@voltro/runtime 0.27.0 → 0.28.0

package/dist/index.js

@@ -5687,37 +5687,40 @@ update again, which is indistinguishable from "nothing has changed" — so the
 symptom is silence, and silence is what this surface exists to eliminate.
 A \`source:\` is a STRING, so \`tsc\` cannot see a stale one and a rename leaves it
 behind quietly.`;
-}, iu = (e) => e.op === "update" && (e.old?.deletedAt ?? null) === null && (e.new?.deletedAt ?? null) !== null, au = (e, t) => {
-	let n = iu(t);
+}, iu = (e) => e.old ?? e.new ?? {}, au = (e) => String(iu(e).id ?? ""), ou = (e) => {
+	let t = iu(e).tenantId;
+	return typeof t == "string" ? t : null;
+}, su = (e) => e.op === "update" && (e.old?.deletedAt ?? null) === null && (e.new?.deletedAt ?? null) !== null, cu = (e, t) => {
+	let n = su(t);
 	return t.op !== "delete" && !n ? [] : e.filter((e) => e.targetTable === t.table && e.policy !== "keep" && (!n || e.onSoftDelete));
-}, ou = async (e, t, n) => {
-	let r = au(t, n);
+}, lu = async (e, t, n) => {
+	let r = cu(t, n);
 	if (r.length === 0) return [];
-	let i = [];
+	let i = au(n), a = ou(n), o = [];
 	for (let t of r) {
-		let r = await e.query({
+		let n = await e.query({
 			table: t.table,
 			predicate: {
 				kind: "eq",
 				column: t.column,
-				value: n.rowId
+				value: i
 			},
 			order: void 0,
 			take: void 0,
 			skip: void 0,
 			projection: void 0
-		}), a = n.tenantId === null || n.tenantId === void 0 ? r : r.filter((e) => e.tenantId === n.tenantId);
-		for (let n of a) {
+		}), r = a === null ? n : n.filter((e) => e.tenantId === a);
+		for (let n of r) {
 			let r = String(n.id);
 			t.policy === "delete" ? await e.delete(t.table, r) : await e.update(t.table, r, { [t.column]: null });
 		}
-		i.push({
+		o.push({
 			rule: t,
-			affected: a.length
+			affected: r.length
 		});
 	}
-	return i;
-}, su = (e, t) => {
+	return o;
+}, uu = (e, t) => {
 	let n = [];
 	for (let r of e) for (let e of r.appliedPluginRefs ?? []) {
 		let i = e.column, a;
@@ -5736,26 +5739,26 @@ behind quietly.`;
 		});
 	}
 	return n.filter((e) => e.policy !== "keep");
-}, cu = class extends y.TaggedError()("CircuitOpen", {
+}, du = class extends y.TaggedError()("CircuitOpen", {
 	name: y.String,
 	retryAfterMs: y.Number
-}) {}, lu = {
+}) {}, fu = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, uu = { make: (n) => o.gen(function* () {
-	let r = n.name ?? "circuit", i = a.toMillis(a.decode(n.resetTimeout)), s = n.halfOpenSuccessThreshold ?? 1, c = n.isFailure ?? (() => !0), l = yield* _.make(lu), u = o.gen(function* () {
+}, pu = { make: (n) => o.gen(function* () {
+	let r = n.name ?? "circuit", i = a.toMillis(a.decode(n.resetTimeout)), s = n.halfOpenSuccessThreshold ?? 1, c = n.isFailure ?? (() => !0), l = yield* _.make(fu), u = o.gen(function* () {
 		let e = yield* _.get(l);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* _.set(l, t >= s ? lu : {
+			yield* _.set(l, t >= s ? fu : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* _.set(l, lu));
+		e.failureCount !== 0 && (yield* _.set(l, fu));
 	}), d = o.gen(function* () {
 		let e = yield* t.currentTimeMillis, r = yield* _.get(l);
 		if (r.tag === "half-open" || r.tag === "open") {
@@ -5793,7 +5796,7 @@ behind quietly.`;
 			if (e.isInterruptedOnly(t)) return o.void;
 			let n = e.failureOption(t), r = n._tag === "Some" ? n.value : void 0;
 			return c(r) ? d : o.void;
-		})) : yield* o.fail(new cu({
+		})) : yield* o.fail(new du({
 			name: r,
 			retryAfterMs: n
 		}));
@@ -5802,15 +5805,15 @@ behind quietly.`;
 		value: _.get(l).pipe(o.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(m, "reset", {
-		value: _.set(l, lu),
+		value: _.set(l, fu),
 		enumerable: !0
 	}), m;
-}) }, du, fu = (e) => {
-	du = e;
-}, pu = () => {
-	du = void 0;
-}, mu = () => du, hu = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? vt(t.id ?? "system") : vt(t.id ?? "system", t.scopes), r = t.store ?? du?.dataStore, i = t.schemaRegistry ?? du?.schemaRegistry, a = t.dialect ?? du?.dialect;
+}) }, mu, hu = (e) => {
+	mu = e;
+}, gu = () => {
+	mu = void 0;
+}, _u = () => mu, vu = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? vt(t.id ?? "system") : vt(t.id ?? "system", t.scopes), r = t.store ?? mu?.dataStore, i = t.schemaRegistry ?? mu?.schemaRegistry, a = t.dialect ?? mu?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
@@ -5820,7 +5823,7 @@ behind quietly.`;
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, gu = (e) => {
+}, yu = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -5848,7 +5851,7 @@ behind quietly.`;
 			return r.loadSnapshot();
 		}
 	};
-}, _u = (e = process.env) => {
+}, bu = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -5860,7 +5863,7 @@ behind quietly.`;
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, vu = () => {
+}, xu = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -5885,7 +5888,7 @@ behind quietly.`;
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, yu = Symbol.for("@voltro/ScheduleDefinition"), bu = (e) => typeof e == "object" && !!e && yu in e, xu = 30 * 6e4, Su = (e) => {
+}, Su = Symbol.for("@voltro/ScheduleDefinition"), Cu = (e) => typeof e == "object" && !!e && Su in e, wu = 30 * 6e4, Tu = (e) => {
 	let t = r.parse(e.cron, e.timezone);
 	if (s.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin").\nThe field is non-optional in \`ScheduleDefinition\`, so an ABSENT one is a tsc error and never reaches here. Arriving at this message means the value was present and EMPTY — almost always \`process.env.TZ ?? ''\` or a config lookup that missed. A reporter lost a crashloop to it, so the distinction is worth stating: this is not a check the type could have made for you.`);
@@ -5894,18 +5897,18 @@ behind quietly.`;
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? xu,
-		[yu]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? wu,
+		[Su]: !0
 	};
-}, Cu = (e) => r.unsafeParse(e.cron, e.timezone), wu = (e, t = /* @__PURE__ */ new Date()) => r.next(Cu(e), t), Z = "_voltro_wakeups", Tu = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Eu = (e) => ({
+}, Eu = (e) => r.unsafeParse(e.cron, e.timezone), Du = (e, t = /* @__PURE__ */ new Date()) => r.next(Eu(e), t), Z = "_voltro_wakeups", Ou = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, ku = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), Du = async (e, t) => {
+}), Au = async (e, t) => {
 	await e.upsert(Z, {
-		id: Tu(t),
+		id: Ou(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -5915,7 +5918,7 @@ behind quietly.`;
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, Ou = async (e, t) => e.delete(Z, Tu(t)), ku = async (e, t) => await e.update(Z, Tu(t), { status: "fired" }) !== null, Au = (e, t) => ({ and: [{
+}, ju = async (e, t) => e.delete(Z, Ou(t)), Mu = async (e, t) => await e.update(Z, Ou(t), { status: "fired" }) !== null, Nu = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -5923,16 +5926,16 @@ behind quietly.`;
 	column: "status",
 	op: "eq",
 	value: t
-}] }), ju = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Au(Tu(t), "pending") }) > 0, Mu = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: Au(Tu(t), "fired") });
-}, Nu = {
+}] }), Pu = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Nu(Ou(t), "pending") }) > 0, Fu = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: Nu(Ou(t), "fired") });
+}, Iu = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, Pu = async (e, t) => {
+}, Lu = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: Nu,
+		predicate: Iu,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5941,18 +5944,18 @@ behind quietly.`;
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Eu);
-}, Fu = async (e, t, n = 500) => {
-	let r = await Pu(e, n), i = t.getTime();
+	return (await e.query(n)).map(ku);
+}, Ru = async (e, t, n = 500) => {
+	let r = await Lu(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, Iu = async (e) => (await Pu(e, 1))[0] ?? null, Lu = {
+}, zu = async (e) => (await Lu(e, 1))[0] ?? null, Bu = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, Ru = async (e, t = {}) => {
+}, Vu = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: Lu,
+		predicate: Bu,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -5963,12 +5966,12 @@ behind quietly.`;
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, zu = Ho, Bu = "default", Vu = {
+}, Hu = Ho, Uu = "default", Wu = {
 	kind: "single",
 	tryClaim: async () => !0
-}, Hu = "_voltro_schedule_claims", Uu = (e, t, n) => {
+}, Gu = "_voltro_schedule_claims", Ku = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: Hu,
+		table: Gu,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -5983,7 +5986,7 @@ behind quietly.`;
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(Hu, {
+				return await e.insert(Gu, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -6001,12 +6004,12 @@ behind quietly.`;
 			}
 		}
 	};
-}, Wu = "_voltro_schedule_runs", Gu = async (e, t) => {
+}, qu = "_voltro_schedule_runs", Ju = async (e, t) => {
 	let { store: n, coordinator: i, buildContext: a, replicaId: o, log: s, onRunEvent: c, interceptFire: l } = t, u = t.dormancy === "sleep", d = t.dormancyTenantId ?? "default", f = /* @__PURE__ */ new Map(), p = /* @__PURE__ */ new Set(), m = /* @__PURE__ */ new Map(), h = !1, g = new Map(e.map((e) => [e.name, e])), _ = (e, t) => {
-		c?.(e, qu(t));
+		c?.(e, Xu(t));
 	}, v = async (e, t, r, i, a, c) => {
 		try {
-			let s = `sr_${Re()}`, l = await n.insert(Wu, {
+			let s = `sr_${Re()}`, l = await n.insert(qu, {
 				id: s,
 				name: e.name,
 				status: i,
@@ -6031,7 +6034,7 @@ behind quietly.`;
 		}
 	}, y = async (e, t) => {
 		try {
-			let r = await n.update(Wu, e, t);
+			let r = await n.update(qu, e, t);
 			r && _("update", r);
 		} catch (t) {
 			s.warn("schedule: failed to record run finish", {
@@ -6042,7 +6045,7 @@ behind quietly.`;
 	}, b = async (e) => {
 		try {
 			let t = await n.query({
-				table: Wu,
+				table: qu,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -6077,7 +6080,7 @@ behind quietly.`;
 				scheduleName: e.name,
 				trigger: n,
 				runId: o,
-				subject: zu
+				subject: Hu
 			})
 		};
 		try {
@@ -6113,7 +6116,7 @@ behind quietly.`;
 			let n = Q(t).includes("exceeded maxRuntimeMs"), r = xn(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Q(t)} — ${r}` : Q(t);
 			o && await y(o, {
 				status: "failed",
-				errorTag: n ? "timeout" : Ku(t),
+				errorTag: n ? "timeout" : Yu(t),
 				errorMessage: i,
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - c
@@ -6177,8 +6180,8 @@ behind quietly.`;
 		}
 	}, w = async (e) => {
 		try {
-			let t = r.next(Cu(e), /* @__PURE__ */ new Date());
-			await Du(n, {
+			let t = r.next(Eu(e), /* @__PURE__ */ new Date());
+			await Au(n, {
 				tenantId: d,
 				kind: "schedule",
 				refId: e.name,
@@ -6192,7 +6195,7 @@ behind quietly.`;
 		}
 	}, T = 2147483647, E = (e) => {
 		if (h) return;
-		let n = Cu(e), i = r.next(n, /* @__PURE__ */ new Date()), a = () => {
+		let n = Eu(e), i = r.next(n, /* @__PURE__ */ new Date()), a = () => {
 			if (h) return;
 			let n = i.getTime() - Date.now();
 			if (n > T) {
@@ -6214,7 +6217,7 @@ behind quietly.`;
 		let i;
 		try {
 			let t = (await n.query({
-				table: Wu,
+				table: qu,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -6233,7 +6236,7 @@ behind quietly.`;
 			return;
 		}
 		if (!i) return;
-		let a = Cu(e), o = [], c = r.next(a, i), l = Date.now();
+		let a = Eu(e), o = [], c = r.next(a, i), l = Date.now();
 		for (; c.getTime() < l && o.length < 1e3;) o.push(c), c = r.next(a, c);
 		if (o.length !== 0) if (s.info("schedule: backfill", {
 			name: e.name,
@@ -6278,11 +6281,11 @@ behind quietly.`;
 			f.clear(), s.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), Ku = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, qu = (e) => {
+}, Q = (e) => e?.message ?? String(e), Yu = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Xu = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, Ju = (e, t, n, r) => {
+}, Zu = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -6312,7 +6315,7 @@ behind quietly.`;
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, Yu = (e) => (t, n, r) => Ju(t, n, r, e), Xu = F("_voltro_schedule_runs", {
+}, Qu = (e) => (t, n, r) => Zu(t, n, r, e), $u = F("_voltro_schedule_runs", {
 	id: M({ prefix: "schrun" }),
 	name: I(),
 	status: I().oneOf([
@@ -6342,13 +6345,13 @@ behind quietly.`;
 	]).nullable(),
 	replicaId: I().nullable(),
 	result: P().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), Zu = F("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), ed = F("_voltro_schedule_claims", {
 	id: M({ prefix: "schclaim" }),
 	scheduleName: I(),
 	bucket: I(),
 	claimedBy: I(),
 	claimedAt: L()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), Qu = F("_voltro_traces", {
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), td = F("_voltro_traces", {
 	id: M({ prefix: "span" }),
 	traceId: I(),
 	spanId: I(),
@@ -6372,7 +6375,7 @@ behind quietly.`;
 	durationMs: N(),
 	attributes: P().nullable(),
 	events: P().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), $u = F("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), nd = F("_voltro_undo_log", {
 	id: M({ prefix: "undo" }),
 	tag: I(),
 	label: I().nullable(),
@@ -6383,25 +6386,25 @@ behind quietly.`;
 	crossesAction: E().default(!1),
 	undone: E().default(!1),
 	createdAt: L().default("now")
-}).index(["subjectId", "createdAt"]), ed = (e = process.env) => {
+}).index(["subjectId", "createdAt"]), rd = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, td = (e) => e.startsWith("_voltro"), nd = async (e, t, n) => (await e.query({
+}, id = (e) => e.startsWith("_voltro"), ad = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: O("id", n),
 	order: []
-}))[0] ?? null, rd = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, od = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return td(n) || t({
+		return id(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = td(n) ? null : await nd(e, n, r), o = await e.update(n, r, i);
-		return td(n) || t({
+		let a = id(n) ? null : await ad(e, n, r), o = await e.update(n, r, i);
+		return id(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -6410,8 +6413,8 @@ behind quietly.`;
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = td(n) ? null : await nd(e, n, r), a = await e.delete(n, r);
-		return !td(n) && a && t({
+		let i = id(n) ? null : await ad(e, n, r), a = await e.delete(n, r);
+		return !id(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -6420,10 +6423,10 @@ behind quietly.`;
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), id = (e) => {
+} }), sd = (e) => {
 	let t = [];
 	return {
-		tx: rd(e, (e) => t.push(e)),
+		tx: od(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -6439,14 +6442,14 @@ behind quietly.`;
 			});
 		}
 	};
-}, ad = (e) => {
+}, cd = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, od = (e) => {
-	let t = ad(e);
+}, ld = (e) => {
+	let t = cd(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -6470,28 +6473,28 @@ behind quietly.`;
 			row: e.prev
 		};
 	}
-}, sd = (e) => {
-	if (e.crossesAction) throw new cd(e.invocationId, "action");
+}, ud = (e) => {
+	if (e.crossesAction) throw new dd(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = od(e.changes[n]);
+		let r = ld(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, cd = class extends Error {
+}, dd = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, ld = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, fd = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, ud = class {
+}, pd = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -6527,7 +6530,7 @@ behind quietly.`;
 			redo: [...this.undone]
 		};
 	}
-}, dd = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, md = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -6544,7 +6547,7 @@ behind quietly.`;
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, fd = async (e, t) => {
+}, hd = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -6562,21 +6565,21 @@ behind quietly.`;
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, pd = async (e, t) => {
-	for (let n of t) await fd(e, n);
-}, md = (e) => e.request?.subject?.id ?? null, hd = (e) => e === !0 || e === 1, gd = async (e, t, n) => (await e.query({
+}, gd = async (e, t) => {
+	for (let n of t) await hd(e, n);
+}, _d = (e) => e.request?.subject?.id ?? null, vd = (e) => e === !0 || e === 1, yd = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: O("id", n),
 	order: []
-}))[0] ?? null, _d = (e) => {
+}))[0] ?? null, bd = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, vd = (e) => e.id ?? e.next?.id ?? e.prev?.id, yd = async (e, t) => {
-	let n = md(t);
+}, xd = (e) => e.id ?? e.next?.id ?? e.prev?.id, Sd = async (e, t) => {
+	let n = _d(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: O("subjectId", n),
@@ -6585,68 +6588,68 @@ behind quietly.`;
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: hd(e.undone),
-		crossesAction: hd(e.crossesAction),
+		undone: vd(e.undone),
+		crossesAction: vd(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, bd = async (e, t) => {
-	let n = await gd(t.store, "_voltro_undo_log", e.invocationId);
+}, Cd = async (e, t) => {
+	let n = await yd(t.store, "_voltro_undo_log", e.invocationId);
 	if (!n) throw new rt({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== md(t)) throw new nt({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== _d(t)) throw new nt({ invocationId: e.invocationId });
 	return n;
-}, xd = async (e, t) => {
-	let n = await bd(e, t);
-	if (hd(n.undone)) return { ok: !0 };
-	if (hd(n.crossesAction)) throw new tt({
+}, wd = async (e, t) => {
+	let n = await Cd(e, t);
+	if (vd(n.undone)) return { ok: !0 };
+	if (vd(n.crossesAction)) throw new tt({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = _d(n.changes);
+	let r = bd(n.changes);
 	for (let n of r) {
-		let r = vd(n);
-		if (r !== void 0 && !ld(await gd(t.store, n.table, r), n.next ?? null)) throw new tt({
+		let r = xd(n);
+		if (r !== void 0 && !fd(await yd(t.store, n.table, r), n.next ?? null)) throw new tt({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: md(t),
+		subject: _d(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await pd(t.store, sd(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, Sd = async (e, t) => {
-	let n = await bd(e, t);
-	if (!hd(n.undone)) return { ok: !0 };
-	for (let e of _d(n.changes)) {
-		let n = vd(e);
+	return await gd(t.store, ud(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Td = async (e, t) => {
+	let n = await Cd(e, t);
+	if (!vd(n.undone)) return { ok: !0 };
+	for (let e of bd(n.changes)) {
+		let n = xd(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Cd = (e = process.env) => {
+}, Ed = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, wd = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Td = "«redacted»", Ed = (e) => {
+}, Dd = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Od = "«redacted»", kd = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = wd.test(n) ? Td : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Dd.test(n) ? Od : r;
 	return t;
-}, Dd = (e) => {
+}, Ad = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, Od = (e, t) => {
+}, jd = (e, t) => {
 	if (t.op === "insert") {
-		let n = Dd(t.new);
+		let n = Ad(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Dd(t.new) ?? Dd(t.old);
+		let n = Ad(t.new) ?? Ad(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, kd = class {
+}, Md = class {
 	mode;
 	capacity;
 	now;
@@ -6666,8 +6669,8 @@ behind quietly.`;
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Ed(e.old),
-			new: Ed(e.new),
+			old: kd(e.old),
+			new: kd(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -6680,23 +6683,23 @@ behind quietly.`;
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = Od(i, e);
+		for (let e of r) i = jd(i, e);
 		return i;
 	}
-}, Ad, jd = () => (Ad === void 0 && (Ad = new kd(Cd())), Ad), Md = (e) => {
-	Ad = e;
-}, Nd = (e) => {
-	let t = jd();
+}, Nd, Pd = () => (Nd === void 0 && (Nd = new Md(Ed())), Nd), Fd = (e) => {
+	Nd = e;
+}, Id = (e) => {
+	let t = Pd();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, Pd = /* @__PURE__ */ new Set([
+}, Ld = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), Fd = (e) => {
+]), Rd = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -6718,7 +6721,7 @@ behind quietly.`;
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return Pd.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return Ld.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -6732,7 +6735,7 @@ behind quietly.`;
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, Id = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Id), Ld = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Rd = (e, t) => {
+}, zd = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(zd), Bd = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Vd = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -6740,10 +6743,10 @@ behind quietly.`;
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, zd = (e, t) => {
+}, Hd = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = Ld(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = Bd(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -6759,10 +6762,10 @@ behind quietly.`;
 		}
 	}
 	return n;
-}, Bd = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, Ud = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: Rd(e, n)
-})), Vd = (e, t, n) => {
+	value: Vd(e, n)
+})), Wd = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -6771,7 +6774,7 @@ behind quietly.`;
 			r.delete(n);
 			return;
 		}
-		let s = Ld(t, e.column);
+		let s = Bd(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -6780,7 +6783,7 @@ behind quietly.`;
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = Ld(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = Bd(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -6800,15 +6803,15 @@ behind quietly.`;
 		state: r,
 		rescanGroups: [...i]
 	};
-}, Hd = (e, t, n, r) => {
+}, Gd = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = zd(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = Hd(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, Ud = class {
+}, Kd = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -6816,7 +6819,7 @@ behind quietly.`;
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = zd(this.shape, e), this.groups.clear();
+		this.state = Hd(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -6828,14 +6831,14 @@ behind quietly.`;
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = Vd(this.shape, this.state, e);
+		let n = Wd(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = Hd(this.shape, this.state, e, t);
+		this.state = Gd(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -6844,7 +6847,7 @@ behind quietly.`;
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return Bd(this.shape, this.state).map((e) => ({
+		return Ud(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -6857,7 +6860,7 @@ behind quietly.`;
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, Wd = F("_voltro_rebac_tuples", {
+}, qd = F("_voltro_rebac_tuples", {
 	id: M({ prefix: "rbct" }),
 	subjectId: I(),
 	relation: I(),
@@ -6869,7 +6872,7 @@ behind quietly.`;
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]), Gd = async (e, t, n, r) => t === null ? [] : (await e.query({
+]), Jd = async (e, t, n, r) => t === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: C(O("subjectId", t), O("resourceType", n), O("resourceId", r)),
 	order: [],
@@ -6881,11 +6884,11 @@ behind quietly.`;
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), Kd = (e) => ({
+})), Yd = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), qd = (e, t) => {
+}), Xd = (e, t) => {
 	let n = t.getPolicy ?? nl;
 	return (r, i) => {
 		let a = e[i.tag];
@@ -6898,7 +6901,7 @@ behind quietly.`;
 		if (s === void 0) return c("");
 		let l = a.resourceId(i.input);
 		if (l === null || l === "") return c("");
-		let u = Kd(i.subject), d = {
+		let u = Yd(i.subject), d = {
 			type: a.resourceType,
 			id: l,
 			tenantId: i.subject.tenantId
@@ -6908,7 +6911,7 @@ behind quietly.`;
 			tuples: e
 		}) ? r : c(l));
 	};
-}, Jd = async (e, t, n) => t === null ? [] : (await e.query({
+}, Zd = async (e, t, n) => t === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: C(O("subjectId", t), O("resourceType", n)),
 	order: [],
@@ -6920,18 +6923,18 @@ behind quietly.`;
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), Yd = (e) => {
+})), Qd = (e) => {
 	let t = e.getPolicy ?? nl;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = Kd(n);
+		let s = Yd(n);
 		return ul(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, Xd = (e) => {
+}, $d = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -6939,14 +6942,14 @@ behind quietly.`;
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, Zd = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Qd = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, $d = class {
+}, ef = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, tf = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, nf = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, ef = async (e, t, n) => {
-	if (t.table !== e.watch.table || !Zd(e.watch.on, t.op)) return "skipped-op";
+}, rf = async (e, t, n) => {
+	if (t.table !== e.watch.table || !ef(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -6955,26 +6958,26 @@ behind quietly.`;
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = Qd(t);
+	let a = tf(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, tf = F("_voltro_wakeups", {
+}, af = F("_voltro_wakeups", {
 	id: M({ prefix: "wakeup" }),
 	tenantId: I(),
 	kind: I(),
 	refId: I(),
 	wakeAt: L(),
 	status: I()
-}).index(["status", "wakeAt"]).index(["tenantId"]), nf = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Fu(e.store, t, e.batchLimit ?? 100);
+}).index(["status", "wakeAt"]).index(["tenantId"]), of = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Ru(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await ju(e.store, t)) try {
+	for (let t of n) if (await Pu(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await Mu(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await Fu(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -6982,11 +6985,11 @@ behind quietly.`;
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, rf = (e, t = 1e3) => {
+}, sf = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await nf(e);
+				await of(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -6996,10 +6999,10 @@ behind quietly.`;
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, af = (e) => ({ wake: async () => {
+}, cf = (e) => ({ wake: async () => {
 	await e.start();
-} }), of = (e) => new Promise((t) => setTimeout(t, e)), sf = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? of, i = e.spawnImpl ?? Zt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), lf = (e) => new Promise((t) => setTimeout(t, e)), uf = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? lf, i = e.spawnImpl ?? Zt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -7053,11 +7056,11 @@ behind quietly.`;
 		},
 		stop: m
 	};
-}, cf = async (e) => {
+}, df = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Iu(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await zu(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, lf = (e, t = Date.now) => {
+}, ff = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -7069,7 +7072,7 @@ behind quietly.`;
 			n = void 0;
 		}
 	};
-}, uf = () => {
+}, pf = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -7087,7 +7090,7 @@ behind quietly.`;
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, df = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), ff = (e, t, n, r) => new Promise((i, a) => {
+}, mf = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), hf = (e, t, n, r) => new Promise((i, a) => {
 	let o = xt.request({
 		host: n,
 		port: r,
@@ -7098,7 +7101,7 @@ behind quietly.`;
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), pf = (e, t, n, r, i) => new Promise((a, o) => {
+}), gf = (e, t, n, r, i) => new Promise((a, o) => {
 	let s = xt.request({
 		host: r,
 		port: i,
@@ -7113,21 +7116,21 @@ behind quietly.`;
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), mf = (e) => {
-	let t = df({
+}), _f = (e) => {
+	let t = mf({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
 	}), n = e.activity, r = xt.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => ff(r, i, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => hf(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => pf(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => gf(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, hf = async (e) => {
+}, vf = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -7144,15 +7147,15 @@ behind quietly.`;
 	} catch {
 		return 0;
 	}
-}, gf = async (e) => {
-	let t = af(e.supervisor), n = await nf({
+}, yf = async (e) => {
+	let t = cf(e.supervisor), n = await of({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await cf({
+	let r = await df({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -7162,12 +7165,12 @@ behind quietly.`;
 		woke: n,
 		stopped: i
 	};
-}, _f = async (e) => {
-	let t = lf(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = uf(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, bf = async (e) => {
+	let t = ff(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = pf(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = mf({
+	}, s = _f({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -7186,7 +7189,7 @@ behind quietly.`;
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await hf(e.store)), await gf({
+				if (a && (i = await vf(e.store)), await yf({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -7194,7 +7197,7 @@ behind quietly.`;
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await Ru(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await Vu(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -7209,14 +7212,14 @@ behind quietly.`;
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, vf = (e) => e, yf = class extends y.TaggedError()("AnalyticsError", {
+}, xf = (e) => e, Sf = class extends y.TaggedError()("AnalyticsError", {
 	provider: y.String,
 	operation: y.String,
 	cause: y.String
-}) {}, bf = class extends y.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, Cf = class extends y.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: y.String,
 	capability: y.String
-}) {}, xf = class extends n.Tag("@voltro/AnalyticsSink")() {}, Sf = (e, t) => ({
+}) {}, wf = class extends n.Tag("@voltro/AnalyticsSink")() {}, Tf = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -7235,20 +7238,20 @@ behind quietly.`;
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Cf = () => o.gen(function* () {
-	let e = yield* xf, t = yield* o.serviceOption(et), n = h.match(t, {
+}), Ef = () => o.gen(function* () {
+	let e = yield* wf, t = yield* o.serviceOption(et), n = h.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : Sf(e, n);
-}), wf = "noop", Tf = () => {
-	let e = (e) => o.fail(new bf({
-		provider: wf,
+	return n === null ? e : Tf(e, n);
+}), Df = "noop", Of = () => {
+	let e = (e) => o.fail(new Cf({
+		provider: Df,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: wf,
+			provider: Df,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -7262,8 +7265,8 @@ behind quietly.`;
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, Ef = (e) => {
-	if (e.length === 0) return Tf();
+}, kf = (e) => {
+	if (e.length === 0) return Of();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -7280,7 +7283,7 @@ behind quietly.`;
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? o.fail(new bf({
+		return r === void 0 ? o.fail(new Cf({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -7303,11 +7306,11 @@ behind quietly.`;
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Df = (e) => {
+}, Af = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => Ef(e.map((e) => e.build(t))),
+		build: (t) => kf(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => o.forEach(e, (e) => e.initialize ? e.initialize(t) : o.void, {
 			concurrency: 1,
@@ -7318,15 +7321,15 @@ behind quietly.`;
 			discard: !0
 		}) } : {}
 	};
-}, Of = {
+}, jf = {
 	kind: "noop",
-	build: () => Tf()
-}, kf = {
+	build: () => Of()
+}, Mf = {
 	tables: [],
 	detach: () => {}
-}, Af = (e) => {
+}, Nf = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return kf;
+	if (i === void 0 || i.tables.length === 0) return Mf;
 	let a = e.run ?? ((e) => o.runPromise(e)), s = i.primaryKey ?? "id", c = new Set(i.tables), l = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -7350,11 +7353,11 @@ behind quietly.`;
 		tables: i.tables,
 		detach: u
 	};
-}, jf = (e) => {
+}, Pf = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = Fd({
+		let t = Rd({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -7376,47 +7379,51 @@ behind quietly.`;
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, Mf = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Nf = class extends y.TaggedError()("AggregateStale", {
+}, Ff = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, If = class extends y.TaggedError()("AggregateStale", {
 	name: y.String,
 	ageMs: y.Number,
 	maxAgeMs: y.Number
-}) {}, Pf = class extends y.TaggedError()("AggregateNotFound", { name: y.String }) {}, Ff = class extends y.TaggedError()("AggregateError", {
+}) {}, Lf = class extends y.TaggedError()("AggregateNotFound", { name: y.String }) {}, Rf = class extends y.TaggedError()("AggregateError", {
 	name: y.String,
 	operation: y.String,
 	cause: y.String
-}) {}, If = class extends n.Tag("@voltro/AggregateRegistry")() {}, Lf = (e) => o.gen(function* () {
-	return (yield* If).getHandle(e);
-}), Rf = (e, t, n) => {
+}) {}, zf = class extends n.Tag("@voltro/AggregateRegistry")() {}, Bf = (e) => o.gen(function* () {
+	return (yield* zf).getHandle(e);
+}), Vf = (e, t, n) => {
 	if (e.crossTenant || !t.has(e.table) || n == null) return e;
 	let r = O("tenantId", n);
 	return {
 		...e,
 		predicate: e.predicate ? C(e.predicate, r) : r
 	};
-}, zf = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), Bf = (e) => e?.type === "user" && e.tenantId === "", Vf = (e, t) => {
+}, Hf = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), Uf = (e) => e?.type === "user" && e.tenantId === "", Wf = (e, t) => {
 	if (e.includeDeleted || !t.has(e.table)) return e;
 	let n = de("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? C(e.predicate, n) : n
 	};
-}, Hf = (e, t) => t, Uf = (t) => o.runPromiseExit(t).then((t) => {
+}, Gf = (e) => (t, n) => {
+	e.observe?.beforeScope?.({ ...t }, n);
+	let r = Wf(Vf(t, e.tenantScopedTables, n.tenantId), e.softDeleteScopedTables);
+	return e.observe?.afterScope?.({ ...r }), r;
+}, Kf = (e, t) => t, qf = (t) => o.runPromiseExit(t).then((t) => {
 	if (c.isSuccess(t)) return t.value;
 	let n = e.failureOption(t.cause);
 	throw h.isSome(n) ? n.value : e.squash(t.cause);
-}), Wf = (e, t) => e.pipe(o.provideService(et, t)), Gf = async (e, t, n) => {
+}), Jf = (e, t) => e.pipe(o.provideService(et, t)), Yf = async (e, t, n) => {
 	let r = await o.runPromise(ot(t, e.guards, n));
 	if (r) throw r;
-}, Kf = async (e) => {
+}, Xf = async (e) => {
 	if (Dr() === void 0) return e;
-	let t = await Uf(kr(e.subject, (e) => {
+	let t = await qf(kr(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, qf = async (t) => {
+}, Zf = async (t) => {
 	let n = `${t.kind}.${t.name}`, r = Date.now(), i = "ok";
 	try {
 		if (t.interceptor) {
@@ -7445,28 +7452,28 @@ behind quietly.`;
 			status: i
 		});
 	}
-}, Jf = /* @__PURE__ */ new Set([1213, 1205]), Yf = /* @__PURE__ */ new Set([
+}, Qf = /* @__PURE__ */ new Set([1213, 1205]), $f = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), Xf = (e) => {
+]), ep = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && Jf.has(e.errno) || typeof e.code == "string" && Yf.has(e.code) || typeof e.sqlState == "string" && Yf.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && Qf.has(e.errno) || typeof e.code == "string" && $f.has(e.code) || typeof e.sqlState == "string" && $f.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, Zf = 3, Qf = (e) => new Promise((t) => setTimeout(t, e)), $f = async (e, t) => {
-	let n = t?.delay ?? ((e) => Qf(e * 20 + Math.floor(Math.random() * 30)));
+}, tp = 3, np = (e) => new Promise((t) => setTimeout(t, e)), rp = async (e, t) => {
+	let n = t?.delay ?? ((e) => np(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= Zf || !Xf(e)) throw e;
+		if (t >= tp || !ep(e)) throw e;
 		await n(t);
 	}
-}, ep = (e) => (t, n, r) => qf({
+}, ip = (e) => (t, n, r) => Zf({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -7474,11 +7481,11 @@ behind quietly.`;
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await Gf(t.descriptor, r.subject, n);
-		let i = await Kf(r), a = [], s = await $f(async () => (a.length = 0, e.store.transactional(async (s) => {
+		await Yf(t.descriptor, r.subject, n);
+		let i = await Xf(r), a = [], s = await rp(async () => (a.length = 0, e.store.transactional(async (s) => {
 			let c = e.undoCapture?.(s), l = c ? c.tx : s, u = e.buildContext(i, l, { afterCommit: (e) => {
 				a.push(e);
-			} }), d = t.executor(n, u), f = o.isEffect(d) ? await e.runEffect(Wf(d, r.subject), u.store) : await d;
+			} }), d = t.executor(n, u), f = o.isEffect(d) ? await e.runEffect(Jf(d, r.subject), u.store) : await d;
 			return c && await c.persist(u.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -7488,30 +7495,30 @@ behind quietly.`;
 		for (let e of a) await e();
 		return s;
 	}
-}), tp = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, np = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, rp = (e) => {
+}), ap = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, op = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, sp = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, ip = (e, t) => (n) => () => {
+}, cp = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
 	return !r || r.length === 0 ? Promise.resolve(null) : o.runPromise(ot(n, r, t));
-}, ap = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = ip(t, n)(r.subject), s = async () => {
+}, lp = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = cp(t, n)(r.subject), s = async () => {
 		let i = await a();
 		if (i) throw i;
-		let s = e.buildContext(await Kf(r)), c = t.executor(n, s);
-		return o.isEffect(c) ? o.runPromise(e.provideEffect(Wf(c, r.subject), s.store)) : tp(await Promise.resolve(c));
+		let s = e.buildContext(await Xf(r)), c = t.executor(n, s);
+		return o.isEffect(c) ? o.runPromise(e.provideEffect(Jf(c, r.subject), s.store)) : ap(await Promise.resolve(c));
 	}, c = (n) => {
-		let i = tp(n);
-		return np(i) ? e.finalize(i, r) : {
+		let i = ap(n);
+		return op(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: rp(t),
+			dependentTables: sp(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: s
 		};
 	}, l = () => {
 		let a = t.executor(n, i);
-		return o.isEffect(a) ? e.provideEffect(Wf(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
+		return o.isEffect(a) ? e.provideEffect(Jf(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
 	}, u = () => {
 		let e = t.descriptor.guards;
 		return !e || e.length === 0 ? l() : ot(r.subject, e, n).pipe(o.flatMap((e) => {
@@ -7533,14 +7540,14 @@ behind quietly.`;
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, op = (e) => async (t, n, r) => {
-	let i = await Kf(r), a = ap(e)(t, n)(i), s = o.isEffect(a) ? await Uf(a) : a;
+}, up = (e) => async (t, n, r) => {
+	let i = await Xf(r), a = lp(e)(t, n)(i), s = o.isEffect(a) ? await qf(a) : a;
 	return zr(s) ? s.value : e.queryRows(s);
-}, sp = (e) => (t, n, r, i) => {
+}, dp = (e) => (t, n, r, i) => {
 	let a = !1, s;
 	return (async () => {
 		try {
-			let c = await Kf(r), l = ap(e)(t, n)(c), u = o.isEffect(l) ? await Uf(l) : l, d = (e) => i(e), f = zr(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c);
+			let c = await Xf(r), l = lp(e)(t, n)(c), u = o.isEffect(l) ? await qf(l) : l, d = (e) => i(e), f = zr(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c);
 			a ? f() : s = f;
 		} catch (e) {
 			i({
@@ -7551,7 +7558,7 @@ behind quietly.`;
 	})(), () => {
 		a = !0, s?.();
 	};
-}, cp = (e) => (t, n, r) => qf({
+}, fp = (e) => (t, n, r) => Zf({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -7559,16 +7566,16 @@ behind quietly.`;
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await Gf(t.descriptor, r.subject, n);
-		let i = e.buildContext(await Kf(r)), a = t.executor(n, i);
-		return o.isEffect(a) ? e.runEffect(Wf(a, r.subject), i.store) : a;
+		await Yf(t.descriptor, r.subject, n);
+		let i = e.buildContext(await Xf(r)), a = t.executor(n, i);
+		return o.isEffect(a) ? e.runEffect(Jf(a, r.subject), i.store) : a;
 	}
-}), lp = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, up = (e) => typeof e == "string" && e.length > 0 ? e : null, dp = [
+}), pp = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, mp = (e) => typeof e == "string" && e.length > 0 ? e : null, hp = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], fp = (e) => dp.some((t) => t in e), pp = (e, t, n) => {
+], gp = (e) => hp.some((t) => t in e), _p = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -7583,14 +7590,14 @@ behind quietly.`;
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!fp(e)) return {
+	if (!gp(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = up(e.updatedBy) ?? up(e.createdBy), o = lp(e.updatedAt) ?? lp(e.createdAt);
+	let a = mp(e.updatedBy) ?? mp(e.createdBy), o = pp(e.updatedAt) ?? pp(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -7602,12 +7609,12 @@ behind quietly.`;
 		attribution: "audit",
 		found: !0
 	};
-}, mp = (e, t) => {
+}, vp = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: up(e.actor) ?? up(e.changedBy) },
-			at: lp(e.at) ?? lp(e.changedAt),
+			actor: { id: mp(e.actor) ?? mp(e.changedBy) },
+			at: pp(e.at) ?? pp(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -7622,12 +7629,12 @@ behind quietly.`;
 		history: n,
 		found: n.length > 0
 	};
-}, hp = (e) => {
+}, yp = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, gp = (e) => {
+}, bp = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -7647,11 +7654,11 @@ behind quietly.`;
 	return {
 		table: e.table,
 		op: e.op,
-		id: hp(e),
+		id: yp(e),
 		fields: t
 	};
-}, _p = (e) => {
-	let t = e.map(gp);
+}, xp = (e) => {
+	let t = e.map(bp);
 	return {
 		rows: t,
 		summary: {
@@ -7660,21 +7667,21 @@ behind quietly.`;
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, vp = class extends Error {
+}, Sp = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, yp = async (e, t) => {
+}, Cp = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new vp();
+			throw n = await t(e), r = !0, new Sp();
 		});
 	} catch (e) {
-		if (!(e instanceof vp)) throw e;
+		if (!(e instanceof Sp)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, bp = "framework-runtime";
+}, wp = "framework-runtime";
 //#endregion
-export { Oo as API_KEYS_TABLE, $c as AccessDenied, Ff as AggregateError, Ud as AggregateMaintainer, Pf as AggregateNotFound, If as AggregateRegistry, Nf as AggregateStale, bf as AnalyticsCapabilityNotSupported, yf as AnalyticsError, xf as AnalyticsSink, X as CONNECTIONS_TABLE, Qs as CONNECTION_GRANTS_TABLE, uu as CircuitBreaker, cu as CircuitOpen, xc as ConnectionNotConnected, Pa as DEFAULT_MAX_RPC_BODY_BYTES, yc as DEFAULT_REFRESH_SKEW_MS, wr as DEFAULT_ROW_FILTER_RETRY, Bu as DORMANCY_WAKEUP_TENANT, Li as DeleteBuilder, Ir as Dispatcher, Es as EVENT_CLIENT_QUEUE_SIZE, Ds as EVENT_LATEST_QUEUE_SIZE, Uo as EffectStore, xs as EventBus, Nc as GRANT_TTL_MS, yn as InMemoryDataStore, sn as IndexedMatcher, Ns as InstanceMembership, $t as LinearScanMatcher, p as MetricBoundaries, wf as NOOP_ANALYTICS_PROVIDER, Or as NO_ROW_FILTER, Ai as NoRowFound, Ls as OUTBOX_ATTEMPTS_TABLE, Ws as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, ji as OptimisticLockError, Qc as REBAC_ADMIN_SCOPE, bc as REFRESH_LEASE_MS, bp as RUNTIME_NAME, $d as ReactionRateLimiter, ia as ReplicatedDataStore, Cr as RowFilterUnavailable, zu as SCHEDULE_SUBJECT, Ho as SYSTEM_SUBJECT, Fi as SelectBuilder, wl as SsrfBlockedError, Bi as StoreOperationFailed, un as SubscriptionRegistry, Vi as TableValidationFailed, zi as TenantScopeViolation, kd as TimelineRecorder, cd as UndoBoundaryError, ud as UndoStack, Ii as UpdateBuilder, jl as VOLTRO_AUDIT_MIXIN_ID, Nl as VOLTRO_EXPIRES_MIXIN_ID, Ml as VOLTRO_SOFT_DELETE_MIXIN_ID, Pl as VOLTRO_TENANT_MIXIN_ID, $o as WorkflowPayloadError, ei as _connectionStreamCount, ti as _resetConnectionSubjectsForTest, ec as _voltroConnectionGrantsTable, Zs as _voltroConnectionsTable, Wd as _voltroRebacTuplesTable, Zu as _voltroScheduleClaimsTable, Xu as _voltroScheduleRunsTable, Qu as _voltroTracesTable, $u as _voltroUndoLogTable, tf as _voltroWakeupsTable, hs as _voltroWorkflowEventDeliveriesTable, ms as _voltroWorkflowEventsTable, qi as actingUserId, Vo as apiKeyManagementRoutes, Wi as applyDefined, Vd as applyDelta, fd as applyInverse, pd as applyInverses, ou as applyPluginRefRules, Mr as applyRowFilter, Nr as applyRowFilterToDescriptor, Vf as applySoftDeleteScope, Rf as applyTenantScope, xd as applyUndoInvocation, ll as assertCan, ic as assertConnectionCipherConfigured, Af as attachAnalyticsMirror, Ka as awaitServerListening, Us as backoffMs, Lc as beginOAuthConnect, qr as bindConnectionSubject, As as bindEvent, Na as bindMutation, Sa as bindStream, xa as bindSubscription, ga as bindSubscriptionUntyped, zd as buildIvmState, _p as buildPreview, qd as buildRebacInterceptor, Yd as buildRebacReadFilter, Qi as buildSubjectKey, Za as buildTracingLayer, $l as cacheScopeLeaks, po as cachedBackend, cl as can, Ou as cancelWakeup, cn as canonicalize, Fd as classifyShape, Tc as clearConnectionRefreshFlights, il as clearResourcePolicies, ee as clearRetentions, pu as clearSystemStoreHandle, su as collectPluginRefRules, Cu as compileCron, Rc as completeOAuthConnect, Df as composeAnalytics, Ef as composeAnalyticsSinks, Pc as connectionCallbackPath, rc as connectionLabel, ni as connectionSubjectsSnapshot, hf as countRunningWorkflows, _r as counter, Jl as crud, ml as currentRequestLoader, ra as currentRoutingContext, li as currentTraceContext, Ro as dataStoreApiKeyStore, bo as dataStoreIdempotencyStore, To as dataStoreKvStore, _i as decryptField, jf as defineAggregate, nc as defineConnection, ls as defineEventTrigger, Hf as defineExecutor, Bs as defineOutboxHandler, Xd as defineReaction, tl as defineResourcePolicy, Su as defineSchedule, vf as defineSubscriber, Pr as deliveredRowCount, ui as deriveKey, gp as diffChange, Wa as drainForShutdown, Js as drainOutbox, Fu as dueWakeups, sl as effectiveRelations, zl as emptySchemaRegistry, Ci as enableGraphObservation, gi as encryptField, pl as enterRequestLoader, oo as envSecretsBackend, ar as eventMetricTagCacheSizeForTests, _c as exchangeAuthorizationCode, oi as externalSpanFromTraceparent, xn as extractDbCause, ln as fingerprintFor, pc as forgetCredential, eu as formatCacheScopeLeaks, Ql as formatServerOnlyLeaks, ii as formatTraceparent, ru as formatUnresolvedSources, dd as forwardChangeFromCdc, zo as frameworkApiKeyStrategy, vr as gauge, Ao as generateApiKeyToken, Hc as getConnectionResolver, Jr as getConnectionSubject, Kr as getCredentialExpiry, q as getFieldCipher, nl as getResourcePolicy, Dr as getRowFilter, mu as getSystemStoreHandle, jd as getTimelineRecorder, yl as getTupleSource, $ as groupKeyOf, yr as histogramMetric, mp as historyProvenance, mo as httpSecretsBackend, Xt as inspectWorkflow, bl as installPolicyGuardResolver, $r as interruptConnectionStreams, od as invertChange, Mf as isAggregateDefinition, zf as isEmptyTenantScopedRead, Sn as isForeignKeyViolation, cf as isIdleNow, Oa as isInfraError, wi as isObservingGraph, Bf as isOrglessUserSubject, Cn as isQueryTimeout, ld as isSafeToApply, bu as isScheduleDefinition, iu as isSoftDelete, us as isWorkflowEventTriggerDefinition, Rd as ivmValue, pp as lastWriteProvenance, mc as listConnectionStates, rl as listResourcePolicies, pe as listRetentions, Gd as loadResourceTuples, Jd as loadSubjectTuples, gu as localityAwareSelector, cp as makeActionRunner, Uu as makeAdvisoryLockCoordinator, di as makeAesCipher, No as makeApiKeyService, Al as makeApiKeyUsageBuffer, Lo as makeApiKeyUsageFlusher, wn as makeAppAccess, Eo as makeAsyncKv, ks as makeBufferGapDetector, ao as makeBufferingSpanProcessor, ac as makeConnectionRegistry, Wc as makeConnectionResolver, Gc as makeConnectionsFacade, Yu as makeCoordinatedScheduler, Sl as makeDataLoader, Zc as makeDisconnectConnectionExecutor, Ko as makeEffectStoreLayer, Ts as makeEventPublisher, gs as makeEventsFacade, fi as makeFieldCipher, Ri as makeFluentStore, lf as makeIdleGate, as as makeLazyWorkflowFacade, Jc as makeListConnectionsExecutor, ja as makeMutationOutputCodec, ep as makeMutationRunner, op as makeOneShotQueryRunner, Hs as makeOutboxFacade, rs as makePostCommitWorkflowFacade, af as makeProcessAdapter, ap as makeQueryDescriptorProducer, ip as makeQueryReauthorizer, sp as makeQuerySubscriber, uf as makeRouterActivity, Fl as makeSchemaRegistry, Yc as makeStartConnectionExecutor, Xc as makeSubmitTokenExecutor, id as makeUndoCapture, df as makeWakeGate, mf as makeWakeProxyServer, ns as makeWorkflowFacade, is as makeWorkflowFacadeWithCallerContext, os as makeWorkflowHandlers, ss as makeWorkflowLayers, Yo as makeWorkflowRunHandle, ku as markWakeupFired, Bd as materializeIvm, Po as memoryApiKeyStore, vu as memoryReplicationAdapter, Zi as memoryRywPositionStore, wu as nextFiring, Iu as nextWakeup, sf as nodeProcessSupervisor, Tf as noopAnalytics, Of as noopAnalyticsSpec, Do as noopKv, ki as observeStore, Di as observedGraph, Xr as onBindConnectionSubject, za as onProcessShutdown, zs as outboxAttemptsTable, Is as outboxTable, ai as parseTraceparent, es as payloadPropertyNames, Yi as powerOfTwoSelector, yp as previewInRollback, lc as projectConnectionState, Ru as pruneWakeups, Cs as publishEvent, al as rebacPolicyGraph, Gr as recordCredentialExpiry, sr as recordEventDelivered, cr as recordEventDropped, or as recordEventPublished, lr as recordEventSubscribers, ur as recordSample, hr as recordScheduleRun, mr as recordSubscriptionActive, fr as recordSubscriptionDelivery, Ei as recordTableAccess, Nd as recordTimelineEvent, gr as recordWorkflowRun, Wl as redactColumns, Ed as redactRow, $i as redisRywPositionStore, Sd as redoUndoInvocation, vc as refreshAccessToken, Qr as registerConnectionStream, Ce as registerRetention, Du as registerWakeup, Mu as releaseWakeup, Xi as replicaHealth, va as resetComputedQueryCacheWarnings, ir as resetEventMetricTagCacheForTests, Oi as resetObservedGraph, lo as resetSecretsBackend, Oc as resolveConnection, Uc as resolveConnectionForSubject, _u as resolveCurrentRegion, Tn as resolveDependentTables, Ic as resolveRedirectUri, Hd as resolveRescan, kr as resolveRowFilterScope, Ar as resolveRowFilterScopeFor, uo as resolveSecret, fo as resolveSecretSync, ho as resolveSecretsBackend, Cd as resolveTimelineMode, Te as retentionTtlMsFromEnv, Od as reverseEventOverRows, dl as revokedIds, au as rulesFor, hu as runAsSystem, gf as runOrchestratorTick, Uf as runProvidedEffect, ef as runReaction, _f as runSingleNodeOrchestrator, rf as runWakeLoop, $f as runWithDeadlockRetry, Ti as runWithObservedProcedure, hl as runWithRequestLoader, na as runWithRoutingContext, ci as runWithTraceContext, Fc as sanitizeRedirectTo, Ju as scheduleCoordinated, Yl as schemaPropertyNames, Zl as serverOnlyLeaks, Vc as setConnectionResolver, mi as setFieldCipher, Er as setRowFilter, co as setSecretsBackend, fu as setSystemStoreHandle, Md as setTimelineRecorderForTest, vl as setTupleSource, Qt as settleHandlerBody, ko as sha256Hex, Ua as shutdownGraceMsFromEnv, Vu as singleCoordinator, xr as snapshotMetrics, Sr as snapshotMetricsSync, kl as ssrfGuardHttpClientLayer, Ol as ssrfReason, Fa as startRpcServer, Gu as startScheduler, dc as storeCredential, zc as sweepExpiredGrants, Me as sweepRetention, sd as synthesizeInverse, Cl as tracingHttpClientLayer, cs as triggerWorkflow, ju as tryClaimWakeup, Yr as unbindConnectionSubject, ed as undoCaptureEnabled, yd as undoLogExecutor, nu as unresolvedSources, Lf as useAggregate, Cf as useAnalytics, ul as visibleRows, nf as wakeDueOnce, Kf as withRowFilter, qo as workflowToRpc, rd as wrapCaptureStore, Vl as wrapStoreWithBootCodec, Ji as wrapStoreWithMixinBehaviour };
+export { Oo as API_KEYS_TABLE, $c as AccessDenied, Rf as AggregateError, Kd as AggregateMaintainer, Lf as AggregateNotFound, zf as AggregateRegistry, If as AggregateStale, Cf as AnalyticsCapabilityNotSupported, Sf as AnalyticsError, wf as AnalyticsSink, X as CONNECTIONS_TABLE, Qs as CONNECTION_GRANTS_TABLE, pu as CircuitBreaker, du as CircuitOpen, xc as ConnectionNotConnected, Pa as DEFAULT_MAX_RPC_BODY_BYTES, yc as DEFAULT_REFRESH_SKEW_MS, wr as DEFAULT_ROW_FILTER_RETRY, Uu as DORMANCY_WAKEUP_TENANT, Li as DeleteBuilder, Ir as Dispatcher, Es as EVENT_CLIENT_QUEUE_SIZE, Ds as EVENT_LATEST_QUEUE_SIZE, Uo as EffectStore, xs as EventBus, Nc as GRANT_TTL_MS, yn as InMemoryDataStore, sn as IndexedMatcher, Ns as InstanceMembership, $t as LinearScanMatcher, p as MetricBoundaries, Df as NOOP_ANALYTICS_PROVIDER, Or as NO_ROW_FILTER, Ai as NoRowFound, Ls as OUTBOX_ATTEMPTS_TABLE, Ws as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, ji as OptimisticLockError, Qc as REBAC_ADMIN_SCOPE, bc as REFRESH_LEASE_MS, wp as RUNTIME_NAME, nf as ReactionRateLimiter, ia as ReplicatedDataStore, Cr as RowFilterUnavailable, Hu as SCHEDULE_SUBJECT, Ho as SYSTEM_SUBJECT, Fi as SelectBuilder, wl as SsrfBlockedError, Bi as StoreOperationFailed, un as SubscriptionRegistry, Vi as TableValidationFailed, zi as TenantScopeViolation, Md as TimelineRecorder, dd as UndoBoundaryError, pd as UndoStack, Ii as UpdateBuilder, jl as VOLTRO_AUDIT_MIXIN_ID, Nl as VOLTRO_EXPIRES_MIXIN_ID, Ml as VOLTRO_SOFT_DELETE_MIXIN_ID, Pl as VOLTRO_TENANT_MIXIN_ID, $o as WorkflowPayloadError, ei as _connectionStreamCount, ti as _resetConnectionSubjectsForTest, ec as _voltroConnectionGrantsTable, Zs as _voltroConnectionsTable, qd as _voltroRebacTuplesTable, ed as _voltroScheduleClaimsTable, $u as _voltroScheduleRunsTable, td as _voltroTracesTable, nd as _voltroUndoLogTable, af as _voltroWakeupsTable, hs as _voltroWorkflowEventDeliveriesTable, ms as _voltroWorkflowEventsTable, qi as actingUserId, Vo as apiKeyManagementRoutes, Wi as applyDefined, Wd as applyDelta, hd as applyInverse, gd as applyInverses, lu as applyPluginRefRules, Mr as applyRowFilter, Nr as applyRowFilterToDescriptor, Wf as applySoftDeleteScope, Vf as applyTenantScope, wd as applyUndoInvocation, ll as assertCan, ic as assertConnectionCipherConfigured, Nf as attachAnalyticsMirror, Ka as awaitServerListening, Us as backoffMs, Lc as beginOAuthConnect, qr as bindConnectionSubject, As as bindEvent, Na as bindMutation, Sa as bindStream, xa as bindSubscription, ga as bindSubscriptionUntyped, Hd as buildIvmState, xp as buildPreview, Xd as buildRebacInterceptor, Qd as buildRebacReadFilter, Qi as buildSubjectKey, Za as buildTracingLayer, $l as cacheScopeLeaks, po as cachedBackend, cl as can, ju as cancelWakeup, cn as canonicalize, Rd as classifyShape, Tc as clearConnectionRefreshFlights, il as clearResourcePolicies, ee as clearRetentions, gu as clearSystemStoreHandle, uu as collectPluginRefRules, Eu as compileCron, Rc as completeOAuthConnect, Af as composeAnalytics, kf as composeAnalyticsSinks, Pc as connectionCallbackPath, rc as connectionLabel, ni as connectionSubjectsSnapshot, vf as countRunningWorkflows, _r as counter, Jl as crud, ml as currentRequestLoader, ra as currentRoutingContext, li as currentTraceContext, Ro as dataStoreApiKeyStore, bo as dataStoreIdempotencyStore, To as dataStoreKvStore, _i as decryptField, Pf as defineAggregate, nc as defineConnection, ls as defineEventTrigger, Kf as defineExecutor, Bs as defineOutboxHandler, $d as defineReaction, tl as defineResourcePolicy, Tu as defineSchedule, xf as defineSubscriber, Pr as deliveredRowCount, ui as deriveKey, bp as diffChange, Wa as drainForShutdown, Js as drainOutbox, Ru as dueWakeups, sl as effectiveRelations, zl as emptySchemaRegistry, Ci as enableGraphObservation, gi as encryptField, pl as enterRequestLoader, oo as envSecretsBackend, ar as eventMetricTagCacheSizeForTests, _c as exchangeAuthorizationCode, oi as externalSpanFromTraceparent, xn as extractDbCause, ln as fingerprintFor, pc as forgetCredential, eu as formatCacheScopeLeaks, Ql as formatServerOnlyLeaks, ii as formatTraceparent, ru as formatUnresolvedSources, md as forwardChangeFromCdc, zo as frameworkApiKeyStrategy, vr as gauge, Ao as generateApiKeyToken, Hc as getConnectionResolver, Jr as getConnectionSubject, Kr as getCredentialExpiry, q as getFieldCipher, nl as getResourcePolicy, Dr as getRowFilter, _u as getSystemStoreHandle, Pd as getTimelineRecorder, yl as getTupleSource, $ as groupKeyOf, yr as histogramMetric, vp as historyProvenance, mo as httpSecretsBackend, Xt as inspectWorkflow, bl as installPolicyGuardResolver, $r as interruptConnectionStreams, ld as invertChange, Ff as isAggregateDefinition, Hf as isEmptyTenantScopedRead, Sn as isForeignKeyViolation, df as isIdleNow, Oa as isInfraError, wi as isObservingGraph, Uf as isOrglessUserSubject, Cn as isQueryTimeout, fd as isSafeToApply, Cu as isScheduleDefinition, su as isSoftDelete, us as isWorkflowEventTriggerDefinition, Vd as ivmValue, _p as lastWriteProvenance, mc as listConnectionStates, rl as listResourcePolicies, pe as listRetentions, Jd as loadResourceTuples, Zd as loadSubjectTuples, yu as localityAwareSelector, fp as makeActionRunner, Ku as makeAdvisoryLockCoordinator, di as makeAesCipher, No as makeApiKeyService, Al as makeApiKeyUsageBuffer, Lo as makeApiKeyUsageFlusher, wn as makeAppAccess, Eo as makeAsyncKv, ks as makeBufferGapDetector, ao as makeBufferingSpanProcessor, ac as makeConnectionRegistry, Wc as makeConnectionResolver, Gc as makeConnectionsFacade, Qu as makeCoordinatedScheduler, Sl as makeDataLoader, Zc as makeDisconnectConnectionExecutor, Ko as makeEffectStoreLayer, Ts as makeEventPublisher, gs as makeEventsFacade, fi as makeFieldCipher, Ri as makeFluentStore, ff as makeIdleGate, as as makeLazyWorkflowFacade, Jc as makeListConnectionsExecutor, ja as makeMutationOutputCodec, ip as makeMutationRunner, up as makeOneShotQueryRunner, Hs as makeOutboxFacade, rs as makePostCommitWorkflowFacade, cf as makeProcessAdapter, lp as makeQueryDescriptorProducer, Gf as makeQueryFinalizer, cp as makeQueryReauthorizer, dp as makeQuerySubscriber, pf as makeRouterActivity, Fl as makeSchemaRegistry, Yc as makeStartConnectionExecutor, Xc as makeSubmitTokenExecutor, sd as makeUndoCapture, mf as makeWakeGate, _f as makeWakeProxyServer, ns as makeWorkflowFacade, is as makeWorkflowFacadeWithCallerContext, os as makeWorkflowHandlers, ss as makeWorkflowLayers, Yo as makeWorkflowRunHandle, Mu as markWakeupFired, Ud as materializeIvm, Po as memoryApiKeyStore, xu as memoryReplicationAdapter, Zi as memoryRywPositionStore, Du as nextFiring, zu as nextWakeup, uf as nodeProcessSupervisor, Of as noopAnalytics, jf as noopAnalyticsSpec, Do as noopKv, ki as observeStore, Di as observedGraph, Xr as onBindConnectionSubject, za as onProcessShutdown, zs as outboxAttemptsTable, Is as outboxTable, ai as parseTraceparent, es as payloadPropertyNames, Yi as powerOfTwoSelector, Cp as previewInRollback, lc as projectConnectionState, Vu as pruneWakeups, Cs as publishEvent, al as rebacPolicyGraph, Gr as recordCredentialExpiry, sr as recordEventDelivered, cr as recordEventDropped, or as recordEventPublished, lr as recordEventSubscribers, ur as recordSample, hr as recordScheduleRun, mr as recordSubscriptionActive, fr as recordSubscriptionDelivery, Ei as recordTableAccess, Id as recordTimelineEvent, gr as recordWorkflowRun, Wl as redactColumns, kd as redactRow, $i as redisRywPositionStore, Td as redoUndoInvocation, vc as refreshAccessToken, Qr as registerConnectionStream, Ce as registerRetention, Au as registerWakeup, Fu as releaseWakeup, Xi as replicaHealth, va as resetComputedQueryCacheWarnings, ir as resetEventMetricTagCacheForTests, Oi as resetObservedGraph, lo as resetSecretsBackend, Oc as resolveConnection, Uc as resolveConnectionForSubject, bu as resolveCurrentRegion, Tn as resolveDependentTables, Ic as resolveRedirectUri, Gd as resolveRescan, kr as resolveRowFilterScope, Ar as resolveRowFilterScopeFor, uo as resolveSecret, fo as resolveSecretSync, ho as resolveSecretsBackend, Ed as resolveTimelineMode, Te as retentionTtlMsFromEnv, jd as reverseEventOverRows, dl as revokedIds, cu as rulesFor, vu as runAsSystem, yf as runOrchestratorTick, qf as runProvidedEffect, rf as runReaction, bf as runSingleNodeOrchestrator, sf as runWakeLoop, rp as runWithDeadlockRetry, Ti as runWithObservedProcedure, hl as runWithRequestLoader, na as runWithRoutingContext, ci as runWithTraceContext, Fc as sanitizeRedirectTo, Zu as scheduleCoordinated, Yl as schemaPropertyNames, Zl as serverOnlyLeaks, Vc as setConnectionResolver, mi as setFieldCipher, Er as setRowFilter, co as setSecretsBackend, hu as setSystemStoreHandle, Fd as setTimelineRecorderForTest, vl as setTupleSource, Qt as settleHandlerBody, ko as sha256Hex, Ua as shutdownGraceMsFromEnv, Wu as singleCoordinator, xr as snapshotMetrics, Sr as snapshotMetricsSync, kl as ssrfGuardHttpClientLayer, Ol as ssrfReason, Fa as startRpcServer, Ju as startScheduler, dc as storeCredential, zc as sweepExpiredGrants, Me as sweepRetention, ud as synthesizeInverse, Cl as tracingHttpClientLayer, cs as triggerWorkflow, Pu as tryClaimWakeup, Yr as unbindConnectionSubject, rd as undoCaptureEnabled, Sd as undoLogExecutor, nu as unresolvedSources, Bf as useAggregate, Ef as useAnalytics, ul as visibleRows, of as wakeDueOnce, Xf as withRowFilter, qo as workflowToRpc, od as wrapCaptureStore, Vl as wrapStoreWithBootCodec, Ji as wrapStoreWithMixinBehaviour };