@voltro/runtime 0.35.0 → 0.37.0

package/dist/index.js

@@ -2,12 +2,12 @@ import { Cause as e, Clock as t, Context as n, Cron as r, Deferred as i, Duratio
 import { ENCRYPTED_PREFIX as S, and as C, attachEagerLoads as w, attributionFields as T, boolean as E, clearRetentions as ee, collectSubqueries as D, contains as te, decryptFieldsOnRead as ne, deserializeArraysOnRead as re, encryptFieldsForWrite as ie, eq as O, evaluatePredicate as k, externalChangeEvent as ae, generateId as A, getRelations as oe, getTable as j, gt as se, gte as ce, hasEagerLoads as le, id as M, inSet as ue, integer as N, isEncrypted as de, isNull as fe, isTableReactive as pe, json as P, listRetentionConflicts as me, listRetentions as he, lt as ge, lte as _e, missingConflictColumns as ve, missingRequiredColumns as ye, neq as be, or as xe, planVersionedUpdate as Se, queryFor as Ce, raiseChangeListenerCeiling as we, readableByColumns as Te, registerRetention as Ee, registerRetention as De, requireTable as Oe, retentionTtlMsFromEnv as ke, retentionTtlMsFromEnv as Ae, runWithWriteAttribution as je, serializeArraysForWrite as Me, serverOnlyColumns as Ne, settleVersionedUpdate as Pe, stampGeneratedId as Fe, startsWith as Ie, sweepRetention as Le, table as F, text as I, timestamp as L, walkLeaves as Re } from "@voltro/database";
 import { createCipheriv as ze, createDecipheriv as Be, createHash as Ve, randomBytes as He, randomUUID as Ue, scryptSync as We } from "node:crypto";
 import { EventEmitter as Ge } from "node:events";
-import { ADMIN_SCOPE as Ke, APIKEY_ISSUE_ORG_SCOPE as qe, APIKEY_ISSUE_OTHER_SCOPE as Je, APIKEY_ISSUE_SELF_SCOPE as Ye, ApprovalExpired as Xe, ApprovalForbidden as Ze, ApprovalNotFound as Qe, ApprovalNotPending as $e, ApprovalRejected as et, ApprovalRequired as tt, ApprovalSelfApproval as nt, ApprovalUnavailable as rt, AuthMiddleware as it, BusinessRuleViolation as at, ConnectionHandshakeFailed as R, ConnectionInfo as ot, ConnectionInfoMiddleware as st, ConnectionKindMismatch as ct, ConnectionNotDeclared as lt, ConnectionSubjectRequired as ut, EventKeyInvalid as dt, EventPayloadInvalid as ft, EventPayloadTooLarge as pt, MAX_EVENT_ENVELOPE_BYTES as mt, ScopeError as ht, SubjectService as gt, UndoConflict as _t, UndoForbidden as vt, UndoNotFound as yt, WorkflowRunHandleSchema as bt, beginIdempotent as xt, checkGuardsEffect as St, declaredReactivityChannelKeys as Ct, diffRows as wt, effectiveScopes as Tt, eventRoute as Et, failIdempotent as Dt, finishIdempotent as Ot, hasEffectiveScope as kt, isIdKeyed as At, isOpenAccess as jt, isPolicyGuard as Mt, isReactivityChannelKey as Nt, parseEventRoute as Pt, publishServerError as Ft, requireScope as It, setPolicyGuardResolver as Lt, sourceKeys as Rt, systemSubject as zt, tsMs as Bt, wsMutationIdempotencyScope as Vt } from "@voltro/protocol";
-import { createLogger as z, log as Ht } from "@voltro/logger";
+import { ADMIN_SCOPE as Ke, APIKEY_ISSUE_ORG_SCOPE as qe, APIKEY_ISSUE_OTHER_SCOPE as Je, APIKEY_ISSUE_SELF_SCOPE as Ye, ApprovalExpired as Xe, ApprovalForbidden as Ze, ApprovalNotFound as Qe, ApprovalNotPending as $e, ApprovalRejected as et, ApprovalRequired as tt, ApprovalSelfApproval as nt, ApprovalUnavailable as rt, AuthMiddleware as it, BusinessRuleViolation as at, ConnectionHandshakeFailed as R, ConnectionInfo as ot, ConnectionInfoMiddleware as st, ConnectionKindMismatch as ct, ConnectionNotDeclared as lt, ConnectionSubjectRequired as ut, EventKeyInvalid as dt, EventPayloadInvalid as ft, EventPayloadTooLarge as pt, MAX_EVENT_ENVELOPE_BYTES as mt, ScopeError as ht, SubjectService as gt, UndoConflict as _t, UndoForbidden as vt, UndoNotFound as yt, WorkflowRunHandleSchema as bt, beginIdempotent as xt, checkGuardsEffect as z, declaredReactivityChannelKeys as St, diffRows as Ct, effectiveScopes as wt, eventRoute as Tt, failIdempotent as Et, finishIdempotent as Dt, hasEffectiveScope as Ot, isIdKeyed as kt, isOpenAccess as At, isPolicyGuard as jt, isReactivityChannelKey as Mt, parseEventRoute as Nt, publishServerError as Pt, requireScope as Ft, setPolicyGuardResolver as It, sourceKeys as Lt, strictInput as Rt, systemSubject as zt, tsMs as Bt, wsMutationIdempotencyScope as Vt } from "@voltro/protocol";
+import { createLogger as B, log as Ht } from "@voltro/logger";
 import { AsyncLocalStorage as Ut } from "node:async_hooks";
 import * as Wt from "node:http";
 import { createServer as Gt } from "node:http";
-import { HttpClient as Kt, HttpClientError as qt, HttpClientRequest as Jt, HttpLayerRouter as B, HttpServer as Yt, HttpServerError as Xt, HttpServerRequest as Zt, HttpServerResponse as V, UrlParams as Qt } from "@effect/platform";
+import { HttpClient as Kt, HttpClientError as qt, HttpClientRequest as Jt, HttpLayerRouter as V, HttpServer as Yt, HttpServerError as Xt, HttpServerRequest as Zt, HttpServerResponse as H, UrlParams as Qt } from "@effect/platform";
 import { NodeContext as $t, NodeHttpServer as en } from "@effect/platform-node";
 import { Rpc as tn, RpcSerialization as nn, RpcServer as rn } from "@effect/rpc";
 import { defineRestRoute as an, dispatchSharedPath as on, requireAnyScope as sn, requireScope as cn } from "@voltro/protocol/rest";
@@ -926,11 +926,11 @@ var En = (e) => {
 	let t = e.dbCode, n = e.dbErrno;
 	return t === "57014" || n === 3024 || n === 1969 || t === "ETIMEOUT" || t === "SQLITE_INTERRUPT";
 }, Qn = (e) => ({
-	has: (t) => kt(e, t),
-	hasAny: (t) => t.some((t) => kt(e, t)),
-	require: (t) => It(e, t),
+	has: (t) => Ot(e, t),
+	hasAny: (t) => t.some((t) => Ot(e, t)),
+	require: (t) => Ft(e, t),
 	get scopes() {
-		return Tt(e);
+		return wt(e);
 	}
 }), $n = 8, er = 32, tr = (e) => {
 	if (e == null || e === "") return;
@@ -984,7 +984,7 @@ var En = (e) => {
 		}
 		e.op === "exists" || e.op === "not-exists" || t.add(e.column);
 	}
-}, H = (e, t, n) => {
+}, U = (e, t, n) => {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
@@ -996,24 +996,24 @@ var En = (e) => {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), gr(i.tableName, o, n), o.with !== void 0 && hr(i.tableName, o.with, n);
+			U(n, r.tableName, [t.sourceKey, t.targetKey]), U(n, e, ["id"]), U(n, i.tableName, ["id"]), gr(i.tableName, o, n), o.with !== void 0 && hr(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), gr(s.tableName, o, n), o.with !== void 0 && hr(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && U(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? U(n, e, ["id"]) : U(n, e, [t.sourceKey]), U(n, s.tableName, ["id"]), gr(s.tableName, o, n), o.with !== void 0 && hr(s.tableName, o.with, n);
 	}
 }, gr = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		mr(t.where, r), H(n, e, r);
+		mr(t.where, r), U(n, e, r);
 	}
-	t.orderBy !== void 0 && H(n, e, t.orderBy.map((e) => e.column));
+	t.orderBy !== void 0 && U(n, e, t.orderBy.map((e) => e.column));
 	let r = j(e);
-	r === void 0 ? H(n, e, ["*"]) : H(n, e, Object.keys(r.fields));
+	r === void 0 ? U(n, e, ["*"]) : U(n, e, Object.keys(r.fields));
 }, _r = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	if (fr(e)) {
-		for (let n of lr(e)) H(t, n, ["*"]);
+		for (let n of lr(e)) U(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
@@ -1021,7 +1021,7 @@ var En = (e) => {
 	else n.add("*");
 	mr(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return H(t, e.table, n), e.eager !== void 0 && hr(e.table, e.eager, t), t;
+	return U(t, e.table, n), e.eager !== void 0 && hr(e.table, e.eager, t), t;
 }, vr = (e) => {
 	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return pr;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
@@ -1160,9 +1160,9 @@ var En = (e) => {
 	let r = Ne(n), i = Te(n);
 	if (i.length === 0) return r;
 	let a = [...r];
-	for (let { column: e, scopes: n } of i) n.some((e) => kt(t, e)) || a.push(e);
+	for (let { column: e, scopes: n } of i) n.some((e) => Ot(t, e)) || a.push(e);
 	return a;
-}, Ei = (e, t, n) => Ci(t, Ti(e, n)), U = z({ scope: "voltro:dispatcher" }), Di = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Oi = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", ki = class {
+}, Ei = (e, t, n) => Ci(t, Ti(e, n)), W = B({ scope: "voltro:dispatcher" }), Di = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Oi = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", ki = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1181,7 +1181,7 @@ var En = (e) => {
 	warnUndeclaredRawReads(e, t) {
 		if (t.length !== 0 && !this.rawReadWarned.has(e)) {
 			this.rawReadWarned.add(e);
-			for (let n of t) U.warn(`${e}: a raw SQL read in this live query declares no dependsOn, so no write can invalidate it — every subscriber keeps its first result until it reconnects. Declare the tables it reads: ctx.store.raw(fragment, { dependsOn: ['orders'] }) — or on the fragment itself. The read: ${n.sql}`, {
+			for (let n of t) W.warn(`${e}: a raw SQL read in this live query declares no dependsOn, so no write can invalidate it — every subscriber keeps its first result until it reconnects. Declare the tables it reads: ctx.store.raw(fragment, { dependsOn: ['orders'] }) — or on the fragment itself. The read: ${n.sql}`, {
 				label: e,
 				sql: n.sql
 			});
@@ -1247,7 +1247,7 @@ var En = (e) => {
 			let n = this.dependentByTable.get(t);
 			n !== void 0 && (n.delete(e.id), n.size === 0 && this.dependentByTable.delete(t));
 		}
-		U.warn(`subscription revoked mid-stream — ${n}`, {
+		W.warn(`subscription revoked mid-stream — ${n}`, {
 			id: e.id,
 			label: e.label,
 			traceId: e.context.traceId
@@ -1262,7 +1262,7 @@ var En = (e) => {
 			let n = this.computedByTable.get(t);
 			n !== void 0 && (n.delete(e.id), n.size === 0 && this.computedByTable.delete(t));
 		}
-		U.warn("computed subscription revoked mid-stream — guards no longer satisfied", {
+		W.warn("computed subscription revoked mid-stream — guards no longer satisfied", {
 			id: e.id,
 			label: e.label,
 			traceId: e.context.traceId
@@ -1346,7 +1346,7 @@ var En = (e) => {
 				this.revokeComputed(e, t);
 				return;
 			}
-			U.warn("computed recompute failed; subscriber left on last value", {
+			W.warn("computed recompute failed; subscriber left on last value", {
 				id: e.id,
 				label: e.label,
 				traceId: e.context.traceId
@@ -1370,7 +1370,7 @@ var En = (e) => {
 		for (let e of this.subscriptions.values()) t.add(e.descriptor.table);
 		for (let e of this.computedByTable.keys()) t.add(e);
 		if (t.size !== 0) {
-			U.warn("refreshing every live subscription", {
+			W.warn("refreshing every live subscription", {
 				reason: e,
 				tables: t.size,
 				subscriptions: this.subscriptions.size
@@ -1400,7 +1400,7 @@ var En = (e) => {
 		if (t) for (let [t, n] of this.subscriptions) n.descriptor.table === e.table && i.add(t);
 		let a = this.dependentByTable.get(e.table);
 		if (a !== void 0) for (let e of a) i.add(e);
-		if (U.trace("handleChange", {
+		if (W.trace("handleChange", {
 			table: e.table,
 			op: e.op,
 			matcher: r.length,
@@ -1410,7 +1410,7 @@ var En = (e) => {
 		let o = Date.now(), s = 0, c = /* @__PURE__ */ new Map(), l = /* @__PURE__ */ new Map(), u = /* @__PURE__ */ new Map(), d = async (n) => {
 			let r = this.subscriptions.get(n);
 			if (!r) {
-				U.trace("missing subscription", { subscriberId: n });
+				W.trace("missing subscription", { subscriberId: n });
 				return;
 			}
 			if (!t && !yr(e, r.relevantFields)) {
@@ -1444,17 +1444,17 @@ var En = (e) => {
 				p === void 0 && (p = /* @__PURE__ */ new Map(), u.set(a, p));
 				let m = p.get(f);
 				if (m === void 0 && (m = !ji(d, f), p.set(f, m)), !m) {
-					U.trace("suppressed no-op delta", {
+					W.trace("suppressed no-op delta", {
 						subscriberId: n,
 						table: e.table
 					});
 					return;
 				}
-				if (r.lastDelivered = d, this.deps.cache !== void 0 && r.cacheBinding !== void 0 && this.deps.cache.put(r.cacheBinding, Array.from(r.dependentTables), d), At(f) && At(d)) {
+				if (r.lastDelivered = d, this.deps.cache !== void 0 && r.cacheBinding !== void 0 && this.deps.cache.put(r.cacheBinding, Array.from(r.dependentTables), d), kt(f) && kt(d)) {
 					let e = l.get(a);
 					e === void 0 && (e = /* @__PURE__ */ new Map(), l.set(a, e));
 					let t = e.get(f);
-					t === void 0 && (t = wt(f, d), e.set(f, t)), r.emit({
+					t === void 0 && (t = Ct(f, d), e.set(f, t)), r.emit({
 						_tag: "delta",
 						revision: o,
 						emittedAt: o,
@@ -1483,7 +1483,7 @@ var En = (e) => {
 					traceId: r.context.traceId
 				});
 			} catch (t) {
-				U.warn("reactive re-query failed; subscriber left on last snapshot", {
+				W.warn("reactive re-query failed; subscriber left on last snapshot", {
 					subscriberId: n,
 					label: r.label,
 					table: e.table,
@@ -1497,7 +1497,7 @@ var En = (e) => {
 				await d(f[e]);
 			}
 		};
-		await Promise.all(Array.from({ length: p }, () => h())), s > 0 && U.trace("handleChange/prefiltered", {
+		await Promise.all(Array.from({ length: p }, () => h())), s > 0 && W.trace("handleChange/prefiltered", {
 			table: e.table,
 			op: e.op,
 			skipped: s
@@ -1556,22 +1556,22 @@ var En = (e) => {
 	for (let [t, n] of Fi) n.touchedAt < e && Fi.delete(t);
 }, Pi);
 typeof Wi == "object" && Wi && "unref" in Wi && Wi.unref();
-var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
-	let n = W.get(e);
-	return n || (n = /* @__PURE__ */ new Set(), W.set(e, n)), n.add(t), () => {
-		let n = W.get(e);
-		n && (n.delete(t), n.size === 0 && W.delete(e));
+var G = /* @__PURE__ */ new Map(), Gi = (e, t) => {
+	let n = G.get(e);
+	return n || (n = /* @__PURE__ */ new Set(), G.set(e, n)), n.add(t), () => {
+		let n = G.get(e);
+		n && (n.delete(t), n.size === 0 && G.delete(e));
 	};
 }, Ki = (e) => {
-	let t = W.get(e);
+	let t = G.get(e);
 	if (t) {
 		for (let e of [...t]) try {
 			e();
 		} catch {}
-		W.delete(e);
+		G.delete(e);
 	}
-}, qi = (e) => W.get(e)?.size ?? 0, Ji = () => {
-	Fi.clear(), Ii.clear(), W.clear();
+}, qi = (e) => G.get(e)?.size ?? 0, Ji = () => {
+	Fi.clear(), Ii.clear(), G.clear();
 }, Yi = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, Xi = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, Zi = (e) => {
 	if (typeof e != "string") return null;
 	let t = Yi.exec(e.trim().toLowerCase());
@@ -1625,13 +1625,13 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	};
 }, oa = (e) => aa(ia(e)), sa, ca = (e) => {
 	sa = e;
-}, G = () => sa, la = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", ua = (e) => {
-	let t = G();
+}, K = () => sa, la = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", ua = (e) => {
+	let t = K();
 	if (!t) throw Error(`encryptField: ${la}`);
 	return t.encrypt(e);
 }, da = (e) => {
 	if (!de(e)) return e;
-	let t = G();
+	let t = K();
 	if (!t) throw Error(`decryptField: ${la}`);
 	return t.decrypt(e);
 }, fa = new Ut(), pa = /* @__PURE__ */ new Set(), ma = /* @__PURE__ */ new Set(), ha = "\0", ga = process.env.VOLTRO_OBSERVE_GRAPH === "1", _a = () => {
@@ -1914,7 +1914,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	let n = Ca(e);
 	ir();
 	let r = Ua(t.subject), i = t.subject.tenantId;
-	if (t.rowFilter === void 0 && hi()) throw Error("row filter registered, but this store was scoped without one — refusing to serve an unfiltered read.\n\nThis app called `setRowFilter`, so every scoped store must receive a resolved `rowFilter` (the serve pipeline's `withRowFilter` does this per request). Reaching here with none means a read path was built outside that spine, and continuing would serve rows the filter exists to hide — silently, which is how this was found in the first place.\n\nIf this path is deliberately unfiltered (a system sweep, a migration), pass `rowFilter: NO_ROW_FILTER` explicitly.");
+	if (t.rowFilter === void 0 && t.subject.type !== "system" && hi()) throw Error("row filter registered, but this store was scoped without one — refusing to serve an unfiltered read.\n\nThis app called `setRowFilter`, so every scoped store must receive a resolved `rowFilter` (the serve pipeline's `withRowFilter` does this per request). Reaching here with none means a read path was built outside that spine, and continuing would serve rows the filter exists to hide — silently, which is how this was found in the first place.\n\nIf this path is deliberately unfiltered (a system sweep, a migration), pass `rowFilter: NO_ROW_FILTER` explicitly.");
 	let a = t.rowFilter ?? gi, o = (e, n) => {
 		let a = { ...n }, o = t.schemaRegistry, s = o.idScheme(e);
 		if (s !== void 0 && a[Ra] == null) if (s.kind === "numeric") delete a[Ra];
@@ -2017,8 +2017,8 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		});
 	}, m = t.dialect, h = (e, t) => {
 		let n = j(e);
-		return ie(m ? Me(t, n, m) : t, n, G());
-	}, g = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", _ = z({ scope: "store.fieldEncryption" }), v = /* @__PURE__ */ new Set(), b = (e) => {
+		return ie(m ? Me(t, n, m) : t, n, K());
+	}, g = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", _ = B({ scope: "store.fieldEncryption" }), v = /* @__PURE__ */ new Set(), b = (e) => {
 		let t = `${e.table}.${e.column}`;
 		v.has(t) || (v.add(t), _.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
@@ -2027,7 +2027,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			hint: "VOLTRO_FIELD_DECRYPT_ON_ERROR=null is set — this row was likely encrypted under a different key"
 		}));
 	}, x = (e, t) => {
-		let n = j(e), r = ne(t, n, G(), {
+		let n = j(e), r = ne(t, n, K(), {
 			onError: g,
 			...g === "null" ? { warn: b } : {}
 		});
@@ -2420,7 +2420,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			return o.size;
 		}
 	};
-}, Xa = z({ scope: "voltro:replication" }), Za = new Ut(), Qa = (e, t) => Za.run(e, t), $a = () => Za.getStore(), eo = class {
+}, Xa = B({ scope: "voltro:replication" }), Za = new Ut(), Qa = (e, t) => Za.run(e, t), $a = () => Za.getStore(), eo = class {
 	primary;
 	replicas;
 	adapter;
@@ -3128,7 +3128,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 }).pipe(o.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), rs = (e, t = "rpc.stream", n, r) => b.unwrap(o.gen(function* () {
 	let a = yield* gt, s = yield* ot, c = yield* qo;
 	Yo(c, t, a);
-	let l = Ko(a, c, s.clientId), u = Uo(t, () => e(l)), d = o.isEffect(u) ? yield* u.pipe(o.orDie) : u, f = n === void 0 || n.length === 0 ? void 0 : () => St(a, n, r), p = io(f === void 0 ? d : b.unwrap(f().pipe(o.map((e) => e ? b.fail(e) : b.flatMap(d, (e) => b.unwrap(f().pipe(o.map((t) => t ? b.fail(t) : b.make(e)))))))), s.credentialExpiresAt, b.empty);
+	let l = Ko(a, c, s.clientId), u = Uo(t, () => e(l)), d = o.isEffect(u) ? yield* u.pipe(o.orDie) : u, f = n === void 0 || n.length === 0 ? void 0 : () => z(a, n, r), p = io(f === void 0 ? d : b.unwrap(f().pipe(o.map((e) => e ? b.fail(e) : b.flatMap(d, (e) => b.unwrap(f().pipe(o.map((t) => t ? b.fail(t) : b.make(e)))))))), s.credentialExpiresAt, b.empty);
 	if (l.clientId === void 0) return p;
 	let m = l.clientId;
 	return b.unwrapScoped(o.gen(function* () {
@@ -3137,7 +3137,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		});
 		return yield* o.addFinalizer(() => o.sync(() => t())), p.pipe(b.interruptWhen(i.await(e)));
 	}));
-}).pipe(o.withSpan(t, { attributes: { "framework.kind": "stream" } }))), is = z({ scope: "voltro:rpc" }), as = z({ scope: "voltro:http" }), os = z({ scope: "voltro:shutdown" }), ss = (t, n, r) => {
+}).pipe(o.withSpan(t, { attributes: { "framework.kind": "stream" } }))), is = B({ scope: "voltro:rpc" }), as = B({ scope: "voltro:http" }), os = B({ scope: "voltro:shutdown" }), ss = (t, n, r) => {
 	if (e.isInterruptedOnly(r)) return;
 	let i = e.squash(r), a = i?._tag, o = i instanceof Error ? i.message : i?.message ?? String(i), s = e.dieOption(r)._tag === "Some", c = Yn(i), l = {
 		traceId: n,
@@ -3224,38 +3224,38 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		try: () => Promise.resolve(m),
 		catch: (e) => e
 	});
-	return yield* (d ? h.pipe(o.tap((e) => o.promise(() => Ot(d.store, d.scope, d.key, {
+	return yield* (d ? h.pipe(o.tap((e) => o.promise(() => Dt(d.store, d.scope, d.key, {
 		status: 200,
 		body: r ? r.encode(e) : e
-	}, Date.now())).pipe(o.ignore)), o.tapErrorCause(() => o.promise(() => Dt(d.store, d.scope, d.key)).pipe(o.ignore))) : h).pipe(o.tapErrorCause((e) => o.sync(() => ss(n, u.traceId, e))), o.catchIf(ls, () => o.die(ds(u.traceId))), o.catchIf((e) => e instanceof Error && typeof e._tag != "string", (e) => o.die(ds(u.traceId, fs(e)))), o.catchIf((e) => a !== void 0 && typeof e?._tag == "string" && !us(a, e), (e) => o.die(ds(u.traceId, fs(e)))), o.catchAllDefect((e) => e?._tag === "InternalError" ? o.die(e) : o.die(ds(u.traceId, fs(e)))), o.annotateLogs(Jo(u)));
+	}, Date.now())).pipe(o.ignore)), o.tapErrorCause(() => o.promise(() => Et(d.store, d.scope, d.key)).pipe(o.ignore))) : h).pipe(o.tapErrorCause((e) => o.sync(() => ss(n, u.traceId, e))), o.catchIf(ls, () => o.die(ds(u.traceId))), o.catchIf((e) => e instanceof Error && typeof e._tag != "string", (e) => o.die(ds(u.traceId, fs(e)))), o.catchIf((e) => a !== void 0 && typeof e?._tag == "string" && !us(a, e), (e) => o.die(ds(u.traceId, fs(e)))), o.catchAllDefect((e) => e?._tag === "InternalError" ? o.die(e) : o.die(ds(u.traceId, fs(e)))), o.annotateLogs(Jo(u)));
 }).pipe(o.withSpan(n, { attributes: { "framework.kind": "mutation" } })), _s = 8 * 1024 * 1024, vs = (t) => {
 	let n = t.port ?? 4e3, r = t.host, i = t.path ?? "/ws", a = i;
 	Vo(t.webhookRoutes);
 	let s = Gt(), c = (e) => Zt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
-		if (!t.inspectRoute) return V.text("inspect route not configured", { status: 404 });
+		if (!t.inspectRoute) return H.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [t, r] of Object.entries(e.headers)) r !== void 0 && (n[t.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
 		e.method !== "GET" && e.method !== "HEAD" && e.method !== "OPTIONS" && (r = yield* e.text.pipe(o.orElseSucceed(() => "")));
 		let i = t.inspectRoute.handle(e.url, n, e.method, r), a = i instanceof Promise ? yield* o.promise(() => i) : i;
-		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
+		return a === null ? H.text("inspect route not found", { status: 404 }) : H.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
 	}))), d = () => Zt.HttpServerRequest.pipe(o.flatMap((e) => {
 		let n = t.inspectStream;
-		if (!n) return o.succeed(V.text("inspect stream not configured", { status: 404 }));
+		if (!n) return o.succeed(H.text("inspect stream not configured", { status: 404 }));
 		let r = {};
 		for (let [t, n] of Object.entries(e.headers)) n !== void 0 && (r[t.toLowerCase()] = Array.isArray(n) ? n.join(", ") : n);
 		let i = n.corsHeaders(r.origin);
-		if (n.isDisabled()) return o.succeed(V.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
+		if (n.isDisabled()) return o.succeed(H.text(JSON.stringify({ error: "inspect disabled (VOLTRO_INSPECT=off)" }), {
 			status: 503,
 			contentType: "application/json; charset=utf-8",
 			headers: i
 		}));
 		let a = n.authorize(r);
-		if (!a.ok) return o.succeed(V.text(JSON.stringify({
+		if (!a.ok) return o.succeed(H.text(JSON.stringify({
 			error: "unauthorized",
 			reason: a.reason
 		}), {
@@ -3278,7 +3278,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				clearInterval(r), t();
 			}));
 		}));
-		return o.succeed(V.stream(h, {
+		return o.succeed(H.stream(h, {
 			status: 200,
 			headers: {
 				"content-type": "text/event-stream; charset=utf-8",
@@ -3288,20 +3288,20 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				...i
 			}
 		}));
-	})), f = B.add("*", "/_voltro/inspect/*", Zt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
-		if (!t.inspectRoute) return V.text("inspect route not configured", { status: 404 });
+	})), f = V.add("*", "/_voltro/inspect/*", Zt.HttpServerRequest.pipe(o.flatMap((e) => o.gen(function* () {
+		if (!t.inspectRoute) return H.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [t, r] of Object.entries(e.headers)) r !== void 0 && (n[t.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r;
 		e.method !== "GET" && e.method !== "HEAD" && e.method !== "OPTIONS" && (r = yield* e.text.pipe(o.orElseSucceed(() => "")));
 		let i = t.inspectRoute.handle(e.url, n, e.method, r), a = i instanceof Promise ? yield* o.promise(() => i) : i;
-		return a === null ? V.text("inspect route not found", { status: 404 }) : V.text(a.body, {
+		return a === null ? H.text("inspect route not found", { status: 404 }) : H.text(a.body, {
 			status: a.status,
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
 	})))), p = u.empty;
-	t.inspectRoute !== void 0 && (p = t.inspectStream === void 0 ? u.mergeAll(B.add("*", "/_voltro/inspect", c(!0)), f) : u.mergeAll(B.add("GET", "/_voltro/inspect/stream", d()), B.add("*", "/_voltro/inspect", c(!0)), f));
+	t.inspectRoute !== void 0 && (p = t.inspectStream === void 0 ? u.mergeAll(V.add("*", "/_voltro/inspect", c(!0)), f) : u.mergeAll(V.add("GET", "/_voltro/inspect/stream", d()), V.add("*", "/_voltro/inspect", c(!0)), f));
 	let m = u.empty;
 	if (t.webhookRoutes !== void 0 && t.webhookRoutes.size > 0) {
 		let e = (e) => Zt.HttpServerRequest.pipe(o.flatMap((t) => o.gen(function* () {
@@ -3319,11 +3319,11 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				},
 				...s ? { parent: s } : {}
 			}));
-			return V.text(c.body, {
+			return H.text(c.body, {
 				status: c.status,
 				contentType: c.contentType
 			});
-		}))), n = Array.from(t.webhookRoutes.entries()).map(([t, n]) => B.add("*", t, e(n)));
+		}))), n = Array.from(t.webhookRoutes.entries()).map(([t, n]) => V.add("*", t, e(n)));
 		m = u.mergeAll(...n);
 	}
 	let h = Do(t.security?.trustedProxies), g = u.empty;
@@ -3373,7 +3373,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 						a !== void 0 && clearInterval(a), i();
 					}));
 				}));
-				return V.stream(i, {
+				return H.stream(i, {
 					status: p.status,
 					headers: {
 						...m,
@@ -3384,7 +3384,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 					}
 				});
 			}
-			return p.body instanceof Uint8Array ? V.uint8Array(p.body, g) : V.text(p.body ?? "", g);
+			return p.body instanceof Uint8Array ? H.uint8Array(p.body, g) : H.text(p.body ?? "", g);
 		})), o.tapErrorCause((t) => e.isInterruptedOnly(t) ? o.void : o.sync(() => as.error(`${n.map((e) => e.method).join("|")} ${n[0].path} threw`, { path: n[0].path }, e.squash(t))))), r = /* @__PURE__ */ new Map();
 		for (let e of t.httpRoutes) {
 			let t = r.get(e.path);
@@ -3392,7 +3392,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		}
 		let i = [...r.entries()].flatMap(([e, t]) => {
 			let r = t.length === 1 ? t[0].method : "*", i = n(t);
-			return [B.add(r, e, i), B.add(r, `${e}/*`, i)];
+			return [V.add(r, e, i), V.add(r, `${e}/*`, i)];
 		});
 		g = u.mergeAll(...i);
 	}
@@ -3408,13 +3408,13 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	}), ne = co({
 		...t.webhookRoutes === void 0 ? {} : { webhookPaths: t.webhookRoutes.keys() },
 		...t.httpRoutes === void 0 ? {} : { httpRoutes: t.httpRoutes }
-	}), re = Fo(t.security?.headers), ie = z({ scope: "voltro:security" }), O = (e, t) => {
+	}), re = Fo(t.security?.headers), ie = B({ scope: "voltro:security" }), O = (e, t) => {
 		let n = e.headers, r = Io(re, {
 			contentType: n["content-type"],
 			https: t
 		}), i = {};
 		for (let [e, t] of Object.entries(r)) n[e] === void 0 && (i[e] = t);
-		return Object.keys(i).length === 0 ? e : V.setHeaders(e, i);
+		return Object.keys(i).length === 0 ? e : H.setHeaders(e, i);
 	}, k = (e, t) => e.toUpperCase() === "GET" && (t.upgrade ?? "").toLowerCase().includes("websocket"), ae = (e) => o.gen(function* () {
 		let t = yield* Zt.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -3433,21 +3433,21 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		}), u = (e) => O(e, l);
 		if (t.method === "POST" && i === "/rpc") {
 			let e = n["content-length"];
-			if (e !== void 0 && Number(e) > ee) return u(V.text("rpc payload too large", {
+			if (e !== void 0 && Number(e) > ee) return u(H.text("rpc payload too large", {
 				status: 413,
 				headers: D
 			}));
 		}
-		if (T && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? u(V.text("ok", {
+		if (T && (i === "/internal/liveness" || i === "/internal/readiness")) return i === "/internal/liveness" ? u(H.text("ok", {
 			status: 200,
 			headers: D
-		})) : T.isReady() ? T.ping && !(yield* o.tryPromise(() => T.ping()).pipe(o.orElseSucceed(() => !1))) ? u(V.text("not-ready: dependency", {
+		})) : T.isReady() ? T.ping && !(yield* o.tryPromise(() => T.ping()).pipe(o.orElseSucceed(() => !1))) ? u(H.text("not-ready: dependency", {
 			status: 503,
 			headers: D
-		})) : u(V.text("ready", {
+		})) : u(H.text("ready", {
 			status: 200,
 			headers: D
-		})) : u(V.text("not-ready", {
+		})) : u(H.text("not-ready", {
 			status: 503,
 			headers: D
 		}));
@@ -3463,14 +3463,14 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				reason: e.reason,
 				origin: e.origin,
 				surface: f ? "websocket-upgrade" : d ? "rpc" : "http-route"
-			}), u(V.text("origin not allowed", {
+			}), u(H.text("origin not allowed", {
 				status: 403,
 				headers: D
 			}));
 		}
 		let p = d ? o.gen(function* () {
 			let r = yield* no(t.source, ee);
-			return r._tag === "aborted" ? u(V.text("rpc request body incomplete", {
+			return r._tag === "aborted" ? u(H.text("rpc request body incomplete", {
 				status: 400,
 				headers: D
 			})) : r._tag === "too-large" ? (ie.warn("refused an over-cap rpc body", {
@@ -3478,14 +3478,14 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				cap: ee,
 				receivedAtLeast: r.received,
 				declaredLength: n["content-length"] ?? null
-			}), u(V.text("rpc payload too large", {
+			}), u(H.text("rpc payload too large", {
 				status: 413,
 				headers: D
 			}))) : yield* o.provideService(e, Zt.HttpServerRequest, ro(t, r.bytes));
 		}) : e;
 		if (!w) {
 			let e = yield* p;
-			return V.isServerResponse(e) ? u(e) : e;
+			return H.isServerResponse(e) ? u(e) : e;
 		}
 		let m = Oo({
 			socketAddress: s,
@@ -3497,18 +3497,18 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			headers: n,
 			remoteAddr: m
 		})).pipe(o.orElseSucceed(() => null));
-		if (g !== null) return u(V.text(g.body ?? "", {
+		if (g !== null) return u(H.text(g.body ?? "", {
 			status: g.status,
 			...g.headers ? { headers: g.headers } : {}
 		}));
 		let _ = yield* p;
-		return V.isServerResponse(_) ? u(_) : _;
-	}), A = u.unwrapEffect(B.toHttpEffect(C).pipe(o.map((e) => Yt.serve(ae(e))))).pipe(u.provide(en.layer(() => s, r === void 0 ? { port: n } : {
+		return H.isServerResponse(_) ? u(_) : _;
+	}), A = u.unwrapEffect(V.toHttpEffect(C).pipe(o.map((e) => Yt.serve(ae(e))))).pipe(u.provide(en.layer(() => s, r === void 0 ? { port: n } : {
 		port: n,
 		host: r
 	})), u.provide($t.layer));
 	t.tracerLayer && (A = A.pipe(u.provide(t.tracerLayer)));
-	let oe = z({ scope: "voltro:rpc" }), j = u.launch(A).pipe(o.catchAllCause((t) => o.sync(() => {
+	let oe = B({ scope: "voltro:rpc" }), j = u.launch(A).pipe(o.catchAllCause((t) => o.sync(() => {
 		oe.error("rpc server crashed", {}, e.squash(t)), process.exit(1);
 	}))), se = o.runFork(j);
 	return ys.add(se), Os(), {
@@ -3795,7 +3795,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		let r = await rc(e, t, n);
 		r && await e.delete(ec, r.id);
 	}
-}), K = "_voltro_kv", ac = (e) => {
+}), q = "_voltro_kv", ac = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
@@ -3805,7 +3805,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	let n = ac(e.expiresAt);
 	return n !== null && n <= t;
 }, sc = (e) => e === null ? null : JSON.parse(e), cc = async (e, t) => (await e.query({
-	table: K,
+	table: q,
 	predicate: O("key", t),
 	order: [],
 	take: 1,
@@ -3823,14 +3823,14 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	return {
 		get: (n) => t("get", n, async () => {
 			let t = await cc(e, n);
-			return t === null ? h.none() : oc(t, Date.now()) ? (await e.delete(K, t.id), h.none()) : h.some(sc(t.value));
+			return t === null ? h.none() : oc(t, Date.now()) ? (await e.delete(q, t.id), h.none()) : h.some(sc(t.value));
 		}),
 		set: (n, r, i) => t("set", n, async () => {
 			let t = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(t + i.ttlMs) : null, o = A({
 				kind: "typeid",
 				prefix: "kv"
-			}, K);
-			await e.upsert(K, {
+			}, q);
+			await e.upsert(q, {
 				id: o,
 				key: n,
 				value: JSON.stringify(r),
@@ -3849,15 +3849,15 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			let t = await cc(e, n);
 			if (t === null) return !1;
 			let r = !oc(t, Date.now());
-			return await e.delete(K, t.id), r;
+			return await e.delete(q, t.id), r;
 		}),
 		has: (n) => t("has", n, async () => {
 			let t = await cc(e, n);
-			return t === null ? !1 : oc(t, Date.now()) ? (await e.delete(K, t.id), !1) : !0;
+			return t === null ? !1 : oc(t, Date.now()) ? (await e.delete(q, t.id), !1) : !0;
 		}),
 		list: (n) => t("list", "", async () => {
 			let t = Date.now(), r = xe(fe("expiresAt"), se("expiresAt", new Date(t))), i = n === "" ? r : C(te("key", n), r), a = await e.query({
-				table: K,
+				table: q,
 				predicate: i,
 				order: [],
 				take: void 0,
@@ -3868,7 +3868,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			return o;
 		}),
 		clear: () => t("clear", "", async () => {
-			await e.deleteMany(K, { where: {
+			await e.deleteMany(q, { where: {
 				column: "id",
 				op: "isNotNull"
 			} });
@@ -4172,7 +4172,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	delete: (t, n) => kc("delete", t, () => e.delete(t, n)),
 	hardDelete: (t, n) => kc("hardDelete", t, () => e.hardDelete(t, n))
 }), jc = (e) => tn.make(e.name, {
-	payload: e.payloadSchema,
+	payload: Rt(e.payloadSchema),
 	success: bt,
 	error: e.errorSchema
 }), Mc = (e, t) => ({
@@ -4722,7 +4722,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			triggered: p
 		};
 	} };
-}, ol = z({ scope: "voltro:events" }), sl = 64, cl = 5 * 6e4, ll = 1e4, ul = class {
+}, ol = B({ scope: "voltro:events" }), sl = 64, cl = 5 * 6e4, ll = 1e4, ul = class {
 	routes = /* @__PURE__ */ new Map();
 	origin;
 	ringSize;
@@ -4772,7 +4772,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		if (t !== void 0) return t.lastTouched = this.now(), t;
 		this.evictIfOverCapacity();
 		let n = {
-			latest: this.deliveryOf?.(Pt(e).event) === "latest",
+			latest: this.deliveryOf?.(Nt(e).event) === "latest",
 			listeners: /* @__PURE__ */ new Set(),
 			watermark: /* @__PURE__ */ new Map(),
 			localNext: 1,
@@ -4803,7 +4803,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		i > 0 && e.ring.splice(0, i);
 	}
 	publish(e) {
-		let t = Et(e.tenantId, e.event, e.key), n = this.state(t), r = {
+		let t = Tt(e.tenantId, e.event, e.key), n = this.state(t), r = {
 			route: t,
 			event: e.event,
 			origin: this.origin,
@@ -4850,7 +4850,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		}
 	}
 	subscribe(e) {
-		let t = Et(e.tenantId, e.event, e.key), n = this.state(t);
+		let t = Tt(e.tenantId, e.event, e.key), n = this.state(t);
 		e.onAttach?.(new Map(n.watermark));
 		let r = !0, i = [], a = (t) => {
 			if (r) {
@@ -4918,7 +4918,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	snapshot() {
 		return [...this.routes.entries()].map(([e, t]) => ({
 			route: e,
-			event: t.ring[t.ring.length - 1]?.envelope.event ?? Pt(e).event,
+			event: t.ring[t.ring.length - 1]?.envelope.event ?? Nt(e).event,
 			subscribers: t.listeners.size,
 			buffered: t.ring.length,
 			lastEmittedAt: t.ring[t.ring.length - 1]?.envelope.emittedAt
@@ -4982,9 +4982,9 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		return t.set(e.origin, Math.max(r, e.n)), r === 0 && n === 0 ? 0 : Math.max(0, e.n - r - 1);
 	};
 }, yl = (e) => b.unwrapScoped(o.gen(function* () {
-	let t = yield* gt, n = yield* ot, r = t.tenantId ?? null, i = e.guards === void 0 ? void 0 : e.guards.filter((e) => !jt(e));
+	let t = yield* gt, n = yield* ot, r = t.tenantId ?? null, i = e.guards === void 0 ? void 0 : e.guards.filter((e) => !At(e));
 	if (i !== void 0 && i.length > 0) {
-		let n = yield* St(t, i, e.key);
+		let n = yield* z(t, i, e.key);
 		if (n) return yield* o.fail(n);
 	}
 	let a = e.bus.deliveryFor(e.event) === "latest", s = yield* g.sliding(e.queueSize ?? (a ? 1 : 64)), c = /* @__PURE__ */ new Map(), l = e.bus.subscribe({
@@ -5009,7 +5009,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			e();
 		}));
 	}
-	let u = a ? () => 0 : vl(c), d = i === void 0 || i.length === 0 ? void 0 : () => St(t, i, e.key), f = b.fromQueue(s, { shutdown: !0 }).pipe(b.flatMap((e) => d === void 0 ? p(e) : b.unwrap(d().pipe(o.map((t) => t ? b.fail(t) : p(e))))));
+	let u = a ? () => 0 : vl(c), d = i === void 0 || i.length === 0 ? void 0 : () => z(t, i, e.key), f = b.fromQueue(s, { shutdown: !0 }).pipe(b.flatMap((e) => d === void 0 ? p(e) : b.unwrap(d().pipe(o.map((t) => t ? b.fail(t) : p(e))))));
 	function p(t) {
 		return b.suspend(() => {
 			if (t.kind === "gap") return b.make(_l(t));
@@ -5028,7 +5028,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	}
 	let m = { _tag: "attached" };
 	return io(b.concat(b.fromIterable([m]), f), n.credentialExpiresAt, b.fromIterable([m]));
-})), bl = z({ scope: "voltro:members" }), xl = 5e3, Sl = class {
+})), bl = B({ scope: "voltro:members" }), xl = 5e3, Sl = class {
 	members = /* @__PURE__ */ new Map();
 	listeners = /* @__PURE__ */ new Set();
 	instanceId;
@@ -5126,10 +5126,10 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			});
 		}
 	}
-}, Cl = z({ scope: "voltro:outbox" }), q = "_voltro_outbox", wl = {
+}, Cl = B({ scope: "voltro:outbox" }), J = "_voltro_outbox", wl = {
 	kind: "typeid",
 	prefix: "obx"
-}, Tl = F(q, {
+}, Tl = F(J, {
 	id: M({ prefix: "obx" }),
 	effect: I(),
 	payload: P(),
@@ -5180,7 +5180,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		let i = (e.now ?? (() => /* @__PURE__ */ new Date()))(), a = r?.idempotencyKey;
 		if (a !== void 0) {
 			let t = (await e.store.query({
-				table: q,
+				table: J,
 				predicate: C(O("idempotencyKey", a), O("status", "pending")),
 				order: [],
 				take: 1,
@@ -5190,7 +5190,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			if (t !== void 0) return t.id;
 		}
 		let o = {
-			id: A(wl, q),
+			id: A(wl, J),
 			effect: t,
 			payload: n,
 			status: "pending",
@@ -5207,7 +5207,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			resendRequestedBy: null,
 			resendReason: null,
 			resendCount: 0
-		}, s = await e.store.insert(q, o);
+		}, s = await e.store.insert(J, o);
 		if (e.afterCommit !== void 0 && e.nudge !== void 0) {
 			let t = e.nudge;
 			e.afterCommit(async () => {
@@ -5218,7 +5218,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	},
 	resend: async (t, n) => {
 		let r = (e.now ?? (() => /* @__PURE__ */ new Date()))(), i = (await e.store.query({
-			table: q,
+			table: J,
 			predicate: O("id", t),
 			order: [],
 			take: 1,
@@ -5228,7 +5228,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		if (i === void 0) throw Error(`outbox.resend: no entry "${t}"`);
 		if (i.status === "delivering") throw Error(`outbox.resend("${t}"): an attempt is in flight — retry once it settles`);
 		let a = i.attempts ?? 0, o = Math.max(1, Math.floor(n?.attempts ?? 1));
-		if (await e.store.update(q, t, {
+		if (await e.store.update(J, t, {
 			status: "pending",
 			nextAttemptAt: r,
 			maxAttempts: a + o,
@@ -5300,7 +5300,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	}
 }, Ll = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = await e.store.query({
-		table: q,
+		table: J,
 		predicate: O("status", "pending"),
 		order: [{
 			column: "nextAttemptAt",
@@ -5341,7 +5341,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				finishedAt: /* @__PURE__ */ new Date(),
 				error: null,
 				response: t
-			}, p), await e.store.update(q, r, {
+			}, p), await e.store.update(J, r, {
 				status: "delivered",
 				attempts: o,
 				deliveredAt: /* @__PURE__ */ new Date(),
@@ -5359,7 +5359,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 				finishedAt: /* @__PURE__ */ new Date(),
 				error: s,
 				response: null
-			}, p), await e.store.update(q, r, {
+			}, p), await e.store.update(J, r, {
 				status: u ? "dead" : "pending",
 				attempts: o,
 				lastError: s,
@@ -5388,10 +5388,10 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		scanned: a.length,
 		...o === void 0 ? {} : { nextAttemptAt: o }
 	};
-}, Rl = z({ scope: "voltro:connections" }), J = "_voltro_connections", zl = {
+}, Rl = B({ scope: "voltro:connections" }), Y = "_voltro_connections", zl = {
 	kind: "typeid",
 	prefix: "conn"
-}, Bl = F(J, {
+}, Bl = F(Y, {
 	id: M({ prefix: "conn" }),
 	connectionId: I(),
 	subjectId: I(),
@@ -5439,7 +5439,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	}
 	return e;
 }, Kl = (e) => e.label ?? e.id, ql = (e) => {
-	if (e.length !== 0 && G() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
+	if (e.length !== 0 && K() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
 }, Jl = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
@@ -5477,7 +5477,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	lastError: t.lastError ?? null,
 	connectedAt: Xl(t.connectedAt)
 }, $l = async (e, t, n) => (await e.query({
-	table: J,
+	table: Y,
 	predicate: C(O("connectionId", t), O("subjectId", n)),
 	order: [],
 	take: 1,
@@ -5485,7 +5485,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	projection: void 0
 }))[0], eu = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: A(zl, J),
+		id: A(zl, Y),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -5504,7 +5504,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		updatedAt: t
 	};
 	return tu(e.store, r);
-}, tu = (e, t) => e.upsert(J, t, {
+}, tu = (e, t) => e.upsert(Y, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -5522,10 +5522,10 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	]
 }), nu = async (e, t, n) => {
 	let r = await $l(e, t, n);
-	return r !== void 0 && e.delete(J, r.id);
+	return r !== void 0 && e.delete(Y, r.id);
 }, ru = async (e, t, n) => {
 	let r = await e.query({
-		table: J,
+		table: Y,
 		predicate: O("subjectId", n),
 		order: [],
 		take: void 0,
@@ -5638,7 +5638,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		});
 	}
 	let c = e.row.refreshToken;
-	if (c == null) throw await t.update(J, s, {
+	if (c == null) throw await t.update(Y, s, {
 		status: "expired",
 		lastError: "access token expired and no refresh token is on file — reconnect required",
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
@@ -5657,7 +5657,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 			reason: String(e),
 			transient: !0
 		});
-		throw await t.update(J, s, {
+		throw await t.update(Y, s, {
 			status: n.transient ? "error" : "revoked",
 			lastError: n.reason,
 			refreshLockedUntil: /* @__PURE__ */ new Date(0),
@@ -5683,7 +5683,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(r())
 	};
-	return hu(i, await t.update(J, s, u) ?? {
+	return hu(i, await t.update(Y, s, u) ?? {
 		...e.row,
 		...u
 	});
@@ -5961,10 +5961,10 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
 }, td = new Ut(), nd = (e) => {
 	td.enterWith(e);
-}, rd = () => td.getStore(), id = (e, t) => td.run(e, t), ad = z({ scope: "voltro:policy" }), od, sd = (e) => {
+}, rd = () => td.getStore(), id = (e, t) => td.run(e, t), ad = B({ scope: "voltro:policy" }), od, sd = (e) => {
 	od = e;
 }, cd = () => od, ld = () => {
-	Lt((e) => o.gen(function* () {
+	It((e) => o.gen(function* () {
 		let t = Gu(e.resourceType);
 		if (t === void 0) return ad.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
@@ -6182,7 +6182,7 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, Ed = /* @__PURE__ */ new Map(), Dd = /* @__PURE__ */ new Map(), Od = /* @__PURE__ */ new Set(), kd = /* @__PURE__ */ new Set(), Ad = Td([]), jd = z({ scope: "store.fieldEncryption" }), Md = (e, t) => {
+}, Ed = /* @__PURE__ */ new Map(), Dd = /* @__PURE__ */ new Map(), Od = /* @__PURE__ */ new Set(), kd = /* @__PURE__ */ new Set(), Ad = Td([]), jd = B({ scope: "store.fieldEncryption" }), Md = (e, t) => {
 	let n = t, r = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", i = /* @__PURE__ */ new Set(), a = (e) => {
 		let t = `${e.table}.${e.column}`;
 		i.has(t) || (i.add(t), jd.warn("encrypted column degraded to null — could not decrypt with the active key", {
@@ -6193,9 +6193,9 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 		}));
 	}, o = (e, t) => {
 		let r = j(e);
-		return ie(n ? Me(t, r, n) : t, r, G());
+		return ie(n ? Me(t, r, n) : t, r, K());
 	}, s = (e, t) => {
-		let i = j(e), o = ne(t, i, G(), {
+		let i = j(e), o = ne(t, i, K(), {
 			onError: r,
 			...r === "null" ? { warn: a } : {}
 		});
@@ -6380,9 +6380,9 @@ var W = /* @__PURE__ */ new Map(), Gi = (e, t) => {
 	}
 	return n;
 }, Jd = (e, t) => {
-	let n = Ct(), r = [];
-	for (let i of e) for (let e of Rt(i.source)) {
-		if (Nt(e)) {
+	let n = St(), r = [];
+	for (let i of e) for (let e of Lt(i.source)) {
+		if (Mt(e)) {
 			if (n.has(e)) continue;
 			r.push({
 				procedure: i.name,
@@ -6640,14 +6640,14 @@ behind quietly.` + n;
 	let a = bf(e), o = [], s = r.next(a, t);
 	for (; s.getTime() <= n.getTime() && o.length <= i;) o.push(s), s = r.next(a, s);
 	return o;
-}, Y = "_voltro_wakeups", Cf = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, wf = (e) => ({
+}, X = "_voltro_wakeups", Cf = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, wf = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
 }), Tf = async (e, t) => {
-	await e.upsert(Y, {
+	await e.upsert(X, {
 		id: Cf(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
@@ -6658,7 +6658,7 @@ behind quietly.` + n;
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, Ef = async (e, t) => e.delete(Y, Cf(t)), Df = async (e, t) => await e.update(Y, Cf(t), { status: "fired" }) !== null, Of = (e, t) => ({ and: [{
+}, Ef = async (e, t) => e.delete(X, Cf(t)), Df = async (e, t) => await e.update(X, Cf(t), { status: "fired" }) !== null, Of = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -6666,15 +6666,15 @@ behind quietly.` + n;
 	column: "status",
 	op: "eq",
 	value: t
-}] }), kf = async (e, t) => await e.updateMany(Y, { status: "fired" }, { where: Of(Cf(t), "pending") }) > 0, Af = async (e, t) => {
-	await e.updateMany(Y, { status: "pending" }, { where: Of(Cf(t), "fired") });
+}] }), kf = async (e, t) => await e.updateMany(X, { status: "fired" }, { where: Of(Cf(t), "pending") }) > 0, Af = async (e, t) => {
+	await e.updateMany(X, { status: "pending" }, { where: Of(Cf(t), "fired") });
 }, jf = {
 	column: "status",
 	op: "eq",
 	value: "pending"
 }, Mf = async (e, t) => {
 	let n = {
-		table: Y,
+		table: X,
 		predicate: jf,
 		order: [{
 			column: "wakeAt",
@@ -6694,7 +6694,7 @@ behind quietly.` + n;
 	value: "fired"
 }, If = async (e, t = {}) => {
 	let n = {
-		table: Y,
+		table: X,
 		predicate: Ff,
 		order: [{
 			column: "wakeAt",
@@ -6704,7 +6704,7 @@ behind quietly.` + n;
 		skip: void 0,
 		projection: void 0
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
-	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Y, String(t.id)) && a++;
+	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(X, String(t.id)) && a++;
 	return a;
 }, Lf = Ec, Rf = "default", zf = {
 	kind: "single",
@@ -6776,7 +6776,7 @@ behind quietly.` + n;
 		} catch (t) {
 			s.warn("schedule: failed to record run start", {
 				name: e.name,
-				reason: X(t)
+				reason: Z(t)
 			});
 			return;
 		}
@@ -6787,7 +6787,7 @@ behind quietly.` + n;
 		} catch (t) {
 			s.warn("schedule: failed to record run finish", {
 				runId: e,
-				reason: X(t)
+				reason: Z(t)
 			});
 		}
 	}, b = async (e) => {
@@ -6812,7 +6812,7 @@ behind quietly.` + n;
 		} catch (t) {
 			return s.warn("schedule: cluster-running check failed", {
 				name: e,
-				reason: X(t)
+				reason: Z(t)
 			}), !1;
 		}
 	}, x = async (e, t, n, r) => {
@@ -6861,7 +6861,7 @@ behind quietly.` + n;
 				completedAtSec: Date.now() / 1e3
 			});
 		} catch (t) {
-			let n = X(t).includes("exceeded maxRuntimeMs"), r = Yn(t).dbMessage, i = typeof r == "string" && r !== "" ? `${X(t)} — ${r}` : X(t);
+			let n = Z(t).includes("exceeded maxRuntimeMs"), r = Yn(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Z(t)} — ${r}` : Z(t);
 			o && await y(o, {
 				status: "failed",
 				errorTag: n ? "timeout" : qf(t),
@@ -6871,7 +6871,7 @@ behind quietly.` + n;
 			});
 			let a = {
 				name: e.name,
-				reason: X(t),
+				reason: Z(t),
 				timeout: n,
 				...Yn(t)
 			};
@@ -6879,7 +6879,7 @@ behind quietly.` + n;
 				name: e.name,
 				status: "failed",
 				durationMs: Date.now() - c
-			}), Ft({
+			}), Pt({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -6938,7 +6938,7 @@ behind quietly.` + n;
 		} catch (t) {
 			s.warn("schedule: wakeup register failed", {
 				name: e.name,
-				reason: X(t)
+				reason: Z(t)
 			});
 		}
 	}, T = 2147483647, E = (e) => {
@@ -6954,7 +6954,7 @@ behind quietly.` + n;
 			let r = setTimeout(() => {
 				S(e, i, e.trigger ?? t.defaultTrigger).catch((t) => s.warn("schedule: fire rejected", {
 					name: e.name,
-					reason: X(t)
+					reason: Z(t)
 				})).finally(() => E(e));
 			}, Math.max(0, n));
 			f.set(e.name, r);
@@ -6979,7 +6979,7 @@ behind quietly.` + n;
 		} catch (t) {
 			s.warn("schedule: backfill lookup failed", {
 				name: e.name,
-				reason: X(t)
+				reason: Z(t)
 			});
 			return;
 		}
@@ -7046,7 +7046,7 @@ behind quietly.` + n;
 			f.clear(), s.info("scheduler: stopped");
 		}
 	};
-}, X = (e) => e?.message ?? String(e), qf = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Jf = (e) => {
+}, Z = (e) => e?.message ?? String(e), qf = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Jf = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
@@ -7535,7 +7535,7 @@ behind quietly.` + n;
 		timeColumn: "requestedAt",
 		ttlMs: Ae(process.env.VOLTRO_APPROVALS_TTL_HOURS, 720)
 	});
-}, Lp = (e, t) => e.map((e) => Mt(e) ? {
+}, Lp = (e, t) => e.map((e) => jt(e) ? {
 	kind: "policy",
 	action: e.action,
 	resourceType: e.resourceType,
@@ -7719,7 +7719,7 @@ behind quietly.` + n;
 		approvalId: t.approvalId,
 		subjectId: a
 	});
-	let s = Rp(Wp(r.approverGuards)), c = await o.runPromise(St(t.approver, s, JSON.parse(String(r.payload ?? "null"))));
+	let s = Rp(Wp(r.approverGuards)), c = await o.runPromise(z(t.approver, s, JSON.parse(String(r.payload ?? "null"))));
 	if (c) throw new Ze({
 		approvalId: t.approvalId,
 		required: c.required ?? null,
@@ -7753,7 +7753,7 @@ behind quietly.` + n;
 	for (let e of a) {
 		if (i() > Up(e.expiresAt)) continue;
 		let n = Wp(e.approverGuards), a = (e.requestedBy ?? null) === r, c = a ? "requested" : null;
-		a || await o.runPromise(St(t, Rp(n), JSON.parse(String(e.payload ?? "null")))) === null && String(e.status) === "pending" && (c = "to-decide"), c !== null && s.push({
+		a || await o.runPromise(z(t, Rp(n), JSON.parse(String(e.payload ?? "null")))) === null && String(e.status) === "pending" && (c = "to-decide"), c !== null && s.push({
 			id: String(e.id),
 			procedure: String(e.procedure),
 			kind: String(e.kind) === "action" ? "action" : "mutation",
@@ -8122,36 +8122,36 @@ behind quietly.` + n;
 	"info",
 	"warn",
 	"critical"
-]), Z = (e, t) => /* @__PURE__ */ Error(`defineExpectation(${JSON.stringify(e)}): ${t}`), Hm = (e) => {
+]), Q = (e, t) => /* @__PURE__ */ Error(`defineExpectation(${JSON.stringify(e)}): ${t}`), Hm = (e) => {
 	let t = e.name;
 	if (typeof t != "string" || t.length === 0) throw Error("defineExpectation: a non-empty `name` is required");
-	if (e.on === void 0 || typeof e.on.table != "string" || e.on.table.length === 0) throw Z(t, "on.table is required — the table whose writes drive the expectation");
-	if (e.on.where !== void 0 && typeof e.on.where != "function") throw Z(t, "on.where, when present, must be a predicate function");
+	if (e.on === void 0 || typeof e.on.table != "string" || e.on.table.length === 0) throw Q(t, "on.table is required — the table whose writes drive the expectation");
+	if (e.on.where !== void 0 && typeof e.on.where != "function") throw Q(t, "on.where, when present, must be a predicate function");
 	let n = e.invariant;
-	if (n === void 0 || typeof n.kind != "string") throw Z(t, "invariant is required");
+	if (n === void 0 || typeof n.kind != "string") throw Q(t, "invariant is required");
 	switch (n.kind) {
 		case "freshness":
-			if (typeof n.column != "string" || n.column.length === 0) throw Z(t, "freshness invariant requires a `column` (the timestamp column)");
-			if (!(typeof n.maxAgeMs == "number" && n.maxAgeMs > 0)) throw Z(t, "freshness invariant requires a positive `maxAgeMs`");
+			if (typeof n.column != "string" || n.column.length === 0) throw Q(t, "freshness invariant requires a `column` (the timestamp column)");
+			if (!(typeof n.maxAgeMs == "number" && n.maxAgeMs > 0)) throw Q(t, "freshness invariant requires a positive `maxAgeMs`");
 			break;
 		case "nullRate":
-			if (typeof n.column != "string" || n.column.length === 0) throw Z(t, "nullRate invariant requires a `column`");
-			if (!(typeof n.maxRate == "number" && n.maxRate >= 0 && n.maxRate <= 1)) throw Z(t, "nullRate invariant requires `maxRate` in [0, 1]");
+			if (typeof n.column != "string" || n.column.length === 0) throw Q(t, "nullRate invariant requires a `column`");
+			if (!(typeof n.maxRate == "number" && n.maxRate >= 0 && n.maxRate <= 1)) throw Q(t, "nullRate invariant requires `maxRate` in [0, 1]");
 			break;
 		case "rowCount":
-			if (n.min === void 0 && n.max === void 0) throw Z(t, "rowCount invariant requires at least one of `min` / `max`");
-			if (n.min !== void 0 && n.max !== void 0 && n.min > n.max) throw Z(t, "rowCount invariant: `min` must not exceed `max`");
+			if (n.min === void 0 && n.max === void 0) throw Q(t, "rowCount invariant requires at least one of `min` / `max`");
+			if (n.min !== void 0 && n.max !== void 0 && n.min > n.max) throw Q(t, "rowCount invariant: `min` must not exceed `max`");
 			break;
 		case "valueBounds":
-			if (typeof n.column != "string" || n.column.length === 0) throw Z(t, "valueBounds invariant requires a `column`");
-			if (n.min === void 0 && n.max === void 0) throw Z(t, "valueBounds invariant requires at least one of `min` / `max`");
-			if (n.min !== void 0 && n.max !== void 0 && n.min > n.max) throw Z(t, "valueBounds invariant: `min` must not exceed `max`");
-			if (n.maxViolationRate !== void 0 && !(typeof n.maxViolationRate == "number" && n.maxViolationRate >= 0 && n.maxViolationRate <= 1)) throw Z(t, "valueBounds invariant: `maxViolationRate`, when set, must be in [0, 1]");
+			if (typeof n.column != "string" || n.column.length === 0) throw Q(t, "valueBounds invariant requires a `column`");
+			if (n.min === void 0 && n.max === void 0) throw Q(t, "valueBounds invariant requires at least one of `min` / `max`");
+			if (n.min !== void 0 && n.max !== void 0 && n.min > n.max) throw Q(t, "valueBounds invariant: `min` must not exceed `max`");
+			if (n.maxViolationRate !== void 0 && !(typeof n.maxViolationRate == "number" && n.maxViolationRate >= 0 && n.maxViolationRate <= 1)) throw Q(t, "valueBounds invariant: `maxViolationRate`, when set, must be in [0, 1]");
 			break;
-		default: throw Z(t, `unknown invariant kind ${JSON.stringify(n.kind)}`);
+		default: throw Q(t, `unknown invariant kind ${JSON.stringify(n.kind)}`);
 	}
 	let r = e.severity ?? "warn";
-	if (!Vm.has(r)) throw Z(t, `severity must be one of info | warn | critical (got ${JSON.stringify(r)})`);
+	if (!Vm.has(r)) throw Q(t, `severity must be one of info | warn | critical (got ${JSON.stringify(r)})`);
 	return {
 		_voltroExpectation: !0,
 		name: t,
@@ -8699,7 +8699,7 @@ behind quietly.` + n;
 		registered: i.map((e) => e.name),
 		runTick: l
 	};
-}, _h = "holdout", Q = (e, t) => /* @__PURE__ */ Error(`defineExperiment(${JSON.stringify(e)}): ${t}`), vh = (e) => {
+}, _h = "holdout", $ = (e, t) => /* @__PURE__ */ Error(`defineExperiment(${JSON.stringify(e)}): ${t}`), vh = (e) => {
 	if (e == null) return null;
 	if (typeof e == "number") return Number.isFinite(e) ? String(e) : null;
 	let t = String(e);
@@ -8707,35 +8707,35 @@ behind quietly.` + n;
 }, yh = (e) => {
 	let t = e.name;
 	if (typeof t != "string" || t.length === 0) throw Error("defineExperiment: a non-empty `name` is required");
-	if (e.on === void 0 || typeof e.on.table != "string" || e.on.table.length === 0) throw Q(t, "on.table is required — the table whose writes drive the experiment");
-	if (e.on.where !== void 0 && typeof e.on.where != "function") throw Q(t, "on.where, when present, must be a predicate function");
+	if (e.on === void 0 || typeof e.on.table != "string" || e.on.table.length === 0) throw $(t, "on.table is required — the table whose writes drive the experiment");
+	if (e.on.where !== void 0 && typeof e.on.where != "function") throw $(t, "on.where, when present, must be a predicate function");
 	let n = e.subject !== void 0, r = e.variantFrom !== void 0;
-	if (n && r) throw Q(t, "declare `subject` OR `variantFrom`, not both — they are two answers to \"which arm is this row in?\"");
+	if (n && r) throw $(t, "declare `subject` OR `variantFrom`, not both — they are two answers to \"which arm is this row in?\"");
 	let i = null, a = null;
 	if (r) if (typeof e.variantFrom == "string") {
-		if (e.variantFrom.length === 0) throw Q(t, "variantFrom, when a column name, must be non-empty");
+		if (e.variantFrom.length === 0) throw $(t, "variantFrom, when a column name, must be non-empty");
 		let n = e.variantFrom;
 		a = (e) => vh(e[n]);
 	} else if (typeof e.variantFrom == "function") {
 		let t = e.variantFrom;
 		a = (e) => vh(t(e));
-	} else throw Q(t, "variantFrom must be a column name or a (row) => variantName function");
+	} else throw $(t, "variantFrom must be a column name or a (row) => variantName function");
 	else if (typeof e.subject == "string") {
-		if (e.subject.length === 0) throw Q(t, "subject, when a column name, must be non-empty");
+		if (e.subject.length === 0) throw $(t, "subject, when a column name, must be non-empty");
 		let n = e.subject;
 		i = (e) => vh(e[n]);
 	} else if (typeof e.subject == "function") {
 		let t = e.subject;
 		i = (e) => vh(t(e));
-	} else throw Q(t, "subject is required — a column name or a (row) => key function (or use `variantFrom` to measure an arm something else assigned)");
-	if (!Array.isArray(e.variants) || e.variants.length < 2) throw Q(t, "at least two variants are required (a control + one treatment)");
+	} else throw $(t, "subject is required — a column name or a (row) => key function (or use `variantFrom` to measure an arm something else assigned)");
+	if (!Array.isArray(e.variants) || e.variants.length < 2) throw $(t, "at least two variants are required (a control + one treatment)");
 	let o = /* @__PURE__ */ new Set(), s = [];
 	for (let n of e.variants) {
-		if (typeof n != "object" || !n || typeof n.name != "string" || n.name.length === 0) throw Q(t, "each variant needs a non-empty `name`");
-		if (o.has(n.name)) throw Q(t, `duplicate variant name ${JSON.stringify(n.name)}`);
+		if (typeof n != "object" || !n || typeof n.name != "string" || n.name.length === 0) throw $(t, "each variant needs a non-empty `name`");
+		if (o.has(n.name)) throw $(t, `duplicate variant name ${JSON.stringify(n.name)}`);
 		o.add(n.name);
 		let e = n.weight ?? 1;
-		if (!(typeof e == "number" && Number.isFinite(e) && e > 0)) throw Q(t, `variant ${JSON.stringify(n.name)} weight must be a positive, finite number`);
+		if (!(typeof e == "number" && Number.isFinite(e) && e > 0)) throw $(t, `variant ${JSON.stringify(n.name)} weight must be a positive, finite number`);
 		s.push({
 			name: n.name,
 			weight: e
@@ -8743,25 +8743,25 @@ behind quietly.` + n;
 	}
 	let c = 0;
 	if (e.holdout !== void 0) {
-		if (a !== null && e.holdout > 0) throw Q(t, `holdout is meaningless with \`variantFrom\` — a holdout is carved out AT ASSIGNMENT, and this experiment does not assign. Declare the holdout arm on whatever does (a flag variant named "${_h}", say) and list it in \`variants\`.`);
-		if (!(typeof e.holdout == "number" && e.holdout >= 0 && e.holdout < 1)) throw Q(t, "holdout, when present, must be a fraction in [0, 1)");
-		if (c = e.holdout, c > 0 && o.has("holdout")) throw Q(t, `a variant may not be named ${JSON.stringify(_h)} when holdout > 0 (reserved)`);
+		if (a !== null && e.holdout > 0) throw $(t, `holdout is meaningless with \`variantFrom\` — a holdout is carved out AT ASSIGNMENT, and this experiment does not assign. Declare the holdout arm on whatever does (a flag variant named "${_h}", say) and list it in \`variants\`.`);
+		if (!(typeof e.holdout == "number" && e.holdout >= 0 && e.holdout < 1)) throw $(t, "holdout, when present, must be a fraction in [0, 1)");
+		if (c = e.holdout, c > 0 && o.has("holdout")) throw $(t, `a variant may not be named ${JSON.stringify(_h)} when holdout > 0 (reserved)`);
 	}
 	let l = e.metric;
-	if (l === void 0 || typeof l.kind != "string") throw Q(t, "metric is required");
+	if (l === void 0 || typeof l.kind != "string") throw $(t, "metric is required");
 	switch (l.kind) {
 		case "count": break;
 		case "sum":
 		case "avg":
-			if (typeof l.column != "string" || l.column.length === 0) throw Q(t, `${l.kind} metric requires a numeric \`column\``);
+			if (typeof l.column != "string" || l.column.length === 0) throw $(t, `${l.kind} metric requires a numeric \`column\``);
 			break;
 		case "conversionRate":
-			if (typeof l.column != "string" || l.column.length === 0) throw Q(t, "conversionRate metric requires a `column`");
+			if (typeof l.column != "string" || l.column.length === 0) throw $(t, "conversionRate metric requires a `column`");
 			break;
-		default: throw Q(t, `unknown metric kind ${JSON.stringify(l.kind)}`);
+		default: throw $(t, `unknown metric kind ${JSON.stringify(l.kind)}`);
 	}
 	let u = e.baseline ?? s[0].name;
-	if (!o.has(u)) throw Q(t, `baseline ${JSON.stringify(u)} is not one of the declared variants`);
+	if (!o.has(u)) throw $(t, `baseline ${JSON.stringify(u)} is not one of the declared variants`);
 	return {
 		_voltroExperiment: !0,
 		name: t,
@@ -8789,7 +8789,7 @@ behind quietly.` + n;
 	return e.variants[e.variants.length - 1].name;
 }, Ch = (e) => e.holdout > 0 ? [...e.variants.map((e) => e.name), _h] : e.variants.map((e) => e.name), wh = class extends n.Tag("@voltro/ExperimentRegistry")() {}, Th = (e) => o.gen(function* () {
 	return (yield* wh).get(e.name);
-}), $ = "__voltro_variant", Eh = "__voltro_metric", Dh = class {
+}), Eh = "__voltro_variant", Dh = "__voltro_metric", Oh = class {
 	project;
 	maintainer;
 	constructor(e, t) {
@@ -8817,56 +8817,56 @@ behind quietly.` + n;
 	byVariant() {
 		let e = /* @__PURE__ */ new Map();
 		for (let t of this.maintainer.materialize()) {
-			let n = t.group[$];
+			let n = t.group[Eh];
 			typeof n == "string" && e.set(n, t.value);
 		}
 		return e;
 	}
-}, Oh = (e) => typeof e == "number" && Number.isFinite(e), kh = (e) => {
-	if (Oh(e)) return e;
+}, kh = (e) => typeof e == "number" && Number.isFinite(e), Ah = (e) => {
+	if (kh(e)) return e;
 	let t = Number(e);
 	return Number.isFinite(t) ? t : null;
-}, Ah = (e, t) => new Dh(e.kind === "count" ? {
+}, jh = (e, t) => new Oh(e.kind === "count" ? {
 	op: "count",
-	groupBy: [$]
+	groupBy: [Eh]
 } : {
 	op: e.kind === "sum" ? "sum" : "avg",
-	column: Eh,
-	groupBy: [$]
+	column: Dh,
+	groupBy: [Eh]
 }, (n) => {
 	let r = t(n);
 	if (r === null) return null;
 	switch (e.kind) {
-		case "count": return { [$]: r };
+		case "count": return { [Eh]: r };
 		case "sum":
 		case "avg": {
-			let t = kh(n[e.column]);
+			let t = Ah(n[e.column]);
 			return t === null ? null : {
-				[$]: r,
-				[Eh]: t
+				[Eh]: r,
+				[Dh]: t
 			};
 		}
 		case "conversionRate": {
 			let t = n[e.column], i = e.equals === void 0 ? !!t : t === e.equals;
 			return {
-				[$]: r,
-				[Eh]: +!!i
+				[Eh]: r,
+				[Dh]: +!!i
 			};
 		}
 	}
-}), jh = (e) => new Dh({
+}), Mh = (e) => new Oh({
 	op: "count",
-	groupBy: [$]
+	groupBy: [Eh]
 }, (t) => {
 	let n = e(t);
-	return n === null ? null : { [$]: n };
-}), Mh = (e) => ({
+	return n === null ? null : { [Eh]: n };
+}), Nh = (e) => ({
 	table: e.table,
 	op: e.op,
 	traceId: e.traceId ?? null,
 	subjectId: e.subjectId ?? null,
 	procedure: e.procedure ?? null
-}), Nh = class {
+}), Ph = class {
 	def;
 	deps;
 	exposure;
@@ -8879,7 +8879,7 @@ behind quietly.` + n;
 	constructor(e, t) {
 		this.def = e, this.deps = t, this.now = t.now ?? Date.now, this.declaredVariants = new Set(Ch(e));
 		let n = (e) => this.variantOf(e);
-		this.exposure = jh(n), this.metricIsCount = e.metric.kind === "count", this.metric = this.metricIsCount ? this.exposure : Ah(e.metric, n);
+		this.exposure = Mh(n), this.metricIsCount = e.metric.kind === "count", this.metric = this.metricIsCount ? this.exposure : jh(e.metric, n);
 	}
 	variantOf(e) {
 		if (e == null) return null;
@@ -8911,7 +8911,7 @@ behind quietly.` + n;
 		};
 		return this.exposure.apply(r), this.metricIsCount || this.metric.apply(r), this.lastUpdatedAt = new Date(this.now()), {
 			result: this.result(),
-			cause: Mh(e)
+			cause: Nh(e)
 		};
 	}
 	result() {
@@ -8953,7 +8953,7 @@ behind quietly.` + n;
 	get isSeeded() {
 		return this.seeded;
 	}
-}, Ph = (e) => {
+}, Fh = (e) => {
 	let t = e.now ?? Date.now, n = e.log, r = /* @__PURE__ */ new Set(), i = /* @__PURE__ */ new Map(), a = (e) => {
 		for (let t of r) try {
 			t(e);
@@ -8970,7 +8970,7 @@ behind quietly.` + n;
 	}), s = /* @__PURE__ */ new Map();
 	for (let { definition: r } of e.discovered) {
 		if (i.has(r.name)) throw Error(`experiment: duplicate name '${r.name}' — names must be unique across all experiments`);
-		let e = new Nh(r, {
+		let e = new Ph(r, {
 			queryBase: o(r.on.table),
 			now: t,
 			...n === void 0 ? {} : { log: n }
@@ -9012,14 +9012,14 @@ behind quietly.` + n;
 		},
 		registered: [...i.keys()]
 	};
-}, Fh = F("_voltro_wakeups", {
+}, Ih = F("_voltro_wakeups", {
 	id: M({ prefix: "wakeup" }),
 	tenantId: I(),
 	kind: I(),
 	refId: I(),
 	wakeAt: L(),
 	status: I()
-}).index(["status", "wakeAt"]).index(["tenantId"]), Ih = async (e) => {
+}).index(["status", "wakeAt"]).index(["tenantId"]), Lh = async (e) => {
 	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Nf(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
@@ -9034,11 +9034,11 @@ behind quietly.` + n;
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, Lh = (e, t = 1e3) => {
+}, Rh = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await Ih(e);
+				await Lh(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -9048,10 +9048,10 @@ behind quietly.` + n;
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, Rh = (e) => ({ wake: async () => {
+}, zh = (e) => ({ wake: async () => {
 	await e.start();
-} }), zh = (e) => new Promise((t) => setTimeout(t, e)), Bh = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? zh, i = e.spawnImpl ?? Tn, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), Bh = (e) => new Promise((t) => setTimeout(t, e)), Vh = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Bh, i = e.spawnImpl ?? Tn, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -9105,11 +9105,11 @@ behind quietly.` + n;
 		},
 		stop: m
 	};
-}, Vh = async (e) => {
+}, Hh = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
 	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Pf(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Hh = (e, t = Date.now) => {
+}, Uh = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -9121,7 +9121,7 @@ behind quietly.` + n;
 			n = void 0;
 		}
 	};
-}, Uh = () => {
+}, Wh = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -9139,7 +9139,7 @@ behind quietly.` + n;
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, Wh = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Gh = (e, t, n, r) => new Promise((i, a) => {
+}, Gh = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Kh = (e, t, n, r) => new Promise((i, a) => {
 	let o = Wt.request({
 		host: n,
 		port: r,
@@ -9150,7 +9150,7 @@ behind quietly.` + n;
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), Kh = (e, t, n, r, i) => new Promise((a, o) => {
+}), qh = (e, t, n, r, i) => new Promise((a, o) => {
 	let s = Wt.request({
 		host: r,
 		port: i,
@@ -9165,21 +9165,21 @@ behind quietly.` + n;
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), qh = (e) => {
-	let t = Wh({
+}), Jh = (e) => {
+	let t = Gh({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
 	}), n = e.activity, r = Wt.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Gh(r, i, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Kh(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Kh(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => qh(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Jh = async (e) => {
+}, Yh = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -9196,15 +9196,15 @@ behind quietly.` + n;
 	} catch {
 		return 0;
 	}
-}, Yh = async (e) => {
-	let t = Rh(e.supervisor), n = await Ih({
+}, Xh = async (e) => {
+	let t = zh(e.supervisor), n = await Lh({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await Vh({
+	let r = await Hh({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -9214,12 +9214,12 @@ behind quietly.` + n;
 		woke: n,
 		stopped: i
 	};
-}, Xh = async (e) => {
-	let t = Hh(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Uh(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Zh = async (e) => {
+	let t = Uh(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Wh(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = qh({
+	}, s = Jh({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -9238,7 +9238,7 @@ behind quietly.` + n;
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Jh(e.store)), await Yh({
+				if (a && (i = await Yh(e.store)), await Xh({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -9261,14 +9261,14 @@ behind quietly.` + n;
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Zh = (e) => e, Qh = class extends y.TaggedError()("AnalyticsError", {
+}, Qh = (e) => e, $h = class extends y.TaggedError()("AnalyticsError", {
 	provider: y.String,
 	operation: y.String,
 	cause: y.String
-}) {}, $h = class extends y.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, eg = class extends y.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: y.String,
 	capability: y.String
-}) {}, eg = class extends n.Tag("@voltro/AnalyticsSink")() {}, tg = (e, t) => ({
+}) {}, tg = class extends n.Tag("@voltro/AnalyticsSink")() {}, ng = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -9287,20 +9287,20 @@ behind quietly.` + n;
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), ng = () => o.gen(function* () {
-	let e = yield* eg, t = yield* o.serviceOption(gt), n = h.match(t, {
+}), rg = () => o.gen(function* () {
+	let e = yield* tg, t = yield* o.serviceOption(gt), n = h.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : tg(e, n);
-}), rg = "noop", ig = () => {
-	let e = (e) => o.fail(new $h({
-		provider: rg,
+	return n === null ? e : ng(e, n);
+}), ig = "noop", ag = () => {
+	let e = (e) => o.fail(new eg({
+		provider: ig,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: rg,
+			provider: ig,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -9314,8 +9314,8 @@ behind quietly.` + n;
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, ag = (e) => {
-	if (e.length === 0) return ig();
+}, og = (e) => {
+	if (e.length === 0) return ag();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -9332,7 +9332,7 @@ behind quietly.` + n;
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? o.fail(new $h({
+		return r === void 0 ? o.fail(new eg({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -9359,11 +9359,11 @@ behind quietly.` + n;
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, og = (e) => {
+}, sg = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => ag(e.map((e) => e.build(t))),
+		build: (t) => og(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => o.forEach(e, (e) => e.initialize ? e.initialize(t) : o.void, {
 			concurrency: 1,
@@ -9374,34 +9374,34 @@ behind quietly.` + n;
 			discard: !0
 		}) } : {}
 	};
-}, sg = {
+}, cg = {
 	kind: "noop",
-	build: () => ig()
-}, cg = f.counter("voltro_analytics_mirror_forwarded_total", { description: "Reactive-table changes successfully applied to the analytics mirror." }), lg = f.counter("voltro_analytics_mirror_retries_total", { description: "Analytics-mirror write attempts that failed (each is retried until the budget runs out)." }), ug = f.counter("voltro_analytics_mirror_repair_queued_total", { description: "Analytics-mirror changes whose retries were exhausted and were queued for repair." }), dg = f.counter("voltro_analytics_mirror_dropped_total", { description: "Analytics-mirror changes provably lost (repair queue overflow)." }), fg = (e) => {
+	build: () => ag()
+}, lg = f.counter("voltro_analytics_mirror_forwarded_total", { description: "Reactive-table changes successfully applied to the analytics mirror." }), ug = f.counter("voltro_analytics_mirror_retries_total", { description: "Analytics-mirror write attempts that failed (each is retried until the budget runs out)." }), dg = f.counter("voltro_analytics_mirror_repair_queued_total", { description: "Analytics-mirror changes whose retries were exhausted and were queued for repair." }), fg = f.counter("voltro_analytics_mirror_dropped_total", { description: "Analytics-mirror changes provably lost (repair queue overflow)." }), pg = (e) => {
 	o.runSync(f.increment(e));
-}, pg = (t) => e.pretty(t), mg = {
+}, mg = (t) => e.pretty(t), hg = {
 	retryAttempts: 5,
 	retryBaseDelayMs: 100,
 	retryMaxDelayMs: 3e4,
 	repairIntervalMs: 6e4,
 	repairQueueLimit: 1e4,
 	versionStateLimit: 1e5
-}, hg = (e) => {
+}, gg = (e) => {
 	let t = process.env[e];
 	if (t === void 0 || t.trim() === "") return;
 	let n = Number(t);
 	return Number.isFinite(n) && n >= 0 ? n : void 0;
-}, gg = (e) => {
-	let t = mg, n = e ?? {};
+}, _g = (e) => {
+	let t = hg, n = e ?? {};
 	return {
-		retryAttempts: Math.max(1, n.retryAttempts ?? hg("VOLTRO_ANALYTICS_MIRROR_RETRY_ATTEMPTS") ?? t.retryAttempts),
-		retryBaseDelayMs: n.retryBaseDelayMs ?? hg("VOLTRO_ANALYTICS_MIRROR_RETRY_BASE_MS") ?? t.retryBaseDelayMs,
-		retryMaxDelayMs: n.retryMaxDelayMs ?? hg("VOLTRO_ANALYTICS_MIRROR_RETRY_MAX_MS") ?? t.retryMaxDelayMs,
-		repairIntervalMs: n.repairIntervalMs ?? hg("VOLTRO_ANALYTICS_MIRROR_REPAIR_INTERVAL_MS") ?? t.repairIntervalMs,
-		repairQueueLimit: Math.max(1, n.repairQueueLimit ?? hg("VOLTRO_ANALYTICS_MIRROR_REPAIR_QUEUE_LIMIT") ?? t.repairQueueLimit),
-		versionStateLimit: Math.max(1, n.versionStateLimit ?? hg("VOLTRO_ANALYTICS_MIRROR_VERSION_STATE_LIMIT") ?? t.versionStateLimit)
-	};
-}, _g = {
+		retryAttempts: Math.max(1, n.retryAttempts ?? gg("VOLTRO_ANALYTICS_MIRROR_RETRY_ATTEMPTS") ?? t.retryAttempts),
+		retryBaseDelayMs: n.retryBaseDelayMs ?? gg("VOLTRO_ANALYTICS_MIRROR_RETRY_BASE_MS") ?? t.retryBaseDelayMs,
+		retryMaxDelayMs: n.retryMaxDelayMs ?? gg("VOLTRO_ANALYTICS_MIRROR_RETRY_MAX_MS") ?? t.retryMaxDelayMs,
+		repairIntervalMs: n.repairIntervalMs ?? gg("VOLTRO_ANALYTICS_MIRROR_REPAIR_INTERVAL_MS") ?? t.repairIntervalMs,
+		repairQueueLimit: Math.max(1, n.repairQueueLimit ?? gg("VOLTRO_ANALYTICS_MIRROR_REPAIR_QUEUE_LIMIT") ?? t.repairQueueLimit),
+		versionStateLimit: Math.max(1, n.versionStateLimit ?? gg("VOLTRO_ANALYTICS_MIRROR_VERSION_STATE_LIMIT") ?? t.versionStateLimit)
+	};
+}, vg = {
 	tables: [],
 	detach: () => {},
 	flush: () => Promise.resolve(),
@@ -9412,10 +9412,10 @@ behind quietly.` + n;
 		awaitingRepair: 0,
 		dropped: 0
 	})
-}, vg = (e, t) => `${e}\u0000${String(t)}`, yg = (e) => {
+}, yg = (e, t) => `${e}\u0000${String(t)}`, bg = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return _g;
-	let s = gg(e), c = e.run ?? ((e) => o.runPromise(e)), l = i.primaryKey ?? "id", u = new Set(i.tables), d = n.info.provider, f = t.changeScope === "fleet", p = 0, m = () => {
+	if (i === void 0 || i.tables.length === 0) return vg;
+	let s = _g(e), c = e.run ?? ((e) => o.runPromise(e)), l = i.primaryKey ?? "id", u = new Set(i.tables), d = n.info.provider, f = t.changeScope === "fleet", p = 0, m = () => {
 		let e = Date.now() * 1e3;
 		return p = e > p ? e : p + 1, p;
 	}, h = /* @__PURE__ */ new Map(), g = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Map(), y = /* @__PURE__ */ new Set(), b = 0, x = 0, S = /* @__PURE__ */ new Map(), C = (e) => {
@@ -9435,7 +9435,7 @@ behind quietly.` + n;
 			primaryKeyValue: t.pk
 		}).pipe(o.map((e) => (n.baseline = e ?? 0, n.baseline))) : o.succeed(n.baseline);
 	}), T = (e, t, n) => n.kind === "clock" ? o.succeed(n.version) : w(e, t).pipe(o.map((e) => e + n.ordinal)), E = v.exponential(a.millis(Math.max(1, s.retryBaseDelayMs)), 2).pipe(v.either(v.spaced(a.millis(Math.max(1, s.retryMaxDelayMs)))), v.intersect(v.recurs(s.retryAttempts - 1))), ee = (e, t) => o.gen(function* () {
-		let n = yield* T(vg(e.table, e.pk), e, t.stamp);
+		let n = yield* T(yg(e.table, e.pk), e, t.stamp);
 		yield* t.kind === "upsert" ? i.upsert({
 			table: e.table,
 			row: t.row,
@@ -9446,27 +9446,27 @@ behind quietly.` + n;
 			version: n
 		});
 	}), D = (e) => e instanceof Error ? `${e.name}: ${e.message}` : String(e), te = (e, t) => ee(e, t).pipe(o.tapErrorCause(() => o.sync(() => {
-		fg(lg);
+		pg(ug);
 	})), o.retry(E), o.matchCauseEffect({
 		onSuccess: () => o.sync(() => {
-			b += 1, fg(cg);
+			b += 1, pg(lg);
 		}),
 		onFailure: (n) => o.sync(() => {
-			ne(e, t, pg(n));
+			ne(e, t, mg(n));
 		})
 	})), ne = (e, t, n) => {
-		let i = vg(e.table, e.pk);
+		let i = yg(e.table, e.pk);
 		for (r.warn("analytics-mirror: change forward failed, queued for repair", {
 			provider: d,
 			table: e.table,
 			op: t.kind,
 			attempts: s.retryAttempts,
 			err: n
-		}), _.set(i, e), fg(ug); _.size > s.repairQueueLimit;) {
+		}), _.set(i, e), pg(dg); _.size > s.repairQueueLimit;) {
 			let e = _.keys().next();
 			if (e.done === !0) break;
 			let t = _.get(e.value);
-			_.delete(e.value), x += 1, fg(dg), r.error("analytics-mirror: repair queue full — change dropped, mirror is diverged", {
+			_.delete(e.value), x += 1, pg(fg), r.error("analytics-mirror: repair queue full — change dropped, mirror is diverged", {
 				provider: d,
 				table: t?.table ?? "<unknown>",
 				limit: s.repairQueueLimit
@@ -9496,7 +9496,7 @@ behind quietly.` + n;
 			y.delete(t);
 		});
 	}, ae = (e, t) => {
-		let n = vg(e.table, e.pk);
+		let n = yg(e.table, e.pk);
 		h.set(n, t), !g.has(n) && (g.add(n), k(ie(n, e)));
 	}, A = (e) => o.tryPromise({
 		try: () => t.query({
@@ -9518,11 +9518,11 @@ behind quietly.` + n;
 			table: t.table,
 			row: r,
 			version: n
-		}), _.delete(e), b += 1, fg(cg), !0;
+		}), _.delete(e), b += 1, pg(lg), !0;
 	}).pipe(o.catchAllCause((e) => o.sync(() => (r.warn("analytics-mirror: repair pass failed, key stays queued", {
 		provider: d,
 		table: t.table,
-		err: pg(e)
+		err: mg(e)
 	}), !1)))), j = () => o.gen(function* () {
 		let e = [..._.entries()];
 		if (e.length === 0) return 0;
@@ -9546,7 +9546,7 @@ behind quietly.` + n;
 			kind: "clock",
 			version: m()
 		};
-		let t = C(vg(e.table, e.pk));
+		let t = C(yg(e.table, e.pk));
 		return t.ordinal += 1, {
 			kind: "ordinal",
 			ordinal: t.ordinal
@@ -9602,7 +9602,7 @@ behind quietly.` + n;
 			dropped: x
 		})
 	};
-}, bg = (e) => {
+}, xg = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
@@ -9628,45 +9628,45 @@ behind quietly.` + n;
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, xg = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Sg = class extends y.TaggedError()("AggregateStale", {
+}, Sg = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Cg = class extends y.TaggedError()("AggregateStale", {
 	name: y.String,
 	ageMs: y.Number,
 	maxAgeMs: y.Number
-}) {}, Cg = class extends y.TaggedError()("AggregateNotFound", { name: y.String }) {}, wg = class extends y.TaggedError()("AggregateError", {
+}) {}, wg = class extends y.TaggedError()("AggregateNotFound", { name: y.String }) {}, Tg = class extends y.TaggedError()("AggregateError", {
 	name: y.String,
 	operation: y.String,
 	cause: y.String
-}) {}, Tg = class extends n.Tag("@voltro/AggregateRegistry")() {}, Eg = (e) => o.gen(function* () {
-	return (yield* Tg).getHandle(e);
-}), Dg = (e, t, n) => {
+}) {}, Eg = class extends n.Tag("@voltro/AggregateRegistry")() {}, Dg = (e) => o.gen(function* () {
+	return (yield* Eg).getHandle(e);
+}), Og = (e, t, n) => {
 	if (e.crossTenant || !t.has(e.table) || n == null) return e;
 	let r = O("tenantId", n);
 	return {
 		...e,
 		predicate: e.predicate ? C(e.predicate, r) : r
 	};
-}, Og = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), kg = (e) => e?.type === "user" && e.tenantId === "", Ag = (e, t) => {
+}, kg = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), Ag = (e) => e?.type === "user" && e.tenantId === "", jg = (e, t) => {
 	if (e.includeDeleted || !t.has(e.table)) return e;
 	let n = fe("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? C(e.predicate, n) : n
 	};
-}, jg = (e) => (t, n) => {
+}, Mg = (e) => (t, n) => {
 	e.observe?.beforeScope?.({ ...t }, n);
-	let r = Ag(Dg(t, e.tenantScopedTables, n.tenantId), e.softDeleteScopedTables);
+	let r = jg(Og(t, e.tenantScopedTables, n.tenantId), e.softDeleteScopedTables);
 	return e.observe?.afterScope?.({ ...r }), r;
-}, Mg = (e, t) => t, Ng = (t) => o.runPromiseExit(t).then((t) => {
+}, Ng = (e, t) => t, Pg = (t) => o.runPromiseExit(t).then((t) => {
 	if (c.isSuccess(t)) return t.value;
 	let n = e.failureOption(t.cause);
 	throw h.isSome(n) ? n.value : e.squash(t.cause);
-}), Pg = (e, t) => e.pipe(o.provideService(gt, t)), Fg = async (e, t, n, r) => {
-	let i = await o.runPromise(St(t, e.guards, n, {
+}), Fg = (e, t) => e.pipe(o.provideService(gt, t)), Ig = async (e, t, n, r) => {
+	let i = await o.runPromise(z(t, e.guards, n, {
 		defaultDeny: r === !0,
 		procedure: e.name
 	}));
 	if (i) throw i;
-}, Ig = async (e, t, n, r) => {
+}, Lg = async (e, t, n, r) => {
 	e.requiresApproval !== void 0 && await em({
 		procedure: e.name,
 		kind: t,
@@ -9675,16 +9675,16 @@ behind quietly.` + n;
 		input: r,
 		traceId: n.traceId
 	});
-}, Lg = async (e) => {
+}, Rg = async (e) => {
 	if (mi() === void 0) return e;
-	let t = await Ng(_i(e.subject, (e) => {
+	let t = await Pg(_i(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, Rg = (e) => {
+}, zg = (e) => {
 	let t = e.descriptor.target;
 	if (t == null) return [];
 	let n = Array.isArray(t) ? t : [t], r = /* @__PURE__ */ new Set();
@@ -9693,7 +9693,7 @@ behind quietly.` + n;
 		typeof t == "string" && t.length > 0 && r.add(t);
 	}
 	return [...r];
-}, zg = async (t) => {
+}, Bg = async (t) => {
 	let n = `${t.kind}.${t.name}`, r = Date.now(), i = "ok";
 	try {
 		if (t.interceptor) {
@@ -9723,41 +9723,41 @@ behind quietly.` + n;
 			status: i
 		});
 	}
-}, Bg = /* @__PURE__ */ new Set([1213, 1205]), Vg = /* @__PURE__ */ new Set([
+}, Vg = /* @__PURE__ */ new Set([1213, 1205]), Hg = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), Hg = (e) => {
+]), Ug = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && Bg.has(e.errno) || typeof e.code == "string" && Vg.has(e.code) || typeof e.sqlState == "string" && Vg.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && Vg.has(e.errno) || typeof e.code == "string" && Hg.has(e.code) || typeof e.sqlState == "string" && Hg.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, Ug = 3, Wg = (e) => new Promise((t) => setTimeout(t, e)), Gg = async (e, t) => {
-	let n = t?.delay ?? ((e) => Wg(e * 20 + Math.floor(Math.random() * 30)));
+}, Wg = 3, Gg = (e) => new Promise((t) => setTimeout(t, e)), Kg = async (e, t) => {
+	let n = t?.delay ?? ((e) => Gg(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= Ug || !Hg(e)) throw e;
+		if (t >= Wg || !Ug(e)) throw e;
 		await n(t);
 	}
-}, Kg = (e) => (t, n, r) => zg({
+}, qg = (e) => (t, n, r) => Bg({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
 	requestContext: r,
-	target: Rg(t),
+	target: zg(t),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await Fg(t.descriptor, r.subject, n, e.defaultDeny), await Ig(t.descriptor, "mutation", r, n);
-		let i = await Lg(r), a = [], s = await Gg(async () => (a.length = 0, e.store.transactional(async (s) => {
+		await Ig(t.descriptor, r.subject, n, e.defaultDeny), await Lg(t.descriptor, "mutation", r, n);
+		let i = await Rg(r), a = [], s = await Kg(async () => (a.length = 0, e.store.transactional(async (s) => {
 			let c = e.undoCapture?.(s), l = fp(c ? c.tx : s), u = e.buildContext(i, l.tx, { afterCommit: (e) => {
 				a.push(e);
-			} }), d = t.executor(n, u), f = o.isEffect(d) ? await e.runEffect(Pg(d, r.subject), u.store) : await d;
+			} }), d = t.executor(n, u), f = o.isEffect(d) ? await e.runEffect(Fg(d, r.subject), u.store) : await d;
 			return c && await c.persist(u.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -9771,36 +9771,40 @@ behind quietly.` + n;
 		for (let e of a) await e();
 		return s;
 	}
-}), qg = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Jg = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Yg = (e) => {
+}), Jg = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, Yg = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, Xg = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, Xg = (e, t, n) => (r) => () => {
+}, Zg = (e, t, n) => (r) => () => {
 	let i = e.descriptor.guards;
-	return (!i || i.length === 0) && n !== !0 ? Promise.resolve(null) : o.runPromise(St(r, i, t, {
+	return (!i || i.length === 0) && n !== !0 ? Promise.resolve(null) : o.runPromise(z(r, i, t, {
 		defaultDeny: n === !0,
 		procedure: e.descriptor.name
 	}));
-}, Zg = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = Xg(t, n, e.defaultDeny)(r.subject), s = async () => {
+}, Qg = (e, t) => e.rowFilter !== void 0 || mi() === void 0 ? t(e) : o.promise(() => Rg(e)).pipe(o.flatMap((e) => {
+	let n = t(e);
+	return o.isEffect(n) ? n : o.succeed(n);
+})), $g = (e) => (t, n) => (r) => {
+	if (r.rowFilter === void 0 && mi() !== void 0) return Qg(r, (r) => $g(e)(t, n)(r));
+	let i = e.buildContext(r), a = Zg(t, n, e.defaultDeny)(r.subject), s = async () => {
 		let i = await a();
 		if (i) throw i;
-		let s = e.buildContext(await Lg(r)), c = t.executor(n, s);
-		return o.isEffect(c) ? o.runPromise(e.provideEffect(Pg(c, r.subject), s.store)) : qg(await Promise.resolve(c));
+		let s = e.buildContext(await Rg(r)), c = t.executor(n, s);
+		return o.isEffect(c) ? o.runPromise(e.provideEffect(Fg(c, r.subject), s.store)) : Jg(await Promise.resolve(c));
 	}, c = (n) => {
-		let i = qg(n);
-		return Jg(i) ? e.finalize(i, r) : {
+		let i = Jg(n);
+		return Yg(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: Yg(t),
+			dependentTables: Xg(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: s
 		};
 	}, l = () => {
 		let a = t.executor(n, i);
-		return o.isEffect(a) ? e.provideEffect(Pg(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
+		return o.isEffect(a) ? e.provideEffect(Fg(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
 	}, u = () => {
 		let i = t.descriptor.guards;
-		return (!i || i.length === 0) && e.defaultDeny !== !0 ? l() : St(r.subject, i, n, {
+		return (!i || i.length === 0) && e.defaultDeny !== !0 ? l() : z(r.subject, i, n, {
 			defaultDeny: e.defaultDeny === !0,
 			procedure: t.descriptor.name
 		}).pipe(o.flatMap((e) => {
@@ -9822,14 +9826,14 @@ behind quietly.` + n;
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, Qg = (e) => async (t, n, r) => {
-	let i = await Lg(r), a = Zg(e)(t, n)(i), s = o.isEffect(a) ? await Ng(a) : a;
+}, e_ = (e) => async (t, n, r) => {
+	let i = await Rg(r), a = $g(e)(t, n)(i), s = o.isEffect(a) ? await Pg(a) : a;
 	return Mi(s) ? s.value : e.queryRows(s, i);
-}, $g = (e) => (t, n, r, i) => {
+}, t_ = (e) => (t, n, r, i) => {
 	let a = !1, s;
 	return (async () => {
 		try {
-			let c = await Lg(r), l = Zg(e)(t, n)(c), u = o.isEffect(l) ? await Ng(l) : l, d = (e) => i(e), f = Mi(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c);
+			let c = await Rg(r), l = $g(e)(t, n)(c), u = o.isEffect(l) ? await Pg(l) : l, d = (e) => i(e), f = Mi(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c);
 			a ? f() : s = f;
 		} catch (e) {
 			i({
@@ -9840,25 +9844,25 @@ behind quietly.` + n;
 	})(), () => {
 		a = !0, s?.();
 	};
-}, e_ = (e) => (t, n, r) => zg({
+}, n_ = (e) => (t, n, r) => Bg({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
 	requestContext: r,
-	target: Rg(t),
+	target: zg(t),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await Fg(t.descriptor, r.subject, n, e.defaultDeny), await Ig(t.descriptor, "action", r, n);
-		let i = e.buildContext(await Lg(r)), a = t.executor(n, i);
-		return o.isEffect(a) ? e.runEffect(Pg(a, r.subject), i.store) : a;
+		await Ig(t.descriptor, r.subject, n, e.defaultDeny), await Lg(t.descriptor, "action", r, n);
+		let i = e.buildContext(await Rg(r)), a = t.executor(n, i);
+		return o.isEffect(a) ? e.runEffect(Fg(a, r.subject), i.store) : a;
 	}
-}), t_ = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, n_ = (e) => typeof e == "string" && e.length > 0 ? e : null, r_ = [
+}), r_ = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, i_ = (e) => typeof e == "string" && e.length > 0 ? e : null, a_ = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], i_ = (e) => r_.some((t) => t in e), a_ = (e, t, n) => {
+], o_ = (e) => a_.some((t) => t in e), s_ = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -9873,14 +9877,14 @@ behind quietly.` + n;
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!i_(e)) return {
+	if (!o_(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = n_(e.updatedBy) ?? n_(e.createdBy), o = t_(e.updatedAt) ?? t_(e.createdAt);
+	let a = i_(e.updatedBy) ?? i_(e.createdBy), o = r_(e.updatedAt) ?? r_(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -9892,12 +9896,12 @@ behind quietly.` + n;
 		attribution: "audit",
 		found: !0
 	};
-}, o_ = (e, t) => {
+}, c_ = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: n_(e.actor) ?? n_(e.changedBy) },
-			at: t_(e.at) ?? t_(e.changedAt),
+			actor: { id: i_(e.actor) ?? i_(e.changedBy) },
+			at: r_(e.at) ?? r_(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -9912,12 +9916,12 @@ behind quietly.` + n;
 		history: n,
 		found: n.length > 0
 	};
-}, s_ = (e) => {
+}, l_ = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, c_ = (e) => {
+}, u_ = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -9937,11 +9941,11 @@ behind quietly.` + n;
 	return {
 		table: e.table,
 		op: e.op,
-		id: s_(e),
+		id: l_(e),
 		fields: t
 	};
-}, l_ = (e) => {
-	let t = e.map(c_);
+}, d_ = (e) => {
+	let t = e.map(u_);
 	return {
 		rows: t,
 		summary: {
@@ -9950,21 +9954,21 @@ behind quietly.` + n;
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, u_ = class extends Error {
+}, f_ = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, d_ = async (e, t) => {
+}, p_ = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new u_();
+			throw n = await t(e), r = !0, new f_();
 		});
 	} catch (e) {
-		if (!(e instanceof u_)) throw e;
+		if (!(e instanceof f_)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, f_ = "framework-runtime";
+}, m_ = "framework-runtime";
 //#endregion
-export { Ao as API_CSP, fc as API_KEYS_TABLE, Np as APPROVALS_TABLE, Hu as AccessDenied, wg as AggregateError, Om as AggregateMaintainer, Cg as AggregateNotFound, Tg as AggregateRegistry, Sg as AggregateStale, $h as AnalyticsCapabilityNotSupported, Qh as AnalyticsError, eg as AnalyticsSink, Hf as CLAIM_RETENTION_BUCKETS, J as CONNECTIONS_TABLE, Vl as CONNECTION_GRANTS_TABLE, of as CircuitBreaker, rf as CircuitOpen, uu as ConnectionNotConnected, hh as CostAccountant, ch as CostRegistry, mg as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Pp as DEFAULT_APPROVAL_EXPIRY_MS, Vf as DEFAULT_CLAIM_BUCKET_MS, $n as DEFAULT_DELIVERY_CONCURRENCY, Mo as DEFAULT_HSTS, Yf as DEFAULT_MAX_IDLE_INTERVAL_MS, _s as DEFAULT_MAX_RPC_BODY_BYTES, er as DEFAULT_RAW_READ_TRACKING_LIMIT, cu as DEFAULT_REFRESH_SKEW_MS, li as DEFAULT_ROW_FILTER_RETRY, Rf as DORMANCY_WAKEUP_TENANT, ja as DeleteBuilder, ki as Dispatcher, hl as EVENT_CLIENT_QUEUE_SIZE, gl as EVENT_LATEST_QUEUE_SIZE, Dc as EffectStore, ul as EventBus, eh as ExpectationEvaluator, Wm as ExpectationRegistry, Nh as ExperimentEvaluator, wh as ExperimentRegistry, Su as GRANT_TTL_MS, _h as HOLDOUT_VARIANT, jo as HTML_CSP, qn as InMemoryDataStore, Pn as IndexedMatcher, Sl as InstanceMembership, Dn as LinearScanMatcher, p as MetricBoundaries, rg as NOOP_ANALYTICS_PROVIDER, gi as NO_ROW_FILTER, vo as NO_TRUSTED_PROXIES, wa as NoRowFound, El as OUTBOX_ATTEMPTS_TABLE, Nl as OUTBOX_ATTEMPT_LOG_CAP, q as OUTBOX_TABLE, Ta as OptimisticLockError, Vu as REBAC_ADMIN_SCOPE, lu as REFRESH_LEASE_MS, f_ as RUNTIME_NAME, Rm as ReactionRateLimiter, eo as ReplicatedDataStore, ci as RowFilterUnavailable, Lf as SCHEDULE_SUBJECT, Ec as SYSTEM_SUBJECT, ka as SelectBuilder, La as ServerOnlyColumnWrite, pd as SsrfBlockedError, Pa as StoreOperationFailed, Ln as SubscriptionRegistry, Fa as TableValidationFailed, Ia as TenantRowNotFound, Na as TenantScopeViolation, pm as TimelineRecorder, vp as UndoBoundaryError, bp as UndoStack, Bo as UnverifiedWebhookRoute, Aa as UpdateBuilder, bd as VOLTRO_AUDIT_MIXIN_ID, Sd as VOLTRO_EXPIRES_MIXIN_ID, wd as VOLTRO_LOCAL_FIRST_MIXIN_ID, xd as VOLTRO_SOFT_DELETE_MIXIN_ID, Cd as VOLTRO_TENANT_MIXIN_ID, Lo as WEBHOOK_VERIFICATION_PROPERTY, Pc as WorkflowDeferredResultError, Hc as WorkflowPayloadError, Fc as WorkflowRateLimitedError, Ic as WorkflowSingletonHeldError, qi as _connectionStreamCount, Ji as _resetConnectionCredentialsForTest, Fp as _voltroApprovalsTable, Ul as _voltroConnectionGrantsTable, Bl as _voltroConnectionsTable, km as _voltroRebacTuplesTable, tp as _voltroScheduleClaimsTable, ep as _voltroScheduleRunsTable, np as _voltroTracesTable, rp as _voltroUndoLogTable, Fh as _voltroWakeupsTable, il as _voltroWorkflowEventDeliveriesTable, rl as _voltroWorkflowEventsTable, Ua as actingUserId, Tc as apiKeyManagementRoutes, Ui as applyConnectionCredential, Ba as applyDefined, Em as applyDelta, Sp as applyInverse, Cp as applyInverses, tf as applyPluginRefRules, bi as applyRowFilter, xi as applyRowFilterToDescriptor, Ag as applySoftDeleteScope, Dg as applyTenantScope, jp as applyUndoInvocation, Vp as approvalIntentKey, rm as approvalNonce, am as approvalsPendingExecutor, Qu as assertCan, ql as assertConnectionCipherConfigured, Vo as assertWebhookRoutesDeclareVerification, Sh as assignVariant, yg as attachAnalyticsMirror, th as attachExpectations, Ph as attachExperiments, gh as attachFinops, ks as awaitServerListening, Ml as backoffMs, Eu as beginOAuthConnect, zi as bindConnectionCredential, yl as bindEvent, gs as bindMutation, rs as bindStream, ns as bindSubscription, Zo as bindSubscriptionUntyped, wm as buildIvmState, l_ as buildPreview, Mm as buildRebacInterceptor, Pm as buildRebacReadFilter, Ja as buildSubjectKey, Is as buildTracingLayer, Gd as cacheScopeLeaks, Zs as cachedBackend, Zu as can, Ef as cancelWakeup, Bp as canonicalJson, Fn as canonicalize, Uf as claimGraceMs, go as classifyRequestOrigin, ym as classifyShape, $p as clearApprovalGate, mu as clearConnectionRefreshFlights, qu as clearResourcePolicies, ee as clearRetentions, lf as clearSystemStoreHandle, nf as collectPluginRefRules, bf as compileCron, Du as completeOAuthConnect, og as composeAnalytics, ag as composeAnalyticsSinks, Cu as connectionCallbackPath, Kl as connectionLabel, Jh as countRunningWorkflows, ni as counter, Sf as cronOccurrences, Bd as crud, or as currentRawReads, rd as currentRequestLoader, $a as currentRoutingContext, ta as currentTraceContext, Sc as dataStoreApiKeyStore, ic as dataStoreIdempotencyStore, lc as dataStoreKvStore, tm as decideApproval, om as decideApprovalInvocation, da as decryptField, fs as defectMessage, bg as defineAggregate, Gl as defineConnection, oh as defineCostBudget, Qc as defineEventTrigger, Mg as defineExecutor, Hm as defineExpectation, yh as defineExperiment, kl as defineOutboxHandler, Fm as defineReaction, Wu as defineResourcePolicy, yf as defineSchedule, Zh as defineSubscriber, Di as deliveredRowCount, ia as deriveKey, c_ as diffChange, Ds as drainForShutdown, Ll as drainOutbox, Nf as dueWakeups, Xu as effectiveRelations, Ad as emptySchemaRegistry, _a as enableGraphObservation, ua as encryptField, em as enforceApproval, nd as enterRequestLoader, Gs as envSecretsBackend, mp as evaluateTouchedRules, Wr as eventMetricTagCacheSizeForTests, ou as exchangeAuthorizationCode, Qi as externalSpanFromTraceparent, Yn as extractDbCause, In as fingerprintFor, Ti as forbiddenColumnsForSubject, nu as forgetCredential, Kd as formatCacheScopeLeaks, Wd as formatServerOnlyLeaks, Xi as formatTraceparent, Yd as formatUnresolvedSources, xp as forwardChangeFromCdc, Cc as frameworkApiKeyStrategy, ri as gauge, mc as generateApiKeyToken, Qp as getApprovalGate, Bi as getConnectionCredential, ju as getConnectionResolver, Ri as getCredentialExpiry, G as getFieldCipher, Gu as getResourcePolicy, mi as getRowFilter, uf as getSystemStoreHandle, hm as getTimelineRecorder, cd as getTupleSource, xm as groupKeyOf, xh as hashUnitInterval, ii as histogramMetric, o_ as historyProvenance, Qs as httpSecretsBackend, Cn as inspectWorkflow, Zp as installApprovalGate, ld as installPolicyGuardResolver, Ki as interruptConnectionStreams, gp as invertChange, So as ipToBytes, xg as isAggregateDefinition, sh as isCostBudgetDefinition, Og as isEmptyTenantScopedRead, Um as isExpectationDefinition, bh as isExperimentDefinition, Xn as isForeignKeyViolation, Vh as isIdleNow, ls as isInfraError, va as isObservingGraph, kg as isOrglessUserSubject, Zn as isQueryTimeout, yp as isSafeToApply, _f as isScheduleDefinition, $d as isSoftDelete, ao as isStateChangingMethod, Eo as isTrustedProxy, $c as isWorkflowEventTriggerDefinition, ir as isolateRawReadScope, Cm as ivmValue, a_ as lastWriteProvenance, ru as listConnectionStates, Ku as listResourcePolicies, me as listRetentionConflicts, he as listRetentions, Am as loadResourceTuples, Nm as loadSubjectTuples, pf as localityAwareSelector, e_ as makeActionRunner, Wf as makeAdvisoryLockCoordinator, aa as makeAesCipher, _c as makeApiKeyService, yd as makeApiKeyUsageBuffer, xc as makeApiKeyUsageFlusher, Qn as makeAppAccess, Yp as makeApprovalGate, uc as makeAsyncKv, ff as makeAuthMiddlewareLayers, vl as makeBufferGapDetector, Ws as makeBufferingSpanProcessor, Jl as makeConnectionRegistry, Nu as makeConnectionResolver, Pu as makeConnectionsFacade, $f as makeCoordinatedScheduler, dd as makeDataLoader, Bu as makeDisconnectConnectionExecutor, Ac as makeEffectStoreLayer, ml as makeEventPublisher, al as makeEventsFacade, oa as makeFieldCipher, Ma as makeFluentStore, Hh as makeIdleGate, Jc as makeLazyWorkflowFacade, Lu as makeListConnectionsExecutor, ms as makeMutationOutputCodec, Kg as makeMutationRunner, Qg as makeOneShotQueryRunner, co as makeOriginGuardExemption, jl as makeOutboxFacade, Kc as makePostCommitWorkflowFacade, Rh as makeProcessAdapter, Zg as makeQueryDescriptorProducer, jg as makeQueryFinalizer, Xg as makeQueryReauthorizer, $g as makeQuerySubscriber, Uh as makeRouterActivity, fp as makeRuleCapture, Td as makeSchemaRegistry, Ru as makeStartConnectionExecutor, zu as makeSubmitTokenExecutor, lp as makeUndoCapture, Wh as makeWakeGate, qh as makeWakeProxyServer, Gc as makeWorkflowFacade, qc as makeWorkflowFacadeWithCallerContext, Yc as makeWorkflowHandlers, Xc as makeWorkflowLayers, Rc as makeWorkflowRunHandle, Df as markWakeupFired, Tm as materializeIvm, vc as memoryApiKeyStore, hf as memoryReplicationAdapter, qa as memoryRywPositionStore, Hi as mergeCookieHeader, Qf as nextDelay, xf as nextFiring, Pf as nextWakeup, Bh as nodeProcessSupervisor, ig as noopAnalytics, sg as noopAnalyticsSpec, dc as noopKv, yo as normalizeIp, uo as normalizeOrigin, Ca as observeStore, xa as observedGraph, Ss as onProcessShutdown, Ns as otelImportFailure, Ol as outboxAttemptsTable, Tl as outboxTable, Jp as parseApprovalInterval, Zi as parseTraceparent, Uc as payloadPropertyNames, nm as pendingApprovalsFor, Ga as powerOfTwoSelector, d_ as previewInRollback, Ql as projectConnectionState, If as pruneWakeups, fl as publishEvent, cr as rawSqlPreview, Xf as readPollCeilingMs, Ju as rebacPolicyGraph, Li as recordCredentialExpiry, Kr as recordEventDelivered, qr as recordEventDropped, Gr as recordEventPublished, Jr as recordEventSubscribers, ar as recordRawRead, Yr as recordSample, ei as recordScheduleRun, $r as recordSubscriptionActive, Zr as recordSubscriptionDelivery, ba as recordTableAccess, _m as recordTimelineEvent, ti as recordWorkflowRun, Id as redactColumns, um as redactRow, Ya as redisRywPositionStore, Mp as redoUndoInvocation, su as refreshAccessToken, Gi as registerConnectionStream, Ee as registerRetention, Tf as registerWakeup, Rp as rehydrateGuards, Af as releaseWakeup, Ka as replicaHealth, $o as resetComputedQueryCacheWarnings, Ur as resetEventMetricTagCacheForTests, Sa as resetObservedGraph, Js as resetSecretsBackend, Oo as resolveClientAddress, _u as resolveConnection, Mu as resolveConnectionForSubject, mf as resolveCurrentRegion, lr as resolveDependentTables, _o as resolveOriginGuardConfig, nr as resolveReactiveConfig, Tu as resolveRedirectUri, ko as resolveRequestIsHttps, Dm as resolveRescan, _i as resolveRowFilterScope, vi as resolveRowFilterScopeFor, Ys as resolveSecret, Xs as resolveSecretSync, $s as resolveSecretsBackend, Fo as resolveSecurityHeaders, sm as resolveTimelineMode, Do as resolveTrustedProxies, Ch as resultVariantNames, ke as retentionTtlMsFromEnv, fm as reverseEventOverRows, ed as revokedIds, hi as rowFilterRegistered, ef as rulesFor, df as runAsSystem, Yh as runOrchestratorTick, Ng as runProvidedEffect, Bm as runReaction, Xh as runSingleNodeOrchestrator, Lh as runWakeLoop, Gg as runWithDeadlockRetry, ya as runWithObservedProcedure, sr as runWithRawReadScope, id as runWithRequestLoader, Qa as runWithRoutingContext, ea as runWithTraceContext, wu as sanitizeRedirectTo, Zf as scheduleCoordinated, Vd as schemaPropertyNames, zp as scopeStringsOf, Io as securityHeadersFor, Lp as serializeGuards, Si as serverOnlyColumnNames, Ud as serverOnlyLeaks, Au as setConnectionResolver, ca as setFieldCipher, pi as setRowFilter, qs as setSecretsBackend, cf as setSystemStoreHandle, gm as setTimelineRecorderForTest, sd as setTupleSource, En as settleHandlerBody, pc as sha256Hex, Es as shutdownGraceMsFromEnv, zf as singleCoordinator, oi as snapshotMetrics, si as snapshotMetricsSync, vd as ssrfGuardHttpClientLayer, _d as ssrfReason, vs as startRpcServer, Kf as startScheduler, eu as storeCredential, Ci as stripColumnsFromRows, Ei as stripForbiddenForWire, wi as stripServerOnlyForWire, Ou as sweepExpiredGrants, Le as sweepRetention, _p as synthesizeInverse, fd as tracingHttpClientLayer, Zc as triggerWorkflow, kf as tryClaimWakeup, Vi as unbindConnection, ip as undoCaptureEnabled, kp as undoLogExecutor, ap as undoSurfaceEnabled, Jd as unresolvedSources, Eg as useAggregate, ng as useAnalytics, lh as useCostBudget, Gm as useExpectation, Th as useExperiment, $u as visibleRows, Ih as wakeDueOnce, zo as webhookVerificationOf, Lg as withRowFilter, jc as workflowToRpc, cp as wrapCaptureStore, Md as wrapStoreWithBootCodec, Wa as wrapStoreWithMixinBehaviour };
+export { Ao as API_CSP, fc as API_KEYS_TABLE, Np as APPROVALS_TABLE, Hu as AccessDenied, Tg as AggregateError, Om as AggregateMaintainer, wg as AggregateNotFound, Eg as AggregateRegistry, Cg as AggregateStale, eg as AnalyticsCapabilityNotSupported, $h as AnalyticsError, tg as AnalyticsSink, Hf as CLAIM_RETENTION_BUCKETS, Y as CONNECTIONS_TABLE, Vl as CONNECTION_GRANTS_TABLE, of as CircuitBreaker, rf as CircuitOpen, uu as ConnectionNotConnected, hh as CostAccountant, ch as CostRegistry, hg as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Pp as DEFAULT_APPROVAL_EXPIRY_MS, Vf as DEFAULT_CLAIM_BUCKET_MS, $n as DEFAULT_DELIVERY_CONCURRENCY, Mo as DEFAULT_HSTS, Yf as DEFAULT_MAX_IDLE_INTERVAL_MS, _s as DEFAULT_MAX_RPC_BODY_BYTES, er as DEFAULT_RAW_READ_TRACKING_LIMIT, cu as DEFAULT_REFRESH_SKEW_MS, li as DEFAULT_ROW_FILTER_RETRY, Rf as DORMANCY_WAKEUP_TENANT, ja as DeleteBuilder, ki as Dispatcher, hl as EVENT_CLIENT_QUEUE_SIZE, gl as EVENT_LATEST_QUEUE_SIZE, Dc as EffectStore, ul as EventBus, eh as ExpectationEvaluator, Wm as ExpectationRegistry, Ph as ExperimentEvaluator, wh as ExperimentRegistry, Su as GRANT_TTL_MS, _h as HOLDOUT_VARIANT, jo as HTML_CSP, qn as InMemoryDataStore, Pn as IndexedMatcher, Sl as InstanceMembership, Dn as LinearScanMatcher, p as MetricBoundaries, ig as NOOP_ANALYTICS_PROVIDER, gi as NO_ROW_FILTER, vo as NO_TRUSTED_PROXIES, wa as NoRowFound, El as OUTBOX_ATTEMPTS_TABLE, Nl as OUTBOX_ATTEMPT_LOG_CAP, J as OUTBOX_TABLE, Ta as OptimisticLockError, Vu as REBAC_ADMIN_SCOPE, lu as REFRESH_LEASE_MS, m_ as RUNTIME_NAME, Rm as ReactionRateLimiter, eo as ReplicatedDataStore, ci as RowFilterUnavailable, Lf as SCHEDULE_SUBJECT, Ec as SYSTEM_SUBJECT, ka as SelectBuilder, La as ServerOnlyColumnWrite, pd as SsrfBlockedError, Pa as StoreOperationFailed, Ln as SubscriptionRegistry, Fa as TableValidationFailed, Ia as TenantRowNotFound, Na as TenantScopeViolation, pm as TimelineRecorder, vp as UndoBoundaryError, bp as UndoStack, Bo as UnverifiedWebhookRoute, Aa as UpdateBuilder, bd as VOLTRO_AUDIT_MIXIN_ID, Sd as VOLTRO_EXPIRES_MIXIN_ID, wd as VOLTRO_LOCAL_FIRST_MIXIN_ID, xd as VOLTRO_SOFT_DELETE_MIXIN_ID, Cd as VOLTRO_TENANT_MIXIN_ID, Lo as WEBHOOK_VERIFICATION_PROPERTY, Pc as WorkflowDeferredResultError, Hc as WorkflowPayloadError, Fc as WorkflowRateLimitedError, Ic as WorkflowSingletonHeldError, qi as _connectionStreamCount, Ji as _resetConnectionCredentialsForTest, Fp as _voltroApprovalsTable, Ul as _voltroConnectionGrantsTable, Bl as _voltroConnectionsTable, km as _voltroRebacTuplesTable, tp as _voltroScheduleClaimsTable, ep as _voltroScheduleRunsTable, np as _voltroTracesTable, rp as _voltroUndoLogTable, Ih as _voltroWakeupsTable, il as _voltroWorkflowEventDeliveriesTable, rl as _voltroWorkflowEventsTable, Ua as actingUserId, Tc as apiKeyManagementRoutes, Ui as applyConnectionCredential, Ba as applyDefined, Em as applyDelta, Sp as applyInverse, Cp as applyInverses, tf as applyPluginRefRules, bi as applyRowFilter, xi as applyRowFilterToDescriptor, jg as applySoftDeleteScope, Og as applyTenantScope, jp as applyUndoInvocation, Vp as approvalIntentKey, rm as approvalNonce, am as approvalsPendingExecutor, Qu as assertCan, ql as assertConnectionCipherConfigured, Vo as assertWebhookRoutesDeclareVerification, Sh as assignVariant, bg as attachAnalyticsMirror, th as attachExpectations, Fh as attachExperiments, gh as attachFinops, ks as awaitServerListening, Ml as backoffMs, Eu as beginOAuthConnect, zi as bindConnectionCredential, yl as bindEvent, gs as bindMutation, rs as bindStream, ns as bindSubscription, Zo as bindSubscriptionUntyped, wm as buildIvmState, d_ as buildPreview, Mm as buildRebacInterceptor, Pm as buildRebacReadFilter, Ja as buildSubjectKey, Is as buildTracingLayer, Gd as cacheScopeLeaks, Zs as cachedBackend, Zu as can, Ef as cancelWakeup, Bp as canonicalJson, Fn as canonicalize, Uf as claimGraceMs, go as classifyRequestOrigin, ym as classifyShape, $p as clearApprovalGate, mu as clearConnectionRefreshFlights, qu as clearResourcePolicies, ee as clearRetentions, lf as clearSystemStoreHandle, nf as collectPluginRefRules, bf as compileCron, Du as completeOAuthConnect, sg as composeAnalytics, og as composeAnalyticsSinks, Cu as connectionCallbackPath, Kl as connectionLabel, Yh as countRunningWorkflows, ni as counter, Sf as cronOccurrences, Bd as crud, or as currentRawReads, rd as currentRequestLoader, $a as currentRoutingContext, ta as currentTraceContext, Sc as dataStoreApiKeyStore, ic as dataStoreIdempotencyStore, lc as dataStoreKvStore, tm as decideApproval, om as decideApprovalInvocation, da as decryptField, fs as defectMessage, xg as defineAggregate, Gl as defineConnection, oh as defineCostBudget, Qc as defineEventTrigger, Ng as defineExecutor, Hm as defineExpectation, yh as defineExperiment, kl as defineOutboxHandler, Fm as defineReaction, Wu as defineResourcePolicy, yf as defineSchedule, Qh as defineSubscriber, Di as deliveredRowCount, ia as deriveKey, u_ as diffChange, Ds as drainForShutdown, Ll as drainOutbox, Nf as dueWakeups, Xu as effectiveRelations, Ad as emptySchemaRegistry, _a as enableGraphObservation, ua as encryptField, em as enforceApproval, nd as enterRequestLoader, Gs as envSecretsBackend, mp as evaluateTouchedRules, Wr as eventMetricTagCacheSizeForTests, ou as exchangeAuthorizationCode, Qi as externalSpanFromTraceparent, Yn as extractDbCause, In as fingerprintFor, Ti as forbiddenColumnsForSubject, nu as forgetCredential, Kd as formatCacheScopeLeaks, Wd as formatServerOnlyLeaks, Xi as formatTraceparent, Yd as formatUnresolvedSources, xp as forwardChangeFromCdc, Cc as frameworkApiKeyStrategy, ri as gauge, mc as generateApiKeyToken, Qp as getApprovalGate, Bi as getConnectionCredential, ju as getConnectionResolver, Ri as getCredentialExpiry, K as getFieldCipher, Gu as getResourcePolicy, mi as getRowFilter, uf as getSystemStoreHandle, hm as getTimelineRecorder, cd as getTupleSource, xm as groupKeyOf, xh as hashUnitInterval, ii as histogramMetric, c_ as historyProvenance, Qs as httpSecretsBackend, Cn as inspectWorkflow, Zp as installApprovalGate, ld as installPolicyGuardResolver, Ki as interruptConnectionStreams, gp as invertChange, So as ipToBytes, Sg as isAggregateDefinition, sh as isCostBudgetDefinition, kg as isEmptyTenantScopedRead, Um as isExpectationDefinition, bh as isExperimentDefinition, Xn as isForeignKeyViolation, Hh as isIdleNow, ls as isInfraError, va as isObservingGraph, Ag as isOrglessUserSubject, Zn as isQueryTimeout, yp as isSafeToApply, _f as isScheduleDefinition, $d as isSoftDelete, ao as isStateChangingMethod, Eo as isTrustedProxy, $c as isWorkflowEventTriggerDefinition, ir as isolateRawReadScope, Cm as ivmValue, s_ as lastWriteProvenance, ru as listConnectionStates, Ku as listResourcePolicies, me as listRetentionConflicts, he as listRetentions, Am as loadResourceTuples, Nm as loadSubjectTuples, pf as localityAwareSelector, n_ as makeActionRunner, Wf as makeAdvisoryLockCoordinator, aa as makeAesCipher, _c as makeApiKeyService, yd as makeApiKeyUsageBuffer, xc as makeApiKeyUsageFlusher, Qn as makeAppAccess, Yp as makeApprovalGate, uc as makeAsyncKv, ff as makeAuthMiddlewareLayers, vl as makeBufferGapDetector, Ws as makeBufferingSpanProcessor, Jl as makeConnectionRegistry, Nu as makeConnectionResolver, Pu as makeConnectionsFacade, $f as makeCoordinatedScheduler, dd as makeDataLoader, Bu as makeDisconnectConnectionExecutor, Ac as makeEffectStoreLayer, ml as makeEventPublisher, al as makeEventsFacade, oa as makeFieldCipher, Ma as makeFluentStore, Uh as makeIdleGate, Jc as makeLazyWorkflowFacade, Lu as makeListConnectionsExecutor, ms as makeMutationOutputCodec, qg as makeMutationRunner, e_ as makeOneShotQueryRunner, co as makeOriginGuardExemption, jl as makeOutboxFacade, Kc as makePostCommitWorkflowFacade, zh as makeProcessAdapter, $g as makeQueryDescriptorProducer, Mg as makeQueryFinalizer, Zg as makeQueryReauthorizer, t_ as makeQuerySubscriber, Wh as makeRouterActivity, fp as makeRuleCapture, Td as makeSchemaRegistry, Ru as makeStartConnectionExecutor, zu as makeSubmitTokenExecutor, lp as makeUndoCapture, Gh as makeWakeGate, Jh as makeWakeProxyServer, Gc as makeWorkflowFacade, qc as makeWorkflowFacadeWithCallerContext, Yc as makeWorkflowHandlers, Xc as makeWorkflowLayers, Rc as makeWorkflowRunHandle, Df as markWakeupFired, Tm as materializeIvm, vc as memoryApiKeyStore, hf as memoryReplicationAdapter, qa as memoryRywPositionStore, Hi as mergeCookieHeader, Qf as nextDelay, xf as nextFiring, Pf as nextWakeup, Vh as nodeProcessSupervisor, ag as noopAnalytics, cg as noopAnalyticsSpec, dc as noopKv, yo as normalizeIp, uo as normalizeOrigin, Ca as observeStore, xa as observedGraph, Ss as onProcessShutdown, Ns as otelImportFailure, Ol as outboxAttemptsTable, Tl as outboxTable, Jp as parseApprovalInterval, Zi as parseTraceparent, Uc as payloadPropertyNames, nm as pendingApprovalsFor, Ga as powerOfTwoSelector, p_ as previewInRollback, Ql as projectConnectionState, If as pruneWakeups, fl as publishEvent, cr as rawSqlPreview, Xf as readPollCeilingMs, Ju as rebacPolicyGraph, Li as recordCredentialExpiry, Kr as recordEventDelivered, qr as recordEventDropped, Gr as recordEventPublished, Jr as recordEventSubscribers, ar as recordRawRead, Yr as recordSample, ei as recordScheduleRun, $r as recordSubscriptionActive, Zr as recordSubscriptionDelivery, ba as recordTableAccess, _m as recordTimelineEvent, ti as recordWorkflowRun, Id as redactColumns, um as redactRow, Ya as redisRywPositionStore, Mp as redoUndoInvocation, su as refreshAccessToken, Gi as registerConnectionStream, Ee as registerRetention, Tf as registerWakeup, Rp as rehydrateGuards, Af as releaseWakeup, Ka as replicaHealth, $o as resetComputedQueryCacheWarnings, Ur as resetEventMetricTagCacheForTests, Sa as resetObservedGraph, Js as resetSecretsBackend, Oo as resolveClientAddress, _u as resolveConnection, Mu as resolveConnectionForSubject, mf as resolveCurrentRegion, lr as resolveDependentTables, _o as resolveOriginGuardConfig, nr as resolveReactiveConfig, Tu as resolveRedirectUri, ko as resolveRequestIsHttps, Dm as resolveRescan, _i as resolveRowFilterScope, vi as resolveRowFilterScopeFor, Ys as resolveSecret, Xs as resolveSecretSync, $s as resolveSecretsBackend, Fo as resolveSecurityHeaders, sm as resolveTimelineMode, Do as resolveTrustedProxies, Ch as resultVariantNames, ke as retentionTtlMsFromEnv, fm as reverseEventOverRows, ed as revokedIds, hi as rowFilterRegistered, ef as rulesFor, df as runAsSystem, Xh as runOrchestratorTick, Pg as runProvidedEffect, Bm as runReaction, Zh as runSingleNodeOrchestrator, Rh as runWakeLoop, Kg as runWithDeadlockRetry, ya as runWithObservedProcedure, sr as runWithRawReadScope, id as runWithRequestLoader, Qa as runWithRoutingContext, ea as runWithTraceContext, wu as sanitizeRedirectTo, Zf as scheduleCoordinated, Vd as schemaPropertyNames, zp as scopeStringsOf, Io as securityHeadersFor, Lp as serializeGuards, Si as serverOnlyColumnNames, Ud as serverOnlyLeaks, Au as setConnectionResolver, ca as setFieldCipher, pi as setRowFilter, qs as setSecretsBackend, cf as setSystemStoreHandle, gm as setTimelineRecorderForTest, sd as setTupleSource, En as settleHandlerBody, pc as sha256Hex, Es as shutdownGraceMsFromEnv, zf as singleCoordinator, oi as snapshotMetrics, si as snapshotMetricsSync, vd as ssrfGuardHttpClientLayer, _d as ssrfReason, vs as startRpcServer, Kf as startScheduler, eu as storeCredential, Ci as stripColumnsFromRows, Ei as stripForbiddenForWire, wi as stripServerOnlyForWire, Ou as sweepExpiredGrants, Le as sweepRetention, _p as synthesizeInverse, fd as tracingHttpClientLayer, Zc as triggerWorkflow, kf as tryClaimWakeup, Vi as unbindConnection, ip as undoCaptureEnabled, kp as undoLogExecutor, ap as undoSurfaceEnabled, Jd as unresolvedSources, Dg as useAggregate, rg as useAnalytics, lh as useCostBudget, Gm as useExpectation, Th as useExperiment, $u as visibleRows, Lh as wakeDueOnce, zo as webhookVerificationOf, Rg as withRowFilter, Qg as withScopedRequest, jc as workflowToRpc, cp as wrapCaptureStore, Md as wrapStoreWithBootCodec, Wa as wrapStoreWithMixinBehaviour };