@voltro/runtime 0.21.0 → 0.22.0

package/dist/index.js

@@ -3,22 +3,22 @@ import { createCipheriv as _e, createDecipheriv as ve, createHash as ye, randomB
 import { EventEmitter as Ce } from "node:events";
 import { ADMIN_SCOPE as we, APIKEY_ISSUE_ORG_SCOPE as Te, APIKEY_ISSUE_OTHER_SCOPE as Ee, APIKEY_ISSUE_SELF_SCOPE as De, ConnectionHandshakeFailed as j, ConnectionInfo as Oe, ConnectionKindMismatch as ke, ConnectionNotDeclared as Ae, ConnectionSubjectRequired as je, ScopeError as Me, SubjectService as Ne, UndoConflict as Pe, UndoForbidden as Fe, UndoNotFound as Ie, WorkflowRunHandleSchema as Le, checkGuardsEffect as Re, diffRows as ze, effectiveScopes as Be, hasEffectiveScope as Ve, isIdKeyed as He, publishServerError as Ue, requireScope as We, setPolicyGuardResolver as Ge, systemSubject as Ke, tsMs as qe } from "@voltro/protocol";
 import { createLogger as M } from "@voltro/logger";
-import { Cause as N, Clock as Je, Context as Ye, Cron as P, Deferred as Xe, Duration as Ze, Effect as F, Either as Qe, Exit as $e, Fiber as et, Layer as I, ManagedRuntime as tt, Metric as L, MetricBoundaries as nt, MetricState as rt, Option as it, Ref as R, Schedule as at, Schema as z, Stream as B, Tracer as ot } from "effect";
-import * as st from "node:http";
-import { createServer as ct } from "node:http";
-import { HttpClient as lt, HttpClientRequest as ut, HttpLayerRouter as V, HttpServer as dt, HttpServerRequest as ft, HttpServerResponse as H } from "@effect/platform";
-import { NodeContext as pt, NodeHttpServer as mt } from "@effect/platform-node";
-import { Rpc as ht, RpcSerialization as gt, RpcServer as _t } from "@effect/rpc";
-import { defineRestRoute as vt, dispatchSharedPath as yt, requireAnyScope as bt, requireScope as xt } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as St } from "node:async_hooks";
-import { ArrayFormatter as Ct, TreeFormatter as wt } from "effect/ParseResult";
-import { SpanKind as Tt, SpanStatusCode as Et } from "@opentelemetry/api";
-import { Kv as Dt, KvError as Ot, KvStore as kt, layerConnections as At, layerMemory as jt, layerRedis as Mt } from "@voltro/kv";
-import { apiKeyStrategy as Nt } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as Pt, inspectWorkflow as Ft } from "@voltro/workflow";
-import { spawn as It } from "node:child_process";
+import { Cause as N, Clock as Je, Context as Ye, Cron as Xe, Deferred as Ze, Duration as Qe, Effect as P, Either as $e, Exit as et, Fiber as tt, Layer as F, ManagedRuntime as nt, Metric as I, MetricBoundaries as rt, MetricState as it, Option as at, Ref as L, Schedule as ot, Schema as R, Stream as z, Tracer as st } from "effect";
+import * as ct from "node:http";
+import { createServer as lt } from "node:http";
+import { HttpClient as ut, HttpClientRequest as dt, HttpLayerRouter as B, HttpServer as ft, HttpServerRequest as pt, HttpServerResponse as V } from "@effect/platform";
+import { NodeContext as mt, NodeHttpServer as ht } from "@effect/platform-node";
+import { Rpc as gt, RpcSerialization as _t, RpcServer as vt } from "@effect/rpc";
+import { defineRestRoute as yt, dispatchSharedPath as bt, requireAnyScope as xt, requireScope as St } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as Ct } from "node:async_hooks";
+import { ArrayFormatter as wt, TreeFormatter as Tt } from "effect/ParseResult";
+import { SpanKind as Et, SpanStatusCode as Dt } from "@opentelemetry/api";
+import { Kv as Ot, KvError as kt, KvStore as At, layerConnections as jt, layerMemory as Mt, layerRedis as Nt } from "@voltro/kv";
+import { apiKeyStrategy as Pt } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as Ft, inspectWorkflow as It } from "@voltro/workflow";
+import { spawn as Lt } from "node:child_process";
 //#region src/matcher.ts
-var Lt = class {
+var Rt = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -59,7 +59,7 @@ var Lt = class {
 		});
 		return { perTable: e };
 	}
-}, Rt = (e) => {
+}, zt = (e) => {
 	let t = [];
 	for (let n of ge(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
@@ -69,7 +69,7 @@ var Lt = class {
 		values: n.value
 	}));
 	return t;
-}, zt = (e) => {
+}, Bt = (e) => {
 	let t = [];
 	for (let n of ge(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
@@ -77,10 +77,10 @@ var Lt = class {
 		threshold: n.value
 	});
 	return t;
-}, Bt = (e, t) => {
+}, Vt = (e, t) => {
 	for (let n of ge(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
 	return null;
-}, Vt = (e, t) => {
+}, Ht = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -88,8 +88,8 @@ var Lt = class {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, Ht = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, Ut = (e, t, n) => {
-	let r = Ht(e, n);
+}, Ut = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, Wt = (e, t, n) => {
+	let r = Ut(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -97,7 +97,7 @@ var Lt = class {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, Wt = class {
+}, Gt = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -105,9 +105,9 @@ var Lt = class {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = Rt(e.predicate), n = zt(e.predicate);
+		let t = zt(e.predicate), n = Bt(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = Vt(r.fields, (t) => Bt(e.predicate, t));
+			let r = e.usingIndex, i = Ht(r.fields, (t) => Vt(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -252,7 +252,7 @@ var Lt = class {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = Vt(a, (e) => t[e]);
+				let i = Ht(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -266,7 +266,7 @@ var Lt = class {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) Ut(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) Wt(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -275,7 +275,7 @@ var Lt = class {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!Ut(e, n.op, n.threshold)) return !1;
+			} else if (!Wt(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -297,23 +297,23 @@ var Lt = class {
 		}
 		return i;
 	}
-}, Gt = (e) => {
+}, Kt = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(Gt);
+	if (Array.isArray(e)) return e.map(Kt);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = Gt(t[e]);
+		for (let e of n) r[e] = Kt(t[e]);
 		return r;
 	}
 	return e;
-}, Kt = (e, t, n) => {
-	let r = Gt({
+}, qt = (e, t, n) => {
+	let r = Kt({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
 	return ye("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, qt = class {
+}, Jt = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -332,7 +332,7 @@ var Lt = class {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = Kt(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = qt(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -390,7 +390,7 @@ var Lt = class {
 		});
 		return e;
 	}
-}, Jt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, Yt = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -400,7 +400,7 @@ var Lt = class {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), Yt = (e, t, n) => {
+}), Xt = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -418,11 +418,11 @@ var Lt = class {
 		...e,
 		[i]: c
 	};
-}, Xt = (e, t, n) => !e || f(e, t, n), U = (e, t) => {
+}, Zt = (e, t, n) => !e || f(e, t, n), H = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of o(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = U(r.descriptor.predicate, t), a = Zt(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = H(r.descriptor.predicate, t), a = Qt(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -437,15 +437,15 @@ var Lt = class {
 		}
 	}
 	return n;
-}, Zt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? U(e.predicate, n), a = [...t.values()].filter((t) => Xt(e.predicate, t, i));
+}, Qt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? H(e.predicate, n), a = [...t.values()].filter((t) => Zt(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = Qt(a, e.aggregations, e.groupBy);
+		let t = $t(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
-		let r = U(e.having, n);
-		return t.filter((t) => Xt(e.having, t, r));
+		let r = H(e.having, n);
+		return t.filter((t) => Zt(e.having, t, r));
 	}
-	let o = Jt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = Yt(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -453,7 +453,7 @@ var Lt = class {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, Qt = (e, t, n) => {
+}, $t = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -471,11 +471,11 @@ var Lt = class {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = $t(r, e.rows);
+		for (let r of t) n[r.alias] = en(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, $t = (e, t) => {
+}, en = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -519,7 +519,7 @@ var Lt = class {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, en = "\0", tn = (e, t) => e === null ? t : `${e}${en}${t}`, nn = class e {
+}, tn = "\0", nn = (e, t) => e === null ? t : `${e}${tn}${t}`, rn = class e {
 	#e;
 	#t;
 	#n(e) {
@@ -541,7 +541,7 @@ var Lt = class {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(tn(t, n), e);
+			this.#e.set(nn(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -552,11 +552,11 @@ var Lt = class {
 		}, t);
 	}
 	#o(e) {
-		return tn(this.#i, e);
+		return nn(this.#i, e);
 	}
 	#s() {
-		let e = /* @__PURE__ */ new Map(), t = this.#i === null ? null : `${this.#i}${en}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(en) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#i === null ? null : `${this.#i}${tn}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(tn) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#c(e) {
@@ -564,7 +564,7 @@ var Lt = class {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = Zt(e, this.#e.get(this.#o(e.table)) ?? /* @__PURE__ */ new Map(), this.#s());
+		let t = Qt(e, this.#e.get(this.#o(e.table)) ?? /* @__PURE__ */ new Map(), this.#s());
 		return v(e) ? n(t, e.eager, ce(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
@@ -595,7 +595,7 @@ var Lt = class {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = Yt(a, n, r);
+		let o = Xt(a, n, r);
 		return i.set(t, o), this.#n({
 			table: e,
 			op: "update",
@@ -637,7 +637,7 @@ var Lt = class {
 	async updateMany(e, t, n) {
 		let r = this.#e.get(this.#o(e));
 		if (!r) return 0;
-		let i = U(n.where, this.#s()), a = 0;
+		let i = H(n.where, this.#s()), a = 0;
 		for (let [o, s] of r) {
 			if (!f(n.where, s, i)) continue;
 			let c = {
@@ -656,7 +656,7 @@ var Lt = class {
 	async deleteMany(e, t) {
 		let n = this.#e.get(this.#o(e));
 		if (!n) return 0;
-		let r = U(t.where, this.#s()), i = [];
+		let r = H(t.where, this.#s()), i = [];
 		for (let [e, a] of n) f(t.where, a, r) && i.push([e, a]);
 		for (let [t, r] of i) n.delete(t), this.#n({
 			table: e,
@@ -695,7 +695,7 @@ var Lt = class {
 		}
 	}
 	async transactional(e) {
-		let t = new rn(this.#d());
+		let t = new an(this.#d());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -731,7 +731,7 @@ var Lt = class {
 			allocateNumericId: (e) => this.#l(e)
 		};
 	}
-}, rn = class {
+}, an = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -761,7 +761,7 @@ var Lt = class {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), r = Zt(e, this.materialise(e.table), t);
+		let t = this.buildTablesView(e), r = Qt(e, this.materialise(e.table), t);
 		return v(e) ? n(r, e.eager, ce(e.table), (e) => this.query(e)) : r;
 	}
 	async insert(e, t) {
@@ -801,7 +801,7 @@ var Lt = class {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = Yt(i, n, r);
+		let a = Xt(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -822,7 +822,7 @@ var Lt = class {
 		}), !0;
 	}
 	async updateMany(e, t, n) {
-		let r = this.materialise(e), i = U(n.where, this.buildTablesViewForPred(n.where)), a = 0;
+		let r = this.materialise(e), i = H(n.where, this.buildTablesViewForPred(n.where)), a = 0;
 		for (let [o, s] of r) {
 			if (!f(n.where, s, i)) continue;
 			let r = {
@@ -839,7 +839,7 @@ var Lt = class {
 		return a;
 	}
 	async deleteMany(e, t) {
-		let n = this.materialise(e), r = U(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
+		let n = this.materialise(e), r = H(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
 		for (let [o, s] of n) f(t.where, s, r) && (this.overlay.get(e)?.delete(o), a || (a = /* @__PURE__ */ new Set(), this.tombstones.set(e, a)), a.add(o), this.events.push({
 			table: e,
 			op: "delete",
@@ -902,7 +902,7 @@ var Lt = class {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, an = (e) => {
+}, on = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -913,23 +913,23 @@ var Lt = class {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, on = (e) => {
+}, sn = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, sn = (e) => ({
+}, cn = (e) => ({
 	has: (t) => Ve(e, t),
 	hasAny: (t) => t.some((t) => Ve(e, t)),
 	require: (t) => We(e, t),
 	get scopes() {
 		return Be(e);
 	}
-}), cn = (e) => {
+}), ln = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return ln(e, t), t;
-}, ln = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && un(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) ln(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) ln(n.descriptor, t);
-}, un = (e, t, n) => {
+	return un(e, t), t;
+}, un = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && dn(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) un(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) un(n.descriptor, t);
+}, dn = (e, t, n) => {
 	let r = m(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -937,24 +937,24 @@ var Lt = class {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && un(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && dn(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && un(e, a.with, n);
+			n.add(e), a.with !== void 0 && dn(e, a.with, n);
 		}
 	}
-}, dn = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), fn = /* @__PURE__ */ new Set(["*"]), pn = (e, t) => {
+}, fn = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), pn = /* @__PURE__ */ new Set(["*"]), mn = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			pn(e.not, t);
+			mn(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) pn(n, t);
+			for (let n of e.and) mn(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) pn(n, t);
+			for (let n of e.or) mn(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -963,11 +963,11 @@ var Lt = class {
 		}
 		e.op === "exists" || e.op === "not-exists" || t.add(e.column);
 	}
-}, W = (e, t, n) => {
+}, U = (e, t, n) => {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, mn = (e, t, n) => {
+}, hn = (e, t, n) => {
 	let r = m(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -975,65 +975,65 @@ var Lt = class {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			W(n, r.tableName, [t.sourceKey, t.targetKey]), W(n, e, ["id"]), W(n, i.tableName, ["id"]), hn(i.tableName, o, n), o.with !== void 0 && mn(i.tableName, o.with, n);
+			U(n, r.tableName, [t.sourceKey, t.targetKey]), U(n, e, ["id"]), U(n, i.tableName, ["id"]), gn(i.tableName, o, n), o.with !== void 0 && hn(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && W(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? W(n, e, ["id"]) : W(n, e, [t.sourceKey]), W(n, s.tableName, ["id"]), hn(s.tableName, o, n), o.with !== void 0 && mn(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && U(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? U(n, e, ["id"]) : U(n, e, [t.sourceKey]), U(n, s.tableName, ["id"]), gn(s.tableName, o, n), o.with !== void 0 && hn(s.tableName, o.with, n);
 	}
-}, hn = (e, t, n) => {
+}, gn = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		pn(t.where, r), W(n, e, r);
+		mn(t.where, r), U(n, e, r);
 	}
-	t.orderBy !== void 0 && W(n, e, t.orderBy.map((e) => e.column));
+	t.orderBy !== void 0 && U(n, e, t.orderBy.map((e) => e.column));
 	let r = h(e);
-	r === void 0 ? W(n, e, ["*"]) : W(n, e, Object.keys(r.fields));
-}, gn = (e) => {
+	r === void 0 ? U(n, e, ["*"]) : U(n, e, Object.keys(r.fields));
+}, _n = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (dn(e)) {
-		for (let n of cn(e)) W(t, n, ["*"]);
+	if (fn(e)) {
+		for (let n of ln(e)) U(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	pn(e.predicate, n);
+	mn(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return W(t, e.table, n), e.eager !== void 0 && mn(e.table, e.eager, t), t;
-}, _n = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return fn;
+	return U(t, e.table, n), e.eager !== void 0 && hn(e.table, e.eager, t), t;
+}, vn = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return pn;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, vn = (e, t) => {
+}, yn = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = _n(e);
+	let r = vn(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, yn = nt.exponential({
+}, bn = rt.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), bn = L.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), xn = L.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), Sn = L.histogram("voltro_rpc_duration_seconds", yn, "RPC handler duration in seconds."), Cn = L.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), wn = L.histogram("voltro_http_duration_seconds", yn, "HTTP route duration in seconds."), Tn = L.histogram("voltro_plugin_hook_duration_seconds", yn, "Plugin interceptor duration in seconds."), En = L.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), Dn = L.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), On = L.histogram("voltro_subscription_delivery_seconds", yn, "Subscription delivery produce→push latency in seconds."), kn = L.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), An = (e) => {
-	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? F.zipRight(L.increment(bn).pipe(F.tagMetrics("tag", e.tag), F.tagMetrics("status", e.status)), F.zipRight(L.update(Sn, t).pipe(F.tagMetrics("tag", e.tag)), e.status === "error" ? L.increment(xn).pipe(F.tagMetrics("tag", e.tag)) : F.void)) : e.kind === "request" ? F.zipRight(L.increment(Cn).pipe(F.tagMetrics("route", e.tag), F.tagMetrics("status", e.status)), L.update(wn, t).pipe(F.tagMetrics("route", e.tag))) : F.zipRight(L.update(Tn, t).pipe(F.tagMetrics("hook", e.tag)), e.status === "error" ? L.increment(En).pipe(F.tagMetrics("hook", e.tag)) : F.void);
-	F.runSync(n);
-}, jn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, Mn = (e) => {
-	let t = jn(e.label);
-	F.runSync(F.zipRight(L.increment(Dn).pipe(F.tagMetrics("tag", t), F.tagMetrics("kind", e.kind)), L.update(On, e.durationMs / 1e3).pipe(F.tagMetrics("tag", t), F.tagMetrics("kind", e.kind))));
-}, Nn = /* @__PURE__ */ new Map(), Pn = (e, t) => {
-	let n = jn(e), r = Math.max(0, (Nn.get(n) ?? 0) + t);
-	r === 0 ? Nn.delete(n) : Nn.set(n, r), F.runSync(L.set(kn, r).pipe(F.tagMetrics("tag", n)));
-}, Fn = (e, t) => L.counter(e, t === void 0 ? {} : { description: t }), In = (e, t) => L.gauge(e, t === void 0 ? {} : { description: t }), Ln = (e, t = yn, n) => L.histogram(e, t, n), Rn = (e) => {
+}), xn = I.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), Sn = I.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), Cn = I.histogram("voltro_rpc_duration_seconds", bn, "RPC handler duration in seconds."), wn = I.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), Tn = I.histogram("voltro_http_duration_seconds", bn, "HTTP route duration in seconds."), En = I.histogram("voltro_plugin_hook_duration_seconds", bn, "Plugin interceptor duration in seconds."), Dn = I.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), On = I.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), kn = I.histogram("voltro_subscription_delivery_seconds", bn, "Subscription delivery produce→push latency in seconds."), An = I.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), jn = (e) => {
+	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? P.zipRight(I.increment(xn).pipe(P.tagMetrics("tag", e.tag), P.tagMetrics("status", e.status)), P.zipRight(I.update(Cn, t).pipe(P.tagMetrics("tag", e.tag)), e.status === "error" ? I.increment(Sn).pipe(P.tagMetrics("tag", e.tag)) : P.void)) : e.kind === "request" ? P.zipRight(I.increment(wn).pipe(P.tagMetrics("route", e.tag), P.tagMetrics("status", e.status)), I.update(Tn, t).pipe(P.tagMetrics("route", e.tag))) : P.zipRight(I.update(En, t).pipe(P.tagMetrics("hook", e.tag)), e.status === "error" ? I.increment(Dn).pipe(P.tagMetrics("hook", e.tag)) : P.void);
+	P.runSync(n);
+}, Mn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, Nn = (e) => {
+	let t = Mn(e.label);
+	P.runSync(P.zipRight(I.increment(On).pipe(P.tagMetrics("tag", t), P.tagMetrics("kind", e.kind)), I.update(kn, e.durationMs / 1e3).pipe(P.tagMetrics("tag", t), P.tagMetrics("kind", e.kind))));
+}, Pn = /* @__PURE__ */ new Map(), W = (e, t) => {
+	let n = Mn(e), r = Math.max(0, (Pn.get(n) ?? 0) + t);
+	r === 0 ? Pn.delete(n) : Pn.set(n, r), P.runSync(I.set(An, r).pipe(P.tagMetrics("tag", n)));
+}, Fn = (e, t) => I.counter(e, t === void 0 ? {} : { description: t }), In = (e, t) => I.gauge(e, t === void 0 ? {} : { description: t }), Ln = (e, t = bn, n) => I.histogram(e, t, n), Rn = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
-}, zn = L.snapshot.pipe(F.map((e) => e.map((e) => {
-	let t = e.metricKey.name, n = Rn(e.metricKey.tags), r = it.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
-	if (rt.isHistogramState(a)) return {
+}, zn = I.snapshot.pipe(P.map((e) => e.map((e) => {
+	let t = e.metricKey.name, n = Rn(e.metricKey.tags), r = at.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
+	if (it.isHistogramState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1045,14 +1045,14 @@ var Lt = class {
 		sum: a.sum,
 		count: a.count
 	};
-	if (rt.isGaugeState(a)) return {
+	if (it.isGaugeState(a)) return {
 		name: t,
 		labels: n,
 		...i,
 		type: "gauge",
 		value: Number(a.value)
 	};
-	if (rt.isSummaryState(a)) return {
+	if (it.isSummaryState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1064,7 +1064,7 @@ var Lt = class {
 			value: t.value
 		}] : [])
 	};
-	if (rt.isFrequencyState(a)) {
+	if (it.isFrequencyState(a)) {
 		let e = {};
 		for (let [t, n] of a.occurrences) e[t] = n;
 		return {
@@ -1082,12 +1082,12 @@ var Lt = class {
 		type: "counter",
 		value: Number(a.count)
 	};
-}))), Bn = () => F.runSync(zn), Vn = class extends z.TaggedError()("RowFilterUnavailable", { cause: z.String }) {}, Hn = at.exponential("20 millis").pipe(at.intersect(at.recurs(2))), Un, Wn = (e) => {
+}))), Bn = () => P.runSync(zn), Vn = class extends R.TaggedError()("RowFilterUnavailable", { cause: R.String }) {}, Hn = ot.exponential("20 millis").pipe(ot.intersect(ot.recurs(2))), Un, Wn = (e) => {
 	Un = e;
 }, Gn = () => Un, Kn = () => void 0, qn = (e, t) => Jn(Un, e, t), Jn = (e, t, n) => {
-	if (e === void 0 || t.type === "system") return F.succeed(Kn);
+	if (e === void 0 || t.type === "system") return P.succeed(Kn);
 	let r = e.retry ?? Hn, i = e.load(t);
-	return (r === !1 ? i : F.retry(i, r)).pipe(F.map((t) => (n) => e.predicate(t, n)), F.catchAll((t) => F.suspend(() => (n?.(t), e.onLoadError === "deny" ? F.succeed(Yn) : F.fail(new Vn({ cause: String(t) }))))));
+	return (r === !1 ? i : P.retry(i, r)).pipe(P.map((t) => (n) => e.predicate(t, n)), P.catchAll((t) => P.suspend(() => (n?.(t), e.onLoadError === "deny" ? P.succeed(Yn) : P.fail(new Vn({ cause: String(t) }))))));
 }, Yn = () => ({
 	column: "id",
 	op: "isNull"
@@ -1110,12 +1110,12 @@ var Lt = class {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new Wt(), this.subscriptionRegistry = new qt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new Gt(), this.subscriptionRegistry = new Jt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a, o, s) {
-		let c = `sub_${xe()}`, l = i ?? `subscription.${e.table}`, u = cn(e), d = gn(e);
+		let c = `sub_${xe()}`, l = i ?? `subscription.${e.table}`, u = ln(e), d = _n(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(c, e.table, e.predicate, r);
 		for (let e of u) {
 			let t = this.dependentByTable.get(e);
@@ -1146,7 +1146,7 @@ var Lt = class {
 			cacheBinding: a,
 			reauthorize: o,
 			refilter: s
-		}), Pn(l, 1), t({
+		}), W(l, 1), t({
 			_tag: "snapshot",
 			revision: 0,
 			data: g
@@ -1162,11 +1162,11 @@ var Lt = class {
 			durationMs: _ - f,
 			rowCount: g.length
 		}), () => {
-			this.subscriptions.delete(c), Pn(l, -1), m();
+			this.subscriptions.delete(c), W(l, -1), m();
 		};
 	}
 	revokeSubscription(e, t, n = "guards no longer satisfied") {
-		this.subscriptions.delete(e.id), Pn(e.label, -1), this.subscriptionRegistry.unsubscribe(e.id);
+		this.subscriptions.delete(e.id), W(e.label, -1), this.subscriptionRegistry.unsubscribe(e.id);
 		for (let t of e.dependentTables) {
 			let n = this.dependentByTable.get(t);
 			n !== void 0 && (n.delete(e.id), n.size === 0 && this.dependentByTable.delete(t));
@@ -1181,7 +1181,7 @@ var Lt = class {
 		});
 	}
 	revokeComputed(e, t) {
-		this.computedSubs.delete(e.id), Pn(e.label, -1);
+		this.computedSubs.delete(e.id), W(e.label, -1);
 		for (let t of e.tables) {
 			let n = this.computedByTable.get(t);
 			n !== void 0 && (n.delete(e.id), n.size === 0 && this.computedByTable.delete(t));
@@ -1207,7 +1207,7 @@ var Lt = class {
 			lastJson: tr(e.value),
 			revision: 0
 		};
-		this.computedSubs.set(i, o), Pn(o.label, 1);
+		this.computedSubs.set(i, o), W(o.label, 1);
 		for (let e of a) {
 			let t = this.computedByTable.get(e);
 			t === void 0 && (t = /* @__PURE__ */ new Set(), this.computedByTable.set(e, t)), t.add(i);
@@ -1227,7 +1227,7 @@ var Lt = class {
 			durationMs: Date.now() - s,
 			rowCount: Qn(e.value)
 		}), () => {
-			this.computedSubs.delete(i), Pn(o.label, -1);
+			this.computedSubs.delete(i), W(o.label, -1);
 			for (let e of a) {
 				let t = this.computedByTable.get(e);
 				t !== void 0 && (t.delete(i), t.size === 0 && this.computedByTable.delete(e));
@@ -1309,7 +1309,7 @@ var Lt = class {
 				G.trace("missing subscription", { subscriberId: t });
 				continue;
 			}
-			if (!vn(e, n.relevantFields)) {
+			if (!yn(e, n.relevantFields)) {
 				o++;
 				continue;
 			}
@@ -1441,12 +1441,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	};
 }, xr = (e) => {
 	let t = br(e);
-	if (t !== null) return ot.externalSpan({
+	if (t !== null) return st.externalSpan({
 		traceId: t.traceId,
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, Sr = new St(), Cr = (e, t) => Sr.run(e, t), wr = () => Sr.getStore(), Tr = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : Se(e, "voltro:field-encryption:v1", 32), Er = (t) => {
+}, Sr = new Ct(), Cr = (e, t) => Sr.run(e, t), wr = () => Sr.getStore(), Tr = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : Se(e, "voltro:field-encryption:v1", 32), Er = (t) => {
 	if (t.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${t.length}`);
 	return {
 		encrypt: (n) => {
@@ -1471,7 +1471,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	let t = q();
 	if (!t) throw Error(`decryptField: ${Ar}`);
 	return t.decrypt(e);
-}, Nr = new St(), Pr = /* @__PURE__ */ new Set(), Fr = /* @__PURE__ */ new Set(), Ir = "\0", Lr = process.env.VOLTRO_OBSERVE_GRAPH === "1", Rr = () => {
+}, Nr = new Ct(), Pr = /* @__PURE__ */ new Set(), Fr = /* @__PURE__ */ new Set(), Ir = "\0", Lr = process.env.VOLTRO_OBSERVE_GRAPH === "1", Rr = () => {
 	Lr = !0;
 }, zr = () => Lr, Br = (e, t) => Lr ? (Fr.add(e.tag), Nr.run(e, t)) : t(), Vr = (e, t) => {
 	if (!Lr) return;
@@ -1514,16 +1514,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		t.transactional = (t) => n.call(e, (e) => t(Wr(e)));
 	}
 	return t;
-}, Gr = class extends z.TaggedError()("NoRowFound", {
-	table: z.String,
-	found: z.Number
+}, Gr = class extends R.TaggedError()("NoRowFound", {
+	table: R.String,
+	found: R.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, Kr = class extends z.TaggedError()("OptimisticLockError", {
-	table: z.String,
-	expected: z.Number
+}, Kr = class extends R.TaggedError()("OptimisticLockError", {
+	table: R.String,
+	expected: R.Number
 }) {
 	get message() {
 		return `optimistic lock failed on '${this.table}': expected version ${this.expected}`;
@@ -1713,19 +1713,19 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	select: (n) => new Xr(e, t, n, Yr(n)),
 	updateWhere: (n) => new Zr(e, t, n),
 	deleteWhere: (n) => new Qr(e, t, n)
-}), ei = class extends z.TaggedError()("TenantScopeViolation", {
-	table: z.String,
-	reason: z.String
-}) {}, ti = class extends z.TaggedError()("StoreOperationFailed", {
-	operation: z.String,
-	table: z.String,
-	cause: z.String
-}) {}, ni = class extends z.TaggedError()("TableValidationFailed", {
-	table: z.String,
-	summary: z.String,
-	issues: z.Array(z.Struct({
-		path: z.String,
-		message: z.String
+}), ei = class extends R.TaggedError()("TenantScopeViolation", {
+	table: R.String,
+	reason: R.String
+}) {}, ti = class extends R.TaggedError()("StoreOperationFailed", {
+	operation: R.String,
+	table: R.String,
+	cause: R.String
+}) {}, ni = class extends R.TaggedError()("TableValidationFailed", {
+	table: R.String,
+	summary: R.String,
+	issues: R.Array(R.Struct({
+		path: R.String,
+		message: R.String
 	}))
 }) {}, ri = "id", ii = (e) => "descriptor" in e ? e.descriptor : e, ai = (e, t) => {
 	let n = {};
@@ -1769,8 +1769,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		try {
 			return await r();
 		} catch (n) {
-			let r = an(n);
-			if (on(r)) {
+			let r = on(n);
+			if (sn(r)) {
 				let n = t.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
 				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new ei({
 					table: e,
@@ -1791,9 +1791,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}, _ = (e, t) => {
 		let r = n.schemaRegistry.validatePatchSchema(e);
 		if (r === void 0) return t;
-		let i = z.decodeUnknownEither(r)(t);
+		let i = R.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = Ct.formatErrorSync(i.left).map((e) => ({
+		let a = wt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
@@ -1830,9 +1830,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 		let i = n.schemaRegistry.insertSchema(e);
 		if (i === void 0) return t;
-		let a = z.decodeUnknownEither(i)(t);
+		let a = R.decodeUnknownEither(i)(t);
 		if (a._tag === "Right") return t;
-		let o = Ct.formatErrorSync(a.left).map((e) => ({
+		let o = wt.formatErrorSync(a.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), s = o[0];
@@ -2194,7 +2194,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return o.size;
 		}
 	};
-}, hi = M({ scope: "voltro:replication" }), gi = new St(), _i = (e, t) => gi.run(e, t), vi = () => gi.getStore(), yi = class {
+}, hi = M({ scope: "voltro:replication" }), gi = new Ct(), _i = (e, t) => gi.run(e, t), vi = () => gi.getStore(), yi = class {
 	primary;
 	replicas;
 	adapter;
@@ -2431,36 +2431,36 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 }, Si = (e, t) => {
 	let n = xi(e);
 	return n === void 0 ? t() : Br(n, t);
-}, Ci = (e, t) => F.async((n) => {
-	let r = ue(t, () => F.runFork(e));
+}, Ci = (e, t, n, r) => e === "subject" ? `${t}:s:${n}` : e === "global" ? `${t}:global` : r.tenantId == null ? void 0 : `${t}:t:${r.tenantId}`, wi = (e, t) => P.async((n) => {
+	let r = ue(t, () => P.runFork(e));
 	return r.addObserver((e) => {
 		n(e);
-	}), F.asVoid(et.interrupt(r));
-}), wi = (e, t, n) => ({
+	}), P.asVoid(tt.interrupt(r));
+}), Ti = (e, t, n) => ({
 	subject: e,
 	traceId: t?.traceId ?? xe(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), Ti = F.currentSpan.pipe(F.catchAll(() => F.succeed(void 0))), Ei = (e) => ({
+}), Ei = P.currentSpan.pipe(P.catchAll(() => P.succeed(void 0))), Di = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Di = (e, t, n) => {
+}), Oi = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, Oi = (e) => {
+}, ki = (e) => {
 	if (Gn() !== void 0) return async () => {
-		let t = await F.runPromise(F.either(qn(e, (e) => {
+		let t = await P.runPromise(P.either(qn(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
 		})));
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, ki = (e, t, n, r, i, a, o, s) => B.asyncScoped((c) => F.gen(function* () {
-	let l = yield* F.tryPromise(() => t.subscribe(e, (e) => {
+}, Ai = (e, t, n, r, i, a, o, s) => z.asyncScoped((c) => P.gen(function* () {
+	let l = yield* P.tryPromise(() => t.subscribe(e, (e) => {
 		c.single(e);
-	}, n, r, i, a, o, s)).pipe(F.matchCause({
-		onFailure: (e) => (Ri(`subscription.${i}`, n.traceId, e), {
+	}, n, r, i, a, o, s)).pipe(P.matchCause({
+		onFailure: (e) => (zi(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Hi(e)
+			error: Ui(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2475,26 +2475,26 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		return;
 	}
 	let u = l.unsubscribe;
-	if (yield* F.addFinalizer(() => F.sync(() => u())), n.clientId !== void 0) {
+	if (yield* P.addFinalizer(() => P.sync(() => u())), n.clientId !== void 0) {
 		let e = pr(n.clientId, () => {
 			c.end();
 		});
-		yield* F.addFinalizer(() => F.sync(() => e()));
-	}
-})), Ai = /* @__PURE__ */ new Set(), ji = () => {
-	Ai.clear();
-}, Mi = (e) => {
-	Ai.has(e) || (Ai.add(e), process.stderr.write(`[voltro] ${e}: \`cache:\` is declared but NOT applied — this query's handler returns a computed value, and the snapshot cache only wraps a store read. Every subscriber re-runs the handler. Either return a query descriptor (so the read can be cached), or drop \`cache:\` so the declaration matches what happens.\n`));
-}, Ni = (e, t, n, r) => B.asyncScoped((i) => F.gen(function* () {
-	let a = yield* F.tryPromise(() => t.subscribeComputed(e, (e) => {
+		yield* P.addFinalizer(() => P.sync(() => e()));
+	}
+})), ji = /* @__PURE__ */ new Set(), Mi = () => {
+	ji.clear();
+}, Ni = (e) => {
+	ji.has(e) || (ji.add(e), process.stderr.write(`[voltro] ${e}: \`cache:\` is declared but NOT applied — this query's handler returns a computed value, and the snapshot cache only wraps a store read. Every subscriber re-runs the handler. Either return a query descriptor (so the read can be cached), or drop \`cache:\` so the declaration matches what happens.\n`));
+}, Pi = (e, t, n, r) => z.asyncScoped((i) => P.gen(function* () {
+	let a = yield* P.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
-	}, n, r)).pipe(F.matchCause({
-		onFailure: (e) => (Ri(`subscription.${r}`, n.traceId, e), {
+	}, n, r)).pipe(P.matchCause({
+		onFailure: (e) => (zi(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Hi(e)
+			error: Ui(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2509,22 +2509,22 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		return;
 	}
 	let o = a.unsubscribe;
-	if (yield* F.addFinalizer(() => F.sync(() => o())), n.clientId !== void 0) {
+	if (yield* P.addFinalizer(() => P.sync(() => o())), n.clientId !== void 0) {
 		let e = pr(n.clientId, () => {
 			i.end();
 		});
-		yield* F.addFinalizer(() => F.sync(() => e()));
+		yield* P.addFinalizer(() => P.sync(() => e()));
 	}
-})), Pi = (e, t, n = "rpc.subscription", r, i, a, o) => B.unwrap(F.gen(function* () {
-	let s = yield* Ne, c = yield* Oe, l = yield* Ti;
-	Di(l, n, s);
-	let u = wi(s, l, c.clientId), d = pi(s.id, c.clientId), f = _i({ subjectKey: d }, () => Cr({
+})), Fi = (e, t, n = "rpc.subscription", r, i, a, o) => z.unwrap(P.gen(function* () {
+	let s = yield* Ne, c = yield* Oe, l = yield* Ei;
+	Oi(l, n, s);
+	let u = Ti(s, l, c.clientId), d = pi(s.id, c.clientId), f = _i({ subjectKey: d }, () => Cr({
 		traceId: u.traceId,
 		...u.spanId === void 0 ? {} : { spanId: u.spanId }
-	}, () => Si(n, () => e(u)))), p = F.isEffect(f) ? yield* f.pipe(F.matchCause({
-		onFailure: (e) => (Ri(`subscription.${n}`, u.traceId, e), {
+	}, () => Si(n, () => e(u)))), p = P.isEffect(f) ? yield* f.pipe(P.matchCause({
+		onFailure: (e) => (zi(`subscription.${n}`, u.traceId, e), {
 			ok: !1,
-			error: Hi(e)
+			error: Ui(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2534,49 +2534,49 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		ok: !0,
 		value: f
 	};
-	if (!p.ok) return B.make({
+	if (!p.ok) return z.make({
 		_tag: "error",
 		error: p.error
 	});
 	let m = p.value;
-	if (rr(m)) return i !== void 0 && Mi(n), Ni(m, t, u, n);
-	let h = m, g = r?.(h);
-	return ki(h, t, u, g, n, i === void 0 ? void 0 : {
-		key: i.scope === "subject" ? `${i.baseKey}:s:${d}` : `${i.baseKey}:global`,
+	if (rr(m)) return i !== void 0 && Ni(n), Pi(m, t, u, n);
+	let h = m, g = r?.(h), _ = i === void 0 ? void 0 : Ci(i.scope, i.baseKey, d, s);
+	return Ai(h, t, u, g, n, i === void 0 || _ === void 0 ? void 0 : {
+		key: _,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(s), o?.(s) ?? Oi(s));
-}).pipe(F.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Fi = (e, t = "rpc.stream") => B.unwrap(F.gen(function* () {
-	let n = yield* Ne, r = yield* Oe, i = yield* Ti;
-	Di(i, t, n);
-	let a = wi(n, i, r.clientId), o = Si(t, () => e(a)), s = F.isEffect(o) ? yield* o.pipe(F.orDie) : o;
+	}, a?.(s), o?.(s) ?? ki(s));
+}).pipe(P.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Ii = (e, t = "rpc.stream") => z.unwrap(P.gen(function* () {
+	let n = yield* Ne, r = yield* Oe, i = yield* Ei;
+	Oi(i, t, n);
+	let a = Ti(n, i, r.clientId), o = Si(t, () => e(a)), s = P.isEffect(o) ? yield* o.pipe(P.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
-	return B.unwrapScoped(F.gen(function* () {
-		let e = yield* Xe.make(), t = pr(c, () => {
-			Xe.unsafeDone(e, F.void);
+	return z.unwrapScoped(P.gen(function* () {
+		let e = yield* Ze.make(), t = pr(c, () => {
+			Ze.unsafeDone(e, P.void);
 		});
-		return yield* F.addFinalizer(() => F.sync(() => t())), s.pipe(B.interruptWhen(Xe.await(e)));
+		return yield* P.addFinalizer(() => P.sync(() => t())), s.pipe(z.interruptWhen(Ze.await(e)));
 	}));
-}).pipe(F.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Ii = M({ scope: "voltro:rpc" }), Li = M({ scope: "voltro:http" }), Ri = (e, t, n) => {
+}).pipe(P.withSpan(t, { attributes: { "framework.kind": "stream" } }))), Li = M({ scope: "voltro:rpc" }), Ri = M({ scope: "voltro:http" }), zi = (e, t, n) => {
 	if (N.isInterruptedOnly(n)) return;
-	let r = N.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = N.dieOption(n)._tag === "Some", s = an(r), c = {
+	let r = N.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = N.dieOption(n)._tag === "Some", s = on(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? Ii.error(`${e} failed: ${l}`, c) : Ii.warn(`${e} failed: ${l}`, c);
-}, zi = /* @__PURE__ */ new Set([
+	o ? Li.error(`${e} failed: ${l}`, c) : Li.warn(`${e} failed: ${l}`, c);
+}, Bi = /* @__PURE__ */ new Set([
 	"SqlError",
 	"ResultLengthMismatch",
 	"FieldDecryptionError"
-]), Bi = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && zi.has(e._tag), Vi = (e) => ({
+]), Vi = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Bi.has(e._tag), Hi = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Hi = (e) => {
+}), Ui = (e) => {
 	let t = N.squash(e);
-	if (t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t), Bi(t)) return {
+	if (t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t), Vi(t)) return {
 		_tag: "InternalError",
 		message: "internal server error"
 	};
@@ -2588,46 +2588,47 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, Ui = (e, t, n = "rpc.mutation") => F.gen(function* () {
-	let r = yield* Ne, i = yield* Oe, a = yield* Ti;
-	Di(a, n, r);
-	let o = wi(r, a, i.clientId), s = pi(r.id, i.clientId), c = {
+}, Wi = (e, t, n = "rpc.mutation") => P.gen(function* () {
+	let r = yield* Ne, i = yield* Oe, a = yield* Ei;
+	Oi(a, n, r);
+	let o = Ti(r, a, i.clientId), s = pi(r.id, i.clientId), c = {
 		traceId: o.traceId,
-		subjectId: ci(r)
+		subjectId: ci(r),
+		procedure: n
 	}, l = _i({ subjectKey: s }, () => Cr({
 		traceId: o.traceId,
 		...o.spanId === void 0 ? {} : { spanId: o.spanId }
 	}, () => ue(c, () => Si(n, () => e(t, o)))));
-	return yield* (F.isEffect(l) ? Ci(l, c) : F.tryPromise({
+	return yield* (P.isEffect(l) ? wi(l, c) : P.tryPromise({
 		try: () => Promise.resolve(l),
 		catch: (e) => e
-	})).pipe(F.tapErrorCause((e) => F.sync(() => Ri(n, o.traceId, e))), F.catchIf(Bi, () => F.die(Vi(o.traceId))), F.annotateLogs(Ei(o)));
-}).pipe(F.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Wi = 8 * 1024 * 1024, Gi = (e) => {
-	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = ct(), i = (t) => ft.HttpServerRequest.pipe(F.flatMap((t) => F.gen(function* () {
-		if (!e.inspectRoute) return H.text("inspect route not configured", { status: 404 });
+	})).pipe(P.tapErrorCause((e) => P.sync(() => zi(n, o.traceId, e))), P.catchIf(Vi, () => P.die(Hi(o.traceId))), P.annotateLogs(Di(o)));
+}).pipe(P.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Gi = 8 * 1024 * 1024, Ki = (e) => {
+	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = lt(), i = (t) => pt.HttpServerRequest.pipe(P.flatMap((t) => P.gen(function* () {
+		if (!e.inspectRoute) return V.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
-		t.method !== "GET" && t.method !== "HEAD" && t.method !== "OPTIONS" && (r = yield* t.text.pipe(F.orElseSucceed(() => "")));
-		let i = e.inspectRoute.handle(t.url, n, t.method, r), a = i instanceof Promise ? yield* F.promise(() => i) : i;
-		return a === null ? H.text("inspect route not found", { status: 404 }) : H.text(a.body, {
+		t.method !== "GET" && t.method !== "HEAD" && t.method !== "OPTIONS" && (r = yield* t.text.pipe(P.orElseSucceed(() => "")));
+		let i = e.inspectRoute.handle(t.url, n, t.method, r), a = i instanceof Promise ? yield* P.promise(() => i) : i;
+		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	}))), a = () => ft.HttpServerRequest.pipe(F.flatMap((t) => {
+	}))), a = () => pt.HttpServerRequest.pipe(P.flatMap((t) => {
 		let n = e.inspectStream;
-		if (!n) return F.succeed(H.text("inspect stream not configured", { status: 404 }));
+		if (!n) return P.succeed(V.text("inspect stream not configured", { status: 404 }));
 		let r = {};
 		for (let [e, n] of Object.entries(t.headers)) n !== void 0 && (r[e.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
 		let i = n.corsHeaders(r.origin);
-		if (n.isDisabled()) return F.succeed(H.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
+		if (n.isDisabled()) return P.succeed(V.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
 			status: 503,
 			contentType: "application/json; charset=utf-8",
 			headers: i
 		}));
 		let a = n.authorize(r);
-		if (!a.ok) return F.succeed(H.text(JSON.stringify({
+		if (!a.ok) return P.succeed(V.text(JSON.stringify({
 			error: "unauthorized",
 			reason: a.reason
 		}), {
@@ -2639,18 +2640,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			if (!f || e.indexOf("event: ") !== 0) return !0;
 			let t = e.indexOf("\n", 7);
 			return t < 0 || f.has(e.slice(7, t).trim());
-		}, m = B.asyncScoped((e) => F.gen(function* () {
+		}, m = z.asyncScoped((e) => P.gen(function* () {
 			if (e.single(o.encode("retry: 5000\n\n")), !u) for (let t of n.replay()) p(t) && e.single(o.encode(t));
 			let t = n.subscribe((t) => {
 				p(t) && e.single(o.encode(t));
 			}), r = setInterval(() => {
 				e.single(o.encode(n.keepAlive()));
 			}, s);
-			yield* F.addFinalizer(() => F.sync(() => {
+			yield* P.addFinalizer(() => P.sync(() => {
 				clearInterval(r), t();
 			}));
 		}));
-		return F.succeed(H.stream(m, {
+		return P.succeed(V.stream(m, {
 			status: 200,
 			headers: {
 				"content-type": "text/event-stream; charset=utf-8",
@@ -2660,58 +2661,58 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				...i
 			}
 		}));
-	})), o = V.add("*", "/_voltro/inspect/*", ft.HttpServerRequest.pipe(F.flatMap((t) => F.gen(function* () {
-		if (!e.inspectRoute) return H.text("inspect route not configured", { status: 404 });
+	})), o = B.add("*", "/_voltro/inspect/*", pt.HttpServerRequest.pipe(P.flatMap((t) => P.gen(function* () {
+		if (!e.inspectRoute) return V.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
-		t.method !== "GET" && t.method !== "HEAD" && t.method !== "OPTIONS" && (r = yield* t.text.pipe(F.orElseSucceed(() => "")));
-		let i = e.inspectRoute.handle(t.url, n, t.method, r), a = i instanceof Promise ? yield* F.promise(() => i) : i;
-		return a === null ? H.text("inspect route not found", { status: 404 }) : H.text(a.body, {
+		t.method !== "GET" && t.method !== "HEAD" && t.method !== "OPTIONS" && (r = yield* t.text.pipe(P.orElseSucceed(() => "")));
+		let i = e.inspectRoute.handle(t.url, n, t.method, r), a = i instanceof Promise ? yield* P.promise(() => i) : i;
+		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	})))), s = I.empty;
-	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? I.mergeAll(V.add("*", "/_voltro/inspect", i(!0)), o) : I.mergeAll(V.add("GET", "/_voltro/inspect/stream", a()), V.add("*", "/_voltro/inspect", i(!0)), o));
-	let c = I.empty;
+	})))), s = F.empty;
+	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? F.mergeAll(B.add("*", "/_voltro/inspect", i(!0)), o) : F.mergeAll(B.add("GET", "/_voltro/inspect/stream", a()), B.add("*", "/_voltro/inspect", i(!0)), o));
+	let c = F.empty;
 	if (e.webhookRoutes !== void 0 && e.webhookRoutes.size > 0) {
-		let t = (e) => ft.HttpServerRequest.pipe(F.flatMap((t) => F.gen(function* () {
+		let t = (e) => pt.HttpServerRequest.pipe(P.flatMap((t) => P.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
-			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(F.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = xr(n.traceparent), s = yield* F.promise(() => e.handle({
+			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(P.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = xr(n.traceparent), s = yield* P.promise(() => e.handle({
 				method: t.method,
 				path: a,
 				headers: n,
 				rawBody: i
-			})).pipe(F.withSpan(`webhook${a}`, {
+			})).pipe(P.withSpan(`webhook${a}`, {
 				attributes: {
 					"framework.kind": "webhook",
 					"http.route": a
 				},
 				...o ? { parent: o } : {}
 			}));
-			return H.text(s.body, {
+			return V.text(s.body, {
 				status: s.status,
 				contentType: s.contentType
 			});
-		}))), n = Array.from(e.webhookRoutes.entries()).map(([e, n]) => V.add("*", e, t(n)));
-		c = I.mergeAll(...n);
+		}))), n = Array.from(e.webhookRoutes.entries()).map(([e, n]) => B.add("*", e, t(n)));
+		c = F.mergeAll(...n);
 	}
-	let l = I.empty;
+	let l = F.empty;
 	if (e.httpRoutes !== void 0 && e.httpRoutes.length > 0) {
-		let t = (t) => ft.HttpServerRequest.pipe(F.flatMap((n) => F.gen(function* () {
+		let t = (t) => pt.HttpServerRequest.pipe(P.flatMap((n) => P.gen(function* () {
 			let r = {};
 			for (let [e, t] of Object.entries(n.headers)) t !== void 0 && (r[e.toLowerCase()] = Array.isArray(t) ? t.join(", ") : t);
-			let i = n.url.indexOf("?"), a = i >= 0 ? n.url.slice(0, i) : n.url, o = i >= 0 ? n.url.slice(i + 1) : "", s = n.method !== "GET" && n.method !== "HEAD" ? new Uint8Array(yield* n.arrayBuffer.pipe(F.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), c = e.getStore?.(), l = {
+			let i = n.url.indexOf("?"), a = i >= 0 ? n.url.slice(0, i) : n.url, o = i >= 0 ? n.url.slice(i + 1) : "", s = n.method !== "GET" && n.method !== "HEAD" ? new Uint8Array(yield* n.arrayBuffer.pipe(P.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), c = e.getStore?.(), l = {
 				method: n.method,
 				path: a,
 				query: o,
 				headers: r,
 				rawBody: s,
 				...c === void 0 ? {} : { store: c }
-			}, u = yield* F.promise(() => yt(t, l));
-			u.status >= 500 && Li.warn(`${n.method} ${a} → ${u.status}`, {
+			}, u = yield* P.promise(() => bt(t, l));
+			u.status >= 500 && Ri.warn(`${n.method} ${a} → ${u.status}`, {
 				method: n.method,
 				path: a,
 				status: u.status,
@@ -2723,18 +2724,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				headers: d
 			};
 			if (u.stream !== void 0) {
-				let { subscribe: e, keepAliveMs: t } = u.stream, n = new TextEncoder(), r = t ?? 15e3, i = B.asyncScoped((t) => F.gen(function* () {
+				let { subscribe: e, keepAliveMs: t } = u.stream, n = new TextEncoder(), r = t ?? 15e3, i = z.asyncScoped((t) => P.gen(function* () {
 					t.single(n.encode("retry: 5000\n\n"));
 					let i = e((e) => {
 						t.single(n.encode(e));
 					}), a = r > 0 ? setInterval(() => {
 						t.single(n.encode(": keep-alive\n\n"));
 					}, r) : void 0;
-					yield* F.addFinalizer(() => F.sync(() => {
+					yield* P.addFinalizer(() => P.sync(() => {
 						a !== void 0 && clearInterval(a), i();
 					}));
 				}));
-				return H.stream(i, {
+				return V.stream(i, {
 					status: u.status,
 					headers: {
 						...d,
@@ -2745,45 +2746,45 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 					}
 				});
 			}
-			return u.body instanceof Uint8Array ? H.uint8Array(u.body, f) : H.text(u.body ?? "", f);
-		})), F.tapErrorCause((e) => N.isInterruptedOnly(e) ? F.void : F.sync(() => Li.error(`${t.map((e) => e.method).join("|")} ${t[0].path} threw`, { path: t[0].path }, N.squash(e))))), n = /* @__PURE__ */ new Map();
+			return u.body instanceof Uint8Array ? V.uint8Array(u.body, f) : V.text(u.body ?? "", f);
+		})), P.tapErrorCause((e) => N.isInterruptedOnly(e) ? P.void : P.sync(() => Ri.error(`${t.map((e) => e.method).join("|")} ${t[0].path} threw`, { path: t[0].path }, N.squash(e))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
 		}
 		let r = [...n.entries()].flatMap(([e, n]) => {
 			let r = n.length === 1 ? n[0].method : "*", i = t(n);
-			return [V.add(r, e, i), V.add(r, `${e}/*`, i)];
+			return [B.add(r, e, i), B.add(r, `${e}/*`, i)];
 		});
-		l = I.mergeAll(...r);
+		l = F.mergeAll(...r);
 	}
-	let u = _t.layerProtocolWebsocketRouter({ path: n }), d = _t.layer(e.group), f = _t.layer(e.group).pipe(I.provide(_t.layerProtocolHttpRouter({ path: "/rpc" })), I.provide(gt.layerJson), I.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = I.scopedDiscard(F.gen(function* () {
-		let e = yield* _t.Protocol;
-		yield* F.forkScoped(F.gen(function* () {
+	let u = vt.layerProtocolWebsocketRouter({ path: n }), d = vt.layer(e.group), f = vt.layer(e.group).pipe(F.provide(vt.layerProtocolHttpRouter({ path: "/rpc" })), F.provide(_t.layerJson), F.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = F.scopedDiscard(P.gen(function* () {
+		let e = yield* vt.Protocol;
+		yield* P.forkScoped(P.gen(function* () {
 			let t = yield* e.disconnects.take;
 			ur(t), mr(t);
-		}).pipe(F.forever));
-	})), m = I.mergeAll(d, p).pipe(I.provide(u), I.provide(gt.layerJson), I.provide(e.handlersLayer)), h = I.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => F.gen(function* () {
-		let t = yield* ft.HttpServerRequest, n = {};
+		}).pipe(P.forever));
+	})), m = F.mergeAll(d, p).pipe(F.provide(u), F.provide(_t.layerJson), F.provide(e.handlersLayer)), h = F.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => P.gen(function* () {
+		let t = yield* pt.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
 		if (t.method === "POST" && i === "/rpc") {
 			let e = n["content-length"];
-			if (e !== void 0 && Number(e) > y) return H.text("rpc payload too large", {
+			if (e !== void 0 && Number(e) > y) return V.text("rpc payload too large", {
 				status: 413,
 				headers: b
 			});
 		}
-		if (_ && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? H.text("ok", {
+		if (_ && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? V.text("ok", {
 			status: 200,
 			headers: b
-		}) : _.isReady() ? _.ping && !(yield* F.tryPromise(() => _.ping()).pipe(F.orElseSucceed(() => !1))) ? H.text("not-ready: dependency", {
+		}) : _.isReady() ? _.ping && !(yield* P.tryPromise(() => _.ping()).pipe(P.orElseSucceed(() => !1))) ? V.text("not-ready: dependency", {
 			status: 503,
 			headers: b
-		}) : H.text("ready", {
+		}) : V.text("ready", {
 			status: 200,
 			headers: b
-		}) : H.text("not-ready", {
+		}) : V.text("not-ready", {
 			status: 503,
 			headers: b
 		});
@@ -2794,36 +2795,48 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		} catch {
 			s = void 0;
 		}
-		let c = o ?? s, l = yield* F.tryPromise(() => g(async () => null, {
+		let c = o ?? s, l = yield* P.tryPromise(() => g(async () => null, {
 			method: t.method,
 			path: i,
 			headers: n,
 			remoteAddr: c
-		})).pipe(F.orElseSucceed(() => null));
-		return l === null ? yield* e : H.text(l.body ?? "", {
+		})).pipe(P.orElseSucceed(() => null));
+		return l === null ? yield* e : V.text(l.body ?? "", {
 			status: l.status,
 			...l.headers ? { headers: l.headers } : {}
 		});
-	}), S = I.unwrapEffect(V.toHttpEffect(h).pipe(F.map((e) => dt.serve(x(e))))).pipe(I.provide(mt.layer(() => r, { port: t })), I.provide(pt.layer));
-	e.tracerLayer && (S = S.pipe(I.provide(e.tracerLayer)));
-	let C = M({ scope: "voltro:rpc" }), w = I.launch(S).pipe(F.catchAllCause((e) => F.sync(() => {
+	}), S = F.unwrapEffect(B.toHttpEffect(h).pipe(P.map((e) => ft.serve(x(e))))).pipe(F.provide(ht.layer(() => r, { port: t })), F.provide(mt.layer));
+	e.tracerLayer && (S = S.pipe(F.provide(e.tracerLayer)));
+	let C = M({ scope: "voltro:rpc" }), w = F.launch(S).pipe(P.catchAllCause((e) => P.sync(() => {
 		C.error("rpc server crashed", {}, N.squash(e)), process.exit(1);
-	}))), T = F.runFork(w);
-	return Ki.add(T), Ji(), {
+	}))), T = P.runFork(w);
+	return qi.add(T), $i(), {
 		server: r,
 		shutdown: async () => {
-			Ki.delete(T), await F.runPromise(et.interrupt(T)).then(() => void 0, () => void 0);
+			qi.delete(T), await P.runPromise(tt.interrupt(T)).then(() => void 0, () => void 0);
 		}
 	};
-}, Ki = /* @__PURE__ */ new Set(), qi = !1, Ji = () => {
-	if (qi) return;
-	qi = !0;
+}, qi = /* @__PURE__ */ new Set(), Ji = /* @__PURE__ */ new Set(), Yi = !1, Xi = (e) => (Ji.add(e), () => {
+	Ji.delete(e);
+}), Zi = 1e4, Qi = (e) => {
+	let t = !1, n = () => {
+		t || (t = !0, clearTimeout(r), e.exit());
+	}, r = setTimeout(n, e.deadlineMs);
+	r.unref?.(), Promise.all(e.hooks.map((e) => Promise.resolve().then(e).then(() => void 0, () => void 0))).then(() => Promise.all(e.fibers.map((e) => P.runPromise(tt.interrupt(e)).then(() => void 0, () => void 0)))).then(n, n);
+}, $i = () => {
+	if (Yi) return;
+	Yi = !0;
 	let e = () => {
-		let e = [...Ki];
-		Ki.clear(), Promise.all(e.map((e) => F.runPromise(et.interrupt(e)).then(() => void 0, () => void 0))).then(() => process.exit(0), () => process.exit(0));
+		let e = [...qi], t = [...Ji];
+		qi.clear(), Ji.clear(), Qi({
+			fibers: e,
+			hooks: t,
+			deadlineMs: Zi,
+			exit: () => process.exit(0)
+		});
 	};
 	process.once("SIGINT", e), process.once("SIGTERM", e);
-}, Yi = (e, t = 1e4) => new Promise((n, r) => {
+}, ea = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2839,13 +2852,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Xi = () => {
+}), ta = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Zi = () => {
+}, na = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, Qi = async () => {
+}, ra = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2860,7 +2873,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, $i = (e, t, n) => {
+}, ia = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2883,23 +2896,23 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, ea = async (e = {}) => {
-	let t = e.mode ?? Xi(), n = e.metricsMode ?? Zi(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, aa = async (e = {}) => {
+	let t = e.mode ?? ta(), n = e.metricsMode ?? na(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
-		layer: I.empty,
+		layer: F.empty,
 		mode: t,
 		bufferOnly: !1,
 		inMemoryExporter: void 0,
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await Qi(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await ra(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = $i(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = ia(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2917,18 +2930,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, ta = {
-	[Tt.INTERNAL]: "internal",
-	[Tt.SERVER]: "server",
-	[Tt.CLIENT]: "client",
-	[Tt.PRODUCER]: "producer",
-	[Tt.CONSUMER]: "consumer"
-}, na = (e) => e[0] * 1e3 + e[1] / 1e6, ra = 512, ia = 48, aa = (e) => {
+}, oa = {
+	[Et.INTERNAL]: "internal",
+	[Et.SERVER]: "server",
+	[Et.CLIENT]: "client",
+	[Et.PRODUCER]: "producer",
+	[Et.CONSUMER]: "consumer"
+}, sa = (e) => e[0] * 1e3 + e[1] / 1e6, ca = 512, la = 48, ua = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= ia) break;
+		if (n >= la) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > ra ? `${i.slice(0, ra)}…` : i;
+		if (typeof i == "string") t[r] = i.length > ca ? `${i.slice(0, ca)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2937,49 +2950,49 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > ra ? `${e.slice(0, ra)}…` : e;
+			t[r] = e.length > ca ? `${e.slice(0, ca)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, oa = {
-	[Et.UNSET]: "unset",
-	[Et.OK]: "ok",
-	[Et.ERROR]: "error"
-}, sa = (e) => {
+}, da = {
+	[Dt.UNSET]: "unset",
+	[Dt.OK]: "ok",
+	[Dt.ERROR]: "error"
+}, fa = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: na(e.time),
-		...e.attributes ? { attributes: aa(e.attributes) } : {}
+		tsMs: sa(e.time),
+		...e.attributes ? { attributes: ua(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: ta[e.kind] ?? "internal",
-		attributes: aa(e.attributes),
-		startMs: na(e.startTime),
-		endMs: na(e.endTime),
-		durationMs: na(e.duration),
-		status: oa[e.status.code] ?? "unset",
+		kind: oa[e.kind] ?? "internal",
+		attributes: ua(e.attributes),
+		startMs: sa(e.startTime),
+		endMs: sa(e.endTime),
+		durationMs: sa(e.duration),
+		status: da[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, ca = (e) => ({
+}, pa = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(sa(t));
+			e(fa(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), la = { get: (e) => Promise.resolve(process.env[e]) }, ua = la, da = (e) => {
-	ua = e;
-}, fa = () => {
-	ua = la;
-}, pa = async (e) => await ua.get(e) ?? process.env[e], ma = (e) => process.env[e], ha = (e, t = 6e4, n = () => Date.now()) => {
+}), ma = { get: (e) => Promise.resolve(process.env[e]) }, ha = ma, ga = (e) => {
+	ha = e;
+}, _a = () => {
+	ha = ma;
+}, va = async (e) => await ha.get(e) ?? process.env[e], ya = (e) => process.env[e], ba = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2990,12 +3003,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, ga = (e) => {
+}, xa = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return ha({ get: async (n) => {
+	if (e.perKey) return ba({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -3006,34 +3019,34 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, _a = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? la : e.kind === "custom" ? e.backend : e.kind === "http" ? ga(e) : la, va = "_voltro_idempotency", ya = (e) => {
+}, Sa = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ma : e.kind === "custom" ? e.backend : e.kind === "http" ? xa(e) : ma, Ca = "_voltro_idempotency", wa = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, ba = (e) => ({
+}, Ta = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: ya(e.response),
+	response: wa(e.response),
 	createdAt: qe(e.createdAt)
-}), xa = async (e, n, r) => (await e.query({
-	table: va,
+}), Ea = async (e, n, r) => (await e.query({
+	table: Ca,
 	predicate: t(d("scope", n), d("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Sa = (e) => ({
+}))[0] ?? null, Da = (e) => ({
 	get: async (t, n) => {
-		let r = await xa(e, t, n);
-		return r ? ba(r) : null;
+		let r = await Ea(e, t, n);
+		return r ? Ta(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = p({
 				kind: "typeid",
 				prefix: "idem"
-			}, va), o = await e.insertIgnore(va, {
+			}, Ca), o = await e.insertIgnore(Ca, {
 				id: a,
 				scope: t,
 				key: n,
@@ -3042,11 +3055,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - qe(o.createdAt) < i) return ba(o);
-			await e.delete(va, o.id);
+			if (r - qe(o.createdAt) < i) return Ta(o);
+			await e.delete(Ca, o.id);
 		}
-		let a = await xa(e, t, n);
-		return a ? ba(a) : {
+		let a = await Ea(e, t, n);
+		return a ? Ta(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -3055,36 +3068,36 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await xa(e, t, n);
-		a && await e.update(va, a.id, {
+		let a = await Ea(e, t, n);
+		a && await e.update(Ca, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await xa(e, t, n);
-		r && await e.delete(va, r.id);
+		let r = await Ea(e, t, n);
+		r && await e.delete(Ca, r.id);
 	}
-}), J = "_voltro_kv", Ca = (e) => {
+}), J = "_voltro_kv", Oa = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, wa = (e, t) => {
-	let n = Ca(e.expiresAt);
+}, ka = (e, t) => {
+	let n = Oa(e.expiresAt);
 	return n !== null && n <= t;
-}, Ta = (e) => e === null ? null : JSON.parse(e), Ea = async (e, t) => (await e.query({
+}, Aa = (e) => e === null ? null : JSON.parse(e), ja = async (e, t) => (await e.query({
 	table: J,
 	predicate: d("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Da = (e) => {
-	let n = (e, t, n) => F.tryPromise({
+}))[0] ?? null, Ma = (e) => {
+	let n = (e, t, n) => P.tryPromise({
 		try: n,
-		catch: (n) => new Ot({
+		catch: (n) => new kt({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -3092,8 +3105,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await Ea(e, t);
-			return n === null ? it.none() : wa(n, Date.now()) ? (await e.delete(J, n.id), it.none()) : it.some(Ta(n.value));
+			let n = await ja(e, t);
+			return n === null ? at.none() : ka(n, Date.now()) ? (await e.delete(J, n.id), at.none()) : at.some(Aa(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = p({
@@ -3116,14 +3129,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await Ea(e, t);
+			let n = await ja(e, t);
 			if (n === null) return !1;
-			let r = !wa(n, Date.now());
+			let r = !ka(n, Date.now());
 			return await e.delete(J, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await Ea(e, t);
-			return n === null ? !1 : wa(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
+			let n = await ja(e, t);
+			return n === null ? !1 : ka(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
 			let n = Date.now(), i = ie(C("expiresAt"), g("expiresAt", new Date(n))), a = r === "" ? i : t(s("key", r), i), o = await e.query({
@@ -3134,7 +3147,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of o) wa(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of o) ka(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
@@ -3144,11 +3157,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			} });
 		})
 	};
-}, Oa = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? Mt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(I.provide(At)) : r === "memory" ? jt() : I.succeed(kt, kt.of(Da(e))), a = tt.make(Dt.Default.pipe(I.provide(i))), o = await a.runPromise(Dt);
+}, Na = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? Nt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(F.provide(jt)) : r === "memory" ? Mt() : F.succeed(At, At.of(Ma(e))), a = nt.make(Ot.Default.pipe(F.provide(i))), o = await a.runPromise(Ot);
 	return {
 		kv: {
-			get: (e) => a.runPromise(o.get(e)).then((e) => it.getOrUndefined(e)),
+			get: (e) => a.runPromise(o.get(e)).then((e) => at.getOrUndefined(e)),
 			getOrElse: (e, t) => a.runPromise(o.getOrElse(e, t)),
 			set: (e, t, n) => a.runPromise(o.set(e, t, n)),
 			delete: (e) => a.runPromise(o.delete(e)),
@@ -3160,7 +3173,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, ka = {
+}, Pa = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -3168,7 +3181,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, Aa = "_voltro_api_keys", ja = (e) => ye("sha256").update(e, "utf8").digest("hex"), Ma = (e = "voltro_") => `${e}${be(30).toString("base64url")}`, Na = (e) => ({
+}, Fa = "_voltro_api_keys", Ia = (e) => ye("sha256").update(e, "utf8").digest("hex"), La = (e = "voltro_") => `${e}${be(30).toString("base64url")}`, Ra = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -3181,18 +3194,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	createdBy: e.createdBy ?? null,
 	onBehalfOf: e.onBehalfOf ?? null,
 	...e.metadata == null ? {} : { metadata: e.metadata }
-}), Pa = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Fa = (e, t = {}) => {
+}), za = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ba = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = t.usage, i = async (t) => {
-		let r = Ma(n), i = p({
+		let r = La(n), i = p({
 			kind: "typeid",
 			prefix: "apikey"
-		}, Aa), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, Fa), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
 			onBehalfOf: t.onBehalfOf ?? null,
-			hashedKey: ja(r),
+			hashedKey: Ia(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -3211,7 +3224,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		};
 	}, a = async (t, n = Date.now()) => {
 		let i = await e.findByHash(t);
-		return !i || !Pa(i, n) ? null : (r === void 0 ? await e.patch(i.id, { lastUsedAt: n }) : r.touch(i.id, n), {
+		return !i || !za(i, n) ? null : (r === void 0 ? await e.patch(i.id, { lastUsedAt: n }) : r.touch(i.id, n), {
 			id: i.id,
 			tenantId: i.tenantId ?? "",
 			createdBy: i.createdBy ?? null,
@@ -3223,7 +3236,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	return {
 		issue: i,
 		resolveByHash: a,
-		verify: (e, t) => a(ja(e), t),
+		verify: (e, t) => a(Ia(e), t),
 		revoke: async (t, n, r = Date.now()) => {
 			let i = await e.findById(t);
 			return !i || (i.tenantId ?? null) !== n ? !1 : (await e.patch(t, { revokedAt: r }), !0);
@@ -3239,9 +3252,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				...a.metadata == null ? {} : { metadata: a.metadata }
 			}));
 		},
-		list: async (t) => (await e.listByTenant(t)).map(Na)
+		list: async (t) => (await e.listByTenant(t)).map(Ra)
 	};
-}, Ia = () => {
+}, Va = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -3258,21 +3271,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		}
 	};
-}, La = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ra = (e) => ({
+}, Ha = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ua = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: La(e.lastUsedAt),
-	expiresAt: La(e.expiresAt),
-	revokedAt: La(e.revokedAt),
+	lastUsedAt: Ha(e.lastUsedAt),
+	expiresAt: Ha(e.expiresAt),
+	revokedAt: Ha(e.revokedAt),
 	createdBy: e.createdBy ?? null,
 	onBehalfOf: e.onBehalfOf ?? null,
-	createdAt: La(e.createdAt) ?? 0,
+	createdAt: Ha(e.createdAt) ?? 0,
 	...e.metadata == null ? {} : { metadata: e.metadata }
-}), za = (e) => async (t, n) => {
+}), Wa = (e) => async (t, n) => {
 	let r = await e.findById(t);
 	if (r === null) return;
 	let i = r.requestCount ?? 0, a = r.lastUsedAt ?? 0;
@@ -3280,9 +3293,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		requestCount: i + n.requests,
 		lastUsedAt: Math.max(a, n.lastUsedAt)
 	});
-}, Ba = (e) => {
+}, Ga = (e) => {
 	let t = async (t) => await e.query({
-		table: Aa,
+		table: Fa,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -3300,74 +3313,74 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(Aa, n(t));
+			await e.insert(Fa, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(d("hashedKey", e));
-			return n[0] ? Ra(n[0]) : null;
+			return n[0] ? Ua(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(d("id", e));
-			return n[0] ? Ra(n[0]) : null;
+			return n[0] ? Ua(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : d("tenantId", e))).map(Ra).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : d("tenantId", e))).map(Ua).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(Aa, t, n(r));
+			await e.update(Fa, t, n(r));
 		}
 	};
-}, Va = (e, t = {}) => Nt({
+}, Ka = (e, t = {}) => Pt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), Ha = (e) => {
+}), qa = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null,
 		scopes: t.scopes ?? []
 	};
-}, Ua = (e, t = "/v1/api-keys") => {
-	let n = z.Struct({
-		id: z.String,
-		name: z.String,
-		keyPrefix: z.String,
-		tenantId: z.NullOr(z.String),
-		scopes: z.Array(z.String),
-		lastUsedAt: z.NullOr(z.Number),
-		expiresAt: z.NullOr(z.Number),
-		revokedAt: z.NullOr(z.Number),
-		createdAt: z.Number,
-		createdBy: z.NullOr(z.String),
-		onBehalfOf: z.NullOr(z.String),
-		metadata: z.optional(z.NullOr(z.Record({
-			key: z.String,
-			value: z.Unknown
+}, Ja = (e, t = "/v1/api-keys") => {
+	let n = R.Struct({
+		id: R.String,
+		name: R.String,
+		keyPrefix: R.String,
+		tenantId: R.NullOr(R.String),
+		scopes: R.Array(R.String),
+		lastUsedAt: R.NullOr(R.Number),
+		expiresAt: R.NullOr(R.Number),
+		revokedAt: R.NullOr(R.Number),
+		createdAt: R.Number,
+		createdBy: R.NullOr(R.String),
+		onBehalfOf: R.NullOr(R.String),
+		metadata: R.optional(R.NullOr(R.Record({
+			key: R.String,
+			value: R.Unknown
 		})))
 	});
 	return [
-		vt({
+		yt({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [bt([
+			guards: [xt([
 				we,
 				De,
 				Te,
 				Ee
 			])],
-			input: z.Struct({ body: z.Struct({
-				name: z.String,
-				scopes: z.optional(z.Array(z.String)),
-				expiresInDays: z.optional(z.Number),
-				onBehalfOf: z.optional(z.NullOr(z.String))
+			input: R.Struct({ body: R.Struct({
+				name: R.String,
+				scopes: R.optional(R.Array(R.String)),
+				expiresInDays: R.optional(R.Number),
+				onBehalfOf: R.optional(R.NullOr(R.String))
 			}) }),
-			output: z.Struct({
-				id: z.String,
-				token: z.String,
-				keyPrefix: z.String
+			output: R.Struct({
+				id: R.String,
+				token: R.String,
+				keyPrefix: R.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = Ha(n), a = new Set(i.scopes), o = (e) => a.has(we) || a.has(e), s = r.onBehalfOf === void 0 ? i.id : r.onBehalfOf;
+				let r = t.body, i = qa(n), a = new Set(i.scopes), o = (e) => a.has(we) || a.has(e), s = r.onBehalfOf === void 0 ? i.id : r.onBehalfOf;
 				if (s === null) {
 					if (!o(Te)) throw new Me({
 						required: Te,
@@ -3405,58 +3418,58 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				};
 			}
 		}),
-		vt({
+		yt({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [xt(we)],
-			input: z.Struct({}),
-			output: z.Struct({ keys: z.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(Ha(n).tenantId)] })
+			guards: [St(we)],
+			input: R.Struct({}),
+			output: R.Struct({ keys: R.Array(n) }),
+			handler: async (t, n) => ({ keys: [...await e.list(qa(n).tenantId)] })
 		}),
-		vt({
+		yt({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [xt(we)],
-			input: z.Struct({ body: z.Struct({ id: z.String }) }),
-			output: z.Struct({ ok: z.Boolean }),
-			handler: async (t, n) => ({ ok: await e.revoke(t.body.id, Ha(n).tenantId) })
+			guards: [St(we)],
+			input: R.Struct({ body: R.Struct({ id: R.String }) }),
+			output: R.Struct({ ok: R.Boolean }),
+			handler: async (t, n) => ({ ok: await e.revoke(t.body.id, qa(n).tenantId) })
 		})
 	];
-}, Wa = {
+}, Ya = {
 	type: "anonymous",
 	id: null,
 	tenantId: null
-}, Ga = class extends Ye.Tag("@voltro/EffectStore")() {}, Ka = (e, t) => (n) => n instanceof ei ? n : new ti({
+}, Xa = class extends Ye.Tag("@voltro/EffectStore")() {}, Za = (e, t) => (n) => n instanceof ei ? n : new ti({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), qa = (e, t, n) => F.tryPromise({
+}), Qa = (e, t, n) => P.tryPromise({
 	try: n,
-	catch: Ka(e, t)
-}), Ja = (e) => I.succeed(Ga, {
-	query: ((t) => qa("query", t.table, () => e.query(t))),
-	insert: (t, n) => qa("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => qa("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => qa("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => qa("hardDelete", t, () => e.hardDelete(t, n))
-}), Ya = (e) => ht.make(e.name, {
+	catch: Za(e, t)
+}), $a = (e) => F.succeed(Xa, {
+	query: ((t) => Qa("query", t.table, () => e.query(t))),
+	insert: (t, n) => Qa("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => Qa("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => Qa("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => Qa("hardDelete", t, () => e.hardDelete(t, n))
+}), eo = (e) => gt.make(e.name, {
 	payload: e.payloadSchema,
 	success: Le,
 	error: e.errorSchema
-}), Xa = (e, t) => ({
+}), to = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), Za = Xa, Qa = (e) => {
+}), no = to, ro = (e) => {
 	let t = N.failureOption(e), n = t._tag === "Some" ? t.value : N.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, $a = (e, t, n) => {
+}, io = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -3471,7 +3484,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	};
 	if (typeof n == "object" && n && n._tag === "Complete") {
 		let r = n.exit;
-		return $e.isSuccess(r) ? {
+		return et.isSuccess(r) ? {
 			id: t,
 			workflowName: e,
 			executionId: t,
@@ -3482,7 +3495,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: Qa(r.cause)
+			error: ro(r.cause)
 		};
 	}
 	return {
@@ -3491,7 +3504,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, eo = (e) => new Promise((t) => setTimeout(t, e)), to = class extends Error {
+}, ao = (e) => new Promise((t) => setTimeout(t, e)), oo = class extends Error {
 	workflowName;
 	missingFields;
 	detail;
@@ -3500,7 +3513,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let r = t.length > 0 ? ` missing required field(s): ${t.join(", ")}.` : "";
 		super(`Workflow "${e}" was started with an invalid payload.${r} ${n}`), this.workflowName = e, this.missingFields = t, this.detail = n, this.name = "WorkflowPayloadError";
 	}
-}, no = (e) => {
+}, so = (e) => {
 	let t = e.ast;
 	if (!Array.isArray(t.propertySignatures)) return {
 		required: [],
@@ -3511,10 +3524,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		required: n.filter((e) => !e.isOptional).map((e) => String(e.name)),
 		optional: n.filter((e) => e.isOptional).map((e) => String(e.name))
 	};
-}, ro = (e) => {
+}, co = (e) => {
 	let t = e.ast;
 	return Array.isArray(t.propertySignatures) ? t.propertySignatures.filter((e) => !e.isOptional && typeof e.name == "string").map((e) => String(e.name)) : [];
-}, io = (e) => {
+}, lo = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) {
@@ -3523,19 +3536,19 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 		return n;
 	}, r = (e, t) => {
-		let n = z.validateEither(e.payloadSchema)(t);
+		let n = R.validateEither(e.payloadSchema)(t);
 		if (n._tag === "Right") return;
-		let r = typeof t == "object" && t ? Object.keys(t) : [], i = ro(e.payloadSchema).filter((e) => !r.includes(e));
-		throw new to(e.name, i, wt.formatErrorSync(n.left));
+		let r = typeof t == "object" && t ? Object.keys(t) : [], i = co(e.payloadSchema).filter((e) => !r.includes(e));
+		throw new oo(e.name, i, Tt.formatErrorSync(n.left));
 	}, i = (e, t) => {
 		let i = n(e);
 		return r(i, t), i;
 	}, a = async (t, r) => {
 		let i = n(t);
-		return $a(t, r, await e.runEffect(i.poll(r)));
-	}, o = async () => e.runEffect(Pt()), s = async (t, n, r) => {
+		return io(t, r, await e.runEffect(i.poll(r)));
+	}, o = async () => e.runEffect(Ft()), s = async (t, n, r) => {
 		let a = i(t, n), o;
-		return r?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(n)), await e.rememberStartContext?.(t, o, r.callerContext)), r?.wait ? (await e.runEffect(a.execute(n)), Xa(t, o ?? await e.runEffect(a.executionId(n)))) : Xa(t, await e.runEffect(a.execute(n, { discard: !0 })));
+		return r?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(n)), await e.rememberStartContext?.(t, o, r.callerContext)), r?.wait ? (await e.runEffect(a.execute(n)), to(t, o ?? await e.runEffect(a.executionId(n)))) : to(t, await e.runEffect(a.execute(n, { discard: !0 })));
 	};
 	return {
 		start: s,
@@ -3573,7 +3586,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				let e = await a(r, i);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${r}' run '${i}'`);
-				await eo(c);
+				await ao(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -3611,22 +3624,22 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, ao = (e, t) => ({
+}, uo = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), Xa(n, a);
+		return t(() => e.start(n, r)), to(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), Xa(n, a);
+		return t(() => e.child(n, r, i)), to(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), oo = (e, t) => ({
+}), fo = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -3640,7 +3653,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), so = (e) => {
+}), po = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -3661,32 +3674,32 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, co = (e, t) => {
+}, mo = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? F.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(F.map((e) => Xa(r.definition.name, e)))).pipe(F.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? P.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(P.map((e) => to(r.definition.name, e)))).pipe(P.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, lo = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, ho = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
-	return (a === void 0 ? F.succeed(void 0) : F.promise(() => Promise.resolve(a))).pipe(F.flatMap((a) => {
+	return (a === void 0 ? P.succeed(void 0) : P.promise(() => Promise.resolve(a))).pipe(P.flatMap((a) => {
 		let o = {
 			...a,
-			subject: a?.subject ?? Wa,
+			subject: a?.subject ?? Ya,
 			traceId: a?.traceId ?? "workflow-bootstrap"
 		}, s = t.buildContext(o, {
 			workflowName: e.definition.name,
 			executionId: i,
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
-		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = I.succeed(Ne, o.subject), d = s?.store, f = d === void 0 ? l : F.provide(l, Ja(d));
-		return F.provide(f, u);
+		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = F.succeed(Ne, o.subject), d = s?.store, f = d === void 0 ? l : P.provide(l, $a(d));
+		return P.provide(f, u);
 	}));
-}))), uo = (e) => ({
+}))), go = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), fo = uo, po = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", mo = () => {
+}), _o = go, vo = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", yo = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, ho = (e) => `${e}_${mo()}`, go = (e) => e.id ?? `${e.event}->${e.workflow}`, _o = O("_voltro_workflow_events", {
+}, bo = (e) => `${e}_${yo()}`, xo = (e) => e.id ?? `${e.event}->${e.workflow}`, So = O("_voltro_workflow_events", {
 	id: y({ prefix: "wfe" }),
 	name: k(),
 	payload: T(),
@@ -3694,7 +3707,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	subject: T().nullable(),
 	traceId: k().nullable(),
 	occurredAt: A().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]), vo = O("_voltro_workflow_event_deliveries", {
+}).index(["name"]).index(["source"]).index(["occurredAt"]), Co = O("_voltro_workflow_event_deliveries", {
 	id: y({ prefix: "wfed" }),
 	eventId: k(),
 	eventName: k(),
@@ -3712,8 +3725,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	errorMessage: k().nullable(),
 	createdAt: A().default("now"),
 	completedAt: A().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), yo = (e) => {
-	let t = e.makeId ?? ho, n = /* @__PURE__ */ new Map();
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), wo = (e) => {
+	let t = e.makeId ?? bo, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3754,7 +3767,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = go(o), l = o.workflow, u;
+			let s = xo(o), l = o.workflow, u;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -3857,10 +3870,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			triggered: m
 		};
 	} };
-}, bo = M({ scope: "voltro:outbox" }), Y = "_voltro_outbox", xo = {
+}, To = M({ scope: "voltro:outbox" }), Y = "_voltro_outbox", Eo = {
 	kind: "typeid",
 	prefix: "obx"
-}, So = O(Y, {
+}, Do = O(Y, {
 	id: y({ prefix: "obx" }),
 	effect: k(),
 	payload: T(),
@@ -3878,10 +3891,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	resendRequestedBy: k().nullable(),
 	resendReason: k().nullable(),
 	resendCount: x()
-}), Co = "_voltro_outbox_attempts", wo = {
+}), Oo = "_voltro_outbox_attempts", ko = {
 	kind: "typeid",
 	prefix: "obxa"
-}, To = O(Co, {
+}, Ao = O(Oo, {
 	id: y({ prefix: "obxa" }),
 	outboxId: k(),
 	effect: k(),
@@ -3902,11 +3915,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	subjectId: k().nullable(),
 	tenantId: k().nullable(),
 	traceId: k().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Eo = (e) => {
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), jo = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Do = 8, Oo = (e) => ({
+}, Mo = 8, No = (e) => ({
 	enqueue: async (n, r, i) => {
 		let a = (e.now ?? (() => /* @__PURE__ */ new Date()))(), o = i?.idempotencyKey;
 		if (o !== void 0) {
@@ -3921,12 +3934,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			if (n !== void 0) return n.id;
 		}
 		let s = {
-			id: p(xo, Y),
+			id: p(Eo, Y),
 			effect: n,
 			payload: r,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: i?.maxAttempts ?? Do,
+			maxAttempts: i?.maxAttempts ?? Mo,
 			nextAttemptAt: new Date(a.getTime() + (i?.delayMs ?? 0)),
 			idempotencyKey: o ?? null,
 			lastError: null,
@@ -3973,7 +3986,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), ko = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Ao = 50, jo = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Mo = (e) => {
+}), Po = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Fo = 50, Io = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Lo = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -3983,13 +3996,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: jo(n, 8192)
+		preview: Io(n, 8192)
 	} : t;
-}, No = async (e, t, n) => {
+}, Ro = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(Co, {
-			id: p(wo, Co),
+		await e.insert(Oo, {
+			id: p(ko, Oo),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -4000,14 +4013,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : jo(t.error, 4e3),
-			response: Mo(t.response),
+			error: t.error === null ? null : Io(t.error, 4e3),
+			response: Lo(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		bo.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		To.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -4015,7 +4028,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: Co,
+			table: Oo,
 			predicate: d("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -4025,11 +4038,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Co, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Oo, r.id);
 	} catch (e) {
-		bo.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		To.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, Po = async (e) => {
+}, zo = async (e) => {
 	let n = (e.now ?? (() => /* @__PURE__ */ new Date()))(), r = await e.store.query({
 		table: Y,
 		predicate: t(d("status", "pending"), te("nextAttemptAt", n)),
@@ -4047,7 +4060,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			s++;
 			continue;
 		}
-		let u = t.attempts + 1, d = t.maxAttempts ?? Do, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = t.attempts + 1, d = t.maxAttempts ?? Mo, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let n = await l.handler({
 				payload: t.payload ?? {},
@@ -4056,7 +4069,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
 			});
-			await No(e.store, {
+			await Ro(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: "delivered",
@@ -4074,7 +4087,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			}), i++;
 		} catch (i) {
 			let s = i instanceof Error ? i.message : String(i), l = u >= d;
-			await No(e.store, {
+			await Ro(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -4086,20 +4099,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: s,
-				nextAttemptAt: new Date(n.getTime() + ko(u)),
+				nextAttemptAt: new Date(n.getTime() + Po(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (o++, bo.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (o++, To.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, i)) : (a++, bo.warn("outbox delivery failed; will retry", {
+			}, i)) : (a++, To.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: ko(u)
+				retryInMs: Po(u)
 			}));
 		}
 	}
@@ -4109,10 +4122,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		dead: o,
 		skipped: s
 	};
-}, Fo = M({ scope: "voltro:connections" }), X = "_voltro_connections", Io = {
+}, Bo = M({ scope: "voltro:connections" }), X = "_voltro_connections", Vo = {
 	kind: "typeid",
 	prefix: "conn"
-}, Lo = O(X, {
+}, Ho = O(X, {
 	id: y({ prefix: "conn" }),
 	connectionId: k(),
 	subjectId: k(),
@@ -4135,10 +4148,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	metadata: T().nullable(),
 	connectedAt: A(),
 	updatedAt: A()
-}).unique("byConnectionSubject", ["connectionId", "subjectId"]).index(["subjectId"]), Ro = "_voltro_connection_grants", zo = {
+}).unique("byConnectionSubject", ["connectionId", "subjectId"]).index(["subjectId"]), Uo = "_voltro_connection_grants", Wo = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Bo = O(Ro, {
+}, Go = O(Uo, {
 	id: y({ prefix: "cgrant" }),
 	state: k().unique(),
 	connectionId: k(),
@@ -4148,8 +4161,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	redirectTo: k(),
 	createdAt: A(),
 	expiresAt: A()
-}).index(["expiresAt"]), Vo = /^[a-z][a-z0-9-]*$/, Ho = (e) => {
-	if (!Vo.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+}).index(["expiresAt"]), Ko = /^[a-z][a-z0-9-]*$/, qo = (e) => {
+	if (!Ko.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of [
 			"authorizeUrl",
@@ -4159,9 +4172,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 	}
 	return e;
-}, Uo = (e) => e.label ?? e.id, Wo = (e) => {
+}, Jo = (e) => e.label ?? e.id, Yo = (e) => {
 	if (e.length !== 0 && q() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, Go = (e) => {
+}, Xo = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -4171,14 +4184,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, Ko = (e) => {
+}, Zo = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, qo = (e) => Ko(e)?.toISOString() ?? null, Jo = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Yo = (e, t) => t === void 0 ? {
+}, Qo = (e) => Zo(e)?.toISOString() ?? null, $o = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), es = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Uo(e),
+	label: Jo(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -4189,24 +4202,24 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Uo(e),
+	label: Jo(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: Jo(t.scopes),
-	expiresAt: qo(t.expiresAt),
+	scopes: $o(t.scopes),
+	expiresAt: Qo(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: qo(t.connectedAt)
-}, Xo = async (e, n, r) => (await e.query({
+	connectedAt: Qo(t.connectedAt)
+}, ts = async (e, n, r) => (await e.query({
 	table: X,
 	predicate: t(d("connectionId", n), d("subjectId", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], Zo = async (e) => {
+}))[0], ns = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: p(Io, X),
+		id: p(Vo, X),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -4224,8 +4237,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return Qo(e.store, r);
-}, Qo = (e, t) => e.upsert(X, t, {
+	return rs(e.store, r);
+}, rs = (e, t) => e.upsert(X, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -4241,10 +4254,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), $o = async (e, t, n) => {
-	let r = await Xo(e, t, n);
+}), is = async (e, t, n) => {
+	let r = await ts(e, t, n);
 	return r !== void 0 && e.delete(X, r.id);
-}, es = async (e, t, n) => {
+}, as = async (e, t, n) => {
 	let r = await e.query({
 		table: X,
 		predicate: d("subjectId", n),
@@ -4253,9 +4266,9 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => Yo(e, i.get(e.id)));
-}, ts = (e, t) => globalThis.fetch(e, t), ns = async (e, t, n) => {
-	let r = e.fetchImpl ?? ts, i, a;
+	return t.list().map((e) => es(e, i.get(e.id)));
+}, os = (e, t) => globalThis.fetch(e, t), ss = async (e, t, n) => {
+	let r = e.fetchImpl ?? os, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -4295,62 +4308,62 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, rs = (e, t, n = Date.now) => ns(e, {
+}, cs = (e, t, n = Date.now) => ss(e, {
 	grant_type: "authorization_code",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), is = (e, t, n = Date.now) => ns(e, {
+}, n), ls = (e, t, n = Date.now) => ss(e, {
 	grant_type: "refresh_token",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	refresh_token: t
-}, n), as = 6e4, os = 3e4, ss = class extends Error {
+}, n), us = 6e4, ds = 3e4, fs = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, cs = (e) => new Promise((t) => {
+}, ps = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), ls = /* @__PURE__ */ new Map(), us = (e, t) => `${e}\u0000${t}`, ds = () => {
-	ls.clear();
-}, fs = (e, t) => ({
+}), ms = /* @__PURE__ */ new Map(), hs = (e, t) => `${e}\u0000${t}`, gs = () => {
+	ms.clear();
+}, _s = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
 	accessToken: Mr(String(t.accessToken)),
-	expiresAt: Ko(t.expiresAt),
-	scopes: Jo(t.scopes),
+	expiresAt: Zo(t.expiresAt),
+	scopes: $o(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), ps = (e, t, n) => {
-	let r = Ko(e.expiresAt);
+}), vs = (e, t, n) => {
+	let r = Zo(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, ms = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Xo(n, r.id, i);
-	if (a === void 0) throw new ss(r.id, i);
-	if (r.kind === "pat" || !ps(a, r.refreshSkewMs ?? 6e4, t())) return fs(r, a);
-	let o = us(r.id, i), s = ls.get(o);
+}, ys = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await ts(n, r.id, i);
+	if (a === void 0) throw new fs(r.id, i);
+	if (r.kind === "pat" || !vs(a, r.refreshSkewMs ?? 6e4, t())) return _s(r, a);
+	let o = hs(r.id, i), s = ms.get(o);
 	if (s !== void 0) return s;
-	let c = hs({
+	let c = bs({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		ls.delete(o);
+		ms.delete(o);
 	});
-	return ls.set(o, c), c;
-}, hs = async (e) => {
-	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? cs, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
+	return ms.set(o, c), c;
+}, bs = async (e) => {
+	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? ps, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
 	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(d("id", c), te("refreshLockedUntil", new Date(i()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await o(200);
-			let e = await Xo(n, a.id, r);
-			if (e === void 0) throw new ss(a.id, r);
-			if (!ps(e, s, i())) return fs(a, e);
+			let e = await ts(n, a.id, r);
+			if (e === void 0) throw new fs(a.id, r);
+			if (!vs(e, s, i())) return _s(a, e);
 		}
 		throw new j({
 			connectionId: a.id,
@@ -4371,7 +4384,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	});
 	let u;
 	try {
-		u = await is(a, Mr(String(l)), i);
+		u = await ls(a, Mr(String(l)), i);
 	} catch (e) {
 		let t = e instanceof j ? e : new j({
 			connectionId: a.id,
@@ -4388,7 +4401,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Fo.warn("connection refresh failed", {
+		}), Bo.warn("connection refresh failed", {
 			connectionId: a.id,
 			transient: t.transient,
 			reason: t.reason
@@ -4404,32 +4417,32 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
 	};
-	return fs(a, await n.update(X, c, f) ?? {
+	return _s(a, await n.update(X, c, f) ?? {
 		...e.row,
 		...f
 	});
-}, gs = (e = 32) => {
+}, xs = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, _s = (e) => {
+}, Ss = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, vs = async (e) => {
+}, Cs = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return _s(new Uint8Array(t));
-}, ys = 10 * 6e4, bs = (e) => `/_voltro/connections/${e}/callback`, xs = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, Ss = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${bs(e.id)}`, Cs = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = gs(), i = n.pkce === !1 ? null : gs(48), a = Ss(n, e.publicUrl);
-	await e.store.insert(Ro, {
-		id: p(zo, Ro),
+	return Ss(new Uint8Array(t));
+}, ws = 10 * 6e4, Ts = (e) => `/_voltro/connections/${e}/callback`, Es = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, Ds = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${Ts(e.id)}`, Os = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = xs(), i = n.pkce === !1 ? null : xs(48), a = Ds(n, e.publicUrl);
+	await e.store.insert(Uo, {
+		id: p(Wo, Uo),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		codeVerifier: i === null ? null : jr(i),
-		redirectTo: xs(e.redirectTo),
+		redirectTo: Es(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + ys)
+		expiresAt: new Date(t.getTime() + ws)
 	});
 	let o = new URLSearchParams({
 		response_type: "code",
@@ -4439,15 +4452,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (o.set("code_challenge", await vs(i)), o.set("code_challenge_method", "S256"));
+	i !== null && (o.set("code_challenge", await Cs(i)), o.set("code_challenge_method", "S256"));
 	let s = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${s}${o.toString()}`,
 		state: r
 	};
-}, ws = async (e) => {
+}, ks = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: Ro,
+		table: Uo,
 		predicate: d("state", e.state),
 		order: [],
 		take: 1,
@@ -4459,8 +4472,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(Ro, n.id);
-	let r = String(n.connectionId), i = Ko(n.expiresAt);
+	await e.store.delete(Uo, n.id);
+	let r = String(n.connectionId), i = Zo(n.expiresAt);
 	if (i !== null && i.getTime() < t.getTime()) throw new j({
 		connectionId: r,
 		reason: "handshake expired — start again",
@@ -4472,17 +4485,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : Mr(String(n.codeVerifier)), s = await rs(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : Mr(String(n.codeVerifier)), s = await cs(a, {
 		code: e.code,
-		redirectUri: Ss(a, e.publicUrl),
+		redirectUri: Ds(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Fo.warn("connection identify failed; storing without account details", {
+		Bo.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await Zo({
+	return await ns({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -4492,11 +4505,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: xs(String(n.redirectTo ?? "/"))
+		redirectTo: Es(String(n.redirectTo ?? "/"))
 	};
-}, Ts = async (e, t = /* @__PURE__ */ new Date()) => {
+}, As = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: Ro,
+		table: Uo,
 		predicate: te("expiresAt", t),
 		order: [],
 		take: void 0,
@@ -4505,27 +4518,27 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, Es, Ds = (e) => {
-	Es = e;
-}, Os = () => Es, ks = (e, t) => {
-	let n = Es;
+}, js, Ms = (e) => {
+	js = e;
+}, Ns = () => js, Ps = (e, t) => {
+	let n = js;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, As = (e) => async (t, n) => {
+}, Fs = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new ss(n, "<anonymous>");
-	return ms({
+	if (i === null || i === "") throw new fs(n, "<anonymous>");
+	return ys({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, js = (e) => {
+}, Is = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new ss(n, "<anonymous>");
-		return ms({
+		if (t === null || t === "") throw new fs(n, "<anonymous>");
+		return ys({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -4537,7 +4550,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof ss) return null;
+				if (e instanceof fs) return null;
 				throw e;
 			}
 		},
@@ -4552,17 +4565,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : es(e.store, e.registry, t)
+		})) : as(e.store, e.registry, t)
 	};
-}, Ms = (e, t) => {
+}, Ls = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
 	if (n === null || n === "") throw new je({ connectionId: t });
 	return n;
-}, Ns = (e, t) => {
+}, Rs = (e, t) => {
 	let n = e.registry.get(t);
 	if (n === void 0) throw new Ae({ connectionId: t });
 	return n;
-}, Ps = (e) => async (t, n) => {
+}, zs = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -4575,15 +4588,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : es(n.store, e.registry, r);
-}, Fs = (e) => async (t, n) => {
-	let r = Ns(e, t.connectionId), i = Ms(n, t.connectionId);
+	})) : as(n.store, e.registry, r);
+}, Bs = (e) => async (t, n) => {
+	let r = Rs(e, t.connectionId), i = Ls(n, t.connectionId);
 	if (r.kind !== "oauth2") throw new ke({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return Cs({
+	return Os({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -4591,8 +4604,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Is = (e) => async (t, n) => {
-	let r = Ns(e, t.connectionId), i = Ms(n, t.connectionId);
+}, Vs = (e) => async (t, n) => {
+	let r = Rs(e, t.connectionId), i = Ls(n, t.connectionId);
 	if (r.kind !== "pat") throw new ke({
 		connectionId: t.connectionId,
 		expected: "pat",
@@ -4614,7 +4627,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			transient: !1
 		});
 	}
-	return await Zo({
+	return await ns({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -4625,20 +4638,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, Ls = (e) => async (t, n) => {
-	Ns(e, t.connectionId);
-	let r = Ms(n, t.connectionId);
-	return { ok: await $o(n.store, t.connectionId, r) };
-}, Rs = "admin:full", zs = class extends z.TaggedError()("AccessDenied", {
-	action: z.String,
-	resourceType: z.String,
-	resourceId: z.String
-}) {}, Bs = /* @__PURE__ */ new Map(), Vs = (e) => {
+}, Hs = (e) => async (t, n) => {
+	Rs(e, t.connectionId);
+	let r = Ls(n, t.connectionId);
+	return { ok: await is(n.store, t.connectionId, r) };
+}, Us = "admin:full", Ws = class extends R.TaggedError()("AccessDenied", {
+	action: R.String,
+	resourceType: R.String,
+	resourceId: R.String
+}) {}, Gs = /* @__PURE__ */ new Map(), Ks = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (Bs.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return Bs.set(e.resourceType, e), e;
-}, Hs = (e) => Bs.get(e), Us = () => [...Bs.values()], Ws = () => Bs.clear(), Gs = () => Us().map((e) => {
+	if (Gs.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Gs.set(e.resourceType, e), e;
+}, qs = (e) => Gs.get(e), Js = () => [...Gs.values()], Ys = () => Gs.clear(), Xs = () => Js().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -4651,7 +4664,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Ks = (e, t) => {
+}), Zs = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -4660,52 +4673,55 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, qs = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Ks(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Js = (e, t, n, r) => {
+}, Qs = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Zs(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), $s = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = qs(e, n, r.tuples, r.policy);
+	let a = Qs(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Ys = (e, t, n, r) => {
-	if (!Js(e, t, n, r)) throw new zs({
+}, ec = (e, t, n, r) => {
+	if (!$s(e, t, n, r)) throw new Ws({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Xs = (e, t, n, r, i) => r.filter((r) => Js(e, t, {
+}, tc = (e, t, n, r, i) => r.filter((r) => $s(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), Zs = (e, t) => {
+}, i)), nc = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, Qs = M({ scope: "voltro:policy" }), $s, ec = (e) => {
-	$s = e;
-}, tc = () => $s, nc = () => {
-	Ge((e) => F.gen(function* () {
-		let t = Hs(e.resourceType);
-		if (t === void 0) return Qs.warn("policy guard denied — no resource policy registered for this type", {
+}, rc = new Ct(), ic = (e) => {
+	rc.enterWith(e);
+}, ac = () => rc.getStore(), oc = (e, t) => rc.run(e, t), sc = M({ scope: "voltro:policy" }), cc, lc = (e) => {
+	cc = e;
+}, uc = () => cc, dc = () => {
+	Ge((e) => P.gen(function* () {
+		let t = qs(e.resourceType);
+		if (t === void 0) return sc.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = $s;
-		if (n === void 0) return Qs.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = cc;
+		if (n === void 0) return sc.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let r = yield* F.tryPromise({
+		let r = yield* P.tryPromise({
 			try: async () => n({
 				subjectId: e.subject.id,
 				resourceType: e.resourceType,
-				resourceId: e.resourceId
+				resourceId: e.resourceId,
+				load: ac()
 			}),
 			catch: (e) => e
-		}).pipe(F.catchAll((t) => (Qs.error("policy guard denied — tuple source failed", {
+		}).pipe(P.catchAll((t) => (sc.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
-		}, t), F.succeed([])))), i = e.subject;
-		return Js({
+		}, t), P.succeed([])))), i = e.subject;
+		return $s({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -4718,10 +4734,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			tuples: r
 		});
 	}));
-}, rc = (e) => {
+}, fc = (e) => {
 	Promise.resolve().then(e);
-}, ic = (e) => {
-	let t = e.schedule ?? rc, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}\u0000${t}`, a = async (t) => {
+}, pc = (e) => {
+	let t = e.schedule ?? fc, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}\u0000${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -4767,23 +4783,23 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, ac = I.effect(lt.HttpClient, F.map(lt.HttpClient, (e) => e.pipe(lt.mapRequestEffect((e) => F.currentSpan.pipe(F.map((t) => e.headers.traceparent === void 0 ? ut.setHeader(e, "traceparent", yr({
+}, mc = F.effect(ut.HttpClient, P.map(ut.HttpClient, (e) => e.pipe(ut.mapRequestEffect((e) => P.currentSpan.pipe(P.map((t) => e.headers.traceparent === void 0 ? dt.setHeader(e, "traceparent", yr({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), F.catchAll(() => F.succeed(e))))))), oc = class extends Error {
+})) : e), P.catchAll(() => P.succeed(e))))))), hc = class extends Error {
 	url;
 	reason;
 	_tag = "SsrfBlockedError";
 	constructor(e, t) {
 		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
 	}
-}, sc = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, cc = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), lc = (e, t, n) => n.some((n) => {
+}, gc = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, _c = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), vc = (e, t, n) => n.some((n) => {
 	let r = n.trim().toLowerCase();
 	if (r === "") return !1;
 	let i = t === "" ? e : `${e}:${t}`;
 	return r === e || r === i ? !0 : r.startsWith("*.") ? e.endsWith(r.slice(1)) : !1;
-}), uc = (e, t = {}) => {
+}), yc = (e, t = {}) => {
 	let n;
 	try {
 		n = new URL(e);
@@ -4792,25 +4808,25 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	if (n.protocol !== "http:" && n.protocol !== "https:") return `blocked scheme "${n.protocol}"`;
 	let r = n.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-	if (lc(r, n.port, t.allowHosts ?? [])) return null;
+	if (vc(r, n.port, t.allowHosts ?? [])) return null;
 	if (r === "localhost" || r.endsWith(".localhost") || r.endsWith(".internal") || r.endsWith(".local")) return `blocked host "${r}"`;
 	let i = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(r);
 	if (i) {
 		let e = Number(i[1]), t = Number(i[2]);
-		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : sc(e, t) ? `blocked private/reserved address ${r}` : null;
+		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : gc(e, t) ? `blocked private/reserved address ${r}` : null;
 	}
 	if (r.includes(":")) {
 		let e = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(r);
-		return e ? uc(`${n.protocol}//${e[1]}`, t) : cc(r) ? `blocked private/reserved address ${r}` : null;
+		return e ? yc(`${n.protocol}//${e[1]}`, t) : _c(r) ? `blocked private/reserved address ${r}` : null;
 	}
 	return null;
-}, dc = (e = {}) => I.effect(lt.HttpClient, F.map(lt.HttpClient, (t) => {
-	let n = lt.transform(t, (t, n) => F.suspend(() => {
-		let r = uc(n.url, e);
-		return r === null ? t : F.die(new oc(n.url, r));
+}, bc = (e = {}) => F.effect(ut.HttpClient, P.map(ut.HttpClient, (t) => {
+	let n = ut.transform(t, (t, n) => P.suspend(() => {
+		let r = yc(n.url, e);
+		return r === null ? t : P.die(new hc(n.url, r));
 	}));
-	return lt.followRedirects(n, e.maxRedirects ?? 5);
-})), fc = (e) => {
+	return ut.followRedirects(n, e.maxRedirects ?? 5);
+})), xc = (e) => {
 	let t = e.now ?? Date.now, n = e.intervalMs ?? 3e4, r = e.maxPending ?? 500, i = /* @__PURE__ */ new Map(), a = !1, o = async () => {
 		if (i.size === 0) return;
 		let t = i;
@@ -4839,7 +4855,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		},
 		pending: () => i.size
 	};
-}, pc = "voltro/audit", mc = "voltro/softDelete", hc = "voltro/tenant", gc = (e) => {
+}, Sc = "voltro/audit", Cc = "voltro/softDelete", wc = "voltro/tenant", Tc = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -4883,16 +4899,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? _c,
-		computedFields: (e) => t.get(e)?.computedFields ?? vc,
-		generatedColumns: (e) => t.get(e)?.generatedColumns ?? yc,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? Ec,
+		computedFields: (e) => t.get(e)?.computedFields ?? Dc,
+		generatedColumns: (e) => t.get(e)?.generatedColumns ?? Oc,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, _c = /* @__PURE__ */ new Map(), vc = /* @__PURE__ */ new Map(), yc = /* @__PURE__ */ new Set(), bc = gc([]), xc = M({ scope: "store.fieldEncryption" }), Sc = (e, t) => {
+}, Ec = /* @__PURE__ */ new Map(), Dc = /* @__PURE__ */ new Map(), Oc = /* @__PURE__ */ new Set(), kc = Tc([]), Ac = M({ scope: "store.fieldEncryption" }), jc = (e, t) => {
 	let n = t, r = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", i = /* @__PURE__ */ new Set(), a = (e) => {
 		let t = `${e.table}.${e.column}`;
-		i.has(t) || (i.add(t), xc.warn("encrypted column degraded to null — could not decrypt with the active key", {
+		i.has(t) || (i.add(t), Ac.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
 			column: e.column,
 			reason: e.reason,
@@ -4916,7 +4932,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			e.injectExternalChange(t);
 		},
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope },
-		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => Sc(e.withNamespace(n), t) },
+		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => jc(e.withNamespace(n), t) },
 		...e.raw === void 0 ? {} : { raw: ((...t) => e.raw(...t)) },
 		...e.close === void 0 ? {} : { close: (t) => e.close(t) },
 		...e.ping === void 0 ? {} : { ping: () => e.ping() },
@@ -4928,24 +4944,24 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		upsert: async (t, n, r) => d(t, await e.upsert(t, o(t, n), r)),
 		insertIgnore: async (t, n, r) => d(t, await e.insertIgnore(t, o(t, n), r)),
 		patchJson: async (t, n, r, i) => d(t, await e.patchJson(t, n, r, i)),
-		transactional: (n) => e.transactional((e) => n(Sc(e, t)))
+		transactional: (n) => e.transactional((e) => n(jc(e, t)))
 	};
-}, Cc = (e, t) => {
+}, Mc = (e, t) => {
 	if (t === void 0 || t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, wc = (e, t) => {
+}, Nc = (e, t) => {
 	let n = h(e), r = n === void 0 ? [] : fe(n);
 	return r.length === 0 ? t ?? [] : t === void 0 ? r : [...t, ...r];
-}, Tc = (e, t) => t.length === 0 ? e : e.map((e) => Cc(e, t)), Ec = (e, t, n, r, i) => {
+}, Pc = (e, t) => t.length === 0 ? e : e.map((e) => Mc(e, t)), Fc = (e, t, n, r, i) => {
 	let a = {
 		...t?.(r) ?? {},
 		...n?.(i) ?? {}
 	}, o = e;
 	for (let [e, t] of Object.entries(a)) t !== void 0 && (o = o.where(e, t));
 	return o;
-}, Dc = 1e3, Oc = (e, t = Dc) => {
+}, Ic = 1e3, Lc = (e, t = Ic) => {
 	let n = (e) => typeof e == "number" && Number.isFinite(e) ? e : void 0, r = (e) => Math.max(1, Math.min(Math.floor(e), t)), i = n(e.page);
 	if (i !== void 0) {
 		let t = r(n(e.pageSize) ?? 100);
@@ -4958,35 +4974,35 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		limit: r(n(e.limit) ?? 100),
 		offset: Math.max(0, Math.floor(n(e.offset) ?? 0))
 	};
-}, kc = {
+}, Rc = {
 	list: (e, t = {}) => async (n, r) => {
 		let i = n ?? {}, a = r.store.select(e);
 		if (t.columns !== void 0 && t.columns.length > 0) {
-			let n = new Set(wc(e, void 0)), r = t.columns.filter((e) => !n.has(e));
+			let n = new Set(Nc(e, void 0)), r = t.columns.filter((e) => !n.has(e));
 			r.length > 0 && (a = a.select(...r));
 		}
-		t.include !== void 0 && (a = a.with(t.include)), a = Ec(a, t.filter, t.scope, i, r);
+		t.include !== void 0 && (a = a.with(t.include)), a = Fc(a, t.filter, t.scope, i, r);
 		for (let e of t.sort ?? []) a = a.orderBy(e.column, e.direction ?? "asc");
 		if (t.paginate === !0) {
-			let { limit: e, offset: n } = Oc(i, t.maxPageSize);
+			let { limit: e, offset: n } = Lc(i, t.maxPageSize);
 			a = a.limit(e).offset(n);
 		}
-		return Tc(await a.all(), wc(e, t.redact));
+		return Pc(await a.all(), Nc(e, t.redact));
 	},
 	getById: (e, t = {}) => async (n, r) => {
 		let i = r.store.select(e).where("id", n.id);
 		t.include !== void 0 && (i = i.with(t.include));
 		let a = await i.first();
-		return a === null ? null : Cc(a, wc(e, t.redact));
+		return a === null ? null : Mc(a, Nc(e, t.redact));
 	},
-	create: (e, t = {}) => async (n, r) => Cc(await r.store.insert(e, n), wc(e, t.redact)),
+	create: (e, t = {}) => async (n, r) => Mc(await r.store.insert(e, n), Nc(e, t.redact)),
 	update: (e, t = {}) => async (n, r) => {
 		let { id: i, ...a } = n, o = await r.store.update(e, i, a);
-		return o === null ? null : Cc(o, wc(e, t.redact));
+		return o === null ? null : Mc(o, Nc(e, t.redact));
 	},
-	count: (e, t = {}) => async (n, r) => Ec(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
+	count: (e, t = {}) => async (n, r) => Fc(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
 	remove: (e) => async (t, n) => ({ deleted: await n.store.delete(e, t.id) })
-}, Ac = (e) => {
+}, zc = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		if (!n.has(e)) switch (n.add(e), e._tag) {
 			case "TypeLiteral":
@@ -5013,7 +5029,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	};
 	return r(e.ast), t;
-}, jc = (e) => {
+}, Bc = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		switch (e._tag) {
 			case "Literal": return e.literal === null;
@@ -5048,42 +5064,47 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	};
 	return i(e.ast), t;
-}, Mc = (e, t) => {
+}, Vc = (e, t) => {
 	let n = e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source];
 	if (n.length === 0) return [];
-	let r = Ac(e.output), i = jc(e.output), a = [];
+	let r = zc(e.output), i = Bc(e.output), a = [];
 	for (let o of n) for (let n of t.get(o) ?? []) r.has(n) && !i.has(n) && a.push({
 		query: e.name,
 		table: o,
 		column: n
 	});
 	return a;
-}, Nc = (e) => {
+}, Hc = (e) => {
 	if (e.length !== 0) return `A wire-reachable query exposes a server-only column:\n${e.map((e) => `  • query '${e.query}' output declares '${e.column}' — a .serverOnly() column of '${e.table}'`).join("\n")}\nThree ways out, in order of preference:\n  1. Omit the column from the query's output schema. The crud.* read helpers strip these automatically.\n  2. Keep the KEY but type it \`Schema.Null\` — for a view that must stay wire-compatible (an importer that breaks if the key vanishes) while never sending a value. The audit accepts that, because the schema then PROVES no value can flow instead of promising it. Pair it with a \`hasX\` boolean.\n  3. Drop the .serverOnly() marker, if the column may in fact reach a client.\nNote the audit reads the DECLARED shape, not what your handler emits: a field typed \`string\` that you always set to null still fails, and should — the next edit to that handler is one line away from sending it.`;
-}, Pc = class extends z.TaggedError()("CircuitOpen", {
-	name: z.String,
-	retryAfterMs: z.Number
-}) {}, Fc = {
+}, Uc = (e, t) => e.cache?.scope === "global" ? (e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source]).filter((e) => t.has(e)).map((t) => ({
+	query: e.name,
+	table: t
+})) : [], Wc = (e) => {
+	if (e.length !== 0) return `A cached query shares one entry across tenants:\n${e.map((e) => `  • query '${e.query}' caches scope:'global' while reading '${e.table}', a tenant()-scoped table`).join("\n")}\n\nscope:'global' stores ONE entry for every caller. On a tenant-scoped table the\nrows depend on who asked, so the first caller's rows are served to the next one.\n\nUse scope:'tenant' — one entry per org, none shared across orgs. Use 'subject'\nif the result also depends on WHICH person is asking, and 'global' only for data\nthat depends on neither.`;
+}, Gc = class extends R.TaggedError()("CircuitOpen", {
+	name: R.String,
+	retryAfterMs: R.Number
+}) {}, Kc = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, Ic = { make: (e) => F.gen(function* () {
-	let t = e.name ?? "circuit", n = Ze.toMillis(Ze.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* R.make(Fc), o = F.gen(function* () {
-		let e = yield* R.get(a);
+}, qc = { make: (e) => P.gen(function* () {
+	let t = e.name ?? "circuit", n = Qe.toMillis(Qe.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* L.make(Kc), o = P.gen(function* () {
+		let e = yield* L.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* R.set(a, t >= r ? Fc : {
+			yield* L.set(a, t >= r ? Kc : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* R.set(a, Fc));
-	}), s = F.gen(function* () {
-		let t = yield* Je.currentTimeMillis, n = yield* R.get(a);
+		e.failureCount !== 0 && (yield* L.set(a, Kc));
+	}), s = P.gen(function* () {
+		let t = yield* Je.currentTimeMillis, n = yield* L.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
-			yield* R.set(a, {
+			yield* L.set(a, {
 				tag: "open",
 				failureCount: e.failureThreshold,
 				halfOpenSuccesses: 0,
@@ -5092,7 +5113,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return;
 		}
 		let r = n.failureCount + 1;
-		yield* R.set(a, r >= e.failureThreshold ? {
+		yield* L.set(a, r >= e.failureThreshold ? {
 			tag: "open",
 			failureCount: r,
 			halfOpenSuccesses: 0,
@@ -5101,40 +5122,40 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			...n,
 			failureCount: r
 		});
-	}), c = F.gen(function* () {
-		let e = yield* R.get(a);
+	}), c = P.gen(function* () {
+		let e = yield* L.get(a);
 		if (e.tag !== "open") return null;
 		let t = (yield* Je.currentTimeMillis) - e.openedAt;
-		return t >= n ? (yield* R.set(a, {
+		return t >= n ? (yield* L.set(a, {
 			tag: "half-open",
 			failureCount: 0,
 			halfOpenSuccesses: 0,
 			openedAt: e.openedAt
 		}), null) : n - t;
-	}), l = (e) => F.gen(function* () {
+	}), l = (e) => P.gen(function* () {
 		let n = yield* c;
-		return n === null ? yield* e.pipe(F.tap(() => o), F.tapErrorCause((e) => {
-			if (N.isInterruptedOnly(e)) return F.void;
+		return n === null ? yield* e.pipe(P.tap(() => o), P.tapErrorCause((e) => {
+			if (N.isInterruptedOnly(e)) return P.void;
 			let t = N.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
-			return i(n) ? s : F.void;
-		})) : yield* F.fail(new Pc({
+			return i(n) ? s : P.void;
+		})) : yield* P.fail(new Gc({
 			name: t,
 			retryAfterMs: n
 		}));
 	}), u = ((e) => l(e));
 	return Object.defineProperty(u, "state", {
-		value: R.get(a).pipe(F.map((e) => e.tag)),
+		value: L.get(a).pipe(P.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: R.set(a, Fc),
+		value: L.set(a, Kc),
 		enumerable: !0
 	}), u;
-}) }, Lc, Rc = (e) => {
-	Lc = e;
-}, zc = () => {
-	Lc = void 0;
-}, Bc = () => Lc, Vc = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? Ke(t.id ?? "system") : Ke(t.id ?? "system", t.scopes), r = t.store ?? Lc?.dataStore, i = t.schemaRegistry ?? Lc?.schemaRegistry, a = t.dialect ?? Lc?.dialect;
+}) }, Jc, Yc = (e) => {
+	Jc = e;
+}, Xc = () => {
+	Jc = void 0;
+}, Zc = () => Jc, Qc = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Ke(t.id ?? "system") : Ke(t.id ?? "system", t.scopes), r = t.store ?? Jc?.dataStore, i = t.schemaRegistry ?? Jc?.schemaRegistry, a = t.dialect ?? Jc?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
@@ -5144,7 +5165,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, Hc = (e) => {
+}, $c = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -5172,7 +5193,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, Uc = (e = process.env) => {
+}, el = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -5184,7 +5205,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, Wc = () => {
+}, tl = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -5209,27 +5230,27 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, Gc = Symbol.for("@voltro/ScheduleDefinition"), Kc = (e) => typeof e == "object" && !!e && Gc in e, qc = 30 * 6e4, Jc = (e) => {
-	let t = P.parse(e.cron, e.timezone);
-	if (Qe.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
+}, nl = Symbol.for("@voltro/ScheduleDefinition"), rl = (e) => typeof e == "object" && !!e && nl in e, il = 30 * 6e4, al = (e) => {
+	let t = Xe.parse(e.cron, e.timezone);
+	if ($e.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
 	return {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? qc,
-		[Gc]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? il,
+		[nl]: !0
 	};
-}, Yc = (e) => P.unsafeParse(e.cron, e.timezone), Xc = (e, t = /* @__PURE__ */ new Date()) => P.next(Yc(e), t), Z = "_voltro_wakeups", Zc = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Qc = (e) => ({
+}, ol = (e) => Xe.unsafeParse(e.cron, e.timezone), sl = (e, t = /* @__PURE__ */ new Date()) => Xe.next(ol(e), t), Z = "_voltro_wakeups", cl = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, ll = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), $c = async (e, t) => {
+}), ul = async (e, t) => {
 	await e.upsert(Z, {
-		id: Zc(t),
+		id: cl(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -5239,7 +5260,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, el = async (e, t) => e.delete(Z, Zc(t)), tl = async (e, t) => await e.update(Z, Zc(t), { status: "fired" }) !== null, nl = (e, t) => ({ and: [{
+}, dl = async (e, t) => e.delete(Z, cl(t)), fl = async (e, t) => await e.update(Z, cl(t), { status: "fired" }) !== null, pl = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -5247,16 +5268,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), rl = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: nl(Zc(t), "pending") }) > 0, il = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: nl(Zc(t), "fired") });
-}, al = {
+}] }), ml = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: pl(cl(t), "pending") }) > 0, hl = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: pl(cl(t), "fired") });
+}, gl = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, ol = async (e, t) => {
+}, _l = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: al,
+		predicate: gl,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5265,18 +5286,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Qc);
-}, sl = async (e, t, n = 500) => {
-	let r = await ol(e, n), i = t.getTime();
+	return (await e.query(n)).map(ll);
+}, vl = async (e, t, n = 500) => {
+	let r = await _l(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, cl = async (e) => (await ol(e, 1))[0] ?? null, ll = {
+}, yl = async (e) => (await _l(e, 1))[0] ?? null, bl = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, ul = async (e, t = {}) => {
+}, xl = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: ll,
+		predicate: bl,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5287,12 +5308,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, dl = Wa, fl = "default", pl = {
+}, Sl = Ya, Cl = "default", wl = {
 	kind: "single",
 	tryClaim: async () => !0
-}, ml = "_voltro_schedule_claims", hl = (e, t, n) => {
+}, Tl = "_voltro_schedule_claims", El = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: ml,
+		table: Tl,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -5307,7 +5328,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(ml, {
+				return await e.insert(Tl, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -5325,12 +5346,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			}
 		}
 	};
-}, gl = "_voltro_schedule_runs", _l = async (e, t) => {
+}, Dl = "_voltro_schedule_runs", Ol = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, yl(t));
+		s?.(e, Al(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${xe()}`, l = await n.insert(gl, {
+			let o = `sr_${xe()}`, l = await n.insert(Dl, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -5355,7 +5376,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(gl, e, t);
+			let r = await n.update(Dl, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -5366,7 +5387,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: gl,
+				table: Dl,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -5401,7 +5422,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				scheduleName: e.name,
 				trigger: n,
 				runId: s,
-				subject: dl
+				subject: Sl
 			})
 		};
 		try {
@@ -5429,10 +5450,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				durationMs: Date.now() - l
 			});
 		} catch (t) {
-			let n = Q(t).includes("exceeded maxRuntimeMs"), r = an(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Q(t)} — ${r}` : Q(t);
+			let n = Q(t).includes("exceeded maxRuntimeMs"), r = on(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Q(t)} — ${r}` : Q(t);
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : vl(t),
+				errorTag: n ? "timeout" : kl(t),
 				errorMessage: i,
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -5441,7 +5462,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n,
-				...an(t)
+				...on(t)
 			};
 			o.error ? o.error("schedule: handler failed", a) : o.warn("schedule: handler failed", a), Ue({
 				error: t,
@@ -5492,8 +5513,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = P.next(Yc(e), /* @__PURE__ */ new Date());
-			await $c(n, {
+			let t = Xe.next(ol(e), /* @__PURE__ */ new Date());
+			await ul(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -5507,7 +5528,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}, w = 2147483647, T = (e) => {
 		if (m) return;
-		let n = Yc(e), r = P.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = ol(e), r = Xe.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
 			if (n > w) {
@@ -5529,7 +5550,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let r;
 		try {
 			let t = (await n.query({
-				table: gl,
+				table: Dl,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -5548,8 +5569,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = Yc(e), a = [], s = P.next(i, r), c = Date.now();
-		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = P.next(i, s);
+		let i = ol(e), a = [], s = Xe.next(i, r), c = Date.now();
+		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = Xe.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
 			missed: a.length,
@@ -5593,11 +5614,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), vl = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, yl = (e) => {
+}, Q = (e) => e?.message ?? String(e), kl = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Al = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, bl = (e, t, n, r) => {
+}, jl = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -5627,7 +5648,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, xl = (e) => (t, n, r) => bl(t, n, r, e), Sl = O("_voltro_schedule_runs", {
+}, Ml = (e) => (t, n, r) => jl(t, n, r, e), Nl = O("_voltro_schedule_runs", {
 	id: y({ prefix: "schrun" }),
 	name: k(),
 	status: k().oneOf([
@@ -5657,13 +5678,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	]).nullable(),
 	replicaId: k().nullable(),
 	result: T().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), Cl = O("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), Pl = O("_voltro_schedule_claims", {
 	id: y({ prefix: "schclaim" }),
 	scheduleName: k(),
 	bucket: k(),
 	claimedBy: k(),
 	claimedAt: A()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), wl = O("_voltro_traces", {
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), Fl = O("_voltro_traces", {
 	id: y({ prefix: "span" }),
 	traceId: k(),
 	spanId: k(),
@@ -5687,7 +5708,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	durationMs: x(),
 	attributes: T().nullable(),
 	events: T().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Tl = O("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Il = O("_voltro_undo_log", {
 	id: y({ prefix: "undo" }),
 	tag: k(),
 	label: k().nullable(),
@@ -5698,25 +5719,25 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	crossesAction: i().default(!1),
 	undone: i().default(!1),
 	createdAt: A().default("now")
-}).index(["subjectId", "createdAt"]), El = (e = process.env) => {
+}).index(["subjectId", "createdAt"]), Ll = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, Dl = (e) => e.startsWith("_voltro"), Ol = async (e, t, n) => (await e.query({
+}, Rl = (e) => e.startsWith("_voltro"), zl = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: d("id", n),
 	order: []
-}))[0] ?? null, kl = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, Bl = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return Dl(n) || t({
+		return Rl(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = Dl(n) ? null : await Ol(e, n, r), o = await e.update(n, r, i);
-		return Dl(n) || t({
+		let a = Rl(n) ? null : await zl(e, n, r), o = await e.update(n, r, i);
+		return Rl(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -5725,8 +5746,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = Dl(n) ? null : await Ol(e, n, r), a = await e.delete(n, r);
-		return !Dl(n) && a && t({
+		let i = Rl(n) ? null : await zl(e, n, r), a = await e.delete(n, r);
+		return !Rl(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -5735,10 +5756,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), Al = (e) => {
+} }), Vl = (e) => {
 	let t = [];
 	return {
-		tx: kl(e, (e) => t.push(e)),
+		tx: Bl(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -5754,14 +5775,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			});
 		}
 	};
-}, jl = (e) => {
+}, Hl = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, Ml = (e) => {
-	let t = jl(e);
+}, Ul = (e) => {
+	let t = Hl(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -5785,28 +5806,28 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			row: e.prev
 		};
 	}
-}, Nl = (e) => {
-	if (e.crossesAction) throw new Pl(e.invocationId, "action");
+}, Wl = (e) => {
+	if (e.crossesAction) throw new Gl(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = Ml(e.changes[n]);
+		let r = Ul(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, Pl = class extends Error {
+}, Gl = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Fl = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, Kl = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, Il = class {
+}, ql = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -5842,7 +5863,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, Ll = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, Jl = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -5859,7 +5880,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, Rl = async (e, t) => {
+}, Yl = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -5877,21 +5898,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, zl = async (e, t) => {
-	for (let n of t) await Rl(e, n);
-}, Bl = (e) => e.request?.subject?.id ?? null, Vl = (e) => e === !0 || e === 1, Hl = async (e, t, n) => (await e.query({
+}, Xl = async (e, t) => {
+	for (let n of t) await Yl(e, n);
+}, Zl = (e) => e.request?.subject?.id ?? null, Ql = (e) => e === !0 || e === 1, $l = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: d("id", n),
 	order: []
-}))[0] ?? null, Ul = (e) => {
+}))[0] ?? null, eu = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Wl = (e) => e.id ?? e.next?.id ?? e.prev?.id, Gl = async (e, t) => {
-	let n = Bl(t);
+}, tu = (e) => e.id ?? e.next?.id ?? e.prev?.id, nu = async (e, t) => {
+	let n = Zl(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: d("subjectId", n),
@@ -5900,68 +5921,68 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: Vl(e.undone),
-		crossesAction: Vl(e.crossesAction),
+		undone: Ql(e.undone),
+		crossesAction: Ql(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, Kl = async (e, t) => {
-	let n = await Hl(t.store, "_voltro_undo_log", e.invocationId);
+}, ru = async (e, t) => {
+	let n = await $l(t.store, "_voltro_undo_log", e.invocationId);
 	if (!n) throw new Ie({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== Bl(t)) throw new Fe({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== Zl(t)) throw new Fe({ invocationId: e.invocationId });
 	return n;
-}, ql = async (e, t) => {
-	let n = await Kl(e, t);
-	if (Vl(n.undone)) return { ok: !0 };
-	if (Vl(n.crossesAction)) throw new Pe({
+}, iu = async (e, t) => {
+	let n = await ru(e, t);
+	if (Ql(n.undone)) return { ok: !0 };
+	if (Ql(n.crossesAction)) throw new Pe({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = Ul(n.changes);
+	let r = eu(n.changes);
 	for (let n of r) {
-		let r = Wl(n);
-		if (r !== void 0 && !Fl(await Hl(t.store, n.table, r), n.next ?? null)) throw new Pe({
+		let r = tu(n);
+		if (r !== void 0 && !Kl(await $l(t.store, n.table, r), n.next ?? null)) throw new Pe({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: Bl(t),
+		subject: Zl(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await zl(t.store, Nl(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, Jl = async (e, t) => {
-	let n = await Kl(e, t);
-	if (!Vl(n.undone)) return { ok: !0 };
-	for (let e of Ul(n.changes)) {
-		let n = Wl(e);
+	return await Xl(t.store, Wl(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, au = async (e, t) => {
+	let n = await ru(e, t);
+	if (!Ql(n.undone)) return { ok: !0 };
+	for (let e of eu(n.changes)) {
+		let n = tu(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Yl = (e = process.env) => {
+}, ou = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, Xl = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Zl = "«redacted»", Ql = (e) => {
+}, su = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, cu = "«redacted»", lu = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = Xl.test(n) ? Zl : r;
+	for (let [n, r] of Object.entries(e)) t[n] = su.test(n) ? cu : r;
 	return t;
-}, $l = (e) => {
+}, uu = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, eu = (e, t) => {
+}, du = (e, t) => {
 	if (t.op === "insert") {
-		let n = $l(t.new);
+		let n = uu(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = $l(t.new) ?? $l(t.old);
+		let n = uu(t.new) ?? uu(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, tu = class {
+}, fu = class {
 	mode;
 	capacity;
 	now;
@@ -5981,8 +6002,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Ql(e.old),
-			new: Ql(e.new),
+			old: lu(e.old),
+			new: lu(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -5995,23 +6016,23 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = eu(i, e);
+		for (let e of r) i = du(i, e);
 		return i;
 	}
-}, nu, ru = () => (nu === void 0 && (nu = new tu(Yl())), nu), iu = (e) => {
-	nu = e;
-}, au = (e) => {
-	let t = ru();
+}, pu, mu = () => (pu === void 0 && (pu = new fu(ou())), pu), hu = (e) => {
+	pu = e;
+}, gu = (e) => {
+	let t = mu();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, ou = /* @__PURE__ */ new Set([
+}, _u = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), su = (e) => {
+]), vu = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -6033,7 +6054,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return ou.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return _u.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -6047,7 +6068,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, cu = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(cu), lu = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), uu = (e, t) => {
+}, yu = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(yu), bu = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), xu = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -6055,10 +6076,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, du = (e, t) => {
+}, Su = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = lu(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = bu(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -6074,10 +6095,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		}
 	}
 	return n;
-}, fu = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, Cu = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: uu(e, n)
-})), pu = (e, t, n) => {
+	value: xu(e, n)
+})), wu = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -6086,7 +6107,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = lu(t, e.column);
+		let s = bu(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -6095,7 +6116,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = lu(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = bu(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -6115,15 +6136,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, mu = (e, t, n, r) => {
+}, Tu = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = du(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = Su(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, hu = class {
+}, Eu = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -6131,7 +6152,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = du(this.shape, e), this.groups.clear();
+		this.state = Su(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -6143,14 +6164,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = pu(this.shape, this.state, e);
+		let n = wu(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = mu(this.shape, this.state, e, t);
+		this.state = Tu(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -6159,7 +6180,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return fu(this.shape, this.state).map((e) => ({
+		return Cu(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -6172,7 +6193,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, gu = O("_voltro_rebac_tuples", {
+}, Du = O("_voltro_rebac_tuples", {
 	id: y({ prefix: "rbct" }),
 	subjectId: k(),
 	relation: k(),
@@ -6184,7 +6205,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]), _u = async (e, n, r, i) => n === null ? [] : (await e.query({
+]), Ou = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(d("subjectId", n), d("resourceType", r), d("resourceId", i)),
 	order: [],
@@ -6196,16 +6217,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), vu = (e) => ({
+})), ku = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), yu = (e, t) => {
-	let n = t.getPolicy ?? Hs;
+}), Au = (e, t) => {
+	let n = t.getPolicy ?? qs;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let o = n(a.resourceType), s = (e) => F.fail(new zs({
+		let o = n(a.resourceType), s = (e) => P.fail(new Ws({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -6213,17 +6234,17 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = vu(i.subject), u = {
+		let l = ku(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
 		};
-		return F.flatMap(F.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Js(l, a.action, u, {
+		return P.flatMap(P.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => $s(l, a.action, u, {
 			policy: o,
 			tuples: e
 		}) ? r : s(c));
 	};
-}, bu = async (e, n, r) => n === null ? [] : (await e.query({
+}, ju = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(d("subjectId", n), d("resourceType", r)),
 	order: [],
@@ -6235,18 +6256,18 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), xu = (e) => {
-	let t = e.getPolicy ?? Hs;
+})), Mu = (e) => {
+	let t = e.getPolicy ?? qs;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = vu(n);
-		return Xs(s, i, r, a, {
+		let s = ku(n);
+		return tc(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, Su = (e) => {
+}, Nu = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -6254,14 +6275,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, Cu = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, wu = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Tu = class {
+}, Pu = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Fu = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Iu = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, Eu = async (e, t, n) => {
-	if (t.table !== e.watch.table || !Cu(e.watch.on, t.op)) return "skipped-op";
+}, Lu = async (e, t, n) => {
+	if (t.table !== e.watch.table || !Pu(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -6270,26 +6291,26 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = wu(t);
+	let a = Fu(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, Du = O("_voltro_wakeups", {
+}, Ru = O("_voltro_wakeups", {
 	id: y({ prefix: "wakeup" }),
 	tenantId: k(),
 	kind: k(),
 	refId: k(),
 	wakeAt: A(),
 	status: k()
-}).index(["status", "wakeAt"]).index(["tenantId"]), Ou = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await sl(e.store, t, e.batchLimit ?? 100);
+}).index(["status", "wakeAt"]).index(["tenantId"]), zu = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await vl(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await rl(e.store, t)) try {
+	for (let t of n) if (await ml(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await il(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await hl(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -6297,11 +6318,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, ku = (e, t = 1e3) => {
+}, Bu = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await Ou(e);
+				await zu(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -6311,10 +6332,10 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, Au = (e) => ({ wake: async () => {
+}, Vu = (e) => ({ wake: async () => {
 	await e.start();
-} }), ju = (e) => new Promise((t) => setTimeout(t, e)), Mu = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? ju, i = e.spawnImpl ?? It, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), Hu = (e) => new Promise((t) => setTimeout(t, e)), Uu = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Hu, i = e.spawnImpl ?? Lt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -6368,11 +6389,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		},
 		stop: m
 	};
-}, Nu = async (e) => {
+}, Wu = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await cl(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await yl(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Pu = (e, t = Date.now) => {
+}, Gu = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -6384,7 +6405,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Fu = () => {
+}, Ku = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -6402,8 +6423,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, Iu = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Lu = (e, t, n, r) => new Promise((i, a) => {
-	let o = st.request({
+}, qu = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Ju = (e, t, n, r) => new Promise((i, a) => {
+	let o = ct.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -6413,8 +6434,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), Ru = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = st.request({
+}), Yu = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = ct.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -6428,21 +6449,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), zu = (e) => {
-	let t = Iu({
+}), Xu = (e) => {
+	let t = qu({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = st.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Lu(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = ct.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Ju(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Ru(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Yu(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Bu = async (e) => {
+}, Zu = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -6459,15 +6480,15 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, Vu = async (e) => {
-	let t = Au(e.supervisor), n = await Ou({
+}, Qu = async (e) => {
+	let t = Vu(e.supervisor), n = await zu({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await Nu({
+	let r = await Wu({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -6477,12 +6498,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, Hu = async (e) => {
-	let t = Pu(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Fu(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, $u = async (e) => {
+	let t = Gu(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Ku(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = zu({
+	}, s = Xu({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -6501,7 +6522,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Bu(e.store)), await Vu({
+				if (a && (i = await Zu(e.store)), await Qu({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -6509,7 +6530,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await ul(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await xl(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -6524,14 +6545,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Uu = (e) => e, Wu = class extends z.TaggedError()("AnalyticsError", {
-	provider: z.String,
-	operation: z.String,
-	cause: z.String
-}) {}, Gu = class extends z.TaggedError()("AnalyticsCapabilityNotSupported", {
-	provider: z.String,
-	capability: z.String
-}) {}, Ku = class extends Ye.Tag("@voltro/AnalyticsSink")() {}, qu = (e, t) => ({
+}, ed = (e) => e, td = class extends R.TaggedError()("AnalyticsError", {
+	provider: R.String,
+	operation: R.String,
+	cause: R.String
+}) {}, nd = class extends R.TaggedError()("AnalyticsCapabilityNotSupported", {
+	provider: R.String,
+	capability: R.String
+}) {}, rd = class extends Ye.Tag("@voltro/AnalyticsSink")() {}, id = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -6550,20 +6571,20 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Ju = () => F.gen(function* () {
-	let e = yield* Ku, t = yield* F.serviceOption(Ne), n = it.match(t, {
+}), ad = () => P.gen(function* () {
+	let e = yield* rd, t = yield* P.serviceOption(Ne), n = at.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : qu(e, n);
-}), Yu = "noop", Xu = () => {
-	let e = (e) => F.fail(new Gu({
-		provider: Yu,
+	return n === null ? e : id(e, n);
+}), od = "noop", sd = () => {
+	let e = (e) => P.fail(new nd({
+		provider: od,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Yu,
+			provider: od,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -6572,13 +6593,13 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				mirror: !1
 			}
 		},
-		track: () => F.void,
+		track: () => P.void,
 		aggregate: () => e("aggregate"),
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, Zu = (e) => {
-	if (e.length === 0) return Xu();
+}, cd = (e) => {
+	if (e.length === 0) return sd();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -6590,22 +6611,22 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			mirror: e.some((e) => e.info.capabilities.mirror)
 		},
 		detail: { members: e.map((e) => e.info) }
-	}, n = (t) => F.forEach(e, (e) => e.track(t).pipe(F.catchAll((t) => F.logWarning(`analytics-sink ${e.info.provider} track failed`, { err: t }))), {
+	}, n = (t) => P.forEach(e, (e) => e.track(t).pipe(P.catchAll((t) => P.logWarning(`analytics-sink ${e.info.provider} track failed`, { err: t }))), {
 		concurrency: "unbounded",
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? F.fail(new Gu({
+		return r === void 0 ? P.fail(new nd({
 			provider: "compose",
 			capability: t
 		})) : n(r);
 	}, i = e.filter((e) => e.mirror !== void 0), a = i.length === 0 ? void 0 : {
 		tables: Array.from(new Set(i.flatMap((e) => e.mirror.tables))),
-		upsert: (e, t) => F.forEach(i.filter((t) => t.mirror.tables.includes(e)), (n) => n.mirror.upsert(e, t), {
+		upsert: (e, t) => P.forEach(i.filter((t) => t.mirror.tables.includes(e)), (n) => n.mirror.upsert(e, t), {
 			concurrency: "unbounded",
 			discard: !0
 		}),
-		remove: (e, t) => F.forEach(i.filter((t) => t.mirror.tables.includes(e)), (n) => n.mirror.remove(e, t), {
+		remove: (e, t) => P.forEach(i.filter((t) => t.mirror.tables.includes(e)), (n) => n.mirror.remove(e, t), {
 			concurrency: "unbounded",
 			discard: !0
 		})
@@ -6618,42 +6639,42 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Qu = (e) => {
+}, ld = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => Zu(e.map((e) => e.build(t))),
+		build: (t) => cd(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
-		initialize: (t) => F.forEach(e, (e) => e.initialize ? e.initialize(t) : F.void, {
+		initialize: (t) => P.forEach(e, (e) => e.initialize ? e.initialize(t) : P.void, {
 			concurrency: 1,
 			discard: !0
 		}),
-		...t.length > 0 ? { dispose: (e) => F.forEach(t, (t) => t.dispose(e), {
+		...t.length > 0 ? { dispose: (e) => P.forEach(t, (t) => t.dispose(e), {
 			concurrency: 1,
 			discard: !0
 		}) } : {}
 	};
-}, $u = {
+}, ud = {
 	kind: "noop",
-	build: () => Xu()
-}, ed = {
+	build: () => sd()
+}, dd = {
 	tables: [],
 	detach: () => {}
-}, td = (e) => {
+}, fd = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return ed;
-	let a = e.run ?? ((e) => F.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
+	if (i === void 0 || i.tables.length === 0) return dd;
+	let a = e.run ?? ((e) => P.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
-			if (t === null) return F.void;
+			if (t === null) return P.void;
 			let n = t[o];
-			return n === void 0 ? F.void : i.remove(e.table, n);
+			return n === void 0 ? P.void : i.remove(e.table, n);
 		}
 		let t = e.new;
-		return t === null ? F.void : i.upsert(e.table, t);
+		return t === null ? P.void : i.upsert(e.table, t);
 	}, l = t.onChange((e) => {
 		if (!s.has(e.table)) return;
-		let t = c(e).pipe(F.catchAll((t) => F.sync(() => r.warn("analytics-mirror: change forward failed", {
+		let t = c(e).pipe(P.catchAll((t) => P.sync(() => r.warn("analytics-mirror: change forward failed", {
 			provider: n.info.provider,
 			table: e.table,
 			op: e.op,
@@ -6665,11 +6686,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, nd = (e) => {
+}, pd = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = su({
+		let t = vu({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -6691,51 +6712,51 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, rd = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, id = class extends z.TaggedError()("AggregateStale", {
-	name: z.String,
-	ageMs: z.Number,
-	maxAgeMs: z.Number
-}) {}, ad = class extends z.TaggedError()("AggregateNotFound", { name: z.String }) {}, od = class extends z.TaggedError()("AggregateError", {
-	name: z.String,
-	operation: z.String,
-	cause: z.String
-}) {}, sd = class extends Ye.Tag("@voltro/AggregateRegistry")() {}, cd = (e) => F.gen(function* () {
-	return (yield* sd).getHandle(e);
-}), ld = (e, n, r) => {
+}, md = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, hd = class extends R.TaggedError()("AggregateStale", {
+	name: R.String,
+	ageMs: R.Number,
+	maxAgeMs: R.Number
+}) {}, gd = class extends R.TaggedError()("AggregateNotFound", { name: R.String }) {}, _d = class extends R.TaggedError()("AggregateError", {
+	name: R.String,
+	operation: R.String,
+	cause: R.String
+}) {}, vd = class extends Ye.Tag("@voltro/AggregateRegistry")() {}, yd = (e) => P.gen(function* () {
+	return (yield* vd).getHandle(e);
+}), bd = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = d("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, ud = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), dd = (e) => e?.type === "user" && e.tenantId === "", fd = (e, n) => {
+}, xd = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), Sd = (e) => e?.type === "user" && e.tenantId === "", Cd = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
 	let r = C("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, pd = (e, t) => t, md = (e) => F.runPromiseExit(e).then((e) => {
-	if ($e.isSuccess(e)) return e.value;
+}, wd = (e, t) => t, Td = (e) => P.runPromiseExit(e).then((e) => {
+	if (et.isSuccess(e)) return e.value;
 	let t = N.failureOption(e.cause);
-	throw it.isSome(t) ? t.value : N.squash(e.cause);
-}), hd = (e, t) => e.pipe(F.provideService(Ne, t)), gd = async (e, t, n) => {
-	let r = await F.runPromise(Re(t, e.guards, n));
+	throw at.isSome(t) ? t.value : N.squash(e.cause);
+}), Ed = (e, t) => e.pipe(P.provideService(Ne, t)), Dd = async (e, t, n) => {
+	let r = await P.runPromise(Re(t, e.guards, n));
 	if (r) throw r;
-}, _d = async (e) => {
+}, Od = async (e) => {
 	if (Gn() === void 0) return e;
-	let t = await md(qn(e.subject, (e) => {
+	let t = await Td(qn(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, vd = async (e) => {
+}, kd = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
-			let t = F.tryPromise({
+			let t = P.tryPromise({
 				try: () => e.runExecutor(),
 				catch: (e) => e
 			}), n = e.interceptor(t, {
@@ -6745,8 +6766,8 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 				subject: e.requestContext.subject,
 				traceId: e.requestContext.traceId,
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId }
-			}), r = await F.runPromiseExit(n);
-			if ($e.isSuccess(r)) return r.value;
+			}), r = await P.runPromiseExit(n);
+			if (et.isSuccess(r)) return r.value;
 			throw N.squash(r.cause);
 		}
 		return await e.runExecutor();
@@ -6760,28 +6781,28 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			status: r
 		});
 	}
-}, yd = /* @__PURE__ */ new Set([1213, 1205]), bd = /* @__PURE__ */ new Set([
+}, Ad = /* @__PURE__ */ new Set([1213, 1205]), jd = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), xd = (e) => {
+]), Md = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && yd.has(e.errno) || typeof e.code == "string" && bd.has(e.code) || typeof e.sqlState == "string" && bd.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && Ad.has(e.errno) || typeof e.code == "string" && jd.has(e.code) || typeof e.sqlState == "string" && jd.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, Sd = 3, Cd = (e) => new Promise((t) => setTimeout(t, e)), wd = async (e, t) => {
-	let n = t?.delay ?? ((e) => Cd(e * 20 + Math.floor(Math.random() * 30)));
+}, Nd = 3, Pd = (e) => new Promise((t) => setTimeout(t, e)), Fd = async (e, t) => {
+	let n = t?.delay ?? ((e) => Pd(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= Sd || !xd(e)) throw e;
+		if (t >= Nd || !Md(e)) throw e;
 		await n(t);
 	}
-}, Td = (e) => (t, n, r) => vd({
+}, Id = (e) => (t, n, r) => kd({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -6789,11 +6810,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await gd(t.descriptor, r.subject, n);
-		let i = await _d(r), a = [], o = await wd(async () => (a.length = 0, e.store.transactional(async (o) => {
+		await Dd(t.descriptor, r.subject, n);
+		let i = await Od(r), a = [], o = await Fd(async () => (a.length = 0, e.store.transactional(async (o) => {
 			let s = e.undoCapture?.(o), c = s ? s.tx : o, l = e.buildContext(i, c, { afterCommit: (e) => {
 				a.push(e);
-			} }), u = t.executor(n, l), d = F.isEffect(u) ? await e.runEffect(hd(u, r.subject), l.store) : await u;
+			} }), u = t.executor(n, l), d = P.isEffect(u) ? await e.runEffect(Ed(u, r.subject), l.store) : await u;
 			return s && await s.persist(l.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -6803,42 +6824,42 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		for (let e of a) await e();
 		return o;
 	}
-}), Ed = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Dd = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Od = (e) => {
+}), Ld = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Rd = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, zd = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, kd = (e, t) => (n) => () => {
+}, Bd = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
-	return !r || r.length === 0 ? Promise.resolve(null) : F.runPromise(Re(n, r, t));
-}, Ad = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = kd(t, n)(r.subject), o = async () => {
+	return !r || r.length === 0 ? Promise.resolve(null) : P.runPromise(Re(n, r, t));
+}, Vd = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = Bd(t, n)(r.subject), o = async () => {
 		let i = await a();
 		if (i) throw i;
-		let o = e.buildContext(await _d(r)), s = t.executor(n, o);
-		return F.isEffect(s) ? F.runPromise(e.provideEffect(hd(s, r.subject), o.store)) : Ed(await Promise.resolve(s));
+		let o = e.buildContext(await Od(r)), s = t.executor(n, o);
+		return P.isEffect(s) ? P.runPromise(e.provideEffect(Ed(s, r.subject), o.store)) : Ld(await Promise.resolve(s));
 	}, s = (n) => {
-		let i = Ed(n);
-		return Dd(i) ? e.finalize(i, r) : {
+		let i = Ld(n);
+		return Rd(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: Od(t),
+			dependentTables: zd(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: o
 		};
 	}, c = () => {
 		let a = t.executor(n, i);
-		return F.isEffect(a) ? e.provideEffect(hd(a, r.subject), i.store).pipe(F.map(s)) : a instanceof Promise ? F.promise(() => a).pipe(F.map(s)) : s(a);
+		return P.isEffect(a) ? e.provideEffect(Ed(a, r.subject), i.store).pipe(P.map(s)) : a instanceof Promise ? P.promise(() => a).pipe(P.map(s)) : s(a);
 	}, l = () => {
 		let e = t.descriptor.guards;
-		return !e || e.length === 0 ? c() : Re(r.subject, e, n).pipe(F.flatMap((e) => {
-			if (e) return F.fail(e);
+		return !e || e.length === 0 ? c() : Re(r.subject, e, n).pipe(P.flatMap((e) => {
+			if (e) return P.fail(e);
 			let t = c();
-			return F.isEffect(t) ? t : F.succeed(t);
+			return P.isEffect(t) ? t : P.succeed(t);
 		}));
 	};
 	if (!e.interceptor) return l();
-	let u = F.suspend(() => {
+	let u = P.suspend(() => {
 		let e = l();
-		return F.isEffect(e) ? e : F.succeed(e);
+		return P.isEffect(e) ? e : P.succeed(e);
 	});
 	return e.interceptor(u, {
 		tag: t.descriptor.name,
@@ -6848,14 +6869,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, jd = (e) => async (t, n, r) => {
-	let i = await _d(r), a = Ad(e)(t, n)(i), o = F.isEffect(a) ? await md(a) : a;
+}, Hd = (e) => async (t, n, r) => {
+	let i = await Od(r), a = Vd(e)(t, n)(i), o = P.isEffect(a) ? await Td(a) : a;
 	return rr(o) ? o.value : e.queryRows(o);
-}, Md = (e) => (t, n, r, i) => {
+}, Ud = (e) => (t, n, r, i) => {
 	let a = !1, o;
 	return (async () => {
 		try {
-			let s = await _d(r), c = Ad(e)(t, n)(s), l = F.isEffect(c) ? await md(c) : c, u = (e) => i(e), d = rr(l) ? await e.subscribeComputed(l, u, s) : await e.subscribeDescriptor(l, u, s);
+			let s = await Od(r), c = Vd(e)(t, n)(s), l = P.isEffect(c) ? await Td(c) : c, u = (e) => i(e), d = rr(l) ? await e.subscribeComputed(l, u, s) : await e.subscribeDescriptor(l, u, s);
 			a ? d() : o = d;
 		} catch (e) {
 			i({
@@ -6866,7 +6887,7 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	})(), () => {
 		a = !0, o?.();
 	};
-}, Nd = (e) => (t, n, r) => vd({
+}, Wd = (e) => (t, n, r) => kd({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -6874,16 +6895,16 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await gd(t.descriptor, r.subject, n);
-		let i = e.buildContext(await _d(r)), a = t.executor(n, i);
-		return F.isEffect(a) ? e.runEffect(hd(a, r.subject), i.store) : a;
+		await Dd(t.descriptor, r.subject, n);
+		let i = e.buildContext(await Od(r)), a = t.executor(n, i);
+		return P.isEffect(a) ? e.runEffect(Ed(a, r.subject), i.store) : a;
 	}
-}), Pd = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Fd = (e) => typeof e == "string" && e.length > 0 ? e : null, Id = [
+}), Gd = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Kd = (e) => typeof e == "string" && e.length > 0 ? e : null, qd = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], Ld = (e) => Id.some((t) => t in e), Rd = (e, t, n) => {
+], Jd = (e) => qd.some((t) => t in e), Yd = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -6898,14 +6919,14 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!Ld(e)) return {
+	if (!Jd(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = Fd(e.updatedBy) ?? Fd(e.createdBy), o = Pd(e.updatedAt) ?? Pd(e.createdAt);
+	let a = Kd(e.updatedBy) ?? Kd(e.createdBy), o = Gd(e.updatedAt) ?? Gd(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -6917,12 +6938,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, zd = (e, t) => {
+}, Xd = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: Fd(e.actor) ?? Fd(e.changedBy) },
-			at: Pd(e.at) ?? Pd(e.changedAt),
+			actor: { id: Kd(e.actor) ?? Kd(e.changedBy) },
+			at: Gd(e.at) ?? Gd(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -6937,12 +6958,12 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, Bd = (e) => {
+}, Zd = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, Vd = (e) => {
+}, Qd = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -6962,11 +6983,11 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: Bd(e),
+		id: Zd(e),
 		fields: t
 	};
-}, Hd = (e) => {
-	let t = e.map(Vd);
+}, $d = (e) => {
+	let t = e.map(Qd);
 	return {
 		rows: t,
 		summary: {
@@ -6975,21 +6996,21 @@ var K = /* @__PURE__ */ new Map(), pr = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, Ud = class extends Error {
+}, ef = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, Wd = async (e, t) => {
+}, tf = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new Ud();
+			throw n = await t(e), r = !0, new ef();
 		});
 	} catch (e) {
-		if (!(e instanceof Ud)) throw e;
+		if (!(e instanceof ef)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, Gd = "framework-runtime";
+}, nf = "framework-runtime";
 //#endregion
-export { Aa as API_KEYS_TABLE, zs as AccessDenied, od as AggregateError, hu as AggregateMaintainer, ad as AggregateNotFound, sd as AggregateRegistry, id as AggregateStale, Gu as AnalyticsCapabilityNotSupported, Wu as AnalyticsError, Ku as AnalyticsSink, X as CONNECTIONS_TABLE, Ro as CONNECTION_GRANTS_TABLE, Ic as CircuitBreaker, Pc as CircuitOpen, ss as ConnectionNotConnected, Wi as DEFAULT_MAX_RPC_BODY_BYTES, as as DEFAULT_REFRESH_SKEW_MS, Hn as DEFAULT_ROW_FILTER_RETRY, fl as DORMANCY_WAKEUP_TENANT, Qr as DeleteBuilder, er as Dispatcher, Ga as EffectStore, ys as GRANT_TTL_MS, nn as InMemoryDataStore, Wt as IndexedMatcher, Lt as LinearScanMatcher, nt as MetricBoundaries, Yu as NOOP_ANALYTICS_PROVIDER, Kn as NO_ROW_FILTER, Gr as NoRowFound, Co as OUTBOX_ATTEMPTS_TABLE, Ao as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, Kr as OptimisticLockError, Rs as REBAC_ADMIN_SCOPE, os as REFRESH_LEASE_MS, Gd as RUNTIME_NAME, Tu as ReactionRateLimiter, yi as ReplicatedDataStore, Vn as RowFilterUnavailable, dl as SCHEDULE_SUBJECT, Wa as SYSTEM_SUBJECT, Xr as SelectBuilder, oc as SsrfBlockedError, ti as StoreOperationFailed, qt as SubscriptionRegistry, ni as TableValidationFailed, ei as TenantScopeViolation, tu as TimelineRecorder, Pl as UndoBoundaryError, Il as UndoStack, Zr as UpdateBuilder, pc as VOLTRO_AUDIT_MIXIN_ID, mc as VOLTRO_SOFT_DELETE_MIXIN_ID, hc as VOLTRO_TENANT_MIXIN_ID, to as WorkflowPayloadError, hr as _connectionStreamCount, gr as _resetConnectionSubjectsForTest, Bo as _voltroConnectionGrantsTable, Lo as _voltroConnectionsTable, gu as _voltroRebacTuplesTable, Cl as _voltroScheduleClaimsTable, Sl as _voltroScheduleRunsTable, wl as _voltroTracesTable, Tl as _voltroUndoLogTable, Du as _voltroWakeupsTable, vo as _voltroWorkflowEventDeliveriesTable, _o as _voltroWorkflowEventsTable, ci as actingUserId, Ua as apiKeyManagementRoutes, ai as applyDefined, pu as applyDelta, Rl as applyInverse, zl as applyInverses, Xn as applyRowFilter, Zn as applyRowFilterToDescriptor, fd as applySoftDeleteScope, ld as applyTenantScope, ql as applyUndoInvocation, Ys as assertCan, Wo as assertConnectionCipherConfigured, td as attachAnalyticsMirror, Yi as awaitServerListening, ko as backoffMs, Cs as beginOAuthConnect, cr as bindConnectionSubject, Ui as bindMutation, Fi as bindStream, Pi as bindSubscription, ki as bindSubscriptionUntyped, du as buildIvmState, Hd as buildPreview, yu as buildRebacInterceptor, xu as buildRebacReadFilter, pi as buildSubjectKey, ea as buildTracingLayer, ha as cachedBackend, Js as can, el as cancelWakeup, su as classifyShape, ds as clearConnectionRefreshFlights, Ws as clearResourcePolicies, a as clearRetentions, zc as clearSystemStoreHandle, Yc as compileCron, ws as completeOAuthConnect, Qu as composeAnalytics, Zu as composeAnalyticsSinks, bs as connectionCallbackPath, Uo as connectionLabel, _r as connectionSubjectsSnapshot, Bu as countRunningWorkflows, Fn as counter, kc as crud, vi as currentRoutingContext, wr as currentTraceContext, Ba as dataStoreApiKeyStore, Sa as dataStoreIdempotencyStore, Da as dataStoreKvStore, Mr as decryptField, nd as defineAggregate, Ho as defineConnection, fo as defineEventTrigger, pd as defineExecutor, Eo as defineOutboxHandler, Su as defineReaction, Vs as defineResourcePolicy, Jc as defineSchedule, Uu as defineSubscriber, Qn as deliveredRowCount, Tr as deriveKey, Vd as diffChange, Po as drainOutbox, sl as dueWakeups, qs as effectiveRelations, bc as emptySchemaRegistry, Rr as enableGraphObservation, jr as encryptField, la as envSecretsBackend, rs as exchangeAuthorizationCode, xr as externalSpanFromTraceparent, an as extractDbCause, Kt as fingerprintFor, $o as forgetCredential, Nc as formatServerOnlyLeaks, yr as formatTraceparent, Ll as forwardChangeFromCdc, Va as frameworkApiKeyStrategy, In as gauge, Ma as generateApiKeyToken, Os as getConnectionResolver, lr as getConnectionSubject, q as getFieldCipher, Hs as getResourcePolicy, Gn as getRowFilter, Bc as getSystemStoreHandle, ru as getTimelineRecorder, tc as getTupleSource, $ as groupKeyOf, Ln as histogramMetric, zd as historyProvenance, ga as httpSecretsBackend, Ft as inspectWorkflow, nc as installPolicyGuardResolver, mr as interruptConnectionStreams, Ml as invertChange, rd as isAggregateDefinition, ud as isEmptyTenantScopedRead, on as isForeignKeyViolation, Nu as isIdleNow, Bi as isInfraError, zr as isObservingGraph, dd as isOrglessUserSubject, Fl as isSafeToApply, Kc as isScheduleDefinition, po as isWorkflowEventTriggerDefinition, uu as ivmValue, Rd as lastWriteProvenance, es as listConnectionStates, Us as listResourcePolicies, ee as listRetentions, _u as loadResourceTuples, bu as loadSubjectTuples, Hc as localityAwareSelector, Nd as makeActionRunner, hl as makeAdvisoryLockCoordinator, Er as makeAesCipher, Fa as makeApiKeyService, fc as makeApiKeyUsageBuffer, za as makeApiKeyUsageFlusher, sn as makeAppAccess, Oa as makeAsyncKv, ca as makeBufferingSpanProcessor, Go as makeConnectionRegistry, As as makeConnectionResolver, js as makeConnectionsFacade, xl as makeCoordinatedScheduler, ic as makeDataLoader, Ls as makeDisconnectConnectionExecutor, Ja as makeEffectStoreLayer, yo as makeEventsFacade, Dr as makeFieldCipher, $r as makeFluentStore, Pu as makeIdleGate, so as makeLazyWorkflowFacade, Ps as makeListConnectionsExecutor, Td as makeMutationRunner, jd as makeOneShotQueryRunner, Oo as makeOutboxFacade, ao as makePostCommitWorkflowFacade, Au as makeProcessAdapter, Ad as makeQueryDescriptorProducer, kd as makeQueryReauthorizer, Md as makeQuerySubscriber, Fu as makeRouterActivity, gc as makeSchemaRegistry, Fs as makeStartConnectionExecutor, Is as makeSubmitTokenExecutor, Al as makeUndoCapture, Iu as makeWakeGate, zu as makeWakeProxyServer, io as makeWorkflowFacade, oo as makeWorkflowFacadeWithCallerContext, co as makeWorkflowHandlers, lo as makeWorkflowLayers, Za as makeWorkflowRunHandle, tl as markWakeupFired, fu as materializeIvm, Ia as memoryApiKeyStore, Wc as memoryReplicationAdapter, fi as memoryRywPositionStore, Xc as nextFiring, cl as nextWakeup, Mu as nodeProcessSupervisor, Xu as noopAnalytics, $u as noopAnalyticsSpec, ka as noopKv, Wr as observeStore, Hr as observedGraph, dr as onBindConnectionSubject, To as outboxAttemptsTable, So as outboxTable, br as parseTraceparent, no as payloadPropertyNames, ui as powerOfTwoSelector, Wd as previewInRollback, Yo as projectConnectionState, ul as pruneWakeups, Gs as rebacPolicyGraph, An as recordSample, Pn as recordSubscriptionActive, Mn as recordSubscriptionDelivery, Vr as recordTableAccess, au as recordTimelineEvent, Tc as redactColumns, Ql as redactRow, mi as redisRywPositionStore, Jl as redoUndoInvocation, is as refreshAccessToken, pr as registerConnectionStream, se as registerRetention, $c as registerWakeup, il as releaseWakeup, di as replicaHealth, ji as resetComputedQueryCacheWarnings, Ur as resetObservedGraph, fa as resetSecretsBackend, ms as resolveConnection, ks as resolveConnectionForSubject, Uc as resolveCurrentRegion, cn as resolveDependentTables, Ss as resolveRedirectUri, mu as resolveRescan, qn as resolveRowFilterScope, Jn as resolveRowFilterScopeFor, pa as resolveSecret, ma as resolveSecretSync, _a as resolveSecretsBackend, Yl as resolveTimelineMode, le as retentionTtlMsFromEnv, eu as reverseEventOverRows, Zs as revokedIds, Vc as runAsSystem, Vu as runOrchestratorTick, md as runProvidedEffect, Eu as runReaction, Hu as runSingleNodeOrchestrator, ku as runWakeLoop, wd as runWithDeadlockRetry, Br as runWithObservedProcedure, _i as runWithRoutingContext, Cr as runWithTraceContext, xs as sanitizeRedirectTo, bl as scheduleCoordinated, Ac as schemaPropertyNames, Mc as serverOnlyLeaks, Ds as setConnectionResolver, kr as setFieldCipher, Wn as setRowFilter, da as setSecretsBackend, Rc as setSystemStoreHandle, iu as setTimelineRecorderForTest, ec as setTupleSource, ja as sha256Hex, pl as singleCoordinator, zn as snapshotMetrics, Bn as snapshotMetricsSync, dc as ssrfGuardHttpClientLayer, uc as ssrfReason, Gi as startRpcServer, _l as startScheduler, Zo as storeCredential, Ts as sweepExpiredGrants, he as sweepRetention, Nl as synthesizeInverse, ac as tracingHttpClientLayer, uo as triggerWorkflow, rl as tryClaimWakeup, ur as unbindConnectionSubject, El as undoCaptureEnabled, Gl as undoLogExecutor, cd as useAggregate, Ju as useAnalytics, Xs as visibleRows, Ou as wakeDueOnce, _d as withRowFilter, Ya as workflowToRpc, kl as wrapCaptureStore, Sc as wrapStoreWithBootCodec, li as wrapStoreWithMixinBehaviour };
+export { Fa as API_KEYS_TABLE, Ws as AccessDenied, _d as AggregateError, Eu as AggregateMaintainer, gd as AggregateNotFound, vd as AggregateRegistry, hd as AggregateStale, nd as AnalyticsCapabilityNotSupported, td as AnalyticsError, rd as AnalyticsSink, X as CONNECTIONS_TABLE, Uo as CONNECTION_GRANTS_TABLE, qc as CircuitBreaker, Gc as CircuitOpen, fs as ConnectionNotConnected, Gi as DEFAULT_MAX_RPC_BODY_BYTES, us as DEFAULT_REFRESH_SKEW_MS, Hn as DEFAULT_ROW_FILTER_RETRY, Cl as DORMANCY_WAKEUP_TENANT, Qr as DeleteBuilder, er as Dispatcher, Xa as EffectStore, ws as GRANT_TTL_MS, rn as InMemoryDataStore, Gt as IndexedMatcher, Rt as LinearScanMatcher, rt as MetricBoundaries, od as NOOP_ANALYTICS_PROVIDER, Kn as NO_ROW_FILTER, Gr as NoRowFound, Oo as OUTBOX_ATTEMPTS_TABLE, Fo as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, Kr as OptimisticLockError, Us as REBAC_ADMIN_SCOPE, ds as REFRESH_LEASE_MS, nf as RUNTIME_NAME, Iu as ReactionRateLimiter, yi as ReplicatedDataStore, Vn as RowFilterUnavailable, Sl as SCHEDULE_SUBJECT, Ya as SYSTEM_SUBJECT, Xr as SelectBuilder, hc as SsrfBlockedError, ti as StoreOperationFailed, Jt as SubscriptionRegistry, ni as TableValidationFailed, ei as TenantScopeViolation, fu as TimelineRecorder, Gl as UndoBoundaryError, ql as UndoStack, Zr as UpdateBuilder, Sc as VOLTRO_AUDIT_MIXIN_ID, Cc as VOLTRO_SOFT_DELETE_MIXIN_ID, wc as VOLTRO_TENANT_MIXIN_ID, oo as WorkflowPayloadError, hr as _connectionStreamCount, gr as _resetConnectionSubjectsForTest, Go as _voltroConnectionGrantsTable, Ho as _voltroConnectionsTable, Du as _voltroRebacTuplesTable, Pl as _voltroScheduleClaimsTable, Nl as _voltroScheduleRunsTable, Fl as _voltroTracesTable, Il as _voltroUndoLogTable, Ru as _voltroWakeupsTable, Co as _voltroWorkflowEventDeliveriesTable, So as _voltroWorkflowEventsTable, ci as actingUserId, Ja as apiKeyManagementRoutes, ai as applyDefined, wu as applyDelta, Yl as applyInverse, Xl as applyInverses, Xn as applyRowFilter, Zn as applyRowFilterToDescriptor, Cd as applySoftDeleteScope, bd as applyTenantScope, iu as applyUndoInvocation, ec as assertCan, Yo as assertConnectionCipherConfigured, fd as attachAnalyticsMirror, ea as awaitServerListening, Po as backoffMs, Os as beginOAuthConnect, cr as bindConnectionSubject, Wi as bindMutation, Ii as bindStream, Fi as bindSubscription, Ai as bindSubscriptionUntyped, Su as buildIvmState, $d as buildPreview, Au as buildRebacInterceptor, Mu as buildRebacReadFilter, pi as buildSubjectKey, aa as buildTracingLayer, Uc as cacheScopeLeaks, ba as cachedBackend, $s as can, dl as cancelWakeup, vu as classifyShape, gs as clearConnectionRefreshFlights, Ys as clearResourcePolicies, a as clearRetentions, Xc as clearSystemStoreHandle, ol as compileCron, ks as completeOAuthConnect, ld as composeAnalytics, cd as composeAnalyticsSinks, Ts as connectionCallbackPath, Jo as connectionLabel, _r as connectionSubjectsSnapshot, Zu as countRunningWorkflows, Fn as counter, Rc as crud, ac as currentRequestLoader, vi as currentRoutingContext, wr as currentTraceContext, Ga as dataStoreApiKeyStore, Da as dataStoreIdempotencyStore, Ma as dataStoreKvStore, Mr as decryptField, pd as defineAggregate, qo as defineConnection, _o as defineEventTrigger, wd as defineExecutor, jo as defineOutboxHandler, Nu as defineReaction, Ks as defineResourcePolicy, al as defineSchedule, ed as defineSubscriber, Qn as deliveredRowCount, Tr as deriveKey, Qd as diffChange, Qi as drainForShutdown, zo as drainOutbox, vl as dueWakeups, Qs as effectiveRelations, kc as emptySchemaRegistry, Rr as enableGraphObservation, jr as encryptField, ic as enterRequestLoader, ma as envSecretsBackend, cs as exchangeAuthorizationCode, xr as externalSpanFromTraceparent, on as extractDbCause, qt as fingerprintFor, is as forgetCredential, Wc as formatCacheScopeLeaks, Hc as formatServerOnlyLeaks, yr as formatTraceparent, Jl as forwardChangeFromCdc, Ka as frameworkApiKeyStrategy, In as gauge, La as generateApiKeyToken, Ns as getConnectionResolver, lr as getConnectionSubject, q as getFieldCipher, qs as getResourcePolicy, Gn as getRowFilter, Zc as getSystemStoreHandle, mu as getTimelineRecorder, uc as getTupleSource, $ as groupKeyOf, Ln as histogramMetric, Xd as historyProvenance, xa as httpSecretsBackend, It as inspectWorkflow, dc as installPolicyGuardResolver, mr as interruptConnectionStreams, Ul as invertChange, md as isAggregateDefinition, xd as isEmptyTenantScopedRead, sn as isForeignKeyViolation, Wu as isIdleNow, Vi as isInfraError, zr as isObservingGraph, Sd as isOrglessUserSubject, Kl as isSafeToApply, rl as isScheduleDefinition, vo as isWorkflowEventTriggerDefinition, xu as ivmValue, Yd as lastWriteProvenance, as as listConnectionStates, Js as listResourcePolicies, ee as listRetentions, Ou as loadResourceTuples, ju as loadSubjectTuples, $c as localityAwareSelector, Wd as makeActionRunner, El as makeAdvisoryLockCoordinator, Er as makeAesCipher, Ba as makeApiKeyService, xc as makeApiKeyUsageBuffer, Wa as makeApiKeyUsageFlusher, cn as makeAppAccess, Na as makeAsyncKv, pa as makeBufferingSpanProcessor, Xo as makeConnectionRegistry, Fs as makeConnectionResolver, Is as makeConnectionsFacade, Ml as makeCoordinatedScheduler, pc as makeDataLoader, Hs as makeDisconnectConnectionExecutor, $a as makeEffectStoreLayer, wo as makeEventsFacade, Dr as makeFieldCipher, $r as makeFluentStore, Gu as makeIdleGate, po as makeLazyWorkflowFacade, zs as makeListConnectionsExecutor, Id as makeMutationRunner, Hd as makeOneShotQueryRunner, No as makeOutboxFacade, uo as makePostCommitWorkflowFacade, Vu as makeProcessAdapter, Vd as makeQueryDescriptorProducer, Bd as makeQueryReauthorizer, Ud as makeQuerySubscriber, Ku as makeRouterActivity, Tc as makeSchemaRegistry, Bs as makeStartConnectionExecutor, Vs as makeSubmitTokenExecutor, Vl as makeUndoCapture, qu as makeWakeGate, Xu as makeWakeProxyServer, lo as makeWorkflowFacade, fo as makeWorkflowFacadeWithCallerContext, mo as makeWorkflowHandlers, ho as makeWorkflowLayers, no as makeWorkflowRunHandle, fl as markWakeupFired, Cu as materializeIvm, Va as memoryApiKeyStore, tl as memoryReplicationAdapter, fi as memoryRywPositionStore, sl as nextFiring, yl as nextWakeup, Uu as nodeProcessSupervisor, sd as noopAnalytics, ud as noopAnalyticsSpec, Pa as noopKv, Wr as observeStore, Hr as observedGraph, dr as onBindConnectionSubject, Xi as onProcessShutdown, Ao as outboxAttemptsTable, Do as outboxTable, br as parseTraceparent, so as payloadPropertyNames, ui as powerOfTwoSelector, tf as previewInRollback, es as projectConnectionState, xl as pruneWakeups, Xs as rebacPolicyGraph, jn as recordSample, W as recordSubscriptionActive, Nn as recordSubscriptionDelivery, Vr as recordTableAccess, gu as recordTimelineEvent, Pc as redactColumns, lu as redactRow, mi as redisRywPositionStore, au as redoUndoInvocation, ls as refreshAccessToken, pr as registerConnectionStream, se as registerRetention, ul as registerWakeup, hl as releaseWakeup, di as replicaHealth, Mi as resetComputedQueryCacheWarnings, Ur as resetObservedGraph, _a as resetSecretsBackend, ys as resolveConnection, Ps as resolveConnectionForSubject, el as resolveCurrentRegion, ln as resolveDependentTables, Ds as resolveRedirectUri, Tu as resolveRescan, qn as resolveRowFilterScope, Jn as resolveRowFilterScopeFor, va as resolveSecret, ya as resolveSecretSync, Sa as resolveSecretsBackend, ou as resolveTimelineMode, le as retentionTtlMsFromEnv, du as reverseEventOverRows, nc as revokedIds, Qc as runAsSystem, Qu as runOrchestratorTick, Td as runProvidedEffect, Lu as runReaction, $u as runSingleNodeOrchestrator, Bu as runWakeLoop, Fd as runWithDeadlockRetry, Br as runWithObservedProcedure, oc as runWithRequestLoader, _i as runWithRoutingContext, Cr as runWithTraceContext, Es as sanitizeRedirectTo, jl as scheduleCoordinated, zc as schemaPropertyNames, Vc as serverOnlyLeaks, Ms as setConnectionResolver, kr as setFieldCipher, Wn as setRowFilter, ga as setSecretsBackend, Yc as setSystemStoreHandle, hu as setTimelineRecorderForTest, lc as setTupleSource, Ia as sha256Hex, wl as singleCoordinator, zn as snapshotMetrics, Bn as snapshotMetricsSync, bc as ssrfGuardHttpClientLayer, yc as ssrfReason, Ki as startRpcServer, Ol as startScheduler, ns as storeCredential, As as sweepExpiredGrants, he as sweepRetention, Wl as synthesizeInverse, mc as tracingHttpClientLayer, go as triggerWorkflow, ml as tryClaimWakeup, ur as unbindConnectionSubject, Ll as undoCaptureEnabled, nu as undoLogExecutor, yd as useAggregate, ad as useAnalytics, tc as visibleRows, zu as wakeDueOnce, Od as withRowFilter, eo as workflowToRpc, Bl as wrapCaptureStore, jc as wrapStoreWithBootCodec, li as wrapStoreWithMixinBehaviour };