j.runPromiseExit(n);
-			if (Pe.isSuccess(r)) return r.value;
+			if (ze.isSuccess(r)) return r.value;
 			throw k.squash(r.cause);
 		}
 		return await e.runExecutor();
@@ -5148,27 +5172,27 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			status: r
 		});
 	}
-}, Qs = /* @__PURE__ */ new Set([1213, 1205]), $s = /* @__PURE__ */ new Set([
+}, lc = /* @__PURE__ */ new Set([1213, 1205]), uc = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), ec = (e) => {
+]), dc = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && Qs.has(e.errno) || typeof e.code == "string" && $s.has(e.code) || typeof e.sqlState == "string" && $s.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && lc.has(e.errno) || typeof e.code == "string" && uc.has(e.code) || typeof e.sqlState == "string" && uc.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, tc = 3, nc = (e) => new Promise((t) => setTimeout(t, e)), rc = async (e) => {
+}, fc = 3, pc = (e) => new Promise((t) => setTimeout(t, e)), mc = async (e) => {
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= tc || !ec(e)) throw e;
-		await nc(t * 20 + Math.floor(Math.random() * 30));
+		if (t >= fc || !dc(e)) throw e;
+		await pc(t * 20 + Math.floor(Math.random() * 30));
 	}
-}, ic = (e) => (t, n, r) => Zs({
+}, hc = (e) => (t, n, r) => cc({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -5176,10 +5200,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		let i = [], a = await rc(async () => (i.length = 0, e.store.transactional(async (a) => {
+		await sc(t.descriptor, r.subject, n);
+		let i = [], a = await mc(async () => (i.length = 0, e.store.transactional(async (a) => {
 			let o = e.undoCapture?.(a), s = o ? o.tx : a, c = e.buildContext(r, s, { afterCommit: (e) => {
 				i.push(e);
-			} }), l = t.executor(n, c), u = j.isEffect(l) ? await e.runEffect(Xs(l, r.subject), c.store) : await l;
+			} }), l = t.executor(n, c), u = j.isEffect(l) ? await e.runEffect(oc(l, r.subject), c.store) : await l;
 			return o && await o.persist(c.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -5189,32 +5214,39 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		for (let e of i) await e();
 		return a;
 	}
-}), ac = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, oc = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, sc = (e) => {
+}), gc = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, _c = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, vc = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, cc = (e) => (t, n) => (r) => {
+}, yc = (e) => (t, n) => (r) => {
 	let i = e.buildContext(r), a = async () => {
 		let i = e.buildContext(r), a = t.executor(n, i);
-		return j.isEffect(a) ? j.runPromise(e.provideEffect(Xs(a, r.subject), i.store)) : ac(await Promise.resolve(a));
+		return j.isEffect(a) ? j.runPromise(e.provideEffect(oc(a, r.subject), i.store)) : gc(await Promise.resolve(a));
 	}, o = (n) => {
-		let i = ac(n);
-		return oc(i) ? e.finalize(i, r) : {
+		let i = gc(n);
+		return _c(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: sc(t),
+			dependentTables: vc(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: a
 		};
 	}, s = () => {
 		let a = t.executor(n, i);
-		return j.isEffect(a) ? e.provideEffect(Xs(a, r.subject), i.store).pipe(j.map(o)) : a instanceof Promise ? j.promise(() => a).pipe(j.map(o)) : o(a);
+		return j.isEffect(a) ? e.provideEffect(oc(a, r.subject), i.store).pipe(j.map(o)) : a instanceof Promise ? j.promise(() => a).pipe(j.map(o)) : o(a);
+	}, c = () => {
+		let e = t.descriptor.guards;
+		return !e || e.length === 0 ? s() : we(r.subject, e, n).pipe(j.flatMap((e) => {
+			if (e) return j.fail(e);
+			let t = s();
+			return j.isEffect(t) ? t : j.succeed(t);
+		}));
 	};
-	if (!e.interceptor) return s();
-	let c = j.suspend(() => {
-		let e = s();
+	if (!e.interceptor) return c();
+	let l = j.suspend(() => {
+		let e = c();
 		return j.isEffect(e) ? e : j.succeed(e);
 	});
-	return e.interceptor(c, {
+	return e.interceptor(l, {
 		tag: t.descriptor.name,
 		kind: "query",
 		input: n,
@@ -5222,7 +5254,7 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, lc = (e) => (t, n, r) => Zs({
+}, bc = (e) => (t, n, r) => cc({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -5230,15 +5262,16 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
+		await sc(t.descriptor, r.subject, n);
 		let i = e.buildContext(r), a = t.executor(n, i);
-		return j.isEffect(a) ? e.runEffect(Xs(a, r.subject), i.store) : a;
+		return j.isEffect(a) ? e.runEffect(oc(a, r.subject), i.store) : a;
 	}
-}), uc = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, dc = (e) => typeof e == "string" && e.length > 0 ? e : null, fc = [
+}), xc = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Sc = (e) => typeof e == "string" && e.length > 0 ? e : null, Cc = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], pc = (e) => fc.some((t) => t in e), mc = (e, t, n) => {
+], wc = (e) => Cc.some((t) => t in e), Tc = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -5253,14 +5286,14 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!pc(e)) return {
+	if (!wc(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = dc(e.updatedBy) ?? dc(e.createdBy), o = uc(e.updatedAt) ?? uc(e.createdAt);
+	let a = Sc(e.updatedBy) ?? Sc(e.createdBy), o = xc(e.updatedAt) ?? xc(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -5272,12 +5305,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, hc = (e, t) => {
+}, Ec = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: dc(e.actor) ?? dc(e.changedBy) },
-			at: uc(e.at) ?? uc(e.changedAt),
+			actor: { id: Sc(e.actor) ?? Sc(e.changedBy) },
+			at: xc(e.at) ?? xc(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -5292,12 +5325,12 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, gc = (e) => {
+}, Dc = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, _c = (e) => {
+}, Oc = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -5317,11 +5350,11 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: gc(e),
+		id: Dc(e),
 		fields: t
 	};
-}, vc = (e) => {
-	let t = e.map(_c);
+}, kc = (e) => {
+	let t = e.map(Oc);
 	return {
 		rows: t,
 		summary: {
@@ -5330,21 +5363,21 @@ var q = /* @__PURE__ */ new Map(), En = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, yc = class extends Error {
+}, Ac = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, bc = async (e, t) => {
+}, jc = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new yc();
+			throw n = await t(e), r = !0, new Ac();
 		});
 	} catch (e) {
-		if (!(e instanceof yc)) throw e;
+		if (!(e instanceof Ac)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, xc = "framework-runtime";
+}, Mc = "framework-runtime";
 //#endregion
-export { $r as API_KEYS_TABLE, Vo as AccessDenied, Ws as AggregateError, zo as AggregateMaintainer, Us as AggregateNotFound, Gs as AggregateRegistry, Hs as AggregateStale, ks as AnalyticsCapabilityNotSupported, Os as AnalyticsError, As as AnalyticsSink, ia as CircuitBreaker, na as CircuitOpen, dr as DEFAULT_MAX_RPC_BODY_BYTES, qi as DeleteBuilder, mn as Dispatcher, la as EffectStore, At as InMemoryDataStore, vt as IndexedMatcher, dt as LinearScanMatcher, Ie as MetricBoundaries, Ns as NOOP_ANALYTICS_PROVIDER, Bi as NoRowFound, Vi as OptimisticLockError, Bo as REBAC_ADMIN_SCOPE, xc as RUNTIME_NAME, ls as ReactionRateLimiter, qn as ReplicatedDataStore, Gi as SelectBuilder, Xi as StoreOperationFailed, xt as SubscriptionRegistry, Zi as TableValidationFailed, Yi as TenantScopeViolation, To as TimelineRecorder, ro as UndoBoundaryError, ao as UndoStack, Ki as UpdateBuilder, Ni as VOLTRO_AUDIT_MIXIN_ID, Pi as VOLTRO_SOFT_DELETE_MIXIN_ID, Fi as VOLTRO_TENANT_MIXIN_ID, On as _connectionStreamCount, kn as _resetConnectionSubjectsForTest, es as _voltroRebacTuplesTable, Ka as _voltroScheduleClaimsTable, Ga as _voltroScheduleRunsTable, qa as _voltroTracesTable, Ja as _voltroUndoLogTable, ds as _voltroWakeupsTable, Ai as _voltroWorkflowEventDeliveriesTable, ki as _voltroWorkflowEventsTable, di as apiKeyManagementRoutes, Lo as applyDelta, so as applyInverse, co as applyInverses, Js as applySoftDeleteScope, qs as applyTenantScope, _o as applyUndoInvocation, Zo as assertCan, zs as attachAnalyticsMirror, pr as awaitServerListening, xn as bindConnectionSubject, ur as bindMutation, nr as bindStream, tr as bindSubscription, $n as bindSubscriptionUntyped, Fo as buildIvmState, vc as buildPreview, rs as buildRebacInterceptor, as as buildRebacReadFilter, Vn as buildSubjectKey, vr as buildTracingLayer, Nr as cachedBackend, Xo as can, Ta as cancelWakeup, jo as classifyShape, Ko as clearResourcePolicies, i as clearRetentions, sa as clearSystemStoreHandle, ba as compileCron, Is as composeAnalytics, Fs as composeAnalyticsSinks, An as connectionSubjectsSnapshot, ws as countRunningWorkflows, cn as counter, Kn as currentRoutingContext, Ln as currentTraceContext, ci as dataStoreApiKeyStore, Gr as dataStoreIdempotencyStore, Xr as dataStoreKvStore, Bs as defineAggregate, wi as defineEventTrigger, os as defineReaction, Uo as defineResourcePolicy, ya as defineSchedule, Ds as defineSubscriber, Ir as deriveKey, _c as diffChange, Ma as dueWakeups, Yo as effectiveRelations, zi as emptySchemaRegistry, Dr as envSecretsBackend, Pn as externalSpanFromTraceparent, Mt as extractDbCause, bt as fingerprintFor, Mn as formatTraceparent, oo as forwardChangeFromCdc, li as frameworkApiKeyStrategy, ln as gauge, ti as generateApiKeyToken, Sn as getConnectionSubject, Vr as getFieldCipher, Wo as getResourcePolicy, Do as getTimelineRecorder, $ as groupKeyOf, un as histogramMetric, hc as historyProvenance, Pr as httpSecretsBackend, ct as inspectWorkflow, Dn as interruptConnectionStreams, to as invertChange, Vs as isAggregateDefinition, Nt as isForeignKeyViolation, _s as isIdleNow, sr as isInfraError, io as isSafeToApply, _a as isScheduleDefinition, Ti as isWorkflowEventTriggerDefinition, Po as ivmValue, mc as lastWriteProvenance, Go as listResourcePolicies, C as listRetentions, ts as loadResourceTuples, is as loadSubjectTuples, pa as localityAwareSelector, lc as makeActionRunner, Ra as makeAdvisoryLockCoordinator, Lr as makeAesCipher, ii as makeApiKeyService, Zr as makeAsyncKv, Er as makeBufferingSpanProcessor, Wa as makeCoordinatedScheduler, fa as makeEffectStoreLayer, ji as makeEventsFacade, Rr as makeFieldCipher, Ji as makeFluentStore, vs as makeIdleGate, bi as makeLazyWorkflowFacade, ic as makeMutationRunner, vi as makePostCommitWorkflowFacade, ms as makeProcessAdapter, cc as makeQueryDescriptorProducer, ys as makeRouterActivity, Ii as makeSchemaRegistry, $a as makeUndoCapture, bs as makeWakeGate, Cs as makeWakeProxyServer, _i as makeWorkflowFacade, yi as makeWorkflowFacadeWithCallerContext, xi as makeWorkflowHandlers, Si as makeWorkflowLayers, pi as makeWorkflowRunHandle, Ea as markWakeupFired, Io as materializeIvm, ai as memoryApiKeyStore, ha as memoryReplicationAdapter, Bn as memoryRywPositionStore, xa as nextFiring, Na as nextWakeup, gs as nodeProcessSupervisor, Ps as noopAnalytics, Ls as noopAnalyticsSpec, Qr as noopKv, wn as onBindConnectionSubject, Nn as parseTraceparent, Rn as powerOfTwoSelector, bc as previewInRollback, Fa as pruneWakeups, qo as rebacPolicyGraph, nn as recordSample, sn as recordSubscriptionActive, an as recordSubscriptionDelivery, ko as recordTimelineEvent, So as redactRow, Hn as redisRywPositionStore, vo as redoUndoInvocation, En as registerConnectionStream, re as registerRetention, wa as registerWakeup, ka as releaseWakeup, zn as replicaHealth, Ar as resetSecretsBackend, ma as resolveCurrentRegion, Pt as resolveDependentTables, Ro as resolveRescan, jr as resolveSecret, Mr as resolveSecretSync, Fr as resolveSecretsBackend, yo as resolveTimelineMode, ae as retentionTtlMsFromEnv, wo as reverseEventOverRows, $o as revokedIds, ca as runAsSystem, Ts as runOrchestratorTick, Ys as runProvidedEffect, us as runReaction, Es as runSingleNodeOrchestrator, ps as runWakeLoop, Gn as runWithRoutingContext, In as runWithTraceContext, Ua as scheduleCoordinated, Br as setFieldCipher, kr as setSecretsBackend, oa as setSystemStoreHandle, Oo as setTimelineRecorderForTest, ei as sha256Hex, Ia as singleCoordinator, fn as snapshotMetrics, pn as snapshotMetricsSync, fr as startRpcServer, Ba as startScheduler, se as sweepRetention, no as synthesizeInverse, Mi as tracingHttpClientLayer, Ci as triggerWorkflow, Oa as tryClaimWakeup, Cn as unbindConnectionSubject, Ya as undoCaptureEnabled, ho as undoLogExecutor, Ks as useAggregate, Ms as useAnalytics, Qo as visibleRows, fs as wakeDueOnce, fi as workflowToRpc, Qa as wrapCaptureStore, ta as wrapStoreWithMixinBehaviour };
+export { ci as API_KEYS_TABLE, Zo as AccessDenied, ec as AggregateError, Yo as AggregateMaintainer, $s as AggregateNotFound, tc as AggregateRegistry, Qs as AggregateStale, zs as AnalyticsCapabilityNotSupported, Rs as AnalyticsError, Bs as AnalyticsSink, ma as CircuitBreaker, fa as CircuitOpen, _r as DEFAULT_MAX_RPC_BODY_BYTES, na as DeleteBuilder, bn as Dispatcher, ya as EffectStore, Lt as InMemoryDataStore, Tt as IndexedMatcher, vt as LinearScanMatcher, Ve as MetricBoundaries, Us as NOOP_ANALYTICS_PROVIDER, Yi as NoRowFound, Xi as OptimisticLockError, Xo as REBAC_ADMIN_SCOPE, Mc as RUNTIME_NAME, ys as ReactionRateLimiter, $n as ReplicatedDataStore, ea as SelectBuilder, aa as StoreOperationFailed, Ot as SubscriptionRegistry, oa as TableValidationFailed, ia as TenantScopeViolation, Fo as TimelineRecorder, mo as UndoBoundaryError, go as UndoStack, ta as UpdateBuilder, Hi as VOLTRO_AUDIT_MIXIN_ID, Ui as VOLTRO_SOFT_DELETE_MIXIN_ID, Wi as VOLTRO_TENANT_MIXIN_ID, Pn as _connectionStreamCount, Fn as _resetConnectionSubjectsForTest, us as _voltroRebacTuplesTable, no as _voltroScheduleClaimsTable, to as _voltroScheduleRunsTable, ro as _voltroTracesTable, io as _voltroUndoLogTable, xs as _voltroWakeupsTable, zi as _voltroWorkflowEventDeliveriesTable, Ri as _voltroWorkflowEventsTable, bi as apiKeyManagementRoutes, ca as applyDefined, qo as applyDelta, vo as applyInverse, yo as applyInverses, ic as applySoftDeleteScope, rc as applyTenantScope, Do as applyUndoInvocation, ss as assertCan, Ys as attachAnalyticsMirror, yr as awaitServerListening, Dn as bindConnectionSubject, gr as bindMutation, cr as bindStream, sr as bindSubscription, ar as bindSubscriptionUntyped, Go as buildIvmState, kc as buildPreview, ps as buildRebacInterceptor, hs as buildRebacReadFilter, qn as buildSubjectKey, wr as buildTracingLayer, zr as cachedBackend, os as can, Fa as cancelWakeup, Vo as classifyShape, ns as clearResourcePolicies, i as clearRetentions, _a as clearSystemStoreHandle, Aa as compileCron, Ks as composeAnalytics, Gs as composeAnalyticsSinks, In as connectionSubjectsSnapshot, Ps as countRunningWorkflows, mn as counter, Qn as currentRoutingContext, Un as currentTraceContext, _i as dataStoreApiKeyStore, ei as dataStoreIdempotencyStore, ai as dataStoreKvStore, Xr as decryptField, Xs as defineAggregate, Ni as defineEventTrigger, gs as defineReaction, $o as defineResourcePolicy, ka as defineSchedule, Ls as defineSubscriber, Hr as deriveKey, Oc as diffChange, Ha as dueWakeups, as as effectiveRelations, Ji as emptySchemaRegistry, Yr as encryptField, Nr as envSecretsBackend, Bn as externalSpanFromTraceparent, zt as extractDbCause, Dt as fingerprintFor, Rn as formatTraceparent, _o as forwardChangeFromCdc, vi as frameworkApiKeyStrategy, hn as gauge, ui as generateApiKeyToken, On as getConnectionSubject, qr as getFieldCipher, es as getResourcePolicy, Lo as getTimelineRecorder, $ as groupKeyOf, gn as histogramMetric, Ec as historyProvenance, Br as httpSecretsBackend, ht as inspectWorkflow, Nn as interruptConnectionStreams, fo as invertChange, Zs as isAggregateDefinition, Bt as isForeignKeyViolation, Ds as isIdleNow, pr as isInfraError, ho as isSafeToApply, Da as isScheduleDefinition, Pi as isWorkflowEventTriggerDefinition, Wo as ivmValue, Tc as lastWriteProvenance, ts as listResourcePolicies, ee as listRetentions, ds as loadResourceTuples, ms as loadSubjectTuples, Ca as localityAwareSelector, bc as makeActionRunner, Ja as makeAdvisoryLockCoordinator, Ur as makeAesCipher, pi as makeApiKeyService, Vt as makeAppAccess, oi as makeAsyncKv, Mr as makeBufferingSpanProcessor, eo as makeCoordinatedScheduler, Sa as makeEffectStoreLayer, Bi as makeEventsFacade, Wr as makeFieldCipher, ra as makeFluentStore, Os as makeIdleGate, ki as makeLazyWorkflowFacade, hc as makeMutationRunner, Di as makePostCommitWorkflowFacade, ws as makeProcessAdapter, yc as makeQueryDescriptorProducer, ks as makeRouterActivity, Gi as makeSchemaRegistry, lo as makeUndoCapture, As as makeWakeGate, Ns as makeWakeProxyServer, Ei as makeWorkflowFacade, Oi as makeWorkflowFacadeWithCallerContext, Ai as makeWorkflowHandlers, ji as makeWorkflowLayers, Si as makeWorkflowRunHandle, Ia as markWakeupFired, Ko as materializeIvm, mi as memoryApiKeyStore, Ta as memoryReplicationAdapter, Kn as memoryRywPositionStore, ja as nextFiring, Ua as nextWakeup, Es as nodeProcessSupervisor, Ws as noopAnalytics, qs as noopAnalyticsSpec, si as noopKv, An as onBindConnectionSubject, zn as parseTraceparent, Wn as powerOfTwoSelector, jc as previewInRollback, Ga as pruneWakeups, rs as rebacPolicyGraph, ln as recordSample, pn as recordSubscriptionActive, dn as recordSubscriptionDelivery, zo as recordTimelineEvent, Mo as redactRow, Jn as redisRywPositionStore, Oo as redoUndoInvocation, Mn as registerConnectionStream, ae as registerRetention, Pa as registerWakeup, za as releaseWakeup, Gn as replicaHealth, Ir as resetSecretsBackend, wa as resolveCurrentRegion, Ht as resolveDependentTables, Jo as resolveRescan, Lr as resolveSecret, Rr as resolveSecretSync, Vr as resolveSecretsBackend, ko as resolveTimelineMode, se as retentionTtlMsFromEnv, Po as reverseEventOverRows, ls as revokedIds, va as runAsSystem, Fs as runOrchestratorTick, ac as runProvidedEffect, bs as runReaction, Is as runSingleNodeOrchestrator, Cs as runWakeLoop, Zn as runWithRoutingContext, Hn as runWithTraceContext, $a as scheduleCoordinated, Kr as setFieldCipher, Fr as setSecretsBackend, ga as setSystemStoreHandle, Ro as setTimelineRecorderForTest, li as sha256Hex, Ka as singleCoordinator, vn as snapshotMetrics, yn as snapshotMetricsSync, vr as startRpcServer, Xa as startScheduler, le as sweepRetention, po as synthesizeInverse, Vi as tracingHttpClientLayer, Mi as triggerWorkflow, Ra as tryClaimWakeup, kn as unbindConnectionSubject, ao as undoCaptureEnabled, To as undoLogExecutor, nc as useAggregate, Hs as useAnalytics, cs as visibleRows, Ss as wakeDueOnce, xi as workflowToRpc, co as wrapCaptureStore, da as wrapStoreWithMixinBehaviour };