@voltro/runtime 0.72.0 → 0.74.0

package/dist/index.js

@@ -6060,31 +6060,35 @@ var Gs = (e, t) => {
 			r(o.fail(np("transactional", "<transaction>")(e)));
 		});
 	}))
-}), sp = (e) => u.succeed($f, op(e)), cp = class extends x.TaggedError()("WorkflowStartNotExecuted", {
+}), sp = (e) => u.succeed($f, op(e)), cp = (e) => ({
+	conflictColumns: e.conflictColumns,
+	...e.update === void 0 ? {} : { update: e.update },
+	...e.updateValues === void 0 ? {} : { updateValues: e.updateValues }
+}), lp = (e, t, n) => e.insert(t.tableName, n), up = (e, t, n) => e.insertMany(t.tableName, n), dp = (e, t, n, r) => e.upsert(t.tableName, n, cp(r)), fp = (e, t, n, r) => e.upsertWithOutcome(t.tableName, n, cp(r)), pp = (e, t, n, r) => e.insertIgnoreWithOutcome(t.tableName, n, { conflictColumns: r.conflictColumns }), mp = class extends x.TaggedError()("WorkflowStartNotExecuted", {
 	workflowName: x.String,
 	handleId: x.String,
 	reason: x.Literal("dropped", "skipped", "superseded", "cancelled", "abandoned", "rejected"),
 	failureId: x.NullOr(x.String),
 	incumbentExecutionId: x.NullOr(x.String)
-}) {}, lp = H({ scope: "voltro:workflow" }), up = /* @__PURE__ */ new Set(), dp = 1e3, fp = /* @__PURE__ */ new Set([
+}) {}, hp = H({ scope: "voltro:workflow" }), gp = /* @__PURE__ */ new Set(), _p = 1e3, vp = /* @__PURE__ */ new Set([
 	"succeeded",
 	"failed",
 	"cancelled"
-]), pp = async (e, t) => {
+]), yp = async (e, t) => {
 	try {
 		return (await e({
 			idPrefix: t,
 			limit: 5
-		})).find((e) => e.executionId === t && fp.has(e.status));
+		})).find((e) => e.executionId === t && vp.has(e.status));
 	} catch {
 		return;
 	}
-}, mp = (e, t, n) => ({
+}, bp = (e, t, n) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: n
-}), hp = (e, t) => t.kind === "queued" ? {
+}), xp = (e, t) => t.kind === "queued" ? {
 	id: t.receiptId,
 	workflowName: e,
 	executionId: null,
@@ -6117,25 +6121,25 @@ var Gs = (e, t) => {
 		retryAfterMs: null,
 		intentId: null
 	}
-}, gp = class extends Error {
+}, Sp = class extends Error {
 	workflowName;
 	retryAfterMs;
 	constructor(e, t) {
 		super(`workflow '${e}' is over its declared rateLimit; this start was DROPPED and will not run. The window reopens in ${t}ms. Use throttle instead of rateLimit if the excess should be queued rather than discarded.`), this.name = "WorkflowRateLimitedError", this.workflowName = e, this.retryAfterMs = t;
 	}
-}, _p = class extends Error {
+}, Cp = class extends Error {
 	workflowName;
 	executionId;
 	constructor(e, t) {
 		super(`workflow '${e}' holds its singleton key on run '${t}', and this workflow declares mode 'skip'. Nothing new was started. Wait on that run (ctx.workflows.wait('${e}', '${t}')) if its result is what you needed.`), this.name = "WorkflowSingletonHeldError", this.workflowName = e, this.executionId = t;
 	}
-}, vp = { kind: "passthrough" }, yp = mp, bp = (t) => {
+}, wp = { kind: "passthrough" }, Tp = bp, Ep = (t) => {
 	let n = e.failureOption(t), r = n._tag === "Some" ? n.value : e.squash(t);
 	return {
 		tag: r && typeof r == "object" && "_tag" in r ? String(r._tag) : null,
 		message: r?.message ?? String(r)
 	};
-}, xp = (t, n, r) => {
+}, Dp = (t, n, r) => {
 	if (r === void 0) return {
 		id: n,
 		workflowName: t,
@@ -6161,7 +6165,7 @@ var Gs = (e, t) => {
 			workflowName: t,
 			executionId: n,
 			status: e.isInterruptedOnly(i.cause) ? "cancelled" : "failed",
-			error: bp(i.cause)
+			error: Ep(i.cause)
 		};
 	}
 	return {
@@ -6170,7 +6174,7 @@ var Gs = (e, t) => {
 		executionId: n,
 		status: "running"
 	};
-}, Sp = (e) => new Promise((t) => setTimeout(t, e)), Cp = class extends Error {
+}, Op = (e) => new Promise((t) => setTimeout(t, e)), kp = class extends Error {
 	workflowName;
 	missingFields;
 	detail;
@@ -6179,7 +6183,7 @@ var Gs = (e, t) => {
 		let r = t.length > 0 ? ` missing required field(s): ${t.join(", ")}.` : "";
 		super(`Workflow "${e}" was started with an invalid payload.${r} ${n}`), this.workflowName = e, this.missingFields = t, this.detail = n, this.name = "WorkflowPayloadError";
 	}
-}, wp = (e) => {
+}, Ap = (e) => {
 	let t = e.ast;
 	if (!Array.isArray(t.propertySignatures)) return {
 		required: [],
@@ -6190,10 +6194,10 @@ var Gs = (e, t) => {
 		required: n.filter((e) => !e.isOptional).map((e) => String(e.name)),
 		optional: n.filter((e) => e.isOptional).map((e) => String(e.name))
 	};
-}, Tp = (e) => {
+}, jp = (e) => {
 	let t = e.ast;
 	return Array.isArray(t.propertySignatures) ? t.propertySignatures.filter((e) => !e.isOptional && typeof e.name == "string").map((e) => String(e.name)) : [];
-}, Ep = (e) => {
+}, Mp = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) {
@@ -6204,14 +6208,14 @@ var Gs = (e, t) => {
 	}, r = (e, t, n = e.payloadSchema) => {
 		let r = x.validateEither(n)(t);
 		if (r._tag === "Right") return;
-		let i = typeof t == "object" && t ? Object.keys(t) : [], a = Tp(n).filter((e) => !i.includes(e));
-		throw new Cp(e.name, a, Cr.formatErrorSync(r.left));
+		let i = typeof t == "object" && t ? Object.keys(t) : [], a = jp(n).filter((e) => !i.includes(e));
+		throw new kp(e.name, a, Cr.formatErrorSync(r.left));
 	}, i = (t) => e.startPayloadSchema?.(t.name) ?? t.payloadSchema, a = (e, t, a = !1) => {
 		let o = n(e);
 		return r(o, t, a ? o.payloadSchema : i(o)), o;
 	}, o = async (t, r) => {
 		let i = n(t);
-		return xp(t, r, await e.runEffect(i.poll(r)));
+		return Dp(t, r, await e.runEffect(i.poll(r)));
 	}, s = async () => e.runEffect(Vr()), l = async (t, n, r) => {
 		if (e.resolveQueuedStart === void 0) throw Error(`Workflow '${t}' remains queued under receipt '${n}'; no receipt resolver is configured`);
 		let i = await e.resolveQueuedStart({
@@ -6225,7 +6229,7 @@ var Gs = (e, t) => {
 			return i.executionId;
 		}
 		let a = i.kind === "terminal" ? i.outcome : void 0;
-		throw new cp({
+		throw new mp({
 			workflowName: t,
 			handleId: n,
 			reason: a?.kind ?? "rejected",
@@ -6240,11 +6244,11 @@ var Gs = (e, t) => {
 				if (!("exit" in t) || !c.isExit(t.exit)) throw Error("Completed workflow observation has no valid Exit");
 				return e.runEffect(t.exit);
 			}
-			await Sp(500);
+			await Op(500);
 		}
 	}, d = async (e, t, n) => {
 		let r;
-		for (; r === void 0;) r = await l(e, t, n), r === void 0 && await Sp(500);
+		for (; r === void 0;) r = await l(e, t, n), r === void 0 && await Op(500);
 		return {
 			executionId: r,
 			value: await u(e, r)
@@ -6268,7 +6272,7 @@ var Gs = (e, t) => {
 		}
 		if (c !== void 0) throw Error("Workflow control requestId requires a resident control adapter");
 		let l = await o(r, i);
-		if (fp.has(l.status)) return {
+		if (vp.has(l.status)) return {
 			operation: t,
 			kind: "already-terminal",
 			requestId: null,
@@ -6284,7 +6288,7 @@ var Gs = (e, t) => {
 				snapshot: n
 			};
 		} catch (e) {
-			return lp.warn("workflow control outcome is unknown", {
+			return hp.warn("workflow control outcome is unknown", {
 				workflowName: r,
 				executionId: i,
 				operation: t,
@@ -6330,9 +6334,9 @@ var Gs = (e, t) => {
 			try {
 				a = x.encodeUnknownSync(i(s))(n);
 			} catch {
-				throw new Cp(t, [], "payload could not be encoded for the admission queue");
+				throw new kp(t, [], "payload could not be encoded for the admission queue");
 			}
-			return hp(t, {
+			return xp(t, {
 				kind: "queued",
 				mode: "transaction",
 				...await r.enqueueStart({
@@ -6354,7 +6358,7 @@ var Gs = (e, t) => {
 					callerContext: r.callerContext,
 					at: i
 				});
-				return r.wait === !0 ? mp(t, (await d(t, a.receiptId, r.callerContext)).executionId, "succeeded") : {
+				return r.wait === !0 ? bp(t, (await d(t, a.receiptId, r.callerContext)).executionId, "succeeded") : {
 					id: a.receiptId,
 					workflowName: t,
 					executionId: null,
@@ -6368,21 +6372,21 @@ var Gs = (e, t) => {
 				};
 			}
 		}
-		let c = r?.wait === !0, l = e.admitStart === void 0 || r?.admitted === !0 ? vp : await e.admitStart({
+		let c = r?.wait === !0, l = e.admitStart === void 0 || r?.admitted === !0 ? wp : await e.admitStart({
 			workflowName: t,
 			payload: n,
 			callerContext: r?.callerContext,
 			waiting: c
 		});
-		if (l.kind === "queued" || l.kind === "dropped" || l.kind === "skipped") return c && l.kind === "queued" ? mp(t, (await d(t, l.receiptId, r?.callerContext)).executionId, "succeeded") : hp(t, l);
+		if (l.kind === "queued" || l.kind === "dropped" || l.kind === "skipped") return c && l.kind === "queued" ? bp(t, (await d(t, l.receiptId, r?.callerContext)).executionId, "succeeded") : xp(t, l);
 		if (l.kind === "start") {
 			let n = await l.accept();
-			return e.onEnqueue?.(), c && await u(t, n), mp(t, n, c ? "succeeded" : "running");
+			return e.onEnqueue?.(), c && await u(t, n), bp(t, n, c ? "succeeded" : "running");
 		}
 		let f = n;
 		if (e.listRuns !== void 0 && r?.admitted !== !0) {
-			let n = await e.runEffect(s.executionId(f)), r = await pp(e.listRuns, n);
-			if (r !== void 0) return up.has(n) || (up.size >= dp && up.clear(), up.add(n), lp.warn("workflow start replayed — the idempotency key was already spent, nothing ran", {
+			let n = await e.runEffect(s.executionId(f)), r = await yp(e.listRuns, n);
+			if (r !== void 0) return gp.has(n) || (gp.size >= _p && gp.clear(), gp.add(n), hp.warn("workflow start replayed — the idempotency key was already spent, nothing ran", {
 				workflow: t,
 				executionId: n,
 				runId: r.id,
@@ -6402,9 +6406,9 @@ var Gs = (e, t) => {
 		let p;
 		(e.rememberStartContext !== void 0 || r?.callerContext !== void 0) && (p = o ?? await e.runEffect(s.executionId(f)), await e.rememberStartContext?.(t, p, r?.callerContext ?? { subject: Zf }));
 		let m = o ?? (p !== void 0 && Hr(s) ? p : void 0);
-		if (c) return m === void 0 ? await e.runEffect(s.execute(f)) : await e.runEffect(Br(s, f, m, { discard: !1 })), e.onEnqueue?.(), mp(t, m ?? await e.runEffect(s.executionId(f)), "succeeded");
+		if (c) return m === void 0 ? await e.runEffect(s.execute(f)) : await e.runEffect(Br(s, f, m, { discard: !1 })), e.onEnqueue?.(), bp(t, m ?? await e.runEffect(s.executionId(f)), "succeeded");
 		let h = await e.runEffect(m === void 0 ? s.execute(f, { discard: !0 }) : Br(s, f, m));
-		return e.onEnqueue?.(), mp(t, h, "running");
+		return e.onEnqueue?.(), bp(t, h, "running");
 	};
 	return {
 		start: h,
@@ -6433,8 +6437,8 @@ var Gs = (e, t) => {
 					waiting: !0
 				});
 				if (i.kind === "queued") return (await d(t, i.receiptId, r?.callerContext)).value;
-				if (i.kind === "dropped") throw new gp(t, i.retryAfterMs);
-				if (i.kind === "skipped") throw new _p(t, i.executionId);
+				if (i.kind === "dropped") throw new Sp(t, i.retryAfterMs);
+				if (i.kind === "skipped") throw new Cp(t, i.executionId);
 				if (i.kind === "start") {
 					let n = await i.accept();
 					return e.onEnqueue?.(), await u(t, n);
@@ -6454,7 +6458,7 @@ var Gs = (e, t) => {
 		query: async (e, t) => o(e, t),
 		wait: (async (t, n, r) => {
 			let i = typeof t == "string" ? t : t.workflowName, a = typeof t == "string" ? n : t.executionId, s = typeof t == "string" ? r : n, c = Date.now(), u = s?.pollIntervalMs ?? 500, d = typeof t == "string" ? void 0 : t;
-			if (d?.status === "dropped" || d?.status === "skipped") throw new cp({
+			if (d?.status === "dropped" || d?.status === "skipped") throw new mp({
 				workflowName: i,
 				handleId: d.id,
 				reason: d.status,
@@ -6466,14 +6470,14 @@ var Gs = (e, t) => {
 					if (d?.status !== "queued" || e.resolveQueuedStart === void 0) throw Error(`Workflow '${i}' has no execution or configured receipt resolver`);
 					if (a = await l(i, d.id, s?.callerContext), a === void 0) {
 						if (s?.timeoutMs !== void 0 && Date.now() - c >= s.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' start receipt '${d.id}'`);
-						await Sp(u);
+						await Op(u);
 						continue;
 					}
 				}
 				let t = await o(i, a);
 				if (t.status === "succeeded" || t.status === "failed" || t.status === "cancelled") return t;
 				if (s?.timeoutMs !== void 0 && Date.now() - c >= s.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' run '${a}'`);
-				await Sp(u);
+				await Op(u);
 			}
 		}),
 		cancel: (e, t, n) => p("cancel", e, t, n),
@@ -6548,7 +6552,7 @@ var Gs = (e, t) => {
 			return e.redrive(t);
 		}
 	};
-}, Dp = (e, t) => ({
+}, Np = (e, t) => ({
 	...e,
 	startsDeferredUntilCommit: !0,
 	start: async (n, r, i) => {
@@ -6580,7 +6584,7 @@ var Gs = (e, t) => {
 	readStart: async () => {
 		throw Error("Observe a start after the mutation transaction commits; its receipt is provisional until then");
 	}
-}), Op = (e, t) => ({
+}), Pp = (e, t) => ({
 	...e,
 	cancelQueued: (n, r) => e.cancelQueued(n, {
 		...r,
@@ -6613,7 +6617,7 @@ var Gs = (e, t) => {
 		...r,
 		callerContext: t
 	}))
-}), kp = (e) => {
+}), Fp = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -6639,11 +6643,11 @@ var Gs = (e, t) => {
 		retry: (e, n) => t().retry(e, n),
 		redrive: (e) => t().redrive(e)
 	};
-}, Ap = (e, t) => {
+}, Ip = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? o.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(o.map((e) => mp(r.definition.name, e, "running")))).pipe(o.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? o.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(o.map((e) => bp(r.definition.name, e, "running")))).pipe(o.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, jp = (t, n, r) => t.map((t) => t.definition.toLayer(((i, a) => {
+}, Lp = (t, n, r) => t.map((t) => t.definition.toLayer(((i, a) => {
 	let s = o.suspend(() => {
 		let e = n.resolveStartContext?.(t.definition.name, a);
 		return e === void 0 ? o.succeed(void 0) : o.promise(() => Promise.resolve(e));
@@ -6693,7 +6697,7 @@ var Gs = (e, t) => {
 		}), f = (r?.(t, d, l) ?? d)(i, a), p = u.succeed(on, l.subject);
 		return o.provide(f, p);
 	}));
-}))), Mp = (e) => {
+}))), Rp = (e) => {
 	if ("on" in e) {
 		let { on: t, ...n } = e;
 		return {
@@ -6706,10 +6710,10 @@ var Gs = (e, t) => {
 		_tag: "workflowEventTrigger",
 		...e
 	};
-}, Np = Mp, Pp = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", Fp = () => {
+}, zp = Rp, Bp = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", Vp = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, Ip = (e) => `${e}_${Fp()}`, Lp = (e) => e.id ?? `${e.event}->${e.workflow}`, Rp = R("_voltro_workflow_events", {
+}, Hp = (e) => `${e}_${Vp()}`, Up = (e) => e.id ?? `${e.event}->${e.workflow}`, Wp = R("_voltro_workflow_events", {
 	id: I({ prefix: "wfe" }),
 	name: z(),
 	payload: je(),
@@ -6717,7 +6721,7 @@ var Gs = (e, t) => {
 	subject: je().nullable(),
 	traceId: z().nullable(),
 	occurredAt: B().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]), zp = R("_voltro_workflow_event_deliveries", {
+}).index(["name"]).index(["source"]).index(["occurredAt"]), Gp = R("_voltro_workflow_event_deliveries", {
 	id: I({ prefix: "wfed" }),
 	eventId: z(),
 	eventName: z(),
@@ -6735,8 +6739,8 @@ var Gs = (e, t) => {
 	errorMessage: z().nullable(),
 	createdAt: B().default("now"),
 	completedAt: B().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), Bp = (e) => {
-	let t = e.makeId ?? Ip, n = /* @__PURE__ */ new Map();
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]), Kp = (e) => {
+	let t = e.makeId ?? Hp, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -6777,7 +6781,7 @@ var Gs = (e, t) => {
 		});
 		let f = o(n), p = [];
 		for (let o of f) {
-			let s = Lp(o), l = o.workflow, u;
+			let s = Up(o), l = o.workflow, u;
 			try {
 				let f = o.idempotencyKey?.(d) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(d)) {
@@ -6883,7 +6887,7 @@ var Gs = (e, t) => {
 			triggered: p
 		};
 	} };
-}, Vp = H({ scope: "voltro:events" }), Hp = 64, Up = 3e5, Wp = 1e4, Gp = class {
+}, qp = H({ scope: "voltro:events" }), Jp = 64, Yp = 3e5, Xp = 1e4, Zp = class {
 	routes = /* @__PURE__ */ new Map();
 	origin;
 	ringSize;
@@ -6895,7 +6899,7 @@ var Gs = (e, t) => {
 	interestListeners = /* @__PURE__ */ new Set();
 	now;
 	constructor(e) {
-		this.origin = e.origin, this.ringSize = e.ringSize ?? Hp, this.ringTtlMs = e.ringTtlMs ?? Up, this.maxRoutes = e.maxRoutes ?? Wp, this.publishRemote = e.publishRemote, this.deliveryOf = e.deliveryOf, this.now = e.now ?? Date.now;
+		this.origin = e.origin, this.ringSize = e.ringSize ?? Jp, this.ringTtlMs = e.ringTtlMs ?? Yp, this.maxRoutes = e.maxRoutes ?? Xp, this.publishRemote = e.publishRemote, this.deliveryOf = e.deliveryOf, this.now = e.now ?? Date.now;
 	}
 	get instanceOrigin() {
 		return this.origin;
@@ -6915,7 +6919,7 @@ var Gs = (e, t) => {
 		for (let n of this.interestListeners) try {
 			n(e, t);
 		} catch (n) {
-			Vp.warn("event interest listener threw", {
+			qp.warn("event interest listener threw", {
 				event: e,
 				active: t,
 				cause: n
@@ -6950,7 +6954,7 @@ var Gs = (e, t) => {
 			this.routes.delete(r), n += 1;
 		}
 		if (n === 0) {
-			Vp.warn("event ring capacity reached with all routes live — replay buffers cleared", {
+			qp.warn("event ring capacity reached with all routes live — replay buffers cleared", {
 				routes: this.routes.size,
 				maxRoutes: this.maxRoutes
 			});
@@ -6975,7 +6979,7 @@ var Gs = (e, t) => {
 		if (n.localNext += 1, this.accept(n, r), La(e.event), this.publishRemote !== void 0) try {
 			this.publishRemote(r);
 		} catch (t) {
-			Vp.warn("event broadcast publish failed — local delivery unaffected", {
+			qp.warn("event broadcast publish failed — local delivery unaffected", {
 				event: e.event,
 				cause: t
 			});
@@ -7004,7 +7008,7 @@ var Gs = (e, t) => {
 		for (let n of e.listeners) try {
 			n(i);
 		} catch (e) {
-			Vp.warn("event listener threw — other subscribers unaffected", {
+			qp.warn("event listener threw — other subscribers unaffected", {
 				event: t.event,
 				cause: e
 			});
@@ -7088,13 +7092,13 @@ var Gs = (e, t) => {
 	clear() {
 		this.routes.clear();
 	}
-}, Kp = (e) => e instanceof Error ? e.message : String(e), qp = (e, t, n, r) => o.gen(function* () {
+}, Qp = (e) => e instanceof Error ? e.message : String(e), $p = (e, t, n, r) => o.gen(function* () {
 	let i = x.encode(t.key), a = x.encode(t.payload), s = yield* i(n).pipe(o.mapError((e) => new Wt({
 		event: t.name,
-		message: Kp(e)
+		message: Qp(e)
 	}))), c = yield* a(r).pipe(o.mapError((e) => new Gt({
 		event: t.name,
-		message: Kp(e)
+		message: Qp(e)
 	}))), l = Buffer.byteLength(JSON.stringify({
 		event: t.name,
 		key: s,
@@ -7123,10 +7127,10 @@ var Gs = (e, t) => {
 		n: -1,
 		deferred: !0
 	});
-}), Jp = (e) => {
+}), em = (e) => {
 	let t;
 	return Object.assign(e, { then: (n, r) => (t ??= o.runPromise(e), t.then(n, r)) });
-}, Yp = (e) => ({ publish: (t, n, r) => Jp(qp(e, t, n, r)) }), Xp = 64, Zp = 1, Qp = (e) => e.kind === "gap" ? {
+}, tm = (e) => ({ publish: (t, n, r) => em($p(e, t, n, r)) }), nm = 64, rm = 1, im = (e) => e.kind === "gap" ? {
 	_tag: "gap",
 	missed: e.missed,
 	reason: e.reason
@@ -7136,13 +7140,13 @@ var Gs = (e, t) => {
 	n: e.envelope.n,
 	emittedAt: e.envelope.emittedAt,
 	payload: e.envelope.payload
-}, $p = (e) => {
+}, am = (e) => {
 	let t = new Map(e ?? []);
 	return (e, n = 0) => {
 		let r = t.get(e.origin) ?? 0;
 		return t.set(e.origin, Math.max(r, e.n)), r === 0 && n === 0 ? 0 : Math.max(0, e.n - r - 1);
 	};
-}, em = (e) => S.unwrapScoped(o.gen(function* () {
+}, om = (e) => S.unwrapScoped(o.gen(function* () {
 	let t = yield* on, n = yield* It, r = t.tenantId ?? null, i = e.guards === void 0 ? void 0 : e.guards.filter((e) => !Pn(e));
 	if (i !== void 0 && i.length > 0) {
 		let n = yield* Cn(t, i, e.key);
@@ -7170,13 +7174,13 @@ var Gs = (e, t) => {
 			e();
 		}));
 	}
-	let u = a ? () => 0 : $p(c), d = i === void 0 || i.length === 0 ? void 0 : () => Cn(t, i, e.key), f = S.fromQueue(s, { shutdown: !0 }).pipe(S.flatMap((e) => d === void 0 ? p(e) : S.unwrap(d().pipe(o.map((t) => t ? S.fail(t) : p(e))))));
+	let u = a ? () => 0 : am(c), d = i === void 0 || i.length === 0 ? void 0 : () => Cn(t, i, e.key), f = S.fromQueue(s, { shutdown: !0 }).pipe(S.flatMap((e) => d === void 0 ? p(e) : S.unwrap(d().pipe(o.map((t) => t ? S.fail(t) : p(e))))));
 	function p(t) {
 		return S.suspend(() => {
-			if (t.kind === "gap") return S.make(Qp(t));
+			if (t.kind === "gap") return S.make(im(t));
 			let n = u(t.envelope, t.prior);
 			Ra(e.event);
-			let r = Qp(t);
+			let r = im(t);
 			if (n === 0) return S.make(r);
 			za(e.event, "buffer", n);
 			let i = {
@@ -7189,7 +7193,7 @@ var Gs = (e, t) => {
 	}
 	let m = { _tag: "attached" };
 	return Ql(S.concat(S.fromIterable([m]), f), n.credentialExpiresAt, S.fromIterable([m]));
-})), tm = H({ scope: "voltro:members" }), nm = 5e3, rm = class {
+})), sm = H({ scope: "voltro:members" }), cm = 5e3, lm = class {
 	members = /* @__PURE__ */ new Map();
 	listeners = /* @__PURE__ */ new Set();
 	instanceId;
@@ -7201,7 +7205,7 @@ var Gs = (e, t) => {
 	now;
 	timer;
 	constructor(e) {
-		this.instanceId = e.instanceId, this.now = e.now ?? Date.now, this.startedAt = e.startedAt ?? this.now(), this.meta = e.meta, this.heartbeatMs = e.heartbeatMs ?? nm, this.downAfterMs = e.downAfterMs ?? this.heartbeatMs * 3, this.announce = e.announce, this.members.set(this.instanceId, {
+		this.instanceId = e.instanceId, this.now = e.now ?? Date.now, this.startedAt = e.startedAt ?? this.now(), this.meta = e.meta, this.heartbeatMs = e.heartbeatMs ?? cm, this.downAfterMs = e.downAfterMs ?? this.heartbeatMs * 3, this.announce = e.announce, this.members.set(this.instanceId, {
 			startedAt: this.startedAt,
 			meta: this.meta,
 			lastHeardAt: this.now()
@@ -7227,7 +7231,7 @@ var Gs = (e, t) => {
 				...this.meta === void 0 ? {} : { meta: this.meta }
 			});
 		} catch (e) {
-			tm.warn("membership: announce failed", { cause: e });
+			sm.warn("membership: announce failed", { cause: e });
 		}
 	}
 	receive(e) {
@@ -7281,16 +7285,16 @@ var Gs = (e, t) => {
 		for (let t of this.listeners) try {
 			t(e);
 		} catch (t) {
-			tm.warn("membership: listener threw", {
+			sm.warn("membership: listener threw", {
 				event: e.kind,
 				cause: t
 			});
 		}
 	}
-}, im = H({ scope: "voltro:outbox" }), J = "_voltro_outbox", am = {
+}, um = H({ scope: "voltro:outbox" }), J = "_voltro_outbox", dm = {
 	kind: "typeid",
 	prefix: "obx"
-}, om = R(J, {
+}, fm = R(J, {
 	id: I({ prefix: "obx" }),
 	effect: z(),
 	payload: je(),
@@ -7311,10 +7315,10 @@ var Gs = (e, t) => {
 	resendCount: L(),
 	claimedBy: z().nullable(),
 	claimedAt: B().nullable()
-}), sm = "_voltro_outbox_attempts", cm = {
+}), pm = "_voltro_outbox_attempts", mm = {
 	kind: "typeid",
 	prefix: "obxa"
-}, lm = R(sm, {
+}, hm = R(pm, {
 	id: I({ prefix: "obxa" }),
 	outboxId: z(),
 	effect: z(),
@@ -7335,11 +7339,11 @@ var Gs = (e, t) => {
 	subjectId: z().nullable(),
 	tenantId: z().nullable(),
 	traceId: z().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), um = (e) => {
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), gm = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, dm = 8, fm = (e) => ({
+}, _m = 8, vm = (e) => ({
 	enqueue: async (t, n, r) => {
 		let i = (e.now ?? (() => /* @__PURE__ */ new Date()))(), a = r?.idempotencyKey;
 		if (a !== void 0) {
@@ -7354,12 +7358,12 @@ var Gs = (e, t) => {
 			if (t !== void 0) return t.id;
 		}
 		let o = {
-			id: P(am, J),
+			id: P(dm, J),
 			effect: t,
 			payload: n,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: r?.maxAttempts ?? dm,
+			maxAttempts: r?.maxAttempts ?? _m,
 			nextAttemptAt: new Date(i.getTime() + (r?.delayMs ?? 0)),
 			idempotencyKey: a ?? null,
 			lastError: null,
@@ -7410,7 +7414,7 @@ var Gs = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), pm = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 3e5), mm = 3e5, hm = 50, gm = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, _m = (e) => {
+}), ym = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 3e5), bm = 3e5, xm = 50, Sm = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Cm = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -7420,13 +7424,13 @@ var Gs = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: gm(n, 8192)
+		preview: Sm(n, 8192)
 	} : t;
-}, vm = async (e, t, n) => {
+}, wm = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(sm, {
-			id: P(cm, sm),
+		await e.insert(pm, {
+			id: P(mm, pm),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -7437,14 +7441,14 @@ var Gs = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : gm(t.error, 4e3),
-			response: _m(t.response),
+			error: t.error === null ? null : Sm(t.error, 4e3),
+			response: Cm(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		im.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		um.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -7452,7 +7456,7 @@ var Gs = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: sm,
+			table: pm,
 			predicate: j("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -7462,11 +7466,11 @@ var Gs = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(sm, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(pm, r.id);
 	} catch (e) {
-		im.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		um.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, ym = async (e, t) => {
+}, Tm = async (e, t) => {
 	try {
 		await e.store.update(J, t, {
 			status: "pending",
@@ -7474,9 +7478,9 @@ var Gs = (e, t) => {
 			claimedAt: null
 		});
 	} catch (e) {
-		im.warn("outbox: could not release a claim; the lease will reclaim it", { id: t }, e);
+		um.warn("outbox: could not release a claim; the lease will reclaim it", { id: t }, e);
 	}
-}, bm = async (e) => {
+}, Em = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = t.getTime(), r = e.claimLeaseMs ?? 3e5;
 	try {
 		let t = await e.store.updateMany(J, {
@@ -7484,12 +7488,12 @@ var Gs = (e, t) => {
 			claimedBy: null,
 			claimedAt: null
 		}, { where: T(j("status", "delivering"), Fe("claimedAt", new Date(n - r))) });
-		t > 0 && im.warn("outbox: reclaimed rows whose deliverer stopped responding — they will be retried, so a handler that had already reached the remote will be called again", {
+		t > 0 && um.warn("outbox: reclaimed rows whose deliverer stopped responding — they will be retried, so a handler that had already reached the remote will be called again", {
 			reclaimed: t,
 			leaseMs: r
 		});
 	} catch (e) {
-		im.warn("outbox: stuck-claim reclaim failed", {}, e);
+		um.warn("outbox: stuck-claim reclaim failed", {}, e);
 	}
 	let i = await e.store.query({
 		table: J,
@@ -7540,10 +7544,10 @@ var Gs = (e, t) => {
 	for (let n of u) {
 		let r = n.id, i = n.effect, a = e.handlers.get(i);
 		if (a === void 0) {
-			m++, await ym(e, r);
+			m++, await Tm(e, r);
 			continue;
 		}
-		let s = n.attempts + 1, c = n.maxAttempts ?? dm, l = /* @__PURE__ */ new Date(), u = e.attemptLogCap ?? 50;
+		let s = n.attempts + 1, c = n.maxAttempts ?? _m, l = /* @__PURE__ */ new Date(), u = e.attemptLogCap ?? 50;
 		try {
 			let t = {
 				outboxId: r,
@@ -7554,7 +7558,7 @@ var Gs = (e, t) => {
 				tenantId: n.tenantId ?? null,
 				traceId: n.traceId ?? null
 			}, i = a.handler(t), c = o.isEffect(i) ? i : await i, f = o.isEffect(c) ? await (e.runEffect ? e.runEffect(c, t) : o.runPromise(c)) : c;
-			await vm(e.store, {
+			await wm(e.store, {
 				outboxRow: n,
 				attempt: s,
 				outcome: "delivered",
@@ -7575,7 +7579,7 @@ var Gs = (e, t) => {
 			}), d++;
 		} catch (a) {
 			let o = a instanceof Error ? a.message : String(a), d = s >= c;
-			await vm(e.store, {
+			await wm(e.store, {
 				outboxRow: n,
 				attempt: s,
 				outcome: d ? "dead" : "failed",
@@ -7587,23 +7591,23 @@ var Gs = (e, t) => {
 				status: d ? "dead" : "pending",
 				attempts: s,
 				lastError: o,
-				nextAttemptAt: new Date(t.getTime() + pm(s)),
+				nextAttemptAt: new Date(t.getTime() + ym(s)),
 				claimedBy: null,
 				claimedAt: null,
 				resendRequestedBy: null,
 				resendRequestedAt: null,
 				resendReason: null
-			}), d ? (p++, im.error("outbox effect dead-lettered after exhausting attempts", {
+			}), d ? (p++, um.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: i,
 				attempts: s,
 				maxAttempts: c
-			}, a)) : (f++, im.warn("outbox delivery failed; will retry", {
+			}, a)) : (f++, um.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: i,
 				attempt: s,
 				maxAttempts: c,
-				retryInMs: pm(s)
+				retryInMs: ym(s)
 			}));
 		}
 	}
@@ -7615,10 +7619,10 @@ var Gs = (e, t) => {
 		scanned: i.length,
 		...l === void 0 ? {} : { nextAttemptAt: l }
 	};
-}, xm = H({ scope: "voltro:connections" }), Y = "_voltro_connections", Sm = {
+}, Dm = H({ scope: "voltro:connections" }), Y = "_voltro_connections", Om = {
 	kind: "typeid",
 	prefix: "conn"
-}, Cm = R(Y, {
+}, km = R(Y, {
 	id: I({ prefix: "conn" }),
 	connectionId: z(),
 	subjectId: z(),
@@ -7641,10 +7645,10 @@ var Gs = (e, t) => {
 	metadata: je().nullable(),
 	connectedAt: B(),
 	updatedAt: B()
-}).unique("byConnectionSubject", ["connectionId", "subjectId"]).index(["subjectId"]), wm = "_voltro_connection_grants", Tm = {
+}).unique("byConnectionSubject", ["connectionId", "subjectId"]).index(["subjectId"]), Am = "_voltro_connection_grants", jm = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Em = R(wm, {
+}, Mm = R(Am, {
 	id: I({ prefix: "cgrant" }),
 	state: z().unique(),
 	connectionId: z(),
@@ -7654,8 +7658,8 @@ var Gs = (e, t) => {
 	redirectTo: z(),
 	createdAt: B(),
 	expiresAt: B()
-}).index(["expiresAt"]), Dm = (e) => typeof e == "function" ? e() : e, Om = /^[a-z][a-z0-9-]*$/, km = (e) => {
-	if (!Om.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+}).index(["expiresAt"]), Nm = (e) => typeof e == "function" ? e() : e, Pm = /^[a-z][a-z0-9-]*$/, Fm = (e) => {
+	if (!Pm.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of ["authorizeUrl", "tokenUrl"]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 		for (let t of ["clientId", "clientSecret"]) {
@@ -7664,9 +7668,9 @@ var Gs = (e, t) => {
 		}
 	}
 	return e;
-}, Am = (e) => e.label ?? e.id, jm = (e) => {
+}, Im = (e) => e.label ?? e.id, Lm = (e) => {
 	if (e.length !== 0 && Wc() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, Mm = (e) => {
+}, Rm = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -7676,14 +7680,14 @@ var Gs = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, Nm = (e) => {
+}, zm = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, Pm = (e) => Nm(e)?.toISOString() ?? null, Fm = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Im = (e, t) => t === void 0 ? {
+}, Bm = (e) => zm(e)?.toISOString() ?? null, Vm = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Hm = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Am(e),
+	label: Im(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -7694,22 +7698,22 @@ var Gs = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Am(e),
+	label: Im(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: Fm(t.scopes),
-	expiresAt: Pm(t.expiresAt),
+	scopes: Vm(t.scopes),
+	expiresAt: Bm(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: Pm(t.connectedAt)
-}, Lm = async (e, t, n) => (await e.query({
+	connectedAt: Bm(t.connectedAt)
+}, Um = async (e, t, n) => (await e.query({
 	table: Y,
 	predicate: T(j("connectionId", t), j("subjectId", n)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], Rm = async (e) => {
+}))[0], Wm = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = await e.store.query({
 		table: Y,
 		predicate: T(j("connectionId", e.definition.id), j("subjectId", e.subjectId)),
@@ -7717,7 +7721,7 @@ var Gs = (e, t) => {
 		take: 1,
 		skip: void 0,
 		projection: ["id"]
-	}), i = typeof r[0]?.id == "string" ? r[0].id : P(Sm, Y), a = {
+	}), i = typeof r[0]?.id == "string" ? r[0].id : P(Om, Y), a = {
 		id: i,
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
@@ -7736,8 +7740,8 @@ var Gs = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return zm(e.store, a);
-}, zm = (e, t) => e.upsert(Y, t, {
+	return Gm(e.store, a);
+}, Gm = (e, t) => e.upsert(Y, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -7753,10 +7757,10 @@ var Gs = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), Bm = async (e, t, n) => {
-	let r = await Lm(e, t, n);
+}), Km = async (e, t, n) => {
+	let r = await Um(e, t, n);
 	return r !== void 0 && e.delete(Y, r.id);
-}, Vm = async (e, t, n) => {
+}, qm = async (e, t, n) => {
 	let r = await e.query({
 		table: Y,
 		predicate: j("subjectId", n),
@@ -7765,9 +7769,9 @@ var Gs = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => Im(e, i.get(e.id)));
-}, Hm = (e, t) => globalThis.fetch(e, t), Um = async (e, t, n) => {
-	let r = e.fetchImpl ?? Hm, i, a;
+	return t.list().map((e) => Hm(e, i.get(e.id)));
+}, Jm = (e, t) => globalThis.fetch(e, t), Ym = async (e, t, n) => {
+	let r = e.fetchImpl ?? Jm, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -7807,62 +7811,62 @@ var Gs = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, Wm = (e, t, n = Date.now) => Um(e, {
+}, Xm = (e, t, n = Date.now) => Ym(e, {
 	grant_type: "authorization_code",
-	client_id: Dm(e.clientId),
-	client_secret: Dm(e.clientSecret),
+	client_id: Nm(e.clientId),
+	client_secret: Nm(e.clientSecret),
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), Gm = (e, t, n = Date.now) => Um(e, {
+}, n), Zm = (e, t, n = Date.now) => Ym(e, {
 	grant_type: "refresh_token",
-	client_id: Dm(e.clientId),
-	client_secret: Dm(e.clientSecret),
+	client_id: Nm(e.clientId),
+	client_secret: Nm(e.clientSecret),
 	refresh_token: t
-}, n), Km = 6e4, qm = 3e4, Jm = class extends Error {
+}, n), Qm = 6e4, $m = 3e4, eh = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, Ym = (e) => new Promise((t) => {
+}, th = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), Xm = /* @__PURE__ */ new Map(), Zm = (e, t) => `${e}\u0000${t}`, Qm = () => {
-	Xm.clear();
-}, $m = (e, t) => ({
+}), nh = /* @__PURE__ */ new Map(), rh = (e, t) => `${e}\u0000${t}`, ih = () => {
+	nh.clear();
+}, ah = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
 	accessToken: qc(String(t.accessToken), N(Y, "accessToken", t.id)),
-	expiresAt: Nm(t.expiresAt),
-	scopes: Fm(t.scopes),
+	expiresAt: zm(t.expiresAt),
+	scopes: Vm(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), eh = (e, t, n) => {
-	let r = Nm(e.expiresAt);
+}), oh = (e, t, n) => {
+	let r = zm(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, th = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Lm(n, r.id, i);
-	if (a === void 0) throw new Jm(r.id, i);
-	if (r.kind === "pat" || !eh(a, r.refreshSkewMs ?? 6e4, t())) return $m(r, a);
-	let o = Zm(r.id, i), s = Xm.get(o);
+}, sh = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Um(n, r.id, i);
+	if (a === void 0) throw new eh(r.id, i);
+	if (r.kind === "pat" || !oh(a, r.refreshSkewMs ?? 6e4, t())) return ah(r, a);
+	let o = rh(r.id, i), s = nh.get(o);
 	if (s !== void 0) return s;
-	let c = nh({
+	let c = ch({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		Xm.delete(o);
+		nh.delete(o);
 	});
-	return Xm.set(o, c), c;
-}, nh = async (e) => {
-	let { store: t, subjectId: n, now: r } = e, i = e.definition, a = e.sleep ?? Ym, o = i.refreshSkewMs ?? 6e4, s = e.row.id;
+	return nh.set(o, c), c;
+}, ch = async (e) => {
+	let { store: t, subjectId: n, now: r } = e, i = e.definition, a = e.sleep ?? th, o = i.refreshSkewMs ?? 6e4, s = e.row.id;
 	if (await t.updateMany("_voltro_connections", { refreshLockedUntil: new Date(r() + 3e4) }, { where: T(j("id", s), Ie("refreshLockedUntil", new Date(r()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await a(200);
-			let e = await Lm(t, i.id, n);
-			if (e === void 0) throw new Jm(i.id, n);
-			if (!eh(e, o, r())) return $m(i, e);
+			let e = await Um(t, i.id, n);
+			if (e === void 0) throw new eh(i.id, n);
+			if (!oh(e, o, r())) return ah(i, e);
 		}
 		throw new V({
 			connectionId: i.id,
@@ -7883,7 +7887,7 @@ var Gs = (e, t) => {
 	});
 	let l;
 	try {
-		l = await Gm(i, qc(String(c), N(Y, "refreshToken", s)), r);
+		l = await Zm(i, qc(String(c), N(Y, "refreshToken", s)), r);
 	} catch (e) {
 		let n = e instanceof V ? e : new V({
 			connectionId: i.id,
@@ -7900,7 +7904,7 @@ var Gs = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), xm.warn("connection refresh failed", {
+		}), Dm.warn("connection refresh failed", {
 			connectionId: i.id,
 			transient: n.transient,
 			reason: n.reason
@@ -7916,50 +7920,50 @@ var Gs = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(r())
 	};
-	return $m(i, await t.update(Y, s, u) ?? {
+	return ah(i, await t.update(Y, s, u) ?? {
 		...e.row,
 		...u
 	});
-}, rh = (e = 32) => {
+}, lh = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, ih = (e) => {
+}, uh = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, ah = async (e) => {
+}, dh = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return ih(new Uint8Array(t));
-}, oh = 6e5, sh = (e) => `/_voltro/connections/${e}/callback`, ch = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, lh = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${sh(e.id)}`, uh = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = rh(), i = n.pkce === !1 ? null : rh(48), a = lh(n, e.publicUrl), o = P(Tm, wm);
-	await e.store.insert(wm, {
+	return uh(new Uint8Array(t));
+}, fh = 6e5, ph = (e) => `/_voltro/connections/${e}/callback`, mh = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, hh = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${ph(e.id)}`, gh = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = lh(), i = n.pkce === !1 ? null : lh(48), a = hh(n, e.publicUrl), o = P(jm, Am);
+	await e.store.insert(Am, {
 		id: o,
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
-		codeVerifier: i === null ? null : Kc(i, N(wm, "codeVerifier", o)),
-		redirectTo: ch(e.redirectTo),
+		codeVerifier: i === null ? null : Kc(i, N(Am, "codeVerifier", o)),
+		redirectTo: mh(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + oh)
+		expiresAt: new Date(t.getTime() + fh)
 	});
 	let s = new URLSearchParams({
 		response_type: "code",
-		client_id: Dm(n.clientId),
+		client_id: Nm(n.clientId),
 		redirect_uri: a,
 		state: r,
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (s.set("code_challenge", await ah(i)), s.set("code_challenge_method", "S256"));
+	i !== null && (s.set("code_challenge", await dh(i)), s.set("code_challenge_method", "S256"));
 	let c = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${c}${s.toString()}`,
 		state: r
 	};
-}, dh = async (e) => {
+}, _h = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: wm,
+		table: Am,
 		predicate: j("state", e.state),
 		order: [],
 		take: 1,
@@ -7971,8 +7975,8 @@ var Gs = (e, t) => {
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(wm, n.id);
-	let r = String(n.connectionId), i = Nm(n.expiresAt);
+	await e.store.delete(Am, n.id);
+	let r = String(n.connectionId), i = zm(n.expiresAt);
 	if (i !== null && i.getTime() < t.getTime()) throw new V({
 		connectionId: r,
 		reason: "handshake expired — start again",
@@ -7984,17 +7988,17 @@ var Gs = (e, t) => {
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : qc(String(n.codeVerifier), N(wm, "codeVerifier", n.id)), s = await Wm(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : qc(String(n.codeVerifier), N(Am, "codeVerifier", n.id)), s = await Xm(a, {
 		code: e.code,
-		redirectUri: lh(a, e.publicUrl),
+		redirectUri: hh(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		xm.warn("connection identify failed; storing without account details", {
+		Dm.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await Rm({
+	return await Wm({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -8004,11 +8008,11 @@ var Gs = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: ch(String(n.redirectTo ?? "/"))
+		redirectTo: mh(String(n.redirectTo ?? "/"))
 	};
-}, fh = async (e, t = /* @__PURE__ */ new Date()) => {
+}, vh = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: wm,
+		table: Am,
 		predicate: Ie("expiresAt", t),
 		order: [],
 		take: void 0,
@@ -8017,27 +8021,27 @@ var Gs = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, ph, mh = (e) => {
-	ph = e;
-}, hh = () => ph, gh = (e, t) => {
-	let n = ph;
+}, yh, bh = (e) => {
+	yh = e;
+}, xh = () => yh, Sh = (e, t) => {
+	let n = yh;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, _h = (e) => async (t, n) => {
+}, Ch = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new Jm(n, "<anonymous>");
-	return th({
+	if (i === null || i === "") throw new eh(n, "<anonymous>");
+	return sh({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, vh = (e) => {
+}, wh = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new Jm(n, "<anonymous>");
-		return th({
+		if (t === null || t === "") throw new eh(n, "<anonymous>");
+		return sh({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -8049,7 +8053,7 @@ var Gs = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof Jm) return null;
+				if (e instanceof eh) return null;
 				throw e;
 			}
 		},
@@ -8064,17 +8068,17 @@ var Gs = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : Vm(e.store, e.registry, t)
+		})) : qm(e.store, e.registry, t)
 	};
-}, yh = (e, t) => {
+}, Th = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
 	if (n === null || n === "") throw new Bt({ connectionId: t });
 	return n;
-}, bh = (e, t) => {
+}, Eh = (e, t) => {
 	let n = e.registry.get(t);
 	if (n === void 0) throw new zt({ connectionId: t });
 	return n;
-}, xh = (e) => async (t, n) => {
+}, Dh = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -8087,15 +8091,15 @@ var Gs = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : Vm(n.store, e.registry, r);
-}, Sh = (e) => async (t, n) => {
-	let r = bh(e, t.connectionId), i = yh(n, t.connectionId);
+	})) : qm(n.store, e.registry, r);
+}, Oh = (e) => async (t, n) => {
+	let r = Eh(e, t.connectionId), i = Th(n, t.connectionId);
 	if (r.kind !== "oauth2") throw new Rt({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return uh({
+	return gh({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -8103,8 +8107,8 @@ var Gs = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Ch = (e) => async (t, n) => {
-	let r = bh(e, t.connectionId), i = yh(n, t.connectionId);
+}, kh = (e) => async (t, n) => {
+	let r = Eh(e, t.connectionId), i = Th(n, t.connectionId);
 	if (r.kind !== "pat") throw new Rt({
 		connectionId: t.connectionId,
 		expected: "pat",
@@ -8126,7 +8130,7 @@ var Gs = (e, t) => {
 			transient: !1
 		});
 	}
-	return await Rm({
+	return await Wm({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -8137,20 +8141,20 @@ var Gs = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, wh = (e) => async (t, n) => {
-	bh(e, t.connectionId);
-	let r = yh(n, t.connectionId);
-	return { ok: await Bm(n.store, t.connectionId, r) };
-}, Th = "admin:full", Eh = class extends x.TaggedError()("AccessDenied", {
+}, Ah = (e) => async (t, n) => {
+	Eh(e, t.connectionId);
+	let r = Th(n, t.connectionId);
+	return { ok: await Km(n.store, t.connectionId, r) };
+}, jh = "admin:full", Mh = class extends x.TaggedError()("AccessDenied", {
 	action: x.String,
 	resourceType: x.String,
 	resourceId: x.String
-}) {}, Dh = /* @__PURE__ */ new Map(), Oh = (e) => {
+}) {}, Nh = /* @__PURE__ */ new Map(), Ph = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (Dh.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return Dh.set(e.resourceType, e), e;
-}, kh = (e) => Dh.get(e), Ah = () => [...Dh.values()], jh = () => Dh.clear(), Mh = () => Ah().map((e) => {
+	if (Nh.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return Nh.set(e.resourceType, e), e;
+}, Fh = (e) => Nh.get(e), Ih = () => [...Nh.values()], Lh = () => Nh.clear(), Rh = () => Ih().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -8163,7 +8167,7 @@ var Gs = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Nh = (e, t) => {
+}), zh = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -8172,39 +8176,39 @@ var Gs = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, Ph = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Nh(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Fh = (e, t, n, r) => {
+}, Bh = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : zh(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Vh = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = Ph(e, n, r.tuples, r.policy);
+	let a = Bh(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Ih = (e, t, n, r) => {
-	if (!Fh(e, t, n, r)) throw new Eh({
+}, Hh = (e, t, n, r) => {
+	if (!Vh(e, t, n, r)) throw new Mh({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Lh = (e, t, n, r, i) => r.filter((r) => Fh(e, t, {
+}, Uh = (e, t, n, r, i) => r.filter((r) => Vh(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), Rh = (e, t) => {
+}, i)), Wh = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, zh = new Qn(), Bh = (e) => {
-	zh.enterWith(e);
-}, Vh = () => zh.getStore(), Hh = (e, t) => zh.run(e, t), Uh = H({ scope: "voltro:policy" }), Wh, Gh = (e) => {
-	Wh = e;
-}, Kh = () => Wh, qh = (e) => Wh === void 0 && (Wh = e, !0), Jh = () => {
+}, Gh = new Qn(), Kh = (e) => {
+	Gh.enterWith(e);
+}, qh = () => Gh.getStore(), Jh = (e, t) => Gh.run(e, t), Yh = H({ scope: "voltro:policy" }), Xh, Zh = (e) => {
+	Xh = e;
+}, Qh = () => Xh, $h = (e) => Xh === void 0 && (Xh = e, !0), eg = () => {
 	Un((e) => o.gen(function* () {
-		let t = kh(e.resourceType);
-		if (t === void 0) return Uh.warn("policy guard denied — no resource policy registered for this type", {
+		let t = Fh(e.resourceType);
+		if (t === void 0) return Yh.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = Wh;
-		if (n === void 0) return Uh.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = Xh;
+		if (n === void 0) return Yh.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
@@ -8214,14 +8218,14 @@ var Gs = (e, t) => {
 				subject: e.subject,
 				resourceType: e.resourceType,
 				resourceId: e.resourceId,
-				load: Vh()
+				load: qh()
 			}),
 			catch: (e) => e
-		}).pipe(o.catchAll((t) => (Uh.error("policy guard denied — tuple source failed", {
+		}).pipe(o.catchAll((t) => (Yh.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
 		}, t), o.succeed([])))), i = e.subject;
-		return Fh({
+		return Vh({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -8234,10 +8238,10 @@ var Gs = (e, t) => {
 			tuples: r
 		});
 	}));
-}, Yh = (e) => {
+}, tg = (e) => {
 	Promise.resolve().then(e);
-}, Xh = (e) => {
-	let t = e.schedule ?? Yh, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}\u0000${t}`, a = async (t) => {
+}, ng = (e) => {
+	let t = e.schedule ?? tg, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}\u0000${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -8283,23 +8287,23 @@ var Gs = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, Zh = u.effect(ar.HttpClient, o.map(ar.HttpClient, (e) => e.pipe(ar.mapRequestEffect((e) => o.currentSpan.pipe(o.map((t) => e.headers.traceparent === void 0 ? sr.setHeader(e, "traceparent", Ac({
+}, rg = u.effect(ar.HttpClient, o.map(ar.HttpClient, (e) => e.pipe(ar.mapRequestEffect((e) => o.currentSpan.pipe(o.map((t) => e.headers.traceparent === void 0 ? sr.setHeader(e, "traceparent", Ac({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), o.catchAll(() => o.succeed(e))))))), Qh = class extends Error {
+})) : e), o.catchAll(() => o.succeed(e))))))), ig = class extends Error {
 	url;
 	reason;
 	_tag = "SsrfBlockedError";
 	constructor(e, t) {
 		super(`SSRF: blocked outbound request to ${e} — ${t}. If this target is intentional, add its host to \`http.allowHosts\` in app.config.ts.`), this.url = e, this.reason = t, this.name = "SsrfBlockedError";
 	}
-}, $h = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, eg = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), tg = (e, t, n) => n.some((n) => {
+}, ag = (e, t) => e === 0 || e === 10 || e === 127 || e === 100 && t >= 64 && t <= 127 || e === 169 && t === 254 || e === 172 && t >= 16 && t <= 31 || e === 192 && t === 168 || e === 198 && (t === 18 || t === 19) || e >= 224, og = (e) => e === "::" || e === "::1" || e.startsWith("fc") || e.startsWith("fd") || e.startsWith("fe80") || e.startsWith("::ffff:"), sg = (e, t, n) => n.some((n) => {
 	let r = n.trim().toLowerCase();
 	if (r === "") return !1;
 	let i = t === "" ? e : `${e}:${t}`;
 	return r === e || r === i ? !0 : r.startsWith("*.") ? e.endsWith(r.slice(1)) : !1;
-}), ng = (e, t = {}) => {
+}), cg = (e, t = {}) => {
 	let n;
 	try {
 		n = new URL(e);
@@ -8308,30 +8312,30 @@ var Gs = (e, t) => {
 	}
 	if (n.protocol !== "http:" && n.protocol !== "https:") return `blocked scheme "${n.protocol}"`;
 	let r = n.hostname.replace(/^\[|\]$/g, "").toLowerCase();
-	if (tg(r, n.port, t.allowHosts ?? [])) return null;
+	if (sg(r, n.port, t.allowHosts ?? [])) return null;
 	if (r === "localhost" || r.endsWith(".localhost") || r.endsWith(".internal") || r.endsWith(".local")) return `blocked host "${r}"`;
 	let i = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(r);
 	if (i) {
 		let e = Number(i[1]), t = Number(i[2]);
-		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : $h(e, t) ? `blocked private/reserved address ${r}` : null;
+		return e > 255 || t > 255 || Number(i[3]) > 255 || Number(i[4]) > 255 ? "malformed ipv4 literal" : ag(e, t) ? `blocked private/reserved address ${r}` : null;
 	}
 	if (r.includes(":")) {
 		let e = /^::ffff:(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(r);
-		return e ? ng(`${n.protocol}//${e[1]}`, t) : eg(r) ? `blocked private/reserved address ${r}` : null;
+		return e ? cg(`${n.protocol}//${e[1]}`, t) : og(r) ? `blocked private/reserved address ${r}` : null;
 	}
 	return null;
-}, rg = (e = {}) => u.effect(ar.HttpClient, o.map(ar.HttpClient, (t) => {
+}, lg = (e = {}) => u.effect(ar.HttpClient, o.map(ar.HttpClient, (t) => {
 	let n = ar.transform(t, (t, n) => o.suspend(() => {
-		let r = ng(n.url, e);
+		let r = cg(n.url, e);
 		return r === null ? t : o.fail(new or.RequestError({
 			request: n,
 			reason: "Transport",
-			cause: new Qh(n.url, r),
+			cause: new ig(n.url, r),
 			description: `SSRF policy: ${r}`
 		}));
 	}));
 	return ar.followRedirects(n, e.maxRedirects ?? 5);
-})), ig = (e) => {
+})), ug = (e) => {
 	let t = e.now ?? Date.now, n = e.intervalMs ?? 3e4, r = e.maxPending ?? 500, i = /* @__PURE__ */ new Map(), a = !1, o = async () => {
 		if (i.size === 0) return;
 		let t = i;
@@ -8360,7 +8364,7 @@ var Gs = (e, t) => {
 		},
 		pending: () => i.size
 	};
-}, ag = "voltro/audit", og = "voltro/softDelete", sg = "voltro/expires", cg = "voltro/tenant", lg = "voltro/localFirst", ug = (e) => {
+}, dg = "voltro/audit", fg = "voltro/softDelete", pg = "voltro/expires", mg = "voltro/tenant", hg = "voltro/localFirst", gg = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -8410,19 +8414,19 @@ var Gs = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		declaredPrimaryKey: (e) => t.get(e)?.declaredPrimaryKey ?? pg,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? dg,
-		computedFields: (e) => t.get(e)?.computedFields ?? fg,
+		declaredPrimaryKey: (e) => t.get(e)?.declaredPrimaryKey ?? yg,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? _g,
+		computedFields: (e) => t.get(e)?.computedFields ?? vg,
 		versionColumn: (e) => t.get(e)?.versionColumn,
-		generatedColumns: (e) => t.get(e)?.generatedColumns ?? mg,
-		crdtColumns: (e) => t.get(e)?.crdtColumns ?? hg,
+		generatedColumns: (e) => t.get(e)?.generatedColumns ?? bg,
+		crdtColumns: (e) => t.get(e)?.crdtColumns ?? xg,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, dg = /* @__PURE__ */ new Map(), fg = /* @__PURE__ */ new Map(), pg = [], mg = /* @__PURE__ */ new Set(), hg = /* @__PURE__ */ new Set(), gg = ug([]), _g = H({ scope: "store.fieldEncryption" }), vg = (e, t) => {
+}, _g = /* @__PURE__ */ new Map(), vg = /* @__PURE__ */ new Map(), yg = [], bg = /* @__PURE__ */ new Set(), xg = /* @__PURE__ */ new Set(), Sg = gg([]), Cg = H({ scope: "store.fieldEncryption" }), wg = (e, t) => {
 	let n = t, r = process.env.VOLTRO_FIELD_DECRYPT_ON_ERROR === "null" ? "null" : "throw", i = /* @__PURE__ */ new Set(), a = (e) => {
 		let t = `${e.table}.${e.column}`;
-		i.has(t) || (i.add(t), _g.warn("encrypted column degraded to null — could not decrypt with the active key", {
+		i.has(t) || (i.add(t), Cg.warn("encrypted column degraded to null — could not decrypt with the active key", {
 			table: e.table,
 			column: e.column,
 			reason: e.reason,
@@ -8447,7 +8451,7 @@ var Gs = (e, t) => {
 			e.injectExternalChange(t);
 		},
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope },
-		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => vg(e.withNamespace(n), t) },
+		...e.withNamespace === void 0 ? {} : { withNamespace: (n) => wg(e.withNamespace(n), t) },
 		...e.raw === void 0 ? {} : { raw: ((...t) => e.raw(...t)) },
 		...e.close === void 0 ? {} : { close: (t) => e.close(t) },
 		...e.ping === void 0 ? {} : { ping: () => e.ping() },
@@ -8476,17 +8480,17 @@ var Gs = (e, t) => {
 			};
 		},
 		patchJson: async (t, n, r, i, a) => c(t, await e.patchJson(t, n, r, i, o(t, Me(n, r, a), n)), n),
-		transactional: (n) => e.transactional((e) => n(vg(e, t)))
+		transactional: (n) => e.transactional((e) => n(wg(e, t)))
 	};
-}, yg = (e, t) => {
+}, Tg = (e, t) => {
 	if (t === void 0 || t.length === 0) return e;
 	let n = { ...e };
 	for (let e of t) delete n[e];
 	return n;
-}, bg = (e, t) => {
+}, Eg = (e, t) => {
 	let n = F(e), r = n === void 0 ? [] : tt(n);
 	return r.length === 0 ? t ?? [] : t === void 0 ? r : [...t, ...r];
-}, xg = (e, t) => {
+}, Dg = (e, t) => {
 	let n = F(e);
 	if (n === void 0) return;
 	let r = tt(n).filter((e) => t[e] !== void 0);
@@ -8494,14 +8498,14 @@ var Gs = (e, t) => {
 		table: e,
 		columns: r
 	});
-}, Sg = (e, t) => t.length === 0 ? e : e.map((e) => yg(e, t)), Cg = (e, t, n, r, i) => {
+}, Og = (e, t) => t.length === 0 ? e : e.map((e) => Tg(e, t)), kg = (e, t, n, r, i) => {
 	let a = {
 		...t?.(r) ?? {},
 		...n?.(i) ?? {}
 	}, o = e;
 	for (let [e, t] of Object.entries(a)) t !== void 0 && (o = o.where(e, t));
 	return o;
-}, wg = 1e3, Tg = (e, t = wg) => {
+}, Ag = 1e3, jg = (e, t = Ag) => {
 	let n = (e) => typeof e == "number" && Number.isFinite(e) ? e : void 0, r = (e) => Math.max(1, Math.min(Math.floor(e), t)), i = n(e.page);
 	if (i !== void 0) {
 		let t = r(n(e.pageSize) ?? 100);
@@ -8514,37 +8518,37 @@ var Gs = (e, t) => {
 		limit: r(n(e.limit) ?? 100),
 		offset: Math.max(0, Math.floor(n(e.offset) ?? 0))
 	};
-}, Eg = {
+}, Mg = {
 	list: (e, t = {}) => async (n, r) => {
 		let i = n ?? {}, a = r.store.select(e);
 		if (t.columns !== void 0 && t.columns.length > 0) {
-			let n = new Set(bg(e, void 0)), r = t.columns.filter((e) => !n.has(e));
+			let n = new Set(Eg(e, void 0)), r = t.columns.filter((e) => !n.has(e));
 			r.length > 0 && (a = a.select(...r));
 		}
-		t.include !== void 0 && (a = a.with(t.include)), a = Cg(a, t.filter, t.scope, i, r);
+		t.include !== void 0 && (a = a.with(t.include)), a = kg(a, t.filter, t.scope, i, r);
 		for (let e of t.sort ?? []) a = a.orderBy(e.column, e.direction ?? "asc");
 		if (t.paginate === !0) {
-			let { limit: e, offset: n } = Tg(i, t.maxPageSize);
+			let { limit: e, offset: n } = jg(i, t.maxPageSize);
 			a = a.limit(e).offset(n);
 		}
-		return Sg(await a.all(), bg(e, t.redact));
+		return Og(await a.all(), Eg(e, t.redact));
 	},
 	getById: (e, t = {}) => async (n, r) => {
 		let i = r.store.select(e).where("id", n.id);
 		t.include !== void 0 && (i = i.with(t.include));
 		let a = await i.first();
-		return a === null ? null : yg(a, bg(e, t.redact));
+		return a === null ? null : Tg(a, Eg(e, t.redact));
 	},
-	create: (e, t = {}) => async (n, r) => (xg(e, n), yg(await r.store.insert(e, n), bg(e, t.redact))),
+	create: (e, t = {}) => async (n, r) => (Dg(e, n), Tg(await r.store.insert(e, n), Eg(e, t.redact))),
 	update: (e, t = {}) => async (n, r) => {
 		let { id: i, ...a } = n;
-		xg(e, a);
+		Dg(e, a);
 		let o = await r.store.update(e, i, a);
-		return o === null ? null : yg(o, bg(e, t.redact));
+		return o === null ? null : Tg(o, Eg(e, t.redact));
 	},
-	count: (e, t = {}) => async (n, r) => Cg(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
+	count: (e, t = {}) => async (n, r) => kg(r.store.select(e), t.filter, t.scope, n ?? {}, r).count(),
 	remove: (e) => async (t, n) => ({ deleted: await n.store.delete(e, t.id) })
-}, Dg = (e) => {
+}, Ng = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		if (!n.has(e)) switch (n.add(e), e._tag) {
 			case "TypeLiteral":
@@ -8568,7 +8572,7 @@ var Gs = (e, t) => {
 		}
 	};
 	return r(e.ast), t;
-}, Og = (e) => {
+}, Pg = (e) => {
 	let t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set(), r = (e) => {
 		switch (e._tag) {
 			case "Literal": return e.literal === null;
@@ -8600,24 +8604,24 @@ var Gs = (e, t) => {
 		}
 	};
 	return i(e.ast), t;
-}, kg = (e, t) => {
+}, Fg = (e, t) => {
 	let n = e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source];
 	if (n.length === 0) return [];
-	let r = Dg(e.output), i = Og(e.output), a = [];
+	let r = Ng(e.output), i = Pg(e.output), a = [];
 	for (let o of n) for (let n of t.get(o) ?? []) r.has(n) && !i.has(n) && a.push({
 		query: e.name,
 		table: o,
 		column: n
 	});
 	return a;
-}, Ag = (e) => {
+}, Ig = (e) => {
 	if (e.length !== 0) return `A wire-reachable query exposes a server-only column:\n${e.map((e) => `  • query '${e.query}' output declares '${e.column}' — a .serverOnly() column of '${e.table}'`).join("\n")}\nThree ways out, in order of preference:\n  1. Omit the column from the query's output schema. The crud.* read helpers strip these automatically.\n  2. Keep the KEY but type it \`Schema.Null\` — for a view that must stay wire-compatible (an importer that breaks if the key vanishes) while never sending a value. The audit accepts that, because the schema then PROVES no value can flow instead of promising it. Pair it with a \`hasX\` boolean.\n  3. Drop the .serverOnly() marker, if the column may in fact reach a client.\nNote the audit reads the DECLARED shape, not what your handler emits: a field typed \`string\` that you always set to null still fails, and should — the next edit to that handler is one line away from sending it.`;
-}, jg = (e, t) => e.cache?.scope === "global" ? (e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source]).filter((e) => t.has(e)).map((t) => ({
+}, Lg = (e, t) => e.cache?.scope === "global" ? (e.source === void 0 ? [] : Array.isArray(e.source) ? e.source : [e.source]).filter((e) => t.has(e)).map((t) => ({
 	query: e.name,
 	table: t
-})) : [], Mg = (e) => {
+})) : [], Rg = (e) => {
 	if (e.length !== 0) return `A cached query shares one entry across tenants:\n${e.map((e) => `  • query '${e.query}' caches scope:'global' while reading '${e.table}', a tenant()-scoped table`).join("\n")}\n\nscope:'global' stores ONE entry for every caller. On a tenant-scoped table the\nrows depend on who asked, so the first caller's rows are served to the next one.\n\nUse scope:'tenant' — one entry per org, none shared across orgs. Use 'subject'\nif the result also depends on WHICH person is asking, and 'global' only for data\nthat depends on neither.`;
-}, Ng = (e, t) => {
+}, zg = (e, t) => {
 	let n, r = 0;
 	for (let i of t) {
 		let t = 0;
@@ -8628,7 +8632,7 @@ var Gs = (e, t) => {
 		o > r && o >= .6 && (r = o, n = i);
 	}
 	return n;
-}, Pg = (e, t) => {
+}, Bg = (e, t) => {
 	let n = wn(), r = [];
 	for (let i of e) for (let e of Wn(i.source)) {
 		if (In(e)) {
@@ -8644,12 +8648,12 @@ var Gs = (e, t) => {
 		t.size === 0 || t.has(e) || r.push({
 			procedure: i.name,
 			source: e,
-			didYouMean: Ng(e, t),
+			didYouMean: zg(e, t),
 			channel: !1
 		});
 	}
 	return r;
-}, Fg = (e) => {
+}, Vg = (e) => {
 	if (e.length === 0) return;
 	let t = e.map((e) => e.channel ? `  ${e.procedure}: source '${e.source}' names a reactivity channel nobody declared` : `  ${e.procedure}: source '${e.source}' matches no declared table` + (e.didYouMean === void 0 ? "" : ` — did you mean '${e.didYouMean}'?`)), n = e.some((e) => e.channel) ? "\nFor the `channel:` entries: declare it with `reactivityChannel(<name>)` and pass the\nCHANNEL as `source:`, not its key as a string. Authoring against the object is what\nmakes a channel source impossible to leave stale — you cannot import a declaration\nthat does not exist." : "";
 	return `${e.length} reactive source(s) name a table that does not exist:\n${t.join("\n")}\n
@@ -8658,13 +8662,13 @@ update again, which is indistinguishable from "nothing has changed" — so the
 symptom is silence, and silence is what this surface exists to eliminate.
 A \`source:\` is a STRING, so \`tsc\` cannot see a stale one and a rename leaves it
 behind quietly.` + n;
-}, Ig = (e) => e.old ?? e.new ?? {}, Lg = (e) => String(Ig(e).id ?? ""), Rg = (e) => {
-	let t = Ig(e).tenantId;
+}, Hg = (e) => e.old ?? e.new ?? {}, Ug = (e) => String(Hg(e).id ?? ""), Wg = (e) => {
+	let t = Hg(e).tenantId;
 	return typeof t == "string" ? t : null;
-}, zg = (e) => e.op === "update" && (e.old?.deletedAt ?? null) === null && (e.new?.deletedAt ?? null) !== null, Bg = (e, t) => {
-	let n = zg(t);
+}, Gg = (e) => e.op === "update" && (e.old?.deletedAt ?? null) === null && (e.new?.deletedAt ?? null) !== null, Kg = (e, t) => {
+	let n = Gg(t);
 	return t.op !== "delete" && !n ? [] : e.filter((e) => e.targetTable === t.table && e.policy !== "keep" && (n ? e.onSoftDelete : e.onHardDelete !== !1));
-}, Vg = (e) => {
+}, qg = (e) => {
 	let t = [], n = [];
 	for (let r of e) for (let [e, i] of Object.entries(r.fields ?? {})) {
 		if (i.refOnSoftDelete === void 0 || i.type !== "reference" || i.references === void 0) continue;
@@ -8693,10 +8697,10 @@ behind quietly.` + n;
   otherwise the runtime would hard-delete them, and restoring the parent would restore nothing.
   Add the mixin, or use { onSoftDelete: 'setNull' } on a nullable column.`);
 	return t;
-}, Hg = async (e, t, n) => {
-	let r = Bg(t, n);
+}, Jg = async (e, t, n) => {
+	let r = Kg(t, n);
 	if (r.length === 0) return [];
-	let i = Lg(n), a = Rg(n), o = [];
+	let i = Ug(n), a = Wg(n), o = [];
 	for (let t of r) {
 		let n = await e.query({
 			table: t.table,
@@ -8720,7 +8724,7 @@ behind quietly.` + n;
 		});
 	}
 	return o;
-}, Ug = (e, t) => {
+}, Yg = (e, t) => {
 	let n = [];
 	for (let r of e) for (let e of r.appliedPluginRefs ?? []) {
 		let i = e.column, a;
@@ -8739,9 +8743,9 @@ behind quietly.` + n;
 		});
 	}
 	return n.filter((e) => e.policy !== "keep");
-}, Wg = H({ scope: "voltro:replica-observations" }), Gg = "_voltro_replica_observations", Kg = (e) => e instanceof Date ? e.getTime() : typeof e == "number" ? e : NaN, qg = /* @__PURE__ */ new Set(), Jg = () => {
-	qg.clear();
-}, Yg = async (e, t, n) => {
+}, Xg = H({ scope: "voltro:replica-observations" }), Zg = "_voltro_replica_observations", Qg = (e) => e instanceof Date ? e.getTime() : typeof e == "number" ? e : NaN, $g = /* @__PURE__ */ new Set(), e_ = () => {
+	$g.clear();
+}, t_ = async (e, t, n) => {
 	let r = kr(), i = {
 		replicaId: r.replicaId,
 		startedAt: new Date(r.startedAt),
@@ -8751,7 +8755,7 @@ behind quietly.` + n;
 		reachableAt: r.reachable ? r.reachableAt ?? null : null
 	};
 	try {
-		await e.upsert(Gg, {
+		await e.upsert(Zg, {
 			...i,
 			writtenAt: /* @__PURE__ */ new Date()
 		}, { conflictColumns: ["replicaId", "kind"] });
@@ -8760,12 +8764,12 @@ behind quietly.` + n;
 			kind: t,
 			error: String(e)
 		};
-		qg.has(t) ? Wg.debug("could not record this replica’s observation", n) : (qg.add(t), Wg.warn("could not record this replica’s observation — fleet views will report this replica as stale for as long as this keeps failing", n));
+		$g.has(t) ? Xg.debug("could not record this replica’s observation", n) : ($g.add(t), Xg.warn("could not record this replica’s observation — fleet views will report this replica as stale for as long as this keeps failing", n));
 	}
-}, Xg = async (e, t, n = Date.now()) => {
+}, n_ = async (e, t, n = Date.now()) => {
 	try {
 		return (await e.query({
-			table: Gg,
+			table: Zg,
 			predicate: {
 				column: "kind",
 				op: "eq",
@@ -8776,42 +8780,42 @@ behind quietly.` + n;
 			skip: void 0,
 			projection: void 0
 		})).map((e) => {
-			let r = Kg(e.writtenAt);
+			let r = Qg(e.writtenAt);
 			return {
 				replicaId: String(e.replicaId ?? ""),
-				startedAt: Kg(e.startedAt),
+				startedAt: Qg(e.startedAt),
 				version: e.version === null || e.version === void 0 ? void 0 : String(e.version),
 				kind: t,
-				payload: Qg(e.payload),
+				payload: i_(e.payload),
 				reachableAt: e.reachableAt === null || e.reachableAt === void 0 ? void 0 : String(e.reachableAt),
 				writtenAt: r,
 				ageMs: Number.isNaN(r) ? NaN : Math.max(0, n - r)
 			};
 		});
 	} catch (e) {
-		throw new Zg(String(e));
+		throw new r_(String(e));
 	}
-}, Zg = class extends Error {
+}, r_ = class extends Error {
 	detail;
 	_tag = "ObservationsUnavailable";
 	constructor(e) {
 		super("the replica-observation table could not be read"), this.detail = e;
 	}
-}, Qg = (e) => {
+}, i_ = (e) => {
 	if (typeof e == "string") try {
 		return JSON.parse(e);
 	} catch {
 		return;
 	}
-}, $g = async (e, t) => {
+}, a_ = async (e, t) => {
 	try {
-		await e.deleteMany(Gg, { where: {
+		await e.deleteMany(Zg, { where: {
 			column: "replicaId",
 			op: "eq",
 			value: t
 		} });
 	} catch {}
-}, e_ = 12e4, t_ = (e, t, n = e_) => {
+}, o_ = 12e4, s_ = (e, t, n = o_) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		if (t.replicaId === "") continue;
@@ -8846,26 +8850,26 @@ behind quietly.` + n;
 		departed: l,
 		...m === void 0 ? { versions: void 0 } : { versions: m }
 	};
-}, n_ = class extends x.TaggedError()("CircuitOpen", {
+}, c_ = class extends x.TaggedError()("CircuitOpen", {
 	name: x.String,
 	retryAfterMs: x.Number
-}) {}, r_ = {
+}) {}, l_ = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, i_ = { make: (n) => o.gen(function* () {
-	let r = n.name ?? "circuit", i = a.toMillis(a.decode(n.resetTimeout)), s = n.halfOpenSuccessThreshold ?? 1, c = n.isFailure ?? (() => !0), l = yield* v.make(r_), u = o.gen(function* () {
+}, u_ = { make: (n) => o.gen(function* () {
+	let r = n.name ?? "circuit", i = a.toMillis(a.decode(n.resetTimeout)), s = n.halfOpenSuccessThreshold ?? 1, c = n.isFailure ?? (() => !0), l = yield* v.make(l_), u = o.gen(function* () {
 		let e = yield* v.get(l);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* v.set(l, t >= s ? r_ : {
+			yield* v.set(l, t >= s ? l_ : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* v.set(l, r_));
+		e.failureCount !== 0 && (yield* v.set(l, l_));
 	}), d = o.gen(function* () {
 		let e = yield* t.currentTimeMillis, r = yield* v.get(l);
 		if (r.tag === "half-open" || r.tag === "open") {
@@ -8903,7 +8907,7 @@ behind quietly.` + n;
 			if (e.isInterruptedOnly(t)) return o.void;
 			let n = e.failureOption(t), r = n._tag === "Some" ? n.value : void 0;
 			return c(r) ? d : o.void;
-		})) : yield* o.fail(new n_({
+		})) : yield* o.fail(new c_({
 			name: r,
 			retryAfterMs: n
 		}));
@@ -8912,15 +8916,15 @@ behind quietly.` + n;
 		value: v.get(l).pipe(o.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(m, "reset", {
-		value: v.set(l, r_),
+		value: v.set(l, l_),
 		enumerable: !0
 	}), m;
-}) }, a_, o_ = (e) => {
-	a_ = e;
-}, s_ = () => {
-	a_ = void 0;
-}, c_ = () => a_, l_ = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? Kn(t.id ?? "system") : Kn(t.id ?? "system", t.scopes), r = t.store ?? a_?.dataStore, i = t.schemaRegistry ?? a_?.schemaRegistry, a = t.dialect ?? a_?.dialect;
+}) }, d_, f_ = (e) => {
+	d_ = e;
+}, p_ = () => {
+	d_ = void 0;
+}, m_ = () => d_, h_ = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Kn(t.id ?? "system") : Kn(t.id ?? "system", t.scopes), r = t.store ?? d_?.dataStore, i = t.schemaRegistry ?? d_?.schemaRegistry, a = t.dialect ?? d_?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
@@ -8931,13 +8935,13 @@ behind quietly.` + n;
 			rowFilter: No
 		})
 	});
-}, u_ = Symbol.for("@voltro/runtime/connectionState"), d_ = globalThis, f_ = d_[u_] ??= /* @__PURE__ */ new WeakMap(), p_ = (e, t) => {
-	let n = f_.get(e);
+}, g_ = Symbol.for("@voltro/runtime/connectionState"), __ = globalThis, v_ = __[g_] ??= /* @__PURE__ */ new WeakMap(), y_ = (e, t) => {
+	let n = v_.get(e);
 	if (n === void 0 && !e.signal.aborted) {
-		n = /* @__PURE__ */ new Map(), f_.set(e, n);
+		n = /* @__PURE__ */ new Map(), v_.set(e, n);
 		let t = n;
 		e.signal.addEventListener("abort", () => {
-			t.clear(), f_.delete(e);
+			t.clear(), v_.delete(e);
 		}, { once: !0 });
 	}
 	let r = n, i = (n) => {
@@ -8961,7 +8965,7 @@ behind quietly.` + n;
 			t.delete(e);
 		})
 	};
-}, m_ = (e) => u.mergeAll(u.succeed(Pt, Pt.of(({ headers: t, clientId: n }) => o.promise(async () => {
+}, b_ = (e) => u.mergeAll(u.succeed(Pt, Pt.of(({ headers: t, clientId: n }) => o.promise(async () => {
 	let r = await e.resolveSubject({
 		headers: Ws(n, t),
 		clientId: n
@@ -8976,7 +8980,7 @@ behind quietly.` + n;
 		...o !== void 0 && Number.isSafeInteger(o) ? { resumeFrom: o } : {},
 		...a !== void 0 && /^[a-zA-Z0-9_-]{1,128}$/.test(a) ? { reconcile: a } : {}
 	};
-})))), h_ = (e) => {
+})))), x_ = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -9004,7 +9008,7 @@ behind quietly.` + n;
 			return r.loadSnapshot();
 		}
 	};
-}, g_ = (e = process.env) => {
+}, S_ = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -9016,7 +9020,7 @@ behind quietly.` + n;
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, __ = () => {
+}, C_ = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -9041,7 +9045,7 @@ behind quietly.` + n;
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, v_ = Symbol.for("@voltro/ScheduleDefinition"), y_ = (e) => typeof e == "object" && !!e && v_ in e, b_ = 18e5, x_ = (e) => {
+}, w_ = Symbol.for("@voltro/ScheduleDefinition"), T_ = (e) => typeof e == "object" && !!e && w_ in e, E_ = 18e5, D_ = (e) => {
 	let t = r.parse(e.cron, e.timezone);
 	if (s.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin").\nThe field is non-optional in \`ScheduleDefinition\`, so an ABSENT one is a tsc error and never reaches here. Arriving at this message means the value was present and EMPTY — almost always \`process.env.TZ ?? ''\` or a config lookup that missed. A reporter lost a crashloop to it, so the distinction is worth stating: this is not a check the type could have made for you.`);
@@ -9053,20 +9057,20 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
 		maxRuntimeMs: e.maxRuntimeMs ?? 18e5,
-		[v_]: !0
+		[w_]: !0
 	};
-}, S_ = (e) => r.unsafeParse(e.cron, e.timezone), C_ = (e, t = /* @__PURE__ */ new Date()) => r.next(S_(e), t), w_ = (e, t, n, i) => {
-	let a = S_(e), o = [], s = r.next(a, t);
+}, O_ = (e) => r.unsafeParse(e.cron, e.timezone), k_ = (e, t = /* @__PURE__ */ new Date()) => r.next(O_(e), t), A_ = (e, t, n, i) => {
+	let a = O_(e), o = [], s = r.next(a, t);
 	for (; s.getTime() <= n.getTime() && o.length <= i;) o.push(s), s = r.next(a, s);
 	return o;
-}, T_ = (e, t, n) => {
+}, j_ = (e, t, n) => {
 	if (t === void 0) return e;
 	if (t.trim() === "") throw Error("transaction tenantId must be non-empty");
 	if (t === e.tenantId) return e;
 	if (n) throw Error("transaction cannot change tenant inside an active transaction");
 	if (e.type !== "system") throw Error("only a system context can select another transaction tenant");
 	return qn(e, t);
-}, E_ = 5e3, D_ = 3e4, O_ = "_voltro_schedule_backfill_requests", k_ = R(O_, {
+}, M_ = 5e3, N_ = 3e4, P_ = "_voltro_schedule_backfill_requests", F_ = R(P_, {
 	id: I({ prefix: "schbackfill" }),
 	name: z(),
 	from: B(),
@@ -9085,34 +9089,34 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 	activeIndex: L().nullable(),
 	results: je(),
 	error: z().nullable()
-}), A_ = x.String.pipe(x.minLength(1), x.maxLength(256)), j_ = x.Struct({
-	runId: A_,
+}), I_ = x.String.pipe(x.minLength(1), x.maxLength(256)), L_ = x.Struct({
+	runId: I_,
 	status: x.Literal("succeeded", "failed", "skipped", "missed")
-}), M_ = x.Struct({
-	id: A_,
-	name: A_,
+}), R_ = x.Struct({
+	id: I_,
+	name: I_,
 	from: x.DateFromSelf,
 	to: x.DateFromSelf,
 	occurrences: x.Array(x.Number.pipe(x.finite())),
 	status: x.Literal("queued", "running", "completed", "interrupted"),
-	owner: x.NullOr(A_),
+	owner: x.NullOr(I_),
 	createdAt: x.DateFromSelf,
 	updatedAt: x.DateFromSelf,
 	cursor: x.Number.pipe(x.int(), x.nonNegative()),
 	activeIndex: x.NullOr(x.Number.pipe(x.int(), x.nonNegative())),
-	results: x.Array(j_),
+	results: x.Array(L_),
 	error: x.NullOr(x.String)
-}), N_ = async (e, t) => {
+}), z_ = async (e, t) => {
 	let n = await e.query({
-		table: O_,
+		table: P_,
 		predicate: j("id", t),
 		order: [],
 		take: 1,
 		skip: void 0,
 		projection: void 0
 	});
-	return n[0] === void 0 ? void 0 : x.decodeUnknownSync(M_)(n[0]);
-}, P_ = async (e, t) => {
+	return n[0] === void 0 ? void 0 : x.decodeUnknownSync(R_)(n[0]);
+}, B_ = async (e, t) => {
 	let n = t.from.getTime(), r = t.to.getTime();
 	if (!Number.isFinite(n) || !Number.isFinite(r) || n >= r) throw Error("Invalid backfill range");
 	if (t.occurrences.length > 1e4) throw Error("Backfill occurrence limit exceeded");
@@ -9120,7 +9124,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		let t = e.getTime();
 		if (!Number.isFinite(t) || t <= i || t > r) throw Error("Backfill occurrences must be ordered within (from, to]");
 		return i = t, t;
-	}), o = x.decodeUnknownSync(M_)({
+	}), o = x.decodeUnknownSync(R_)({
 		...t,
 		occurrences: a,
 		status: "queued",
@@ -9131,19 +9135,19 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		activeIndex: null,
 		results: [],
 		error: null
-	}), s = await e.insertIgnoreWithOutcome(O_, o, { conflictColumns: ["id"] }), c = x.decodeUnknownSync(M_)(s.row);
+	}), s = await e.insertIgnoreWithOutcome(P_, o, { conflictColumns: ["id"] }), c = x.decodeUnknownSync(R_)(s.row);
 	if (c.name !== o.name || c.from.getTime() !== n || c.to.getTime() !== r) throw new Gr("Backfill request ID already belongs to a different schedule or range");
 	return {
 		request: c,
 		created: s.outcome === "inserted"
 	};
-}, F_ = async (e, t, n) => (x.decodeUnknownSync(A_)(n), e.transactional(async (e) => await e.updateMany(O_, {
+}, V_ = async (e, t, n) => (x.decodeUnknownSync(I_)(n), e.transactional(async (e) => await e.updateMany(P_, {
 	status: "running",
 	owner: n,
 	updatedAt: /* @__PURE__ */ new Date()
-}, { where: T(j("id", t), j("status", "queued")) }) === 1)), I_ = async (e, t, n, r) => {
-	if (!await F_(e, t, n)) return N_(e, t);
-	let i = await N_(e, t);
+}, { where: T(j("id", t), j("status", "queued")) }) === 1)), H_ = async (e, t, n, r) => {
+	if (!await V_(e, t, n)) return z_(e, t);
+	let i = await z_(e, t);
 	if (!i) throw Error("Accepted backfill request disappeared");
 	let a = i, o = () => T(j("id", t), j("status", "running"), j("owner", n)), s, c, l = !1, u, d = () => {
 		s = setTimeout(() => {
@@ -9154,7 +9158,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 			}, (e) => {
 				u = e;
 			});
-		}, E_), s.unref?.();
+		}, M_), s.unref?.();
 	};
 	d();
 	try {
@@ -9163,14 +9167,14 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 			if (await e.transactional(async (e) => e.updateMany("_voltro_schedule_backfill_requests", {
 				activeIndex: n,
 				updatedAt: /* @__PURE__ */ new Date()
-			}, { where: T(o(), j("cursor", n), De("activeIndex")) })) !== 1) return N_(e, t);
-			let i = x.decodeUnknownSync(j_)(await r(new Date(a.occurrences[n]))), s = [...a.results, i];
+			}, { where: T(o(), j("cursor", n), De("activeIndex")) })) !== 1) return z_(e, t);
+			let i = x.decodeUnknownSync(L_)(await r(new Date(a.occurrences[n]))), s = [...a.results, i];
 			if (await e.transactional(async (e) => e.updateMany("_voltro_schedule_backfill_requests", {
 				cursor: n + 1,
 				activeIndex: null,
 				results: s,
 				updatedAt: /* @__PURE__ */ new Date()
-			}, { where: T(o(), j("cursor", n), j("activeIndex", n)) })) !== 1) return N_(e, t);
+			}, { where: T(o(), j("cursor", n), j("activeIndex", n)) })) !== 1) return z_(e, t);
 			a = {
 				...a,
 				cursor: n + 1,
@@ -9178,12 +9182,12 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 				results: s
 			};
 		}
-		await e.transactional(async (e) => e.updateMany(O_, {
+		await e.transactional(async (e) => e.updateMany(P_, {
 			status: "completed",
 			updatedAt: /* @__PURE__ */ new Date()
 		}, { where: T(o(), j("cursor", a.occurrences.length), De("activeIndex")) }));
 	} catch (t) {
-		await e.transactional(async (e) => e.updateMany(O_, {
+		await e.transactional(async (e) => e.updateMany(P_, {
 			status: "interrupted",
 			error: t instanceof Error ? t.message : String(t),
 			updatedAt: /* @__PURE__ */ new Date()
@@ -9191,24 +9195,24 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 	} finally {
 		l = !0, clearTimeout(s), await c;
 	}
-	return N_(e, t);
-}, L_ = (e, t = /* @__PURE__ */ new Date()) => e.transactional((e) => e.updateMany(O_, {
+	return z_(e, t);
+}, U_ = (e, t = /* @__PURE__ */ new Date()) => e.transactional((e) => e.updateMany(P_, {
 	status: "interrupted",
 	error: "Backfill owner stopped reporting; check the active run before starting another range",
 	updatedAt: t
-}, { where: T(j("status", "running"), Fe("updatedAt", /* @__PURE__ */ new Date(t.getTime() - D_))) })), R_ = (e, t) => e.transactional((e) => e.updateMany(O_, {
+}, { where: T(j("status", "running"), Fe("updatedAt", /* @__PURE__ */ new Date(t.getTime() - N_))) })), W_ = (e, t) => e.transactional((e) => e.updateMany(P_, {
 	status: "interrupted",
 	error: "Scheduler stopped before the backfill settled",
 	updatedAt: /* @__PURE__ */ new Date()
-}, { where: T(j("status", "running"), j("owner", t)) })), z_ = "_voltro_wakeups", B_ = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, V_ = (e) => ({
+}, { where: T(j("status", "running"), j("owner", t)) })), G_ = "_voltro_wakeups", K_ = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, q_ = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), H_ = async (e, t) => {
-	await e.upsert(z_, {
-		id: B_(t),
+}), J_ = async (e, t) => {
+	await e.upsert(G_, {
+		id: K_(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -9218,7 +9222,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, U_ = async (e, t) => e.delete(z_, B_(t)), W_ = async (e, t) => await e.update(z_, B_(t), { status: "fired" }) !== null, G_ = (e, t) => ({ and: [{
+}, Y_ = async (e, t) => e.delete(G_, K_(t)), X_ = async (e, t) => await e.update(G_, K_(t), { status: "fired" }) !== null, Z_ = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -9226,16 +9230,16 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 	column: "status",
 	op: "eq",
 	value: t
-}] }), K_ = async (e, t) => await e.updateMany(z_, { status: "fired" }, { where: G_(B_(t), "pending") }) > 0, q_ = async (e, t) => {
-	await e.updateMany(z_, { status: "pending" }, { where: G_(B_(t), "fired") });
-}, J_ = {
+}] }), Q_ = async (e, t) => await e.updateMany(G_, { status: "fired" }, { where: Z_(K_(t), "pending") }) > 0, $_ = async (e, t) => {
+	await e.updateMany(G_, { status: "pending" }, { where: Z_(K_(t), "fired") });
+}, ev = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, Y_ = async (e, t) => {
+}, tv = async (e, t) => {
 	let n = {
-		table: z_,
-		predicate: J_,
+		table: G_,
+		predicate: ev,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -9244,18 +9248,18 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(V_);
-}, X_ = async (e, t, n = 500) => {
-	let r = await Y_(e, n), i = t.getTime();
+	return (await e.query(n)).map(q_);
+}, nv = async (e, t, n = 500) => {
+	let r = await tv(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, Z_ = async (e) => (await Y_(e, 1))[0] ?? null, Q_ = {
+}, rv = async (e) => (await tv(e, 1))[0] ?? null, iv = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, $_ = async (e, t = {}) => {
+}, av = async (e, t = {}) => {
 	let n = {
-		table: z_,
-		predicate: Q_,
+		table: G_,
+		predicate: iv,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -9264,14 +9268,14 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		skip: void 0,
 		projection: void 0
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
-	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(z_, String(t.id)) && a++;
+	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(G_, String(t.id)) && a++;
 	return a;
-}, ev = Zf, tv = "default", nv = {
+}, ov = Zf, sv = "default", cv = {
 	kind: "single",
 	tryClaim: async () => !0
-}, rv = "_voltro_schedule_claims", iv = 6e4, av = 64, ov = (e) => Math.max((e ?? 6e4) * 64, 6e4), sv = (e, t, n) => {
+}, lv = "_voltro_schedule_claims", uv = 6e4, dv = 64, fv = (e) => Math.max((e ?? 6e4) * 64, 6e4), pv = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: rv,
+		table: lv,
 		order: [],
 		predicate: j("id", t),
 		projection: ["id"],
@@ -9282,7 +9286,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		if (!(r - (i.get(t) ?? 0) < n)) {
 			i.set(t, r);
 			try {
-				await e.deleteMany(rv, { where: T(j("scheduleName", t), Fe("claimedAt", new Date(r - n))) });
+				await e.deleteMany(lv, { where: T(j("scheduleName", t), Fe("claimedAt", new Date(r - n))) });
 			} catch {}
 		}
 	};
@@ -9294,13 +9298,13 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 				if (await r(u)) return !1;
 			} catch {}
 			try {
-				return await e.insert(rv, {
+				return await e.insert(lv, {
 					id: u,
 					scheduleName: i,
 					bucket: l,
 					claimedBy: t,
 					claimedAt: /* @__PURE__ */ new Date()
-				}), await a(i, ov(s)), !0;
+				}), await a(i, fv(s)), !0;
 			} catch (e) {
 				try {
 					if (await r(u)) return !1;
@@ -9312,25 +9316,25 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 			}
 		}
 	};
-}, cv = 3e5, lv = 3e5, uv = 6e4, dv = 864e5, fv = 200, pv = /* @__PURE__ */ new Set([
+}, mv = 3e5, hv = 3e5, gv = 6e4, _v = 864e5, vv = 200, yv = /* @__PURE__ */ new Set([
 	"succeeded",
 	"failed",
 	"skipped",
 	"missed"
-]), X = "_voltro_schedule_runs", mv = 3e4, hv = 3, gv = 1e3, _v = (e, t) => Math.max(e * 2, t * hv * 2), vv = (e, t, n) => {
-	let r = n.heartbeatMs * hv, i = e.heartbeatAt == null ? NaN : new Date(e.heartbeatAt).getTime();
+]), X = "_voltro_schedule_runs", bv = 3e4, xv = 3, Sv = 1e3, Cv = (e, t) => Math.max(e * 2, t * xv * 2), wv = (e, t, n) => {
+	let r = n.heartbeatMs * xv, i = e.heartbeatAt == null ? NaN : new Date(e.heartbeatAt).getTime();
 	if (Number.isFinite(i)) return t - i < r;
 	let a = e.firedAt == null ? NaN : new Date(e.firedAt).getTime();
 	return Number.isFinite(a) ? t - a < n.maxRuntimeMs + r : !1;
-}, yv = async (e, t) => {
-	let { store: n, coordinator: i, buildContext: a, replicaId: s, log: c, onRunEvent: l, interceptFire: u } = t, d = t.runHeartbeatMs !== void 0 && t.runHeartbeatMs > 0 ? t.runHeartbeatMs : mv, f = t.queueAdoptionWindowMs !== void 0 && t.queueAdoptionWindowMs > 0 ? t.queueAdoptionWindowMs : void 0, p = t.dormancy === "sleep", m = t.dormancyTenantId ?? "default", h = /* @__PURE__ */ new Map(), g = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Map(), v = !1, y = `${s}:${yt()}`, b, x, S = !1, C = () => {
+}, Tv = async (e, t) => {
+	let { store: n, coordinator: i, buildContext: a, replicaId: s, log: c, onRunEvent: l, interceptFire: u } = t, d = t.runHeartbeatMs !== void 0 && t.runHeartbeatMs > 0 ? t.runHeartbeatMs : bv, f = t.queueAdoptionWindowMs !== void 0 && t.queueAdoptionWindowMs > 0 ? t.queueAdoptionWindowMs : void 0, p = t.dormancy === "sleep", m = t.dormancyTenantId ?? "default", h = /* @__PURE__ */ new Map(), g = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Map(), v = !1, y = `${s}:${yt()}`, b, x, S = !1, C = () => {
 		v || S || b !== void 0 || (b = setTimeout(() => {
-			b = void 0, S = !0, x = L_(n).then(() => {}, (e) => c.warn("schedule backfill recovery unavailable", { reason: Z(e) })).finally(() => {
+			b = void 0, S = !0, x = U_(n).then(() => {}, (e) => c.warn("schedule backfill recovery unavailable", { reason: Z(e) })).finally(() => {
 				S = !1, v || C();
 			});
 		}, 1e4), b.unref?.());
 	}, w = new Map(e.map((e) => [e.name, e])), ee = (e, t) => {
-		l?.(e, xv(t));
+		l?.(e, Dv(t));
 	}, te = async (e, t, r, i, a, o) => {
 		try {
 			let c = `sr_${yt()}`, l = await n.insert(X, {
@@ -9399,7 +9403,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 			}), r = Date.now(), i = {
 				heartbeatMs: d,
 				maxRuntimeMs: e.maxRuntimeMs ?? 18e5
-			}, a = t.find((e) => vv(e, r, i));
+			}, a = t.find((e) => wv(e, r, i));
 			if (a === void 0) return;
 			let o = a.heartbeatAt ?? a.firedAt;
 			return {
@@ -9438,7 +9442,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		replicaId: s
 	}, { where: T(j("id", e), j("status", "queued")) }) > 0, se = (e, t) => {
 		try {
-			let n = S_(e), i = r.next(n, t), a = r.next(n, i).getTime() - i.getTime();
+			let n = O_(e), i = r.next(n, t), a = r.next(n, i).getTime() - i.getTime();
 			return a > 0 ? a : d;
 		} catch {
 			return d;
@@ -9461,12 +9465,12 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		for (let n of a) {
 			if (n.id === i) continue;
 			let r = new Date(n.scheduledAt);
-			if (vv(n, o, s)) return {
+			if (wv(n, o, s)) return {
 				kind: "blocked",
 				behind: r
 			};
 			let a = n.heartbeatAt ?? n.firedAt ?? n.scheduledAt, c = o - new Date(a).getTime();
-			if (c <= (f ?? _v(se(e, r), d))) return {
+			if (c <= (f ?? Cv(se(e, r), d))) return {
 				kind: "adopt",
 				runId: n.id,
 				scheduledAt: r,
@@ -9560,7 +9564,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 						reason: Z(t)
 					});
 				}
-				await ae(gv);
+				await ae(Sv);
 			}
 		} finally {
 			clearInterval(o);
@@ -9602,7 +9606,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 					scheduleName: e.name,
 					trigger: r,
 					runId: p,
-					subject: ev
+					subject: ov
 				})
 			}, l = async () => {
 				if (e.workflow !== void 0) {
@@ -9636,7 +9640,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 			let n = Z(t).includes("exceeded maxRuntimeMs"), r = ye(t).dbMessage, i = typeof r == "string" && r !== "" ? `${Z(t)} — ${r}` : Z(t);
 			p && await ne(p, {
 				status: "failed",
-				errorTag: n ? "timeout" : bv(t),
+				errorTag: n ? "timeout" : Ev(t),
 				errorMessage: i,
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - m
@@ -9707,8 +9711,8 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		}
 	}, me = async (e) => {
 		try {
-			let t = r.next(S_(e), /* @__PURE__ */ new Date());
-			await H_(n, {
+			let t = r.next(O_(e), /* @__PURE__ */ new Date());
+			await J_(n, {
 				tenantId: m,
 				kind: "schedule",
 				refId: e.name,
@@ -9722,7 +9726,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 		}
 	}, he = 2147483647, ge = (e) => {
 		if (v) return;
-		let n = S_(e), i = r.next(n, /* @__PURE__ */ new Date()), a = () => {
+		let n = O_(e), i = r.next(n, /* @__PURE__ */ new Date()), a = () => {
 			if (v) return;
 			let n = i.getTime() - Date.now();
 			if (n > he) {
@@ -9753,10 +9757,10 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 				projection: void 0
 			}), t = Date.now(), r = {
 				heartbeatMs: d,
-				maxRuntimeMs: b_
+				maxRuntimeMs: E_
 			};
 			for (let n of e) {
-				if (w.has(n.name) || vv(n, t, r)) continue;
+				if (w.has(n.name) || wv(n, t, r)) continue;
 				let e = n.heartbeatAt ?? n.firedAt ?? n.scheduledAt;
 				await le(n.id, n.name, new Date(n.scheduledAt), t - new Date(e).getTime(), "no schedule of this name is declared any more, so nothing can take this firing");
 			}
@@ -9787,7 +9791,7 @@ Use a five-field expression, or leave this schedule on trigger: 'self' (the in-a
 			return;
 		}
 		if (!a) return;
-		let o = S_(e), s = [], l = r.next(o, a), u = Date.now();
+		let o = O_(e), s = [], l = r.next(o, a), u = Date.now();
 		for (; l.getTime() < u && s.length < 1e3;) s.push(l), l = r.next(o, l);
 		if (s.length !== 0) {
 			if (c.info("schedule: backfill", {
@@ -9818,9 +9822,9 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		external: e.length - N.length,
 		coordinator: i.kind
 	}), await M();
-	let P = t.externalTriggerSkewMs !== void 0 && t.externalTriggerSkewMs > 0 ? t.externalTriggerSkewMs : cv, be = i.kind === "advisoryLock" ? i : sv(n, s, c), F = (e, t, n) => {
+	let P = t.externalTriggerSkewMs !== void 0 && t.externalTriggerSkewMs > 0 ? t.externalTriggerSkewMs : mv, be = i.kind === "advisoryLock" ? i : pv(n, s, c), F = (e, t, n) => {
 		try {
-			let i = S_(e), a = r.next(i, new Date(t.getTime() - n)), o, s = 0;
+			let i = O_(e), a = r.next(i, new Date(t.getTime() - n)), o, s = 0;
 			for (; a.getTime() <= t.getTime() && s++ < 1e3;) o = a, a = r.next(i, a);
 			return o;
 		} catch {
@@ -9860,7 +9864,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			errorTag: t.errorTag === null || t.errorTag === void 0 ? null : String(t.errorTag),
 			errorMessage: t.errorMessage === null || t.errorMessage === void 0 ? null : String(t.errorMessage)
 		};
-	}, we = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "external"), L = t.externalMissedPolicy ?? "record", Te = t.externalReconcileMs !== void 0 && t.externalReconcileMs > 0 ? t.externalReconcileMs : lv, Ee, De = async (e) => {
+	}, we = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "external"), L = t.externalMissedPolicy ?? "record", Te = t.externalReconcileMs !== void 0 && t.externalReconcileMs > 0 ? t.externalReconcileMs : hv, Ee, De = async (e) => {
 		try {
 			let t = (await n.query({
 				table: X,
@@ -9880,17 +9884,17 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}, Oe = async () => {
 		let e = Date.now();
 		for (let t of we) try {
-			let n = new Date(e - xe(t, new Date(e))), r = await De(t.name) ?? /* @__PURE__ */ new Date(e - dv);
+			let n = new Date(e - xe(t, new Date(e))), r = await De(t.name) ?? /* @__PURE__ */ new Date(e - _v);
 			if (r.getTime() >= n.getTime()) continue;
-			let i = w_(t, r, n, fv);
+			let i = A_(t, r, n, vv);
 			if (i.length === 0) continue;
-			i.length > fv && c.warn("schedule: more unfired occurrences than one reconciliation records", {
+			i.length > vv && c.warn("schedule: more unfired occurrences than one reconciliation records", {
 				name: t.name,
-				cap: fv,
+				cap: vv,
 				since: r.toISOString()
 			});
 			let a = 0;
-			for (let e of i.slice(0, fv)) await be.tryClaim(t.name, e) && (L === "record-and-run" ? await A(t, e, "external", "external") : await te(t, e, null, "missed", "external", "external"), a += 1);
+			for (let e of i.slice(0, vv)) await be.tryClaim(t.name, e) && (L === "record-and-run" ? await A(t, e, "external", "external") : await te(t, e, null, "missed", "external", "external"), a += 1);
 			a > 0 && (Qa(t.name, a), c.warn("schedule: occurrences were never triggered by the external scheduler", {
 				name: t.name,
 				count: a,
@@ -9930,7 +9934,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			kind: "ahead",
 			arrivalAt: n,
 			now: a,
-			toleranceMs: uv
+			toleranceMs: gv
 		};
 		let o = xe(r, n), s = F(r, n, o);
 		if (s === void 0) return c.warn("schedule: external trigger matched no occurrence — the deployed cadence and the declared one disagree", {
@@ -10004,24 +10008,24 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			let n = await A(t, /* @__PURE__ */ new Date(), "self", "cluster");
 			return p && await me(t), n;
 		},
-		backfillRequest: async (e) => (await L_(n), C(), N_(n, e)),
+		backfillRequest: async (e) => (await U_(n), C(), z_(n, e)),
 		startBackfillRange: async (e, t, r, i) => {
 			if (v) throw Error("scheduler stopped");
 			let a = w.get(e);
 			if (!a) throw Error(`Unknown schedule "${e}"`);
 			if (!Number.isInteger(i.cap) || i.cap < 1 || i.cap > 1e4) throw Error("Invalid backfill cap");
 			if (!(t.getTime() < r.getTime())) throw Error("Invalid backfill range");
-			let o = w_(a, t, r, i.cap);
+			let o = A_(a, t, r, i.cap);
 			if (o.length > i.cap) throw Error("Backfill occurrence limit exceeded");
-			await L_(n), C();
-			let s = await P_(n, {
+			await U_(n), C();
+			let s = await B_(n, {
 				id: i.requestId,
 				name: e,
 				from: t,
 				to: r,
 				occurrences: o
 			});
-			return I_(n, i.requestId, y, async (e) => {
+			return H_(n, i.requestId, y, async (e) => {
 				if (v) throw Error("Scheduler stopped during backfill");
 				let t = await A(a, e, "manual");
 				if (!t) throw Error("Backfill firing has no recorded run ID");
@@ -10051,7 +10055,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			let i = w.get(e);
 			if (!i) throw Error(`scheduler.backfillRange: unknown schedule "${e}"`);
 			if (!(t.getTime() < n.getTime())) throw Error(`scheduler.backfillRange("${e}"): 'from' (${t.toISOString()}) must be before 'to' (${n.toISOString()})`);
-			let a = w_(i, t, n, r.cap);
+			let a = A_(i, t, n, r.cap);
 			if (a.length > r.cap) throw Error(`scheduler.backfillRange("${e}"): more than ${r.cap} occurrences in ${t.toISOString()}..${n.toISOString()} — narrow the range or raise the cap`);
 			let o = [];
 			for (let e of a) {
@@ -10067,18 +10071,18 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		shutdown: async () => {
 			v = !0;
 			let e = b !== void 0 || x !== void 0;
-			clearTimeout(b), await x, e && await R_(n, y), Ee && clearTimeout(Ee);
+			clearTimeout(b), await x, e && await W_(n, y), Ee && clearTimeout(Ee);
 			for (let e of h.values()) clearTimeout(e);
 			h.clear();
 			for (let e of [...D]) e();
 			D.clear(), O?.(), c.info("scheduler: stopped");
 		}
 	};
-}, Z = (e) => e?.message ?? String(e), bv = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, xv = (e) => {
+}, Z = (e) => e?.message ?? String(e), Ev = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, Dv = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, Sv = 6e4, Cv = (e) => {
+}, Ov = 6e4, kv = (e) => {
 	if (!Number.isFinite(e) || e < 6e4 || e % 6e4 != 0) return;
 	let t = e / 6e4;
 	if (t === 1) return "* * * * *";
@@ -10087,25 +10091,25 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	if (t % 60 != 0) return;
 	let n = t / 60;
 	return n < 24 ? 24 % n == 0 ? `0 */${n} * * *` : void 0 : n === 24 ? "0 0 * * *" : void 0;
-}, wv = (e, t) => {
+}, Av = (e, t) => {
 	if (t < 6e4) return `"${e}" ticks every ${t} ms. No platform scheduler can express sub-minute cadence — and this is not a cron: its real trigger is an arrival, and the interval is only the ceiling for when reactivity is unavailable. It stays on its in-process timer.`;
-	if (Cv(t) === void 0) return `"${e}" ticks every ${t} ms, which no five-field cron expression fires at — cron matches instants rather than measuring intervals, so only cadences that tile the hour or the day evenly can be expressed. Choose an interval that divides 60 minutes or 24 hours. It stays on its in-process timer.`;
-}, Tv = Symbol.for("@voltro/externalizedCoordinatedTasks"), Ev = () => {
-	let e = globalThis, t = e[Tv];
+	if (kv(t) === void 0) return `"${e}" ticks every ${t} ms, which no five-field cron expression fires at — cron matches instants rather than measuring intervals, so only cadences that tile the hour or the day evenly can be expressed. Choose an interval that divides 60 minutes or 24 hours. It stays on its in-process timer.`;
+}, jv = Symbol.for("@voltro/externalizedCoordinatedTasks"), Mv = () => {
+	let e = globalThis, t = e[jv];
 	if (t !== void 0) return t;
 	let n = /* @__PURE__ */ new Map();
-	return e[Tv] = n, n;
-}, Dv = (e) => {
-	Ev().set(e.name, e);
-}, Ov = (e) => {
-	Ev().delete(e);
-}, kv = (e) => Ev().get(e), Av = () => [...Ev().keys()].sort(), jv = 3e4, Mv = (e = process.env) => {
+	return e[jv] = n, n;
+}, Nv = (e) => {
+	Mv().set(e.name, e);
+}, Pv = (e) => {
+	Mv().delete(e);
+}, Fv = (e) => Mv().get(e), Iv = () => [...Mv().keys()].sort(), Lv = 3e4, Rv = (e = process.env) => {
 	let t = e.VOLTRO_POLL_CEILING_MS;
-	if (t === void 0) return jv;
+	if (t === void 0) return Lv;
 	let n = Number(t);
-	return Number.isFinite(n) && n > 0 ? n : jv;
-}, Nv = (e, t, n, r) => {
-	let i = Math.max(t, r.maxIdleIntervalMs ?? Mv()), a = !1, o, s = !1, c = t, l = !1, u = !1, d = 0, f = (e) => {
+	return Number.isFinite(n) && n > 0 ? n : Lv;
+}, zv = (e, t, n, r) => {
+	let i = Math.max(t, r.maxIdleIntervalMs ?? Rv()), a = !1, o, s = !1, c = t, l = !1, u = !1, d = 0, f = (e) => {
 		if (!a) {
 			if (o !== void 0 && clearTimeout(o), o = void 0, e === "disarm") {
 				s = !0;
@@ -10148,21 +10152,21 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 				}), f(t);
 				return;
 			}
-			f(Pv(s, t, c, i, r.disarmWhenIdle ?? !1));
+			f(Bv(s, t, c, i, r.disarmWhenIdle ?? !1));
 		} finally {
 			l = !1, u && !a && (u = !1, f(0));
 		}
 	}, m = async () => {
 		let i = new Date(Math.floor(Date.now() / t) * t);
 		return await (r.externalClaim ?? r.coordinator).tryClaim(e, i, t) ? (await n(), "ran") : "deduplicated";
-	}, h = r.externalize === !0 ? wv(e, t) : void 0, g = r.externalize === !0 && h === void 0;
+	}, h = r.externalize === !0 ? Av(e, t) : void 0, g = r.externalize === !0 && h === void 0;
 	return h !== void 0 && r.log?.warn(`coordinated schedule: REFUSING to externalise this task — ${h}`, {
 		task: e,
 		intervalMs: t
-	}), g ? (Dv({
+	}), g ? (Nv({
 		name: e,
 		intervalMs: t,
-		cron: Cv(t),
+		cron: kv(t),
 		run: m
 	}), r.log?.info("coordinated schedule: externalised — no in-process timer", {
 		task: e,
@@ -10183,19 +10187,19 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			}
 		},
 		stop: () => {
-			a || (a = !0, o !== void 0 && clearTimeout(o), o = void 0, g && Ov(e));
+			a || (a = !0, o !== void 0 && clearTimeout(o), o = void 0, g && Pv(e));
 		}
 	};
-}, Pv = (e, t, n, r, i = !1) => {
+}, Bv = (e, t, n, r, i = !1) => {
 	if (e === void 0 || !e.idle) return t;
 	if (e.nextDueInMs === void 0 && i) return "disarm";
 	let a = Math.min(Math.max(n, t) * 2, r);
 	return e.nextDueInMs === void 0 ? a : Math.max(t, Math.min(a, e.nextDueInMs));
-}, Fv = (e) => (t, n, r, i) => Nv(t, n, r, {
+}, Vv = (e) => (t, n, r, i) => zv(t, n, r, {
 	...e,
 	...e.externalizeTask === void 0 ? {} : { externalize: e.externalizeTask(t) },
 	...i?.disarmWhenIdle === void 0 ? {} : { disarmWhenIdle: i.disarmWhenIdle }
-}), Iv = R("_voltro_schedule_runs", {
+}), Hv = R("_voltro_schedule_runs", {
 	id: I({ prefix: "schrun" }),
 	name: z(),
 	status: z().oneOf([
@@ -10227,19 +10231,19 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	replicaId: z().nullable(),
 	heartbeatAt: B().nullable(),
 	result: je().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), Lv = R("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), Uv = R("_voltro_schedule_claims", {
 	id: I({ prefix: "schclaim" }),
 	scheduleName: z(),
 	bucket: z(),
 	claimedBy: z(),
 	claimedAt: B()
-}).index(["scheduleName", "claimedAt"]).index(["claimedAt"]), Rv = R("_voltro_change_claims", {
+}).index(["scheduleName", "claimedAt"]).index(["claimedAt"]), Wv = R("_voltro_change_claims", {
 	id: I({ prefix: "chclaim" }),
 	scope: z(),
 	key: z(),
 	claimedBy: z(),
 	claimedAt: B()
-}).unique(["scope", "key"]).index(["claimedAt"]), zv = R("_voltro_traces", {
+}).unique(["scope", "key"]).index(["claimedAt"]), Gv = R("_voltro_traces", {
 	id: I({ prefix: "span" }),
 	traceId: z(),
 	spanId: z(),
@@ -10263,7 +10267,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	durationMs: L(),
 	attributes: je().nullable(),
 	events: je().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Bv = R("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), Kv = R("_voltro_undo_log", {
 	id: I({ prefix: "undo" }),
 	tag: z(),
 	label: z().nullable(),
@@ -10274,17 +10278,17 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	crossesAction: ae().default(!1),
 	undone: ae().default(!1),
 	createdAt: B().default("now")
-}).index(["subjectId", "createdAt"]), Vv = (e = process.env) => {
+}).index(["subjectId", "createdAt"]), qv = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, Hv = (e = process.env) => {
+}, Jv = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t !== "off" && t !== "0" && t !== "false";
-}, Uv = (e) => e.startsWith("_voltro"), Wv = async (e, t, n) => (await e.query({
+}, Yv = (e) => e.startsWith("_voltro"), Xv = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: j("id", n),
 	order: []
-}))[0] ?? null, Gv = (e, t, n = () => /* @__PURE__ */ new Set()) => new Proxy(e, { get(e, r, i) {
+}))[0] ?? null, Zv = (e, t, n = () => /* @__PURE__ */ new Set()) => new Proxy(e, { get(e, r, i) {
 	let a = (e, t) => {
 		if (t === null) return null;
 		let r = n(e);
@@ -10295,7 +10299,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	};
 	if (r === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return Uv(n) || t({
+		return Yv(n) || t({
 			table: n,
 			op: "insert",
 			next: i
@@ -10304,8 +10308,8 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	if (r === "update") return async (r, i, o) => {
 		let s = n(r), c = Object.keys(o);
 		if (s.size > 0 && c.length > 0 && c.every((e) => s.has(e))) return await e.update(r, i, o);
-		let l = Uv(r) ? null : a(r, await Wv(e, r, i)), u = await e.update(r, i, o);
-		return Uv(r) || t({
+		let l = Yv(r) ? null : a(r, await Xv(e, r, i)), u = await e.update(r, i, o);
+		return Yv(r) || t({
 			table: r,
 			op: "update",
 			id: i,
@@ -10314,8 +10318,8 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		}), u;
 	};
 	if (r === "delete") return async (n, r) => {
-		let i = Uv(n) ? null : await Wv(e, n, r), a = await e.delete(n, r);
-		return !Uv(n) && a && t({
+		let i = Yv(n) ? null : await Xv(e, n, r), a = await e.delete(n, r);
+		return !Yv(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -10324,10 +10328,10 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	};
 	let o = Reflect.get(e, r, i);
 	return typeof o == "function" ? o.bind(e) : o;
-} }), Kv = (e, t = () => /* @__PURE__ */ new Set()) => {
+} }), Qv = (e, t = () => /* @__PURE__ */ new Set()) => {
 	let n = [];
 	return {
-		tx: Gv(e, (e) => n.push(e), t),
+		tx: Zv(e, (e) => n.push(e), t),
 		persist: async (e, t) => {
 			if (n.length === 0 || t.tag.startsWith("__voltro")) return;
 			let r = t.subject;
@@ -10343,13 +10347,13 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			});
 		}
 	};
-}, qv = (e) => e.startsWith("_voltro"), Jv = (e) => {
+}, $v = (e) => e.startsWith("_voltro"), ey = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, Yv = (e) => {
+}, ty = (e) => {
 	let t = /* @__PURE__ */ new Map(), n = (e, n) => {
-		if (n == null || qv(e)) return;
-		let r = Jv(n);
+		if (n == null || $v(e)) return;
+		let r = ey(n);
 		r !== void 0 && t.set(`${e}\u0000${r}`, {
 			table: e,
 			id: r,
@@ -10374,9 +10378,9 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		} }),
 		drain: () => [...t.values()]
 	};
-}, Xv = (e) => {
+}, ny = (e) => {
 	if (e !== !0 && e !== void 0) return e === !1 ? {} : e;
-}, Zv = async (e) => {
+}, ry = async (e) => {
 	if (e.touched.length === 0) return;
 	let t = {
 		store: e.store,
@@ -10385,7 +10389,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	for (let { table: n, row: r } of e.touched) {
 		let e = F(n)?.appliedRules;
 		if (e !== void 0 && e.length !== 0) for (let i of e) {
-			let e = Xv(await i.predicate(r, t));
+			let e = ny(await i.predicate(r, t));
 			if (e !== void 0) {
 				if (i.severity === "warning") {
 					Zn.warn("business rule violated (warning)", {
@@ -10406,14 +10410,14 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			}
 		}
 	}
-}, Qv = (e) => {
+}, iy = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, $v = (e) => {
-	let t = Qv(e);
+}, ay = (e) => {
+	let t = iy(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -10437,28 +10441,28 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			row: e.prev
 		};
 	}
-}, ey = (e) => {
-	if (e.crossesAction) throw new ty(e.invocationId, "action");
+}, oy = (e) => {
+	if (e.crossesAction) throw new sy(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = $v(e.changes[n]);
+		let r = ay(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, ty = class extends Error {
+}, sy = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, ny = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, cy = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, ry = class {
+}, ly = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -10494,7 +10498,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			redo: [...this.undone]
 		};
 	}
-}, iy = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, uy = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -10511,7 +10515,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, ay = async (e, t) => {
+}, dy = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -10529,21 +10533,21 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, oy = async (e, t) => {
-	for (let n of t) await ay(e, n);
-}, sy = (e) => e.request?.subject?.id ?? null, cy = (e) => e === !0 || e === 1, ly = async (e, t, n) => (await e.query({
+}, fy = async (e, t) => {
+	for (let n of t) await dy(e, n);
+}, py = (e) => e.request?.subject?.id ?? null, my = (e) => e === !0 || e === 1, hy = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: j("id", n),
 	order: []
-}))[0] ?? null, uy = (e) => {
+}))[0] ?? null, gy = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, dy = (e) => e.id ?? e.next?.id ?? e.prev?.id, fy = async (e, t) => {
-	let n = sy(t);
+}, _y = (e) => e.id ?? e.next?.id ?? e.prev?.id, vy = async (e, t) => {
+	let n = py(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: j("subjectId", n),
@@ -10552,46 +10556,46 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: cy(e.undone),
-		crossesAction: cy(e.crossesAction),
+		undone: my(e.undone),
+		crossesAction: my(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, py = async (e, t) => {
-	let n = await ly(t.store, "_voltro_undo_log", e.invocationId);
+}, yy = async (e, t) => {
+	let n = await hy(t.store, "_voltro_undo_log", e.invocationId);
 	if (!n) throw new gn({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== sy(t)) throw new hn({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== py(t)) throw new hn({ invocationId: e.invocationId });
 	return n;
-}, my = async (e, t) => {
-	let n = await py(e, t);
-	if (cy(n.undone)) return { ok: !0 };
-	if (cy(n.crossesAction)) throw new mn({
+}, by = async (e, t) => {
+	let n = await yy(e, t);
+	if (my(n.undone)) return { ok: !0 };
+	if (my(n.crossesAction)) throw new mn({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = uy(n.changes);
+	let r = gy(n.changes);
 	for (let n of r) {
-		let r = dy(n);
-		if (r !== void 0 && !ny(await ly(t.store, n.table, r), n.next ?? null)) throw new mn({
+		let r = _y(n);
+		if (r !== void 0 && !cy(await hy(t.store, n.table, r), n.next ?? null)) throw new mn({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: sy(t),
+		subject: py(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await oy(t.store, ey(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, hy = async (e, t) => {
-	let n = await py(e, t);
-	if (!cy(n.undone)) return { ok: !0 };
-	for (let e of uy(n.changes)) {
-		let n = dy(e);
+	return await fy(t.store, oy(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, xy = async (e, t) => {
+	let n = await yy(e, t);
+	if (!my(n.undone)) return { ok: !0 };
+	for (let e of gy(n.changes)) {
+		let n = _y(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, gy = "_voltro_approvals", _y = 864e5, vy = R(gy, {
+}, Sy = "_voltro_approvals", Cy = 864e5, wy = R(Sy, {
 	id: I({ prefix: "apv" }),
 	intentKey: z().maxLength(191),
 	procedure: z(),
@@ -10610,14 +10614,14 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	requestedAt: B().default("now"),
 	expiresAt: B(),
 	consumedAt: B().nullable()
-}).index(["status", "expiresAt"]).index(["requestedBy"]), yy = () => {
+}).index(["status", "expiresAt"]).index(["requestedBy"]), Ty = () => {
 	qe({
 		source: "framework",
-		table: gy,
+		table: Sy,
 		timeColumn: "requestedAt",
 		ttlMs: Xe(process.env.VOLTRO_APPROVALS_TTL_HOURS, 720)
 	});
-}, by = (e, t) => e.map((e) => Mn(e) ? { kind: "authenticated" } : Fn(e) ? {
+}, Ey = (e, t) => e.map((e) => Mn(e) ? { kind: "authenticated" } : Fn(e) ? {
 	kind: "policy",
 	action: Vn(e, t),
 	resourceType: e.resourceType,
@@ -10627,7 +10631,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	scope: typeof e.scope == "string" ? [e.scope] : [...e.scope],
 	mode: e.mode ?? "all",
 	resource: e.resource?.(t) ?? null
-}), xy = (e) => e.map((e) => e.kind === "authenticated" ? { authenticated: !0 } : e.kind === "policy" ? {
+}), Dy = (e) => e.map((e) => e.kind === "authenticated" ? { authenticated: !0 } : e.kind === "policy" ? {
 	action: e.action,
 	resourceType: e.resourceType,
 	resource: () => e.resource ?? void 0
@@ -10635,7 +10639,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	scope: e.scope,
 	mode: e.mode,
 	...e.resource === null ? {} : { resource: () => e.resource ?? void 0 }
-}), Sy = (e) => e.flatMap((e) => e.kind === "policy" ? [`${e.resourceType}:${e.action}`] : e.kind === "authenticated" ? ["authenticated"] : [...e.scope]), Cy = (e) => {
+}), Oy = (e) => e.flatMap((e) => e.kind === "policy" ? [`${e.resourceType}:${e.action}`] : e.kind === "authenticated" ? ["authenticated"] : [...e.scope]), ky = (e) => {
 	let t = (e) => {
 		if (Array.isArray(e)) return e.map(t);
 		if (typeof e == "object" && e) {
@@ -10646,7 +10650,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		return e;
 	};
 	return JSON.stringify(t(e) ?? null);
-}, wy = (e) => {
+}, Ay = (e) => {
 	let t = [
 		e.procedure,
 		e.requestedBy ?? "",
@@ -10655,48 +10659,48 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		e.nonce ?? ""
 	].map((e) => `${e.length}:${e}`).join("");
 	return _t("sha256").update(t, "utf8").digest("hex");
-}, Ty = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : (/* @__PURE__ */ new Date(0)).toISOString(), Ey = (e) => e instanceof Date ? e.getTime() : typeof e == "string" ? Date.parse(e) : 0, Dy = (e) => {
+}, jy = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" ? e : (/* @__PURE__ */ new Date(0)).toISOString(), My = (e) => e instanceof Date ? e.getTime() : typeof e == "string" ? Date.parse(e) : 0, Ny = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Oy = async (e, t) => (await e.query({
+}, Py = async (e, t) => (await e.query({
 	table: "_voltro_approvals",
 	predicate: j("intentKey", t),
 	order: []
-}))[0] ?? null, ky = async (e, t) => (await e.query({
+}))[0] ?? null, Fy = async (e, t) => (await e.query({
 	table: "_voltro_approvals",
 	predicate: j("id", t),
 	order: []
-}))[0] ?? null, Ay = async (e, t, n) => {
+}))[0] ?? null, Iy = async (e, t, n) => {
 	let r = String(t.intentKey ?? ""), i = r.includes("#") ? r : `${r}#${String(t.id)}`;
-	await e.update(gy, String(t.id), {
+	await e.update(Sy, String(t.id), {
 		...n,
 		intentKey: i
 	});
-}, jy = (e) => {
+}, Ly = (e) => {
 	let t = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)$/.exec(e.trim());
 	if (t === null) return null;
 	let n = Number(t[1]);
 	if (!(Number.isFinite(n) && n > 0)) return null;
 	let r = t[2];
 	return n * (r === "ms" ? 1 : r === "s" ? 1e3 : r === "m" ? 6e4 : r === "h" ? 36e5 : 864e5);
-}, My = (e) => {
+}, Ry = (e) => {
 	let t = e.store, n = e.now ?? Date.now, r = e.defaultExpiryMs ?? 864e5;
-	yy();
+	Ty();
 	let i = (e) => {
 		if (e.expiresIn === void 0) return r;
-		let t = jy(e.expiresIn);
+		let t = Ly(e.expiresIn);
 		if (t === null) throw Error(`requiresApproval.expiresIn must be an interval like '4h' / '30m' (got ${JSON.stringify(e.expiresIn)})`);
 		return t;
 	}, a = async (e, r, a) => {
-		let o = by(e.policy.approvers, e.input), s = P({
+		let o = Ey(e.policy.approvers, e.input), s = P({
 			kind: "typeid",
 			prefix: "apv"
-		}, gy), c = n();
-		await t.insertIgnore(gy, {
+		}, Sy), c = n();
+		await t.insertIgnore(Sy, {
 			id: s,
 			intentKey: r,
 			procedure: e.procedure,
@@ -10705,7 +10709,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			tenantId: e.subject?.tenantId ?? null,
 			payload: a,
 			approverGuards: JSON.stringify(o),
-			approverScopes: JSON.stringify(Sy(o)),
+			approverScopes: JSON.stringify(Oy(o)),
 			reason: e.policy.reason ?? null,
 			status: "pending",
 			decidedBy: null,
@@ -10716,7 +10720,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			expiresAt: new Date(c + i(e.policy)),
 			consumedAt: null
 		}, { conflictColumns: ["intentKey"] });
-		let l = await Oy(t, r);
+		let l = await Py(t, r);
 		if (l === null) throw new Nt({
 			procedure: e.procedure,
 			message: "the approval intent was written and could not be read back"
@@ -10725,27 +10729,27 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}, o = (e, t) => new jt({
 		approvalId: String(e.id),
 		procedure: String(e.procedure),
-		expiresAt: Ty(e.expiresAt),
-		requiredScopes: Sy(Dy(e.approverGuards)),
+		expiresAt: jy(e.expiresAt),
+		requiredScopes: Oy(Ny(e.approverGuards)),
 		reason: e.reason ?? null,
 		created: t
 	});
 	return { admit: async (e) => {
-		let r = Cy(e.input), i = wy({
+		let r = ky(e.input), i = Ay({
 			procedure: e.procedure,
 			requestedBy: e.subject?.id ?? null,
 			tenantId: e.subject?.tenantId ?? null,
 			payload: r,
 			nonce: e.nonce
-		}), s = await Oy(t, i);
+		}), s = await Py(t, i);
 		if (s === null) throw o(await a(e, i, r), !0);
-		let c = String(s.status ?? "pending"), l = Ey(s.expiresAt);
-		if ((c === "pending" || c === "approved") && n() > l) throw await Ay(t, s, { status: "expired" }), new Et({
+		let c = String(s.status ?? "pending"), l = My(s.expiresAt);
+		if ((c === "pending" || c === "approved") && n() > l) throw await Iy(t, s, { status: "expired" }), new Et({
 			approvalId: String(s.id),
-			expiredAt: Ty(s.expiresAt)
+			expiredAt: jy(s.expiresAt)
 		});
 		if (c === "pending") throw o(s, !1);
-		if (c === "rejected") throw await Ay(t, s, {}), new At({
+		if (c === "rejected") throw await Iy(t, s, {}), new At({
 			approvalId: String(s.id),
 			decidedBy: s.decidedBy ?? null,
 			note: s.note ?? null
@@ -10756,17 +10760,17 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 				consumedAt: new Date(n()),
 				intentKey: `${i}#${String(s.id)}`
 			}, { where: T(j("id", String(s.id)), j("status", "approved")) }) === 1) return;
-			throw s = await Oy(t, i), s === null ? o(await a(e, i, r), !0) : o(s, !1);
+			throw s = await Py(t, i), s === null ? o(await a(e, i, r), !0) : o(s, !1);
 		}
-		throw await Ay(t, s, {}), o(await a(e, i, r), !0);
+		throw await Iy(t, s, {}), o(await a(e, i, r), !0);
 	} };
-}, Ny, Py = (e) => {
-	Ny = e;
-}, Fy = () => Ny, Iy = () => {
-	Ny = void 0;
-}, Ly = async (e) => {
+}, zy, By = (e) => {
+	zy = e;
+}, Vy = () => zy, Hy = () => {
+	zy = void 0;
+}, Uy = async (e) => {
 	if (e.policy === void 0) return;
-	let t = Fy();
+	let t = Vy();
 	if (t === void 0) throw new Nt({
 		procedure: e.procedure,
 		message: `${e.procedure} declares \`requiresApproval\` and no approvals gate is installed on this boot path, so the framework cannot record the intent or verify a decision. Refusing the call rather than running it unapproved.`
@@ -10779,17 +10783,17 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		input: e.input,
 		...e.traceId === void 0 ? {} : { traceId: e.traceId }
 	});
-}, Ry = async (e, t) => {
-	let n = t.now ?? Date.now, r = await ky(e, t.approvalId);
+}, Wy = async (e, t) => {
+	let n = t.now ?? Date.now, r = await Fy(e, t.approvalId);
 	if (r === null) throw new Ot({ approvalId: t.approvalId });
 	let i = String(r.status ?? "pending");
 	if (i !== "pending") throw new kt({
 		approvalId: t.approvalId,
 		status: i
 	});
-	if (n() > Ey(r.expiresAt)) throw await Ay(e, r, { status: "expired" }), new Et({
+	if (n() > My(r.expiresAt)) throw await Iy(e, r, { status: "expired" }), new Et({
 		approvalId: t.approvalId,
-		expiredAt: Ty(r.expiresAt)
+		expiredAt: jy(r.expiresAt)
 	});
 	let a = t.approver?.id ?? null;
 	if (a === null) throw new Dt({
@@ -10801,7 +10805,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		approvalId: t.approvalId,
 		subjectId: a
 	});
-	let s = xy(Dy(r.approverGuards)), c = await o.runPromise(Cn(t.approver, s, JSON.parse(String(r.payload ?? "null"))));
+	let s = Dy(Ny(r.approverGuards)), c = await o.runPromise(Cn(t.approver, s, JSON.parse(String(r.payload ?? "null"))));
 	if (c) throw new Dt({
 		approvalId: t.approvalId,
 		required: "_tag" in c && c._tag === "ScopeError" ? c.required : null,
@@ -10814,7 +10818,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		decidedAt: new Date(n()),
 		note: t.note ?? null
 	}, { where: T(j("id", t.approvalId), j("status", "pending")) }) !== 1) {
-		let n = await ky(e, t.approvalId);
+		let n = await Fy(e, t.approvalId);
 		throw new kt({
 			approvalId: t.approvalId,
 			status: String(n?.status ?? "unknown")
@@ -10824,47 +10828,47 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		approvalId: t.approvalId,
 		status: l
 	};
-}, zy = async (e, t, n) => {
+}, Gy = async (e, t, n) => {
 	let r = t?.id ?? null;
 	if (r === null) return [];
 	let i = n?.now ?? Date.now, a = await e.query({
-		table: gy,
+		table: Sy,
 		predicate: we("status", ["pending", "approved"]),
 		order: []
 	}), s = [];
 	for (let e of a) {
-		if (i() > Ey(e.expiresAt)) continue;
-		let n = Dy(e.approverGuards), a = (e.requestedBy ?? null) === r, c = a ? "requested" : null;
-		a || await o.runPromise(Cn(t, xy(n), JSON.parse(String(e.payload ?? "null")))) === null && String(e.status) === "pending" && (c = "to-decide"), c !== null && s.push({
+		if (i() > My(e.expiresAt)) continue;
+		let n = Ny(e.approverGuards), a = (e.requestedBy ?? null) === r, c = a ? "requested" : null;
+		a || await o.runPromise(Cn(t, Dy(n), JSON.parse(String(e.payload ?? "null")))) === null && String(e.status) === "pending" && (c = "to-decide"), c !== null && s.push({
 			id: String(e.id),
 			procedure: String(e.procedure),
 			kind: String(e.kind) === "action" ? "action" : "mutation",
 			requestedBy: e.requestedBy ?? null,
 			status: String(e.status ?? "pending"),
 			reason: e.reason ?? null,
-			requiredScopes: Sy(n),
-			requestedAt: Ty(e.requestedAt),
-			expiresAt: Ty(e.expiresAt),
+			requiredScopes: Oy(n),
+			requestedAt: jy(e.requestedAt),
+			expiresAt: jy(e.expiresAt),
 			decidedBy: e.decidedBy ?? null,
-			decidedAt: e.decidedAt == null ? null : Ty(e.decidedAt),
+			decidedAt: e.decidedAt == null ? null : jy(e.decidedAt),
 			note: e.note ?? null,
 			relation: c
 		});
 	}
 	return s.sort((e, t) => t.requestedAt.localeCompare(e.requestedAt)).slice(0, n?.limit ?? 50);
-}, By = () => yt(), Vy = (e) => e.request?.subject ?? null, Hy = async (e, t) => zy(t.store, Vy(t), { limit: e.limit ?? 50 }), Uy = async (e, t) => Ry(t.store, {
+}, Ky = () => yt(), qy = (e) => e.request?.subject ?? null, Jy = async (e, t) => Gy(t.store, qy(t), { limit: e.limit ?? 50 }), Yy = async (e, t) => Wy(t.store, {
 	approvalId: e.approvalId,
 	decision: e.decision,
-	approver: Vy(t),
+	approver: qy(t),
 	...e.note === void 0 ? {} : { note: e.note }
-}), Wy = (e) => e.request?.subject ?? null, Gy = (e) => {
+}), Xy = (e) => e.request?.subject ?? null, Zy = (e) => {
 	if (typeof e != "object" || !e) return null;
 	let t = e.tenantId;
 	return typeof t == "string" ? t : null;
-}, Ky = (e, t) => e === null ? !1 : e.type === "system" || jn(e, St) ? !0 : e.type === "anonymous" || e.id == null ? !1 : Gy(t) === (e.tenantId ?? null), qy = (e, t) => {
-	let n = Wy(e);
-	return t.filter((e) => Ky(n, e.subject));
-}, Jy = (e, t, n) => Number.isFinite(e) && e !== void 0 ? Math.min(Math.max(Math.floor(e), 1), n) : t, Yy = (e, t) => ({
+}, Qy = (e, t) => e === null ? !1 : e.type === "system" || jn(e, St) ? !0 : e.type === "anonymous" || e.id == null ? !1 : Zy(t) === (e.tenantId ?? null), $y = (e, t) => {
+	let n = Xy(e);
+	return t.filter((e) => Qy(n, e.subject));
+}, eb = (e, t, n) => Number.isFinite(e) && e !== void 0 ? Math.min(Math.max(Math.floor(e), 1), n) : t, tb = (e, t) => ({
 	table: "_voltro_workflow_runs",
 	order: [{
 		column: "startedAt",
@@ -10874,16 +10878,16 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	take: t,
 	skip: void 0,
 	projection: void 0
-}), Xy = async (e, t) => {
-	let n = (await e.store.query(Yy(j("id", t), 1)))[0];
-	return n !== void 0 && Ky(Wy(e), n.subject) ? n : void 0;
-}, Zy = async (e, t) => {
-	let n = await t.store.query(Yy(j("id", e.id), 1));
-	return qy(t, n.length > 0 ? n : await t.store.query(Yy(j("executionId", e.id), 1)));
-}, Qy = async (e, t) => {
+}), nb = async (e, t) => {
+	let n = (await e.store.query(tb(j("id", t), 1)))[0];
+	return n !== void 0 && Qy(Xy(e), n.subject) ? n : void 0;
+}, rb = async (e, t) => {
+	let n = await t.store.query(tb(j("id", e.id), 1));
+	return $y(t, n.length > 0 ? n : await t.store.query(tb(j("executionId", e.id), 1)));
+}, ib = async (e, t) => {
 	let n = [...e.tag === void 0 ? [] : [j("tag", e.tag)], ...e.status === void 0 ? [] : [j("status", e.status)]], r = n.length === 0 ? void 0 : n.length === 1 ? n[0] : T(...n);
-	return qy(t, await t.store.query(Yy(r, Jy(e.limit, 100, 500))));
-}, $y = async (e, t) => await Xy(t, e.runId) === void 0 ? [] : t.store.query({
+	return $y(t, await t.store.query(tb(r, eb(e.limit, 100, 500))));
+}, ab = async (e, t) => await nb(t, e.runId) === void 0 ? [] : t.store.query({
 	table: "_voltro_workflow_run_steps",
 	order: [{
 		column: "startedAt",
@@ -10893,7 +10897,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	take: 1e3,
 	skip: void 0,
 	projection: void 0
-}), eb = async (e, t) => await Xy(t, e.runId) === void 0 ? [] : t.store.query({
+}), ob = async (e, t) => await nb(t, e.runId) === void 0 ? [] : t.store.query({
 	table: "_voltro_workflow_run_events",
 	order: [{
 		column: "occurredAt",
@@ -10903,7 +10907,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	take: 1e3,
 	skip: void 0,
 	projection: void 0
-}), tb = (e, t) => ({
+}), sb = (e, t) => ({
 	table: "_voltro_workflow_events",
 	order: [{
 		column: "occurredAt",
@@ -10913,12 +10917,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	take: t,
 	skip: void 0,
 	projection: void 0
-}), nb = async (e, t) => {
+}), cb = async (e, t) => {
 	let n = e.name === void 0 ? void 0 : j("name", e.name);
-	return qy(t, await t.store.query(tb(n, Jy(e.limit, 100, 500))));
-}, rb = async (e, t) => {
-	let n = (await t.store.query(tb(j("id", e.eventId), 1)))[0];
-	return n === void 0 || !Ky(Wy(t), n.subject) ? [] : t.store.query({
+	return $y(t, await t.store.query(sb(n, eb(e.limit, 100, 500))));
+}, lb = async (e, t) => {
+	let n = (await t.store.query(sb(j("id", e.eventId), 1)))[0];
+	return n === void 0 || !Qy(Xy(t), n.subject) ? [] : t.store.query({
 		table: "_voltro_workflow_event_deliveries",
 		order: [{
 			column: "createdAt",
@@ -10929,29 +10933,29 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		skip: void 0,
 		projection: void 0
 	});
-}, ib = (e = process.env) => {
+}, ub = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, ab = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, ob = "«redacted»", sb = (e) => {
+}, db = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, fb = "«redacted»", pb = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = ab.test(n) ? ob : r;
+	for (let [n, r] of Object.entries(e)) t[n] = db.test(n) ? fb : r;
 	return t;
-}, cb = (e) => {
+}, mb = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, lb = (e, t) => {
+}, hb = (e, t) => {
 	if (t.op === "insert") {
-		let n = cb(t.new);
+		let n = mb(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = cb(t.new) ?? cb(t.old);
+		let n = mb(t.new) ?? mb(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, ub = class {
+}, gb = class {
 	mode;
 	capacity;
 	now;
@@ -10971,8 +10975,8 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: sb(e.old),
-			new: sb(e.new),
+			old: pb(e.old),
+			new: pb(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -10985,23 +10989,23 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = lb(i, e);
+		for (let e of r) i = hb(i, e);
 		return i;
 	}
-}, db, fb = () => (db === void 0 && (db = new ub(ib())), db), pb = (e) => {
-	db = e;
-}, mb = (e) => {
-	let t = fb();
+}, _b, vb = () => (_b === void 0 && (_b = new gb(ub())), _b), yb = (e) => {
+	_b = e;
+}, bb = (e) => {
+	let t = vb();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, hb = /* @__PURE__ */ new Set([
+}, xb = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), gb = (e) => {
+]), Sb = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -11023,7 +11027,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return hb.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return xb.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -11037,7 +11041,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, _b = "\0", vb = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(_b), yb = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), bb = (e, t) => {
+}, Cb = "\0", wb = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Cb), Tb = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Eb = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -11045,10 +11049,10 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, xb = (e, t) => {
+}, Db = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = vb(r, e.groupBy), i = n.get(t), a = yb(r, e.column);
+		let t = wb(r, e.groupBy), i = n.get(t), a = Tb(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -11064,19 +11068,19 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		}
 	}
 	return n;
-}, Sb = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, Ob = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: bb(e, n)
-})), Cb = (e, t, n) => {
+	value: Eb(e, n)
+})), kb = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
-		let n = vb(t, e.groupBy), a = r.get(n);
+		let n = wb(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
 		let o = a.count - 1;
 		if (o <= 0) {
 			r.delete(n);
 			return;
 		}
-		let s = yb(t, e.column);
+		let s = Tb(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -11085,7 +11089,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = vb(t, e.groupBy), i = r.get(n), a = yb(t, e.column);
+		let n = wb(t, e.groupBy), i = r.get(n), a = Tb(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -11105,15 +11109,15 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		state: r,
 		rescanGroups: [...i]
 	};
-}, wb = (e, t, n, r) => {
+}, Ab = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = xb(e, r.filter((t) => i.has(vb(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = Db(e, r.filter((t) => i.has(wb(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, Tb = class {
+}, jb = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -11121,35 +11125,35 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = xb(this.shape, e), this.groups.clear();
+		this.state = Db(this.shape, e), this.groups.clear();
 		for (let t of e) {
-			let e = vb(t, this.shape.groupBy);
+			let e = wb(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
 	}
 	applyChange(e) {
 		let t = e.new;
 		if (t) {
-			let e = vb(t, this.shape.groupBy);
+			let e = wb(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = Cb(this.shape, this.state, e);
+		let n = kb(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = wb(this.shape, this.state, e, t);
+		this.state = Ab(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
-			let t = vb(e, this.shape.groupBy);
+			let t = wb(e, this.shape.groupBy);
 			n.has(t) && this.state.has(t) && !this.groups.has(t) && this.groups.set(t, this.groupValues(e));
 		}
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return Sb(this.shape, this.state).map((e) => ({
+		return Ob(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -11162,7 +11166,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, Eb = R("_voltro_rebac_tuples", {
+}, Mb = R("_voltro_rebac_tuples", {
 	id: I({ prefix: "rbct" }),
 	subjectId: z(),
 	relation: z(),
@@ -11174,7 +11178,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]), Db = async (e, t, n, r) => t === null ? [] : (await e.query({
+]), Nb = async (e, t, n, r) => t === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: T(j("subjectId", t), j("resourceType", n), j("resourceId", r)),
 	order: [],
@@ -11186,16 +11190,16 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), Ob = (e) => ({
+})), Pb = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), kb = (e, t) => {
-	let n = t.getPolicy ?? kh;
+}), Fb = (e, t) => {
+	let n = t.getPolicy ?? Fh;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let s = n(a.resourceType), c = (e) => o.fail(new Eh({
+		let s = n(a.resourceType), c = (e) => o.fail(new Mh({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -11203,17 +11207,17 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		if (s === void 0) return c("");
 		let l = a.resourceId(i.input);
 		if (l === null || l === "") return c("");
-		let u = Ob(i.subject), d = {
+		let u = Pb(i.subject), d = {
 			type: a.resourceType,
 			id: l,
 			tenantId: i.subject.tenantId
 		};
-		return o.flatMap(o.promise(async () => t.loadTuples(u.id, a.resourceType, l)), (e) => Fh(u, a.action, d, {
+		return o.flatMap(o.promise(async () => t.loadTuples(u.id, a.resourceType, l)), (e) => Vh(u, a.action, d, {
 			policy: s,
 			tuples: e
 		}) ? r : c(l));
 	};
-}, Ab = async (e, t, n) => t === null ? [] : (await e.query({
+}, Ib = async (e, t, n) => t === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: T(j("subjectId", t), j("resourceType", n)),
 	order: [],
@@ -11225,18 +11229,18 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), jb = (e) => {
-	let t = e.getPolicy ?? kh;
+})), Lb = (e) => {
+	let t = e.getPolicy ?? Fh;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = Ob(n);
-		return Lh(s, i, r, a, {
+		let s = Pb(n);
+		return Uh(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, Mb = (e) => {
+}, Rb = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -11244,14 +11248,14 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, Nb = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Pb = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Fb = class {
+}, zb = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, Bb = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, Vb = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, Ib = (e, t, n, r, i) => `${e}\u0000${t}\u0000${Math.floor(i / n)}\u0000${r}`, Lb = async (e, t, n) => {
-	if (t.table !== e.watch.table || !Nb(e.watch.on, t.op)) return "skipped-op";
+}, Hb = (e, t, n, r, i) => `${e}\u0000${t}\u0000${Math.floor(i / n)}\u0000${r}`, Ub = async (e, t, n) => {
+	if (t.table !== e.watch.table || !zb(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (!await n.dedupe.claim(r)) return "skipped-dedupe";
@@ -11260,23 +11264,23 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		let r = n.now?.() ?? Date.now(), a = i.key === void 0 ? "" : i.key(t);
 		if (n.claimRateSlot !== void 0) {
 			let t = !1;
-			for (let o = 0; o < i.limit; o++) if (await n.claimRateSlot(Ib(e.name, a, i.windowMs, o, r))) {
+			for (let o = 0; o < i.limit; o++) if (await n.claimRateSlot(Hb(e.name, a, i.windowMs, o, r))) {
 				t = !0;
 				break;
 			}
 			if (!t) return "skipped-ratelimit";
 		} else if (n.rateLimiter !== void 0 && !n.rateLimiter.allow(`${e.name} ${a}`, i.limit, i.windowMs, r)) return "skipped-ratelimit";
 	}
-	let a = Pb(t);
+	let a = Bb(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), "acted");
-}, Rb = /* @__PURE__ */ new Set([
+}, Wb = /* @__PURE__ */ new Set([
 	"info",
 	"warn",
 	"critical"
-]), Q = (e, t) => /* @__PURE__ */ Error(`defineExpectation(${JSON.stringify(e)}): ${t}`), zb = (e) => {
+]), Q = (e, t) => /* @__PURE__ */ Error(`defineExpectation(${JSON.stringify(e)}): ${t}`), Gb = (e) => {
 	let t = e.name;
 	if (typeof t != "string" || t.length === 0) throw Error("defineExpectation: a non-empty `name` is required");
 	if (e.on === void 0 || typeof e.on.table != "string" || e.on.table.length === 0) throw Q(t, "on.table is required — the table whose writes drive the expectation");
@@ -11305,7 +11309,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		default: throw Q(t, `unknown invariant kind ${JSON.stringify(n.kind)}`);
 	}
 	let r = e.severity ?? "warn";
-	if (!Rb.has(r)) throw Q(t, `severity must be one of info | warn | critical (got ${JSON.stringify(r)})`);
+	if (!Wb.has(r)) throw Q(t, `severity must be one of info | warn | critical (got ${JSON.stringify(r)})`);
 	return {
 		_voltroExpectation: !0,
 		name: t,
@@ -11317,9 +11321,9 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		severity: r,
 		...e.description === void 0 ? {} : { description: e.description }
 	};
-}, Bb = (e) => typeof e == "object" && !!e && e._voltroExpectation === !0, Vb = class extends n.Tag("@voltro/ExpectationRegistry")() {}, Hb = (e) => o.gen(function* () {
-	return (yield* Vb).get(e.name);
-}), Ub = (e) => {
+}, Kb = (e) => typeof e == "object" && !!e && e._voltroExpectation === !0, qb = class extends n.Tag("@voltro/ExpectationRegistry")() {}, Jb = (e) => o.gen(function* () {
+	return (yield* qb).get(e.name);
+}), Yb = (e) => {
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number" && Number.isFinite(e)) return e;
 	if (typeof e == "string" && e.length > 0) {
@@ -11327,20 +11331,20 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		return Number.isNaN(t) ? null : t;
 	}
 	return null;
-}, Wb = class {
+}, Xb = class {
 	maxAgeMs;
 	timeDependent = !0;
 	maintainer;
 	column;
 	constructor(e, t) {
-		this.maxAgeMs = t, this.column = e, this.maintainer = new Tb({
+		this.maxAgeMs = t, this.column = e, this.maintainer = new jb({
 			op: "max",
 			column: e
 		});
 	}
 	project(e) {
 		if (e == null) return null;
-		let t = Ub(e[this.column]);
+		let t = Yb(e[this.column]);
 		return t === null ? null : {
 			...e,
 			[this.column]: t
@@ -11382,7 +11386,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			violated: n > this.maxAgeMs
 		};
 	}
-}, Gb = class {
+}, Zb = class {
 	matches;
 	reduce;
 	timeDependent = !1;
@@ -11407,16 +11411,16 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	read() {
 		return this.reduce(this.total, this.matching);
 	}
-}, Kb = (e) => e == null, qb = (e, t, n) => {
-	if (Kb(e)) return !1;
+}, Qb = (e) => e == null, $b = (e, t, n) => {
+	if (Qb(e)) return !1;
 	let r = Number(e);
 	return Number.isNaN(r) ? !1 : t !== void 0 && r < t || n !== void 0 && r > n;
-}, Jb = (e) => {
+}, ex = (e) => {
 	switch (e.kind) {
-		case "freshness": return new Wb(e.column, e.maxAgeMs);
+		case "freshness": return new Xb(e.column, e.maxAgeMs);
 		case "nullRate": {
 			let t = e.column, n = e.maxRate;
-			return new Gb((e) => Kb(e[t]), (e, t) => {
+			return new Zb((e) => Qb(e[t]), (e, t) => {
 				let r = e > 0 ? t / e : 0;
 				return {
 					metric: r,
@@ -11427,7 +11431,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		}
 		case "rowCount": {
 			let { min: t, max: n } = e;
-			return new Gb(() => !1, (e) => ({
+			return new Zb(() => !1, (e) => ({
 				metric: e,
 				threshold: n ?? t ?? null,
 				violated: t !== void 0 && e < t || n !== void 0 && e > n
@@ -11435,7 +11439,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		}
 		case "valueBounds": {
 			let { column: t, min: n, max: r, maxViolationRate: i } = e;
-			return new Gb((e) => qb(e[t], n, r), (e, t) => {
+			return new Zb((e) => $b(e[t], n, r), (e, t) => {
 				if (i !== void 0) {
 					let n = e > 0 ? t / e : 0;
 					return {
@@ -11452,13 +11456,13 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			});
 		}
 	}
-}, Yb = (e) => ({
+}, tx = (e) => ({
 	table: e.table,
 	op: e.op,
 	traceId: e.traceId ?? null,
 	subjectId: e.subjectId ?? null,
 	procedure: e.procedure ?? null
-}), Xb = (e, t) => !t || e.metric === null ? "unknown" : e.violated ? "violated" : "holding", Zb = class {
+}), nx = (e, t) => !t || e.metric === null ? "unknown" : e.violated ? "violated" : "holding", rx = class {
 	def;
 	deps;
 	engine;
@@ -11471,7 +11475,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	lastEvaluatedAt = null;
 	lastCause = null;
 	constructor(e, t) {
-		this.def = e, this.deps = t, this.engine = Jb(e.invariant), this.now = t.now ?? Date.now, this.threshold = null;
+		this.def = e, this.deps = t, this.engine = ex(e.invariant), this.now = t.now ?? Date.now, this.threshold = null;
 	}
 	get timeDependent() {
 		return this.engine.timeDependent;
@@ -11500,13 +11504,13 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			let e = (await this.deps.queryBase()).filter((e) => this.inScope(e));
 			this.engine.resolveRescan(i, e);
 		}
-		return this.commitReading(this.engine.read(this.now()), !0, Yb(e));
+		return this.commitReading(this.engine.read(this.now()), !0, tx(e));
 	}
 	tick() {
 		return this.seeded ? this.commitReading(this.engine.read(this.now()), !0, null) : null;
 	}
 	commitReading(e, t, n) {
-		let r = this.status, i = Xb(e, this.seeded);
+		let r = this.status, i = nx(e, this.seeded);
 		if (this.metric = e.metric, this.threshold = e.threshold, this.lastEvaluatedAt = new Date(this.now()), i !== r) {
 			if (this.status = i, this.since = this.lastEvaluatedAt, i === "violated" && (this.lastCause = n), t && i === "violated" && r !== "violated") return {
 				kind: "violated",
@@ -11536,7 +11540,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			...this.def.description === void 0 ? {} : { description: this.def.description }
 		};
 	}
-}, Qb = (e) => {
+}, ix = (e) => {
 	let t = e.now ?? Date.now, n = e.log, r = /* @__PURE__ */ new Set(), i = /* @__PURE__ */ new Map(), a = (e) => {
 		for (let t of r) try {
 			t(e);
@@ -11553,7 +11557,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}), s = /* @__PURE__ */ new Map(), c = !1;
 	for (let { definition: r } of e.discovered) {
 		if (i.has(r.name)) throw Error(`expectation: duplicate name '${r.name}' — names must be unique across all expectations`);
-		let e = new Zb(r, {
+		let e = new rx(r, {
 			queryBase: o(r.on.table),
 			now: t,
 			...n === void 0 ? {} : { log: n }
@@ -11607,30 +11611,30 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		registered: [...i.keys()],
 		runTick: u
 	};
-}, $b = /* @__PURE__ */ new Set([
+}, ax = /* @__PURE__ */ new Set([
 	"info",
 	"warn",
 	"critical"
-]), ex = /* @__PURE__ */ new Set(["observe", "suspend"]), tx = (e, t) => /* @__PURE__ */ Error(`defineCostBudget(${JSON.stringify(e)}): ${t}`), nx = (e) => {
+]), ox = /* @__PURE__ */ new Set(["observe", "suspend"]), sx = (e, t) => /* @__PURE__ */ Error(`defineCostBudget(${JSON.stringify(e)}): ${t}`), cx = (e) => {
 	let t = /^(\d+(?:\.\d+)?)\s*(ms|s|m|h|d)$/.exec(e.trim());
 	if (t === null) return null;
 	let n = Number(t[1]);
 	if (!(Number.isFinite(n) && n > 0)) return null;
 	let r = t[2];
 	return n * (r === "ms" ? 1 : r === "s" ? 1e3 : r === "m" ? 6e4 : r === "h" ? 36e5 : 864e5);
-}, rx = (e) => {
+}, lx = (e) => {
 	let t = e.name;
 	if (typeof t != "string" || t.length === 0) throw Error("defineCostBudget: a non-empty `name` is required");
-	if (!(typeof e.limit == "number" && Number.isFinite(e.limit) && e.limit > 0)) throw tx(t, "a positive, finite `limit` is required");
-	if (e.unit !== void 0 && (typeof e.unit != "string" || e.unit.length === 0)) throw tx(t, "unit, when present, must be a non-empty string");
+	if (!(typeof e.limit == "number" && Number.isFinite(e.limit) && e.limit > 0)) throw sx(t, "a positive, finite `limit` is required");
+	if (e.unit !== void 0 && (typeof e.unit != "string" || e.unit.length === 0)) throw sx(t, "unit, when present, must be a non-empty string");
 	let n = e.warnAt ?? .8;
-	if (!(typeof n == "number" && n >= 0 && n <= 1)) throw tx(t, "warnAt, when present, must be in [0, 1]");
+	if (!(typeof n == "number" && n >= 0 && n <= 1)) throw sx(t, "warnAt, when present, must be in [0, 1]");
 	let r = null;
-	if (e.window !== void 0 && (r = nx(e.window), r === null)) throw tx(t, `window must be an interval like '1h' / '24h' (got ${JSON.stringify(e.window)})`);
+	if (e.window !== void 0 && (r = cx(e.window), r === null)) throw sx(t, `window must be an interval like '1h' / '24h' (got ${JSON.stringify(e.window)})`);
 	let i = e.severity ?? "warn";
-	if (!$b.has(i)) throw tx(t, `severity must be one of info | warn | critical (got ${JSON.stringify(i)})`);
+	if (!ax.has(i)) throw sx(t, `severity must be one of info | warn | critical (got ${JSON.stringify(i)})`);
 	let a = e.onExceeded ?? "observe";
-	if (!ex.has(a)) throw tx(t, `onExceeded must be observe | suspend (got ${JSON.stringify(e.onExceeded)})`);
+	if (!ox.has(a)) throw sx(t, `onExceeded must be observe | suspend (got ${JSON.stringify(e.onExceeded)})`);
 	return {
 		_voltroCostBudget: !0,
 		name: t,
@@ -11642,9 +11646,9 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		onExceeded: a,
 		...e.description === void 0 ? {} : { description: e.description }
 	};
-}, ix = (e) => typeof e == "object" && !!e && e._voltroCostBudget === !0, ax = class extends n.Tag("@voltro/CostRegistry")() {}, ox = (e, t) => o.gen(function* () {
-	return (yield* ax).budget(e.name, t);
-}), sx = class {
+}, ux = (e) => typeof e == "object" && !!e && e._voltroCostBudget === !0, dx = class extends n.Tag("@voltro/CostRegistry")() {}, fx = (e, t) => o.gen(function* () {
+	return (yield* dx).budget(e.name, t);
+}), px = class {
 	total = 0;
 	byUnit = /* @__PURE__ */ new Map();
 	bySubscription = /* @__PURE__ */ new Map();
@@ -11663,11 +11667,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			lastUpdatedAt: this.lastUpdatedAt
 		};
 	}
-}, cx = {
+}, mx = {
 	ok: 0,
 	warn: 1,
 	exceeded: 2
-}, lx = class {
+}, hx = class {
 	def;
 	tenantId;
 	spent = 0;
@@ -11693,7 +11697,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}
 	settle(e, t, n) {
 		let r = this.status;
-		return e === r ? null : (this.status = e, this.since = t, cx[e] > cx[r] ? (this.lastCause = n, {
+		return e === r ? null : (this.status = e, this.since = t, mx[e] > mx[r] ? (this.lastCause = n, {
 			kind: e === "exceeded" ? "exceeded" : "warn",
 			state: this.state(),
 			cause: n
@@ -11706,7 +11710,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	apply(e, t, n) {
 		let r = [], i = this.rollWindow(n);
 		i !== null && r.push(i), this.spent += t, this.lastUpdatedAt = e.at ?? n;
-		let a = this.settle(this.statusOf(this.spent), n, ux(e));
+		let a = this.settle(this.statusOf(this.spent), n, gx(e));
 		return a !== null && r.push(a), r;
 	}
 	tick(e) {
@@ -11733,12 +11737,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			...this.def.description === void 0 ? {} : { description: this.def.description }
 		};
 	}
-}, ux = (e) => ({
+}, gx = (e) => ({
 	unit: e.unit,
 	subscriptionId: e.subscriptionId ?? null,
 	procedure: e.procedure ?? null,
 	traceId: e.traceId ?? null
-}), dx = (e) => Number.isFinite(e) && e > 0 ? e : 0, fx = class {
+}), _x = (e) => Number.isFinite(e) && e > 0 ? e : 0, vx = class {
 	now;
 	attribution = /* @__PURE__ */ new Map();
 	counters = /* @__PURE__ */ new Map();
@@ -11758,13 +11762,13 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}
 	counterFor(e, t) {
 		let n = this.counters.get(e.name), r = n.get(t);
-		return r === void 0 && (r = new lx(e, t), n.set(t, r)), r;
+		return r === void 0 && (r = new hx(e, t), n.set(t, r)), r;
 	}
 	record(e) {
-		let t = dx(e.amount);
+		let t = _x(e.amount);
 		if (t === 0) return [];
 		let n = e.at ?? this.now(), r = this.attribution.get(e.tenantId);
-		r === void 0 && (r = new sx(), this.attribution.set(e.tenantId, r)), r.add(e, t, n);
+		r === void 0 && (r = new px(), this.attribution.set(e.tenantId, r)), r.add(e, t, n);
 		let i = this.unitBudgets.get(e.unit);
 		if (this.totalBudgets.length === 0 && i === void 0) return [];
 		let a = [];
@@ -11817,8 +11821,8 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	breaches() {
 		return this.budgetStates().filter((e) => e.status !== "ok");
 	}
-}, px = (e) => {
-	let t = e.now ?? Date.now, n = e.log, r = /* @__PURE__ */ new Set(), i = e.discovered.map((e) => e.definition), a = new fx(i, {
+}, yx = (e) => {
+	let t = e.now ?? Date.now, n = e.log, r = /* @__PURE__ */ new Set(), i = e.discovered.map((e) => e.definition), a = new vx(i, {
 		now: t,
 		...n === void 0 ? {} : { log: n }
 	}), o = i.some((e) => e.windowMs !== null), s = (e) => {
@@ -11853,12 +11857,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		registered: i.map((e) => e.name),
 		runTick: l
 	};
-}, mx = "holdout", $ = (e, t) => /* @__PURE__ */ Error(`defineExperiment(${JSON.stringify(e)}): ${t}`), hx = (e) => {
+}, bx = "holdout", $ = (e, t) => /* @__PURE__ */ Error(`defineExperiment(${JSON.stringify(e)}): ${t}`), xx = (e) => {
 	if (e == null) return null;
 	if (typeof e == "number") return Number.isFinite(e) ? String(e) : null;
 	let t = String(e);
 	return t.length > 0 ? t : null;
-}, gx = (e) => {
+}, Sx = (e) => {
 	let t = e.name;
 	if (typeof t != "string" || t.length === 0) throw Error("defineExperiment: a non-empty `name` is required");
 	if (e.on === void 0 || typeof e.on.table != "string" || e.on.table.length === 0) throw $(t, "on.table is required — the table whose writes drive the experiment");
@@ -11870,18 +11874,18 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		if (typeof e.variantFrom == "string") {
 			if (e.variantFrom.length === 0) throw $(t, "variantFrom, when a column name, must be non-empty");
 			let n = e.variantFrom;
-			a = (e) => hx(e[n]);
+			a = (e) => xx(e[n]);
 		} else if (typeof e.variantFrom == "function") {
 			let t = e.variantFrom;
-			a = (e) => hx(t(e));
+			a = (e) => xx(t(e));
 		} else throw $(t, "variantFrom must be a column name or a (row) => variantName function");
 	} else if (typeof e.subject == "string") {
 		if (e.subject.length === 0) throw $(t, "subject, when a column name, must be non-empty");
 		let n = e.subject;
-		i = (e) => hx(e[n]);
+		i = (e) => xx(e[n]);
 	} else if (typeof e.subject == "function") {
 		let t = e.subject;
-		i = (e) => hx(t(e));
+		i = (e) => xx(t(e));
 	} else throw $(t, "subject is required — a column name or a (row) => key function (or use `variantFrom` to measure an arm something else assigned)");
 	if (!Array.isArray(e.variants) || e.variants.length < 2) throw $(t, "at least two variants are required (a control + one treatment)");
 	let o = /* @__PURE__ */ new Set(), s = [];
@@ -11898,9 +11902,9 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}
 	let c = 0;
 	if (e.holdout !== void 0) {
-		if (a !== null && e.holdout > 0) throw $(t, `holdout is meaningless with \`variantFrom\` — a holdout is carved out AT ASSIGNMENT, and this experiment does not assign. Declare the holdout arm on whatever does (a flag variant named "${mx}", say) and list it in \`variants\`.`);
+		if (a !== null && e.holdout > 0) throw $(t, `holdout is meaningless with \`variantFrom\` — a holdout is carved out AT ASSIGNMENT, and this experiment does not assign. Declare the holdout arm on whatever does (a flag variant named "${bx}", say) and list it in \`variants\`.`);
 		if (!(typeof e.holdout == "number" && e.holdout >= 0 && e.holdout < 1)) throw $(t, "holdout, when present, must be a fraction in [0, 1)");
-		if (c = e.holdout, c > 0 && o.has("holdout")) throw $(t, `a variant may not be named ${JSON.stringify(mx)} when holdout > 0 (reserved)`);
+		if (c = e.holdout, c > 0 && o.has("holdout")) throw $(t, `a variant may not be named ${JSON.stringify(bx)} when holdout > 0 (reserved)`);
 	}
 	let l = e.metric;
 	if (l === void 0 || typeof l.kind != "string") throw $(t, "metric is required");
@@ -11932,23 +11936,23 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		baseline: u,
 		...e.description === void 0 ? {} : { description: e.description }
 	};
-}, _x = (e) => typeof e == "object" && !!e && e._voltroExperiment === !0, vx = (e) => {
+}, Cx = (e) => typeof e == "object" && !!e && e._voltroExperiment === !0, wx = (e) => {
 	let t = 2166136261;
 	for (let n = 0; n < e.length; n++) t ^= e.charCodeAt(n), t = Math.imul(t, 16777619);
 	return (t >>> 0) / 4294967296;
-}, yx = (e, t) => {
-	let n = vx(`${e.name}\u0000${t}`);
-	if (e.holdout > 0 && n < e.holdout) return mx;
+}, Tx = (e, t) => {
+	let n = wx(`${e.name}\u0000${t}`);
+	if (e.holdout > 0 && n < e.holdout) return bx;
 	let r = e.holdout > 0 ? (n - e.holdout) / (1 - e.holdout) : n, i = e.variants.reduce((e, t) => e + t.weight, 0), a = 0;
 	for (let t of e.variants) if (a += t.weight / i, r < a) return t.name;
 	return e.variants[e.variants.length - 1].name;
-}, bx = (e) => e.holdout > 0 ? [...e.variants.map((e) => e.name), mx] : e.variants.map((e) => e.name), xx = class extends n.Tag("@voltro/ExperimentRegistry")() {}, Sx = (e) => o.gen(function* () {
-	return (yield* xx).get(e.name);
-}), Cx = "__voltro_variant", wx = "__voltro_metric", Tx = class {
+}, Ex = (e) => e.holdout > 0 ? [...e.variants.map((e) => e.name), bx] : e.variants.map((e) => e.name), Dx = class extends n.Tag("@voltro/ExperimentRegistry")() {}, Ox = (e) => o.gen(function* () {
+	return (yield* Dx).get(e.name);
+}), kx = "__voltro_variant", Ax = "__voltro_metric", jx = class {
 	project;
 	maintainer;
 	constructor(e, t) {
-		this.project = t, this.maintainer = new Tb(e);
+		this.project = t, this.maintainer = new jb(e);
 	}
 	seed(e) {
 		this.maintainer.seed(e.map((e) => this.project(e)).filter((e) => e !== null));
@@ -11972,56 +11976,56 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	byVariant() {
 		let e = /* @__PURE__ */ new Map();
 		for (let t of this.maintainer.materialize()) {
-			let n = t.group[Cx];
+			let n = t.group[kx];
 			typeof n == "string" && e.set(n, t.value);
 		}
 		return e;
 	}
-}, Ex = (e) => typeof e == "number" && Number.isFinite(e), Dx = (e) => {
-	if (Ex(e)) return e;
+}, Mx = (e) => typeof e == "number" && Number.isFinite(e), Nx = (e) => {
+	if (Mx(e)) return e;
 	let t = Number(e);
 	return Number.isFinite(t) ? t : null;
-}, Ox = (e, t) => new Tx(e.kind === "count" ? {
+}, Px = (e, t) => new jx(e.kind === "count" ? {
 	op: "count",
-	groupBy: [Cx]
+	groupBy: [kx]
 } : {
 	op: e.kind === "sum" ? "sum" : "avg",
-	column: wx,
-	groupBy: [Cx]
+	column: Ax,
+	groupBy: [kx]
 }, (n) => {
 	let r = t(n);
 	if (r === null) return null;
 	switch (e.kind) {
-		case "count": return { [Cx]: r };
+		case "count": return { [kx]: r };
 		case "sum":
 		case "avg": {
-			let t = Dx(n[e.column]);
+			let t = Nx(n[e.column]);
 			return t === null ? null : {
-				[Cx]: r,
-				[wx]: t
+				[kx]: r,
+				[Ax]: t
 			};
 		}
 		case "conversionRate": {
 			let t = n[e.column], i = e.equals === void 0 ? !!t : t === e.equals;
 			return {
-				[Cx]: r,
-				[wx]: +!!i
+				[kx]: r,
+				[Ax]: +!!i
 			};
 		}
 	}
-}), kx = (e) => new Tx({
+}), Fx = (e) => new jx({
 	op: "count",
-	groupBy: [Cx]
+	groupBy: [kx]
 }, (t) => {
 	let n = e(t);
-	return n === null ? null : { [Cx]: n };
-}), Ax = (e) => ({
+	return n === null ? null : { [kx]: n };
+}), Ix = (e) => ({
 	table: e.table,
 	op: e.op,
 	traceId: e.traceId ?? null,
 	subjectId: e.subjectId ?? null,
 	procedure: e.procedure ?? null
-}), jx = class {
+}), Lx = class {
 	def;
 	deps;
 	exposure;
@@ -12032,9 +12036,9 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	lastUpdatedAt = null;
 	declaredVariants;
 	constructor(e, t) {
-		this.def = e, this.deps = t, this.now = t.now ?? Date.now, this.declaredVariants = new Set(bx(e));
+		this.def = e, this.deps = t, this.now = t.now ?? Date.now, this.declaredVariants = new Set(Ex(e));
 		let n = (e) => this.variantOf(e);
-		this.exposure = kx(n), this.metricIsCount = e.metric.kind === "count", this.metric = this.metricIsCount ? this.exposure : Ox(e.metric, n);
+		this.exposure = Fx(n), this.metricIsCount = e.metric.kind === "count", this.metric = this.metricIsCount ? this.exposure : Px(e.metric, n);
 	}
 	variantOf(e) {
 		if (e == null) return null;
@@ -12046,7 +12050,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		}
 		if (this.def.subject === null) return null;
 		let n = this.def.subject(e);
-		return n === null ? null : yx(this.def, n);
+		return n === null ? null : Tx(this.def, n);
 	}
 	inScope(e) {
 		return this.variantOf(e) !== null;
@@ -12066,12 +12070,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		};
 		return this.exposure.apply(r), this.metricIsCount || this.metric.apply(r), this.lastUpdatedAt = new Date(this.now()), {
 			result: this.result(),
-			cause: Ax(e)
+			cause: Ix(e)
 		};
 	}
 	result() {
 		let e = this.exposure.byVariant(), t = this.metricIsCount ? e : this.metric.byVariant(), n = this.def.baseline, r = this.metricValueFor(n, t, e), i = 0, a = [];
-		for (let o of bx(this.def)) {
+		for (let o of Ex(this.def)) {
 			let s = e.get(o) ?? 0;
 			i += s;
 			let c = this.metricValueFor(o, t, e), l = o === n, u = l || c === null || r === null ? null : c - r, d = l || c === null || r === null || r === 0 ? null : (c - r) / r;
@@ -12108,7 +12112,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	get isSeeded() {
 		return this.seeded;
 	}
-}, Mx = (e) => {
+}, Rx = (e) => {
 	let t = e.now ?? Date.now, n = e.log, r = /* @__PURE__ */ new Set(), i = /* @__PURE__ */ new Map(), a = (e) => {
 		for (let t of r) try {
 			t(e);
@@ -12125,7 +12129,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	}), s = /* @__PURE__ */ new Map();
 	for (let { definition: r } of e.discovered) {
 		if (i.has(r.name)) throw Error(`experiment: duplicate name '${r.name}' — names must be unique across all experiments`);
-		let e = new jx(r, {
+		let e = new Lx(r, {
 			queryBase: o(r.on.table),
 			now: t,
 			...n === void 0 ? {} : { log: n }
@@ -12167,21 +12171,21 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		},
 		registered: [...i.keys()]
 	};
-}, Nx = R("_voltro_wakeups", {
+}, zx = R("_voltro_wakeups", {
 	id: I({ prefix: "wakeup" }),
 	tenantId: z(),
 	kind: z(),
 	refId: z(),
 	wakeAt: B(),
 	status: z()
-}).index(["status", "wakeAt"]).index(["tenantId"]), Px = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await X_(e.store, t, e.batchLimit ?? 100);
+}).index(["status", "wakeAt"]).index(["tenantId"]), Bx = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await nv(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await K_(e.store, t)) try {
+	for (let t of n) if (await Q_(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await q_(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await $_(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -12189,11 +12193,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, Fx = (e, t = 1e3) => {
+}, Vx = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await Px(e);
+				await Bx(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -12203,10 +12207,10 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, Ix = (e) => ({ wake: async () => {
+}, Hx = (e) => ({ wake: async () => {
 	await e.start();
-} }), Lx = (e) => new Promise((t) => setTimeout(t, e)), Rx = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Lx, i = e.spawnImpl ?? Kr, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), Ux = (e) => new Promise((t) => setTimeout(t, e)), Wx = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? Ux, i = e.spawnImpl ?? Kr, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -12260,11 +12264,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		},
 		stop: m
 	};
-}, zx = async (e) => {
+}, Gx = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Z_(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await rv(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Bx = (e, t = Date.now) => {
+}, Kx = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -12276,7 +12280,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			n = void 0;
 		}
 	};
-}, Vx = () => {
+}, qx = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -12294,7 +12298,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, Hx = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Ux = (e, t, n, r) => new Promise((i, a) => {
+}, Jx = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Yx = (e, t, n, r) => new Promise((i, a) => {
 	let o = nr.request({
 		host: n,
 		port: r,
@@ -12305,7 +12309,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), Wx = (e, t, n, r, i) => new Promise((a, o) => {
+}), Xx = (e, t, n, r, i) => new Promise((a, o) => {
 	let s = nr.request({
 		host: r,
 		port: i,
@@ -12320,21 +12324,21 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Gx = (e) => {
-	let t = Hx({
+}), Zx = (e) => {
+	let t = Jx({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
 	}), n = e.activity, r = nr.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Ux(r, i, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Yx(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Wx(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => Xx(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Kx = async (e) => {
+}, Qx = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -12351,15 +12355,15 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	} catch {
 		return 0;
 	}
-}, qx = async (e) => {
-	let t = Ix(e.supervisor), n = await Px({
+}, $x = async (e) => {
+	let t = Hx(e.supervisor), n = await Bx({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await zx({
+	let r = await Gx({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -12369,12 +12373,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		woke: n,
 		stopped: i
 	};
-}, Jx = async (e) => {
-	let t = Bx(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Vx(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, eS = async (e) => {
+	let t = Kx(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = qx(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Gx({
+	}, s = Zx({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -12393,7 +12397,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	let l = !1, u, d = e.firedRetentionMs ?? 6e5, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Kx(e.store)), await qx({
+				if (a && (i = await Qx(e.store)), await $x({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -12401,7 +12405,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await $_(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await av(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -12416,17 +12420,17 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, Yx = (e) => {
+}, tS = (e) => {
 	if (e.once !== void 0 && e.eachReplica === !0) throw Error("defineSubscriber: choose either `once` or `eachReplica: true`, not both");
 	return e;
-}, Xx = class extends x.TaggedError()("AnalyticsError", {
+}, nS = class extends x.TaggedError()("AnalyticsError", {
 	provider: x.String,
 	operation: x.String,
 	cause: x.String
-}) {}, Zx = class extends x.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, rS = class extends x.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: x.String,
 	capability: x.String
-}) {}, Qx = class extends n.Tag("@voltro/AnalyticsSink")() {}, $x = (e, t) => ({
+}) {}, iS = class extends n.Tag("@voltro/AnalyticsSink")() {}, aS = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -12445,20 +12449,20 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), eS = () => o.gen(function* () {
-	let e = yield* Qx, t = yield* o.serviceOption(on), n = g.match(t, {
+}), oS = () => o.gen(function* () {
+	let e = yield* iS, t = yield* o.serviceOption(on), n = g.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : $x(e, n);
-}), tS = "noop", nS = () => {
-	let e = (e) => o.fail(new Zx({
-		provider: tS,
+	return n === null ? e : aS(e, n);
+}), sS = "noop", cS = () => {
+	let e = (e) => o.fail(new rS({
+		provider: sS,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: tS,
+			provider: sS,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -12472,8 +12476,8 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, rS = (e) => {
-	if (e.length === 0) return nS();
+}, lS = (e) => {
+	if (e.length === 0) return cS();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -12490,7 +12494,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? o.fail(new Zx({
+		return r === void 0 ? o.fail(new rS({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -12517,11 +12521,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, iS = (e) => {
+}, uS = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => rS(e.map((e) => e.build(t))),
+		build: (t) => lS(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => o.forEach(e, (e) => e.initialize ? e.initialize(t) : o.void, {
 			concurrency: 1,
@@ -12532,34 +12536,34 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			discard: !0
 		}) } : {}
 	};
-}, aS = {
+}, dS = {
 	kind: "noop",
-	build: () => nS()
-}, oS = p.counter("voltro_analytics_mirror_forwarded_total", { description: "Reactive-table changes successfully applied to the analytics mirror." }), sS = p.counter("voltro_analytics_mirror_retries_total", { description: "Analytics-mirror write attempts that failed (each is retried until the budget runs out)." }), cS = p.counter("voltro_analytics_mirror_repair_queued_total", { description: "Analytics-mirror changes whose retries were exhausted and were queued for repair." }), lS = p.counter("voltro_analytics_mirror_dropped_total", { description: "Analytics-mirror changes provably lost (repair queue overflow)." }), uS = (e) => {
+	build: () => cS()
+}, fS = p.counter("voltro_analytics_mirror_forwarded_total", { description: "Reactive-table changes successfully applied to the analytics mirror." }), pS = p.counter("voltro_analytics_mirror_retries_total", { description: "Analytics-mirror write attempts that failed (each is retried until the budget runs out)." }), mS = p.counter("voltro_analytics_mirror_repair_queued_total", { description: "Analytics-mirror changes whose retries were exhausted and were queued for repair." }), hS = p.counter("voltro_analytics_mirror_dropped_total", { description: "Analytics-mirror changes provably lost (repair queue overflow)." }), gS = (e) => {
 	o.runSync(p.increment(e));
-}, dS = (t) => e.pretty(t), fS = {
+}, _S = (t) => e.pretty(t), vS = {
 	retryAttempts: 5,
 	retryBaseDelayMs: 100,
 	retryMaxDelayMs: 3e4,
 	repairIntervalMs: 6e4,
 	repairQueueLimit: 1e4,
 	versionStateLimit: 1e5
-}, pS = (e) => {
+}, yS = (e) => {
 	let t = process.env[e];
 	if (t === void 0 || t.trim() === "") return;
 	let n = Number(t);
 	return Number.isFinite(n) && n >= 0 ? n : void 0;
-}, mS = (e) => {
-	let t = fS, n = e ?? {};
+}, bS = (e) => {
+	let t = vS, n = e ?? {};
 	return {
-		retryAttempts: Math.max(1, n.retryAttempts ?? pS("VOLTRO_ANALYTICS_MIRROR_RETRY_ATTEMPTS") ?? t.retryAttempts),
-		retryBaseDelayMs: n.retryBaseDelayMs ?? pS("VOLTRO_ANALYTICS_MIRROR_RETRY_BASE_MS") ?? t.retryBaseDelayMs,
-		retryMaxDelayMs: n.retryMaxDelayMs ?? pS("VOLTRO_ANALYTICS_MIRROR_RETRY_MAX_MS") ?? t.retryMaxDelayMs,
-		repairIntervalMs: n.repairIntervalMs ?? pS("VOLTRO_ANALYTICS_MIRROR_REPAIR_INTERVAL_MS") ?? t.repairIntervalMs,
-		repairQueueLimit: Math.max(1, n.repairQueueLimit ?? pS("VOLTRO_ANALYTICS_MIRROR_REPAIR_QUEUE_LIMIT") ?? t.repairQueueLimit),
-		versionStateLimit: Math.max(1, n.versionStateLimit ?? pS("VOLTRO_ANALYTICS_MIRROR_VERSION_STATE_LIMIT") ?? t.versionStateLimit)
-	};
-}, hS = {
+		retryAttempts: Math.max(1, n.retryAttempts ?? yS("VOLTRO_ANALYTICS_MIRROR_RETRY_ATTEMPTS") ?? t.retryAttempts),
+		retryBaseDelayMs: n.retryBaseDelayMs ?? yS("VOLTRO_ANALYTICS_MIRROR_RETRY_BASE_MS") ?? t.retryBaseDelayMs,
+		retryMaxDelayMs: n.retryMaxDelayMs ?? yS("VOLTRO_ANALYTICS_MIRROR_RETRY_MAX_MS") ?? t.retryMaxDelayMs,
+		repairIntervalMs: n.repairIntervalMs ?? yS("VOLTRO_ANALYTICS_MIRROR_REPAIR_INTERVAL_MS") ?? t.repairIntervalMs,
+		repairQueueLimit: Math.max(1, n.repairQueueLimit ?? yS("VOLTRO_ANALYTICS_MIRROR_REPAIR_QUEUE_LIMIT") ?? t.repairQueueLimit),
+		versionStateLimit: Math.max(1, n.versionStateLimit ?? yS("VOLTRO_ANALYTICS_MIRROR_VERSION_STATE_LIMIT") ?? t.versionStateLimit)
+	};
+}, xS = {
 	tables: [],
 	detach: () => {},
 	flush: () => Promise.resolve(),
@@ -12570,10 +12574,10 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		awaitingRepair: 0,
 		dropped: 0
 	})
-}, gS = (e, t) => `${e}\u0000${String(t)}`, _S = (e) => {
+}, SS = (e, t) => `${e}\u0000${String(t)}`, CS = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return hS;
-	let s = mS(e), c = e.run ?? ((e) => o.runPromise(e)), l = i.primaryKey ?? "id", u = new Set(i.tables), d = n.info.provider, f = t.changeScope === "fleet", p = 0, m = () => {
+	if (i === void 0 || i.tables.length === 0) return xS;
+	let s = bS(e), c = e.run ?? ((e) => o.runPromise(e)), l = i.primaryKey ?? "id", u = new Set(i.tables), d = n.info.provider, f = t.changeScope === "fleet", p = 0, m = () => {
 		let e = Date.now() * 1e3;
 		return p = e > p ? e : p + 1, p;
 	}, h = /* @__PURE__ */ new Map(), g = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Map(), v = /* @__PURE__ */ new Set(), y = 0, x = 0, S = /* @__PURE__ */ new Map(), C = (e) => {
@@ -12593,7 +12597,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			primaryKeyValue: t.pk
 		}).pipe(o.map((e) => (n.baseline = e ?? 0, n.baseline))) : o.succeed(n.baseline);
 	}), ee = (e, t, n) => n.kind === "clock" ? o.succeed(n.version) : w(e, t).pipe(o.map((e) => e + n.ordinal)), te = b.exponential(a.millis(Math.max(1, s.retryBaseDelayMs)), 2).pipe(b.either(b.spaced(a.millis(Math.max(1, s.retryMaxDelayMs)))), b.intersect(b.recurs(s.retryAttempts - 1))), ne = (e, t) => o.gen(function* () {
-		let n = yield* ee(gS(e.table, e.pk), e, t.stamp);
+		let n = yield* ee(SS(e.table, e.pk), e, t.stamp);
 		yield* t.kind === "upsert" ? i.upsert({
 			table: e.table,
 			row: t.row,
@@ -12604,27 +12608,27 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			version: n
 		});
 	}), re = (e) => e instanceof Error ? `${e.name}: ${e.message}` : String(e), T = (e, t) => ne(e, t).pipe(o.tapErrorCause(() => o.sync(() => {
-		uS(sS);
+		gS(pS);
 	})), o.retry(te), o.matchCauseEffect({
 		onSuccess: () => o.sync(() => {
-			y += 1, uS(oS);
+			y += 1, gS(fS);
 		}),
 		onFailure: (n) => o.sync(() => {
-			ie(e, t, dS(n));
+			ie(e, t, _S(n));
 		})
 	})), ie = (e, t, n) => {
-		let i = gS(e.table, e.pk);
+		let i = SS(e.table, e.pk);
 		for (r.warn("analytics-mirror: change forward failed, queued for repair", {
 			provider: d,
 			table: e.table,
 			op: t.kind,
 			attempts: s.retryAttempts,
 			err: n
-		}), _.set(i, e), uS(cS); _.size > s.repairQueueLimit;) {
+		}), _.set(i, e), gS(mS); _.size > s.repairQueueLimit;) {
 			let e = _.keys().next();
 			if (e.done === !0) break;
 			let t = _.get(e.value);
-			_.delete(e.value), x += 1, uS(lS), r.error("analytics-mirror: repair queue full — change dropped, mirror is diverged", {
+			_.delete(e.value), x += 1, gS(hS), r.error("analytics-mirror: repair queue full — change dropped, mirror is diverged", {
 				provider: d,
 				table: t?.table ?? "<unknown>",
 				limit: s.repairQueueLimit
@@ -12654,7 +12658,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			v.delete(t);
 		});
 	}, O = (e, t) => {
-		let n = gS(e.table, e.pk);
+		let n = SS(e.table, e.pk);
 		h.set(n, t), !g.has(n) && (g.add(n), ae(D(n, e)));
 	}, oe = (e) => o.tryPromise({
 		try: () => t.query({
@@ -12676,11 +12680,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			table: t.table,
 			row: r,
 			version: n
-		}), _.delete(e), y += 1, uS(oS), !0;
+		}), _.delete(e), y += 1, gS(fS), !0;
 	}).pipe(o.catchAllCause((e) => o.sync(() => (r.warn("analytics-mirror: repair pass failed, key stays queued", {
 		provider: d,
 		table: t.table,
-		err: dS(e)
+		err: _S(e)
 	}), !1)))), ce = () => o.gen(function* () {
 		let e = [..._.entries()];
 		if (e.length === 0) return 0;
@@ -12704,7 +12708,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			kind: "clock",
 			version: m()
 		};
-		let t = C(gS(e.table, e.pk));
+		let t = C(SS(e.table, e.pk));
 		return t.ordinal += 1, {
 			kind: "ordinal",
 			ordinal: t.ordinal
@@ -12760,11 +12764,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			dropped: x
 		})
 	};
-}, vS = (e) => {
+}, wS = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = gb({
+		let t = Sb({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -12786,46 +12790,46 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, yS = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, bS = class extends x.TaggedError()("AggregateStale", {
+}, TS = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, ES = class extends x.TaggedError()("AggregateStale", {
 	name: x.String,
 	ageMs: x.Number,
 	maxAgeMs: x.Number
-}) {}, xS = class extends x.TaggedError()("AggregateNotFound", { name: x.String }) {}, SS = class extends x.TaggedError()("AggregateError", {
+}) {}, DS = class extends x.TaggedError()("AggregateNotFound", { name: x.String }) {}, OS = class extends x.TaggedError()("AggregateError", {
 	name: x.String,
 	operation: x.String,
 	cause: x.String
-}) {}, CS = class extends n.Tag("@voltro/AggregateRegistry")() {}, wS = (e) => o.gen(function* () {
-	return (yield* CS).getHandle(e);
-}), TS = (e, t, n) => {
+}) {}, kS = class extends n.Tag("@voltro/AggregateRegistry")() {}, AS = (e) => o.gen(function* () {
+	return (yield* kS).getHandle(e);
+}), jS = (e, t, n) => {
 	if (e.crossTenant || !t.has(e.table) || n == null) return e;
 	let r = j("tenantId", n);
 	return {
 		...e,
 		predicate: e.predicate ? T(e.predicate, r) : r
 	};
-}, ES = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), DS = (e) => e?.type === "user" && e.tenantId === "", OS = (e, t) => {
+}, MS = (e, t, n) => n === "" && !e.crossTenant && t.has(e.table), NS = (e) => e?.type === "user" && e.tenantId === "", PS = (e, t) => {
 	if (e.includeDeleted || !t.has(e.table)) return e;
 	let n = De("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? T(e.predicate, n) : n
 	};
-}, kS = (e) => (t, n) => {
+}, FS = (e) => (t, n) => {
 	e.observe?.beforeScope?.({ ...t }, n);
-	let r = OS(TS(t, e.tenantScopedTables, n.tenantId), e.softDeleteScopedTables);
+	let r = PS(jS(t, e.tenantScopedTables, n.tenantId), e.softDeleteScopedTables);
 	return e.observe?.afterScope?.({ ...r }), r;
-}, AS = (e, t) => t, jS = (t) => o.runPromiseExit(t).then((t) => {
+}, IS = (e, t) => t, LS = (t) => o.runPromiseExit(t).then((t) => {
 	if (c.isSuccess(t)) return t.value;
 	let n = e.failureOption(t.cause);
 	throw g.isSome(n) ? n.value : e.squash(t.cause);
-}), MS = (e, t) => e.pipe(o.provideService(on, t)), NS = async (e, t, n, r) => {
+}), RS = (e, t) => e.pipe(o.provideService(on, t)), zS = async (e, t, n, r) => {
 	let i = await o.runPromise(Cn(t, e.guards, n, {
 		defaultDeny: r === !0,
 		procedure: e.name
 	}));
 	if (i) throw i;
-}, PS = async (e, t, n, r) => {
-	e.requiresApproval !== void 0 && await Ly({
+}, BS = async (e, t, n, r) => {
+	e.requiresApproval !== void 0 && await Uy({
 		procedure: e.name,
 		kind: t,
 		policy: e.requiresApproval,
@@ -12833,19 +12837,19 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		input: r,
 		traceId: n.traceId
 	});
-}, FS = H({ scope: "voltro:rpc" }), IS = async (e) => {
+}, VS = H({ scope: "voltro:rpc" }), HS = async (e) => {
 	if (jo() === void 0) return e;
-	let t = await jS(zo(e.subject, (e) => {
-		FS.error("row filter failed to load", {}, e instanceof Error ? e : Error(String(e)));
+	let t = await LS(zo(e.subject, (e) => {
+		VS.error("row filter failed to load", {}, e instanceof Error ? e : Error(String(e)));
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, LS = (e) => ({
+}, US = (e) => ({
 	...e.surface === void 0 ? {} : { surface: e.surface },
 	...e.publicApi === void 0 ? {} : { publicApi: e.publicApi }
-}), RS = (e) => {
+}), WS = (e) => {
 	let t = e.descriptor.target;
 	if (t == null) return [];
 	let n = Array.isArray(t) ? t : [t], r = /* @__PURE__ */ new Set();
@@ -12854,7 +12858,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		typeof t == "string" && t.length > 0 && r.add(t);
 	}
 	return [...r];
-}, zS = async (e) => {
+}, GS = async (e) => {
 	let { store: t, target: n, procedure: r, input: i, output: a } = e;
 	if (n == null) return;
 	let o = Array.isArray(n) ? n : [n];
@@ -12871,7 +12875,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			await u.set(c.map((e) => String(e)));
 		}
 	}
-}, BS = async (t) => {
+}, KS = async (t) => {
 	let n = `${t.kind}.${t.name}`, r = Date.now(), i = "ok";
 	try {
 		if (t.interceptor) {
@@ -12886,7 +12890,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 				traceId: t.requestContext.traceId,
 				...t.requestContext.spanId === void 0 ? {} : { spanId: t.requestContext.spanId },
 				...t.target !== void 0 && t.target.length > 0 ? { target: t.target } : {},
-				...LS(t.requestContext)
+				...US(t.requestContext)
 			}), i = await o.runPromiseExit(r, t.requestContext.signal === void 0 ? void 0 : { signal: t.requestContext.signal });
 			if (c.isSuccess(i)) return i.value;
 			throw e.squash(i.cause);
@@ -12902,33 +12906,33 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			status: i
 		});
 	}
-}, VS = (e) => Ae(e) || kl(e), HS = 3, US = (e) => new Promise((t) => setTimeout(t, e)), WS = async (e, t) => {
-	let n = t?.delay ?? ((e) => US(e * 20 + Math.floor(Math.random() * 30))), r = t?.attempts ?? 3;
+}, qS = (e) => Ae(e) || kl(e), JS = 3, YS = (e) => new Promise((t) => setTimeout(t, e)), XS = async (e, t) => {
+	let n = t?.delay ?? ((e) => YS(e * 20 + Math.floor(Math.random() * 30))), r = t?.attempts ?? 3;
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= r || !VS(e)) throw kl(e) ? e.conflict : e;
+		if (t >= r || !qS(e)) throw kl(e) ? e.conflict : e;
 		await n(t);
 	}
-}, GS = (e) => (t, n, r) => BS({
+}, ZS = (e) => (t, n, r) => KS({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
 	requestContext: r,
-	target: RS(t),
+	target: WS(t),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await NS(t.descriptor, r.subject, n, e.defaultDeny), await PS(t.descriptor, "mutation", r, n);
-		let i = await IS(r), a = e.resolveStore === void 0 ? e.store : await e.resolveStore(i), s = [], c = [], l = await WS(async () => a.transactional(async (l) => {
+		await zS(t.descriptor, r.subject, n, e.defaultDeny), await BS(t.descriptor, "mutation", r, n);
+		let i = await HS(r), a = e.resolveStore === void 0 ? e.store : await e.resolveStore(i), s = [], c = [], l = await XS(async () => a.transactional(async (l) => {
 			s.length = 0, c.length = 0, l[Symbol.for("@voltro/runtime:tx-fold-releases")] = c, l[Al] = /* @__PURE__ */ new Map();
-			let u = e.undoCapture?.(l), d = Yv(u ? u.tx : l), f = e.buildContext(i, d.tx, {
+			let u = e.undoCapture?.(l), d = ty(u ? u.tx : l), f = e.buildContext(i, d.tx, {
 				committedStore: a,
 				afterCommit: (e) => {
 					s.push(e);
 				}
-			}), p = t.executor(n, f), m = o.isEffect(p) ? await e.runEffect(MS(p, r.subject), f.store) : await p;
-			return await zS({
+			}), p = t.executor(n, f), m = o.isEffect(p) ? await e.runEffect(RS(p, r.subject), f.store) : await p;
+			return await GS({
 				store: f.store,
 				target: t.descriptor.target,
 				procedure: t.descriptor.name,
@@ -12938,7 +12942,7 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 				tag: t.descriptor.name,
 				subject: r.subject,
 				traceId: r.traceId
-			}), await Zv({
+			}), await ry({
 				touched: d.drain(),
 				store: f.store,
 				subject: r.subject
@@ -12954,46 +12958,46 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		for (let e of s) await e();
 		return l;
 	}
-}), KS = (e) => (t, n, r, i) => BS({
+}), QS = (e) => (t, n, r, i) => KS({
 	name: t.name,
 	kind: "workflow",
 	input: n,
 	requestContext: r,
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
-	runExecutor: async () => (await NS(t, r.subject, n, e.defaultDeny), i())
-}), qS = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, JS = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, YS = (e) => {
+	runExecutor: async () => (await zS(t, r.subject, n, e.defaultDeny), i())
+}), $S = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, eC = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, tC = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, XS = (e, t, n) => (r) => () => {
+}, nC = (e, t, n) => (r) => () => {
 	let i = e.descriptor.guards;
 	return (!i || i.length === 0) && n !== !0 ? Promise.resolve(null) : o.runPromise(Cn(r, i, t, {
 		defaultDeny: n === !0,
 		procedure: e.descriptor.name
 	}));
-}, ZS = (e, t) => e.rowFilter !== void 0 || jo() === void 0 ? t(e) : o.promise(() => IS(e)).pipe(o.flatMap((e) => {
+}, rC = (e, t) => e.rowFilter !== void 0 || jo() === void 0 ? t(e) : o.promise(() => HS(e)).pipe(o.flatMap((e) => {
 	let n = t(e);
 	return o.isEffect(n) ? n : o.succeed(n);
-})), QS = (e) => (t, n) => (r) => {
-	if (r.rowFilter === void 0 && jo() !== void 0) return ZS(r, (r) => QS(e)(t, n)(r));
-	let i = e.buildContext(r), a = XS(t, n, e.defaultDeny)(r.subject), s = async () => {
+})), iC = (e) => (t, n) => (r) => {
+	if (r.rowFilter === void 0 && jo() !== void 0) return rC(r, (r) => iC(e)(t, n)(r));
+	let i = e.buildContext(r), a = nC(t, n, e.defaultDeny)(r.subject), s = async () => {
 		let i = await a();
 		if (i) throw i;
-		let s = e.buildContext(await IS(r)), c = t.executor(n, s);
-		return o.isEffect(c) ? o.runPromise(e.provideEffect(MS(c, r.subject), s.store), r.signal === void 0 ? void 0 : { signal: r.signal }) : qS(await Promise.resolve(c));
+		let s = e.buildContext(await HS(r)), c = t.executor(n, s);
+		return o.isEffect(c) ? o.runPromise(e.provideEffect(RS(c, r.subject), s.store), r.signal === void 0 ? void 0 : { signal: r.signal }) : $S(await Promise.resolve(c));
 	}, c = (n) => {
-		let i = qS(n);
-		return JS(i) ? e.finalize(i, r) : {
+		let i = $S(n);
+		return eC(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: YS(t),
+			dependentTables: tC(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: s
 		};
 	}, l = () => {
-		_o(t.descriptor.name, YS(t));
+		_o(t.descriptor.name, tC(t));
 		let a = t.executor(n, i);
-		return o.isEffect(a) ? e.provideEffect(MS(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
+		return o.isEffect(a) ? e.provideEffect(RS(a, r.subject), i.store).pipe(o.map(c)) : a instanceof Promise ? o.promise(() => a).pipe(o.map(c)) : c(a);
 	}, u = () => {
 		let i = t.descriptor.guards;
 		return (!i || i.length === 0) && e.defaultDeny !== !0 ? l() : Cn(r.subject, i, n, {
@@ -13017,18 +13021,18 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		subject: r.subject,
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId },
-		...LS(r)
+		...US(r)
 	});
-}, $S = (e) => async (t, n, r) => {
-	let i = await IS(r), a = QS(e)(t, n)(i), s = o.isEffect(a) ? await jS(a) : a;
+}, aC = (e) => async (t, n, r) => {
+	let i = await HS(r), a = iC(e)(t, n)(i), s = o.isEffect(a) ? await LS(a) : a;
 	if (ks(s)) return s.value;
 	let c = e.buildContext(i);
 	return e.queryRows(s, i, c.store);
-}, eC = (e) => (t, n, r, i) => {
+}, oC = (e) => (t, n, r, i) => {
 	let a = !1, s;
 	return (async () => {
 		try {
-			let c = await IS(r), l = QS(e)(t, n)(c), u = o.isEffect(l) ? await jS(l) : l, d = (e) => i(e), f = ks(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c, XS(t, n, e.defaultDeny)(c.subject), Go(c.subject));
+			let c = await HS(r), l = iC(e)(t, n)(c), u = o.isEffect(l) ? await LS(l) : l, d = (e) => i(e), f = ks(u) ? await e.subscribeComputed(u, d, c) : await e.subscribeDescriptor(u, d, c, nC(t, n, e.defaultDeny)(c.subject), Go(c.subject));
 			a ? f() : s = f;
 		} catch (e) {
 			i({
@@ -13042,27 +13046,27 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	})(), () => {
 		a = !0, s?.();
 	};
-}, tC = (e) => (t, n, r) => BS({
+}, sC = (e) => (t, n, r) => KS({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
 	requestContext: r,
-	target: RS(t),
+	target: WS(t),
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await NS(t.descriptor, r.subject, n, e.defaultDeny), await PS(t.descriptor, "action", r, n);
-		let i = e.buildContext(await IS(r));
-		_o(t.descriptor.name, YS(t));
+		await zS(t.descriptor, r.subject, n, e.defaultDeny), await BS(t.descriptor, "action", r, n);
+		let i = e.buildContext(await HS(r));
+		_o(t.descriptor.name, tC(t));
 		let a = t.executor(n, i);
-		return o.isEffect(a) ? e.runEffect(MS(a, r.subject), i.store) : a;
+		return o.isEffect(a) ? e.runEffect(RS(a, r.subject), i.store) : a;
 	}
-}), nC = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, rC = (e) => typeof e == "string" && e.length > 0 ? e : null, iC = [
+}), cC = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, lC = (e) => typeof e == "string" && e.length > 0 ? e : null, uC = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], aC = (e) => iC.some((t) => t in e), oC = (e, t, n) => {
+], dC = (e) => uC.some((t) => t in e), fC = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -13077,14 +13081,14 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!aC(e)) return {
+	if (!dC(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = rC(e.updatedBy) ?? rC(e.createdBy), o = nC(e.updatedAt) ?? nC(e.createdAt);
+	let a = lC(e.updatedBy) ?? lC(e.createdBy), o = cC(e.updatedAt) ?? cC(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -13096,12 +13100,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		attribution: "audit",
 		found: !0
 	};
-}, sC = (e, t) => {
+}, pC = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: rC(e.actor) ?? rC(e.changedBy) },
-			at: nC(e.at) ?? nC(e.changedAt),
+			actor: { id: lC(e.actor) ?? lC(e.changedBy) },
+			at: cC(e.at) ?? cC(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -13116,12 +13120,12 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 		history: n,
 		found: n.length > 0
 	};
-}, cC = (e) => {
+}, mC = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, lC = (e) => {
+}, hC = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -13141,11 +13145,11 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 	return {
 		table: e.table,
 		op: e.op,
-		id: cC(e),
+		id: mC(e),
 		fields: t
 	};
-}, uC = (e) => {
-	let t = e.map(lC);
+}, gC = (e) => {
+	let t = e.map(hC);
 	return {
 		rows: t,
 		summary: {
@@ -13154,21 +13158,21 @@ Give each a five-field expression, or set trigger: 'self' on it.`);
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, dC = class extends Error {
+}, _C = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, fC = async (e, t) => {
+}, vC = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new dC();
+			throw n = await t(e), r = !0, new _C();
 		});
 	} catch (e) {
-		if (!(e instanceof dC)) throw e;
+		if (!(e instanceof _C)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, pC = "framework-runtime";
+}, yC = "framework-runtime";
 //#endregion
-export { mf as ACTORS_TABLE, Cu as API_CSP, pf as API_KEYS_TABLE, gy as APPROVALS_TABLE, Eh as AccessDenied, SS as AggregateError, Tb as AggregateMaintainer, xS as AggregateNotFound, CS as AggregateRegistry, bS as AggregateStale, Zx as AnalyticsCapabilityNotSupported, Xx as AnalyticsError, Qx as AnalyticsSink, av as CLAIM_RETENTION_BUCKETS, Y as CONNECTIONS_TABLE, wm as CONNECTION_GRANTS_TABLE, i_ as CircuitBreaker, n_ as CircuitOpen, Jm as ConnectionNotConnected, Vt as ConstraintViolation, fx as CostAccountant, ax as CostRegistry, fS as DEFAULT_ANALYTICS_MIRROR_TUNABLES, _y as DEFAULT_APPROVAL_EXPIRY_MS, iv as DEFAULT_CLAIM_BUCKET_MS, Nl as DEFAULT_COMPRESSION_MIN_BYTES, Ai as DEFAULT_CRDT_COMPACT_MAX_BYTES, bi as DEFAULT_DELIVERY_CONCURRENCY, lv as DEFAULT_EXTERNAL_RECONCILE_MS, cv as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, Tu as DEFAULT_HSTS, ws as DEFAULT_KEEP_ALIVE_MS, jv as DEFAULT_MAX_IDLE_INTERVAL_MS, gd as DEFAULT_MAX_RPC_BODY_BYTES, b_ as DEFAULT_MAX_RUNTIME_MS, HS as DEFAULT_MUTATION_REPLAY_ATTEMPTS, mm as DEFAULT_OUTBOX_CLAIM_LEASE_MS, xi as DEFAULT_RAW_READ_TRACKING_LIMIT, Km as DEFAULT_REFRESH_SKEW_MS, fc as DEFAULT_RESUME_MAX_DELTAS, dc as DEFAULT_RESUME_WINDOW_MS, Eo as DEFAULT_ROW_FILTER_RETRY, mv as DEFAULT_SCHEDULE_HEARTBEAT_MS, tc as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, nc as DEFAULT_SOCKET_OVERRUN_AFTER_MS, rc as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, ic as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, e_ as DEFAULT_STALE_AFTER_MS, kf as DEVICES_TABLE, tv as DORMANCY_WAKEUP_TENANT, _l as DeleteBuilder, ms as Dispatcher, Xp as EVENT_CLIENT_QUEUE_SIZE, Zp as EVENT_LATEST_QUEUE_SIZE, uv as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, $f as EffectStore, Gp as EventBus, Zb as ExpectationEvaluator, Vb as ExpectationRegistry, jx as ExperimentEvaluator, xx as ExperimentRegistry, oh as GRANT_TTL_MS, Ts as HEADERS_TIMEOUT_MARGIN_MS, mx as HOLDOUT_VARIANT, wu as HTML_CSP, gi as InMemoryDataStore, ti as IndexedMatcher, rm as InstanceMembership, Jr as LinearScanMatcher, Sv as MIN_EXTERNALIZABLE_INTERVAL_MS, m as MetricBoundaries, tS as NOOP_ANALYTICS_PROVIDER, No as NO_ROW_FILTER, du as NO_TRUSTED_PROXIES, Qt as NoRowFound, Eu as ORIGIN_NULLING_REFERRER_POLICIES, sm as OUTBOX_ATTEMPTS_TABLE, hm as OUTBOX_ATTEMPT_LOG_CAP, J as OUTBOX_TABLE, dl as OptimisticLockError, Th as REBAC_ADMIN_SCOPE, qm as REFRESH_LEASE_MS, Gg as REPLICA_OBSERVATIONS_TABLE, pC as RUNTIME_NAME, Fb as ReactionRateLimiter, cs as ReplicatedDataStore, To as RowFilterDeclarationViolated, wo as RowFilterUnavailable, ev as SCHEDULE_SUBJECT, Zf as SYSTEM_SUBJECT, hl as SelectBuilder, tn as ServerOnlyColumnWrite, Qh as SsrfBlockedError, rn as StoreOperationFailed, ii as SubscriptionRegistry, ne as TENANT_SELECTIONS_TABLE, pv as TERMINAL_RUN_STATUSES, Dl as TRANSACTION_READ_CONFLICT_NAME, Al as TX_READ_VERSIONS_KEY, sn as TableValidationFailed, ln as TenantRowNotFound, dn as TenantScopeViolation, ub as TimelineRecorder, Ol as TransactionReadConflict, ty as UndoBoundaryError, ry as UndoStack, Fu as UnverifiedWebhookRoute, gl as UpdateBuilder, ag as VOLTRO_AUDIT_MIXIN_ID, sg as VOLTRO_EXPIRES_MIXIN_ID, lg as VOLTRO_LOCAL_FIRST_MIXIN_ID, og as VOLTRO_SOFT_DELETE_MIXIN_ID, cg as VOLTRO_TENANT_MIXIN_ID, Mu as WEBHOOK_VERIFICATION_PROPERTY, Cp as WorkflowPayloadError, gp as WorkflowRateLimitedError, _p as WorkflowSingletonHeldError, cp as WorkflowStartNotExecuted, qs as _connectionStreamCount, Js as _resetConnectionCredentialsForTest, vy as _voltroApprovalsTable, Rv as _voltroChangeClaimsTable, Em as _voltroConnectionGrantsTable, Cm as _voltroConnectionsTable, Eb as _voltroRebacTuplesTable, Lv as _voltroScheduleClaimsTable, Iv as _voltroScheduleRunsTable, zv as _voltroTracesTable, Bv as _voltroUndoLogTable, Nx as _voltroWakeupsTable, zp as _voltroWorkflowEventDeliveriesTable, Rp as _voltroWorkflowEventsTable, Tl as actingUserId, Dc as adoptDetached, Sc as answerResume, Xf as apiKeyManagementRoutes, yi as appValidation, Ws as applyConnectionCredential, zS as applyDeclaredRelations, Sl as applyDefined, Cb as applyDelta, ay as applyInverse, oy as applyInverses, Os as applyKeepAlive, Hg as applyPluginRefRules, Uo as applyRowFilter, Wo as applyRowFilterToDescriptor, OS as applySoftDeleteScope, TS as applyTenantScope, my as applyUndoInvocation, wy as approvalIntentKey, By as approvalNonce, Hy as approvalsPendingExecutor, Ih as assertCan, jm as assertConnectionCipherConfigured, Iu as assertWebhookRoutesDeclareVerification, yx as assignVariant, _S as attachAnalyticsMirror, Qb as attachExpectations, Mx as attachExperiments, px as attachFinops, Od as awaitServerListening, pm as backoffMs, uh as beginOAuthConnect, Zu as bindComputedUntyped, Bs as bindConnectionCredential, em as bindEvent, hd as bindMutation, ed as bindStream, Qu as bindSubscription, qu as bindSubscriptionUntyped, xb as buildIvmState, uC as buildPreview, kb as buildRebacInterceptor, jb as buildRebacReadFilter, ts as buildSubjectKey, Fd as buildTracingLayer, jg as cacheScopeLeaks, Xd as cachedBackend, Fh as can, U_ as cancelWakeup, _c as canonicalInputKey, Cy as canonicalJson, ni as canonicalize, ov as claimGraceMs, O as classifyConstraintViolation, uo as classifyRead, lu as classifyRequestOrigin, gb as classifyShape, Iy as clearApprovalGate, Qm as clearConnectionRefreshFlights, jh as clearResourcePolicies, se as clearRetentions, s_ as clearSystemStoreHandle, Of as clearTenantSelection, Ug as collectPluginRefRules, Vg as collectReferenceSoftDeleteRules, S_ as compileCron, dh as completeOAuthConnect, iS as composeAnalytics, rS as composeAnalyticsSinks, sh as connectionCallbackPath, Am as connectionLabel, Kx as countRunningWorkflows, eo as counter, Ni as crdtCompactMaxBytes, Cv as cronForInterval, w_ as cronOccurrences, Eg as crud, Di as currentRawReads, Vh as currentRequestLoader, ss as currentRoutingContext, Ic as currentTraceContext, Tf as dataStoreApiKeyStore, Uf as dataStoreDeviceStore, rf as dataStoreIdempotencyStore, uf as dataStoreKvStore, Ry as decideApproval, Uy as decideApprovalInvocation, qc as decryptField, dd as defectMessage, vS as defineAggregate, km as defineConnection, rx as defineCostBudget, Np as defineEventTrigger, AS as defineExecutor, zb as defineExpectation, gx as defineExperiment, um as defineOutboxHandler, Mb as defineReaction, Oh as defineResourcePolicy, x_ as defineSchedule, Yx as defineSubscriber, fs as deliveredRowCount, Rc as deriveKey, Ec as detachForResume, qf as deviceManagementRoutes, Mf as deviceTokenPrefixes, lC as diffChange, Ed as drainForShutdown, bm as drainOutbox, X_ as dueWakeups, Ph as effectiveRelations, gg as emptySchemaRegistry, $c as enableGraphObservation, Kc as encryptField, Ly as enforceApproval, _o as enterReadRecording, Bh as enterRequestLoader, Wd as envSecretsBackend, Zv as evaluateTouchedRules, Ia as eventMetricTagCacheSizeForTests, Wm as exchangeAuthorizationCode, Mc as externalSpanFromTraceparent, wv as externalizationRefusal, kv as externalizedTask, Av as externalizedTaskNames, ve as extractDbCause, ri as fingerprintFor, Yo as forbiddenColumnsForSubject, Bm as forgetCredential, $g as forgetReplicaObservations, Mg as formatCacheScopeLeaks, Ag as formatServerOnlyLeaks, Ac as formatTraceparent, Fg as formatUnresolvedSources, iy as forwardChangeFromCdc, Jf as frameworkApiKeyStrategy, Wf as frameworkDeviceStrategy, to as gauge, gf as generateApiKeyToken, Fy as getApprovalGate, Vs as getConnectionCredential, hh as getConnectionResolver, zs as getCredentialExpiry, Wc as getFieldCipher, kh as getResourcePolicy, jo as getRowFilter, Qs as getRpcConnection, c_ as getSystemStoreHandle, fb as getTimelineRecorder, Kh as getTupleSource, vb as groupKeyOf, vx as hashUnitInterval, no as histogramMetric, sC as historyProvenance, Zd as httpSecretsBackend, Ur as inspectWorkflow, Py as installApprovalGate, Jh as installPolicyGuardResolver, Ks as interruptConnectionStreams, $v as invertChange, hu as ipToBytes, yS as isAggregateDefinition, Fl as isCompressibleContentType, ix as isCostBudgetDefinition, ES as isEmptyTenantScopedRead, Bb as isExpectationDefinition, _x as isExperimentDefinition, Ee as isForeignKeyViolation, zx as isIdleNow, cd as isInfraError, el as isObservingGraph, DS as isOrglessUserSubject, Oe as isQueryTimeout, ny as isSafeToApply, y_ as isScheduleDefinition, zg as isSoftDelete, $l as isStateChangingMethod, kl as isTransactionReadConflict, yu as isTrustedProxy, Pp as isWorkflowEventTriggerDefinition, Ti as isolateRawReadScope, bb as ivmValue, oC as lastWriteProvenance, Vm as listConnectionStates, Ah as listResourcePolicies, Ne as listRetentionConflicts, Pe as listRetentions, Db as loadResourceTuples, Ab as loadSubjectTuples, h_ as localityAwareSelector, tC as makeActionRunner, sv as makeAdvisoryLockCoordinator, Bc as makeAesCipher, yf as makeApiKeyService, ig as makeApiKeyUsageBuffer, wf as makeApiKeyUsageFlusher, vi as makeAppAccess, My as makeApprovalGate, df as makeAsyncKv, m_ as makeAuthMiddlewareLayers, $p as makeBufferGapDetector, Ud as makeBufferingSpanProcessor, Mm as makeConnectionRegistry, _h as makeConnectionResolver, p_ as makeConnectionState, vh as makeConnectionsFacade, Fv as makeCoordinatedScheduler, Xh as makeDataLoader, Go as makeDefaultRefilter, Lf as makeDeviceService, wh as makeDisconnectConnectionExecutor, sp as makeEffectStoreLayer, Yp as makeEventPublisher, Bp as makeEventsFacade, Vc as makeFieldCipher, vl as makeFluentStore, Bx as makeIdleGate, kp as makeLazyWorkflowFacade, xh as makeListConnectionsExecutor, pd as makeMutationOutputCodec, GS as makeMutationRunner, $S as makeOneShotQueryRunner, nu as makeOriginGuardExemption, fm as makeOutboxFacade, Ix as makeProcessAdapter, QS as makeQueryDescriptorProducer, kS as makeQueryFinalizer, XS as makeQueryReauthorizer, eC as makeQuerySubscriber, Vx as makeRouterActivity, Yv as makeRuleCapture, ug as makeSchemaRegistry, Sh as makeStartConnectionExecutor, Ch as makeSubmitTokenExecutor, lc as makeSubscriptionOutbox, Dp as makeTransactionalWorkflowFacade, Kv as makeUndoCapture, Hx as makeWakeGate, Gx as makeWakeProxyServer, Ep as makeWorkflowFacade, Op as makeWorkflowFacadeWithCallerContext, Ap as makeWorkflowHandlers, jp as makeWorkflowLayers, yp as makeWorkflowRunHandle, KS as makeWorkflowStartRunner, W_ as markWakeupFired, Sb as materializeIvm, Rl as maybeCompress, bf as memoryApiKeyStore, Rf as memoryDeviceStore, __ as memoryReplicationAdapter, es as memoryRywPositionStore, Us as mergeCookieHeader, t_ as mergeFleetObservations, ul as missingRowError, Il as negotiateEncoding, Nc as newTraceId, Pv as nextDelay, C_ as nextFiring, Z_ as nextWakeup, Rx as nodeProcessSupervisor, nS as noopAnalytics, aS as noopAnalyticsSpec, ff as noopKv, fu as normalizeIp, iu as normalizeOrigin, xo as noteRead, Ul as noteResumeVerdict, Io as noteRowFilterResolved, Dm as oauthCredentialValue, al as observeStore, rl as observedGraph, xd as onProcessShutdown, Md as otelImportFailure, lm as outboxAttemptsTable, om as outboxTable, jy as parseApprovalInterval, jc as parseTraceparent, wp as payloadPropertyNames, vv as peerRunIsAlive, zy as pendingApprovalsFor, Cf as plantMissingApiKeyActors, Zo as powerOfTwoSelector, Du as preservesSameOriginHeader, fC as previewInRollback, Im as projectConnectionState, $_ as pruneWakeups, qp as publishEvent, Xl as publishServerTracerLayer, uc as pumpOutbox, ki as rawSqlPreview, sc as reactiveSocketTunables, Lc as readMaybeOne, Mv as readPollCeilingMs, go as readRecordingActive, Xg as readReplicaObservations, Mh as rebacPolicyGraph, $i as recordCoalesced, Rs as recordCredentialExpiry, Ra as recordEventDelivered, za as recordEventDropped, La as recordEventPublished, Ba as recordEventSubscribers, Qa as recordExternalMissed, Za as recordExternalTrigger, xc as recordForResume, ea as recordOverrun, ta as recordOversized, Ei as recordRawRead, vo as recordReads, Va as recordSample, Xa as recordScheduleQueueRecovery, Ya as recordScheduleQueueWait, Ja as recordScheduleQueued, Ka as recordScheduleRun, na as recordStalled, Ga as recordSubscriptionActive, Ua as recordSubscriptionDelivery, nl as recordTableAccess, mb as recordTimelineEvent, $a as recordWorkflowRun, So as recordingStore, Sg as redactColumns, sb as redactRow, ns as redisRywPositionStore, hy as redoUndoInvocation, Gm as refreshAccessToken, Gs as registerConnectionStream, qh as registerDefaultTupleSource, Dv as registerExternalizedTask, Ke as registerRetention, H_ as registerWakeup, xy as rehydrateGuards, q_ as releaseWakeup, Qo as replicaHealth, Yu as resetComputedQueryCacheWarnings, Oc as resetDetachedForTest, Fa as resetEventMetricTagCacheForTests, il as resetObservedGraph, Jg as resetReplicaObservationWarnings, Gl as resetResumeCensus, Cc as resetResumeRingsForTest, Ro as resetRowFilterResolvedArms, qd as resetSecretsBackend, oa as resetSubscriptionSocketMetrics, xu as resolveClientAddress, th as resolveConnection, gh as resolveConnectionForSubject, g_ as resolveCurrentRegion, Ri as resolveDependentTables, Ds as resolveKeepAlive, uu as resolveOriginGuardConfig, Ci as resolveReactiveConfig, lh as resolveRedirectUri, Su as resolveRequestIsHttps, wb as resolveRescan, zo as resolveRowFilterScope, Bo as resolveRowFilterScopeFor, Jd as resolveSecret, Yd as resolveSecretSync, Qd as resolveSecretsBackend, Au as resolveSecurityHeaders, ib as resolveTimelineMode, T_ as resolveTransactionSubject, bu as resolveTrustedProxies, yo as restrictingReads, bo as restrictingReadsEffect, bx as resultVariantNames, Wl as resumeCensus, gc as resumeKeyOf, hc as resumeTunables, Ye as retentionTtlMsFromEnv, xs as revalidatePath, Ss as revalidateTable, Cs as revalidateTag, lb as reverseEventOverRows, Rh as revokedIds, Ho as rowFilterMayNarrow, Mo as rowFilterRegistered, Lo as rowFilterResolvedArms, Bg as rulesFor, l_ as runAsSystem, qx as runOrchestratorTick, jS as runProvidedEffect, Lb as runReaction, Jx as runSingleNodeOrchestrator, Fx as runWakeLoop, WS as runWithDeadlockRetry, tl as runWithObservedProcedure, Oi as runWithRawReadScope, Hh as runWithRequestLoader, as as runWithRoutingContext, os as runWithRoutingContextEffect, Fc as runWithTraceContext, ch as sanitizeRedirectTo, k_ as scheduleBackfillRequestsTable, Nv as scheduleCoordinated, Dg as schemaPropertyNames, Sy as scopeStringsOf, ju as securityHeadersFor, Df as selectTenant, by as serializeGuards, Ko as serverOnlyColumnNames, kg as serverOnlyLeaks, Yl as serverTracer, Qi as setBufferedBytes, mh as setConnectionResolver, Mi as setCrdtCompactMaxBytes, Uc as setFieldCipher, oc as setReactiveSocketTunables, mc as setResumeTunables, ys as setRevalidationPublisher, Ao as setRowFilter, Kd as setSecretsBackend, Jl as setServerTracer, ho as setSourceGapSink, o_ as setSystemStoreHandle, pb as setTimelineRecorderForTest, Gh as setTupleSource, qr as settleHandlerBody, hf as sha256Hex, jf as sha256HexOf, Td as shutdownGraceMsFromEnv, nv as singleCoordinator, io as snapshotMetrics, ao as snapshotMetricsSync, Co as sourceGapReport, rg as ssrfGuardHttpClientLayer, ng as ssrfReason, _d as startRpcServer, yv as startScheduler, Rm as storeCredential, qo as stripColumnsFromRows, Xo as stripForbiddenForWire, Jo as stripServerOnlyForWire, aa as subscriptionSocketMetricSamples, ia as subscriptionSocketMetricsSnapshot, fh as sweepExpiredGrants, st as sweepRetention, ey as synthesizeInverse, ct as tenantSelectionId, Ef as tenantSelectionStore, Zh as tracingHttpClientLayer, Mp as triggerWorkflow, K_ as tryClaimWakeup, Hs as unbindConnection, Vv as undoCaptureEnabled, fy as undoLogExecutor, Hv as undoSurfaceEnabled, Ov as unregisterExternalizedTask, Pg as unresolvedSources, wS as useAggregate, eS as useAnalytics, ox as useCostBudget, Hb as useExpectation, Sx as useExperiment, Lh as visibleRows, Px as wakeDueOnce, Pu as webhookVerificationOf, IS as withRowFilter, ZS as withScopedRequest, Zl as withServerTracer, nb as workflowDomainEventsExecutor, rb as workflowEventDeliveriesExecutor, Ky as workflowRowVisibleTo, eb as workflowRunEventsExecutor, Zy as workflowRunExecutor, $y as workflowRunStepsExecutor, Qy as workflowRunsExecutor, Gv as wrapCaptureStore, vg as wrapStoreWithBootCodec, El as wrapStoreWithMixinBehaviour, Yg as writeReplicaObservation };
+export { mf as ACTORS_TABLE, Cu as API_CSP, pf as API_KEYS_TABLE, Sy as APPROVALS_TABLE, Mh as AccessDenied, OS as AggregateError, jb as AggregateMaintainer, DS as AggregateNotFound, kS as AggregateRegistry, ES as AggregateStale, rS as AnalyticsCapabilityNotSupported, nS as AnalyticsError, iS as AnalyticsSink, dv as CLAIM_RETENTION_BUCKETS, Y as CONNECTIONS_TABLE, Am as CONNECTION_GRANTS_TABLE, u_ as CircuitBreaker, c_ as CircuitOpen, eh as ConnectionNotConnected, Vt as ConstraintViolation, vx as CostAccountant, dx as CostRegistry, vS as DEFAULT_ANALYTICS_MIRROR_TUNABLES, Cy as DEFAULT_APPROVAL_EXPIRY_MS, uv as DEFAULT_CLAIM_BUCKET_MS, Nl as DEFAULT_COMPRESSION_MIN_BYTES, Ai as DEFAULT_CRDT_COMPACT_MAX_BYTES, bi as DEFAULT_DELIVERY_CONCURRENCY, hv as DEFAULT_EXTERNAL_RECONCILE_MS, mv as DEFAULT_EXTERNAL_TRIGGER_SKEW_MS, Tu as DEFAULT_HSTS, ws as DEFAULT_KEEP_ALIVE_MS, Lv as DEFAULT_MAX_IDLE_INTERVAL_MS, gd as DEFAULT_MAX_RPC_BODY_BYTES, E_ as DEFAULT_MAX_RUNTIME_MS, JS as DEFAULT_MUTATION_REPLAY_ATTEMPTS, bm as DEFAULT_OUTBOX_CLAIM_LEASE_MS, xi as DEFAULT_RAW_READ_TRACKING_LIMIT, Qm as DEFAULT_REFRESH_SKEW_MS, fc as DEFAULT_RESUME_MAX_DELTAS, dc as DEFAULT_RESUME_WINDOW_MS, Eo as DEFAULT_ROW_FILTER_RETRY, bv as DEFAULT_SCHEDULE_HEARTBEAT_MS, tc as DEFAULT_SOCKET_MAX_BUFFERED_BYTES, nc as DEFAULT_SOCKET_OVERRUN_AFTER_MS, rc as DEFAULT_SOCKET_OVERSIZED_EVENT_BYTES, ic as DEFAULT_SOCKET_STALL_WARN_AFTER_MS, o_ as DEFAULT_STALE_AFTER_MS, kf as DEVICES_TABLE, sv as DORMANCY_WAKEUP_TENANT, _l as DeleteBuilder, ms as Dispatcher, nm as EVENT_CLIENT_QUEUE_SIZE, rm as EVENT_LATEST_QUEUE_SIZE, gv as EXTERNAL_TRIGGER_AHEAD_TOLERANCE_MS, $f as EffectStore, Zp as EventBus, rx as ExpectationEvaluator, qb as ExpectationRegistry, Lx as ExperimentEvaluator, Dx as ExperimentRegistry, fh as GRANT_TTL_MS, Ts as HEADERS_TIMEOUT_MARGIN_MS, bx as HOLDOUT_VARIANT, wu as HTML_CSP, gi as InMemoryDataStore, ti as IndexedMatcher, lm as InstanceMembership, Jr as LinearScanMatcher, Ov as MIN_EXTERNALIZABLE_INTERVAL_MS, m as MetricBoundaries, sS as NOOP_ANALYTICS_PROVIDER, No as NO_ROW_FILTER, du as NO_TRUSTED_PROXIES, Qt as NoRowFound, Eu as ORIGIN_NULLING_REFERRER_POLICIES, pm as OUTBOX_ATTEMPTS_TABLE, xm as OUTBOX_ATTEMPT_LOG_CAP, J as OUTBOX_TABLE, dl as OptimisticLockError, jh as REBAC_ADMIN_SCOPE, $m as REFRESH_LEASE_MS, Zg as REPLICA_OBSERVATIONS_TABLE, yC as RUNTIME_NAME, Vb as ReactionRateLimiter, cs as ReplicatedDataStore, To as RowFilterDeclarationViolated, wo as RowFilterUnavailable, ov as SCHEDULE_SUBJECT, Zf as SYSTEM_SUBJECT, hl as SelectBuilder, tn as ServerOnlyColumnWrite, ig as SsrfBlockedError, rn as StoreOperationFailed, ii as SubscriptionRegistry, ne as TENANT_SELECTIONS_TABLE, yv as TERMINAL_RUN_STATUSES, Dl as TRANSACTION_READ_CONFLICT_NAME, Al as TX_READ_VERSIONS_KEY, sn as TableValidationFailed, ln as TenantRowNotFound, dn as TenantScopeViolation, gb as TimelineRecorder, Ol as TransactionReadConflict, sy as UndoBoundaryError, ly as UndoStack, Fu as UnverifiedWebhookRoute, gl as UpdateBuilder, dg as VOLTRO_AUDIT_MIXIN_ID, pg as VOLTRO_EXPIRES_MIXIN_ID, hg as VOLTRO_LOCAL_FIRST_MIXIN_ID, fg as VOLTRO_SOFT_DELETE_MIXIN_ID, mg as VOLTRO_TENANT_MIXIN_ID, Mu as WEBHOOK_VERIFICATION_PROPERTY, kp as WorkflowPayloadError, Sp as WorkflowRateLimitedError, Cp as WorkflowSingletonHeldError, mp as WorkflowStartNotExecuted, qs as _connectionStreamCount, Js as _resetConnectionCredentialsForTest, wy as _voltroApprovalsTable, Wv as _voltroChangeClaimsTable, Mm as _voltroConnectionGrantsTable, km as _voltroConnectionsTable, Mb as _voltroRebacTuplesTable, Uv as _voltroScheduleClaimsTable, Hv as _voltroScheduleRunsTable, Gv as _voltroTracesTable, Kv as _voltroUndoLogTable, zx as _voltroWakeupsTable, Gp as _voltroWorkflowEventDeliveriesTable, Wp as _voltroWorkflowEventsTable, Tl as actingUserId, Dc as adoptDetached, Sc as answerResume, Xf as apiKeyManagementRoutes, yi as appValidation, Ws as applyConnectionCredential, GS as applyDeclaredRelations, Sl as applyDefined, kb as applyDelta, dy as applyInverse, fy as applyInverses, Os as applyKeepAlive, Jg as applyPluginRefRules, Uo as applyRowFilter, Wo as applyRowFilterToDescriptor, PS as applySoftDeleteScope, jS as applyTenantScope, by as applyUndoInvocation, Ay as approvalIntentKey, Ky as approvalNonce, Jy as approvalsPendingExecutor, Hh as assertCan, Lm as assertConnectionCipherConfigured, Iu as assertWebhookRoutesDeclareVerification, Tx as assignVariant, CS as attachAnalyticsMirror, ix as attachExpectations, Rx as attachExperiments, yx as attachFinops, Od as awaitServerListening, ym as backoffMs, gh as beginOAuthConnect, Zu as bindComputedUntyped, Bs as bindConnectionCredential, om as bindEvent, hd as bindMutation, ed as bindStream, Qu as bindSubscription, qu as bindSubscriptionUntyped, Db as buildIvmState, gC as buildPreview, Fb as buildRebacInterceptor, Lb as buildRebacReadFilter, ts as buildSubjectKey, Fd as buildTracingLayer, Lg as cacheScopeLeaks, Xd as cachedBackend, Vh as can, Y_ as cancelWakeup, _c as canonicalInputKey, ky as canonicalJson, ni as canonicalize, fv as claimGraceMs, O as classifyConstraintViolation, uo as classifyRead, lu as classifyRequestOrigin, Sb as classifyShape, Hy as clearApprovalGate, ih as clearConnectionRefreshFlights, Lh as clearResourcePolicies, se as clearRetentions, p_ as clearSystemStoreHandle, Of as clearTenantSelection, Yg as collectPluginRefRules, qg as collectReferenceSoftDeleteRules, O_ as compileCron, _h as completeOAuthConnect, uS as composeAnalytics, lS as composeAnalyticsSinks, ph as connectionCallbackPath, Im as connectionLabel, Qx as countRunningWorkflows, eo as counter, Ni as crdtCompactMaxBytes, kv as cronForInterval, A_ as cronOccurrences, Mg as crud, Di as currentRawReads, qh as currentRequestLoader, ss as currentRoutingContext, Ic as currentTraceContext, Tf as dataStoreApiKeyStore, Uf as dataStoreDeviceStore, rf as dataStoreIdempotencyStore, uf as dataStoreKvStore, Wy as decideApproval, Yy as decideApprovalInvocation, qc as decryptField, dd as defectMessage, wS as defineAggregate, Fm as defineConnection, lx as defineCostBudget, zp as defineEventTrigger, IS as defineExecutor, Gb as defineExpectation, Sx as defineExperiment, gm as defineOutboxHandler, Rb as defineReaction, Ph as defineResourcePolicy, D_ as defineSchedule, tS as defineSubscriber, fs as deliveredRowCount, Rc as deriveKey, Ec as detachForResume, qf as deviceManagementRoutes, Mf as deviceTokenPrefixes, hC as diffChange, Ed as drainForShutdown, Em as drainOutbox, nv as dueWakeups, Bh as effectiveRelations, Sg as emptySchemaRegistry, $c as enableGraphObservation, Kc as encryptField, Uy as enforceApproval, _o as enterReadRecording, Kh as enterRequestLoader, Wd as envSecretsBackend, ry as evaluateTouchedRules, Ia as eventMetricTagCacheSizeForTests, Xm as exchangeAuthorizationCode, Mc as externalSpanFromTraceparent, Av as externalizationRefusal, Fv as externalizedTask, Iv as externalizedTaskNames, ve as extractDbCause, ri as fingerprintFor, Yo as forbiddenColumnsForSubject, Km as forgetCredential, a_ as forgetReplicaObservations, Rg as formatCacheScopeLeaks, Ig as formatServerOnlyLeaks, Ac as formatTraceparent, Vg as formatUnresolvedSources, uy as forwardChangeFromCdc, Jf as frameworkApiKeyStrategy, Wf as frameworkDeviceStrategy, to as gauge, gf as generateApiKeyToken, Vy as getApprovalGate, Vs as getConnectionCredential, xh as getConnectionResolver, zs as getCredentialExpiry, Wc as getFieldCipher, Fh as getResourcePolicy, jo as getRowFilter, Qs as getRpcConnection, m_ as getSystemStoreHandle, vb as getTimelineRecorder, Qh as getTupleSource, wb as groupKeyOf, wx as hashUnitInterval, no as histogramMetric, pC as historyProvenance, Zd as httpSecretsBackend, pp as insertIgnoreRowOutcomeEffect, up as insertManyRowsEffect, lp as insertRowEffect, Ur as inspectWorkflow, By as installApprovalGate, eg as installPolicyGuardResolver, Ks as interruptConnectionStreams, ay as invertChange, hu as ipToBytes, TS as isAggregateDefinition, Fl as isCompressibleContentType, ux as isCostBudgetDefinition, MS as isEmptyTenantScopedRead, Kb as isExpectationDefinition, Cx as isExperimentDefinition, Ee as isForeignKeyViolation, Gx as isIdleNow, cd as isInfraError, el as isObservingGraph, NS as isOrglessUserSubject, Oe as isQueryTimeout, cy as isSafeToApply, T_ as isScheduleDefinition, Gg as isSoftDelete, $l as isStateChangingMethod, kl as isTransactionReadConflict, yu as isTrustedProxy, Bp as isWorkflowEventTriggerDefinition, Ti as isolateRawReadScope, Eb as ivmValue, fC as lastWriteProvenance, qm as listConnectionStates, Ih as listResourcePolicies, Ne as listRetentionConflicts, Pe as listRetentions, Nb as loadResourceTuples, Ib as loadSubjectTuples, x_ as localityAwareSelector, sC as makeActionRunner, pv as makeAdvisoryLockCoordinator, Bc as makeAesCipher, yf as makeApiKeyService, ug as makeApiKeyUsageBuffer, wf as makeApiKeyUsageFlusher, vi as makeAppAccess, Ry as makeApprovalGate, df as makeAsyncKv, b_ as makeAuthMiddlewareLayers, am as makeBufferGapDetector, Ud as makeBufferingSpanProcessor, Rm as makeConnectionRegistry, Ch as makeConnectionResolver, y_ as makeConnectionState, wh as makeConnectionsFacade, Vv as makeCoordinatedScheduler, ng as makeDataLoader, Go as makeDefaultRefilter, Lf as makeDeviceService, Ah as makeDisconnectConnectionExecutor, sp as makeEffectStoreLayer, tm as makeEventPublisher, Kp as makeEventsFacade, Vc as makeFieldCipher, vl as makeFluentStore, Kx as makeIdleGate, Fp as makeLazyWorkflowFacade, Dh as makeListConnectionsExecutor, pd as makeMutationOutputCodec, ZS as makeMutationRunner, aC as makeOneShotQueryRunner, nu as makeOriginGuardExemption, vm as makeOutboxFacade, Hx as makeProcessAdapter, iC as makeQueryDescriptorProducer, FS as makeQueryFinalizer, nC as makeQueryReauthorizer, oC as makeQuerySubscriber, qx as makeRouterActivity, ty as makeRuleCapture, gg as makeSchemaRegistry, Oh as makeStartConnectionExecutor, kh as makeSubmitTokenExecutor, lc as makeSubscriptionOutbox, Np as makeTransactionalWorkflowFacade, Qv as makeUndoCapture, Jx as makeWakeGate, Zx as makeWakeProxyServer, Mp as makeWorkflowFacade, Pp as makeWorkflowFacadeWithCallerContext, Ip as makeWorkflowHandlers, Lp as makeWorkflowLayers, Tp as makeWorkflowRunHandle, QS as makeWorkflowStartRunner, X_ as markWakeupFired, Ob as materializeIvm, Rl as maybeCompress, bf as memoryApiKeyStore, Rf as memoryDeviceStore, C_ as memoryReplicationAdapter, es as memoryRywPositionStore, Us as mergeCookieHeader, s_ as mergeFleetObservations, ul as missingRowError, Il as negotiateEncoding, Nc as newTraceId, Bv as nextDelay, k_ as nextFiring, rv as nextWakeup, Wx as nodeProcessSupervisor, cS as noopAnalytics, dS as noopAnalyticsSpec, ff as noopKv, fu as normalizeIp, iu as normalizeOrigin, xo as noteRead, Ul as noteResumeVerdict, Io as noteRowFilterResolved, Nm as oauthCredentialValue, al as observeStore, rl as observedGraph, xd as onProcessShutdown, Md as otelImportFailure, hm as outboxAttemptsTable, fm as outboxTable, Ly as parseApprovalInterval, jc as parseTraceparent, Ap as payloadPropertyNames, wv as peerRunIsAlive, Gy as pendingApprovalsFor, Cf as plantMissingApiKeyActors, Zo as powerOfTwoSelector, Du as preservesSameOriginHeader, vC as previewInRollback, Hm as projectConnectionState, av as pruneWakeups, $p as publishEvent, Xl as publishServerTracerLayer, uc as pumpOutbox, ki as rawSqlPreview, sc as reactiveSocketTunables, Lc as readMaybeOne, Rv as readPollCeilingMs, go as readRecordingActive, n_ as readReplicaObservations, Rh as rebacPolicyGraph, $i as recordCoalesced, Rs as recordCredentialExpiry, Ra as recordEventDelivered, za as recordEventDropped, La as recordEventPublished, Ba as recordEventSubscribers, Qa as recordExternalMissed, Za as recordExternalTrigger, xc as recordForResume, ea as recordOverrun, ta as recordOversized, Ei as recordRawRead, vo as recordReads, Va as recordSample, Xa as recordScheduleQueueRecovery, Ya as recordScheduleQueueWait, Ja as recordScheduleQueued, Ka as recordScheduleRun, na as recordStalled, Ga as recordSubscriptionActive, Ua as recordSubscriptionDelivery, nl as recordTableAccess, bb as recordTimelineEvent, $a as recordWorkflowRun, So as recordingStore, Og as redactColumns, pb as redactRow, ns as redisRywPositionStore, xy as redoUndoInvocation, Zm as refreshAccessToken, Gs as registerConnectionStream, $h as registerDefaultTupleSource, Nv as registerExternalizedTask, Ke as registerRetention, J_ as registerWakeup, Dy as rehydrateGuards, $_ as releaseWakeup, Qo as replicaHealth, Yu as resetComputedQueryCacheWarnings, Oc as resetDetachedForTest, Fa as resetEventMetricTagCacheForTests, il as resetObservedGraph, e_ as resetReplicaObservationWarnings, Gl as resetResumeCensus, Cc as resetResumeRingsForTest, Ro as resetRowFilterResolvedArms, qd as resetSecretsBackend, oa as resetSubscriptionSocketMetrics, xu as resolveClientAddress, sh as resolveConnection, Sh as resolveConnectionForSubject, S_ as resolveCurrentRegion, Ri as resolveDependentTables, Ds as resolveKeepAlive, uu as resolveOriginGuardConfig, Ci as resolveReactiveConfig, hh as resolveRedirectUri, Su as resolveRequestIsHttps, Ab as resolveRescan, zo as resolveRowFilterScope, Bo as resolveRowFilterScopeFor, Jd as resolveSecret, Yd as resolveSecretSync, Qd as resolveSecretsBackend, Au as resolveSecurityHeaders, ub as resolveTimelineMode, j_ as resolveTransactionSubject, bu as resolveTrustedProxies, yo as restrictingReads, bo as restrictingReadsEffect, Ex as resultVariantNames, Wl as resumeCensus, gc as resumeKeyOf, hc as resumeTunables, Ye as retentionTtlMsFromEnv, xs as revalidatePath, Ss as revalidateTable, Cs as revalidateTag, hb as reverseEventOverRows, Wh as revokedIds, Ho as rowFilterMayNarrow, Mo as rowFilterRegistered, Lo as rowFilterResolvedArms, Kg as rulesFor, h_ as runAsSystem, $x as runOrchestratorTick, LS as runProvidedEffect, Ub as runReaction, eS as runSingleNodeOrchestrator, Vx as runWakeLoop, XS as runWithDeadlockRetry, tl as runWithObservedProcedure, Oi as runWithRawReadScope, Jh as runWithRequestLoader, as as runWithRoutingContext, os as runWithRoutingContextEffect, Fc as runWithTraceContext, mh as sanitizeRedirectTo, F_ as scheduleBackfillRequestsTable, zv as scheduleCoordinated, Ng as schemaPropertyNames, Oy as scopeStringsOf, ju as securityHeadersFor, Df as selectTenant, Ey as serializeGuards, Ko as serverOnlyColumnNames, Fg as serverOnlyLeaks, Yl as serverTracer, Qi as setBufferedBytes, bh as setConnectionResolver, Mi as setCrdtCompactMaxBytes, Uc as setFieldCipher, oc as setReactiveSocketTunables, mc as setResumeTunables, ys as setRevalidationPublisher, Ao as setRowFilter, Kd as setSecretsBackend, Jl as setServerTracer, ho as setSourceGapSink, f_ as setSystemStoreHandle, yb as setTimelineRecorderForTest, Zh as setTupleSource, qr as settleHandlerBody, hf as sha256Hex, jf as sha256HexOf, Td as shutdownGraceMsFromEnv, cv as singleCoordinator, io as snapshotMetrics, ao as snapshotMetricsSync, Co as sourceGapReport, lg as ssrfGuardHttpClientLayer, cg as ssrfReason, _d as startRpcServer, Tv as startScheduler, Wm as storeCredential, qo as stripColumnsFromRows, Xo as stripForbiddenForWire, Jo as stripServerOnlyForWire, aa as subscriptionSocketMetricSamples, ia as subscriptionSocketMetricsSnapshot, vh as sweepExpiredGrants, st as sweepRetention, oy as synthesizeInverse, ct as tenantSelectionId, Ef as tenantSelectionStore, rg as tracingHttpClientLayer, Rp as triggerWorkflow, Q_ as tryClaimWakeup, Hs as unbindConnection, qv as undoCaptureEnabled, vy as undoLogExecutor, Jv as undoSurfaceEnabled, Pv as unregisterExternalizedTask, Bg as unresolvedSources, dp as upsertRowEffect, fp as upsertRowOutcomeEffect, AS as useAggregate, oS as useAnalytics, fx as useCostBudget, Jb as useExpectation, Ox as useExperiment, Uh as visibleRows, Bx as wakeDueOnce, Pu as webhookVerificationOf, HS as withRowFilter, rC as withScopedRequest, Zl as withServerTracer, cb as workflowDomainEventsExecutor, lb as workflowEventDeliveriesExecutor, Qy as workflowRowVisibleTo, ob as workflowRunEventsExecutor, rb as workflowRunExecutor, ab as workflowRunStepsExecutor, ib as workflowRunsExecutor, Zv as wrapCaptureStore, wg as wrapStoreWithBootCodec, El as wrapStoreWithMixinBehaviour, t_ as writeReplicaObservation };