@voltro/runtime 0.25.0 → 0.26.0

package/dist/index.js

@@ -2,26 +2,26 @@ import { Cause as e, Clock as t, Context as n, Cron as r, Deferred as i, Duratio
 import { ENCRYPTED_PREFIX as S, and as C, attachEagerLoads as w, attributionFields as T, boolean as E, clearRetentions as ee, collectSubqueries as D, contains as te, decryptFieldsOnRead as ne, deserializeArraysOnRead as re, encryptFieldsForWrite as ie, eq as O, evaluatePredicate as k, generateId as A, getRelations as ae, getTable as j, gt as oe, gte as se, hasEagerLoads as ce, id as M, inSet as le, integer as N, isEncrypted as ue, isNull as de, isTableReactive as fe, json as P, listRetentions as pe, lt as me, lte as he, missingConflictColumns as ge, missingRequiredColumns as _e, neq as ve, or as ye, planVersionedUpdate as be, queryFor as xe, raiseChangeListenerCeiling as Se, registerRetention as Ce, requireTable as we, retentionTtlMsFromEnv as Te, runWithWriteAttribution as Ee, serializeArraysForWrite as De, serverOnlyColumns as Oe, settleVersionedUpdate as ke, stampGeneratedId as Ae, startsWith as je, sweepRetention as Me, table as F, text as I, timestamp as L, walkLeaves as Ne } from "@voltro/database";
 import { createCipheriv as Pe, createDecipheriv as Fe, createHash as Ie, randomBytes as Le, randomUUID as Re, scryptSync as ze } from "node:crypto";
 import { EventEmitter as Be } from "node:events";
-import { ADMIN_SCOPE as Ve, APIKEY_ISSUE_ORG_SCOPE as He, APIKEY_ISSUE_OTHER_SCOPE as Ue, APIKEY_ISSUE_SELF_SCOPE as We, ConnectionHandshakeFailed as R, ConnectionInfo as Ge, ConnectionKindMismatch as Ke, ConnectionNotDeclared as qe, ConnectionSubjectRequired as Je, EventKeyInvalid as Ye, EventPayloadInvalid as Xe, EventPayloadTooLarge as Ze, MAX_EVENT_ENVELOPE_BYTES as Qe, ScopeError as $e, SubjectService as z, UndoConflict as et, UndoForbidden as tt, UndoNotFound as nt, WorkflowRunHandleSchema as rt, beginIdempotent as it, checkGuardsEffect as at, diffRows as ot, effectiveScopes as st, eventRoute as ct, failIdempotent as lt, finishIdempotent as ut, hasEffectiveScope as dt, isIdKeyed as ft, parseEventRoute as pt, publishServerError as mt, requireScope as ht, setPolicyGuardResolver as gt, systemSubject as _t, tsMs as vt, wsMutationIdempotencyScope as yt } from "@voltro/protocol";
-import { createLogger as B } from "@voltro/logger";
-import * as bt from "node:http";
-import { createServer as xt } from "node:http";
-import { HttpClient as V, HttpClientError as St, HttpClientRequest as Ct, HttpLayerRouter as H, HttpServer as wt, HttpServerRequest as Tt, HttpServerResponse as U } from "@effect/platform";
-import { NodeContext as Et, NodeHttpServer as Dt } from "@effect/platform-node";
-import { Rpc as Ot, RpcSerialization as kt, RpcServer as At } from "@effect/rpc";
-import { defineRestRoute as jt, dispatchSharedPath as Mt, requireAnyScope as Nt, requireScope as Pt } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as Ft } from "node:async_hooks";
-import { ArrayFormatter as It, TreeFormatter as Lt } from "effect/ParseResult";
-import { SpanKind as Rt, SpanStatusCode as zt } from "@opentelemetry/api";
-import { Kv as Bt, KvError as Vt, KvStore as Ht, layerConnections as Ut, layerMemory as Wt, layerRedis as Gt } from "@voltro/kv";
-import { apiKeyStrategy as Kt } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as qt, inspectWorkflow as Jt } from "@voltro/workflow";
-import { spawn as Yt } from "node:child_process";
+import { ADMIN_SCOPE as Ve, APIKEY_ISSUE_ORG_SCOPE as He, APIKEY_ISSUE_OTHER_SCOPE as Ue, APIKEY_ISSUE_SELF_SCOPE as We, ConnectionHandshakeFailed as R, ConnectionInfo as Ge, ConnectionKindMismatch as Ke, ConnectionNotDeclared as qe, ConnectionSubjectRequired as Je, EventKeyInvalid as Ye, EventPayloadInvalid as Xe, EventPayloadTooLarge as Ze, MAX_EVENT_ENVELOPE_BYTES as Qe, ScopeError as $e, SubjectService as et, UndoConflict as tt, UndoForbidden as nt, UndoNotFound as rt, WorkflowRunHandleSchema as it, beginIdempotent as at, checkGuardsEffect as ot, diffRows as st, effectiveScopes as ct, eventRoute as lt, failIdempotent as ut, finishIdempotent as dt, hasEffectiveScope as ft, isIdKeyed as pt, parseEventRoute as mt, publishServerError as ht, requireScope as gt, setPolicyGuardResolver as _t, systemSubject as vt, tsMs as yt, wsMutationIdempotencyScope as bt } from "@voltro/protocol";
+import { createLogger as z } from "@voltro/logger";
+import * as xt from "node:http";
+import { createServer as St } from "node:http";
+import { HttpClient as Ct, HttpClientError as wt, HttpClientRequest as Tt, HttpLayerRouter as B, HttpServer as Et, HttpServerRequest as Dt, HttpServerResponse as V } from "@effect/platform";
+import { NodeContext as Ot, NodeHttpServer as kt } from "@effect/platform-node";
+import { Rpc as At, RpcSerialization as jt, RpcServer as Mt } from "@effect/rpc";
+import { defineRestRoute as Nt, dispatchSharedPath as Pt, requireAnyScope as Ft, requireScope as It } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as Lt } from "node:async_hooks";
+import { ArrayFormatter as Rt, TreeFormatter as zt } from "effect/ParseResult";
+import { SpanKind as Bt, SpanStatusCode as Vt } from "@opentelemetry/api";
+import { Kv as Ht, KvError as Ut, KvStore as Wt, layerConnections as Gt, layerMemory as Kt, layerRedis as qt } from "@voltro/kv";
+import { apiKeyStrategy as Jt } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as Yt, inspectWorkflow as Xt } from "@voltro/workflow";
+import { spawn as Zt } from "node:child_process";
 //#region src/handlerBody.ts
-var Xt = (e) => {
+var Qt = (e) => {
 	if (o.isEffect(e)) return o.runPromise(e);
 	if (e instanceof Promise) return e;
-}, Zt = class {
+}, $t = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -62,7 +62,7 @@ var Xt = (e) => {
 		});
 		return { perTable: e };
 	}
-}, Qt = (e) => {
+}, en = (e) => {
 	let t = [];
 	for (let n of Ne(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
@@ -72,7 +72,7 @@ var Xt = (e) => {
 		values: n.value
 	}));
 	return t;
-}, $t = (e) => {
+}, tn = (e) => {
 	let t = [];
 	for (let n of Ne(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
@@ -80,10 +80,10 @@ var Xt = (e) => {
 		threshold: n.value
 	});
 	return t;
-}, en = (e, t) => {
+}, nn = (e, t) => {
 	for (let n of Ne(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
 	return null;
-}, tn = (e, t) => {
+}, rn = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -91,8 +91,8 @@ var Xt = (e) => {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, nn = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, rn = (e, t, n) => {
-	let r = nn(e, n);
+}, an = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, on = (e, t, n) => {
+	let r = an(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -100,7 +100,7 @@ var Xt = (e) => {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, an = class {
+}, sn = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -108,9 +108,9 @@ var Xt = (e) => {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = Qt(e.predicate), n = $t(e.predicate);
+		let t = en(e.predicate), n = tn(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = tn(r.fields, (t) => en(e.predicate, t));
+			let r = e.usingIndex, i = rn(r.fields, (t) => nn(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -255,7 +255,7 @@ var Xt = (e) => {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = tn(a, (e) => t[e]);
+				let i = rn(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -269,7 +269,7 @@ var Xt = (e) => {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) rn(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) on(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -278,7 +278,7 @@ var Xt = (e) => {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!rn(e, n.op, n.threshold)) return !1;
+			} else if (!on(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -300,23 +300,23 @@ var Xt = (e) => {
 		}
 		return i;
 	}
-}, on = (e) => {
+}, cn = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(on);
+	if (Array.isArray(e)) return e.map(cn);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = on(t[e]);
+		for (let e of n) r[e] = cn(t[e]);
 		return r;
 	}
 	return e;
-}, sn = (e, t, n) => {
-	let r = on({
+}, ln = (e, t, n) => {
+	let r = cn({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
 	return Ie("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, cn = class {
+}, un = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -335,7 +335,7 @@ var Xt = (e) => {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = sn(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = ln(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -393,7 +393,7 @@ var Xt = (e) => {
 		});
 		return e;
 	}
-}, ln = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, dn = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -403,7 +403,7 @@ var Xt = (e) => {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), un = (e, t, n) => {
+}), fn = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -421,11 +421,11 @@ var Xt = (e) => {
 		...e,
 		[i]: c
 	};
-}, dn = (e, t, n) => !e || k(e, t, n), fn = (e, t) => {
+}, pn = (e, t, n) => !e || k(e, t, n), H = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of D(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = fn(r.descriptor.predicate, t), a = pn(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = H(r.descriptor.predicate, t), a = mn(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -440,15 +440,15 @@ var Xt = (e) => {
 		}
 	}
 	return n;
-}, pn = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? fn(e.predicate, n), a = [...t.values()].filter((t) => dn(e.predicate, t, i));
+}, mn = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? H(e.predicate, n), a = [...t.values()].filter((t) => pn(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = mn(a, e.aggregations, e.groupBy);
+		let t = hn(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
-		let r = fn(e.having, n);
-		return t.filter((t) => dn(e.having, t, r));
+		let r = H(e.having, n);
+		return t.filter((t) => pn(e.having, t, r));
 	}
-	let o = ln(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = dn(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -456,7 +456,7 @@ var Xt = (e) => {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, mn = (e, t, n) => {
+}, hn = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -474,11 +474,11 @@ var Xt = (e) => {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = hn(r, e.rows);
+		for (let r of t) n[r.alias] = gn(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, hn = (e, t) => {
+}, gn = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -522,7 +522,7 @@ var Xt = (e) => {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, gn = "\0", _n = (e, t) => e === null ? t : `${e}${gn}${t}`, vn = class e {
+}, _n = "\0", vn = (e, t) => e === null ? t : `${e}${_n}${t}`, yn = class e {
 	#e;
 	#t;
 	#n(e) {
@@ -544,7 +544,7 @@ var Xt = (e) => {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(_n(t, n), e);
+			this.#e.set(vn(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -555,11 +555,11 @@ var Xt = (e) => {
 		}, t);
 	}
 	#o(e) {
-		return _n(this.#i, e);
+		return vn(this.#i, e);
 	}
 	#s() {
-		let e = /* @__PURE__ */ new Map(), t = this.#i === null ? null : `${this.#i}${gn}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(gn) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#i === null ? null : `${this.#i}${_n}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(_n) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#c(e) {
@@ -567,7 +567,7 @@ var Xt = (e) => {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = pn(e, this.#e.get(this.#o(e.table)) ?? /* @__PURE__ */ new Map(), this.#s());
+		let t = mn(e, this.#e.get(this.#o(e.table)) ?? /* @__PURE__ */ new Map(), this.#s());
 		return ce(e) ? w(t, e.eager, we(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
@@ -598,7 +598,7 @@ var Xt = (e) => {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = un(a, n, r);
+		let o = fn(a, n, r);
 		return i.set(t, o), this.#n({
 			table: e,
 			op: "update",
@@ -640,7 +640,7 @@ var Xt = (e) => {
 	async updateMany(e, t, n) {
 		let r = this.#e.get(this.#o(e));
 		if (!r) return 0;
-		let i = fn(n.where, this.#s()), a = 0;
+		let i = H(n.where, this.#s()), a = 0;
 		for (let [o, s] of r) {
 			if (!k(n.where, s, i)) continue;
 			let c = {
@@ -659,7 +659,7 @@ var Xt = (e) => {
 	async deleteMany(e, t) {
 		let n = this.#e.get(this.#o(e));
 		if (!n) return 0;
-		let r = fn(t.where, this.#s()), i = [];
+		let r = H(t.where, this.#s()), i = [];
 		for (let [e, a] of n) k(t.where, a, r) && i.push([e, a]);
 		for (let [t, r] of i) n.delete(t), this.#n({
 			table: e,
@@ -698,7 +698,7 @@ var Xt = (e) => {
 		}
 	}
 	async transactional(e) {
-		let t = new yn(this.#d());
+		let t = new bn(this.#d());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -734,7 +734,7 @@ var Xt = (e) => {
 			allocateNumericId: (e) => this.#l(e)
 		};
 	}
-}, yn = class {
+}, bn = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -764,7 +764,7 @@ var Xt = (e) => {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), n = pn(e, this.materialise(e.table), t);
+		let t = this.buildTablesView(e), n = mn(e, this.materialise(e.table), t);
 		return ce(e) ? w(n, e.eager, we(e.table), (e) => this.query(e)) : n;
 	}
 	async insert(e, t) {
@@ -804,7 +804,7 @@ var Xt = (e) => {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = un(i, n, r);
+		let a = fn(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -825,7 +825,7 @@ var Xt = (e) => {
 		}), !0;
 	}
 	async updateMany(e, t, n) {
-		let r = this.materialise(e), i = fn(n.where, this.buildTablesViewForPred(n.where)), a = 0;
+		let r = this.materialise(e), i = H(n.where, this.buildTablesViewForPred(n.where)), a = 0;
 		for (let [o, s] of r) {
 			if (!k(n.where, s, i)) continue;
 			let r = {
@@ -842,7 +842,7 @@ var Xt = (e) => {
 		return a;
 	}
 	async deleteMany(e, t) {
-		let n = this.materialise(e), r = fn(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
+		let n = this.materialise(e), r = H(t.where, this.buildTablesViewForPred(t.where)), i = 0, a = this.tombstones.get(e);
 		for (let [o, s] of n) k(t.where, s, r) && (this.overlay.get(e)?.delete(o), a || (a = /* @__PURE__ */ new Set(), this.tombstones.set(e, a)), a.add(o), this.events.push({
 			table: e,
 			op: "delete",
@@ -905,7 +905,7 @@ var Xt = (e) => {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, bn = (e) => {
+}, xn = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -916,26 +916,26 @@ var Xt = (e) => {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, xn = (e) => {
+}, Sn = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, Sn = (e) => {
+}, Cn = (e) => {
 	let t = e.dbCode, n = e.dbErrno;
 	return t === "57014" || n === 3024 || n === 1969 || t === "ETIMEOUT" || t === "SQLITE_INTERRUPT";
-}, Cn = (e) => ({
-	has: (t) => dt(e, t),
-	hasAny: (t) => t.some((t) => dt(e, t)),
-	require: (t) => ht(e, t),
+}, wn = (e) => ({
+	has: (t) => ft(e, t),
+	hasAny: (t) => t.some((t) => ft(e, t)),
+	require: (t) => gt(e, t),
 	get scopes() {
-		return st(e);
+		return ct(e);
 	}
-}), wn = (e) => {
+}), Tn = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return Tn(e, t), t;
-}, Tn = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && En(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Tn(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) Tn(n.descriptor, t);
-}, En = (e, t, n) => {
+	return En(e, t), t;
+}, En = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && Dn(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) En(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) En(n.descriptor, t);
+}, Dn = (e, t, n) => {
 	let r = ae(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -943,24 +943,24 @@ var Xt = (e) => {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && En(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && Dn(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && En(e, a.with, n);
+			n.add(e), a.with !== void 0 && Dn(e, a.with, n);
 		}
 	}
-}, Dn = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), On = /* @__PURE__ */ new Set(["*"]), kn = (e, t) => {
+}, On = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), kn = /* @__PURE__ */ new Set(["*"]), An = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			kn(e.not, t);
+			An(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) kn(n, t);
+			for (let n of e.and) An(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) kn(n, t);
+			for (let n of e.or) An(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -969,11 +969,11 @@ var Xt = (e) => {
 		}
 		e.op === "exists" || e.op === "not-exists" || t.add(e.column);
 	}
-}, W = (e, t, n) => {
+}, U = (e, t, n) => {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, An = (e, t, n) => {
+}, jn = (e, t, n) => {
 	let r = ae(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -981,50 +981,50 @@ var Xt = (e) => {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			W(n, r.tableName, [t.sourceKey, t.targetKey]), W(n, e, ["id"]), W(n, i.tableName, ["id"]), jn(i.tableName, o, n), o.with !== void 0 && An(i.tableName, o.with, n);
+			U(n, r.tableName, [t.sourceKey, t.targetKey]), U(n, e, ["id"]), U(n, i.tableName, ["id"]), Mn(i.tableName, o, n), o.with !== void 0 && jn(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && W(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? W(n, e, ["id"]) : W(n, e, [t.sourceKey]), W(n, s.tableName, ["id"]), jn(s.tableName, o, n), o.with !== void 0 && An(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && U(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? U(n, e, ["id"]) : U(n, e, [t.sourceKey]), U(n, s.tableName, ["id"]), Mn(s.tableName, o, n), o.with !== void 0 && jn(s.tableName, o.with, n);
 	}
-}, jn = (e, t, n) => {
+}, Mn = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		kn(t.where, r), W(n, e, r);
+		An(t.where, r), U(n, e, r);
 	}
-	t.orderBy !== void 0 && W(n, e, t.orderBy.map((e) => e.column));
+	t.orderBy !== void 0 && U(n, e, t.orderBy.map((e) => e.column));
 	let r = j(e);
-	r === void 0 ? W(n, e, ["*"]) : W(n, e, Object.keys(r.fields));
-}, Mn = (e) => {
+	r === void 0 ? U(n, e, ["*"]) : U(n, e, Object.keys(r.fields));
+}, Nn = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (Dn(e)) {
-		for (let n of wn(e)) W(t, n, ["*"]);
+	if (On(e)) {
+		for (let n of Tn(e)) U(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	kn(e.predicate, n);
+	An(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return W(t, e.table, n), e.eager !== void 0 && An(e.table, e.eager, t), t;
-}, Nn = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return On;
+	return U(t, e.table, n), e.eager !== void 0 && jn(e.table, e.eager, t), t;
+}, Pn = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return kn;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, Pn = (e, t) => {
+}, Fn = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = Nn(e);
+	let r = Pn(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, Fn = p.exponential({
+}, W = p.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), In = f.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), Ln = f.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), Rn = f.histogram("voltro_rpc_duration_seconds", Fn, "RPC handler duration in seconds."), zn = f.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), Bn = f.histogram("voltro_http_duration_seconds", Fn, "HTTP route duration in seconds."), Vn = f.histogram("voltro_plugin_hook_duration_seconds", Fn, "Plugin interceptor duration in seconds."), Hn = f.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), Un = f.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), Wn = f.histogram("voltro_subscription_delivery_seconds", Fn, "Subscription delivery produce→push latency in seconds."), Gn = f.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), Kn = f.counter("voltro_schedule_runs_total", { description: "Schedule firings by name + outcome." }), qn = f.histogram("voltro_schedule_duration_seconds", Fn, "Schedule handler duration in seconds."), Jn = f.gauge("voltro_schedule_last_success_timestamp_seconds", { description: "UNIX time of the last successful firing, per schedule." }), Yn = f.counter("voltro_workflow_runs_total", { description: "Workflow run terminal outcomes by name + status." }), Xn = f.histogram("voltro_workflow_duration_seconds", Fn, "Workflow run duration in seconds."), Zn = f.gauge("voltro_workflow_last_success_timestamp_seconds", { description: "UNIX time of the last successful run, per workflow." }), Qn = f.counter("voltro_event_published_total", { description: "Events published, by event name." }), $n = f.counter("voltro_event_deliveries_total", { description: "Event deliveries handed to a subscriber, by event name." }), er = f.counter("voltro_event_dropped_total", { description: "Event deliveries a subscriber provably lost, by event name + reason." }), tr = f.gauge("voltro_event_subscribers", { description: "Currently-attached event subscribers, by event name." }), nr = /* @__PURE__ */ new Map(), rr = (e, t, n) => {
+}), In = f.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), Ln = f.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), Rn = f.histogram("voltro_rpc_duration_seconds", W, "RPC handler duration in seconds."), zn = f.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), Bn = f.histogram("voltro_http_duration_seconds", W, "HTTP route duration in seconds."), Vn = f.histogram("voltro_plugin_hook_duration_seconds", W, "Plugin interceptor duration in seconds."), Hn = f.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), Un = f.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), Wn = f.histogram("voltro_subscription_delivery_seconds", W, "Subscription delivery produce→push latency in seconds."), Gn = f.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), Kn = f.counter("voltro_schedule_runs_total", { description: "Schedule firings by name + outcome." }), qn = f.histogram("voltro_schedule_duration_seconds", W, "Schedule handler duration in seconds."), Jn = f.gauge("voltro_schedule_last_success_timestamp_seconds", { description: "UNIX time of the last successful firing, per schedule." }), Yn = f.counter("voltro_workflow_runs_total", { description: "Workflow run terminal outcomes by name + status." }), Xn = f.histogram("voltro_workflow_duration_seconds", W, "Workflow run duration in seconds."), Zn = f.gauge("voltro_workflow_last_success_timestamp_seconds", { description: "UNIX time of the last successful run, per workflow." }), Qn = f.counter("voltro_event_published_total", { description: "Events published, by event name." }), $n = f.counter("voltro_event_deliveries_total", { description: "Event deliveries handed to a subscriber, by event name." }), er = f.counter("voltro_event_dropped_total", { description: "Event deliveries a subscriber provably lost, by event name + reason." }), tr = f.gauge("voltro_event_subscribers", { description: "Currently-attached event subscribers, by event name." }), nr = /* @__PURE__ */ new Map(), rr = (e, t, n) => {
 	let r = nr.get(t);
 	if (r !== void 0) return r;
 	let i = e;
@@ -1055,7 +1055,7 @@ var Xt = (e) => {
 }, gr = (e) => {
 	let t = f.increment(Yn).pipe(o.tagMetrics("workflow", e.name), o.tagMetrics("status", e.status)), n = f.update(Xn, e.durationMs / 1e3).pipe(o.tagMetrics("workflow", e.name)), r = e.status === "succeeded" && e.completedAtSec !== void 0 ? f.set(Zn, e.completedAtSec).pipe(o.tagMetrics("workflow", e.name)) : o.void;
 	o.runSync(o.zipRight(t, o.zipRight(n, r)));
-}, _r = (e, t) => f.counter(e, t === void 0 ? {} : { description: t }), vr = (e, t) => f.gauge(e, t === void 0 ? {} : { description: t }), yr = (e, t = Fn, n) => f.histogram(e, t, n), br = (e) => {
+}, _r = (e, t) => f.counter(e, t === void 0 ? {} : { description: t }), vr = (e, t) => f.gauge(e, t === void 0 ? {} : { description: t }), yr = (e, t = W, n) => f.histogram(e, t, n), br = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
@@ -1128,7 +1128,7 @@ var Xt = (e) => {
 		...t,
 		predicate: n
 	};
-}, G = B({ scope: "voltro:dispatcher" }), Pr = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Fr = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Ir = class {
+}, G = z({ scope: "voltro:dispatcher" }), Pr = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Fr = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Ir = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1138,12 +1138,12 @@ var Xt = (e) => {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new an(), this.subscriptionRegistry = new cn(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new sn(), this.subscriptionRegistry = new un(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a, o, s) {
-		let c = `sub_${Re()}`, l = i ?? `subscription.${e.table}`, u = wn(e), d = Mn(e);
+		let c = `sub_${Re()}`, l = i ?? `subscription.${e.table}`, u = Tn(e), d = Nn(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(c, e.table, e.predicate, r);
 		for (let e of u) {
 			let t = this.dependentByTable.get(e);
@@ -1356,7 +1356,7 @@ var Xt = (e) => {
 				G.trace("missing subscription", { subscriberId: n });
 				continue;
 			}
-			if (!t && !Pn(e, r.relevantFields)) {
+			if (!t && !Fn(e, r.relevantFields)) {
 				s++;
 				continue;
 			}
@@ -1381,7 +1381,7 @@ var Xt = (e) => {
 					}
 					t = Nr(e, r.baseDescriptor);
 				}
-				let a = JSON.stringify(on(t)), s = c.get(a);
+				let a = JSON.stringify(cn(t)), s = c.get(a);
 				s === void 0 && (s = this.deps.store.query(t), c.set(a, s));
 				let u = await s, d = r.lastDelivered;
 				if (Rr(u, d)) {
@@ -1391,11 +1391,11 @@ var Xt = (e) => {
 					});
 					continue;
 				}
-				if (r.lastDelivered = u, this.deps.cache !== void 0 && r.cacheBinding !== void 0 && this.deps.cache.put(r.cacheBinding, Array.from(r.dependentTables), u), ft(d) && ft(u)) {
+				if (r.lastDelivered = u, this.deps.cache !== void 0 && r.cacheBinding !== void 0 && this.deps.cache.put(r.cacheBinding, Array.from(r.dependentTables), u), pt(d) && pt(u)) {
 					let e = l.get(a);
 					e === void 0 && (e = /* @__PURE__ */ new Map(), l.set(a, e));
 					let t = e.get(d);
-					t === void 0 && (t = ot(d, u), e.set(d, t)), r.emit({
+					t === void 0 && (t = st(d, u), e.set(d, t)), r.emit({
 						_tag: "delta",
 						revision: o,
 						emittedAt: o,
@@ -1500,7 +1500,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, ii = new Ft(), ai = (e, t) => ii.run(e, t), oi = () => ii.getStore(), si = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ze(e, "voltro:field-encryption:v1", 32), ci = (e) => {
+}, ii = new Lt(), ai = (e, t) => ii.run(e, t), oi = () => ii.getStore(), si = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : ze(e, "voltro:field-encryption:v1", 32), ci = (e) => {
 	if (e.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${e.length}`);
 	return {
 		encrypt: (t) => {
@@ -1525,7 +1525,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	let t = q();
 	if (!t) throw Error(`decryptField: ${fi}`);
 	return t.decrypt(e);
-}, hi = new Ft(), gi = /* @__PURE__ */ new Set(), _i = /* @__PURE__ */ new Set(), vi = "\0", yi = process.env.VOLTRO_OBSERVE_GRAPH === "1", bi = () => {
+}, hi = new Lt(), gi = /* @__PURE__ */ new Set(), _i = /* @__PURE__ */ new Set(), vi = "\0", yi = process.env.VOLTRO_OBSERVE_GRAPH === "1", bi = () => {
 	yi = !0;
 }, xi = () => yi, Si = (e, t) => yi ? (_i.add(e.tag), hi.run(e, t)) : t(), Ci = (e, t) => {
 	if (!yi) return;
@@ -1823,8 +1823,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		try {
 			return await r();
 		} catch (t) {
-			let r = bn(t);
-			if (xn(r)) {
+			let r = xn(t);
+			if (Sn(r)) {
 				let t = n.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
 				if (i.includes("tenantid") || /\btenants\b/.test(i) || t != null && i.includes(String(t).toLowerCase())) throw new Ii({
 					table: e,
@@ -1847,7 +1847,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		if (r === void 0) return n;
 		let i = y.decodeUnknownEither(r)(n);
 		if (i._tag === "Right") return n;
-		let a = It.formatErrorSync(i.left).map((e) => ({
+		let a = Rt.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
@@ -1886,7 +1886,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		if (i === void 0) return n;
 		let a = y.decodeUnknownEither(i)(n);
 		if (a._tag === "Right") return n;
-		let o = It.formatErrorSync(a.left).map((e) => ({
+		let o = Rt.formatErrorSync(a.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), s = o[0];
@@ -1898,7 +1898,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}, m = t.dialect, h = (e, t) => {
 		let n = j(e);
 		return ie(m ? De(t, n, m) : t, n, q());
-	}, g = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", _ = B({ scope: "store.fieldEncryption" }), v = /* @__PURE__ */ new Set(), b = (e) => {
+	}, g = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", _ = z({ scope: "store.fieldEncryption" }), v = /* @__PURE__ */ new Set(), b = (e) => {
 		let t = `${e.table}.${e.column}`;
 		v.has(t) || (v.add(t), _.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
@@ -2281,7 +2281,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			return o.size;
 		}
 	};
-}, Zi = B({ scope: "voltro:replication" }), Qi = new Ft(), $i = (e, t) => Qi.run(e, t), ea = () => Qi.getStore(), ta = class {
+}, Zi = z({ scope: "voltro:replication" }), Qi = new Lt(), $i = (e, t) => Qi.run(e, t), ea = () => Qi.getStore(), ta = class {
 	primary;
 	replicas;
 	adapter;
@@ -2501,7 +2501,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	emitRouting(e) {
 		this.recordRouting?.(e);
 	}
-}, na = (e) => new Promise((t) => setTimeout(t, e)), ra = (e) => {
+}, na = (e) => new Promise((t) => setTimeout(t, e)), ra = (e, t, n) => {
+	if (t === void 0) return e;
+	let r = t * 1e3 - Date.now();
+	return r <= 0 ? n : b.interruptWhen(e, o.sleep(a.millis(r)));
+}, ia = (e) => {
 	let t = e.indexOf(".");
 	if (t <= 0) return;
 	let n = e.slice(0, t), r = e.slice(t + 1);
@@ -2515,25 +2519,25 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			kind: n
 		};
 	}
-}, ia = (e, t) => {
-	let n = ra(e);
+}, aa = (e, t) => {
+	let n = ia(e);
 	return n === void 0 ? t() : Si(n, t);
-}, aa = (e, t, n, r) => e === "subject" ? `${t}:s:${n}` : e === "global" ? `${t}:global` : r.tenantId == null ? void 0 : `${t}:t:${r.tenantId}`, oa = (e, t) => o.async((n) => {
+}, oa = (e, t, n, r) => e === "subject" ? `${t}:s:${n}` : e === "global" ? `${t}:global` : r.tenantId == null ? void 0 : `${t}:t:${r.tenantId}`, sa = (e, t) => o.async((n) => {
 	let r = Ee(t, () => o.runFork(e));
 	return r.addObserver((e) => {
 		n(e);
 	}), o.asVoid(l.interrupt(r));
-}), sa = (e, t, n) => ({
+}), ca = (e, t, n) => ({
 	subject: e,
 	traceId: t?.traceId ?? Re(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), ca = o.currentSpan.pipe(o.catchAll(() => o.succeed(void 0))), la = (e) => ({
+}), la = o.currentSpan.pipe(o.catchAll(() => o.succeed(void 0))), ua = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), ua = (e, t, n) => {
+}), da = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, da = (e) => {
+}, fa = (e) => {
 	if (Dr() !== void 0) return async () => {
 		let t = await o.runPromise(o.either(kr(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
@@ -2541,13 +2545,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, fa = (e, t, n, r, i, a, s, c) => b.asyncScoped((l) => o.gen(function* () {
+}, pa = (e, t, n, r, i, a, s, c) => b.asyncScoped((l) => o.gen(function* () {
 	let u = yield* o.tryPromise(() => t.subscribe(e, (e) => {
 		l.single(e);
 	}, n, r, i, a, s, c)).pipe(o.matchCause({
-		onFailure: (e) => (Sa(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (Ca(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Ea(e)
+			error: Da(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2568,20 +2572,20 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		});
 		yield* o.addFinalizer(() => o.sync(() => e()));
 	}
-})), pa = /* @__PURE__ */ new Set(), ma = () => {
-	pa.clear();
-}, ha = (e) => {
-	pa.has(e) || (pa.add(e), process.stderr.write(`[voltro] ${e}: \`cache:\` is declared but NOT applied — this query's handler returns a computed value, and the snapshot cache only wraps a store read. Every subscriber re-runs the handler. Either return a query descriptor (so the read can be cached), or drop \`cache:\` so the declaration matches what happens.\n`));
-}, ga = (e, t, n, r) => b.asyncScoped((i) => o.gen(function* () {
+})), ma = /* @__PURE__ */ new Set(), ha = () => {
+	ma.clear();
+}, ga = (e) => {
+	ma.has(e) || (ma.add(e), process.stderr.write(`[voltro] ${e}: \`cache:\` is declared but NOT applied — this query's handler returns a computed value, and the snapshot cache only wraps a store read. Every subscriber re-runs the handler. Either return a query descriptor (so the read can be cached), or drop \`cache:\` so the declaration matches what happens.\n`));
+}, _a = (e, t, n, r) => b.asyncScoped((i) => o.gen(function* () {
 	let a = yield* o.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(o.matchCause({
-		onFailure: (e) => (Sa(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (Ca(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Ea(e)
+			error: Da(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2602,16 +2606,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		});
 		yield* o.addFinalizer(() => o.sync(() => e()));
 	}
-})), _a = (e, t, n = "rpc.subscription", r, i, a, s) => b.unwrap(o.gen(function* () {
-	let c = yield* z, l = yield* Ge, u = yield* ca;
-	ua(u, n, c);
-	let d = sa(c, u, l.clientId), f = Yi(c.id, l.clientId), p = $i({ subjectKey: f }, () => ai({
+})), va = (e, t, n = "rpc.subscription", r, i, a, s) => b.unwrap(o.gen(function* () {
+	let c = yield* et, l = yield* Ge, u = yield* la;
+	da(u, n, c);
+	let d = ca(c, u, l.clientId), f = Yi(c.id, l.clientId), p = $i({ subjectKey: f }, () => ai({
 		traceId: d.traceId,
 		...d.spanId === void 0 ? {} : { spanId: d.spanId }
-	}, () => ia(n, () => e(d)))), m = o.isEffect(p) ? yield* p.pipe(o.matchCause({
-		onFailure: (e) => (Sa(`subscription.${n}`, d.traceId, e), {
+	}, () => aa(n, () => e(d)))), m = o.isEffect(p) ? yield* p.pipe(o.matchCause({
+		onFailure: (e) => (Ca(`subscription.${n}`, d.traceId, e), {
 			ok: !1,
-			error: Ea(e)
+			error: Da(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -2626,44 +2630,44 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		error: m.error
 	});
 	let h = m.value;
-	if (zr(h)) return i !== void 0 && ha(n), ga(h, t, d, n);
-	let g = h, _ = r?.(g), v = i === void 0 ? void 0 : aa(i.scope, i.baseKey, f, c);
-	return fa(g, t, d, _, n, i === void 0 || v === void 0 ? void 0 : {
+	if (zr(h)) return i !== void 0 && ga(n), _a(h, t, d, n);
+	let g = h, _ = r?.(g), v = i === void 0 ? void 0 : oa(i.scope, i.baseKey, f, c);
+	return ra(pa(g, t, d, _, n, i === void 0 || v === void 0 ? void 0 : {
 		key: v,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(c), s?.(c) ?? da(c));
-}).pipe(o.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), va = (e, t = "rpc.stream") => b.unwrap(o.gen(function* () {
-	let n = yield* z, r = yield* Ge, a = yield* ca;
-	ua(a, t, n);
-	let s = sa(n, a, r.clientId), c = ia(t, () => e(s)), l = o.isEffect(c) ? yield* c.pipe(o.orDie) : c;
-	if (s.clientId === void 0) return l;
-	let u = s.clientId;
+	}, a?.(c), s?.(c) ?? fa(c)), l.credentialExpiresAt, b.empty);
+}).pipe(o.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), ya = (e, t = "rpc.stream", n, r) => b.unwrap(o.gen(function* () {
+	let a = yield* et, s = yield* Ge, c = yield* la;
+	da(c, t, a);
+	let l = ca(a, c, s.clientId), u = aa(t, () => e(l)), d = o.isEffect(u) ? yield* u.pipe(o.orDie) : u, f = n === void 0 || n.length === 0 ? void 0 : () => ot(a, n, r), p = ra(f === void 0 ? d : b.unwrap(f().pipe(o.map((e) => e ? b.fail(e) : b.flatMap(d, (e) => b.unwrap(f().pipe(o.map((t) => t ? b.fail(t) : b.make(e)))))))), s.credentialExpiresAt, b.empty);
+	if (l.clientId === void 0) return p;
+	let m = l.clientId;
 	return b.unwrapScoped(o.gen(function* () {
-		let e = yield* i.make(), t = Yr(u, () => {
+		let e = yield* i.make(), t = Yr(m, () => {
 			i.unsafeDone(e, o.void);
 		});
-		return yield* o.addFinalizer(() => o.sync(() => t())), l.pipe(b.interruptWhen(i.await(e)));
+		return yield* o.addFinalizer(() => o.sync(() => t())), p.pipe(b.interruptWhen(i.await(e)));
 	}));
-}).pipe(o.withSpan(t, { attributes: { "framework.kind": "stream" } }))), ya = B({ scope: "voltro:rpc" }), ba = B({ scope: "voltro:http" }), xa = B({ scope: "voltro:shutdown" }), Sa = (t, n, r) => {
+}).pipe(o.withSpan(t, { attributes: { "framework.kind": "stream" } }))), ba = z({ scope: "voltro:rpc" }), xa = z({ scope: "voltro:http" }), Sa = z({ scope: "voltro:shutdown" }), Ca = (t, n, r) => {
 	if (e.isInterruptedOnly(r)) return;
-	let i = e.squash(r), a = i?._tag, o = i instanceof Error ? i.message : i?.message ?? String(i), s = e.dieOption(r)._tag === "Some", c = bn(i), l = {
+	let i = e.squash(r), a = i?._tag, o = i instanceof Error ? i.message : i?.message ?? String(i), s = e.dieOption(r)._tag === "Some", c = xn(i), l = {
 		traceId: n,
 		...a === void 0 ? {} : { errorTag: a },
 		...c
 	}, u = o === "Failed to execute statement" && typeof c.dbMessage == "string" ? c.dbMessage : o;
-	s ? ya.error(`${t} failed: ${u}`, l) : ya.warn(`${t} failed: ${u}`, l);
-}, Ca = /* @__PURE__ */ new Set([
+	s ? ba.error(`${t} failed: ${u}`, l) : ba.warn(`${t} failed: ${u}`, l);
+}, wa = /* @__PURE__ */ new Set([
 	"SqlError",
 	"ResultLengthMismatch",
 	"FieldDecryptionError"
-]), wa = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Ca.has(e._tag), Ta = (e) => ({
+]), Ta = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && wa.has(e._tag), Ea = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Ea = (t) => {
+}), Da = (t) => {
 	let n = e.squash(t);
-	if (n && typeof n == "object" && n._tag === "UnknownException" && (n = n.error ?? n.cause ?? n), wa(n)) return {
+	if (n && typeof n == "object" && n._tag === "UnknownException" && (n = n.error ?? n.cause ?? n), Ta(n)) return {
 		_tag: "InternalError",
 		message: "internal server error"
 	};
@@ -2675,7 +2679,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		...typeof a == "string" ? { _tag: a } : {},
 		message: typeof o == "string" ? o : String(n)
 	};
-}, Da = (e) => {
+}, Oa = (e) => {
 	if (e === void 0) return;
 	let t = y.encodeUnknownSync(e), n = y.decodeUnknownSync(e);
 	return {
@@ -2694,23 +2698,23 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			}
 		}
 	};
-}, Oa = (e) => ({
+}, ka = (e) => ({
 	_tag: "MutationInFlight",
 	message: "a request with this idempotency key is already in flight",
 	traceId: e
-}), ka = (e, t, n = "rpc.mutation", r, i) => o.gen(function* () {
-	let a = yield* z, s = yield* Ge, c = yield* ca;
-	ua(c, n, a);
-	let l = sa(a, c, s.clientId), u = i && s.idempotencyKey ? {
+}), Aa = (e, t, n = "rpc.mutation", r, i) => o.gen(function* () {
+	let a = yield* et, s = yield* Ge, c = yield* la;
+	da(c, n, a);
+	let l = ca(a, c, s.clientId), u = i && s.idempotencyKey ? {
 		store: i.store,
 		ttlMs: i.ttlMs,
 		key: s.idempotencyKey,
-		scope: yt(a.tenantId, Wi(a), n)
+		scope: bt(a.tenantId, Wi(a), n)
 	} : null;
 	if (u) {
-		let e = yield* o.promise(() => it(u.store, u.scope, u.key, u.ttlMs, Date.now()));
+		let e = yield* o.promise(() => at(u.store, u.scope, u.key, u.ttlMs, Date.now()));
 		if (e.kind === "replay") return r ? r.decode(e.response.body) : e.response.body;
-		if (e.kind === "conflict") return yield* o.die(Oa(l.traceId));
+		if (e.kind === "conflict") return yield* o.die(ka(l.traceId));
 	}
 	let d = Yi(a.id, s.clientId), f = {
 		traceId: l.traceId,
@@ -2719,40 +2723,40 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}, p = $i({ subjectKey: d }, () => ai({
 		traceId: l.traceId,
 		...l.spanId === void 0 ? {} : { spanId: l.spanId }
-	}, () => Ee(f, () => ia(n, () => e(t, l))))), m = o.isEffect(p) ? oa(p, f) : o.tryPromise({
+	}, () => Ee(f, () => aa(n, () => e(t, l))))), m = o.isEffect(p) ? sa(p, f) : o.tryPromise({
 		try: () => Promise.resolve(p),
 		catch: (e) => e
 	});
-	return yield* (u ? m.pipe(o.tap((e) => o.promise(() => ut(u.store, u.scope, u.key, {
+	return yield* (u ? m.pipe(o.tap((e) => o.promise(() => dt(u.store, u.scope, u.key, {
 		status: 200,
 		body: r ? r.encode(e) : e
-	}, Date.now())).pipe(o.ignore)), o.tapErrorCause(() => o.promise(() => lt(u.store, u.scope, u.key)).pipe(o.ignore))) : m).pipe(o.tapErrorCause((e) => o.sync(() => Sa(n, l.traceId, e))), o.catchIf(wa, () => o.die(Ta(l.traceId))), o.annotateLogs(la(l)));
-}).pipe(o.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Aa = 8 * 1024 * 1024, ja = (t) => {
-	let n = t.port ?? 4e3, r = t.host, i = t.path ?? "/ws", a = xt(), s = (e) => Tt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
-		if (!t.inspectRoute) return U.text("inspect route not configured", { status: 404 });
+	}, Date.now())).pipe(o.ignore)), o.tapErrorCause(() => o.promise(() => ut(u.store, u.scope, u.key)).pipe(o.ignore))) : m).pipe(o.tapErrorCause((e) => o.sync(() => Ca(n, l.traceId, e))), o.catchIf(Ta, () => o.die(Ea(l.traceId))), o.annotateLogs(ua(l)));
+}).pipe(o.withSpan(n, { attributes: { "framework.kind": "mutation" } })), ja = 8 * 1024 * 1024, Ma = (t) => {
+	let n = t.port ?? 4e3, r = t.host, i = t.path ?? "/ws", a = St(), s = (e) => Dt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
+		if (!t.inspectRoute) return V.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [t, r] of Object.entries(e.headers)) r !== void 0 && (n[t.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
 		e.method !== "GET" && e.method !== "HEAD" && e.method !== "OPTIONS" && (r = yield* e.text.pipe(o.orElseSucceed(() => "")));
 		let i = t.inspectRoute.handle(e.url, n, e.method, r), a = i instanceof Promise ? yield* o.promise(() => i) : i;
-		return a === null ? U.text("inspect route not found", { status: 404 }) : U.text(a.body, {
+		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	}))), c = () => Tt.HttpServerRequest.pipe(o.flatMap((e) => {
+	}))), c = () => Dt.HttpServerRequest.pipe(o.flatMap((e) => {
 		let n = t.inspectStream;
-		if (!n) return o.succeed(U.text("inspect stream not configured", { status: 404 }));
+		if (!n) return o.succeed(V.text("inspect stream not configured", { status: 404 }));
 		let r = {};
 		for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (r[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
 		let i = n.corsHeaders(r.origin);
-		if (n.isDisabled()) return o.succeed(U.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
+		if (n.isDisabled()) return o.succeed(V.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
 			status: 503,
 			contentType: "application/json; charset=utf-8",
 			headers: i
 		}));
 		let a = n.authorize(r);
-		if (!a.ok) return o.succeed(U.text(JSON.stringify({
+		if (!a.ok) return o.succeed(V.text(JSON.stringify({
 			error: "unauthorized",
 			reason: a.reason
 		}), {
@@ -2775,7 +2779,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				clearInterval(r), t();
 			}));
 		}));
-		return o.succeed(U.stream(h, {
+		return o.succeed(V.stream(h, {
 			status: 200,
 			headers: {
 				"content-type": "text/event-stream; charset=utf-8",
@@ -2785,23 +2789,23 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				...i
 			}
 		}));
-	})), d = H.add("*", "/_voltro/inspect/*", Tt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
-		if (!t.inspectRoute) return U.text("inspect route not configured", { status: 404 });
+	})), d = B.add("*", "/_voltro/inspect/*", Dt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
+		if (!t.inspectRoute) return V.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [t, r] of Object.entries(e.headers)) r !== void 0 && (n[t.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
 		e.method !== "GET" && e.method !== "HEAD" && e.method !== "OPTIONS" && (r = yield* e.text.pipe(o.orElseSucceed(() => "")));
 		let i = t.inspectRoute.handle(e.url, n, e.method, r), a = i instanceof Promise ? yield* o.promise(() => i) : i;
-		return a === null ? U.text("inspect route not found", { status: 404 }) : U.text(a.body, {
+		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
 	})))), f = u.empty;
-	t.inspectRoute !== void 0 && (f = t.inspectStream === void 0 ? u.mergeAll(H.add("*", "/_voltro/inspect", s(!0)), d) : u.mergeAll(H.add("GET", "/_voltro/inspect/stream", c()), H.add("*", "/_voltro/inspect", s(!0)), d));
+	t.inspectRoute !== void 0 && (f = t.inspectStream === void 0 ? u.mergeAll(B.add("*", "/_voltro/inspect", s(!0)), d) : u.mergeAll(B.add("GET", "/_voltro/inspect/stream", c()), B.add("*", "/_voltro/inspect", s(!0)), d));
 	let p = u.empty;
 	if (t.webhookRoutes !== void 0 && t.webhookRoutes.size > 0) {
-		let e = (e) => Tt.HttpServerRequest.pipe(o.flatMap((t) => o.gen(function* () {
+		let e = (e) => Dt.HttpServerRequest.pipe(o.flatMap((t) => o.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(o.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], s = ri(n.traceparent), c = yield* o.promise(() => e.handle({
@@ -2816,16 +2820,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				},
 				...s ? { parent: s } : {}
 			}));
-			return U.text(c.body, {
+			return V.text(c.body, {
 				status: c.status,
 				contentType: c.contentType
 			});
-		}))), n = Array.from(t.webhookRoutes.entries()).map(([t, n]) => H.add("*", t, e(n)));
+		}))), n = Array.from(t.webhookRoutes.entries()).map(([t, n]) => B.add("*", t, e(n)));
 		p = u.mergeAll(...n);
 	}
 	let m = u.empty;
 	if (t.httpRoutes !== void 0 && t.httpRoutes.length > 0) {
-		let n = (n) => Tt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
+		let n = (n) => Dt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
 			let r = {};
 			for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (r[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
 			let i = e.url.indexOf("?"), a = i >= 0 ? e.url.slice(0, i) : e.url, s = i >= 0 ? e.url.slice(i + 1) : "", c = e.method !== "GET" && e.method !== "HEAD" ? new Uint8Array(yield* e.arrayBuffer.pipe(o.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), l = t.getStore?.(), u = {
@@ -2835,8 +2839,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				headers: r,
 				rawBody: c,
 				...l === void 0 ? {} : { store: l }
-			}, d = yield* o.promise(() => Mt(n, u));
-			d.status >= 500 && ba.warn(`${e.method} ${a} → ${d.status}`, {
+			}, d = yield* o.promise(() => Pt(n, u));
+			d.status >= 500 && xa.warn(`${e.method} ${a} → ${d.status}`, {
 				method: e.method,
 				path: a,
 				status: d.status,
@@ -2859,7 +2863,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 						a !== void 0 && clearInterval(a), i();
 					}));
 				}));
-				return U.stream(i, {
+				return V.stream(i, {
 					status: d.status,
 					headers: {
 						...f,
@@ -2870,45 +2874,45 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 					}
 				});
 			}
-			return d.body instanceof Uint8Array ? U.uint8Array(d.body, p) : U.text(d.body ?? "", p);
-		})), o.tapErrorCause((t) => e.isInterruptedOnly(t) ? o.void : o.sync(() => ba.error(`${n.map((e) => e.method).join("|")} ${n[0].path} threw`, { path: n[0].path }, e.squash(t))))), r = /* @__PURE__ */ new Map();
+			return d.body instanceof Uint8Array ? V.uint8Array(d.body, p) : V.text(d.body ?? "", p);
+		})), o.tapErrorCause((t) => e.isInterruptedOnly(t) ? o.void : o.sync(() => xa.error(`${n.map((e) => e.method).join("|")} ${n[0].path} threw`, { path: n[0].path }, e.squash(t))))), r = /* @__PURE__ */ new Map();
 		for (let e of t.httpRoutes) {
 			let t = r.get(e.path);
 			t ? t.push(e) : r.set(e.path, [e]);
 		}
 		let i = [...r.entries()].flatMap(([e, t]) => {
 			let r = t.length === 1 ? t[0].method : "*", i = n(t);
-			return [H.add(r, e, i), H.add(r, `${e}/*`, i)];
+			return [B.add(r, e, i), B.add(r, `${e}/*`, i)];
 		});
 		m = u.mergeAll(...i);
 	}
-	let h = At.layerProtocolWebsocketRouter({ path: i }), g = At.layer(t.group), _ = At.layer(t.group).pipe(u.provide(At.layerProtocolHttpRouter({ path: "/rpc" })), u.provide(kt.layerJson), u.provide(t.httpHandlersLayer ?? t.handlersLayer)), v = u.scopedDiscard(o.gen(function* () {
-		let e = yield* At.Protocol;
+	let h = Mt.layerProtocolWebsocketRouter({ path: i }), g = Mt.layer(t.group), _ = Mt.layer(t.group).pipe(u.provide(Mt.layerProtocolHttpRouter({ path: "/rpc" })), u.provide(jt.layerJson), u.provide(t.httpHandlersLayer ?? t.handlersLayer)), v = u.scopedDiscard(o.gen(function* () {
+		let e = yield* Mt.Protocol;
 		yield* o.forkScoped(o.gen(function* () {
 			let t = yield* e.disconnects.take;
 			Kr(t), Xr(t);
 		}).pipe(o.forever));
-	})), y = u.mergeAll(g, v).pipe(u.provide(h), u.provide(kt.layerJson), u.provide(t.handlersLayer)), x = u.mergeAll(y, _, f, p, m), S = t.pluginHttpInterceptor, C = t.healthCheck, w = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), T = t.maxRpcBodyBytes ?? (Number.isFinite(w) && w > 0 ? w : 8388608), E = { "cache-control": "no-store" }, ee = (e) => o.gen(function* () {
-		let t = yield* Tt.HttpServerRequest, n = {};
+	})), y = u.mergeAll(g, v).pipe(u.provide(h), u.provide(jt.layerJson), u.provide(t.handlersLayer)), x = u.mergeAll(y, _, f, p, m), S = t.pluginHttpInterceptor, C = t.healthCheck, w = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), T = t.maxRpcBodyBytes ?? (Number.isFinite(w) && w > 0 ? w : 8388608), E = { "cache-control": "no-store" }, ee = (e) => o.gen(function* () {
+		let t = yield* Dt.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
 		if (t.method === "POST" && i === "/rpc") {
 			let e = n["content-length"];
-			if (e !== void 0 && Number(e) > T) return U.text("rpc payload too large", {
+			if (e !== void 0 && Number(e) > T) return V.text("rpc payload too large", {
 				status: 413,
 				headers: E
 			});
 		}
-		if (C && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? U.text("ok", {
+		if (C && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? V.text("ok", {
 			status: 200,
 			headers: E
-		}) : C.isReady() ? C.ping && !(yield* o.tryPromise(() => C.ping()).pipe(o.orElseSucceed(() => !1))) ? U.text("not-ready: dependency", {
+		}) : C.isReady() ? C.ping && !(yield* o.tryPromise(() => C.ping()).pipe(o.orElseSucceed(() => !1))) ? V.text("not-ready: dependency", {
 			status: 503,
 			headers: E
-		}) : U.text("ready", {
+		}) : V.text("ready", {
 			status: 200,
 			headers: E
-		}) : U.text("not-ready", {
+		}) : V.text("not-ready", {
 			status: 503,
 			headers: E
 		});
@@ -2925,32 +2929,32 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			headers: n,
 			remoteAddr: l
 		})).pipe(o.orElseSucceed(() => null));
-		return u === null ? yield* e : U.text(u.body ?? "", {
+		return u === null ? yield* e : V.text(u.body ?? "", {
 			status: u.status,
 			...u.headers ? { headers: u.headers } : {}
 		});
-	}), D = u.unwrapEffect(H.toHttpEffect(x).pipe(o.map((e) => wt.serve(ee(e))))).pipe(u.provide(Dt.layer(() => a, r === void 0 ? { port: n } : {
+	}), D = u.unwrapEffect(B.toHttpEffect(x).pipe(o.map((e) => Et.serve(ee(e))))).pipe(u.provide(kt.layer(() => a, r === void 0 ? { port: n } : {
 		port: n,
 		host: r
-	})), u.provide(Et.layer));
+	})), u.provide(Ot.layer));
 	t.tracerLayer && (D = D.pipe(u.provide(t.tracerLayer)));
-	let te = B({ scope: "voltro:rpc" }), ne = u.launch(D).pipe(o.catchAllCause((t) => o.sync(() => {
+	let te = z({ scope: "voltro:rpc" }), ne = u.launch(D).pipe(o.catchAllCause((t) => o.sync(() => {
 		te.error("rpc server crashed", {}, e.squash(t)), process.exit(1);
 	}))), re = o.runFork(ne);
-	return Ma.add(re), Va(), {
+	return Na.add(re), Ha(), {
 		server: a,
 		shutdown: async () => {
-			Ma.delete(re), await o.runPromise(l.interrupt(re)).then(() => void 0, () => void 0);
+			Na.delete(re), await o.runPromise(l.interrupt(re)).then(() => void 0, () => void 0);
 		}
 	};
-}, Ma = /* @__PURE__ */ new Set(), Na = /* @__PURE__ */ new Set(), Pa = !1, Fa = (e) => (Na.add(e), () => {
-	Na.delete(e);
-}), Ia = 1e4, La = 1e3, Ra = 3e5, za = () => {
+}, Na = /* @__PURE__ */ new Set(), Pa = /* @__PURE__ */ new Set(), Fa = !1, Ia = (e) => (Pa.add(e), () => {
+	Pa.delete(e);
+}), La = 1e4, Ra = 1e3, za = 3e5, Ba = () => {
 	let e = process.env.VOLTRO_SHUTDOWN_GRACE_MS;
-	if (e === void 0 || e === "") return Ia;
+	if (e === void 0 || e === "") return La;
 	let t = Number(e);
-	return !Number.isFinite(t) || t <= 0 ? Ia : Math.min(Ra, Math.max(La, Math.trunc(t)));
-}, Ba = (e) => {
+	return !Number.isFinite(t) || t <= 0 ? La : Math.min(za, Math.max(Ra, Math.trunc(t)));
+}, Va = (e) => {
 	let t = Date.now(), n = !1, r = (r) => () => {
 		n || (n = !0, clearTimeout(i), e.onOutcome?.({
 			reason: r,
@@ -2958,23 +2962,23 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}), e.exit());
 	}, i = setTimeout(r("deadline"), e.deadlineMs);
 	i.unref?.(), Promise.all(e.hooks.map((e) => Promise.resolve().then(e).then(() => void 0, () => void 0))).then(() => Promise.all(e.fibers.map((e) => o.runPromise(l.interrupt(e)).then(() => void 0, () => void 0)))).then(r("drained"), r("drained"));
-}, Va = () => {
-	if (Pa) return;
-	Pa = !0;
+}, Ha = () => {
+	if (Fa) return;
+	Fa = !0;
 	let e = () => {
-		let e = [...Ma], t = [...Na];
-		Ma.clear(), Na.clear(), Ba({
+		let e = [...Na], t = [...Pa];
+		Na.clear(), Pa.clear(), Va({
 			fibers: e,
 			hooks: t,
-			deadlineMs: za(),
+			deadlineMs: Ba(),
 			exit: () => process.exit(0),
 			onOutcome: ({ reason: e, ms: t }) => {
-				e === "drained" ? xa.info(`drained in ${t}ms`) : xa.error(`drain deadline exceeded — cut at ${t}ms`, { hint: "a shutdown hook or a pool drain did not complete; whatever had not finished did not happen" });
+				e === "drained" ? Sa.info(`drained in ${t}ms`) : Sa.error(`drain deadline exceeded — cut at ${t}ms`, { hint: "a shutdown hook or a pool drain did not complete; whatever had not finished did not happen" });
 			}
 		});
 	};
 	process.once("SIGINT", e), process.once("SIGTERM", e);
-}, Ha = (e, t = 1e4) => new Promise((n, r) => {
+}, Ua = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2990,13 +2994,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Ua = () => {
+}), Wa = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Wa = () => {
+}, Ga = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, Ga = async () => {
+}, Ka = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -3011,7 +3015,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, Ka = (e, t, n) => {
+}, qa = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -3034,8 +3038,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, qa = async (e = {}) => {
-	let t = e.mode ?? Ua(), n = e.metricsMode ?? Wa(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, Ja = async (e = {}) => {
+	let t = e.mode ?? Wa(), n = e.metricsMode ?? Ga(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: u.empty,
 		mode: t,
@@ -3044,13 +3048,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await Ga(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, d = t === "off", f = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", p, m;
+	let a = await Ka(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, d = t === "off", f = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", p, m;
 	e.spanProcessor ? m = e.spanProcessor : d ? m = void 0 : t === "memory" ? (p = new s(), m = new c(p)) : m = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let h = [
 		...e.traceSink ? [e.traceSink] : [],
 		...m ? [m] : [],
 		...r
-	], g = h.length === 1 ? h[0] : h, { reader: _, inMemory: v } = Ka(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), y = [..._ ? [_] : [], ...i], b = y.length === 0 ? void 0 : y.length === 1 ? y[0] : y, x = {
+	], g = h.length === 1 ? h[0] : h, { reader: _, inMemory: v } = qa(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), y = [..._ ? [_] : [], ...i], b = y.length === 0 ? void 0 : y.length === 1 ? y[0] : y, x = {
 		serviceName: f,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -3068,18 +3072,18 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: v
 	};
-}, Ja = {
-	[Rt.INTERNAL]: "internal",
-	[Rt.SERVER]: "server",
-	[Rt.CLIENT]: "client",
-	[Rt.PRODUCER]: "producer",
-	[Rt.CONSUMER]: "consumer"
-}, Ya = (e) => e[0] * 1e3 + e[1] / 1e6, Xa = 512, Za = 48, Qa = (e) => {
+}, Ya = {
+	[Bt.INTERNAL]: "internal",
+	[Bt.SERVER]: "server",
+	[Bt.CLIENT]: "client",
+	[Bt.PRODUCER]: "producer",
+	[Bt.CONSUMER]: "consumer"
+}, Xa = (e) => e[0] * 1e3 + e[1] / 1e6, Za = 512, Qa = 48, $a = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= Za) break;
+		if (n >= Qa) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > Xa ? `${i.slice(0, Xa)}…` : i;
+		if (typeof i == "string") t[r] = i.length > Za ? `${i.slice(0, Za)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -3088,49 +3092,49 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > Xa ? `${e.slice(0, Xa)}…` : e;
+			t[r] = e.length > Za ? `${e.slice(0, Za)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, $a = {
-	[zt.UNSET]: "unset",
-	[zt.OK]: "ok",
-	[zt.ERROR]: "error"
-}, eo = (e) => {
+}, eo = {
+	[Vt.UNSET]: "unset",
+	[Vt.OK]: "ok",
+	[Vt.ERROR]: "error"
+}, to = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: Ya(e.time),
-		...e.attributes ? { attributes: Qa(e.attributes) } : {}
+		tsMs: Xa(e.time),
+		...e.attributes ? { attributes: $a(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: Ja[e.kind] ?? "internal",
-		attributes: Qa(e.attributes),
-		startMs: Ya(e.startTime),
-		endMs: Ya(e.endTime),
-		durationMs: Ya(e.duration),
-		status: $a[e.status.code] ?? "unset",
+		kind: Ya[e.kind] ?? "internal",
+		attributes: $a(e.attributes),
+		startMs: Xa(e.startTime),
+		endMs: Xa(e.endTime),
+		durationMs: Xa(e.duration),
+		status: eo[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, to = (e) => ({
+}, no = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(eo(t));
+			e(to(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), no = { get: (e) => Promise.resolve(process.env[e]) }, ro = no, io = (e) => {
-	ro = e;
-}, ao = () => {
-	ro = no;
-}, oo = async (e) => await ro.get(e) ?? process.env[e], so = (e) => process.env[e], co = (e, t = 6e4, n = () => Date.now()) => {
+}), ro = { get: (e) => Promise.resolve(process.env[e]) }, io = ro, ao = (e) => {
+	io = e;
+}, oo = () => {
+	io = ro;
+}, so = async (e) => await io.get(e) ?? process.env[e], co = (e) => process.env[e], lo = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -3141,12 +3145,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, lo = (e) => {
+}, uo = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return co({ get: async (n) => {
+	if (e.perKey) return lo({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -3157,34 +3161,34 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, uo = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? no : e.kind === "custom" ? e.backend : e.kind === "http" ? lo(e) : no, fo = "_voltro_idempotency", po = (e) => {
+}, fo = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ro : e.kind === "custom" ? e.backend : e.kind === "http" ? uo(e) : ro, po = "_voltro_idempotency", mo = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, mo = (e) => ({
+}, ho = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: po(e.response),
-	createdAt: vt(e.createdAt)
-}), ho = async (e, t, n) => (await e.query({
-	table: fo,
+	response: mo(e.response),
+	createdAt: yt(e.createdAt)
+}), go = async (e, t, n) => (await e.query({
+	table: po,
 	predicate: C(O("scope", t), O("key", n)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, go = (e) => ({
+}))[0] ?? null, _o = (e) => ({
 	get: async (t, n) => {
-		let r = await ho(e, t, n);
-		return r ? mo(r) : null;
+		let r = await go(e, t, n);
+		return r ? ho(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = A({
 				kind: "typeid",
 				prefix: "idem"
-			}, fo), o = await e.insertIgnore(fo, {
+			}, po), o = await e.insertIgnore(po, {
 				id: a,
 				scope: t,
 				key: n,
@@ -3193,11 +3197,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - vt(o.createdAt) < i) return mo(o);
-			await e.delete(fo, o.id);
+			if (r - yt(o.createdAt) < i) return ho(o);
+			await e.delete(po, o.id);
 		}
-		let a = await ho(e, t, n);
-		return a ? mo(a) : {
+		let a = await go(e, t, n);
+		return a ? ho(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -3206,36 +3210,36 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await ho(e, t, n);
-		a && await e.update(fo, a.id, {
+		let a = await go(e, t, n);
+		a && await e.update(po, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await ho(e, t, n);
-		r && await e.delete(fo, r.id);
+		let r = await go(e, t, n);
+		r && await e.delete(po, r.id);
 	}
-}), J = "_voltro_kv", _o = (e) => {
+}), J = "_voltro_kv", vo = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, vo = (e, t) => {
-	let n = _o(e.expiresAt);
+}, yo = (e, t) => {
+	let n = vo(e.expiresAt);
 	return n !== null && n <= t;
-}, yo = (e) => e === null ? null : JSON.parse(e), bo = async (e, t) => (await e.query({
+}, bo = (e) => e === null ? null : JSON.parse(e), xo = async (e, t) => (await e.query({
 	table: J,
 	predicate: O("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, xo = (e) => {
+}))[0] ?? null, So = (e) => {
 	let t = (e, t, n) => o.tryPromise({
 		try: n,
-		catch: (n) => new Vt({
+		catch: (n) => new Ut({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -3243,8 +3247,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	});
 	return {
 		get: (n) => t("get", n, async () => {
-			let t = await bo(e, n);
-			return t === null ? h.none() : vo(t, Date.now()) ? (await e.delete(J, t.id), h.none()) : h.some(yo(t.value));
+			let t = await xo(e, n);
+			return t === null ? h.none() : yo(t, Date.now()) ? (await e.delete(J, t.id), h.none()) : h.some(bo(t.value));
 		}),
 		set: (n, r, i) => t("set", n, async () => {
 			let t = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(t + i.ttlMs) : null, o = A({
@@ -3267,14 +3271,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			});
 		}),
 		delete: (n) => t("delete", n, async () => {
-			let t = await bo(e, n);
+			let t = await xo(e, n);
 			if (t === null) return !1;
-			let r = !vo(t, Date.now());
+			let r = !yo(t, Date.now());
 			return await e.delete(J, t.id), r;
 		}),
 		has: (n) => t("has", n, async () => {
-			let t = await bo(e, n);
-			return t === null ? !1 : vo(t, Date.now()) ? (await e.delete(J, t.id), !1) : !0;
+			let t = await xo(e, n);
+			return t === null ? !1 : yo(t, Date.now()) ? (await e.delete(J, t.id), !1) : !0;
 		}),
 		list: (n) => t("list", "", async () => {
 			let t = Date.now(), r = ye(de("expiresAt"), oe("expiresAt", new Date(t))), i = n === "" ? r : C(te("key", n), r), a = await e.query({
@@ -3285,7 +3289,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), o = [];
-			for (let e of a) vo(e, t) || (n === "" || e.key.startsWith(n)) && o.push(e.key);
+			for (let e of a) yo(e, t) || (n === "" || e.key.startsWith(n)) && o.push(e.key);
 			return o;
 		}),
 		clear: () => t("clear", "", async () => {
@@ -3295,8 +3299,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			} });
 		})
 	};
-}, So = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? Gt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(u.provide(Ut)) : r === "memory" ? Wt() : u.succeed(Ht, Ht.of(xo(e))), a = d.make(Bt.Default.pipe(u.provide(i))), o = await a.runPromise(Bt);
+}, Co = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? qt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(u.provide(Gt)) : r === "memory" ? Kt() : u.succeed(Wt, Wt.of(So(e))), a = d.make(Ht.Default.pipe(u.provide(i))), o = await a.runPromise(Ht);
 	return {
 		kv: {
 			get: (e) => a.runPromise(o.get(e)).then((e) => h.getOrUndefined(e)),
@@ -3311,7 +3315,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, Co = {
+}, wo = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -3319,7 +3323,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, wo = "_voltro_api_keys", To = (e) => Ie("sha256").update(e, "utf8").digest("hex"), Eo = (e = "voltro_") => `${e}${Le(30).toString("base64url")}`, Do = (e) => ({
+}, To = "_voltro_api_keys", Eo = (e) => Ie("sha256").update(e, "utf8").digest("hex"), Do = (e = "voltro_") => `${e}${Le(30).toString("base64url")}`, Oo = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -3332,18 +3336,18 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	createdBy: e.createdBy ?? null,
 	onBehalfOf: e.onBehalfOf ?? null,
 	...e.metadata == null ? {} : { metadata: e.metadata }
-}), Oo = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), ko = (e, t = {}) => {
+}), ko = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ao = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = t.usage, i = async (t) => {
-		let r = Eo(n), i = A({
+		let r = Do(n), i = A({
 			kind: "typeid",
 			prefix: "apikey"
-		}, wo), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, To), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
 			onBehalfOf: t.onBehalfOf ?? null,
-			hashedKey: To(r),
+			hashedKey: Eo(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -3362,7 +3366,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		};
 	}, a = async (t, n = Date.now()) => {
 		let i = await e.findByHash(t);
-		return !i || !Oo(i, n) ? null : (r === void 0 ? await e.patch(i.id, { lastUsedAt: n }) : r.touch(i.id, n), {
+		return !i || !ko(i, n) ? null : (r === void 0 ? await e.patch(i.id, { lastUsedAt: n }) : r.touch(i.id, n), {
 			id: i.id,
 			tenantId: i.tenantId ?? "",
 			createdBy: i.createdBy ?? null,
@@ -3374,7 +3378,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	return {
 		issue: i,
 		resolveByHash: a,
-		verify: (e, t) => a(To(e), t),
+		verify: (e, t) => a(Eo(e), t),
 		revoke: async (t, n, r = Date.now()) => {
 			let i = await e.findById(t);
 			return !i || (i.tenantId ?? null) !== n ? !1 : (await e.patch(t, { revokedAt: r }), !0);
@@ -3390,9 +3394,9 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				...a.metadata == null ? {} : { metadata: a.metadata }
 			}));
 		},
-		list: async (t) => (await e.listByTenant(t)).map(Do)
+		list: async (t) => (await e.listByTenant(t)).map(Oo)
 	};
-}, Ao = () => {
+}, jo = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -3409,21 +3413,21 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			});
 		}
 	};
-}, jo = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Mo = (e) => ({
+}, Mo = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, No = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: jo(e.lastUsedAt),
-	expiresAt: jo(e.expiresAt),
-	revokedAt: jo(e.revokedAt),
+	lastUsedAt: Mo(e.lastUsedAt),
+	expiresAt: Mo(e.expiresAt),
+	revokedAt: Mo(e.revokedAt),
 	createdBy: e.createdBy ?? null,
 	onBehalfOf: e.onBehalfOf ?? null,
-	createdAt: jo(e.createdAt) ?? 0,
+	createdAt: Mo(e.createdAt) ?? 0,
 	...e.metadata == null ? {} : { metadata: e.metadata }
-}), No = (e) => async (t, n) => {
+}), Po = (e) => async (t, n) => {
 	let r = await e.findById(t);
 	if (r === null) return;
 	let i = r.requestCount ?? 0, a = r.lastUsedAt ?? 0;
@@ -3431,9 +3435,9 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		requestCount: i + n.requests,
 		lastUsedAt: Math.max(a, n.lastUsedAt)
 	});
-}, Po = (e) => {
+}, Fo = (e) => {
 	let t = async (t) => await e.query({
-		table: wo,
+		table: To,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -3451,33 +3455,33 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(wo, n(t));
+			await e.insert(To, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(O("hashedKey", e));
-			return n[0] ? Mo(n[0]) : null;
+			return n[0] ? No(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(O("id", e));
-			return n[0] ? Mo(n[0]) : null;
+			return n[0] ? No(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : O("tenantId", e))).map(Mo).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : O("tenantId", e))).map(No).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(wo, t, n(r));
+			await e.update(To, t, n(r));
 		}
 	};
-}, Fo = (e, t = {}) => Kt({
+}, Io = (e, t = {}) => Jt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), Io = (e) => {
+}), Lo = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null,
 		scopes: t.scopes ?? []
 	};
-}, Lo = (e, t = "/v1/api-keys") => {
+}, Ro = (e, t = "/v1/api-keys") => {
 	let n = y.Struct({
 		id: y.String,
 		name: y.String,
@@ -3496,11 +3500,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		})))
 	});
 	return [
-		jt({
+		Nt({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [Nt([
+			guards: [Ft([
 				Ve,
 				We,
 				He,
@@ -3518,7 +3522,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				keyPrefix: y.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = Io(n), a = new Set(i.scopes), o = (e) => a.has(Ve) || a.has(e), s = r.onBehalfOf === void 0 ? i.id : r.onBehalfOf;
+				let r = t.body, i = Lo(n), a = new Set(i.scopes), o = (e) => a.has(Ve) || a.has(e), s = r.onBehalfOf === void 0 ? i.id : r.onBehalfOf;
 				if (s === null) {
 					if (!o(He)) throw new $e({
 						required: He,
@@ -3556,58 +3560,58 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				};
 			}
 		}),
-		jt({
+		Nt({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [Pt(Ve)],
+			guards: [It(Ve)],
 			input: y.Struct({}),
 			output: y.Struct({ keys: y.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(Io(n).tenantId)] })
+			handler: async (t, n) => ({ keys: [...await e.list(Lo(n).tenantId)] })
 		}),
-		jt({
+		Nt({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [Pt(Ve)],
+			guards: [It(Ve)],
 			input: y.Struct({ body: y.Struct({ id: y.String }) }),
 			output: y.Struct({ ok: y.Boolean }),
-			handler: async (t, n) => ({ ok: await e.revoke(t.body.id, Io(n).tenantId) })
+			handler: async (t, n) => ({ ok: await e.revoke(t.body.id, Lo(n).tenantId) })
 		})
 	];
-}, Ro = {
+}, zo = {
 	type: "anonymous",
 	id: null,
 	tenantId: null
-}, zo = class extends n.Tag("@voltro/EffectStore")() {}, Bo = (e, t) => (n) => n instanceof Ii ? n : new Li({
+}, Bo = class extends n.Tag("@voltro/EffectStore")() {}, Vo = (e, t) => (n) => n instanceof Ii ? n : new Li({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), Vo = (e, t, n) => o.tryPromise({
+}), Ho = (e, t, n) => o.tryPromise({
 	try: n,
-	catch: Bo(e, t)
-}), Ho = (e) => u.succeed(zo, {
-	query: ((t) => Vo("query", t.table, () => e.query(t))),
-	insert: (t, n) => Vo("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => Vo("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => Vo("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => Vo("hardDelete", t, () => e.hardDelete(t, n))
-}), Uo = (e) => Ot.make(e.name, {
+	catch: Vo(e, t)
+}), Uo = (e) => u.succeed(Bo, {
+	query: ((t) => Ho("query", t.table, () => e.query(t))),
+	insert: (t, n) => Ho("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => Ho("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => Ho("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => Ho("hardDelete", t, () => e.hardDelete(t, n))
+}), Wo = (e) => At.make(e.name, {
 	payload: e.payloadSchema,
-	success: rt,
+	success: it,
 	error: e.errorSchema
-}), Wo = (e, t) => ({
+}), Go = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), Go = Wo, Ko = (t) => {
+}), Ko = Go, qo = (t) => {
 	let n = e.failureOption(t), r = n._tag === "Some" ? n.value : e.squash(t);
 	return {
 		tag: r && typeof r == "object" && "_tag" in r ? String(r._tag) : null,
 		message: r?.message ?? String(r)
 	};
-}, qo = (e, t, n) => {
+}, Jo = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -3633,7 +3637,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: Ko(r.cause)
+			error: qo(r.cause)
 		};
 	}
 	return {
@@ -3642,7 +3646,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, Jo = (e) => new Promise((t) => setTimeout(t, e)), Yo = class extends Error {
+}, Yo = (e) => new Promise((t) => setTimeout(t, e)), Xo = class extends Error {
 	workflowName;
 	missingFields;
 	detail;
@@ -3651,7 +3655,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		let r = t.length > 0 ? ` missing required field(s): ${t.join(", ")}.` : "";
 		super(`Workflow "${e}" was started with an invalid payload.${r} ${n}`), this.workflowName = e, this.missingFields = t, this.detail = n, this.name = "WorkflowPayloadError";
 	}
-}, Xo = (e) => {
+}, Zo = (e) => {
 	let t = e.ast;
 	if (!Array.isArray(t.propertySignatures)) return {
 		required: [],
@@ -3662,10 +3666,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		required: n.filter((e) => !e.isOptional).map((e) => String(e.name)),
 		optional: n.filter((e) => e.isOptional).map((e) => String(e.name))
 	};
-}, Zo = (e) => {
+}, Qo = (e) => {
 	let t = e.ast;
 	return Array.isArray(t.propertySignatures) ? t.propertySignatures.filter((e) => !e.isOptional && typeof e.name == "string").map((e) => String(e.name)) : [];
-}, Qo = (e) => {
+}, $o = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) {
@@ -3676,17 +3680,19 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}, r = (e, t) => {
 		let n = y.validateEither(e.payloadSchema)(t);
 		if (n._tag === "Right") return;
-		let r = typeof t == "object" && t ? Object.keys(t) : [], i = Zo(e.payloadSchema).filter((e) => !r.includes(e));
-		throw new Yo(e.name, i, Lt.formatErrorSync(n.left));
+		let r = typeof t == "object" && t ? Object.keys(t) : [], i = Qo(e.payloadSchema).filter((e) => !r.includes(e));
+		throw new Xo(e.name, i, zt.formatErrorSync(n.left));
 	}, i = (e, t) => {
 		let i = n(e);
 		return r(i, t), i;
 	}, a = async (t, r) => {
 		let i = n(t);
-		return qo(t, r, await e.runEffect(i.poll(r)));
-	}, o = async () => e.runEffect(qt()), s = async (t, n, r) => {
+		return Jo(t, r, await e.runEffect(i.poll(r)));
+	}, o = async () => e.runEffect(Yt()), s = async (t, n, r) => {
 		let a = i(t, n), o;
-		return r?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(n)), await e.rememberStartContext?.(t, o, r.callerContext)), r?.wait ? (await e.runEffect(a.execute(n)), Wo(t, o ?? await e.runEffect(a.executionId(n)))) : Wo(t, await e.runEffect(a.execute(n, { discard: !0 })));
+		if (r?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(n)), await e.rememberStartContext?.(t, o, r.callerContext)), r?.wait) return await e.runEffect(a.execute(n)), e.onEnqueue?.(), Go(t, o ?? await e.runEffect(a.executionId(n)));
+		let s = await e.runEffect(a.execute(n, { discard: !0 }));
+		return e.onEnqueue?.(), Go(t, s);
 	};
 	return {
 		start: s,
@@ -3724,7 +3730,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				let e = await a(r, i);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${r}' run '${i}'`);
-				await Jo(c);
+				await Yo(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -3760,24 +3766,28 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		retry: async (t, n) => {
 			if (!e.retry) throw Error("Workflow retry is not configured in this runtime");
 			return e.retry(t, n);
+		},
+		redrive: async (t) => {
+			if (!e.redrive) throw Error("Workflow redrive is not configured in this runtime");
+			return e.redrive(t);
 		}
 	};
-}, $o = (e, t) => ({
+}, es = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), Wo(n, a);
+		return t(() => e.start(n, r)), Go(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), Wo(n, a);
+		return t(() => e.child(n, r, i)), Go(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), es = (e, t) => ({
+}), ts = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -3791,7 +3801,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), ts = (e) => {
+}), ns = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -3810,28 +3820,29 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		signal: (e, n, r) => t().signal(e, n, r),
 		update: (e, n, r, i) => t().update(e, n, r, i),
 		listRuns: ((e) => t().listRuns(e)),
-		retry: (e, n) => t().retry(e, n)
+		retry: (e, n) => t().retry(e, n),
+		redrive: (e) => t().redrive(e)
 	};
-}, ns = (e, t) => {
+}, rs = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? o.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(o.map((e) => Wo(r.definition.name, e)))).pipe(o.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? o.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(o.map((e) => Go(r.definition.name, e)))).pipe(o.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, rs = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, is = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? o.succeed(void 0) : o.promise(() => Promise.resolve(a))).pipe(o.flatMap((a) => {
 		let s = {
 			...a,
-			subject: a?.subject ?? Ro,
+			subject: a?.subject ?? zo,
 			traceId: a?.traceId ?? "workflow-bootstrap"
 		}, c = t.buildContext(s, {
 			workflowName: e.definition.name,
 			executionId: i,
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
-		}), l = e.buildExecute(c), d = (n?.(e, l, s) ?? l)(r, i), f = u.succeed(z, s.subject), p = c?.store, m = p === void 0 ? d : o.provide(d, Ho(p));
+		}), l = e.buildExecute(c), d = (n?.(e, l, s) ?? l)(r, i), f = u.succeed(et, s.subject), p = c?.store, m = p === void 0 ? d : o.provide(d, Uo(p));
 		return o.provide(m, f);
 	}));
-}))), is = (e) => {
+}))), as = (e) => {
 	if ("on" in e) {
 		let { on: t, ...n } = e;
 		return {
@@ -3844,10 +3855,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		_tag: "workflowEventTrigger",
 		...e
 	};
-}, as = is, os = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", ss = () => {
+}, os = as, ss = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", cs = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, cs = (e) => `${e}_${ss()}`, ls = (e) => e.id ?? `${e.event}->${e.workflow}`, us = F("_voltro_workflow_events", {
+}, ls = (e) => `${e}_${cs()}`, us = (e) => e.id ?? `${e.event}->${e.workflow}`, ds = F("_voltro_workflow_events", {
 	id: M({ prefix: "wfe" }),
 	name: I(),
 	payload: P(),
@@ -3855,7 +3866,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	subject: P().nullable(),
 	traceId: I().nullable(),
 	occurredAt: L().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]), ds = F("_voltro_workflow_event_deliveries", {
+}).index(["name"]).index(["source"]).index(["occurredAt"]), fs = F("_voltro_workflow_event_deliveries", {
 	id: M({ prefix: "wfed" }),
 	eventId: I(),
 	eventName: I(),
@@ -3873,8 +3884,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	errorMessage: I().nullable(),
 	createdAt: L().default("now"),
 	completedAt: L().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), fs = (e) => {
-	let t = e.makeId ?? cs, n = /* @__PURE__ */ new Map();
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), ps = (e) => {
+	let t = e.makeId ?? ls, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3915,7 +3926,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		});
 		let f = o(n), p = [];
 		for (let o of f) {
-			let s = ls(o), l = o.workflow, u;
+			let s = us(o), l = o.workflow, u;
 			try {
 				let f = o.idempotencyKey?.(d) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(d)) {
@@ -4018,7 +4029,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			triggered: p
 		};
 	} };
-}, ps = B({ scope: "voltro:events" }), ms = 64, hs = 5 * 6e4, gs = 1e4, _s = class {
+}, ms = z({ scope: "voltro:events" }), hs = 64, gs = 5 * 6e4, _s = 1e4, vs = class {
 	routes = /* @__PURE__ */ new Map();
 	origin;
 	ringSize;
@@ -4030,7 +4041,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	interestListeners = /* @__PURE__ */ new Set();
 	now;
 	constructor(e) {
-		this.origin = e.origin, this.ringSize = e.ringSize ?? ms, this.ringTtlMs = e.ringTtlMs ?? hs, this.maxRoutes = e.maxRoutes ?? gs, this.publishRemote = e.publishRemote, this.deliveryOf = e.deliveryOf, this.now = e.now ?? Date.now;
+		this.origin = e.origin, this.ringSize = e.ringSize ?? hs, this.ringTtlMs = e.ringTtlMs ?? gs, this.maxRoutes = e.maxRoutes ?? _s, this.publishRemote = e.publishRemote, this.deliveryOf = e.deliveryOf, this.now = e.now ?? Date.now;
 	}
 	get instanceOrigin() {
 		return this.origin;
@@ -4050,7 +4061,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let n of this.interestListeners) try {
 			n(e, t);
 		} catch (n) {
-			ps.warn("event interest listener threw", {
+			ms.warn("event interest listener threw", {
 				event: e,
 				active: t,
 				cause: n
@@ -4068,7 +4079,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		if (t !== void 0) return t.lastTouched = this.now(), t;
 		this.evictIfOverCapacity();
 		let n = {
-			latest: this.deliveryOf?.(pt(e).event) === "latest",
+			latest: this.deliveryOf?.(mt(e).event) === "latest",
 			listeners: /* @__PURE__ */ new Set(),
 			watermark: /* @__PURE__ */ new Map(),
 			localNext: 1,
@@ -4085,7 +4096,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			this.routes.delete(r), n += 1;
 		}
 		if (n === 0) {
-			ps.warn("event ring capacity reached with all routes live — replay buffers cleared", {
+			ms.warn("event ring capacity reached with all routes live — replay buffers cleared", {
 				routes: this.routes.size,
 				maxRoutes: this.maxRoutes
 			});
@@ -4099,7 +4110,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		i > 0 && e.ring.splice(0, i);
 	}
 	publish(e) {
-		let t = ct(e.tenantId, e.event, e.key), n = this.state(t), r = {
+		let t = lt(e.tenantId, e.event, e.key), n = this.state(t), r = {
 			route: t,
 			event: e.event,
 			origin: this.origin,
@@ -4110,7 +4121,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		if (n.localNext += 1, this.accept(n, r), or(e.event), this.publishRemote !== void 0) try {
 			this.publishRemote(r);
 		} catch (t) {
-			ps.warn("event broadcast publish failed — local delivery unaffected", {
+			ms.warn("event broadcast publish failed — local delivery unaffected", {
 				event: e.event,
 				cause: t
 			});
@@ -4139,14 +4150,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let n of e.listeners) try {
 			n(i);
 		} catch (e) {
-			ps.warn("event listener threw — other subscribers unaffected", {
+			ms.warn("event listener threw — other subscribers unaffected", {
 				event: t.event,
 				cause: e
 			});
 		}
 	}
 	subscribe(e) {
-		let t = ct(e.tenantId, e.event, e.key), n = this.state(t);
+		let t = lt(e.tenantId, e.event, e.key), n = this.state(t);
 		e.onAttach?.(new Map(n.watermark)), n.listeners.add(e.listener), lr(e.event, 1), this.shiftInterest(e.event, 1);
 		let r = e.options?.resume;
 		if (r !== void 0) this.replayForResume(n, r, e.listener);
@@ -4203,7 +4214,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	snapshot() {
 		return [...this.routes.entries()].map(([e, t]) => ({
 			route: e,
-			event: t.ring[t.ring.length - 1]?.envelope.event ?? pt(e).event,
+			event: t.ring[t.ring.length - 1]?.envelope.event ?? mt(e).event,
 			subscribers: t.listeners.size,
 			buffered: t.ring.length,
 			lastEmittedAt: t.ring[t.ring.length - 1]?.envelope.emittedAt
@@ -4212,13 +4223,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	clear() {
 		this.routes.clear();
 	}
-}, vs = (e) => e instanceof Error ? e.message : String(e), ys = (e, t, n, r) => o.gen(function* () {
+}, ys = (e) => e instanceof Error ? e.message : String(e), bs = (e, t, n, r) => o.gen(function* () {
 	let i = y.encode(t.key), a = y.encode(t.payload), s = yield* i(n).pipe(o.mapError((e) => new Ye({
 		event: t.name,
-		message: vs(e)
+		message: ys(e)
 	}))), c = yield* a(r).pipe(o.mapError((e) => new Xe({
 		event: t.name,
-		message: vs(e)
+		message: ys(e)
 	}))), l = Buffer.byteLength(JSON.stringify({
 		event: t.name,
 		key: s,
@@ -4247,10 +4258,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		n: -1,
 		deferred: !0
 	});
-}), bs = (e) => {
+}), xs = (e) => {
 	let t;
 	return Object.assign(e, { then: (n, r) => (t ??= o.runPromise(e), t.then(n, r)) });
-}, xs = (e) => ({ publish: (t, n, r) => bs(ys(e, t, n, r)) }), Ss = 64, Cs = 1, ws = (e) => e.kind === "gap" ? {
+}, Ss = (e) => ({ publish: (t, n, r) => xs(bs(e, t, n, r)) }), Cs = 64, ws = 1, Ts = (e) => e.kind === "gap" ? {
 	_tag: "gap",
 	missed: e.missed,
 	reason: e.reason
@@ -4260,16 +4271,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	n: e.envelope.n,
 	emittedAt: e.envelope.emittedAt,
 	payload: e.envelope.payload
-}, Ts = (e) => {
+}, Es = (e) => {
 	let t = new Map(e ?? []);
 	return (e, n = 0) => {
 		let r = t.get(e.origin) ?? 0;
 		return t.set(e.origin, Math.max(r, e.n)), r === 0 && n === 0 ? 0 : Math.max(0, e.n - r - 1);
 	};
-}, Es = (e) => b.unwrapScoped(o.gen(function* () {
-	let t = yield* z, n = yield* Ge, r = t.tenantId ?? null;
+}, Ds = (e) => b.unwrapScoped(o.gen(function* () {
+	let t = yield* et, n = yield* Ge, r = t.tenantId ?? null;
 	if (e.guards !== void 0 && e.guards.length > 0) {
-		let n = yield* at(t, e.guards, e.key);
+		let n = yield* ot(t, e.guards, e.key);
 		if (n) return yield* o.fail(n);
 	}
 	let i = e.bus.deliveryFor(e.event) === "latest", a = yield* g.sliding(e.queueSize ?? (i ? 1 : 64)), s = /* @__PURE__ */ new Map(), c = e.bus.subscribe({
@@ -4294,22 +4305,26 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			e();
 		}));
 	}
-	let l = i ? () => 0 : Ts(s), u = b.fromQueue(a, { shutdown: !0 }).pipe(b.flatMap((t) => {
-		if (t.kind === "gap") return b.make(ws(t));
-		let n = l(t.envelope, t.prior);
-		sr(e.event);
-		let r = ws(t);
-		if (n === 0) return b.make(r);
-		cr(e.event, "buffer", n);
-		let i = {
-			_tag: "gap",
-			missed: n,
-			reason: "buffer"
-		};
-		return b.fromIterable([i, r]);
-	}));
-	return b.concat(b.fromIterable([{ _tag: "attached" }]), u);
-})), Ds = B({ scope: "voltro:members" }), Os = 5e3, ks = class {
+	let l = i ? () => 0 : Es(s), u = e.guards, d = u === void 0 || u.length === 0 ? void 0 : () => ot(t, u, e.key), f = b.fromQueue(a, { shutdown: !0 }).pipe(b.flatMap((e) => d === void 0 ? p(e) : b.unwrap(d().pipe(o.map((t) => t ? b.fail(t) : p(e))))));
+	function p(t) {
+		return b.suspend(() => {
+			if (t.kind === "gap") return b.make(Ts(t));
+			let n = l(t.envelope, t.prior);
+			sr(e.event);
+			let r = Ts(t);
+			if (n === 0) return b.make(r);
+			cr(e.event, "buffer", n);
+			let i = {
+				_tag: "gap",
+				missed: n,
+				reason: "buffer"
+			};
+			return b.fromIterable([i, r]);
+		});
+	}
+	let m = { _tag: "attached" };
+	return ra(b.concat(b.fromIterable([m]), f), n.credentialExpiresAt, b.fromIterable([m]));
+})), Os = z({ scope: "voltro:members" }), ks = 5e3, As = class {
 	members = /* @__PURE__ */ new Map();
 	listeners = /* @__PURE__ */ new Set();
 	instanceId;
@@ -4321,7 +4336,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	now;
 	timer;
 	constructor(e) {
-		this.instanceId = e.instanceId, this.now = e.now ?? Date.now, this.startedAt = e.startedAt ?? this.now(), this.meta = e.meta, this.heartbeatMs = e.heartbeatMs ?? Os, this.downAfterMs = e.downAfterMs ?? this.heartbeatMs * 3, this.announce = e.announce, this.members.set(this.instanceId, {
+		this.instanceId = e.instanceId, this.now = e.now ?? Date.now, this.startedAt = e.startedAt ?? this.now(), this.meta = e.meta, this.heartbeatMs = e.heartbeatMs ?? ks, this.downAfterMs = e.downAfterMs ?? this.heartbeatMs * 3, this.announce = e.announce, this.members.set(this.instanceId, {
 			startedAt: this.startedAt,
 			meta: this.meta,
 			lastHeardAt: this.now()
@@ -4347,7 +4362,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				...this.meta === void 0 ? {} : { meta: this.meta }
 			});
 		} catch (e) {
-			Ds.warn("membership: announce failed", { cause: e });
+			Os.warn("membership: announce failed", { cause: e });
 		}
 	}
 	receive(e) {
@@ -4401,16 +4416,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let t of this.listeners) try {
 			t(e);
 		} catch (t) {
-			Ds.warn("membership: listener threw", {
+			Os.warn("membership: listener threw", {
 				event: e.kind,
 				cause: t
 			});
 		}
 	}
-}, As = B({ scope: "voltro:outbox" }), Y = "_voltro_outbox", js = {
+}, js = z({ scope: "voltro:outbox" }), Y = "_voltro_outbox", Ms = {
 	kind: "typeid",
 	prefix: "obx"
-}, Ms = F(Y, {
+}, Ns = F(Y, {
 	id: M({ prefix: "obx" }),
 	effect: I(),
 	payload: P(),
@@ -4428,10 +4443,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	resendRequestedBy: I().nullable(),
 	resendReason: I().nullable(),
 	resendCount: N()
-}), Ns = "_voltro_outbox_attempts", Ps = {
+}), Ps = "_voltro_outbox_attempts", Fs = {
 	kind: "typeid",
 	prefix: "obxa"
-}, Fs = F(Ns, {
+}, Is = F(Ps, {
 	id: M({ prefix: "obxa" }),
 	outboxId: I(),
 	effect: I(),
@@ -4452,11 +4467,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	subjectId: I().nullable(),
 	tenantId: I().nullable(),
 	traceId: I().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Is = (e) => {
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), Ls = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Ls = 8, Rs = (e) => ({
+}, Rs = 8, zs = (e) => ({
 	enqueue: async (t, n, r) => {
 		let i = (e.now ?? (() => /* @__PURE__ */ new Date()))(), a = r?.idempotencyKey;
 		if (a !== void 0) {
@@ -4471,12 +4486,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			if (t !== void 0) return t.id;
 		}
 		let o = {
-			id: A(js, Y),
+			id: A(Ms, Y),
 			effect: t,
 			payload: n,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: r?.maxAttempts ?? Ls,
+			maxAttempts: r?.maxAttempts ?? Rs,
 			nextAttemptAt: new Date(i.getTime() + (r?.delayMs ?? 0)),
 			idempotencyKey: a ?? null,
 			lastError: null,
@@ -4523,7 +4538,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), zs = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Bs = 50, Vs = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Hs = (e) => {
+}), Bs = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Vs = 50, Hs = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Us = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -4533,13 +4548,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: Vs(n, 8192)
+		preview: Hs(n, 8192)
 	} : t;
-}, Us = async (e, t, n) => {
+}, Ws = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(Ns, {
-			id: A(Ps, Ns),
+		await e.insert(Ps, {
+			id: A(Fs, Ps),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -4550,14 +4565,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : Vs(t.error, 4e3),
-			response: Hs(t.response),
+			error: t.error === null ? null : Hs(t.error, 4e3),
+			response: Us(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		As.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		js.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -4565,7 +4580,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: Ns,
+			table: Ps,
 			predicate: O("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -4575,11 +4590,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Ns, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(Ps, r.id);
 	} catch (e) {
-		As.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		js.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, Ws = async (e) => {
+}, Gs = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = await e.store.query({
 		table: Y,
 		predicate: C(O("status", "pending"), he("nextAttemptAt", t)),
@@ -4597,7 +4612,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			o++;
 			continue;
 		}
-		let u = s.attempts + 1, d = s.maxAttempts ?? Ls, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = s.attempts + 1, d = s.maxAttempts ?? Rs, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let t = await l.handler({
 				payload: s.payload ?? {},
@@ -4606,7 +4621,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				tenantId: s.tenantId ?? null,
 				traceId: s.traceId ?? null
 			});
-			await Us(e.store, {
+			await Ws(e.store, {
 				outboxRow: s,
 				attempt: u,
 				outcome: "delivered",
@@ -4624,7 +4639,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			}), r++;
 		} catch (r) {
 			let o = r instanceof Error ? r.message : String(r), l = u >= d;
-			await Us(e.store, {
+			await Ws(e.store, {
 				outboxRow: s,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -4636,20 +4651,20 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: o,
-				nextAttemptAt: new Date(t.getTime() + zs(u)),
+				nextAttemptAt: new Date(t.getTime() + Bs(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (a++, As.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (a++, js.error("outbox effect dead-lettered after exhausting attempts", {
 				id: n,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, r)) : (i++, As.warn("outbox delivery failed; will retry", {
+			}, r)) : (i++, js.warn("outbox delivery failed; will retry", {
 				id: n,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: zs(u)
+				retryInMs: Bs(u)
 			}));
 		}
 	}
@@ -4659,10 +4674,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		dead: a,
 		skipped: o
 	};
-}, Gs = B({ scope: "voltro:connections" }), X = "_voltro_connections", Ks = {
+}, Ks = z({ scope: "voltro:connections" }), X = "_voltro_connections", qs = {
 	kind: "typeid",
 	prefix: "conn"
-}, qs = F(X, {
+}, Js = F(X, {
 	id: M({ prefix: "conn" }),
 	connectionId: I(),
 	subjectId: I(),
@@ -4685,10 +4700,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	metadata: P().nullable(),
 	connectedAt: L(),
 	updatedAt: L()
-}).unique("byConnectionSubject", ["connectionId", "subjectId"]).index(["subjectId"]), Js = "_voltro_connection_grants", Ys = {
+}).unique("byConnectionSubject", ["connectionId", "subjectId"]).index(["subjectId"]), Ys = "_voltro_connection_grants", Xs = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Xs = F(Js, {
+}, Zs = F(Ys, {
 	id: M({ prefix: "cgrant" }),
 	state: I().unique(),
 	connectionId: I(),
@@ -4698,8 +4713,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	redirectTo: I(),
 	createdAt: L(),
 	expiresAt: L()
-}).index(["expiresAt"]), Zs = /^[a-z][a-z0-9-]*$/, Qs = (e) => {
-	if (!Zs.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+}).index(["expiresAt"]), Qs = /^[a-z][a-z0-9-]*$/, $s = (e) => {
+	if (!Qs.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of [
 			"authorizeUrl",
@@ -4709,9 +4724,9 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 	}
 	return e;
-}, $s = (e) => e.label ?? e.id, ec = (e) => {
+}, ec = (e) => e.label ?? e.id, tc = (e) => {
 	if (e.length !== 0 && q() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, tc = (e) => {
+}, nc = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -4721,14 +4736,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, nc = (e) => {
+}, rc = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, rc = (e) => nc(e)?.toISOString() ?? null, ic = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), ac = (e, t) => t === void 0 ? {
+}, ic = (e) => rc(e)?.toISOString() ?? null, ac = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), oc = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: $s(e),
+	label: ec(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -4739,24 +4754,24 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: $s(e),
+	label: ec(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: ic(t.scopes),
-	expiresAt: rc(t.expiresAt),
+	scopes: ac(t.scopes),
+	expiresAt: ic(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: rc(t.connectedAt)
-}, oc = async (e, t, n) => (await e.query({
+	connectedAt: ic(t.connectedAt)
+}, sc = async (e, t, n) => (await e.query({
 	table: X,
 	predicate: C(O("connectionId", t), O("subjectId", n)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], sc = async (e) => {
+}))[0], cc = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: A(Ks, X),
+		id: A(qs, X),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -4774,8 +4789,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return cc(e.store, r);
-}, cc = (e, t) => e.upsert(X, t, {
+	return lc(e.store, r);
+}, lc = (e, t) => e.upsert(X, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -4791,10 +4806,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), lc = async (e, t, n) => {
-	let r = await oc(e, t, n);
+}), uc = async (e, t, n) => {
+	let r = await sc(e, t, n);
 	return r !== void 0 && e.delete(X, r.id);
-}, uc = async (e, t, n) => {
+}, dc = async (e, t, n) => {
 	let r = await e.query({
 		table: X,
 		predicate: O("subjectId", n),
@@ -4803,9 +4818,9 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => ac(e, i.get(e.id)));
-}, dc = (e, t) => globalThis.fetch(e, t), fc = async (e, t, n) => {
-	let r = e.fetchImpl ?? dc, i, a;
+	return t.list().map((e) => oc(e, i.get(e.id)));
+}, fc = (e, t) => globalThis.fetch(e, t), pc = async (e, t, n) => {
+	let r = e.fetchImpl ?? fc, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -4845,62 +4860,62 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, pc = (e, t, n = Date.now) => fc(e, {
+}, mc = (e, t, n = Date.now) => pc(e, {
 	grant_type: "authorization_code",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), mc = (e, t, n = Date.now) => fc(e, {
+}, n), hc = (e, t, n = Date.now) => pc(e, {
 	grant_type: "refresh_token",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	refresh_token: t
-}, n), hc = 6e4, gc = 3e4, _c = class extends Error {
+}, n), gc = 6e4, _c = 3e4, vc = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, vc = (e) => new Promise((t) => {
+}, yc = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), yc = /* @__PURE__ */ new Map(), bc = (e, t) => `${e}\u0000${t}`, xc = () => {
-	yc.clear();
-}, Sc = (e, t) => ({
+}), bc = /* @__PURE__ */ new Map(), xc = (e, t) => `${e}\u0000${t}`, Sc = () => {
+	bc.clear();
+}, Cc = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
 	accessToken: mi(String(t.accessToken)),
-	expiresAt: nc(t.expiresAt),
-	scopes: ic(t.scopes),
+	expiresAt: rc(t.expiresAt),
+	scopes: ac(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), Cc = (e, t, n) => {
-	let r = nc(e.expiresAt);
+}), wc = (e, t, n) => {
+	let r = rc(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, wc = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await oc(n, r.id, i);
-	if (a === void 0) throw new _c(r.id, i);
-	if (r.kind === "pat" || !Cc(a, r.refreshSkewMs ?? 6e4, t())) return Sc(r, a);
-	let o = bc(r.id, i), s = yc.get(o);
+}, Tc = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await sc(n, r.id, i);
+	if (a === void 0) throw new vc(r.id, i);
+	if (r.kind === "pat" || !wc(a, r.refreshSkewMs ?? 6e4, t())) return Cc(r, a);
+	let o = xc(r.id, i), s = bc.get(o);
 	if (s !== void 0) return s;
-	let c = Tc({
+	let c = Ec({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		yc.delete(o);
+		bc.delete(o);
 	});
-	return yc.set(o, c), c;
-}, Tc = async (e) => {
-	let { store: t, subjectId: n, now: r } = e, i = e.definition, a = e.sleep ?? vc, o = i.refreshSkewMs ?? 6e4, s = e.row.id;
+	return bc.set(o, c), c;
+}, Ec = async (e) => {
+	let { store: t, subjectId: n, now: r } = e, i = e.definition, a = e.sleep ?? yc, o = i.refreshSkewMs ?? 6e4, s = e.row.id;
 	if (await t.updateMany("_voltro_connections", { refreshLockedUntil: new Date(r() + 3e4) }, { where: C(O("id", s), he("refreshLockedUntil", new Date(r()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await a(200);
-			let e = await oc(t, i.id, n);
-			if (e === void 0) throw new _c(i.id, n);
-			if (!Cc(e, o, r())) return Sc(i, e);
+			let e = await sc(t, i.id, n);
+			if (e === void 0) throw new vc(i.id, n);
+			if (!wc(e, o, r())) return Cc(i, e);
 		}
 		throw new R({
 			connectionId: i.id,
@@ -4921,7 +4936,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	});
 	let l;
 	try {
-		l = await mc(i, mi(String(c)), r);
+		l = await hc(i, mi(String(c)), r);
 	} catch (e) {
 		let n = e instanceof R ? e : new R({
 			connectionId: i.id,
@@ -4938,7 +4953,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Gs.warn("connection refresh failed", {
+		}), Ks.warn("connection refresh failed", {
 			connectionId: i.id,
 			transient: n.transient,
 			reason: n.reason
@@ -4954,32 +4969,32 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(r())
 	};
-	return Sc(i, await t.update(X, s, u) ?? {
+	return Cc(i, await t.update(X, s, u) ?? {
 		...e.row,
 		...u
 	});
-}, Ec = (e = 32) => {
+}, Dc = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, Dc = (e) => {
+}, Oc = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, Oc = async (e) => {
+}, kc = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return Dc(new Uint8Array(t));
-}, kc = 10 * 6e4, Ac = (e) => `/_voltro/connections/${e}/callback`, jc = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, Mc = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${Ac(e.id)}`, Nc = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = Ec(), i = n.pkce === !1 ? null : Ec(48), a = Mc(n, e.publicUrl);
-	await e.store.insert(Js, {
-		id: A(Ys, Js),
+	return Oc(new Uint8Array(t));
+}, Ac = 10 * 6e4, jc = (e) => `/_voltro/connections/${e}/callback`, Mc = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, Nc = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${jc(e.id)}`, Pc = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = Dc(), i = n.pkce === !1 ? null : Dc(48), a = Nc(n, e.publicUrl);
+	await e.store.insert(Ys, {
+		id: A(Xs, Ys),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		codeVerifier: i === null ? null : pi(i),
-		redirectTo: jc(e.redirectTo),
+		redirectTo: Mc(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + kc)
+		expiresAt: new Date(t.getTime() + Ac)
 	});
 	let o = new URLSearchParams({
 		response_type: "code",
@@ -4989,15 +5004,15 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (o.set("code_challenge", await Oc(i)), o.set("code_challenge_method", "S256"));
+	i !== null && (o.set("code_challenge", await kc(i)), o.set("code_challenge_method", "S256"));
 	let s = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${s}${o.toString()}`,
 		state: r
 	};
-}, Pc = async (e) => {
+}, Fc = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: Js,
+		table: Ys,
 		predicate: O("state", e.state),
 		order: [],
 		take: 1,
@@ -5009,8 +5024,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(Js, n.id);
-	let r = String(n.connectionId), i = nc(n.expiresAt);
+	await e.store.delete(Ys, n.id);
+	let r = String(n.connectionId), i = rc(n.expiresAt);
 	if (i !== null && i.getTime() < t.getTime()) throw new R({
 		connectionId: r,
 		reason: "handshake expired — start again",
@@ -5022,17 +5037,17 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : mi(String(n.codeVerifier)), s = await pc(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : mi(String(n.codeVerifier)), s = await mc(a, {
 		code: e.code,
-		redirectUri: Mc(a, e.publicUrl),
+		redirectUri: Nc(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Gs.warn("connection identify failed; storing without account details", {
+		Ks.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await sc({
+	return await cc({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -5042,11 +5057,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: jc(String(n.redirectTo ?? "/"))
+		redirectTo: Mc(String(n.redirectTo ?? "/"))
 	};
-}, Fc = async (e, t = /* @__PURE__ */ new Date()) => {
+}, Ic = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: Js,
+		table: Ys,
 		predicate: he("expiresAt", t),
 		order: [],
 		take: void 0,
@@ -5055,27 +5070,27 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, Ic, Lc = (e) => {
-	Ic = e;
-}, Rc = () => Ic, zc = (e, t) => {
-	let n = Ic;
+}, Lc, Rc = (e) => {
+	Lc = e;
+}, zc = () => Lc, Bc = (e, t) => {
+	let n = Lc;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, Bc = (e) => async (t, n) => {
+}, Vc = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new _c(n, "<anonymous>");
-	return wc({
+	if (i === null || i === "") throw new vc(n, "<anonymous>");
+	return Tc({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, Vc = (e) => {
+}, Hc = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new _c(n, "<anonymous>");
-		return wc({
+		if (t === null || t === "") throw new vc(n, "<anonymous>");
+		return Tc({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -5087,7 +5102,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof _c) return null;
+				if (e instanceof vc) return null;
 				throw e;
 			}
 		},
@@ -5102,17 +5117,17 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : uc(e.store, e.registry, t)
+		})) : dc(e.store, e.registry, t)
 	};
-}, Hc = (e, t) => {
+}, Uc = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
 	if (n === null || n === "") throw new Je({ connectionId: t });
 	return n;
-}, Uc = (e, t) => {
+}, Wc = (e, t) => {
 	let n = e.registry.get(t);
 	if (n === void 0) throw new qe({ connectionId: t });
 	return n;
-}, Wc = (e) => async (t, n) => {
+}, Gc = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -5125,15 +5140,15 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : uc(n.store, e.registry, r);
-}, Gc = (e) => async (t, n) => {
-	let r = Uc(e, t.connectionId), i = Hc(n, t.connectionId);
+	})) : dc(n.store, e.registry, r);
+}, Kc = (e) => async (t, n) => {
+	let r = Wc(e, t.connectionId), i = Uc(n, t.connectionId);
 	if (r.kind !== "oauth2") throw new Ke({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return Nc({
+	return Pc({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -5141,8 +5156,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Kc = (e) => async (t, n) => {
-	let r = Uc(e, t.connectionId), i = Hc(n, t.connectionId);
+}, qc = (e) => async (t, n) => {
+	let r = Wc(e, t.connectionId), i = Uc(n, t.connectionId);
 	if (r.kind !== "pat") throw new Ke({
 		connectionId: t.connectionId,
 		expected: "pat",
@@ -5164,7 +5179,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			transient: !1
 		});
 	}
-	return await sc({
+	return await cc({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -5175,20 +5190,20 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, qc = (e) => async (t, n) => {
-	Uc(e, t.connectionId);
-	let r = Hc(n, t.connectionId);
-	return { ok: await lc(n.store, t.connectionId, r) };
-}, Jc = "admin:full", Yc = class extends y.TaggedError()("AccessDenied", {
+}, Jc = (e) => async (t, n) => {
+	Wc(e, t.connectionId);
+	let r = Uc(n, t.connectionId);
+	return { ok: await uc(n.store, t.connectionId, r) };
+}, Yc = "admin:full", Xc = class extends y.TaggedError()("AccessDenied", {
 	action: y.String,
 	resourceType: y.String,
 	resourceId: y.String
-}) {}, Xc = /* @__PURE__ */ new Map(), Zc = (e) => {
+}) {}, Zc = /* @__PURE__ */ new Map(), Qc = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (Xc.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return Xc.set(e.resourceType, e), e;
-}, Qc = (e) => Xc.get(e), $c = () => [...Xc.values()], el = () => Xc.clear(), tl = () => $c().map((e) => {
+	if (Zc.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Zc.set(e.resourceType, e), e;
+}, $c = (e) => Zc.get(e), el = () => [...Zc.values()], tl = () => Zc.clear(), nl = () => el().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -5201,7 +5216,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), nl = (e, t) => {
+}), rl = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -5210,39 +5225,39 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, rl = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : nl(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), il = (e, t, n, r) => {
+}, il = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : rl(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), al = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = rl(e, n, r.tuples, r.policy);
+	let a = il(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, al = (e, t, n, r) => {
-	if (!il(e, t, n, r)) throw new Yc({
+}, ol = (e, t, n, r) => {
+	if (!al(e, t, n, r)) throw new Xc({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, ol = (e, t, n, r, i) => r.filter((r) => il(e, t, {
+}, sl = (e, t, n, r, i) => r.filter((r) => al(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), sl = (e, t) => {
+}, i)), cl = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, cl = new Ft(), ll = (e) => {
-	cl.enterWith(e);
-}, ul = () => cl.getStore(), dl = (e, t) => cl.run(e, t), fl = B({ scope: "voltro:policy" }), pl, ml = (e) => {
-	pl = e;
-}, hl = () => pl, gl = () => {
-	gt((e) => o.gen(function* () {
-		let t = Qc(e.resourceType);
-		if (t === void 0) return fl.warn("policy guard denied — no resource policy registered for this type", {
+}, ll = new Lt(), ul = (e) => {
+	ll.enterWith(e);
+}, dl = () => ll.getStore(), fl = (e, t) => ll.run(e, t), pl = z({ scope: "voltro:policy" }), ml, hl = (e) => {
+	ml = e;
+}, gl = () => ml, _l = () => {
+	_t((e) => o.gen(function* () {
+		let t = $c(e.resourceType);
+		if (t === void 0) return pl.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = pl;
-		if (n === void 0) return fl.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = ml;
+		if (n === void 0) return pl.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
@@ -5251,14 +5266,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				subjectId: e.subject.id,
 				resourceType: e.resourceType,
 				resourceId: e.resourceId,
-				load: ul()
+				load: dl()
 			}),
 			catch: (e) => e
-		}).pipe(o.catchAll((t) => (fl.error("policy guard denied — tuple source failed", {
+		}).pipe(o.catchAll((t) => (pl.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
 		}, t), o.succeed([])))), i = e.subject;
-		return il({
+		return al({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -5271,10 +5286,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			tuples: r
 		});
 	}));
-}, _l = (e) => {
-	Promise.resolve().then(e);
 }, vl = (e) => {
-	let t = e.schedule ?? _l, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}\u0000${t}`, a = async (t) => {
+	Promise.resolve().then(e);
+}, yl = (e) => {
+	let t = e.schedule ?? vl, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}\u0000${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -5320,23 +5335,23 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, yl = u.effect(V.HttpClient, o.map(V.HttpClient, (e) => e.pipe(V.mapRequestEffect((e) => o.currentSpan.pipe(o.map((t) => e.headers.traceparent === void 0 ? Ct.setHeader(e, "traceparent", ti({
+}, bl = u.effect(Ct.HttpClient, o.map(Ct.HttpClient, (e) => e.pipe(Ct.mapRequestEffect((e) => o.currentSpan.pipe(o.map((t) => e.headers.traceparent === void 0 ? Tt.setHeader(e, "traceparent", ti({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), o.catchAll(() => o.succeed(e))))))), bl = class extends Error {
+})) : e), o.catchAll(() => o.succeed(e))))))), xl = class extends Error {
 	url;
 	reason;
 	_tag = "SsrfBlockedError";
 	constructor(e, t) {
 		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
 	}
-}, xl = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, Sl = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), Cl = (e, t, n) => n.some((n) => {
+}, Sl = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, Cl = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), wl = (e, t, n) => n.some((n) => {
 	let r = n.trim().toLowerCase();
 	if (r === "") return !1;
 	let i = t === "" ? e : `${e}:${t}`;
 	return r === e || r === i ? !0 : r.startsWith("*.") ? e.endsWith(r.slice(1)) : !1;
-}), wl = (e, t = {}) => {
+}), Tl = (e, t = {}) => {
 	let n;
 	try {
 		n = new URL(e);
@@ -5345,30 +5360,30 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}
 	if (n.protocol !== "http:" && n.protocol !== "https:") return `blocked scheme "${n.protocol}"`;
 	let r = n.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-	if (Cl(r, n.port, t.allowHosts ?? [])) return null;
+	if (wl(r, n.port, t.allowHosts ?? [])) return null;
 	if (r === "localhost" || r.endsWith(".localhost") || r.endsWith(".internal") || r.endsWith(".local")) return `blocked host "${r}"`;
 	let i = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(r);
 	if (i) {
 		let e = Number(i[1]), t = Number(i[2]);
-		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : xl(e, t) ? `blocked private/reserved address ${r}` : null;
+		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : Sl(e, t) ? `blocked private/reserved address ${r}` : null;
 	}
 	if (r.includes(":")) {
 		let e = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(r);
-		return e ? wl(`${n.protocol}//${e[1]}`, t) : Sl(r) ? `blocked private/reserved address ${r}` : null;
+		return e ? Tl(`${n.protocol}//${e[1]}`, t) : Cl(r) ? `blocked private/reserved address ${r}` : null;
 	}
 	return null;
-}, Tl = (e = {}) => u.effect(V.HttpClient, o.map(V.HttpClient, (t) => {
-	let n = V.transform(t, (t, n) => o.suspend(() => {
-		let r = wl(n.url, e);
-		return r === null ? t : o.fail(new St.RequestError({
+}, El = (e = {}) => u.effect(Ct.HttpClient, o.map(Ct.HttpClient, (t) => {
+	let n = Ct.transform(t, (t, n) => o.suspend(() => {
+		let r = Tl(n.url, e);
+		return r === null ? t : o.fail(new wt.RequestError({
 			request: n,
 			reason: "Transport",
-			cause: new bl(n.url, r),
+			cause: new xl(n.url, r),
 			description: `SSRF policy: ${r}`
 		}));
 	}));
-	return V.followRedirects(n, e.maxRedirects ?? 5);
-})), El = (e) => {
+	return Ct.followRedirects(n, e.maxRedirects ?? 5);
+})), Dl = (e) => {
 	let t = e.now ?? Date.now, n = e.intervalMs ?? 3e4, r = e.maxPending ?? 500, i = /* @__PURE__ */ new Map(), a = !1, o = async () => {
 		if (i.size === 0) return;
 		let t = i;
@@ -5397,7 +5412,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		},
 		pending: () => i.size
 	};
-}, Dl = "voltro/audit", Ol = "voltro/softDelete", kl = "voltro/expires", Al = "voltro/tenant", jl = (e) => {
+}, Ol = "voltro/audit", kl = "voltro/softDelete", Al = "voltro/expires", jl = "voltro/tenant", Ml = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -5443,17 +5458,17 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? Ml,
-		computedFields: (e) => t.get(e)?.computedFields ?? Nl,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? Nl,
+		computedFields: (e) => t.get(e)?.computedFields ?? Pl,
 		versionColumn: (e) => t.get(e)?.versionColumn,
-		generatedColumns: (e) => t.get(e)?.generatedColumns ?? Pl,
+		generatedColumns: (e) => t.get(e)?.generatedColumns ?? Fl,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, Ml = /* @__PURE__ */ new Map(), Nl = /* @__PURE__ */ new Map(), Pl = /* @__PURE__ */ new Set(), Fl = jl([]), Il = B({ scope: "store.fieldEncryption" }), Ll = (e, t) => {
+}, Nl = /* @__PURE__ */ new Map(), Pl = /* @__PURE__ */ new Map(), Fl = /* @__PURE__ */ new Set(), Il = Ml([]), Ll = z({ scope: "store.fieldEncryption" }), Rl = (e, t) => {
 	let n = t, r = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", i = /* @__PURE__ */ new Set(), a = (e) => {
 		let t = `${e.table}.${e.column}`;
-		i.has(t) || (i.add(t), Il.warn("encrypted column degraded to null — could not decrypt with the active key", {
+		i.has(t) || (i.add(t), Ll.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
 			column: e.column,
 			reason: e.reason,
@@ -5477,7 +5492,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			e.injectExternalChange(t);
 		},
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope },
-		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => Ll(e.withNamespace(n), t) },
+		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => Rl(e.withNamespace(n), t) },
 		...e.raw === void 0 ? {} : { raw: ((...t) => e.raw(...t)) },
 		...e.close === void 0 ? {} : { close: (t) => e.close(t) },
 		...e.ping === void 0 ? {} : { ping: () => e.ping() },
@@ -5489,24 +5504,24 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		upsert: async (t, n, r) => c(t, await e.upsert(t, o(t, n), r)),
 		insertIgnore: async (t, n, r) => c(t, await e.insertIgnore(t, o(t, n), r)),
 		patchJson: async (t, n, r, i) => c(t, await e.patchJson(t, n, r, i)),
-		transactional: (n) => e.transactional((e) => n(Ll(e, t)))
+		transactional: (n) => e.transactional((e) => n(Rl(e, t)))
 	};
-}, Rl = (e, t) => {
+}, zl = (e, t) => {
 	if (t === void 0 || t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, zl = (e, t) => {
+}, Bl = (e, t) => {
 	let n = j(e), r = n === void 0 ? [] : Oe(n);
 	return r.length === 0 ? t ?? [] : t === void 0 ? r : [...t, ...r];
-}, Bl = (e, t) => t.length === 0 ? e : e.map((e) => Rl(e, t)), Vl = (e, t, n, r, i) => {
+}, Vl = (e, t) => t.length === 0 ? e : e.map((e) => zl(e, t)), Hl = (e, t, n, r, i) => {
 	let a = {
 		...t?.(r) ?? {},
 		...n?.(i) ?? {}
 	}, o = e;
 	for (let [e, t] of Object.entries(a)) t !== void 0 && (o = o.where(e, t));
 	return o;
-}, Hl = 1e3, Ul = (e, t = Hl) => {
+}, Ul = 1e3, Wl = (e, t = Ul) => {
 	let n = (e) => typeof e == "number" && Number.isFinite(e) ? e : void 0, r = (e) => Math.max(1, Math.min(Math.floor(e), t)), i = n(e.page);
 	if (i !== void 0) {
 		let t = r(n(e.pageSize) ?? 100);
@@ -5519,35 +5534,35 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		limit: r(n(e.limit) ?? 100),
 		offset: Math.max(0, Math.floor(n(e.offset) ?? 0))
 	};
-}, Wl = {
+}, Gl = {
 	list: (e, t = {}) => async (n, r) => {
 		let i = n ?? {}, a = r.store.select(e);
 		if (t.columns !== void 0 && t.columns.length > 0) {
-			let n = new Set(zl(e, void 0)), r = t.columns.filter((e) => !n.has(e));
+			let n = new Set(Bl(e, void 0)), r = t.columns.filter((e) => !n.has(e));
 			r.length > 0 && (a = a.select(...r));
 		}
-		t.include !== void 0 && (a = a.with(t.include)), a = Vl(a, t.filter, t.scope, i, r);
+		t.include !== void 0 && (a = a.with(t.include)), a = Hl(a, t.filter, t.scope, i, r);
 		for (let e of t.sort ?? []) a = a.orderBy(e.column, e.direction ?? "asc");
 		if (t.paginate === !0) {
-			let { limit: e, offset: n } = Ul(i, t.maxPageSize);
+			let { limit: e, offset: n } = Wl(i, t.maxPageSize);
 			a = a.limit(e).offset(n);
 		}
-		return Bl(await a.all(), zl(e, t.redact));
+		return Vl(await a.all(), Bl(e, t.redact));
 	},
 	getById: (e, t = {}) => async (n, r) => {
 		let i = r.store.select(e).where("id", n.id);
 		t.include !== void 0 && (i = i.with(t.include));
 		let a = await i.first();
-		return a === null ? null : Rl(a, zl(e, t.redact));
+		return a === null ? null : zl(a, Bl(e, t.redact));
 	},
-	create: (e, t = {}) => async (n, r) => Rl(await r.store.insert(e, n), zl(e, t.redact)),
+	create: (e, t = {}) => async (n, r) => zl(await r.store.insert(e, n), Bl(e, t.redact)),
 	update: (e, t = {}) => async (n, r) => {
 		let { id: i, ...a } = n, o = await r.store.update(e, i, a);
-		return o === null ? null : Rl(o, zl(e, t.redact));
+		return o === null ? null : zl(o, Bl(e, t.redact));
 	},
-	count: (e, t = {}) => async (n, r) => Vl(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
+	count: (e, t = {}) => async (n, r) => Hl(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
 	remove: (e) => async (t, n) => ({ deleted: await n.store.delete(e, t.id) })
-}, Gl = (e) => {
+}, Kl = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		if (!n.has(e)) switch (n.add(e), e._tag) {
 			case "TypeLiteral":
@@ -5574,7 +5589,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}
 	};
 	return r(e.ast), t;
-}, Kl = (e) => {
+}, ql = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		switch (e._tag) {
 			case "Literal": return e.literal === null;
@@ -5609,43 +5624,127 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}
 	};
 	return i(e.ast), t;
-}, ql = (e, t) => {
+}, Jl = (e, t) => {
 	let n = e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source];
 	if (n.length === 0) return [];
-	let r = Gl(e.output), i = Kl(e.output), a = [];
+	let r = Kl(e.output), i = ql(e.output), a = [];
 	for (let o of n) for (let n of t.get(o) ?? []) r.has(n) && !i.has(n) && a.push({
 		query: e.name,
 		table: o,
 		column: n
 	});
 	return a;
-}, Jl = (e) => {
+}, Yl = (e) => {
 	if (e.length !== 0) return `A wire-reachable query exposes a server-only column:\n${e.map((e) => `  • query '${e.query}' output declares '${e.column}' — a .serverOnly() column of '${e.table}'`).join("\n")}\nThree ways out, in order of preference:\n  1. Omit the column from the query's output schema. The crud.* read helpers strip these automatically.\n  2. Keep the KEY but type it \`Schema.Null\` — for a view that must stay wire-compatible (an importer that breaks if the key vanishes) while never sending a value. The audit accepts that, because the schema then PROVES no value can flow instead of promising it. Pair it with a \`hasX\` boolean.\n  3. Drop the .serverOnly() marker, if the column may in fact reach a client.\nNote the audit reads the DECLARED shape, not what your handler emits: a field typed \`string\` that you always set to null still fails, and should — the next edit to that handler is one line away from sending it.`;
-}, Yl = (e, t) => e.cache?.scope === "global" ? (e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source]).filter((e) => t.has(e)).map((t) => ({
+}, Xl = (e, t) => e.cache?.scope === "global" ? (e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source]).filter((e) => t.has(e)).map((t) => ({
 	query: e.name,
 	table: t
-})) : [], Xl = (e) => {
+})) : [], Zl = (e) => {
 	if (e.length !== 0) return `A cached query shares one entry across tenants:\n${e.map((e) => `  • query '${e.query}' caches scope:'global' while reading '${e.table}', a tenant()-scoped table`).join("\n")}\n\nscope:'global' stores ONE entry for every caller. On a tenant-scoped table the\nrows depend on who asked, so the first caller's rows are served to the next one.\n\nUse scope:'tenant' — one entry per org, none shared across orgs. Use 'subject'\nif the result also depends on WHICH person is asking, and 'global' only for data\nthat depends on neither.`;
-}, Zl = class extends y.TaggedError()("CircuitOpen", {
+}, Ql = (e, t) => {
+	let n, r = 0;
+	for (let i of t) {
+		let t = 0;
+		for (; t < e.length && t < i.length && e[t] === i[t];) t++;
+		let a = 0;
+		for (; a < e.length - t && a < i.length - t && e[e.length - 1 - a] === i[i.length - 1 - a];) a++;
+		let o = (t + a) / Math.max(e.length, i.length);
+		o > r && o >= .6 && (r = o, n = i);
+	}
+	return n;
+}, $l = (e, t) => {
+	if (t.size === 0) return [];
+	let n = [];
+	for (let r of e) {
+		if (r.source === void 0) continue;
+		let e = typeof r.source == "string" ? [r.source] : r.source;
+		for (let i of e) t.has(i) || n.push({
+			procedure: r.name,
+			source: i,
+			didYouMean: Ql(i, t)
+		});
+	}
+	return n;
+}, eu = (e) => {
+	if (e.length === 0) return;
+	let t = e.map((e) => `  ${e.procedure}: source '${e.source}' matches no declared table` + (e.didYouMean === void 0 ? "" : ` — did you mean '${e.didYouMean}'?`));
+	return `${e.length} reactive source(s) name a table that does not exist:\n${t.join("\n")}\n
+These queries are NOT broken. They serve their first snapshot and then never
+update again, which is indistinguishable from "nothing has changed" — so the
+symptom is silence, and silence is what this surface exists to eliminate.
+A \`source:\` is a STRING, so \`tsc\` cannot see a stale one and a rename leaves it
+behind quietly.`;
+}, tu = (e) => e.op === "update" && (e.old?.deletedAt ?? null) === null && (e.new?.deletedAt ?? null) !== null, nu = (e, t) => {
+	let n = tu(t);
+	return t.op !== "delete" && !n ? [] : e.filter((e) => e.targetTable === t.table && e.policy !== "keep" && (!n || e.onSoftDelete));
+}, ru = async (e, t, n) => {
+	let r = nu(t, n);
+	if (r.length === 0) return [];
+	let i = [];
+	for (let t of r) {
+		let r = await e.query({
+			table: t.table,
+			predicate: {
+				kind: "eq",
+				column: t.column,
+				value: n.rowId
+			},
+			order: void 0,
+			take: void 0,
+			skip: void 0,
+			projection: void 0
+		}), a = n.tenantId === null || n.tenantId === void 0 ? r : r.filter((e) => e.tenantId === n.tenantId);
+		for (let n of a) {
+			let r = String(n.id);
+			t.policy === "delete" ? await e.delete(t.table, r) : await e.update(t.table, r, { [t.column]: null });
+		}
+		i.push({
+			rule: t,
+			affected: a.length
+		});
+	}
+	return i;
+}, iu = (e, t, n) => {
+	let r = [];
+	for (let i of e) for (let [e, a] of Object.entries(i.columns)) {
+		let o = t(a);
+		if (o === void 0) continue;
+		let s;
+		try {
+			s = o.target()?.name;
+		} catch {
+			s = void 0;
+		}
+		if (s === void 0 || !n.has(s)) throw Error(`pluginRef: ${i.name}.${e} points at ${s ?? "an unresolvable table"}, which no installed plugin registers. A declared orphan rule against an absent table would look enforced and never fire — install the plugin that owns it, or drop the column.`);
+		r.push({
+			table: i.name,
+			column: e,
+			targetTable: s,
+			policy: o.orphanPolicy,
+			onSoftDelete: o.onSoftDelete
+		});
+	}
+	return r.filter((e) => e.policy !== "keep");
+}, au = class extends y.TaggedError()("CircuitOpen", {
 	name: y.String,
 	retryAfterMs: y.Number
-}) {}, Ql = {
+}) {}, ou = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, $l = { make: (n) => o.gen(function* () {
-	let r = n.name ?? "circuit", i = a.toMillis(a.decode(n.resetTimeout)), s = n.halfOpenSuccessThreshold ?? 1, c = n.isFailure ?? (() => !0), l = yield* _.make(Ql), u = o.gen(function* () {
+}, su = { make: (n) => o.gen(function* () {
+	let r = n.name ?? "circuit", i = a.toMillis(a.decode(n.resetTimeout)), s = n.halfOpenSuccessThreshold ?? 1, c = n.isFailure ?? (() => !0), l = yield* _.make(ou), u = o.gen(function* () {
 		let e = yield* _.get(l);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* _.set(l, t >= s ? Ql : {
+			yield* _.set(l, t >= s ? ou : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* _.set(l, Ql));
+		e.failureCount !== 0 && (yield* _.set(l, ou));
 	}), d = o.gen(function* () {
 		let e = yield* t.currentTimeMillis, r = yield* _.get(l);
 		if (r.tag === "half-open" || r.tag === "open") {
@@ -5683,7 +5782,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			if (e.isInterruptedOnly(t)) return o.void;
 			let n = e.failureOption(t), r = n._tag === "Some" ? n.value : void 0;
 			return c(r) ? d : o.void;
-		})) : yield* o.fail(new Zl({
+		})) : yield* o.fail(new au({
 			name: r,
 			retryAfterMs: n
 		}));
@@ -5692,15 +5791,15 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		value: _.get(l).pipe(o.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(m, "reset", {
-		value: _.set(l, Ql),
+		value: _.set(l, ou),
 		enumerable: !0
 	}), m;
-}) }, eu, tu = (e) => {
-	eu = e;
-}, nu = () => {
-	eu = void 0;
-}, ru = () => eu, iu = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? _t(t.id ?? "system") : _t(t.id ?? "system", t.scopes), r = t.store ?? eu?.dataStore, i = t.schemaRegistry ?? eu?.schemaRegistry, a = t.dialect ?? eu?.dialect;
+}) }, cu, lu = (e) => {
+	cu = e;
+}, uu = () => {
+	cu = void 0;
+}, du = () => cu, fu = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? vt(t.id ?? "system") : vt(t.id ?? "system", t.scopes), r = t.store ?? cu?.dataStore, i = t.schemaRegistry ?? cu?.schemaRegistry, a = t.dialect ?? cu?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
@@ -5710,7 +5809,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, au = (e) => {
+}, pu = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -5738,7 +5837,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, ou = (e = process.env) => {
+}, mu = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -5750,7 +5849,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, su = () => {
+}, hu = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -5775,27 +5874,27 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, cu = Symbol.for("@voltro/ScheduleDefinition"), lu = (e) => typeof e == "object" && !!e && cu in e, uu = 30 * 6e4, du = (e) => {
+}, gu = Symbol.for("@voltro/ScheduleDefinition"), _u = (e) => typeof e == "object" && !!e && gu in e, vu = 30 * 6e4, yu = (e) => {
 	let t = r.parse(e.cron, e.timezone);
 	if (s.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
-	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
+	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin").\nThe field is non-optional in \`ScheduleDefinition\`, so an ABSENT one is a tsc error and never reaches here. Arriving at this message means the value was present and EMPTY — almost always \`process.env.TZ ?? ''\` or a config lookup that missed. A reporter lost a crashloop to it, so the distinction is worth stating: this is not a check the type could have made for you.`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
 	return {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? uu,
-		[cu]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? vu,
+		[gu]: !0
 	};
-}, fu = (e) => r.unsafeParse(e.cron, e.timezone), pu = (e, t = /* @__PURE__ */ new Date()) => r.next(fu(e), t), Z = "_voltro_wakeups", mu = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, hu = (e) => ({
+}, bu = (e) => r.unsafeParse(e.cron, e.timezone), xu = (e, t = /* @__PURE__ */ new Date()) => r.next(bu(e), t), Z = "_voltro_wakeups", Su = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Cu = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), gu = async (e, t) => {
+}), wu = async (e, t) => {
 	await e.upsert(Z, {
-		id: mu(t),
+		id: Su(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -5805,7 +5904,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, _u = async (e, t) => e.delete(Z, mu(t)), vu = async (e, t) => await e.update(Z, mu(t), { status: "fired" }) !== null, yu = (e, t) => ({ and: [{
+}, Tu = async (e, t) => e.delete(Z, Su(t)), Eu = async (e, t) => await e.update(Z, Su(t), { status: "fired" }) !== null, Du = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -5813,16 +5912,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), bu = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: yu(mu(t), "pending") }) > 0, xu = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: yu(mu(t), "fired") });
-}, Su = {
+}] }), Ou = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Du(Su(t), "pending") }) > 0, ku = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: Du(Su(t), "fired") });
+}, Au = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, Cu = async (e, t) => {
+}, ju = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: Su,
+		predicate: Au,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5831,18 +5930,18 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(hu);
-}, wu = async (e, t, n = 500) => {
-	let r = await Cu(e, n), i = t.getTime();
+	return (await e.query(n)).map(Cu);
+}, Mu = async (e, t, n = 500) => {
+	let r = await ju(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, Tu = async (e) => (await Cu(e, 1))[0] ?? null, Eu = {
+}, Nu = async (e) => (await ju(e, 1))[0] ?? null, Pu = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, Du = async (e, t = {}) => {
+}, Fu = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: Eu,
+		predicate: Pu,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5853,12 +5952,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, Ou = Ro, ku = "default", Au = {
+}, Iu = zo, Lu = "default", Ru = {
 	kind: "single",
 	tryClaim: async () => !0
-}, ju = "_voltro_schedule_claims", Mu = (e, t, n) => {
+}, zu = "_voltro_schedule_claims", Bu = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: ju,
+		table: zu,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -5873,7 +5972,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(ju, {
+				return await e.insert(zu, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -5891,12 +5990,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			}
 		}
 	};
-}, Nu = "_voltro_schedule_runs", Pu = async (e, t) => {
+}, Vu = "_voltro_schedule_runs", Hu = async (e, t) => {
 	let { store: n, coordinator: i, buildContext: a, replicaId: o, log: s, onRunEvent: c, interceptFire: l } = t, u = t.dormancy === "sleep", d = t.dormancyTenantId ?? "default", f = /* @__PURE__ */ new Map(), p = /* @__PURE__ */ new Set(), m = /* @__PURE__ */ new Map(), h = !1, g = new Map(e.map((e) => [e.name, e])), _ = (e, t) => {
-		c?.(e, Iu(t));
+		c?.(e, Wu(t));
 	}, v = async (e, t, r, i, a, c) => {
 		try {
-			let s = `sr_${Re()}`, l = await n.insert(Nu, {
+			let s = `sr_${Re()}`, l = await n.insert(Vu, {
 				id: s,
 				name: e.name,
 				status: i,
@@ -5921,7 +6020,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}
 	}, y = async (e, t) => {
 		try {
-			let r = await n.update(Nu, e, t);
+			let r = await n.update(Vu, e, t);
 			r && _("update", r);
 		} catch (t) {
 			s.warn("schedule: failed to record run finish", {
@@ -5932,7 +6031,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}, b = async (e) => {
 		try {
 			let t = await n.query({
-				table: Nu,
+				table: Vu,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -5967,7 +6066,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				scheduleName: e.name,
 				trigger: n,
 				runId: o,
-				subject: Ou
+				subject: Iu
 			})
 		};
 		try {
@@ -5978,7 +6077,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 					let n = typeof e.workflow.payload == "function" ? await e.workflow.payload(f) : e.workflow.payload ?? {};
 					await t.start(e.workflow.name, n);
 				}
-				e.handler !== void 0 && await Xt(e.handler(f));
+				e.handler !== void 0 && await Qt(e.handler(f));
 			}, a = l ? l(r, {
 				name: e.name,
 				scheduledAt: t,
@@ -6000,10 +6099,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				completedAtSec: Date.now() / 1e3
 			});
 		} catch (t) {
-			let n = Q(t).includes("exceeded maxRuntimeMs"), r = bn(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Q(t)} — ${r}` : Q(t);
+			let n = Q(t).includes("exceeded maxRuntimeMs"), r = xn(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Q(t)} — ${r}` : Q(t);
 			o && await y(o, {
 				status: "failed",
-				errorTag: n ? "timeout" : Fu(t),
+				errorTag: n ? "timeout" : Uu(t),
 				errorMessage: i,
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - c
@@ -6012,13 +6111,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n,
-				...bn(t)
+				...xn(t)
 			};
 			s.error ? s.error("schedule: handler failed", a) : s.warn("schedule: handler failed", a), hr({
 				name: e.name,
 				status: "failed",
 				durationMs: Date.now() - c
-			}), mt({
+			}), ht({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -6067,8 +6166,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}
 	}, w = async (e) => {
 		try {
-			let t = r.next(fu(e), /* @__PURE__ */ new Date());
-			await gu(n, {
+			let t = r.next(bu(e), /* @__PURE__ */ new Date());
+			await wu(n, {
 				tenantId: d,
 				kind: "schedule",
 				refId: e.name,
@@ -6082,7 +6181,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}
 	}, T = 2147483647, E = (e) => {
 		if (h) return;
-		let n = fu(e), i = r.next(n, /* @__PURE__ */ new Date()), a = () => {
+		let n = bu(e), i = r.next(n, /* @__PURE__ */ new Date()), a = () => {
 			if (h) return;
 			let n = i.getTime() - Date.now();
 			if (n > T) {
@@ -6104,7 +6203,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		let i;
 		try {
 			let t = (await n.query({
-				table: Nu,
+				table: Vu,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -6123,7 +6222,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			return;
 		}
 		if (!i) return;
-		let a = fu(e), o = [], c = r.next(a, i), l = Date.now();
+		let a = bu(e), o = [], c = r.next(a, i), l = Date.now();
 		for (; c.getTime() < l && o.length < 1e3;) o.push(c), c = r.next(a, c);
 		if (o.length !== 0) if (s.info("schedule: backfill", {
 			name: e.name,
@@ -6168,11 +6267,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			f.clear(), s.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), Fu = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Iu = (e) => {
+}, Q = (e) => e?.message ?? String(e), Uu = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Wu = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, Lu = (e, t, n, r) => {
+}, Gu = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -6202,7 +6301,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, Ru = (e) => (t, n, r) => Lu(t, n, r, e), zu = F("_voltro_schedule_runs", {
+}, Ku = (e) => (t, n, r) => Gu(t, n, r, e), qu = F("_voltro_schedule_runs", {
 	id: M({ prefix: "schrun" }),
 	name: I(),
 	status: I().oneOf([
@@ -6232,13 +6331,13 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	]).nullable(),
 	replicaId: I().nullable(),
 	result: P().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), Bu = F("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), Ju = F("_voltro_schedule_claims", {
 	id: M({ prefix: "schclaim" }),
 	scheduleName: I(),
 	bucket: I(),
 	claimedBy: I(),
 	claimedAt: L()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), Vu = F("_voltro_traces", {
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), Yu = F("_voltro_traces", {
 	id: M({ prefix: "span" }),
 	traceId: I(),
 	spanId: I(),
@@ -6262,7 +6361,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	durationMs: N(),
 	attributes: P().nullable(),
 	events: P().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Hu = F("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Xu = F("_voltro_undo_log", {
 	id: M({ prefix: "undo" }),
 	tag: I(),
 	label: I().nullable(),
@@ -6273,25 +6372,25 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	crossesAction: E().default(!1),
 	undone: E().default(!1),
 	createdAt: L().default("now")
-}).index(["subjectId", "createdAt"]), Uu = (e = process.env) => {
+}).index(["subjectId", "createdAt"]), Zu = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, Wu = (e) => e.startsWith("_voltro"), Gu = async (e, t, n) => (await e.query({
+}, Qu = (e) => e.startsWith("_voltro"), $u = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: O("id", n),
 	order: []
-}))[0] ?? null, Ku = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, ed = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return Wu(n) || t({
+		return Qu(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = Wu(n) ? null : await Gu(e, n, r), o = await e.update(n, r, i);
-		return Wu(n) || t({
+		let a = Qu(n) ? null : await $u(e, n, r), o = await e.update(n, r, i);
+		return Qu(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -6300,8 +6399,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = Wu(n) ? null : await Gu(e, n, r), a = await e.delete(n, r);
-		return !Wu(n) && a && t({
+		let i = Qu(n) ? null : await $u(e, n, r), a = await e.delete(n, r);
+		return !Qu(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -6310,10 +6409,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), qu = (e) => {
+} }), td = (e) => {
 	let t = [];
 	return {
-		tx: Ku(e, (e) => t.push(e)),
+		tx: ed(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -6329,14 +6428,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			});
 		}
 	};
-}, Ju = (e) => {
+}, nd = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, Yu = (e) => {
-	let t = Ju(e);
+}, rd = (e) => {
+	let t = nd(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -6360,28 +6459,28 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			row: e.prev
 		};
 	}
-}, Xu = (e) => {
-	if (e.crossesAction) throw new Zu(e.invocationId, "action");
+}, id = (e) => {
+	if (e.crossesAction) throw new ad(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = Yu(e.changes[n]);
+		let r = rd(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, Zu = class extends Error {
+}, ad = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Qu = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, od = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, $u = class {
+}, sd = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -6417,7 +6516,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, ed = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, cd = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -6434,7 +6533,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, td = async (e, t) => {
+}, ld = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -6452,21 +6551,21 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, nd = async (e, t) => {
-	for (let n of t) await td(e, n);
-}, rd = (e) => e.request?.subject?.id ?? null, id = (e) => e === !0 || e === 1, ad = async (e, t, n) => (await e.query({
+}, ud = async (e, t) => {
+	for (let n of t) await ld(e, n);
+}, dd = (e) => e.request?.subject?.id ?? null, fd = (e) => e === !0 || e === 1, pd = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: O("id", n),
 	order: []
-}))[0] ?? null, od = (e) => {
+}))[0] ?? null, md = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, sd = (e) => e.id ?? e.next?.id ?? e.prev?.id, cd = async (e, t) => {
-	let n = rd(t);
+}, hd = (e) => e.id ?? e.next?.id ?? e.prev?.id, gd = async (e, t) => {
+	let n = dd(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: O("subjectId", n),
@@ -6475,68 +6574,68 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: id(e.undone),
-		crossesAction: id(e.crossesAction),
+		undone: fd(e.undone),
+		crossesAction: fd(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, ld = async (e, t) => {
-	let n = await ad(t.store, "_voltro_undo_log", e.invocationId);
-	if (!n) throw new nt({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== rd(t)) throw new tt({ invocationId: e.invocationId });
+}, _d = async (e, t) => {
+	let n = await pd(t.store, "_voltro_undo_log", e.invocationId);
+	if (!n) throw new rt({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== dd(t)) throw new nt({ invocationId: e.invocationId });
 	return n;
-}, ud = async (e, t) => {
-	let n = await ld(e, t);
-	if (id(n.undone)) return { ok: !0 };
-	if (id(n.crossesAction)) throw new et({
+}, vd = async (e, t) => {
+	let n = await _d(e, t);
+	if (fd(n.undone)) return { ok: !0 };
+	if (fd(n.crossesAction)) throw new tt({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = od(n.changes);
+	let r = md(n.changes);
 	for (let n of r) {
-		let r = sd(n);
-		if (r !== void 0 && !Qu(await ad(t.store, n.table, r), n.next ?? null)) throw new et({
+		let r = hd(n);
+		if (r !== void 0 && !od(await pd(t.store, n.table, r), n.next ?? null)) throw new tt({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: rd(t),
+		subject: dd(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await nd(t.store, Xu(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, dd = async (e, t) => {
-	let n = await ld(e, t);
-	if (!id(n.undone)) return { ok: !0 };
-	for (let e of od(n.changes)) {
-		let n = sd(e);
+	return await ud(t.store, id(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, yd = async (e, t) => {
+	let n = await _d(e, t);
+	if (!fd(n.undone)) return { ok: !0 };
+	for (let e of md(n.changes)) {
+		let n = hd(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, fd = (e = process.env) => {
+}, bd = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, pd = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, md = "«redacted»", hd = (e) => {
+}, xd = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Sd = "«redacted»", Cd = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = pd.test(n) ? md : r;
+	for (let [n, r] of Object.entries(e)) t[n] = xd.test(n) ? Sd : r;
 	return t;
-}, gd = (e) => {
+}, wd = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, _d = (e, t) => {
+}, Td = (e, t) => {
 	if (t.op === "insert") {
-		let n = gd(t.new);
+		let n = wd(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = gd(t.new) ?? gd(t.old);
+		let n = wd(t.new) ?? wd(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, vd = class {
+}, Ed = class {
 	mode;
 	capacity;
 	now;
@@ -6556,8 +6655,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: hd(e.old),
-			new: hd(e.new),
+			old: Cd(e.old),
+			new: Cd(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -6570,23 +6669,23 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = _d(i, e);
+		for (let e of r) i = Td(i, e);
 		return i;
 	}
-}, yd, bd = () => (yd === void 0 && (yd = new vd(fd())), yd), xd = (e) => {
-	yd = e;
-}, Sd = (e) => {
-	let t = bd();
+}, Dd, Od = () => (Dd === void 0 && (Dd = new Ed(bd())), Dd), kd = (e) => {
+	Dd = e;
+}, Ad = (e) => {
+	let t = Od();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, Cd = /* @__PURE__ */ new Set([
+}, jd = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), wd = (e) => {
+]), Md = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -6608,7 +6707,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return Cd.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return jd.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -6622,7 +6721,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, Td = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Td), Ed = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Dd = (e, t) => {
+}, Nd = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Nd), Pd = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Fd = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -6630,10 +6729,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, Od = (e, t) => {
+}, Id = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = Ed(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = Pd(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -6649,10 +6748,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		}
 	}
 	return n;
-}, kd = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, Ld = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: Dd(e, n)
-})), Ad = (e, t, n) => {
+	value: Fd(e, n)
+})), Rd = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -6661,7 +6760,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = Ed(t, e.column);
+		let s = Pd(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -6670,7 +6769,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = Ed(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = Pd(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -6690,15 +6789,15 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, jd = (e, t, n, r) => {
+}, zd = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = Od(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = Id(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, Md = class {
+}, Bd = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -6706,7 +6805,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = Od(this.shape, e), this.groups.clear();
+		this.state = Id(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -6718,14 +6817,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = Ad(this.shape, this.state, e);
+		let n = Rd(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = jd(this.shape, this.state, e, t);
+		this.state = zd(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -6734,7 +6833,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return kd(this.shape, this.state).map((e) => ({
+		return Ld(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -6747,7 +6846,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, Nd = F("_voltro_rebac_tuples", {
+}, Vd = F("_voltro_rebac_tuples", {
 	id: M({ prefix: "rbct" }),
 	subjectId: I(),
 	relation: I(),
@@ -6759,7 +6858,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]), Pd = async (e, t, n, r) => t === null ? [] : (await e.query({
+]), Hd = async (e, t, n, r) => t === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: C(O("subjectId", t), O("resourceType", n), O("resourceId", r)),
 	order: [],
@@ -6771,16 +6870,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), Fd = (e) => ({
+})), Ud = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), Id = (e, t) => {
-	let n = t.getPolicy ?? Qc;
+}), Wd = (e, t) => {
+	let n = t.getPolicy ?? $c;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let s = n(a.resourceType), c = (e) => o.fail(new Yc({
+		let s = n(a.resourceType), c = (e) => o.fail(new Xc({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -6788,17 +6887,17 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		if (s === void 0) return c("");
 		let l = a.resourceId(i.input);
 		if (l === null || l === "") return c("");
-		let u = Fd(i.subject), d = {
+		let u = Ud(i.subject), d = {
 			type: a.resourceType,
 			id: l,
 			tenantId: i.subject.tenantId
 		};
-		return o.flatMap(o.promise(async () => t.loadTuples(u.id, a.resourceType, l)), (e) => il(u, a.action, d, {
+		return o.flatMap(o.promise(async () => t.loadTuples(u.id, a.resourceType, l)), (e) => al(u, a.action, d, {
 			policy: s,
 			tuples: e
 		}) ? r : c(l));
 	};
-}, Ld = async (e, t, n) => t === null ? [] : (await e.query({
+}, Gd = async (e, t, n) => t === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: C(O("subjectId", t), O("resourceType", n)),
 	order: [],
@@ -6810,18 +6909,18 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), Rd = (e) => {
-	let t = e.getPolicy ?? Qc;
+})), Kd = (e) => {
+	let t = e.getPolicy ?? $c;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = Fd(n);
-		return ol(s, i, r, a, {
+		let s = Ud(n);
+		return sl(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, zd = (e) => {
+}, qd = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -6829,14 +6928,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, Bd = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Vd = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Hd = class {
+}, Jd = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Yd = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Xd = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, Ud = async (e, t, n) => {
-	if (t.table !== e.watch.table || !Bd(e.watch.on, t.op)) return "skipped-op";
+}, Zd = async (e, t, n) => {
+	if (t.table !== e.watch.table || !Jd(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -6845,26 +6944,26 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = Vd(t);
+	let a = Yd(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, Wd = F("_voltro_wakeups", {
+}, Qd = F("_voltro_wakeups", {
 	id: M({ prefix: "wakeup" }),
 	tenantId: I(),
 	kind: I(),
 	refId: I(),
 	wakeAt: L(),
 	status: I()
-}).index(["status", "wakeAt"]).index(["tenantId"]), Gd = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await wu(e.store, t, e.batchLimit ?? 100);
+}).index(["status", "wakeAt"]).index(["tenantId"]), $d = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Mu(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await bu(e.store, t)) try {
+	for (let t of n) if (await Ou(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await xu(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await ku(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -6872,11 +6971,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, Kd = (e, t = 1e3) => {
+}, ef = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await Gd(e);
+				await $d(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -6886,10 +6985,10 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, qd = (e) => ({ wake: async () => {
+}, tf = (e) => ({ wake: async () => {
 	await e.start();
-} }), Jd = (e) => new Promise((t) => setTimeout(t, e)), Yd = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Jd, i = e.spawnImpl ?? Yt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), nf = (e) => new Promise((t) => setTimeout(t, e)), rf = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? nf, i = e.spawnImpl ?? Zt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -6943,11 +7042,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		},
 		stop: m
 	};
-}, Xd = async (e) => {
+}, af = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Tu(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Nu(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Zd = (e, t = Date.now) => {
+}, of = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -6959,7 +7058,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Qd = () => {
+}, sf = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -6977,8 +7076,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, $d = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), ef = (e, t, n, r) => new Promise((i, a) => {
-	let o = bt.request({
+}, cf = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), lf = (e, t, n, r) => new Promise((i, a) => {
+	let o = xt.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -6988,8 +7087,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), tf = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = bt.request({
+}), uf = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = xt.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -7003,21 +7102,21 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), nf = (e) => {
-	let t = $d({
+}), df = (e) => {
+	let t = cf({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = bt.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => ef(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = xt.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => lf(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => tf(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => uf(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, rf = async (e) => {
+}, ff = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -7034,15 +7133,15 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, af = async (e) => {
-	let t = qd(e.supervisor), n = await Gd({
+}, pf = async (e) => {
+	let t = tf(e.supervisor), n = await $d({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await Xd({
+	let r = await af({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -7052,12 +7151,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, of = async (e) => {
-	let t = Zd(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Qd(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, mf = async (e) => {
+	let t = of(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = sf(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = nf({
+	}, s = df({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -7076,7 +7175,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await rf(e.store)), await af({
+				if (a && (i = await ff(e.store)), await pf({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -7084,7 +7183,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await Du(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await Fu(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -7099,14 +7198,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, sf = (e) => e, cf = class extends y.TaggedError()("AnalyticsError", {
+}, hf = (e) => e, gf = class extends y.TaggedError()("AnalyticsError", {
 	provider: y.String,
 	operation: y.String,
 	cause: y.String
-}) {}, lf = class extends y.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, _f = class extends y.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: y.String,
 	capability: y.String
-}) {}, uf = class extends n.Tag("@voltro/AnalyticsSink")() {}, df = (e, t) => ({
+}) {}, vf = class extends n.Tag("@voltro/AnalyticsSink")() {}, yf = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -7125,20 +7224,20 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), ff = () => o.gen(function* () {
-	let e = yield* uf, t = yield* o.serviceOption(z), n = h.match(t, {
+}), bf = () => o.gen(function* () {
+	let e = yield* vf, t = yield* o.serviceOption(et), n = h.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : df(e, n);
-}), pf = "noop", mf = () => {
-	let e = (e) => o.fail(new lf({
-		provider: pf,
+	return n === null ? e : yf(e, n);
+}), xf = "noop", Sf = () => {
+	let e = (e) => o.fail(new _f({
+		provider: xf,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: pf,
+			provider: xf,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -7152,8 +7251,8 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, hf = (e) => {
-	if (e.length === 0) return mf();
+}, Cf = (e) => {
+	if (e.length === 0) return Sf();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -7170,7 +7269,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? o.fail(new lf({
+		return r === void 0 ? o.fail(new _f({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -7193,11 +7292,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, gf = (e) => {
+}, wf = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => hf(e.map((e) => e.build(t))),
+		build: (t) => Cf(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => o.forEach(e, (e) => e.initialize ? e.initialize(t) : o.void, {
 			concurrency: 1,
@@ -7208,15 +7307,15 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, _f = {
+}, Tf = {
 	kind: "noop",
-	build: () => mf()
-}, vf = {
+	build: () => Sf()
+}, Ef = {
 	tables: [],
 	detach: () => {}
-}, yf = (e) => {
+}, Df = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return vf;
+	if (i === void 0 || i.tables.length === 0) return Ef;
 	let a = e.run ?? ((e) => o.runPromise(e)), s = i.primaryKey ?? "id", c = new Set(i.tables), l = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -7240,11 +7339,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		tables: i.tables,
 		detach: u
 	};
-}, bf = (e) => {
+}, Of = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = wd({
+		let t = Md({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -7266,47 +7365,47 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, xf = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Sf = class extends y.TaggedError()("AggregateStale", {
+}, kf = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Af = class extends y.TaggedError()("AggregateStale", {
 	name: y.String,
 	ageMs: y.Number,
 	maxAgeMs: y.Number
-}) {}, Cf = class extends y.TaggedError()("AggregateNotFound", { name: y.String }) {}, wf = class extends y.TaggedError()("AggregateError", {
+}) {}, jf = class extends y.TaggedError()("AggregateNotFound", { name: y.String }) {}, Mf = class extends y.TaggedError()("AggregateError", {
 	name: y.String,
 	operation: y.String,
 	cause: y.String
-}) {}, Tf = class extends n.Tag("@voltro/AggregateRegistry")() {}, Ef = (e) => o.gen(function* () {
-	return (yield* Tf).getHandle(e);
-}), Df = (e, t, n) => {
+}) {}, Nf = class extends n.Tag("@voltro/AggregateRegistry")() {}, Pf = (e) => o.gen(function* () {
+	return (yield* Nf).getHandle(e);
+}), Ff = (e, t, n) => {
 	if (e.crossTenant || !t.has(e.table) || n == null) return e;
 	let r = O("tenantId", n);
 	return {
 		...e,
 		predicate: e.predicate ? C(e.predicate, r) : r
 	};
-}, Of = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), kf = (e) => e?.type === "user" && e.tenantId === "", Af = (e, t) => {
+}, If = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), Lf = (e) => e?.type === "user" && e.tenantId === "", Rf = (e, t) => {
 	if (e.includeDeleted || !t.has(e.table)) return e;
 	let n = de("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? C(e.predicate, n) : n
 	};
-}, jf = (e, t) => t, Mf = (t) => o.runPromiseExit(t).then((t) => {
+}, zf = (e, t) => t, Bf = (t) => o.runPromiseExit(t).then((t) => {
 	if (c.isSuccess(t)) return t.value;
 	let n = e.failureOption(t.cause);
 	throw h.isSome(n) ? n.value : e.squash(t.cause);
-}), Nf = (e, t) => e.pipe(o.provideService(z, t)), Pf = async (e, t, n) => {
-	let r = await o.runPromise(at(t, e.guards, n));
+}), Vf = (e, t) => e.pipe(o.provideService(et, t)), Hf = async (e, t, n) => {
+	let r = await o.runPromise(ot(t, e.guards, n));
 	if (r) throw r;
-}, Ff = async (e) => {
+}, Uf = async (e) => {
 	if (Dr() === void 0) return e;
-	let t = await Mf(kr(e.subject, (e) => {
+	let t = await Bf(kr(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, If = async (t) => {
+}, Wf = async (t) => {
 	let n = `${t.kind}.${t.name}`, r = Date.now(), i = "ok";
 	try {
 		if (t.interceptor) {
@@ -7335,28 +7434,28 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			status: i
 		});
 	}
-}, Lf = /* @__PURE__ */ new Set([1213, 1205]), Rf = /* @__PURE__ */ new Set([
+}, Gf = /* @__PURE__ */ new Set([1213, 1205]), Kf = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), zf = (e) => {
+]), qf = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && Lf.has(e.errno) || typeof e.code == "string" && Rf.has(e.code) || typeof e.sqlState == "string" && Rf.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && Gf.has(e.errno) || typeof e.code == "string" && Kf.has(e.code) || typeof e.sqlState == "string" && Kf.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, Bf = 3, Vf = (e) => new Promise((t) => setTimeout(t, e)), Hf = async (e, t) => {
-	let n = t?.delay ?? ((e) => Vf(e * 20 + Math.floor(Math.random() * 30)));
+}, Jf = 3, Yf = (e) => new Promise((t) => setTimeout(t, e)), Xf = async (e, t) => {
+	let n = t?.delay ?? ((e) => Yf(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= Bf || !zf(e)) throw e;
+		if (t >= Jf || !qf(e)) throw e;
 		await n(t);
 	}
-}, Uf = (e) => (t, n, r) => If({
+}, Zf = (e) => (t, n, r) => Wf({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -7364,11 +7463,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await Pf(t.descriptor, r.subject, n);
-		let i = await Ff(r), a = [], s = await Hf(async () => (a.length = 0, e.store.transactional(async (s) => {
+		await Hf(t.descriptor, r.subject, n);
+		let i = await Uf(r), a = [], s = await Xf(async () => (a.length = 0, e.store.transactional(async (s) => {
 			let c = e.undoCapture?.(s), l = c ? c.tx : s, u = e.buildContext(i, l, { afterCommit: (e) => {
 				a.push(e);
-			} }), d = t.executor(n, u), f = o.isEffect(d) ? await e.runEffect(Nf(d, r.subject), u.store) : await d;
+			} }), d = t.executor(n, u), f = o.isEffect(d) ? await e.runEffect(Vf(d, r.subject), u.store) : await d;
 			return c && await c.persist(u.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -7378,33 +7477,33 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		for (let e of a) await e();
 		return s;
 	}
-}), Wf = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Gf = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Kf = (e) => {
+}), Qf = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, $f = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, ep = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, qf = (e, t) => (n) => () => {
+}, tp = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
-	return !r || r.length === 0 ? Promise.resolve(null) : o.runPromise(at(n, r, t));
-}, Jf = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = qf(t, n)(r.subject), s = async () => {
+	return !r || r.length === 0 ? Promise.resolve(null) : o.runPromise(ot(n, r, t));
+}, np = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = tp(t, n)(r.subject), s = async () => {
 		let i = await a();
 		if (i) throw i;
-		let s = e.buildContext(await Ff(r)), c = t.executor(n, s);
-		return o.isEffect(c) ? o.runPromise(e.provideEffect(Nf(c, r.subject), s.store)) : Wf(await Promise.resolve(c));
+		let s = e.buildContext(await Uf(r)), c = t.executor(n, s);
+		return o.isEffect(c) ? o.runPromise(e.provideEffect(Vf(c, r.subject), s.store)) : Qf(await Promise.resolve(c));
 	}, c = (n) => {
-		let i = Wf(n);
-		return Gf(i) ? e.finalize(i, r) : {
+		let i = Qf(n);
+		return $f(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: Kf(t),
+			dependentTables: ep(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: s
 		};
 	}, l = () => {
 		let a = t.executor(n, i);
-		return o.isEffect(a) ? e.provideEffect(Nf(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
+		return o.isEffect(a) ? e.provideEffect(Vf(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
 	}, u = () => {
 		let e = t.descriptor.guards;
-		return !e || e.length === 0 ? l() : at(r.subject, e, n).pipe(o.flatMap((e) => {
+		return !e || e.length === 0 ? l() : ot(r.subject, e, n).pipe(o.flatMap((e) => {
 			if (e) return o.fail(e);
 			let t = l();
 			return o.isEffect(t) ? t : o.succeed(t);
@@ -7423,14 +7522,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, Yf = (e) => async (t, n, r) => {
-	let i = await Ff(r), a = Jf(e)(t, n)(i), s = o.isEffect(a) ? await Mf(a) : a;
+}, rp = (e) => async (t, n, r) => {
+	let i = await Uf(r), a = np(e)(t, n)(i), s = o.isEffect(a) ? await Bf(a) : a;
 	return zr(s) ? s.value : e.queryRows(s);
-}, Xf = (e) => (t, n, r, i) => {
+}, ip = (e) => (t, n, r, i) => {
 	let a = !1, s;
 	return (async () => {
 		try {
-			let c = await Ff(r), l = Jf(e)(t, n)(c), u = o.isEffect(l) ? await Mf(l) : l, d = (e) => i(e), f = zr(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c);
+			let c = await Uf(r), l = np(e)(t, n)(c), u = o.isEffect(l) ? await Bf(l) : l, d = (e) => i(e), f = zr(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c);
 			a ? f() : s = f;
 		} catch (e) {
 			i({
@@ -7441,7 +7540,7 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	})(), () => {
 		a = !0, s?.();
 	};
-}, Zf = (e) => (t, n, r) => If({
+}, ap = (e) => (t, n, r) => Wf({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -7449,16 +7548,16 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await Pf(t.descriptor, r.subject, n);
-		let i = e.buildContext(await Ff(r)), a = t.executor(n, i);
-		return o.isEffect(a) ? e.runEffect(Nf(a, r.subject), i.store) : a;
+		await Hf(t.descriptor, r.subject, n);
+		let i = e.buildContext(await Uf(r)), a = t.executor(n, i);
+		return o.isEffect(a) ? e.runEffect(Vf(a, r.subject), i.store) : a;
 	}
-}), Qf = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, $f = (e) => typeof e == "string" && e.length > 0 ? e : null, ep = [
+}), op = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, sp = (e) => typeof e == "string" && e.length > 0 ? e : null, cp = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], tp = (e) => ep.some((t) => t in e), np = (e, t, n) => {
+], lp = (e) => cp.some((t) => t in e), up = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -7473,14 +7572,14 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!tp(e)) return {
+	if (!lp(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = $f(e.updatedBy) ?? $f(e.createdBy), o = Qf(e.updatedAt) ?? Qf(e.createdAt);
+	let a = sp(e.updatedBy) ?? sp(e.createdBy), o = op(e.updatedAt) ?? op(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -7492,12 +7591,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, rp = (e, t) => {
+}, dp = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: $f(e.actor) ?? $f(e.changedBy) },
-			at: Qf(e.at) ?? Qf(e.changedAt),
+			actor: { id: sp(e.actor) ?? sp(e.changedBy) },
+			at: op(e.at) ?? op(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -7512,12 +7611,12 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, ip = (e) => {
+}, fp = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, ap = (e) => {
+}, pp = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -7537,11 +7636,11 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: ip(e),
+		id: fp(e),
 		fields: t
 	};
-}, op = (e) => {
-	let t = e.map(ap);
+}, mp = (e) => {
+	let t = e.map(pp);
 	return {
 		rows: t,
 		summary: {
@@ -7550,21 +7649,21 @@ var K = /* @__PURE__ */ new Map(), Yr = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, sp = class extends Error {
+}, hp = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, cp = async (e, t) => {
+}, gp = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new sp();
+			throw n = await t(e), r = !0, new hp();
 		});
 	} catch (e) {
-		if (!(e instanceof sp)) throw e;
+		if (!(e instanceof hp)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, lp = "framework-runtime";
+}, _p = "framework-runtime";
 //#endregion
-export { wo as API_KEYS_TABLE, Yc as AccessDenied, wf as AggregateError, Md as AggregateMaintainer, Cf as AggregateNotFound, Tf as AggregateRegistry, Sf as AggregateStale, lf as AnalyticsCapabilityNotSupported, cf as AnalyticsError, uf as AnalyticsSink, X as CONNECTIONS_TABLE, Js as CONNECTION_GRANTS_TABLE, $l as CircuitBreaker, Zl as CircuitOpen, _c as ConnectionNotConnected, Aa as DEFAULT_MAX_RPC_BODY_BYTES, hc as DEFAULT_REFRESH_SKEW_MS, wr as DEFAULT_ROW_FILTER_RETRY, ku as DORMANCY_WAKEUP_TENANT, Pi as DeleteBuilder, Ir as Dispatcher, Ss as EVENT_CLIENT_QUEUE_SIZE, Cs as EVENT_LATEST_QUEUE_SIZE, zo as EffectStore, _s as EventBus, kc as GRANT_TTL_MS, vn as InMemoryDataStore, an as IndexedMatcher, ks as InstanceMembership, Zt as LinearScanMatcher, p as MetricBoundaries, pf as NOOP_ANALYTICS_PROVIDER, Or as NO_ROW_FILTER, Di as NoRowFound, Ns as OUTBOX_ATTEMPTS_TABLE, Bs as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, Oi as OptimisticLockError, Jc as REBAC_ADMIN_SCOPE, gc as REFRESH_LEASE_MS, lp as RUNTIME_NAME, Hd as ReactionRateLimiter, ta as ReplicatedDataStore, Cr as RowFilterUnavailable, Ou as SCHEDULE_SUBJECT, Ro as SYSTEM_SUBJECT, Mi as SelectBuilder, bl as SsrfBlockedError, Li as StoreOperationFailed, cn as SubscriptionRegistry, Ri as TableValidationFailed, Ii as TenantScopeViolation, vd as TimelineRecorder, Zu as UndoBoundaryError, $u as UndoStack, Ni as UpdateBuilder, Dl as VOLTRO_AUDIT_MIXIN_ID, kl as VOLTRO_EXPIRES_MIXIN_ID, Ol as VOLTRO_SOFT_DELETE_MIXIN_ID, Al as VOLTRO_TENANT_MIXIN_ID, Yo as WorkflowPayloadError, Zr as _connectionStreamCount, Qr as _resetConnectionSubjectsForTest, Xs as _voltroConnectionGrantsTable, qs as _voltroConnectionsTable, Nd as _voltroRebacTuplesTable, Bu as _voltroScheduleClaimsTable, zu as _voltroScheduleRunsTable, Vu as _voltroTracesTable, Hu as _voltroUndoLogTable, Wd as _voltroWakeupsTable, ds as _voltroWorkflowEventDeliveriesTable, us as _voltroWorkflowEventsTable, Wi as actingUserId, Lo as apiKeyManagementRoutes, Vi as applyDefined, Ad as applyDelta, td as applyInverse, nd as applyInverses, Mr as applyRowFilter, Nr as applyRowFilterToDescriptor, Af as applySoftDeleteScope, Df as applyTenantScope, ud as applyUndoInvocation, al as assertCan, ec as assertConnectionCipherConfigured, yf as attachAnalyticsMirror, Ha as awaitServerListening, zs as backoffMs, Nc as beginOAuthConnect, Wr as bindConnectionSubject, Es as bindEvent, ka as bindMutation, va as bindStream, _a as bindSubscription, fa as bindSubscriptionUntyped, Od as buildIvmState, op as buildPreview, Id as buildRebacInterceptor, Rd as buildRebacReadFilter, Yi as buildSubjectKey, qa as buildTracingLayer, Yl as cacheScopeLeaks, co as cachedBackend, il as can, _u as cancelWakeup, on as canonicalize, wd as classifyShape, xc as clearConnectionRefreshFlights, el as clearResourcePolicies, ee as clearRetentions, nu as clearSystemStoreHandle, fu as compileCron, Pc as completeOAuthConnect, gf as composeAnalytics, hf as composeAnalyticsSinks, Ac as connectionCallbackPath, $s as connectionLabel, $r as connectionSubjectsSnapshot, rf as countRunningWorkflows, _r as counter, Wl as crud, ul as currentRequestLoader, ea as currentRoutingContext, oi as currentTraceContext, Po as dataStoreApiKeyStore, go as dataStoreIdempotencyStore, xo as dataStoreKvStore, mi as decryptField, bf as defineAggregate, Qs as defineConnection, as as defineEventTrigger, jf as defineExecutor, Is as defineOutboxHandler, zd as defineReaction, Zc as defineResourcePolicy, du as defineSchedule, sf as defineSubscriber, Pr as deliveredRowCount, si as deriveKey, ap as diffChange, Ba as drainForShutdown, Ws as drainOutbox, wu as dueWakeups, rl as effectiveRelations, Fl as emptySchemaRegistry, bi as enableGraphObservation, pi as encryptField, ll as enterRequestLoader, no as envSecretsBackend, ar as eventMetricTagCacheSizeForTests, pc as exchangeAuthorizationCode, ri as externalSpanFromTraceparent, bn as extractDbCause, sn as fingerprintFor, lc as forgetCredential, Xl as formatCacheScopeLeaks, Jl as formatServerOnlyLeaks, ti as formatTraceparent, ed as forwardChangeFromCdc, Fo as frameworkApiKeyStrategy, vr as gauge, Eo as generateApiKeyToken, Rc as getConnectionResolver, Gr as getConnectionSubject, q as getFieldCipher, Qc as getResourcePolicy, Dr as getRowFilter, ru as getSystemStoreHandle, bd as getTimelineRecorder, hl as getTupleSource, $ as groupKeyOf, yr as histogramMetric, rp as historyProvenance, lo as httpSecretsBackend, Jt as inspectWorkflow, gl as installPolicyGuardResolver, Xr as interruptConnectionStreams, Yu as invertChange, xf as isAggregateDefinition, Of as isEmptyTenantScopedRead, xn as isForeignKeyViolation, Xd as isIdleNow, wa as isInfraError, xi as isObservingGraph, kf as isOrglessUserSubject, Sn as isQueryTimeout, Qu as isSafeToApply, lu as isScheduleDefinition, os as isWorkflowEventTriggerDefinition, Dd as ivmValue, np as lastWriteProvenance, uc as listConnectionStates, $c as listResourcePolicies, pe as listRetentions, Pd as loadResourceTuples, Ld as loadSubjectTuples, au as localityAwareSelector, Zf as makeActionRunner, Mu as makeAdvisoryLockCoordinator, ci as makeAesCipher, ko as makeApiKeyService, El as makeApiKeyUsageBuffer, No as makeApiKeyUsageFlusher, Cn as makeAppAccess, So as makeAsyncKv, Ts as makeBufferGapDetector, to as makeBufferingSpanProcessor, tc as makeConnectionRegistry, Bc as makeConnectionResolver, Vc as makeConnectionsFacade, Ru as makeCoordinatedScheduler, vl as makeDataLoader, qc as makeDisconnectConnectionExecutor, Ho as makeEffectStoreLayer, xs as makeEventPublisher, fs as makeEventsFacade, li as makeFieldCipher, Fi as makeFluentStore, Zd as makeIdleGate, ts as makeLazyWorkflowFacade, Wc as makeListConnectionsExecutor, Da as makeMutationOutputCodec, Uf as makeMutationRunner, Yf as makeOneShotQueryRunner, Rs as makeOutboxFacade, $o as makePostCommitWorkflowFacade, qd as makeProcessAdapter, Jf as makeQueryDescriptorProducer, qf as makeQueryReauthorizer, Xf as makeQuerySubscriber, Qd as makeRouterActivity, jl as makeSchemaRegistry, Gc as makeStartConnectionExecutor, Kc as makeSubmitTokenExecutor, qu as makeUndoCapture, $d as makeWakeGate, nf as makeWakeProxyServer, Qo as makeWorkflowFacade, es as makeWorkflowFacadeWithCallerContext, ns as makeWorkflowHandlers, rs as makeWorkflowLayers, Go as makeWorkflowRunHandle, vu as markWakeupFired, kd as materializeIvm, Ao as memoryApiKeyStore, su as memoryReplicationAdapter, Ji as memoryRywPositionStore, pu as nextFiring, Tu as nextWakeup, Yd as nodeProcessSupervisor, mf as noopAnalytics, _f as noopAnalyticsSpec, Co as noopKv, Ei as observeStore, wi as observedGraph, qr as onBindConnectionSubject, Fa as onProcessShutdown, Fs as outboxAttemptsTable, Ms as outboxTable, ni as parseTraceparent, Xo as payloadPropertyNames, Ki as powerOfTwoSelector, cp as previewInRollback, ac as projectConnectionState, Du as pruneWakeups, ys as publishEvent, tl as rebacPolicyGraph, sr as recordEventDelivered, cr as recordEventDropped, or as recordEventPublished, lr as recordEventSubscribers, ur as recordSample, hr as recordScheduleRun, mr as recordSubscriptionActive, fr as recordSubscriptionDelivery, Ci as recordTableAccess, Sd as recordTimelineEvent, gr as recordWorkflowRun, Bl as redactColumns, hd as redactRow, Xi as redisRywPositionStore, dd as redoUndoInvocation, mc as refreshAccessToken, Yr as registerConnectionStream, Ce as registerRetention, gu as registerWakeup, xu as releaseWakeup, qi as replicaHealth, ma as resetComputedQueryCacheWarnings, ir as resetEventMetricTagCacheForTests, Ti as resetObservedGraph, ao as resetSecretsBackend, wc as resolveConnection, zc as resolveConnectionForSubject, ou as resolveCurrentRegion, wn as resolveDependentTables, Mc as resolveRedirectUri, jd as resolveRescan, kr as resolveRowFilterScope, Ar as resolveRowFilterScopeFor, oo as resolveSecret, so as resolveSecretSync, uo as resolveSecretsBackend, fd as resolveTimelineMode, Te as retentionTtlMsFromEnv, _d as reverseEventOverRows, sl as revokedIds, iu as runAsSystem, af as runOrchestratorTick, Mf as runProvidedEffect, Ud as runReaction, of as runSingleNodeOrchestrator, Kd as runWakeLoop, Hf as runWithDeadlockRetry, Si as runWithObservedProcedure, dl as runWithRequestLoader, $i as runWithRoutingContext, ai as runWithTraceContext, jc as sanitizeRedirectTo, Lu as scheduleCoordinated, Gl as schemaPropertyNames, ql as serverOnlyLeaks, Lc as setConnectionResolver, di as setFieldCipher, Er as setRowFilter, io as setSecretsBackend, tu as setSystemStoreHandle, xd as setTimelineRecorderForTest, ml as setTupleSource, Xt as settleHandlerBody, To as sha256Hex, za as shutdownGraceMsFromEnv, Au as singleCoordinator, xr as snapshotMetrics, Sr as snapshotMetricsSync, Tl as ssrfGuardHttpClientLayer, wl as ssrfReason, ja as startRpcServer, Pu as startScheduler, sc as storeCredential, Fc as sweepExpiredGrants, Me as sweepRetention, Xu as synthesizeInverse, yl as tracingHttpClientLayer, is as triggerWorkflow, bu as tryClaimWakeup, Kr as unbindConnectionSubject, Uu as undoCaptureEnabled, cd as undoLogExecutor, Ef as useAggregate, ff as useAnalytics, ol as visibleRows, Gd as wakeDueOnce, Ff as withRowFilter, Uo as workflowToRpc, Ku as wrapCaptureStore, Ll as wrapStoreWithBootCodec, Gi as wrapStoreWithMixinBehaviour };
+export { To as API_KEYS_TABLE, Xc as AccessDenied, Mf as AggregateError, Bd as AggregateMaintainer, jf as AggregateNotFound, Nf as AggregateRegistry, Af as AggregateStale, _f as AnalyticsCapabilityNotSupported, gf as AnalyticsError, vf as AnalyticsSink, X as CONNECTIONS_TABLE, Ys as CONNECTION_GRANTS_TABLE, su as CircuitBreaker, au as CircuitOpen, vc as ConnectionNotConnected, ja as DEFAULT_MAX_RPC_BODY_BYTES, gc as DEFAULT_REFRESH_SKEW_MS, wr as DEFAULT_ROW_FILTER_RETRY, Lu as DORMANCY_WAKEUP_TENANT, Pi as DeleteBuilder, Ir as Dispatcher, Cs as EVENT_CLIENT_QUEUE_SIZE, ws as EVENT_LATEST_QUEUE_SIZE, Bo as EffectStore, vs as EventBus, Ac as GRANT_TTL_MS, yn as InMemoryDataStore, sn as IndexedMatcher, As as InstanceMembership, $t as LinearScanMatcher, p as MetricBoundaries, xf as NOOP_ANALYTICS_PROVIDER, Or as NO_ROW_FILTER, Di as NoRowFound, Ps as OUTBOX_ATTEMPTS_TABLE, Vs as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, Oi as OptimisticLockError, Yc as REBAC_ADMIN_SCOPE, _c as REFRESH_LEASE_MS, _p as RUNTIME_NAME, Xd as ReactionRateLimiter, ta as ReplicatedDataStore, Cr as RowFilterUnavailable, Iu as SCHEDULE_SUBJECT, zo as SYSTEM_SUBJECT, Mi as SelectBuilder, xl as SsrfBlockedError, Li as StoreOperationFailed, un as SubscriptionRegistry, Ri as TableValidationFailed, Ii as TenantScopeViolation, Ed as TimelineRecorder, ad as UndoBoundaryError, sd as UndoStack, Ni as UpdateBuilder, Ol as VOLTRO_AUDIT_MIXIN_ID, Al as VOLTRO_EXPIRES_MIXIN_ID, kl as VOLTRO_SOFT_DELETE_MIXIN_ID, jl as VOLTRO_TENANT_MIXIN_ID, Xo as WorkflowPayloadError, Zr as _connectionStreamCount, Qr as _resetConnectionSubjectsForTest, Zs as _voltroConnectionGrantsTable, Js as _voltroConnectionsTable, Vd as _voltroRebacTuplesTable, Ju as _voltroScheduleClaimsTable, qu as _voltroScheduleRunsTable, Yu as _voltroTracesTable, Xu as _voltroUndoLogTable, Qd as _voltroWakeupsTable, fs as _voltroWorkflowEventDeliveriesTable, ds as _voltroWorkflowEventsTable, Wi as actingUserId, Ro as apiKeyManagementRoutes, Vi as applyDefined, Rd as applyDelta, ld as applyInverse, ud as applyInverses, ru as applyPluginRefRules, Mr as applyRowFilter, Nr as applyRowFilterToDescriptor, Rf as applySoftDeleteScope, Ff as applyTenantScope, vd as applyUndoInvocation, ol as assertCan, tc as assertConnectionCipherConfigured, Df as attachAnalyticsMirror, Ua as awaitServerListening, Bs as backoffMs, Pc as beginOAuthConnect, Wr as bindConnectionSubject, Ds as bindEvent, Aa as bindMutation, ya as bindStream, va as bindSubscription, pa as bindSubscriptionUntyped, Id as buildIvmState, mp as buildPreview, Wd as buildRebacInterceptor, Kd as buildRebacReadFilter, Yi as buildSubjectKey, Ja as buildTracingLayer, Xl as cacheScopeLeaks, lo as cachedBackend, al as can, Tu as cancelWakeup, cn as canonicalize, Md as classifyShape, Sc as clearConnectionRefreshFlights, tl as clearResourcePolicies, ee as clearRetentions, uu as clearSystemStoreHandle, iu as collectPluginRefRules, bu as compileCron, Fc as completeOAuthConnect, wf as composeAnalytics, Cf as composeAnalyticsSinks, jc as connectionCallbackPath, ec as connectionLabel, $r as connectionSubjectsSnapshot, ff as countRunningWorkflows, _r as counter, Gl as crud, dl as currentRequestLoader, ea as currentRoutingContext, oi as currentTraceContext, Fo as dataStoreApiKeyStore, _o as dataStoreIdempotencyStore, So as dataStoreKvStore, mi as decryptField, Of as defineAggregate, $s as defineConnection, os as defineEventTrigger, zf as defineExecutor, Ls as defineOutboxHandler, qd as defineReaction, Qc as defineResourcePolicy, yu as defineSchedule, hf as defineSubscriber, Pr as deliveredRowCount, si as deriveKey, pp as diffChange, Va as drainForShutdown, Gs as drainOutbox, Mu as dueWakeups, il as effectiveRelations, Il as emptySchemaRegistry, bi as enableGraphObservation, pi as encryptField, ul as enterRequestLoader, ro as envSecretsBackend, ar as eventMetricTagCacheSizeForTests, mc as exchangeAuthorizationCode, ri as externalSpanFromTraceparent, xn as extractDbCause, ln as fingerprintFor, uc as forgetCredential, Zl as formatCacheScopeLeaks, Yl as formatServerOnlyLeaks, ti as formatTraceparent, eu as formatUnresolvedSources, cd as forwardChangeFromCdc, Io as frameworkApiKeyStrategy, vr as gauge, Do as generateApiKeyToken, zc as getConnectionResolver, Gr as getConnectionSubject, q as getFieldCipher, $c as getResourcePolicy, Dr as getRowFilter, du as getSystemStoreHandle, Od as getTimelineRecorder, gl as getTupleSource, $ as groupKeyOf, yr as histogramMetric, dp as historyProvenance, uo as httpSecretsBackend, Xt as inspectWorkflow, _l as installPolicyGuardResolver, Xr as interruptConnectionStreams, rd as invertChange, kf as isAggregateDefinition, If as isEmptyTenantScopedRead, Sn as isForeignKeyViolation, af as isIdleNow, Ta as isInfraError, xi as isObservingGraph, Lf as isOrglessUserSubject, Cn as isQueryTimeout, od as isSafeToApply, _u as isScheduleDefinition, tu as isSoftDelete, ss as isWorkflowEventTriggerDefinition, Fd as ivmValue, up as lastWriteProvenance, dc as listConnectionStates, el as listResourcePolicies, pe as listRetentions, Hd as loadResourceTuples, Gd as loadSubjectTuples, pu as localityAwareSelector, ap as makeActionRunner, Bu as makeAdvisoryLockCoordinator, ci as makeAesCipher, Ao as makeApiKeyService, Dl as makeApiKeyUsageBuffer, Po as makeApiKeyUsageFlusher, wn as makeAppAccess, Co as makeAsyncKv, Es as makeBufferGapDetector, no as makeBufferingSpanProcessor, nc as makeConnectionRegistry, Vc as makeConnectionResolver, Hc as makeConnectionsFacade, Ku as makeCoordinatedScheduler, yl as makeDataLoader, Jc as makeDisconnectConnectionExecutor, Uo as makeEffectStoreLayer, Ss as makeEventPublisher, ps as makeEventsFacade, li as makeFieldCipher, Fi as makeFluentStore, of as makeIdleGate, ns as makeLazyWorkflowFacade, Gc as makeListConnectionsExecutor, Oa as makeMutationOutputCodec, Zf as makeMutationRunner, rp as makeOneShotQueryRunner, zs as makeOutboxFacade, es as makePostCommitWorkflowFacade, tf as makeProcessAdapter, np as makeQueryDescriptorProducer, tp as makeQueryReauthorizer, ip as makeQuerySubscriber, sf as makeRouterActivity, Ml as makeSchemaRegistry, Kc as makeStartConnectionExecutor, qc as makeSubmitTokenExecutor, td as makeUndoCapture, cf as makeWakeGate, df as makeWakeProxyServer, $o as makeWorkflowFacade, ts as makeWorkflowFacadeWithCallerContext, rs as makeWorkflowHandlers, is as makeWorkflowLayers, Ko as makeWorkflowRunHandle, Eu as markWakeupFired, Ld as materializeIvm, jo as memoryApiKeyStore, hu as memoryReplicationAdapter, Ji as memoryRywPositionStore, xu as nextFiring, Nu as nextWakeup, rf as nodeProcessSupervisor, Sf as noopAnalytics, Tf as noopAnalyticsSpec, wo as noopKv, Ei as observeStore, wi as observedGraph, qr as onBindConnectionSubject, Ia as onProcessShutdown, Is as outboxAttemptsTable, Ns as outboxTable, ni as parseTraceparent, Zo as payloadPropertyNames, Ki as powerOfTwoSelector, gp as previewInRollback, oc as projectConnectionState, Fu as pruneWakeups, bs as publishEvent, nl as rebacPolicyGraph, sr as recordEventDelivered, cr as recordEventDropped, or as recordEventPublished, lr as recordEventSubscribers, ur as recordSample, hr as recordScheduleRun, mr as recordSubscriptionActive, fr as recordSubscriptionDelivery, Ci as recordTableAccess, Ad as recordTimelineEvent, gr as recordWorkflowRun, Vl as redactColumns, Cd as redactRow, Xi as redisRywPositionStore, yd as redoUndoInvocation, hc as refreshAccessToken, Yr as registerConnectionStream, Ce as registerRetention, wu as registerWakeup, ku as releaseWakeup, qi as replicaHealth, ha as resetComputedQueryCacheWarnings, ir as resetEventMetricTagCacheForTests, Ti as resetObservedGraph, oo as resetSecretsBackend, Tc as resolveConnection, Bc as resolveConnectionForSubject, mu as resolveCurrentRegion, Tn as resolveDependentTables, Nc as resolveRedirectUri, zd as resolveRescan, kr as resolveRowFilterScope, Ar as resolveRowFilterScopeFor, so as resolveSecret, co as resolveSecretSync, fo as resolveSecretsBackend, bd as resolveTimelineMode, Te as retentionTtlMsFromEnv, Td as reverseEventOverRows, cl as revokedIds, nu as rulesFor, fu as runAsSystem, pf as runOrchestratorTick, Bf as runProvidedEffect, Zd as runReaction, mf as runSingleNodeOrchestrator, ef as runWakeLoop, Xf as runWithDeadlockRetry, Si as runWithObservedProcedure, fl as runWithRequestLoader, $i as runWithRoutingContext, ai as runWithTraceContext, Mc as sanitizeRedirectTo, Gu as scheduleCoordinated, Kl as schemaPropertyNames, Jl as serverOnlyLeaks, Rc as setConnectionResolver, di as setFieldCipher, Er as setRowFilter, ao as setSecretsBackend, lu as setSystemStoreHandle, kd as setTimelineRecorderForTest, hl as setTupleSource, Qt as settleHandlerBody, Eo as sha256Hex, Ba as shutdownGraceMsFromEnv, Ru as singleCoordinator, xr as snapshotMetrics, Sr as snapshotMetricsSync, El as ssrfGuardHttpClientLayer, Tl as ssrfReason, Ma as startRpcServer, Hu as startScheduler, cc as storeCredential, Ic as sweepExpiredGrants, Me as sweepRetention, id as synthesizeInverse, bl as tracingHttpClientLayer, as as triggerWorkflow, Ou as tryClaimWakeup, Kr as unbindConnectionSubject, Zu as undoCaptureEnabled, gd as undoLogExecutor, $l as unresolvedSources, Pf as useAggregate, bf as useAnalytics, sl as visibleRows, $d as wakeDueOnce, Uf as withRowFilter, Wo as workflowToRpc, ed as wrapCaptureStore, Rl as wrapStoreWithBootCodec, Gi as wrapStoreWithMixinBehaviour };