@voltro/runtime 0.9.0 → 0.10.0

package/dist/index.js

@@ -1,24 +1,24 @@
-import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as w, lte as te, neq as T, or as ne, queryFor as re, registerRetention as ie, requireTable as ae, retentionTtlMsFromEnv as oe, serializeArraysForWrite as se, sweepRetention as ce, table as E, text as D, timestamp as O, walkLeaves as le } from "@voltro/database";
-import { createCipheriv as ue, createDecipheriv as de, createHash as fe, randomBytes as pe, randomUUID as me, scryptSync as he } from "node:crypto";
-import { EventEmitter as ge } from "node:events";
-import { ADMIN_SCOPE as _e, ConnectionHandshakeFailed as k, ConnectionInfo as ve, ConnectionKindMismatch as ye, ConnectionNotDeclared as be, ConnectionSubjectRequired as xe, SubjectService as Se, UndoConflict as Ce, UndoForbidden as we, UndoNotFound as Te, WorkflowRunHandleSchema as Ee, checkGuardsEffect as De, diffRows as Oe, effectiveScopes as ke, hasEffectiveScope as Ae, isIdKeyed as je, publishServerError as Me, requireScope as Ne, setPolicyGuardResolver as Pe, systemSubject as Fe, tsMs as Ie } from "@voltro/protocol";
-import { createLogger as A } from "@voltro/logger";
-import { Cause as j, Clock as Le, Context as Re, Cron as ze, Deferred as Be, Duration as Ve, Effect as M, Either as He, Exit as Ue, Layer as N, ManagedRuntime as We, Metric as P, MetricBoundaries as Ge, MetricState as Ke, Option as F, Ref as I, Schedule as qe, Schema as L, Stream as R, Tracer as Je } from "effect";
-import * as Ye from "node:http";
-import { createServer as Xe } from "node:http";
-import { HttpClient as Ze, HttpClientRequest as Qe, HttpLayerRouter as z, HttpServer as $e, HttpServerRequest as et, HttpServerResponse as B } from "@effect/platform";
-import { NodeContext as tt, NodeHttpServer as nt, NodeRuntime as rt } from "@effect/platform-node";
-import { Rpc as it, RpcSerialization as at, RpcServer as ot } from "@effect/rpc";
-import { defineRestRoute as st, dispatchSharedPath as ct, requireScope as lt } from "@voltro/protocol/rest";
-import { AsyncLocalStorage as ut } from "node:async_hooks";
-import { SpanKind as dt, SpanStatusCode as ft } from "@opentelemetry/api";
-import { Kv as pt, KvError as mt, KvStore as ht, layerConnections as gt, layerMemory as _t, layerRedis as vt } from "@voltro/kv";
-import { apiKeyStrategy as yt } from "@voltro/protocol/apikey";
-import { getCurrentWorkflowExecutionId as bt, inspectWorkflow as xt } from "@voltro/workflow";
-import { ArrayFormatter as St } from "effect/ParseResult";
-import { spawn as Ct } from "node:child_process";
+import { ENCRYPTED_PREFIX as e, and as t, attachEagerLoads as n, boolean as r, clearRetentions as i, collectSubqueries as a, contains as o, decryptFieldsOnRead as s, deserializeArraysOnRead as c, encryptFieldsForWrite as l, eq as u, evaluatePredicate as d, generateId as f, getRelations as p, getTable as m, gt as h, gte as g, hasEagerLoads as _, id as v, inSet as y, integer as b, isEncrypted as x, isNull as S, json as C, listRetentions as ee, lt as te, lte as ne, neq as w, or as re, queryFor as ie, raiseChangeListenerCeiling as ae, registerRetention as oe, requireTable as se, retentionTtlMsFromEnv as ce, serializeArraysForWrite as le, sweepRetention as ue, table as T, text as E, timestamp as D, walkLeaves as de } from "@voltro/database";
+import { createCipheriv as fe, createDecipheriv as pe, createHash as me, randomBytes as he, randomUUID as ge, scryptSync as _e } from "node:crypto";
+import { EventEmitter as ve } from "node:events";
+import { ADMIN_SCOPE as ye, ConnectionHandshakeFailed as O, ConnectionInfo as be, ConnectionKindMismatch as xe, ConnectionNotDeclared as Se, ConnectionSubjectRequired as Ce, SubjectService as we, UndoConflict as Te, UndoForbidden as Ee, UndoNotFound as De, WorkflowRunHandleSchema as Oe, checkGuardsEffect as ke, diffRows as Ae, effectiveScopes as je, hasEffectiveScope as Me, isIdKeyed as Ne, publishServerError as Pe, requireScope as Fe, setPolicyGuardResolver as Ie, systemSubject as Le, tsMs as Re } from "@voltro/protocol";
+import { createLogger as k } from "@voltro/logger";
+import { Cause as A, Clock as ze, Context as Be, Cron as j, Deferred as Ve, Duration as He, Effect as M, Either as Ue, Exit as We, Layer as N, ManagedRuntime as Ge, Metric as P, MetricBoundaries as Ke, MetricState as qe, Option as F, Ref as I, Schedule as Je, Schema as L, Stream as R, Tracer as Ye } from "effect";
+import * as Xe from "node:http";
+import { createServer as Ze } from "node:http";
+import { HttpClient as Qe, HttpClientRequest as $e, HttpLayerRouter as z, HttpServer as et, HttpServerRequest as tt, HttpServerResponse as B } from "@effect/platform";
+import { NodeContext as nt, NodeHttpServer as rt, NodeRuntime as it } from "@effect/platform-node";
+import { Rpc as at, RpcSerialization as ot, RpcServer as st } from "@effect/rpc";
+import { defineRestRoute as ct, dispatchSharedPath as lt, requireScope as ut } from "@voltro/protocol/rest";
+import { AsyncLocalStorage as dt } from "node:async_hooks";
+import { SpanKind as ft, SpanStatusCode as pt } from "@opentelemetry/api";
+import { Kv as mt, KvError as ht, KvStore as gt, layerConnections as _t, layerMemory as vt, layerRedis as yt } from "@voltro/kv";
+import { apiKeyStrategy as bt } from "@voltro/protocol/apikey";
+import { getCurrentWorkflowExecutionId as xt, inspectWorkflow as St } from "@voltro/workflow";
+import { ArrayFormatter as Ct } from "effect/ParseResult";
+import { spawn as wt } from "node:child_process";
 //#region src/matcher.ts
-var wt = class {
+var Tt = class {
 	byTable = /* @__PURE__ */ new Map();
 	register(e) {
 		let t = this.byTable.get(e.table);
@@ -59,9 +59,9 @@ var wt = class {
 		});
 		return { perTable: e };
 	}
-}, Tt = (e) => {
+}, Et = (e) => {
 	let t = [];
-	for (let n of le(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
+	for (let n of de(e)) n.conjunctive && n.path === void 0 && (n.op === "eq" && t.push({
 		column: n.column,
 		values: [n.value]
 	}), n.op === "in" && t.push({
@@ -69,18 +69,18 @@ var wt = class {
 		values: n.value
 	}));
 	return t;
-}, Et = (e) => {
+}, Dt = (e) => {
 	let t = [];
-	for (let n of le(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
+	for (let n of de(e)) n.conjunctive && n.path === void 0 && (n.op === "gt" || n.op === "gte" || n.op === "lt" || n.op === "lte") && t.push({
 		column: n.column,
 		op: n.op,
 		threshold: n.value
 	});
 	return t;
-}, Dt = (e, t) => {
-	for (let n of le(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
-	return null;
 }, Ot = (e, t) => {
+	for (let n of de(e)) if (n.conjunctive && n.path === void 0 && n.op === "eq" && n.column === t) return n.value;
+	return null;
+}, kt = (e, t) => {
 	let n = [];
 	for (let r of e) {
 		let e = t(r);
@@ -88,8 +88,8 @@ var wt = class {
 		n.push(`${typeof e}:${String(e)}`);
 	}
 	return n.join("|");
-}, kt = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, At = (e, t, n) => {
-	let r = kt(e, n);
+}, At = (e, t) => e === null || t === null ? null : e === t ? 0 : typeof e == typeof t ? e > t ? 1 : -1 : null, jt = (e, t, n) => {
+	let r = At(e, n);
 	if (r === null) return !1;
 	switch (t) {
 		case "gt": return r > 0;
@@ -97,7 +97,7 @@ var wt = class {
 		case "lt": return r < 0;
 		case "lte": return r <= 0;
 	}
-}, jt = class {
+}, Mt = class {
 	columnByTable = /* @__PURE__ */ new Map();
 	rangeByTable = /* @__PURE__ */ new Map();
 	tupleByTable = /* @__PURE__ */ new Map();
@@ -105,9 +105,9 @@ var wt = class {
 	subscriptions = /* @__PURE__ */ new Map();
 	register(e) {
 		this.columnByTable.has(e.table) || this.columnByTable.set(e.table, /* @__PURE__ */ new Map()), this.rangeByTable.has(e.table) || this.rangeByTable.set(e.table, /* @__PURE__ */ new Map()), this.tupleByTable.has(e.table) || this.tupleByTable.set(e.table, /* @__PURE__ */ new Map()), this.unindexedByTable.has(e.table) || this.unindexedByTable.set(e.table, /* @__PURE__ */ new Set());
-		let t = Tt(e.predicate), n = Et(e.predicate);
+		let t = Et(e.predicate), n = Dt(e.predicate);
 		if (e.usingIndex !== void 0) {
-			let r = e.usingIndex, i = Ot(r.fields, (t) => Dt(e.predicate, t));
+			let r = e.usingIndex, i = kt(r.fields, (t) => Ot(e.predicate, t));
 			if (i !== null) {
 				let a = `${r.name}|${i}`, o = this.tupleByTable.get(e.table), s = o.get(a);
 				s || (s = /* @__PURE__ */ new Set(), o.set(a, s)), s.add(e.id), this.subscriptions.set(e.id, {
@@ -252,7 +252,7 @@ var wt = class {
 				}
 			}
 			for (let [e, a] of i) {
-				let i = Ot(a, (e) => t[e]);
+				let i = kt(a, (e) => t[e]);
 				if (i === null) continue;
 				let o = r.get(`${e}|${i}`);
 				if (o) for (let e of o) n.add(e);
@@ -266,7 +266,7 @@ var wt = class {
 		let a = this.rangeByTable.get(e);
 		if (a) for (let [e, r] of a) {
 			let i = t[e];
-			if (i !== null) for (let [e, t] of r) for (let r of t) At(i, e, r.threshold) && n.add(r.subId);
+			if (i !== null) for (let [e, t] of r) for (let r of t) jt(i, e, r.threshold) && n.add(r.subId);
 		}
 		return n;
 	}
@@ -275,7 +275,7 @@ var wt = class {
 			let e = t[n.column];
 			if (n.kind === "eq") {
 				if (e !== n.value) return !1;
-			} else if (!At(e, n.op, n.threshold)) return !1;
+			} else if (!jt(e, n.op, n.threshold)) return !1;
 		}
 		return !0;
 	}
@@ -297,23 +297,23 @@ var wt = class {
 		}
 		return i;
 	}
-}, Mt = (e) => {
+}, Nt = (e) => {
 	if (e == null) return null;
-	if (Array.isArray(e)) return e.map(Mt);
+	if (Array.isArray(e)) return e.map(Nt);
 	if (typeof e == "object") {
 		let t = e, n = Object.keys(t).sort(), r = {};
-		for (let e of n) r[e] = Mt(t[e]);
+		for (let e of n) r[e] = Nt(t[e]);
 		return r;
 	}
 	return e;
-}, Nt = (e, t, n) => {
-	let r = Mt({
+}, Pt = (e, t, n) => {
+	let r = Nt({
 		table: e,
 		predicate: t,
 		indexHint: n ?? null
 	});
-	return fe("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
-}, Pt = class {
+	return me("sha256").update(JSON.stringify(r)).digest("hex").slice(0, 16);
+}, Ft = class {
 	matcher;
 	byFingerprint = /* @__PURE__ */ new Map();
 	byClient = /* @__PURE__ */ new Map();
@@ -332,7 +332,7 @@ var wt = class {
 		} catch {}
 	}
 	subscribe(e, t, n, r) {
-		let i = Nt(t, n, r?.name), a = this.byFingerprint.get(i);
+		let i = Pt(t, n, r?.name), a = this.byFingerprint.get(i);
 		return a ? (a.subscribers.add(e), this.byClient.set(e, i), this.notifyChange(), {
 			fingerprint: i,
 			deduplicated: !0
@@ -390,7 +390,7 @@ var wt = class {
 		});
 		return e;
 	}
-}, Ft = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
+}, It = (e, t) => t.length === 0 ? e : [...e].sort((e, n) => {
 	for (let r of t) {
 		let t = e[r.column], i = n[r.column];
 		if (t === i) continue;
@@ -400,7 +400,7 @@ var wt = class {
 		return r.direction === "asc" ? a : -a;
 	}
 	return 0;
-}), It = (e, t, n) => {
+}), Lt = (e, t, n) => {
 	let r = t.split("."), i = r[0], a = r.slice(1), o = (e) => typeof e == "object" && !!e && !Array.isArray(e), s = e[i], c;
 	if (a.length === 0) c = o(s) && o(n) ? {
 		...s,
@@ -418,11 +418,11 @@ var wt = class {
 		...e,
 		[i]: c
 	};
-}, Lt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
+}, Rt = (e, t, n) => !e || d(e, t, n), V = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	if (!e) return n;
 	for (let r of a(e)) {
-		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = Rt(r.descriptor, e, t, i);
+		let e = t.get(r.descriptor.table) ?? /* @__PURE__ */ new Map(), i = V(r.descriptor.predicate, t), a = zt(r.descriptor, e, t, i);
 		if (r.kind === "exists") n.set(r.descriptor, a.length);
 		else {
 			let e = r.descriptor.projection, t = /* @__PURE__ */ new Set();
@@ -437,15 +437,15 @@ var wt = class {
 		}
 	}
 	return n;
-}, Rt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
-	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => Lt(e.predicate, t, i));
+}, zt = (e, t, n = /* @__PURE__ */ new Map(), r = null) => {
+	let i = r ?? V(e.predicate, n), a = [...t.values()].filter((t) => Rt(e.predicate, t, i));
 	if (e.aggregations && e.aggregations.length > 0) {
-		let t = zt(a, e.aggregations, e.groupBy);
+		let t = Bt(a, e.aggregations, e.groupBy);
 		if (!e.having) return t;
 		let r = V(e.having, n);
-		return t.filter((t) => Lt(e.having, t, r));
+		return t.filter((t) => Rt(e.having, t, r));
 	}
-	let o = Ft(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
+	let o = It(a, e.order), s = e.skip ? o.slice(e.skip) : o, c = e.take === void 0 ? s : s.slice(0, e.take);
 	if (!e.projection) return c;
 	let l = e.projection;
 	return c.map((e) => {
@@ -453,7 +453,7 @@ var wt = class {
 		for (let n of l) t[n] = e[n];
 		return t;
 	});
-}, zt = (e, t, n) => {
+}, Bt = (e, t, n) => {
 	let r = /* @__PURE__ */ new Map();
 	for (let t of e) {
 		let e = {};
@@ -471,11 +471,11 @@ var wt = class {
 	let i = [];
 	for (let e of r.values()) {
 		let n = { ...e.keyVals };
-		for (let r of t) n[r.alias] = Bt(r, e.rows);
+		for (let r of t) n[r.alias] = Vt(r, e.rows);
 		i.push(n);
 	}
 	return i;
-}, Bt = (e, t) => {
+}, Vt = (e, t) => {
 	switch (e.op) {
 		case "count": return e.column === void 0 ? t.length : t.reduce((t, n) => t + +(n[e.column] !== null && n[e.column] !== void 0), 0);
 		case "count-distinct": {
@@ -519,7 +519,7 @@ var wt = class {
 		}
 		default: throw Error(`computeAggregates: unknown op '${e.op}'`);
 	}
-}, Vt = "\0", Ht = (e, t) => e === null ? t : `${e}${Vt}${t}`, Ut = class e {
+}, Ht = "\0", Ut = (e, t) => e === null ? t : `${e}${Ht}${t}`, Wt = class e {
 	#e;
 	#t;
 	#n;
@@ -529,13 +529,13 @@ var wt = class {
 		return r.#e = t.tables, r.#t = t.emitter, r.#n = t.numericCounters, r;
 	}
 	constructor(e, t = null) {
-		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ge(), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
+		if (this.#r = t, this.#e = /* @__PURE__ */ new Map(), this.#t = new ve(), ae(this.#t), this.#n = /* @__PURE__ */ new Map(), e) for (let [n, r] of Object.entries(e)) {
 			let e = /* @__PURE__ */ new Map();
 			for (let t of r) {
 				let n = t.id;
 				n && e.set(n, t);
 			}
-			this.#e.set(Ht(t, n), e);
+			this.#e.set(Ut(t, n), e);
 		}
 	}
 	withNamespace(t) {
@@ -546,11 +546,11 @@ var wt = class {
 		}, t);
 	}
 	#a(e) {
-		return Ht(this.#r, e);
+		return Ut(this.#r, e);
 	}
 	#o() {
-		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Vt}`;
-		for (let [n, r] of this.#e) t === null ? n.includes(Vt) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
+		let e = /* @__PURE__ */ new Map(), t = this.#r === null ? null : `${this.#r}${Ht}`;
+		for (let [n, r] of this.#e) t === null ? n.includes(Ht) || e.set(n, r) : n.startsWith(t) && e.set(n.slice(t.length), r);
 		return e;
 	}
 	#s(e) {
@@ -558,8 +558,8 @@ var wt = class {
 		return n || (n = /* @__PURE__ */ new Map(), this.#e.set(t, n)), n;
 	}
 	async query(e) {
-		let t = Rt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
-		return _(e) ? n(t, e.eager, ae(e.table), (e) => this.query(e)) : t;
+		let t = zt(e, this.#e.get(this.#a(e.table)) ?? /* @__PURE__ */ new Map(), this.#o());
+		return _(e) ? n(t, e.eager, se(e.table), (e) => this.query(e)) : t;
 	}
 	async insert(e, t) {
 		let n = t;
@@ -588,7 +588,7 @@ var wt = class {
 		if (!i) return null;
 		let a = i.get(t);
 		if (!a) return null;
-		let o = It(a, n, r);
+		let o = Lt(a, n, r);
 		return i.set(t, o), this.#t.emit("change", {
 			table: e,
 			op: "update",
@@ -688,7 +688,7 @@ var wt = class {
 		}
 	}
 	async transactional(e) {
-		let t = new Wt(this.#u());
+		let t = new Gt(this.#u());
 		try {
 			let n = await e(t);
 			return t.commit(), n;
@@ -724,7 +724,7 @@ var wt = class {
 			allocateNumericId: (e) => this.#c(e)
 		};
 	}
-}, Wt = class {
+}, Gt = class {
 	parent;
 	overlay = /* @__PURE__ */ new Map();
 	tombstones = /* @__PURE__ */ new Map();
@@ -754,8 +754,8 @@ var wt = class {
 		return t || (t = /* @__PURE__ */ new Map(), this.overlay.set(e, t)), t;
 	}
 	async query(e) {
-		let t = this.buildTablesView(e), r = Rt(e, this.materialise(e.table), t);
-		return _(e) ? n(r, e.eager, ae(e.table), (e) => this.query(e)) : r;
+		let t = this.buildTablesView(e), r = zt(e, this.materialise(e.table), t);
+		return _(e) ? n(r, e.eager, se(e.table), (e) => this.query(e)) : r;
 	}
 	async insert(e, t) {
 		let n = t;
@@ -793,7 +793,7 @@ var wt = class {
 	async patchJson(e, t, n, r) {
 		let i = this.materialise(e).get(t);
 		if (!i) return null;
-		let a = It(i, n, r);
+		let a = Lt(i, n, r);
 		return this.getOrCreateOverlay(e).set(t, a), this.events.push({
 			table: e,
 			op: "update",
@@ -894,7 +894,7 @@ var wt = class {
 	discard() {
 		this.settled || (this.settled = !0, this.overlay.clear(), this.tombstones.clear(), this.events.length = 0);
 	}
-}, Gt = (e) => {
+}, Kt = (e) => {
 	let t = {}, n = [], r = e;
 	for (let e = 0; e < 8 && typeof r == "object" && r; e++) {
 		let e = r;
@@ -905,23 +905,23 @@ var wt = class {
 		(o || s) && n.push(`${o || "Error"}${s ? `: ${s.slice(0, 200)}` : ""}`), r = e.cause;
 	}
 	return n.length > 0 && (t.dbCauseChain = n.join(" ← "), t.dbMessage === void 0 && (t.dbMessage = n[n.length - 1])), t;
-}, Kt = (e) => {
+}, qt = (e) => {
 	let t = e.dbCode;
 	return t === "23503" || e.dbErrno === 1452 || t === 547 || t === "SQLITE_CONSTRAINT_FOREIGNKEY";
-}, qt = (e) => ({
-	has: (t) => Ae(e, t),
-	hasAny: (t) => t.some((t) => Ae(e, t)),
-	require: (t) => Ne(e, t),
+}, Jt = (e) => ({
+	has: (t) => Me(e, t),
+	hasAny: (t) => t.some((t) => Me(e, t)),
+	require: (t) => Fe(e, t),
 	get scopes() {
-		return ke(e);
+		return je(e);
 	}
-}), Jt = (e) => {
+}), Yt = (e) => {
 	let t = /* @__PURE__ */ new Set();
-	return Yt(e, t), t;
-}, Yt = (e, t) => {
-	if (t.add(e.table), e.eager !== void 0 && Xt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Yt(n, t);
-	if (e.ctes !== void 0) for (let n of e.ctes) Yt(n.descriptor, t);
-}, Xt = (e, t, n) => {
+	return Xt(e, t), t;
+}, Xt = (e, t) => {
+	if (t.add(e.table), e.eager !== void 0 && Zt(e.table, e.eager, t), e.setOp !== void 0) for (let n of e.setOp.queries) Xt(n, t);
+	if (e.ctes !== void 0) for (let n of e.ctes) Xt(n.descriptor, t);
+}, Zt = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [e, i] of Object.entries(t)) {
 		let t = r[e];
@@ -929,24 +929,24 @@ var wt = class {
 		let a = i === !0 ? {} : i;
 		if (t.kind === "manyToMany") {
 			let e = t.through().tableName, r = t.target().tableName;
-			n.add(e), n.add(r), a.with !== void 0 && Xt(r, a.with, n);
+			n.add(e), n.add(r), a.with !== void 0 && Zt(r, a.with, n);
 		} else {
 			let e = t.target().tableName;
-			n.add(e), a.with !== void 0 && Xt(e, a.with, n);
+			n.add(e), a.with !== void 0 && Zt(e, a.with, n);
 		}
 	}
-}, Zt = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), Qt = /* @__PURE__ */ new Set(["*"]), $t = (e, t) => {
+}, Qt = (e) => e.setOp !== void 0 || e.ctes !== void 0 && e.ctes.length > 0 || e.aggregations !== void 0 && e.aggregations.some((e) => e.op.startsWith("window-")), $t = /* @__PURE__ */ new Set(["*"]), en = (e, t) => {
 	if (e !== void 0) {
 		if ("not" in e) {
-			$t(e.not, t);
+			en(e.not, t);
 			return;
 		}
 		if ("and" in e) {
-			for (let n of e.and) $t(n, t);
+			for (let n of e.and) en(n, t);
 			return;
 		}
 		if ("or" in e) {
-			for (let n of e.or) $t(n, t);
+			for (let n of e.or) en(n, t);
 			return;
 		}
 		if (e.op === "subquery-in" || e.op === "subquery-not-in") {
@@ -959,7 +959,7 @@ var wt = class {
 	let r = e.get(t);
 	r === void 0 && (r = /* @__PURE__ */ new Set(), e.set(t, r));
 	for (let e of n) r.add(e);
-}, en = (e, t, n) => {
+}, tn = (e, t, n) => {
 	let r = p(e);
 	if (r !== void 0) for (let [i, a] of Object.entries(t)) {
 		let t = r[i];
@@ -967,65 +967,65 @@ var wt = class {
 		let o = a === !0 ? {} : a;
 		if (t.kind === "manyToMany") {
 			let r = t.through(), i = t.target();
-			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), tn(i.tableName, o, n), o.with !== void 0 && en(i.tableName, o.with, n);
+			H(n, r.tableName, [t.sourceKey, t.targetKey]), H(n, e, ["id"]), H(n, i.tableName, ["id"]), nn(i.tableName, o, n), o.with !== void 0 && tn(i.tableName, o.with, n);
 			continue;
 		}
 		let s = t.target();
-		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), tn(s.tableName, o, n), o.with !== void 0 && en(s.tableName, o.with, n);
+		t.foreignKey !== void 0 && H(n, s.tableName, [t.foreignKey]), t.sourceKey === void 0 ? H(n, e, ["id"]) : H(n, e, [t.sourceKey]), H(n, s.tableName, ["id"]), nn(s.tableName, o, n), o.with !== void 0 && tn(s.tableName, o.with, n);
 	}
-}, tn = (e, t, n) => {
+}, nn = (e, t, n) => {
 	if (t.where !== void 0) {
 		let r = /* @__PURE__ */ new Set();
-		$t(t.where, r), H(n, e, r);
+		en(t.where, r), H(n, e, r);
 	}
 	t.orderBy !== void 0 && H(n, e, t.orderBy.map((e) => e.column));
 	let r = m(e);
 	r === void 0 ? H(n, e, ["*"]) : H(n, e, Object.keys(r.fields));
-}, nn = (e) => {
+}, rn = (e) => {
 	let t = /* @__PURE__ */ new Map();
-	if (Zt(e)) {
-		for (let n of Jt(e)) H(t, n, ["*"]);
+	if (Qt(e)) {
+		for (let n of Yt(e)) H(t, n, ["*"]);
 		return t;
 	}
 	let n = /* @__PURE__ */ new Set();
 	if (e.projection !== void 0) for (let t of e.projection) n.add(t);
 	else n.add("*");
-	$t(e.predicate, n);
+	en(e.predicate, n);
 	for (let t of e.order) n.add(t.column);
-	return H(t, e.table, n), e.eager !== void 0 && en(e.table, e.eager, t), t;
-}, rn = (e) => {
-	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return Qt;
+	return H(t, e.table, n), e.eager !== void 0 && tn(e.table, e.eager, t), t;
+}, an = (e) => {
+	if (e.op === "insert" || e.op === "delete" || e.old === null || e.new === null) return $t;
 	let t = /* @__PURE__ */ new Set(), n = e.old, r = e.new, i = /* @__PURE__ */ new Set([...Object.keys(n), ...Object.keys(r)]);
 	for (let e of i) Object.is(n[e], r[e]) || t.add(e);
 	return t;
-}, an = (e, t) => {
+}, on = (e, t) => {
 	let n = t.get(e.table);
 	if (n === void 0) return !1;
 	if (n.has("*")) return !0;
-	let r = rn(e);
+	let r = an(e);
 	if (r.has("*")) return !0;
 	for (let e of r) if (n.has(e)) return !0;
 	return !1;
-}, on = Ge.exponential({
+}, sn = Ke.exponential({
 	start: .001,
 	factor: 2,
 	count: 16
-}), sn = P.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), cn = P.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), ln = P.histogram("voltro_rpc_duration_seconds", on, "RPC handler duration in seconds."), un = P.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), dn = P.histogram("voltro_http_duration_seconds", on, "HTTP route duration in seconds."), fn = P.histogram("voltro_plugin_hook_duration_seconds", on, "Plugin interceptor duration in seconds."), pn = P.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), mn = P.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), hn = P.histogram("voltro_subscription_delivery_seconds", on, "Subscription delivery produce→push latency in seconds."), gn = P.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), _n = (e) => {
-	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? M.zipRight(P.increment(sn).pipe(M.tagMetrics("tag", e.tag), M.tagMetrics("status", e.status)), M.zipRight(P.update(ln, t).pipe(M.tagMetrics("tag", e.tag)), e.status === "error" ? P.increment(cn).pipe(M.tagMetrics("tag", e.tag)) : M.void)) : e.kind === "request" ? M.zipRight(P.increment(un).pipe(M.tagMetrics("route", e.tag), M.tagMetrics("status", e.status)), P.update(dn, t).pipe(M.tagMetrics("route", e.tag))) : M.zipRight(P.update(fn, t).pipe(M.tagMetrics("hook", e.tag)), e.status === "error" ? P.increment(pn).pipe(M.tagMetrics("hook", e.tag)) : M.void);
+}), cn = P.counter("voltro_rpc_requests_total", { description: "Total RPC handler invocations." }), ln = P.counter("voltro_rpc_errors_total", { description: "RPC handler invocations that errored." }), un = P.histogram("voltro_rpc_duration_seconds", sn, "RPC handler duration in seconds."), dn = P.counter("voltro_http_requests_total", { description: "Total HTTP route invocations." }), fn = P.histogram("voltro_http_duration_seconds", sn, "HTTP route duration in seconds."), pn = P.histogram("voltro_plugin_hook_duration_seconds", sn, "Plugin interceptor duration in seconds."), mn = P.counter("voltro_plugin_hook_errors_total", { description: "Plugin interceptor invocations that errored." }), hn = P.counter("voltro_subscription_deliveries_total", { description: "Total subscription deliveries (snapshot + delta)." }), gn = P.histogram("voltro_subscription_delivery_seconds", sn, "Subscription delivery produce→push latency in seconds."), _n = P.gauge("voltro_subscriptions_active", { description: "Currently-open subscriptions." }), vn = (e) => {
+	let t = e.durationMs / 1e3, n = e.kind === "rpc" ? M.zipRight(P.increment(cn).pipe(M.tagMetrics("tag", e.tag), M.tagMetrics("status", e.status)), M.zipRight(P.update(un, t).pipe(M.tagMetrics("tag", e.tag)), e.status === "error" ? P.increment(ln).pipe(M.tagMetrics("tag", e.tag)) : M.void)) : e.kind === "request" ? M.zipRight(P.increment(dn).pipe(M.tagMetrics("route", e.tag), M.tagMetrics("status", e.status)), P.update(fn, t).pipe(M.tagMetrics("route", e.tag))) : M.zipRight(P.update(pn, t).pipe(M.tagMetrics("hook", e.tag)), e.status === "error" ? P.increment(mn).pipe(M.tagMetrics("hook", e.tag)) : M.void);
 	M.runSync(n);
-}, vn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, yn = (e) => {
-	let t = vn(e.label);
-	M.runSync(M.zipRight(P.increment(mn).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind)), P.update(hn, e.durationMs / 1e3).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind))));
-}, bn = /* @__PURE__ */ new Map(), U = (e, t) => {
-	let n = vn(e), r = Math.max(0, (bn.get(n) ?? 0) + t);
-	r === 0 ? bn.delete(n) : bn.set(n, r), M.runSync(P.set(gn, r).pipe(M.tagMetrics("tag", n)));
-}, xn = (e, t) => P.counter(e, t === void 0 ? {} : { description: t }), Sn = (e, t) => P.gauge(e, t === void 0 ? {} : { description: t }), Cn = (e, t = on, n) => P.histogram(e, t, n), wn = (e) => {
+}, yn = (e) => e.startsWith("subscription.") ? e.slice(13) : e, bn = (e) => {
+	let t = yn(e.label);
+	M.runSync(M.zipRight(P.increment(hn).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind)), P.update(gn, e.durationMs / 1e3).pipe(M.tagMetrics("tag", t), M.tagMetrics("kind", e.kind))));
+}, xn = /* @__PURE__ */ new Map(), U = (e, t) => {
+	let n = yn(e), r = Math.max(0, (xn.get(n) ?? 0) + t);
+	r === 0 ? xn.delete(n) : xn.set(n, r), M.runSync(P.set(_n, r).pipe(M.tagMetrics("tag", n)));
+}, Sn = (e, t) => P.counter(e, t === void 0 ? {} : { description: t }), Cn = (e, t) => P.gauge(e, t === void 0 ? {} : { description: t }), wn = (e, t = sn, n) => P.histogram(e, t, n), Tn = (e) => {
 	let t = {};
 	for (let n of e) t[n.key] = n.value;
 	return t;
-}, Tn = P.snapshot.pipe(M.map((e) => e.map((e) => {
-	let t = e.metricKey.name, n = wn(e.metricKey.tags), r = F.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
-	if (Ke.isHistogramState(a)) return {
+}, En = P.snapshot.pipe(M.map((e) => e.map((e) => {
+	let t = e.metricKey.name, n = Tn(e.metricKey.tags), r = F.getOrUndefined(e.metricKey.description), i = r === void 0 ? {} : { description: r }, a = e.metricState;
+	if (qe.isHistogramState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1037,14 +1037,14 @@ var wt = class {
 		sum: a.sum,
 		count: a.count
 	};
-	if (Ke.isGaugeState(a)) return {
+	if (qe.isGaugeState(a)) return {
 		name: t,
 		labels: n,
 		...i,
 		type: "gauge",
 		value: Number(a.value)
 	};
-	if (Ke.isSummaryState(a)) return {
+	if (qe.isSummaryState(a)) return {
 		name: t,
 		labels: n,
 		...i,
@@ -1056,7 +1056,7 @@ var wt = class {
 			value: t.value
 		}] : [])
 	};
-	if (Ke.isFrequencyState(a)) {
+	if (qe.isFrequencyState(a)) {
 		let e = {};
 		for (let [t, n] of a.occurrences) e[t] = n;
 		return {
@@ -1074,25 +1074,25 @@ var wt = class {
 		type: "counter",
 		value: Number(a.count)
 	};
-}))), En = () => M.runSync(Tn), Dn = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, On = qe.exponential("20 millis").pipe(qe.intersect(qe.recurs(2))), kn, An = (e) => {
-	kn = e;
-}, jn = () => kn, Mn = () => void 0, Nn = (e, t) => Pn(kn, e, t), Pn = (e, t, n) => {
-	if (e === void 0 || t.type === "system") return M.succeed(Mn);
-	let r = e.retry ?? On, i = e.load(t);
-	return (r === !1 ? i : M.retry(i, r)).pipe(M.map((t) => (n) => e.predicate(t, n)), M.catchAll((t) => M.suspend(() => (n?.(t), e.onLoadError === "deny" ? M.succeed(Fn) : M.fail(new Dn({ cause: String(t) }))))));
-}, Fn = () => ({
+}))), Dn = () => M.runSync(En), On = class extends L.TaggedError()("RowFilterUnavailable", { cause: L.String }) {}, kn = Je.exponential("20 millis").pipe(Je.intersect(Je.recurs(2))), An, jn = (e) => {
+	An = e;
+}, Mn = () => An, Nn = () => void 0, Pn = (e, t) => Fn(An, e, t), Fn = (e, t, n) => {
+	if (e === void 0 || t.type === "system") return M.succeed(Nn);
+	let r = e.retry ?? kn, i = e.load(t);
+	return (r === !1 ? i : M.retry(i, r)).pipe(M.map((t) => (n) => e.predicate(t, n)), M.catchAll((t) => M.suspend(() => (n?.(t), e.onLoadError === "deny" ? M.succeed(In) : M.fail(new On({ cause: String(t) }))))));
+}, In = () => ({
 	column: "id",
 	op: "isNull"
-}), In = (e, n, r) => {
+}), Ln = (e, n, r) => {
 	let i = e(n);
 	return i === void 0 ? r : r ? t(r, i) : i;
-}, Ln = (e, t) => {
-	let n = In(e, t.table, t.predicate);
+}, Rn = (e, t) => {
+	let n = Ln(e, t.table, t.predicate);
 	return n === t.predicate ? t : {
 		...t,
 		predicate: n
 	};
-}, W = A({ scope: "voltro:dispatcher" }), Rn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", zn = class {
+}, W = k({ scope: "voltro:dispatcher" }), zn = (e) => Array.isArray(e) ? e.length : e == null ? 0 : 1, Bn = (e) => typeof e == "object" && !!e && e._tag === "ScopeError", Vn = class {
 	deps;
 	subscriptionRegistry;
 	matcher;
@@ -1102,12 +1102,12 @@ var wt = class {
 	computedSubs = /* @__PURE__ */ new Map();
 	computedByTable = /* @__PURE__ */ new Map();
 	constructor(e) {
-		this.deps = e, this.matcher = new jt(), this.subscriptionRegistry = new Pt(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
+		this.deps = e, this.matcher = new Mt(), this.subscriptionRegistry = new Ft(this.matcher), this.unsubscribeChange = e.store.onChange((e) => {
 			this.handleChange(e);
 		});
 	}
 	async subscribe(e, t, n, r, i, a, o, s) {
-		let c = `sub_${me()}`, l = i ?? `subscription.${e.table}`, u = Jt(e), d = nn(e);
+		let c = `sub_${ge()}`, l = i ?? `subscription.${e.table}`, u = Yt(e), d = rn(e);
 		e.predicate !== void 0 && this.subscriptionRegistry.subscribe(c, e.table, e.predicate, r);
 		for (let e of u) {
 			let t = this.dependentByTable.get(e);
@@ -1121,7 +1121,7 @@ var wt = class {
 			}
 		}, h, g;
 		try {
-			h = s === void 0 ? e : Ln(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
+			h = s === void 0 ? e : Rn(await s(), e), g = this.deps.cache !== void 0 && a !== void 0 ? await this.deps.cache.wrap(a, p, () => this.deps.store.query(h)) : await this.deps.store.query(h);
 		} catch (e) {
 			throw m(), e;
 		}
@@ -1188,7 +1188,7 @@ var wt = class {
 		});
 	}
 	async subscribeComputed(e, t, n, r) {
-		let i = `csub_${me()}`, a = e.dependentTables, o = {
+		let i = `csub_${ge()}`, a = e.dependentTables, o = {
 			id: i,
 			recompute: e.recompute,
 			tenantId: e.tenantId,
@@ -1196,7 +1196,7 @@ var wt = class {
 			context: n,
 			label: r ?? "subscription.computed",
 			tables: a,
-			lastJson: Bn(e.value),
+			lastJson: Hn(e.value),
 			revision: 0
 		};
 		this.computedSubs.set(i, o), U(o.label, 1);
@@ -1217,7 +1217,7 @@ var wt = class {
 			startMs: s,
 			endMs: Date.now(),
 			durationMs: Date.now() - s,
-			rowCount: 1
+			rowCount: zn(e.value)
 		}), () => {
 			this.computedSubs.delete(i), U(o.label, -1);
 			for (let e of a) {
@@ -1229,7 +1229,7 @@ var wt = class {
 	async recomputeComputed(e) {
 		let t = Date.now();
 		try {
-			let n = await e.recompute(), r = Bn(n);
+			let n = await e.recompute(), r = Hn(n);
 			if (r === e.lastJson) return;
 			e.lastJson = r, e.revision += 1;
 			let i = Date.now();
@@ -1245,10 +1245,10 @@ var wt = class {
 				startMs: t,
 				endMs: i,
 				durationMs: i - t,
-				rowCount: 1
+				rowCount: zn(n)
 			});
 		} catch (t) {
-			if (Rn(t)) {
+			if (Bn(t)) {
 				this.revokeComputed(e, t);
 				return;
 			}
@@ -1301,7 +1301,7 @@ var wt = class {
 				W.trace("missing subscription", { subscriberId: t });
 				continue;
 			}
-			if (!an(e, n.relevantFields)) {
+			if (!on(e, n.relevantFields)) {
 				o++;
 				continue;
 			}
@@ -1324,21 +1324,21 @@ var wt = class {
 						this.revokeSubscription(n, e, "row filter unavailable");
 						continue;
 					}
-					i = Ln(e, n.baseDescriptor);
+					i = Rn(e, n.baseDescriptor);
 				}
 				let o = await this.deps.store.query(i), s = n.lastDelivered;
-				if (Vn(o, s)) {
+				if (Un(o, s)) {
 					W.trace("suppressed no-op delta", {
 						subscriberId: t,
 						table: e.table
 					});
 					continue;
 				}
-				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), je(s) && je(o) ? n.emit({
+				n.lastDelivered = o, this.deps.cache !== void 0 && n.cacheBinding !== void 0 && this.deps.cache.put(n.cacheBinding, Array.from(n.dependentTables), o), Ne(s) && Ne(o) ? n.emit({
 					_tag: "delta",
 					revision: a,
 					emittedAt: a,
-					patch: Oe(s, o)
+					patch: Ae(s, o)
 				}) : n.emit({
 					_tag: "snapshot",
 					revision: a,
@@ -1370,44 +1370,44 @@ var wt = class {
 			skipped: o
 		});
 	}
-}, Bn = (e) => {
+}, Hn = (e) => {
 	try {
 		return JSON.stringify(e) ?? "null";
 	} catch {
 		return String(e);
 	}
-}, Vn = (e, t) => {
+}, Un = (e, t) => {
 	if (e === t) return !0;
 	if (e.length !== t.length) return !1;
 	for (let n = 0; n < e.length; n++) if (JSON.stringify(e[n]) !== JSON.stringify(t[n])) return !1;
 	return !0;
-}, Hn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Un = 1440 * 60 * 1e3, Wn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), Gn = /* @__PURE__ */ new Set(), Kn = (e, t) => {
+}, Wn = (e) => typeof e == "object" && !!e && e.__voltroComputed === !0, Gn = 1440 * 60 * 1e3, Kn = 3600 * 1e3, G = /* @__PURE__ */ new Map(), qn = /* @__PURE__ */ new Set(), Jn = (e, t) => {
 	G.set(e, {
 		subject: t,
 		touchedAt: Date.now()
 	});
-	for (let n of Gn) try {
+	for (let n of qn) try {
 		n(e, t);
 	} catch {}
-}, qn = (e) => {
+}, Yn = (e) => {
 	let t = G.get(e);
 	if (t) return t.touchedAt = Date.now(), t.subject;
-}, Jn = (e) => {
+}, Xn = (e) => {
 	G.delete(e);
-}, Yn = (e) => (Gn.add(e), () => {
-	Gn.delete(e);
-}), Xn = setInterval(() => {
-	let e = Date.now() - Un;
+}, Zn = (e) => (qn.add(e), () => {
+	qn.delete(e);
+}), Qn = setInterval(() => {
+	let e = Date.now() - Gn;
 	for (let [t, n] of G) n.touchedAt < e && G.delete(t);
-}, Wn);
-typeof Xn == "object" && Xn && "unref" in Xn && Xn.unref();
-var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
+}, Kn);
+typeof Qn == "object" && Qn && "unref" in Qn && Qn.unref();
+var K = /* @__PURE__ */ new Map(), $n = (e, t) => {
 	let n = K.get(e);
 	return n || (n = /* @__PURE__ */ new Set(), K.set(e, n)), n.add(t), () => {
 		let n = K.get(e);
 		n && (n.delete(t), n.size === 0 && K.delete(e));
 	};
-}, Qn = (e) => {
+}, er = (e) => {
 	let t = K.get(e);
 	if (t) {
 		for (let e of [...t]) try {
@@ -1415,15 +1415,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		} catch {}
 		K.delete(e);
 	}
-}, $n = (e) => K.get(e)?.size ?? 0, er = () => {
+}, tr = (e) => K.get(e)?.size ?? 0, nr = () => {
 	G.clear(), K.clear();
-}, tr = () => [...G.entries()].map(([e, t]) => ({
+}, rr = () => [...G.entries()].map(([e, t]) => ({
 	clientId: e,
 	subjectType: t.subject.type,
 	tenantId: t.subject.tenantId
-})), nr = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, rr = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, ir = (e) => {
+})), ir = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/, ar = (e) => `00-${e.traceId}-${e.spanId}-${e.sampled ? "01" : "00"}`, or = (e) => {
 	if (typeof e != "string") return null;
-	let t = nr.exec(e.trim().toLowerCase());
+	let t = ir.exec(e.trim().toLowerCase());
 	if (t === null) return null;
 	let [, n, r, i] = t;
 	return n === "0".repeat(32) || r === "0".repeat(16) ? null : {
@@ -1431,14 +1431,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		spanId: r,
 		sampled: (parseInt(i, 16) & 1) == 1
 	};
-}, ar = (e) => {
-	let t = ir(e);
-	if (t !== null) return Je.externalSpan({
+}, sr = (e) => {
+	let t = or(e);
+	if (t !== null) return Ye.externalSpan({
 		traceId: t.traceId,
 		spanId: t.spanId,
 		sampled: t.sampled
 	});
-}, or = new ut(), sr = (e, t) => or.run(e, t), cr = () => or.getStore(), lr = (e = {}) => {
+}, cr = new dt(), lr = (e, t) => cr.run(e, t), ur = () => cr.getStore(), dr = (e = {}) => {
 	let t = e.random ?? Math.random, n = /* @__PURE__ */ new Map(), r = (e) => n.get(e) ?? 0;
 	return {
 		pick(e) {
@@ -1463,7 +1463,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}));
 		}
 	};
-}, ur = (e = {}) => {
+}, fr = (e = {}) => {
 	let t = e.thresholdFailures ?? 3, n = e.windowMs ?? 1e4, r = e.blackoutMs ?? 6e4, i = e.now ?? Date.now, a = /* @__PURE__ */ new Map(), o = (e) => {
 		let t = a.get(e);
 		return t === void 0 && (t = {
@@ -1497,7 +1497,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}));
 		}
 	};
-}, dr = (e = {}) => {
+}, pr = (e = {}) => {
 	let t = e.now ?? Date.now, n = /* @__PURE__ */ new Map();
 	return {
 		get(e) {
@@ -1520,7 +1520,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return n.size;
 		}
 	};
-}, fr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, pr = (e) => {
+}, mr = (e, t) => e === null ? t === void 0 ? "anon:bg" : `anon:${t}` : `subject:${e}`, hr = (e) => {
 	let t = e.now ?? Date.now, n = e.keyPrefix ?? "voltro:ryw", r = e.channel ?? `${n}:bus`, i = e.onError ?? ((e, t) => {
 		process.stderr.write(`[voltro:ryw] redis ${t} failed: ${String(e)}\n`);
 	}), a = `${process.pid ?? 0}:${Math.random() * 1e9 | 0}:${t()}`, o = /* @__PURE__ */ new Map(), s = (e) => {
@@ -1579,7 +1579,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return o.size;
 		}
 	};
-}, mr = A({ scope: "voltro:replication" }), hr = new ut(), gr = (e, t) => hr.run(e, t), _r = () => hr.getStore(), vr = class {
+}, gr = k({ scope: "voltro:replication" }), _r = new dt(), vr = (e, t) => _r.run(e, t), yr = () => _r.getStore(), br = class {
 	primary;
 	replicas;
 	adapter;
@@ -1592,10 +1592,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	recordRouting;
 	now;
 	constructor(e) {
-		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? dr({ now: this.now }), this.selector = e.replicaSelector ?? lr(), this.health = e.replicaHealth ?? ur({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
+		this.primary = e.primary, this.replicas = e.replicas, this.adapter = e.replicationAdapter, this.policy = e.rywPolicy ?? "fallback", this.rywTtlMs = e.rywTtlMs ?? 3e4, this.rywMaxWaitMs = e.rywMaxWaitMs ?? 500, this.now = e.now ?? Date.now, this.rywStore = e.rywStore ?? pr({ now: this.now }), this.selector = e.replicaSelector ?? dr(), this.health = e.replicaHealth ?? fr({ now: this.now }), e.recordRouting !== void 0 && (this.recordRouting = e.recordRouting);
 	}
 	async query(e) {
-		let t = hr.getStore(), n = t?.subjectKey ?? "anon:bg";
+		let t = _r.getStore(), n = t?.subjectKey ?? "anon:bg";
 		if (t?.forcePrimary === !0) return this.emitRouting({
 			target: "primary",
 			replicaIndex: null,
@@ -1659,7 +1659,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				waitMs: 0
 			}), r;
 		} catch (r) {
-			return this.health.reportFailure(i, String(r)), mr.warn("replica query failed; falling back to primary", {
+			return this.health.reportFailure(i, String(r)), gr.warn("replica query failed; falling back to primary", {
 				idx: a,
 				err: r
 			}), this.emitRouting({
@@ -1728,7 +1728,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 					fallbackReason: "wait-timeout"
 				}), this.primary.query(e);
 			}
-			await yr(10);
+			await xr(10);
 		}
 	}
 	async insert(e, t) {
@@ -1768,8 +1768,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		return await this.stampPostWrite(), r;
 	}
 	async transactional(e) {
-		let t = await gr({
-			subjectKey: hr.getStore()?.subjectKey ?? "anon:bg",
+		let t = await vr({
+			subjectKey: _r.getStore()?.subjectKey ?? "anon:bg",
 			forcePrimary: !0
 		}, () => this.primary.transactional(e));
 		return await this.stampPostWrite(), t;
@@ -1785,7 +1785,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	async stampPostWrite() {
 		if (this.replicas.length === 0) return;
-		let e = hr.getStore()?.subjectKey ?? "anon:bg";
+		let e = _r.getStore()?.subjectKey ?? "anon:bg";
 		try {
 			let t = await this.adapter.capturePrimaryPosition(this.primary);
 			this.rywStore.set(e, {
@@ -1793,37 +1793,37 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				expiresAt: this.now() + this.rywTtlMs
 			});
 		} catch (e) {
-			mr.warn("failed to capture primary position; RYW skipped", { err: e });
+			gr.warn("failed to capture primary position; RYW skipped", { err: e });
 		}
 	}
 	emitRouting(e) {
 		this.recordRouting?.(e);
 	}
-}, yr = (e) => new Promise((t) => setTimeout(t, e)), br = (e, t, n) => ({
+}, xr = (e) => new Promise((t) => setTimeout(t, e)), Sr = (e, t, n) => ({
 	subject: e,
-	traceId: t?.traceId ?? me(),
+	traceId: t?.traceId ?? ge(),
 	...t?.spanId === void 0 ? {} : { spanId: t.spanId },
 	...n === void 0 ? {} : { clientId: n }
-}), xr = M.currentSpan.pipe(M.catchAll(() => M.succeed(void 0))), Sr = (e) => ({
+}), Cr = M.currentSpan.pipe(M.catchAll(() => M.succeed(void 0))), wr = (e) => ({
 	traceId: e.traceId,
 	...e.spanId === void 0 ? {} : { spanId: e.spanId }
-}), Cr = (e, t, n) => {
+}), Tr = (e, t, n) => {
 	e !== void 0 && (e.attribute("rpc.tag", t), e.attribute("subject.type", n.type), n.tenantId !== void 0 && n.tenantId !== null && e.attribute("tenant.id", n.tenantId));
-}, wr = (e) => {
-	if (jn() !== void 0) return async () => {
-		let t = await M.runPromise(M.either(Nn(e, (e) => {
+}, Er = (e) => {
+	if (Mn() !== void 0) return async () => {
+		let t = await M.runPromise(M.either(Pn(e, (e) => {
 			console.error("[voltro] row filter failed to load — subscription", e);
 		})));
 		if (t._tag === "Left") throw t.left;
 		return t.right;
 	};
-}, Tr = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => M.gen(function* () {
+}, Dr = (e, t, n, r, i, a, o, s) => R.asyncScoped((c) => M.gen(function* () {
 	let l = yield* M.tryPromise(() => t.subscribe(e, (e) => {
 		c.single(e);
 	}, n, r, i, a, o, s)).pipe(M.matchCause({
-		onFailure: (e) => (jr(`subscription.${i}`, n.traceId, e), {
+		onFailure: (e) => (Nr(`subscription.${i}`, n.traceId, e), {
 			ok: !1,
-			error: Fr(e)
+			error: Lr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1839,21 +1839,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	let u = l.unsubscribe;
 	if (yield* M.addFinalizer(() => M.sync(() => u())), n.clientId !== void 0) {
-		let e = Zn(n.clientId, () => {
+		let e = $n(n.clientId, () => {
 			c.end();
 		});
 		yield* M.addFinalizer(() => M.sync(() => e()));
 	}
-})), Er = (e, t, n, r) => R.asyncScoped((i) => M.gen(function* () {
+})), Or = (e, t, n, r) => R.asyncScoped((i) => M.gen(function* () {
 	let a = yield* M.tryPromise(() => t.subscribeComputed(e, (e) => {
 		i.single(e._tag === "snapshot" ? {
 			...e,
 			computed: !0
 		} : e);
 	}, n, r)).pipe(M.matchCause({
-		onFailure: (e) => (jr(`subscription.${r}`, n.traceId, e), {
+		onFailure: (e) => (Nr(`subscription.${r}`, n.traceId, e), {
 			ok: !1,
-			error: Fr(e)
+			error: Lr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1869,21 +1869,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	let o = a.unsubscribe;
 	if (yield* M.addFinalizer(() => M.sync(() => o())), n.clientId !== void 0) {
-		let e = Zn(n.clientId, () => {
+		let e = $n(n.clientId, () => {
 			i.end();
 		});
 		yield* M.addFinalizer(() => M.sync(() => e()));
 	}
-})), Dr = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(M.gen(function* () {
-	let s = yield* Se, c = yield* ve, l = yield* xr;
-	Cr(l, n, s);
-	let u = br(s, l, c.clientId), d = fr(s.id, c.clientId), f = gr({ subjectKey: d }, () => sr({
+})), kr = (e, t, n = "rpc.subscription", r, i, a, o) => R.unwrap(M.gen(function* () {
+	let s = yield* we, c = yield* be, l = yield* Cr;
+	Tr(l, n, s);
+	let u = Sr(s, l, c.clientId), d = mr(s.id, c.clientId), f = vr({ subjectKey: d }, () => lr({
 		traceId: u.traceId,
 		...u.spanId === void 0 ? {} : { spanId: u.spanId }
 	}, () => e(u))), p = M.isEffect(f) ? yield* f.pipe(M.matchCause({
-		onFailure: (e) => (jr(`subscription.${n}`, u.traceId, e), {
+		onFailure: (e) => (Nr(`subscription.${n}`, u.traceId, e), {
 			ok: !1,
-			error: Fr(e)
+			error: Lr(e)
 		}),
 		onSuccess: (e) => ({
 			ok: !0,
@@ -1898,39 +1898,39 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		error: p.error
 	});
 	let m = p.value;
-	if (Hn(m)) return Er(m, t, u, n);
+	if (Wn(m)) return Or(m, t, u, n);
 	let h = m, g = r?.(h);
-	return Tr(h, t, u, g, n, i === void 0 ? void 0 : {
+	return Dr(h, t, u, g, n, i === void 0 ? void 0 : {
 		key: i.scope === "subject" ? `${i.baseKey}:s:${d}` : `${i.baseKey}:global`,
 		ttlMs: i.ttlMs,
 		swrMs: i.swrMs
-	}, a?.(s), o?.(s) ?? wr(s));
-}).pipe(M.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Or = (e, t = "rpc.stream") => R.unwrap(M.gen(function* () {
-	let n = yield* Se, r = yield* ve, i = yield* xr;
-	Cr(i, t, n);
-	let a = br(n, i, r.clientId), o = e(a), s = M.isEffect(o) ? yield* o.pipe(M.orDie) : o;
+	}, a?.(s), o?.(s) ?? Er(s));
+}).pipe(M.withSpan(n, { attributes: { "framework.kind": "subscription" } }))), Ar = (e, t = "rpc.stream") => R.unwrap(M.gen(function* () {
+	let n = yield* we, r = yield* be, i = yield* Cr;
+	Tr(i, t, n);
+	let a = Sr(n, i, r.clientId), o = e(a), s = M.isEffect(o) ? yield* o.pipe(M.orDie) : o;
 	if (a.clientId === void 0) return s;
 	let c = a.clientId;
 	return R.unwrapScoped(M.gen(function* () {
-		let e = yield* Be.make(), t = Zn(c, () => {
-			Be.unsafeDone(e, M.void);
+		let e = yield* Ve.make(), t = $n(c, () => {
+			Ve.unsafeDone(e, M.void);
 		});
-		return yield* M.addFinalizer(() => M.sync(() => t())), s.pipe(R.interruptWhen(Be.await(e)));
+		return yield* M.addFinalizer(() => M.sync(() => t())), s.pipe(R.interruptWhen(Ve.await(e)));
 	}));
-}).pipe(M.withSpan(t, { attributes: { "framework.kind": "stream" } }))), kr = A({ scope: "voltro:rpc" }), Ar = A({ scope: "voltro:http" }), jr = (e, t, n) => {
-	if (j.isInterruptedOnly(n)) return;
-	let r = j.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = j.dieOption(n)._tag === "Some", s = Gt(r), c = {
+}).pipe(M.withSpan(t, { attributes: { "framework.kind": "stream" } }))), jr = k({ scope: "voltro:rpc" }), Mr = k({ scope: "voltro:http" }), Nr = (e, t, n) => {
+	if (A.isInterruptedOnly(n)) return;
+	let r = A.squash(n), i = r?._tag, a = r instanceof Error ? r.message : r?.message ?? String(r), o = A.dieOption(n)._tag === "Some", s = Kt(r), c = {
 		traceId: t,
 		...i === void 0 ? {} : { errorTag: i },
 		...s
 	}, l = a === "Failed to execute statement" && typeof s.dbMessage == "string" ? s.dbMessage : a;
-	o ? kr.error(`${e} failed: ${l}`, c) : kr.warn(`${e} failed: ${l}`, c);
-}, Mr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), Nr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Mr.has(e._tag), Pr = (e) => ({
+	o ? jr.error(`${e} failed: ${l}`, c) : jr.warn(`${e} failed: ${l}`, c);
+}, Pr = /* @__PURE__ */ new Set(["SqlError", "ResultLengthMismatch"]), Fr = (e) => typeof e == "object" && !!e && typeof e._tag == "string" && Pr.has(e._tag), Ir = (e) => ({
 	_tag: "InternalError",
 	message: "internal server error",
 	traceId: e
-}), Fr = (e) => {
-	let t = j.squash(e);
+}), Lr = (e) => {
+	let t = A.squash(e);
 	t && typeof t == "object" && t._tag === "UnknownException" && (t = t.error ?? t.cause ?? t);
 	let n = t && typeof t == "object" ? t : {}, r = {};
 	for (let [e, t] of Object.entries(n)) e === "cause" || e === "stack" || e === "message" || (t === null || typeof t == "string" || typeof t == "number" || typeof t == "boolean") && (r[e] = t);
@@ -1940,19 +1940,19 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...typeof i == "string" ? { _tag: i } : {},
 		message: typeof a == "string" ? a : String(t)
 	};
-}, Ir = (e, t, n = "rpc.mutation") => M.gen(function* () {
-	let r = yield* Se, i = yield* ve, a = yield* xr;
-	Cr(a, n, r);
-	let o = br(r, a, i.clientId), s = gr({ subjectKey: fr(r.id, i.clientId) }, () => sr({
+}, Rr = (e, t, n = "rpc.mutation") => M.gen(function* () {
+	let r = yield* we, i = yield* be, a = yield* Cr;
+	Tr(a, n, r);
+	let o = Sr(r, a, i.clientId), s = vr({ subjectKey: mr(r.id, i.clientId) }, () => lr({
 		traceId: o.traceId,
 		...o.spanId === void 0 ? {} : { spanId: o.spanId }
 	}, () => e(t, o)));
 	return yield* (M.isEffect(s) ? s : M.tryPromise({
 		try: () => Promise.resolve(s),
 		catch: (e) => e
-	})).pipe(M.tapErrorCause((e) => M.sync(() => jr(n, o.traceId, e))), M.catchIf(Nr, () => M.die(Pr(o.traceId))), M.annotateLogs(Sr(o)));
-}).pipe(M.withSpan(n, { attributes: { "framework.kind": "mutation" } })), Lr = 8 * 1024 * 1024, Rr = (e) => {
-	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Xe(), i = (t) => et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+	})).pipe(M.tapErrorCause((e) => M.sync(() => Nr(n, o.traceId, e))), M.catchIf(Fr, () => M.die(Ir(o.traceId))), M.annotateLogs(wr(o)));
+}).pipe(M.withSpan(n, { attributes: { "framework.kind": "mutation" } })), zr = 8 * 1024 * 1024, Br = (e) => {
+	let t = e.port ?? 4e3, n = e.path ?? "/ws", r = Ze(), i = (t) => tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -1964,7 +1964,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			contentType: a.contentType,
 			headers: a.headers ?? {}
 		});
-	}))), a = () => et.HttpServerRequest.pipe(M.flatMap((t) => {
+	}))), a = () => tt.HttpServerRequest.pipe(M.flatMap((t) => {
 		let n = e.inspectStream;
 		if (!n) return M.succeed(B.text("inspect stream not configured", { status: 404 }));
 		let r = {};
@@ -2009,7 +2009,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				...i
 			}
 		}));
-	})), o = z.add("*", "/_voltro/inspect/*", et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+	})), o = z.add("*", "/_voltro/inspect/*", tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 		if (!e.inspectRoute) return B.text("inspect route not configured", { status: 404 });
 		let n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
@@ -2025,10 +2025,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	e.inspectRoute !== void 0 && (s = e.inspectStream === void 0 ? N.mergeAll(z.add("*", "/_voltro/inspect", i(!0)), o) : N.mergeAll(z.add("GET", "/_voltro/inspect/stream", a()), z.add("*", "/_voltro/inspect", i(!0)), o));
 	let c = N.empty;
 	if (e.webhookRoutes !== void 0 && e.webhookRoutes.size > 0) {
-		let t = (e) => et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+		let t = (e) => tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
-			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(M.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = ar(n.traceparent), s = yield* M.promise(() => e.handle({
+			let r = t.method !== "GET" && t.method !== "HEAD" ? yield* t.text.pipe(M.orElseSucceed(() => "")) : "", i = new TextEncoder().encode(r), a = t.url.split("?")[0], o = sr(n.traceparent), s = yield* M.promise(() => e.handle({
 				method: t.method,
 				path: a,
 				headers: n,
@@ -2049,7 +2049,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	let l = N.empty;
 	if (e.httpRoutes !== void 0 && e.httpRoutes.length > 0) {
-		let t = (e) => et.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
+		let t = (e) => tt.HttpServerRequest.pipe(M.flatMap((t) => M.gen(function* () {
 			let n = {};
 			for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 			let r = t.url.indexOf("?"), i = r >= 0 ? t.url.slice(0, r) : t.url, a = r >= 0 ? t.url.slice(r + 1) : "", o = t.method !== "GET" && t.method !== "HEAD" ? new Uint8Array(yield* t.arrayBuffer.pipe(M.orElseSucceed(() => /* @__PURE__ */ new ArrayBuffer(0)))) : /* @__PURE__ */ new Uint8Array(), s = {
@@ -2058,8 +2058,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				query: a,
 				headers: n,
 				rawBody: o
-			}, c = yield* M.promise(() => ct(e, s));
-			c.status >= 500 && Ar.warn(`${t.method} ${i} → ${c.status}`, {
+			}, c = yield* M.promise(() => lt(e, s));
+			c.status >= 500 && Mr.warn(`${t.method} ${i} → ${c.status}`, {
 				method: t.method,
 				path: i,
 				status: c.status,
@@ -2071,7 +2071,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				headers: l
 			};
 			return c.body instanceof Uint8Array ? B.uint8Array(c.body, u) : B.text(c.body ?? "", u);
-		})), M.tapErrorCause((t) => j.isInterruptedOnly(t) ? M.void : M.sync(() => Ar.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, j.squash(t))))), n = /* @__PURE__ */ new Map();
+		})), M.tapErrorCause((t) => A.isInterruptedOnly(t) ? M.void : M.sync(() => Mr.error(`${e.map((e) => e.method).join("|")} ${e[0].path} threw`, { path: e[0].path }, A.squash(t))))), n = /* @__PURE__ */ new Map();
 		for (let t of e.httpRoutes) {
 			let e = n.get(t.path);
 			e ? e.push(t) : n.set(t.path, [t]);
@@ -2082,14 +2082,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 		l = N.mergeAll(...r);
 	}
-	let u = ot.layerProtocolWebsocketRouter({ path: n }), d = ot.layer(e.group), f = ot.layer(e.group).pipe(N.provide(ot.layerProtocolHttpRouter({ path: "/rpc" })), N.provide(at.layerJson), N.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = N.scopedDiscard(M.gen(function* () {
-		let e = yield* ot.Protocol;
+	let u = st.layerProtocolWebsocketRouter({ path: n }), d = st.layer(e.group), f = st.layer(e.group).pipe(N.provide(st.layerProtocolHttpRouter({ path: "/rpc" })), N.provide(ot.layerJson), N.provide(e.httpHandlersLayer ?? e.handlersLayer)), p = N.scopedDiscard(M.gen(function* () {
+		let e = yield* st.Protocol;
 		yield* M.forkScoped(M.gen(function* () {
 			let t = yield* e.disconnects.take;
-			Jn(t), Qn(t);
+			Xn(t), er(t);
 		}).pipe(M.forever));
-	})), m = N.mergeAll(d, p).pipe(N.provide(u), N.provide(at.layerJson), N.provide(e.handlersLayer)), h = N.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => M.gen(function* () {
-		let t = yield* et.HttpServerRequest, n = {};
+	})), m = N.mergeAll(d, p).pipe(N.provide(u), N.provide(ot.layerJson), N.provide(e.handlersLayer)), h = N.mergeAll(m, f, s, c, l), g = e.pluginHttpInterceptor, _ = e.healthCheck, v = Number(process.env.VOLTRO_MAX_RPC_BODY_BYTES), y = e.maxRpcBodyBytes ?? (Number.isFinite(v) && v > 0 ? v : 8388608), b = { "cache-control": "no-store" }, x = (e) => M.gen(function* () {
+		let t = yield* tt.HttpServerRequest, n = {};
 		for (let [e, r] of Object.entries(t.headers)) r !== void 0 && (n[e.toLowerCase()] = Array.isArray(r) ? r.join(", ") : r);
 		let r = t.url.indexOf("?"), i = r === -1 ? t.url : t.url.slice(0, r);
 		if (t.method === "POST" && i === "/rpc") {
@@ -2129,13 +2129,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			status: l.status,
 			...l.headers ? { headers: l.headers } : {}
 		});
-	}), S = N.unwrapEffect(z.toHttpEffect(h).pipe(M.map((e) => $e.serve(x(e))))).pipe(N.provide(nt.layer(() => r, { port: t })), N.provide(tt.layer));
+	}), S = N.unwrapEffect(z.toHttpEffect(h).pipe(M.map((e) => et.serve(x(e))))).pipe(N.provide(rt.layer(() => r, { port: t })), N.provide(nt.layer));
 	e.tracerLayer && (S = S.pipe(N.provide(e.tracerLayer)));
-	let C = A({ scope: "voltro:rpc" }), ee = N.launch(S).pipe(M.catchAllCause((e) => M.sync(() => {
-		C.error("rpc server crashed", {}, j.squash(e)), process.exit(1);
+	let C = k({ scope: "voltro:rpc" }), ee = N.launch(S).pipe(M.catchAllCause((e) => M.sync(() => {
+		C.error("rpc server crashed", {}, A.squash(e)), process.exit(1);
 	})));
-	return rt.runMain(ee, { disableErrorReporting: !0 }), r;
-}, zr = (e, t = 1e4) => new Promise((n, r) => {
+	return it.runMain(ee, { disableErrorReporting: !0 }), r;
+}, Vr = (e, t = 1e4) => new Promise((n, r) => {
 	if (e.listening) {
 		n();
 		return;
@@ -2151,13 +2151,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		o(e);
 	}
 	a = setTimeout(() => o(/* @__PURE__ */ Error(`rpc server did not bind within ${t}ms`)), t), e.on("listening", s), e.on("error", c);
-}), Br = () => {
+}), Hr = () => {
 	let e = process.env.FRAMEWORK_TRACING?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT ? "otlp" : "off";
-}, Vr = () => {
+}, Ur = () => {
 	let e = process.env.FRAMEWORK_METRICS?.toLowerCase();
 	return e === "console" || e === "otlp" || e === "off" ? e : process.env.OTEL_EXPORTER_OTLP_ENDPOINT || process.env.OTEL_EXPORTER_OTLP_METRICS_ENDPOINT ? "otlp" : "off";
-}, Hr = async () => {
+}, Wr = async () => {
 	let [e, t, n, r, i] = await Promise.all([
 		import("@opentelemetry/sdk-trace-base"),
 		import("@opentelemetry/sdk-metrics"),
@@ -2172,7 +2172,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		otlpMetrics: r,
 		nodeSdk: i
 	};
-}, Ur = (e, t, n) => {
+}, Gr = (e, t, n) => {
 	let { PeriodicExportingMetricReader: r, ConsoleMetricExporter: i, InMemoryMetricExporter: a, AggregationTemporality: o } = e.sdkMetrics;
 	if (t === "off") return {
 		reader: void 0,
@@ -2195,8 +2195,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}),
 		inMemory: void 0
 	};
-}, Wr = async (e = {}) => {
-	let t = e.mode ?? Br(), n = e.metricsMode ?? Vr(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
+}, Kr = async (e = {}) => {
+	let t = e.mode ?? Hr(), n = e.metricsMode ?? Ur(), r = e.extraSpanProcessors ?? [], i = e.extraMetricReaders ?? [];
 	if (t === "off" && e.traceSink === void 0 && n === "off" && r.length === 0 && i.length === 0) return {
 		layer: N.empty,
 		mode: t,
@@ -2205,13 +2205,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: void 0
 	};
-	let a = await Hr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
+	let a = await Wr(), { ConsoleSpanExporter: o, InMemorySpanExporter: s, SimpleSpanProcessor: c, BatchSpanProcessor: l } = a.sdkTrace, u = t === "off", d = e.serviceName ?? process.env.OTEL_SERVICE_NAME ?? "voltro-app", f, p;
 	e.spanProcessor ? p = e.spanProcessor : u ? p = void 0 : t === "memory" ? (f = new s(), p = new c(f)) : p = t === "console" ? new c(new o()) : new l(new a.otlpTrace.OTLPTraceExporter());
 	let m = [
 		...e.traceSink ? [e.traceSink] : [],
 		...p ? [p] : [],
 		...r
-	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Ur(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
+	], h = m.length === 1 ? m[0] : m, { reader: g, inMemory: _ } = Gr(a, n, e.metricExportIntervalMillis ?? (process.env.OTEL_METRIC_EXPORT_INTERVAL ? Number(process.env.OTEL_METRIC_EXPORT_INTERVAL) : 6e4)), v = [...g ? [g] : [], ...i], y = v.length === 0 ? void 0 : v.length === 1 ? v[0] : v, b = {
 		serviceName: d,
 		...e.serviceVersion ? { serviceVersion: e.serviceVersion } : {},
 		...e.resourceAttributes ? { attributes: e.resourceAttributes } : {}
@@ -2229,18 +2229,18 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		metricsMode: n,
 		inMemoryMetricExporter: _
 	};
-}, Gr = {
-	[dt.INTERNAL]: "internal",
-	[dt.SERVER]: "server",
-	[dt.CLIENT]: "client",
-	[dt.PRODUCER]: "producer",
-	[dt.CONSUMER]: "consumer"
-}, Kr = (e) => e[0] * 1e3 + e[1] / 1e6, qr = 512, Jr = 48, Yr = (e) => {
+}, qr = {
+	[ft.INTERNAL]: "internal",
+	[ft.SERVER]: "server",
+	[ft.CLIENT]: "client",
+	[ft.PRODUCER]: "producer",
+	[ft.CONSUMER]: "consumer"
+}, Jr = (e) => e[0] * 1e3 + e[1] / 1e6, Yr = 512, Xr = 48, Zr = (e) => {
 	let t = {}, n = 0;
 	for (let r in e) {
-		if (n >= Jr) break;
+		if (n >= Xr) break;
 		let i = e[r];
-		if (typeof i == "string") t[r] = i.length > qr ? `${i.slice(0, qr)}…` : i;
+		if (typeof i == "string") t[r] = i.length > Yr ? `${i.slice(0, Yr)}…` : i;
 		else if (typeof i == "number" || typeof i == "boolean" || i == null) t[r] = i;
 		else {
 			let e;
@@ -2249,49 +2249,49 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			} catch {
 				e = String(i);
 			}
-			t[r] = e.length > qr ? `${e.slice(0, qr)}…` : e;
+			t[r] = e.length > Yr ? `${e.slice(0, Yr)}…` : e;
 		}
 		n++;
 	}
 	return t;
-}, Xr = {
-	[ft.UNSET]: "unset",
-	[ft.OK]: "ok",
-	[ft.ERROR]: "error"
-}, Zr = (e) => {
+}, Qr = {
+	[pt.UNSET]: "unset",
+	[pt.OK]: "ok",
+	[pt.ERROR]: "error"
+}, $r = (e) => {
 	let t = e.spanContext(), n = e.events.length > 0 ? e.events.slice(0, 16).map((e) => ({
 		name: e.name,
-		tsMs: Kr(e.time),
-		...e.attributes ? { attributes: Yr(e.attributes) } : {}
+		tsMs: Jr(e.time),
+		...e.attributes ? { attributes: Zr(e.attributes) } : {}
 	})) : void 0;
 	return {
 		traceId: t.traceId,
 		spanId: t.spanId,
 		parentSpanId: e.parentSpanContext?.spanId ?? null,
 		name: e.name,
-		kind: Gr[e.kind] ?? "internal",
-		attributes: Yr(e.attributes),
-		startMs: Kr(e.startTime),
-		endMs: Kr(e.endTime),
-		durationMs: Kr(e.duration),
-		status: Xr[e.status.code] ?? "unset",
+		kind: qr[e.kind] ?? "internal",
+		attributes: Zr(e.attributes),
+		startMs: Jr(e.startTime),
+		endMs: Jr(e.endTime),
+		durationMs: Jr(e.duration),
+		status: Qr[e.status.code] ?? "unset",
 		...e.status.message ? { statusMessage: e.status.message } : {},
 		...n ? { events: n } : {}
 	};
-}, Qr = (e) => ({
+}, ei = (e) => ({
 	onStart: () => {},
 	onEnd: (t) => {
 		try {
-			e(Zr(t));
+			e($r(t));
 		} catch {}
 	},
 	forceFlush: () => Promise.resolve(),
 	shutdown: () => Promise.resolve()
-}), $r = { get: (e) => Promise.resolve(process.env[e]) }, ei = $r, ti = (e) => {
-	ei = e;
-}, ni = () => {
-	ei = $r;
-}, ri = async (e) => await ei.get(e) ?? process.env[e], ii = (e) => process.env[e], ai = (e, t = 6e4, n = () => Date.now()) => {
+}), ti = { get: (e) => Promise.resolve(process.env[e]) }, ni = ti, ri = (e) => {
+	ni = e;
+}, ii = () => {
+	ni = ti;
+}, ai = async (e) => await ni.get(e) ?? process.env[e], oi = (e) => process.env[e], si = (e, t = 6e4, n = () => Date.now()) => {
 	let r = /* @__PURE__ */ new Map();
 	return { get: async (i) => {
 		let a = r.get(i);
@@ -2302,12 +2302,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			at: n()
 		}), o;
 	} };
-}, oi = (e) => {
+}, ci = (e) => {
 	let t = {
 		accept: "application/json",
 		...e.headers ?? {}
 	};
-	if (e.perKey) return ai({ get: async (n) => {
+	if (e.perKey) return si({ get: async (n) => {
 		let r = await fetch(`${e.url.replace(/\/$/, "")}/${encodeURIComponent(n)}`, { headers: t });
 		if (!r.ok) return;
 		let i = await r.json();
@@ -2318,59 +2318,59 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		let t = (await a())[e];
 		return typeof t == "string" ? t : void 0;
 	} };
-}, si = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? $r : e.kind === "custom" ? e.backend : e.kind === "http" ? oi(e) : $r, ci = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : he(e, "voltro:field-encryption:v1", 32), li = (t) => {
+}, li = (e) => e === void 0 || e === "env" || typeof e == "object" && e.kind === "env" ? ti : e.kind === "custom" ? e.backend : e.kind === "http" ? ci(e) : ti, ui = (e) => /^[0-9a-f]{64}$/i.test(e) ? Buffer.from(e, "hex") : _e(e, "voltro:field-encryption:v1", 32), di = (t) => {
 	if (t.length !== 32) throw Error(`field cipher key must be 32 bytes, got ${t.length}`);
 	return {
 		encrypt: (n) => {
-			let r = pe(12), i = ue("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
+			let r = he(12), i = fe("aes-256-gcm", t, r), a = Buffer.concat([i.update(n, "utf8"), i.final()]), o = i.getAuthTag();
 			return `${e}${r.toString("base64")}:${o.toString("base64")}:${a.toString("base64")}`;
 		},
 		decrypt: (n) => {
 			let [r, i, a] = n.slice(e.length).split(":");
 			if (!r || !i || a === void 0) throw Error("field cipher: malformed ciphertext");
-			let o = de("aes-256-gcm", t, Buffer.from(r, "base64"));
+			let o = pe("aes-256-gcm", t, Buffer.from(r, "base64"));
 			return o.setAuthTag(Buffer.from(i, "base64")), Buffer.concat([o.update(Buffer.from(a, "base64")), o.final()]).toString("utf8");
 		}
 	};
-}, ui = (e) => li(ci(e)), di, fi = (e) => {
-	di = e;
-}, pi = () => di, mi = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
-	let t = pi();
-	if (!t) throw Error(`encryptField: ${mi}`);
+}, fi = (e) => di(ui(e)), pi, mi = (e) => {
+	pi = e;
+}, hi = () => pi, gi = "no field cipher registered — enable `@voltro/plugin-governance` `governancePlugin({ fieldEncryption: { key } })` (or call setFieldCipher) so a key is available.", q = (e) => {
+	let t = hi();
+	if (!t) throw Error(`encryptField: ${gi}`);
 	return t.encrypt(e);
-}, hi = (e) => {
+}, _i = (e) => {
 	if (!x(e)) return e;
-	let t = pi();
-	if (!t) throw Error(`decryptField: ${mi}`);
+	let t = hi();
+	if (!t) throw Error(`decryptField: ${gi}`);
 	return t.decrypt(e);
-}, gi = "_voltro_idempotency", _i = (e) => {
+}, vi = "_voltro_idempotency", yi = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "string" ? JSON.parse(e) : e;
 	return t && typeof t == "object" && "status" in t ? t : null;
-}, vi = (e) => ({
+}, bi = (e) => ({
 	scope: e.scope,
 	key: e.key,
 	status: e.status === "completed" ? "completed" : "in_flight",
-	response: _i(e.response),
-	createdAt: Ie(e.createdAt)
-}), yi = async (e, n, r) => (await e.query({
-	table: gi,
+	response: yi(e.response),
+	createdAt: Re(e.createdAt)
+}), xi = async (e, n, r) => (await e.query({
+	table: vi,
 	predicate: t(u("scope", n), u("key", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, bi = (e) => ({
+}))[0] ?? null, Si = (e) => ({
 	get: async (t, n) => {
-		let r = await yi(e, t, n);
-		return r ? vi(r) : null;
+		let r = await xi(e, t, n);
+		return r ? bi(r) : null;
 	},
 	claim: async (t, n, r, i) => {
 		for (let a = 0; a < 2; a++) {
 			let a = f({
 				kind: "typeid",
 				prefix: "idem"
-			}, gi), o = await e.insertIgnore(gi, {
+			}, vi), o = await e.insertIgnore(vi, {
 				id: a,
 				scope: t,
 				key: n,
@@ -2379,11 +2379,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				createdAt: new Date(r)
 			}, { conflictColumns: ["scope", "key"] });
 			if (o.id === a) return "claimed";
-			if (r - Ie(o.createdAt) < i) return vi(o);
-			await e.delete(gi, o.id);
+			if (r - Re(o.createdAt) < i) return bi(o);
+			await e.delete(vi, o.id);
 		}
-		let a = await yi(e, t, n);
-		return a ? vi(a) : {
+		let a = await xi(e, t, n);
+		return a ? bi(a) : {
 			scope: t,
 			key: n,
 			status: "in_flight",
@@ -2392,36 +2392,36 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		};
 	},
 	complete: async (t, n, r, i) => {
-		let a = await yi(e, t, n);
-		a && await e.update(gi, a.id, {
+		let a = await xi(e, t, n);
+		a && await e.update(vi, a.id, {
 			status: "completed",
 			response: r
 		});
 	},
 	release: async (t, n) => {
-		let r = await yi(e, t, n);
-		r && await e.delete(gi, r.id);
+		let r = await xi(e, t, n);
+		r && await e.delete(vi, r.id);
 	}
-}), J = "_voltro_kv", xi = (e) => {
+}), J = "_voltro_kv", Ci = (e) => {
 	if (e == null) return null;
 	if (e instanceof Date) return e.getTime();
 	if (typeof e == "number") return e;
 	let t = Date.parse(String(e));
 	return Number.isNaN(t) ? null : t;
-}, Si = (e, t) => {
-	let n = xi(e.expiresAt);
+}, wi = (e, t) => {
+	let n = Ci(e.expiresAt);
 	return n !== null && n <= t;
-}, Ci = (e) => e === null ? null : JSON.parse(e), wi = async (e, t) => (await e.query({
+}, Ti = (e) => e === null ? null : JSON.parse(e), Ei = async (e, t) => (await e.query({
 	table: J,
 	predicate: u("key", t),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0] ?? null, Ti = (e) => {
+}))[0] ?? null, Di = (e) => {
 	let n = (e, t, n) => M.tryPromise({
 		try: n,
-		catch: (n) => new mt({
+		catch: (n) => new ht({
 			operation: e,
 			key: t,
 			cause: String(n)
@@ -2429,8 +2429,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	});
 	return {
 		get: (t) => n("get", t, async () => {
-			let n = await wi(e, t);
-			return n === null ? F.none() : Si(n, Date.now()) ? (await e.delete(J, n.id), F.none()) : F.some(Ci(n.value));
+			let n = await Ei(e, t);
+			return n === null ? F.none() : wi(n, Date.now()) ? (await e.delete(J, n.id), F.none()) : F.some(Ti(n.value));
 		}),
 		set: (t, r, i) => n("set", t, async () => {
 			let n = Date.now(), a = i?.ttlMs !== void 0 && i.ttlMs > 0 ? new Date(n + i.ttlMs) : null, o = f({
@@ -2453,17 +2453,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		}),
 		delete: (t) => n("delete", t, async () => {
-			let n = await wi(e, t);
+			let n = await Ei(e, t);
 			if (n === null) return !1;
-			let r = !Si(n, Date.now());
+			let r = !wi(n, Date.now());
 			return await e.delete(J, n.id), r;
 		}),
 		has: (t) => n("has", t, async () => {
-			let n = await wi(e, t);
-			return n === null ? !1 : Si(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
+			let n = await Ei(e, t);
+			return n === null ? !1 : wi(n, Date.now()) ? (await e.delete(J, n.id), !1) : !0;
 		}),
 		list: (r) => n("list", "", async () => {
-			let n = Date.now(), i = ne(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
+			let n = Date.now(), i = re(S("expiresAt"), h("expiresAt", new Date(n))), a = r === "" ? i : t(o("key", r), i), s = await e.query({
 				table: J,
 				predicate: a,
 				order: [],
@@ -2471,7 +2471,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				skip: void 0,
 				projection: void 0
 			}), c = [];
-			for (let e of s) Si(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
+			for (let e of s) wi(e, n) || (r === "" || e.key.startsWith(r)) && c.push(e.key);
 			return c;
 		}),
 		clear: () => n("clear", "", async () => {
@@ -2481,8 +2481,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			} });
 		})
 	};
-}, Ei = async ({ store: e, env: t = process.env }) => {
-	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? vt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(N.provide(gt)) : r === "memory" ? _t() : N.succeed(ht, ht.of(Ti(e))), a = We.make(pt.Default.pipe(N.provide(i))), o = await a.runPromise(pt);
+}, Oi = async ({ store: e, env: t = process.env }) => {
+	let n = (t.KV_BACKEND ?? "database").toLowerCase(), r = n === "redis" ? "redis" : n === "memory" ? "memory" : "database", i = r === "redis" ? yt(t.KV_KEY_PREFIX ? { keyPrefix: t.KV_KEY_PREFIX } : {}).pipe(N.provide(_t)) : r === "memory" ? vt() : N.succeed(gt, gt.of(Di(e))), a = Ge.make(mt.Default.pipe(N.provide(i))), o = await a.runPromise(mt);
 	return {
 		kv: {
 			get: (e) => a.runPromise(o.get(e)).then((e) => F.getOrUndefined(e)),
@@ -2497,7 +2497,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		backend: r,
 		dispose: () => a.dispose()
 	};
-}, Di = {
+}, ki = {
 	get: () => Promise.resolve(void 0),
 	getOrElse: (e, t) => Promise.resolve(t()),
 	set: () => Promise.resolve(),
@@ -2505,7 +2505,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	has: () => Promise.resolve(!1),
 	list: () => Promise.resolve([]),
 	clear: () => Promise.resolve()
-}, Oi = "_voltro_api_keys", ki = (e) => fe("sha256").update(e, "utf8").digest("hex"), Ai = (e = "voltro_") => `${e}${pe(30).toString("base64url")}`, ji = (e) => ({
+}, Ai = "_voltro_api_keys", ji = (e) => me("sha256").update(e, "utf8").digest("hex"), Mi = (e = "voltro_") => `${e}${he(30).toString("base64url")}`, Ni = (e) => ({
 	id: e.id,
 	name: e.name,
 	keyPrefix: e.keyPrefix,
@@ -2515,17 +2515,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	expiresAt: e.expiresAt,
 	revokedAt: e.revokedAt,
 	createdAt: e.createdAt
-}), Mi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Ni = (e, t = {}) => {
+}), Pi = (e, t) => e.revokedAt === null && (e.expiresAt === null || e.expiresAt > t), Fi = (e, t = {}) => {
 	let n = t.prefix ?? "voltro_", r = async (t) => {
-		let r = Ai(n), i = f({
+		let r = Mi(n), i = f({
 			kind: "typeid",
 			prefix: "apikey"
-		}, Oi), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
+		}, Ai), a = t.scopes ?? [], o = t.expiresAt == null ? null : t.expiresAt instanceof Date ? t.expiresAt.getTime() : t.expiresAt;
 		return await e.insert({
 			id: i,
 			tenantId: t.tenantId ?? null,
 			name: t.name,
-			hashedKey: ki(r),
+			hashedKey: ji(r),
 			keyPrefix: r.slice(0, n.length + 6),
 			scopes: a,
 			lastUsedAt: null,
@@ -2543,7 +2543,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		};
 	}, i = async (t, n = Date.now()) => {
 		let r = await e.findByHash(t);
-		return !r || !Mi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
+		return !r || !Pi(r, n) ? null : (await e.patch(r.id, { lastUsedAt: n }), {
 			id: r.id,
 			tenantId: r.tenantId ?? "",
 			createdBy: r.createdBy ?? null,
@@ -2553,7 +2553,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	return {
 		issue: r,
 		resolveByHash: i,
-		verify: (e, t) => i(ki(e), t),
+		verify: (e, t) => i(ji(e), t),
 		revoke: async (t, n = Date.now()) => await e.findById(t) ? (await e.patch(t, { revokedAt: n }), !0) : !1,
 		rotate: async (t, n = Date.now()) => {
 			let i = await e.findById(t);
@@ -2564,9 +2564,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				createdBy: i.createdBy
 			})) : null;
 		},
-		list: async (t) => (await e.listByTenant(t)).map(ji)
+		list: async (t) => (await e.listByTenant(t)).map(Ni)
 	};
-}, Pi = () => {
+}, Ii = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
 		insert: async (t) => {
@@ -2583,21 +2583,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		}
 	};
-}, Fi = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ii = (e) => ({
+}, Li = (e) => e == null ? null : e instanceof Date ? e.getTime() : typeof e == "number" ? e : typeof e == "string" ? new Date(e).getTime() : null, Ri = (e) => ({
 	id: String(e.id),
 	tenantId: e.tenantId ?? null,
 	name: String(e.name),
 	hashedKey: String(e.hashedKey),
 	keyPrefix: String(e.keyPrefix),
 	scopes: e.scopes ?? null,
-	lastUsedAt: Fi(e.lastUsedAt),
-	expiresAt: Fi(e.expiresAt),
-	revokedAt: Fi(e.revokedAt),
+	lastUsedAt: Li(e.lastUsedAt),
+	expiresAt: Li(e.expiresAt),
+	revokedAt: Li(e.revokedAt),
 	createdBy: e.createdBy ?? null,
-	createdAt: Fi(e.createdAt) ?? 0
-}), Li = (e) => {
+	createdAt: Li(e.createdAt) ?? 0
+}), zi = (e) => {
 	let t = async (t) => await e.query({
-		table: Oi,
+		table: Ai,
 		predicate: t,
 		order: [],
 		take: void 0,
@@ -2615,32 +2615,32 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	};
 	return {
 		insert: async (t) => {
-			await e.insert(Oi, n(t));
+			await e.insert(Ai, n(t));
 		},
 		findByHash: async (e) => {
 			let n = await t(u("hashedKey", e));
-			return n[0] ? Ii(n[0]) : null;
+			return n[0] ? Ri(n[0]) : null;
 		},
 		findById: async (e) => {
 			let n = await t(u("id", e));
-			return n[0] ? Ii(n[0]) : null;
+			return n[0] ? Ri(n[0]) : null;
 		},
-		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(Ii).filter((t) => e === null || t.tenantId === e),
+		listByTenant: async (e) => (await t(e === null ? void 0 : u("tenantId", e))).map(Ri).filter((t) => e === null || t.tenantId === e),
 		patch: async (t, r) => {
-			await e.update(Oi, t, n(r));
+			await e.update(Ai, t, n(r));
 		}
 	};
-}, Ri = (e, t = {}) => yt({
+}, Bi = (e, t = {}) => bt({
 	id: "voltro-apikey",
 	...t.prefix ? { prefix: t.prefix } : {},
 	resolveKey: (t) => e.resolveByHash(t)
-}), zi = (e) => {
+}), Vi = (e) => {
 	let t = e.subject;
 	return {
 		id: t.id ?? null,
 		tenantId: t.tenantId ?? null
 	};
-}, Bi = (e, t = "/v1/api-keys") => {
+}, Hi = (e, t = "/v1/api-keys") => {
 	let n = L.Struct({
 		id: L.String,
 		name: L.String,
@@ -2653,11 +2653,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		createdAt: L.Number
 	});
 	return [
-		st({
+		ct({
 			method: "POST",
 			path: `${t}/issue`,
 			summary: "Issue an API key (the token is returned ONCE).",
-			guards: [lt(_e)],
+			guards: [ut(ye)],
 			input: L.Struct({ body: L.Struct({
 				name: L.String,
 				scopes: L.optional(L.Array(L.String)),
@@ -2669,7 +2669,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				keyPrefix: L.String
 			}),
 			handler: async (t, n) => {
-				let r = t.body, i = zi(n), a = await e.issue({
+				let r = t.body, i = Vi(n), a = await e.issue({
 					tenantId: i.tenantId,
 					name: r.name,
 					...r.scopes ? { scopes: r.scopes } : {},
@@ -2683,68 +2683,72 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				};
 			}
 		}),
-		st({
+		ct({
 			method: "GET",
 			path: t,
 			summary: "List the caller tenant's API keys (no secrets).",
-			guards: [lt(_e)],
+			guards: [ut(ye)],
 			input: L.Struct({}),
 			output: L.Struct({ keys: L.Array(n) }),
-			handler: async (t, n) => ({ keys: [...await e.list(zi(n).tenantId)] })
+			handler: async (t, n) => ({ keys: [...await e.list(Vi(n).tenantId)] })
 		}),
-		st({
+		ct({
 			method: "POST",
 			path: `${t}/revoke`,
 			summary: "Revoke an API key by id.",
-			guards: [lt(_e)],
+			guards: [ut(ye)],
 			input: L.Struct({ body: L.Struct({ id: L.String }) }),
 			output: L.Struct({ ok: L.Boolean }),
 			handler: async (t, n) => ({ ok: await e.revoke(t.body.id) })
 		})
 	];
-}, Vi = class extends L.TaggedError()("TenantScopeViolation", {
+}, Ui = {
+	type: "anonymous",
+	id: null,
+	tenantId: null
+}, Wi = class extends L.TaggedError()("TenantScopeViolation", {
 	table: L.String,
 	reason: L.String
-}) {}, Hi = class extends L.TaggedError()("StoreOperationFailed", {
+}) {}, Gi = class extends L.TaggedError()("StoreOperationFailed", {
 	operation: L.String,
 	table: L.String,
 	cause: L.String
-}) {}, Ui = class extends L.TaggedError()("TableValidationFailed", {
+}) {}, Ki = class extends L.TaggedError()("TableValidationFailed", {
 	table: L.String,
 	summary: L.String,
 	issues: L.Array(L.Struct({
 		path: L.String,
 		message: L.String
 	}))
-}) {}, Wi = class extends Re.Tag("@voltro/EffectStore")() {}, Gi = (e, t) => (n) => n instanceof Vi ? n : new Hi({
+}) {}, qi = class extends Be.Tag("@voltro/EffectStore")() {}, Ji = (e, t) => (n) => n instanceof Wi ? n : new Gi({
 	operation: e,
 	table: t,
 	cause: String(n)
-}), Ki = (e, t, n) => M.tryPromise({
+}), Yi = (e, t, n) => M.tryPromise({
 	try: n,
-	catch: Gi(e, t)
-}), qi = (e) => N.succeed(Wi, {
-	query: ((t) => Ki("query", t.table, () => e.query(t))),
-	insert: (t, n) => Ki("insert", t, () => e.insert(t, n)),
-	update: (t, n, r) => Ki("update", t, () => e.update(t, n, r)),
-	delete: (t, n) => Ki("delete", t, () => e.delete(t, n)),
-	hardDelete: (t, n) => Ki("hardDelete", t, () => e.hardDelete(t, n))
-}), Ji = (e) => it.make(e.name, {
+	catch: Ji(e, t)
+}), Xi = (e) => N.succeed(qi, {
+	query: ((t) => Yi("query", t.table, () => e.query(t))),
+	insert: (t, n) => Yi("insert", t, () => e.insert(t, n)),
+	update: (t, n, r) => Yi("update", t, () => e.update(t, n, r)),
+	delete: (t, n) => Yi("delete", t, () => e.delete(t, n)),
+	hardDelete: (t, n) => Yi("hardDelete", t, () => e.hardDelete(t, n))
+}), Zi = (e) => at.make(e.name, {
 	payload: e.payloadSchema,
-	success: Ee,
+	success: Oe,
 	error: e.errorSchema
-}), Yi = (e, t) => ({
+}), Qi = (e, t) => ({
 	id: t,
 	workflowName: e,
 	executionId: t,
 	status: "running"
-}), Xi = Yi, Zi = (e) => {
-	let t = j.failureOption(e), n = t._tag === "Some" ? t.value : j.squash(e);
+}), $i = Qi, ea = (e) => {
+	let t = A.failureOption(e), n = t._tag === "Some" ? t.value : A.squash(e);
 	return {
 		tag: n && typeof n == "object" && "_tag" in n ? String(n._tag) : null,
 		message: n?.message ?? String(n)
 	};
-}, Qi = (e, t, n) => {
+}, ta = (e, t, n) => {
 	if (n === void 0) return {
 		id: t,
 		workflowName: e,
@@ -2759,7 +2763,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	};
 	if (typeof n == "object" && n && n._tag === "Complete") {
 		let r = n.exit;
-		return Ue.isSuccess(r) ? {
+		return We.isSuccess(r) ? {
 			id: t,
 			workflowName: e,
 			executionId: t,
@@ -2770,7 +2774,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			workflowName: e,
 			executionId: t,
 			status: "failed",
-			error: Zi(r.cause)
+			error: ea(r.cause)
 		};
 	}
 	return {
@@ -2779,17 +2783,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		executionId: t,
 		status: "running"
 	};
-}, $i = (e) => new Promise((t) => setTimeout(t, e)), ea = (e) => {
+}, na = (e) => new Promise((t) => setTimeout(t, e)), ra = (e) => {
 	let t = new Map(e.workflows.map((e) => [e.definition.name, e.definition])), n = (e) => {
 		let n = t.get(e);
 		if (!n) throw Error(`Unknown workflow: ${e}`);
 		return n;
 	}, r = async (t, r) => {
 		let i = n(t);
-		return Qi(t, r, await e.runEffect(i.poll(r)));
-	}, i = async () => e.runEffect(bt()), a = async (t, r, i) => {
+		return ta(t, r, await e.runEffect(i.poll(r)));
+	}, i = async () => e.runEffect(xt()), a = async (t, r, i) => {
 		let a = n(t), o;
-		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), Yi(t, o ?? await e.runEffect(a.executionId(r)))) : Yi(t, await e.runEffect(a.execute(r, { discard: !0 })));
+		return i?.callerContext !== void 0 && (o = await e.runEffect(a.executionId(r)), await e.rememberStartContext?.(t, o, i.callerContext)), i?.wait ? (await e.runEffect(a.execute(r)), Qi(t, o ?? await e.runEffect(a.executionId(r)))) : Qi(t, await e.runEffect(a.execute(r, { discard: !0 })));
 	};
 	return {
 		start: a,
@@ -2827,7 +2831,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				let e = await r(i, a);
 				if (e.status === "succeeded" || e.status === "failed" || e.status === "cancelled") return e;
 				if (o?.timeoutMs !== void 0 && Date.now() - s >= o.timeoutMs) throw Error(`Timed out waiting for workflow '${i}' run '${a}'`);
-				await $i(c);
+				await na(c);
 			}
 		}),
 		cancel: async (t, r) => {
@@ -2865,22 +2869,22 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return e.retry(t, n);
 		}
 	};
-}, ta = (e, t) => ({
+}, ia = (e, t) => ({
 	...e,
 	start: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.start(..., { wait: true }) is not allowed inside a mutation transaction; start the workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.start(n, r)), Yi(n, a);
+		return t(() => e.start(n, r)), Qi(n, a);
 	},
 	child: async (n, r, i) => {
 		if (i?.wait) throw Error("ctx.workflows.child(..., { wait: true }) is not allowed inside a mutation transaction; start the child workflow and wait after commit.");
 		let a = await e.executionId(n, r);
-		return t(() => e.child(n, r, i)), Yi(n, a);
+		return t(() => e.child(n, r, i)), Qi(n, a);
 	},
 	run: async () => {
 		throw Error("ctx.workflows.run(...) is not allowed inside a mutation transaction; use ctx.workflows.start(...) so the workflow starts after commit.");
 	}
-}), na = (e, t) => ({
+}), aa = (e, t) => ({
 	...e,
 	start: (n, r, i) => e.start(n, r, {
 		...i,
@@ -2894,7 +2898,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...i,
 		callerContext: t
 	})
-}), ra = (e) => {
+}), oa = (e) => {
 	let t = () => {
 		let t = e();
 		if (!t) throw Error("Workflow runtime is not ready yet");
@@ -2915,55 +2919,59 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		listRuns: ((e) => t().listRuns(e)),
 		retry: (e, n) => t().retry(e, n)
 	};
-}, ia = (e, t) => {
+}, sa = (e, t) => {
 	let n = {};
-	for (let r of e) n[r.definition.name] = (e) => (t ? M.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(M.map((e) => Yi(r.definition.name, e)))).pipe(M.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
+	for (let r of e) n[r.definition.name] = (e) => (t ? M.promise(() => t.start(r.definition.name, e)) : r.definition.execute(e, { discard: !0 }).pipe(M.map((e) => Qi(r.definition.name, e)))).pipe(M.withSpan(`workflow.${r.definition.name}`, { attributes: { "framework.kind": "workflow" } }));
 	return n;
-}, aa = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
+}, ca = (e, t, n) => e.map((e) => e.definition.toLayer(((r, i) => {
 	let a = t.resolveStartContext?.(e.definition.name, i);
 	return (a === void 0 ? M.succeed(void 0) : M.promise(() => Promise.resolve(a))).pipe(M.flatMap((a) => {
-		let o = t.buildContext(a, {
+		let o = {
+			...a,
+			subject: a?.subject ?? Ui,
+			traceId: a?.traceId ?? "workflow-bootstrap"
+		}, s = t.buildContext(o, {
 			workflowName: e.definition.name,
 			executionId: i,
 			parentExecutionId: a?.parentExecutionId ?? null,
 			parentClosePolicy: a?.parentClosePolicy ?? null
-		}), s = e.buildExecute(o), c = (n?.(e, s, a) ?? s)(r, i), l = o?.store;
-		return l === void 0 ? c : M.provide(c, qi(l));
+		}), c = e.buildExecute(s), l = (n?.(e, c, o) ?? c)(r, i), u = s?.store;
+		return u === void 0 ? l : M.provide(l, Xi(u));
 	}));
-}))), oa = (e) => ({
+}))), la = (e) => ({
 	_tag: "workflowEventTrigger",
 	...e
-}), sa = oa, ca = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", la = () => {
+}), ua = la, da = (e) => typeof e == "object" && !!e && e._tag === "workflowEventTrigger", fa = () => {
 	let e = globalThis.crypto;
 	return typeof e?.randomUUID == "function" ? e.randomUUID() : `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-}, ua = (e) => `${e}_${la()}`, da = (e) => e.id ?? `${e.event}->${e.workflow}`, fa = E("_voltro_workflow_events", {
+}, pa = (e) => `${e}_${fa()}`, ma = (e) => e.id ?? `${e.event}->${e.workflow}`, ha = T("_voltro_workflow_events", {
 	id: v({ prefix: "wfe" }),
-	name: D(),
+	name: E(),
 	payload: C(),
-	source: D(),
+	source: E(),
 	subject: C().nullable(),
-	traceId: D().nullable(),
-	occurredAt: O().default("now")
-}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), pa = E("_voltro_workflow_event_deliveries", {
+	traceId: E().nullable(),
+	occurredAt: D().default("now")
+}).index(["name"]).index(["source"]).index(["occurredAt"]).reactive(), ga = T("_voltro_workflow_event_deliveries", {
 	id: v({ prefix: "wfed" }),
-	eventId: D(),
-	eventName: D(),
-	triggerId: D(),
-	workflowName: D(),
-	executionId: D().nullable(),
-	status: D().oneOf([
+	eventId: E(),
+	eventName: E(),
+	triggerId: E(),
+	workflowName: E(),
+	executionId: E().nullable(),
+	status: E().oneOf([
 		"starting",
 		"started",
 		"skipped",
 		"failed"
 	]).default("starting"),
-	idempotencyKey: D().unique(),
+	idempotencyKey: E().unique(),
 	skipped: r().default(!1),
-	errorMessage: D().nullable(),
-	createdAt: O().default("now"),
-	completedAt: O().nullable()
-}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), ma = (e) => {
-	let t = e.makeId ?? ua, n = /* @__PURE__ */ new Map();
+	errorMessage: E().nullable(),
+	createdAt: D().default("now"),
+	completedAt: D().nullable()
+}).index(["eventId"]).index(["eventName"]).index(["triggerId"]).index(["workflowName"]).index(["status"]).reactive(), _a = (e) => {
+	let t = e.makeId ?? pa, n = /* @__PURE__ */ new Map();
 	for (let t of e.triggers) {
 		let e = n.get(t.event);
 		e ? e.push(t) : n.set(t.event, [t]);
@@ -3004,7 +3012,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 		let p = o(n), m = [];
 		for (let o of p) {
-			let s = da(o), l = o.workflow, d;
+			let s = ma(o), l = o.workflow, d;
 			try {
 				let p = o.idempotencyKey?.(f) ?? `${c}:${s}`;
 				if (o.filter && !await o.filter(f)) {
@@ -3107,56 +3115,56 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			triggered: m
 		};
 	} };
-}, ha = A({ scope: "voltro:outbox" }), Y = "_voltro_outbox", ga = {
+}, va = k({ scope: "voltro:outbox" }), Y = "_voltro_outbox", ya = {
 	kind: "typeid",
 	prefix: "obx"
-}, _a = E(Y, {
+}, ba = T(Y, {
 	id: v({ prefix: "obx" }),
-	effect: D(),
+	effect: E(),
 	payload: C(),
-	status: D(),
+	status: E(),
 	attempts: b(),
 	maxAttempts: b(),
-	nextAttemptAt: O(),
-	idempotencyKey: D().nullable(),
-	lastError: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	createdAt: O(),
-	deliveredAt: O().nullable(),
-	resendRequestedBy: D().nullable(),
-	resendReason: D().nullable(),
+	nextAttemptAt: D(),
+	idempotencyKey: E().nullable(),
+	lastError: E().nullable(),
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable(),
+	createdAt: D(),
+	deliveredAt: D().nullable(),
+	resendRequestedBy: E().nullable(),
+	resendReason: E().nullable(),
 	resendCount: b()
-}), va = "_voltro_outbox_attempts", ya = {
+}), xa = "_voltro_outbox_attempts", Sa = {
 	kind: "typeid",
 	prefix: "obxa"
-}, ba = E(va, {
+}, Ca = T(xa, {
 	id: v({ prefix: "obxa" }),
-	outboxId: D(),
-	effect: D(),
+	outboxId: E(),
+	effect: E(),
 	attempt: b(),
-	trigger: D().oneOf(["automatic", "manual"]),
-	triggeredBy: D().nullable(),
-	reason: D().nullable(),
-	outcome: D().oneOf([
+	trigger: E().oneOf(["automatic", "manual"]),
+	triggeredBy: E().nullable(),
+	reason: E().nullable(),
+	outcome: E().oneOf([
 		"delivered",
 		"failed",
 		"dead"
 	]),
-	startedAt: O(),
-	finishedAt: O(),
+	startedAt: D(),
+	finishedAt: D(),
 	durationMs: b(),
-	error: D().nullable(),
+	error: E().nullable(),
 	response: C().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable()
-}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), xa = (e) => {
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable()
+}).index(["outboxId", "attempt"]).index(["startedAt"]).index(["outcome"]), wa = (e) => {
 	if (e.effect.trim() === "") throw Error("defineOutboxHandler: `effect` must be a non-empty name");
 	if (e.maxAttempts !== void 0 && e.maxAttempts < 1) throw Error(`defineOutboxHandler("${e.effect}"): maxAttempts must be >= 1`);
 	return e;
-}, Sa = 8, Ca = (e) => ({
+}, Ta = 8, Ea = (e) => ({
 	enqueue: async (n, r, i) => {
 		let a = (e.now ?? (() => /* @__PURE__ */ new Date()))(), o = i?.idempotencyKey;
 		if (o !== void 0) {
@@ -3171,12 +3179,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			if (n !== void 0) return n.id;
 		}
 		let s = {
-			id: f(ga, Y),
+			id: f(ya, Y),
 			effect: n,
 			payload: r,
 			status: "pending",
 			attempts: 0,
-			maxAttempts: i?.maxAttempts ?? Sa,
+			maxAttempts: i?.maxAttempts ?? Ta,
 			nextAttemptAt: new Date(a.getTime() + (i?.delayMs ?? 0)),
 			idempotencyKey: o ?? null,
 			lastError: null,
@@ -3223,7 +3231,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		} else e.nudge?.();
 	}
-}), wa = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Ta = 50, Ea = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Da = (e) => {
+}), Da = (e) => Math.min(1e3 * 2 ** Math.max(0, e - 1), 5 * 6e4), Oa = 50, ka = (e, t) => e.length <= t ? e : `${e.slice(0, t)}… [clipped]`, Aa = (e) => {
 	if (e == null) return null;
 	let t = typeof e == "object" && !Array.isArray(e) ? e : { value: e }, n;
 	try {
@@ -3233,13 +3241,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	return n.length > 8192 ? {
 		truncated: !0,
-		preview: Ea(n, 8192)
+		preview: ka(n, 8192)
 	} : t;
-}, Oa = async (e, t, n) => {
+}, ja = async (e, t, n) => {
 	let r = t.outboxRow, i = r.id, a = r.resendRequestedBy ?? null;
 	try {
-		await e.insert(va, {
-			id: f(ya, va),
+		await e.insert(xa, {
+			id: f(Sa, xa),
 			outboxId: i,
 			effect: r.effect,
 			attempt: t.attempt,
@@ -3250,14 +3258,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			startedAt: t.startedAt,
 			finishedAt: t.finishedAt,
 			durationMs: Math.max(0, t.finishedAt.getTime() - t.startedAt.getTime()),
-			error: t.error === null ? null : Ea(t.error, 4e3),
-			response: Da(t.response),
+			error: t.error === null ? null : ka(t.error, 4e3),
+			response: Aa(t.response),
 			subjectId: r.subjectId ?? null,
 			tenantId: r.tenantId ?? null,
 			traceId: r.traceId ?? null
 		});
 	} catch (e) {
-		ha.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
+		va.warn("outbox: could not record delivery attempt (delivery itself is unaffected)", {
 			outboxId: i,
 			attempt: t.attempt
 		}, e);
@@ -3265,7 +3273,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	if (!(t.attempt <= n)) try {
 		let t = await e.query({
-			table: va,
+			table: xa,
 			predicate: u("outboxId", i),
 			order: [{
 				column: "attempt",
@@ -3275,14 +3283,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			skip: void 0,
 			projection: ["id"]
 		});
-		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(va, r.id);
+		for (let r of t.slice(0, Math.max(0, t.length - n))) await e.delete(xa, r.id);
 	} catch (e) {
-		ha.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
+		va.warn("outbox: attempt-log trim failed; the log may exceed its cap", { outboxId: i }, e);
 	}
-}, ka = async (e) => {
+}, Ma = async (e) => {
 	let n = (e.now ?? (() => /* @__PURE__ */ new Date()))(), r = await e.store.query({
 		table: Y,
-		predicate: t(u("status", "pending"), te("nextAttemptAt", n)),
+		predicate: t(u("status", "pending"), ne("nextAttemptAt", n)),
 		order: [{
 			column: "nextAttemptAt",
 			direction: "asc"
@@ -3297,7 +3305,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			s++;
 			continue;
 		}
-		let u = t.attempts + 1, d = t.maxAttempts ?? Sa, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
+		let u = t.attempts + 1, d = t.maxAttempts ?? Ta, f = /* @__PURE__ */ new Date(), p = e.attemptLogCap ?? 50;
 		try {
 			let n = await l.handler({
 				payload: t.payload ?? {},
@@ -3306,7 +3314,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				tenantId: t.tenantId ?? null,
 				traceId: t.traceId ?? null
 			});
-			await Oa(e.store, {
+			await ja(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: "delivered",
@@ -3324,7 +3332,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}), i++;
 		} catch (i) {
 			let s = i instanceof Error ? i.message : String(i), l = u >= d;
-			await Oa(e.store, {
+			await ja(e.store, {
 				outboxRow: t,
 				attempt: u,
 				outcome: l ? "dead" : "failed",
@@ -3336,20 +3344,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				status: l ? "dead" : "pending",
 				attempts: u,
 				lastError: s,
-				nextAttemptAt: new Date(n.getTime() + wa(u)),
+				nextAttemptAt: new Date(n.getTime() + Da(u)),
 				resendRequestedBy: null,
 				resendReason: null
-			}), l ? (o++, ha.error("outbox effect dead-lettered after exhausting attempts", {
+			}), l ? (o++, va.error("outbox effect dead-lettered after exhausting attempts", {
 				id: r,
 				effect: c,
 				attempts: u,
 				maxAttempts: d
-			}, i)) : (a++, ha.warn("outbox delivery failed; will retry", {
+			}, i)) : (a++, va.warn("outbox delivery failed; will retry", {
 				id: r,
 				effect: c,
 				attempt: u,
 				maxAttempts: d,
-				retryInMs: wa(u)
+				retryInMs: Da(u)
 			}));
 		}
 	}
@@ -3359,47 +3367,47 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		dead: o,
 		skipped: s
 	};
-}, Aa = A({ scope: "voltro:connections" }), X = "_voltro_connections", ja = {
+}, Na = k({ scope: "voltro:connections" }), X = "_voltro_connections", Pa = {
 	kind: "typeid",
 	prefix: "conn"
-}, Ma = E(X, {
+}, Fa = T(X, {
 	id: v({ prefix: "conn" }),
-	connectionId: D(),
-	subjectId: D(),
-	tenantId: D().nullable(),
-	kind: D().oneOf(["oauth2", "pat"]),
-	status: D().oneOf([
+	connectionId: E(),
+	subjectId: E(),
+	tenantId: E().nullable(),
+	kind: E().oneOf(["oauth2", "pat"]),
+	status: E().oneOf([
 		"connected",
 		"expired",
 		"revoked",
 		"error"
 	]),
-	accessToken: D(),
-	refreshToken: D().nullable(),
-	expiresAt: O().nullable(),
-	scopes: D().nullable(),
-	accountId: D().nullable(),
-	accountLabel: D().nullable(),
-	lastError: D().nullable(),
-	refreshLockedUntil: O(),
+	accessToken: E(),
+	refreshToken: E().nullable(),
+	expiresAt: D().nullable(),
+	scopes: E().nullable(),
+	accountId: E().nullable(),
+	accountLabel: E().nullable(),
+	lastError: E().nullable(),
+	refreshLockedUntil: D(),
 	metadata: C().nullable(),
-	connectedAt: O(),
-	updatedAt: O()
-}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), Na = "_voltro_connection_grants", Pa = {
+	connectedAt: D(),
+	updatedAt: D()
+}).unique("bySubject", ["connectionId", "subjectId"]).index(["subjectId"]).reactive(), Ia = "_voltro_connection_grants", La = {
 	kind: "typeid",
 	prefix: "cgrant"
-}, Fa = E(Na, {
+}, Ra = T(Ia, {
 	id: v({ prefix: "cgrant" }),
-	state: D().unique(),
-	connectionId: D(),
-	subjectId: D(),
-	tenantId: D().nullable(),
-	codeVerifier: D().nullable(),
-	redirectTo: D(),
-	createdAt: O(),
-	expiresAt: O()
-}).index(["expiresAt"]), Ia = /^[a-z][a-z0-9-]*$/, La = (e) => {
-	if (!Ia.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
+	state: E().unique(),
+	connectionId: E(),
+	subjectId: E(),
+	tenantId: E().nullable(),
+	codeVerifier: E().nullable(),
+	redirectTo: E(),
+	createdAt: D(),
+	expiresAt: D()
+}).index(["expiresAt"]), za = /^[a-z][a-z0-9-]*$/, Ba = (e) => {
+	if (!za.test(e.id)) throw Error(`defineConnection: id "${e.id}" must be lowercase kebab-case (it becomes a URL path segment).`);
 	if (e.kind === "oauth2") {
 		for (let t of [
 			"authorizeUrl",
@@ -3409,9 +3417,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		]) if (typeof e[t] != "string" || e[t].length === 0) throw Error(`defineConnection("${e.id}"): \`${t}\` is required for kind 'oauth2'.`);
 	}
 	return e;
-}, Ra = (e) => e.label ?? e.id, za = (e) => {
-	if (e.length !== 0 && pi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
-}, Ba = (e) => {
+}, Va = (e) => e.label ?? e.id, Ha = (e) => {
+	if (e.length !== 0 && hi() === void 0) throw Error(`connections: ${e.length} connection(s) declared (${e.map((e) => e.id).join(", ")}) but no field cipher is registered. Connection tokens are stored encrypted and there is no plaintext fallback. Enable \`@voltro/plugin-governance\` with \`governancePlugin({ fieldEncryption: { key: env.FIELD_ENCRYPTION_KEY } })\` (or call setFieldCipher at boot).`);
+}, Ua = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		if (t.has(n.id)) throw Error(`connections: duplicate connection id "${n.id}" — each *.connection.ts must declare a distinct id.`);
@@ -3421,14 +3429,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		get: (e) => t.get(e),
 		list: () => [...t.values()]
 	};
-}, Va = (e) => {
+}, Wa = (e) => {
 	if (e == null) return null;
 	let t = e instanceof Date ? e : new Date(String(e));
 	return Number.isNaN(t.getTime()) ? null : t;
-}, Ha = (e) => Va(e)?.toISOString() ?? null, Ua = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), Wa = (e, t) => t === void 0 ? {
+}, Ga = (e) => Wa(e)?.toISOString() ?? null, Ka = (e) => String(e ?? "").split(" ").filter((e) => e.length > 0), qa = (e, t) => t === void 0 ? {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Ra(e),
+	label: Va(e),
 	status: "disconnected",
 	accountId: null,
 	accountLabel: null,
@@ -3439,24 +3447,24 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 } : {
 	connectionId: e.id,
 	kind: e.kind,
-	label: Ra(e),
+	label: Va(e),
 	status: String(t.status ?? "connected"),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null,
-	scopes: Ua(t.scopes),
-	expiresAt: Ha(t.expiresAt),
+	scopes: Ka(t.scopes),
+	expiresAt: Ga(t.expiresAt),
 	lastError: t.lastError ?? null,
-	connectedAt: Ha(t.connectedAt)
-}, Ga = async (e, n, r) => (await e.query({
+	connectedAt: Ga(t.connectedAt)
+}, Ja = async (e, n, r) => (await e.query({
 	table: X,
 	predicate: t(u("connectionId", n), u("subjectId", r)),
 	order: [],
 	take: 1,
 	skip: void 0,
 	projection: void 0
-}))[0], Ka = async (e) => {
+}))[0], Ya = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = e.tokens.expiresAt === void 0 ? null : new Date(e.tokens.expiresAt), r = {
-		id: f(ja, X),
+		id: f(Pa, X),
 		connectionId: e.definition.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
@@ -3474,8 +3482,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		connectedAt: t,
 		updatedAt: t
 	};
-	return qa(e.store, r);
-}, qa = (e, t) => e.upsert(X, t, {
+	return Xa(e.store, r);
+}, Xa = (e, t) => e.upsert(X, t, {
 	conflictColumns: ["connectionId", "subjectId"],
 	update: [
 		"kind",
@@ -3491,10 +3499,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		"metadata",
 		"updatedAt"
 	]
-}), Ja = async (e, t, n) => {
-	let r = await Ga(e, t, n);
+}), Za = async (e, t, n) => {
+	let r = await Ja(e, t, n);
 	return r !== void 0 && e.delete(X, r.id);
-}, Ya = async (e, t, n) => {
+}, Qa = async (e, t, n) => {
 	let r = await e.query({
 		table: X,
 		predicate: u("subjectId", n),
@@ -3503,9 +3511,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	}), i = new Map(r.map((e) => [String(e.connectionId), e]));
-	return t.list().map((e) => Wa(e, i.get(e.id)));
-}, Xa = (e, t) => globalThis.fetch(e, t), Za = async (e, t, n) => {
-	let r = e.fetchImpl ?? Xa, i, a;
+	return t.list().map((e) => qa(e, i.get(e.id)));
+}, $a = (e, t) => globalThis.fetch(e, t), eo = async (e, t, n) => {
+	let r = e.fetchImpl ?? $a, i, a;
 	try {
 		let n = await r(e.tokenUrl, {
 			method: "POST",
@@ -3517,7 +3525,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 		i = n.status, a = await n.text();
 	} catch (t) {
-		throw new k({
+		throw new O({
 			connectionId: e.id,
 			reason: `token endpoint unreachable: ${String(t)}`,
 			transient: !0
@@ -3529,12 +3537,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	} catch {
 		o = {};
 	}
-	if (i < 200 || i >= 300) throw new k({
+	if (i < 200 || i >= 300) throw new O({
 		connectionId: e.id,
 		reason: `token endpoint ${i}: ${o.error ?? ""} ${o.error_description ?? a.slice(0, 200)}`.trim(),
 		transient: i >= 500
 	});
-	if (typeof o.access_token != "string" || o.access_token.length === 0) throw new k({
+	if (typeof o.access_token != "string" || o.access_token.length === 0) throw new O({
 		connectionId: e.id,
 		reason: "token response carried no access_token",
 		transient: !1
@@ -3545,64 +3553,64 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...Number.isFinite(o.expires_in) ? { expiresAt: n() + o.expires_in * 1e3 } : {},
 		scopes: (o.scope ?? e.scopes?.join(" ") ?? "").split(" ").filter(Boolean)
 	};
-}, Qa = (e, t, n = Date.now) => Za(e, {
+}, to = (e, t, n = Date.now) => eo(e, {
 	grant_type: "authorization_code",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	code: t.code,
 	redirect_uri: t.redirectUri,
 	...t.codeVerifier ? { code_verifier: t.codeVerifier } : {}
-}, n), $a = (e, t, n = Date.now) => Za(e, {
+}, n), no = (e, t, n = Date.now) => eo(e, {
 	grant_type: "refresh_token",
 	client_id: e.clientId,
 	client_secret: e.clientSecret,
 	refresh_token: t
-}, n), eo = 6e4, to = 3e4, no = class extends Error {
+}, n), ro = 6e4, io = 3e4, ao = class extends Error {
 	connectionId;
 	subjectId;
 	_tag = "ConnectionNotConnected";
 	constructor(e, t) {
 		super(`connection "${e}" is not connected for this subject`), this.connectionId = e, this.subjectId = t, this.name = "ConnectionNotConnected";
 	}
-}, ro = (e) => new Promise((t) => {
+}, oo = (e) => new Promise((t) => {
 	setTimeout(t, e);
-}), io = /* @__PURE__ */ new Map(), ao = (e, t) => `${e}${t}`, oo = () => {
-	io.clear();
-}, so = (e, t) => ({
+}), so = /* @__PURE__ */ new Map(), co = (e, t) => `${e}${t}`, lo = () => {
+	so.clear();
+}, uo = (e, t) => ({
 	connectionId: e.id,
 	kind: e.kind,
-	accessToken: hi(String(t.accessToken)),
-	expiresAt: Va(t.expiresAt),
-	scopes: Ua(t.scopes),
+	accessToken: _i(String(t.accessToken)),
+	expiresAt: Wa(t.expiresAt),
+	scopes: Ka(t.scopes),
 	accountId: t.accountId ?? null,
 	accountLabel: t.accountLabel ?? null
-}), co = (e, t, n) => {
-	let r = Va(e.expiresAt);
+}), fo = (e, t, n) => {
+	let r = Wa(e.expiresAt);
 	return r !== null && r.getTime() - n < t;
-}, lo = async (e) => {
-	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Ga(n, r.id, i);
-	if (a === void 0) throw new no(r.id, i);
-	if (r.kind === "pat" || !co(a, r.refreshSkewMs ?? 6e4, t())) return so(r, a);
-	let o = ao(r.id, i), s = io.get(o);
+}, po = async (e) => {
+	let t = e.now ?? Date.now, { store: n, definition: r, subjectId: i } = e, a = await Ja(n, r.id, i);
+	if (a === void 0) throw new ao(r.id, i);
+	if (r.kind === "pat" || !fo(a, r.refreshSkewMs ?? 6e4, t())) return uo(r, a);
+	let o = co(r.id, i), s = so.get(o);
 	if (s !== void 0) return s;
-	let c = uo({
+	let c = mo({
 		...e,
 		now: t,
 		row: a
 	}).finally(() => {
-		io.delete(o);
+		so.delete(o);
 	});
-	return io.set(o, c), c;
-}, uo = async (e) => {
-	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? ro, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
-	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), te("refreshLockedUntil", new Date(i()))) }) === 0) {
+	return so.set(o, c), c;
+}, mo = async (e) => {
+	let { store: n, subjectId: r, now: i } = e, a = e.definition, o = e.sleep ?? oo, s = a.refreshSkewMs ?? 6e4, c = e.row.id;
+	if (await n.updateMany("_voltro_connections", { refreshLockedUntil: new Date(i() + 3e4) }, { where: t(u("id", c), ne("refreshLockedUntil", new Date(i()))) }) === 0) {
 		for (let e = 0; e < 10; e++) {
 			await o(200);
-			let e = await Ga(n, a.id, r);
-			if (e === void 0) throw new no(a.id, r);
-			if (!co(e, s, i())) return so(a, e);
+			let e = await Ja(n, a.id, r);
+			if (e === void 0) throw new ao(a.id, r);
+			if (!fo(e, s, i())) return uo(a, e);
 		}
-		throw new k({
+		throw new O({
 			connectionId: a.id,
 			reason: "another replica held the refresh lease and did not publish a fresh token in time",
 			transient: !0
@@ -3614,16 +3622,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		lastError: "access token expired and no refresh token is on file — reconnect required",
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
-	}), new k({
+	}), new O({
 		connectionId: a.id,
 		reason: "access token expired and no refresh token is on file — reconnect required",
 		transient: !1
 	});
 	let d;
 	try {
-		d = await $a(a, hi(String(l)), i);
+		d = await no(a, _i(String(l)), i);
 	} catch (e) {
-		let t = e instanceof k ? e : new k({
+		let t = e instanceof O ? e : new O({
 			connectionId: a.id,
 			reason: String(e),
 			transient: !0
@@ -3638,7 +3646,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				refreshToken: null,
 				expiresAt: null
 			}
-		}), Aa.warn("connection refresh failed", {
+		}), Na.warn("connection refresh failed", {
 			connectionId: a.id,
 			transient: t.transient,
 			reason: t.reason
@@ -3654,32 +3662,32 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		refreshLockedUntil: /* @__PURE__ */ new Date(0),
 		updatedAt: new Date(i())
 	};
-	return so(a, await n.update(X, c, f) ?? {
+	return uo(a, await n.update(X, c, f) ?? {
 		...e.row,
 		...f
 	});
-}, fo = (e = 32) => {
+}, ho = (e = 32) => {
 	let t = new Uint8Array(e);
 	return globalThis.crypto.getRandomValues(t), Array.from(t, (e) => e.toString(16).padStart(2, "0")).join("");
-}, po = (e) => {
+}, go = (e) => {
 	let t = "";
 	for (let n of e) t += String.fromCharCode(n);
 	return btoa(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}, mo = async (e) => {
+}, _o = async (e) => {
 	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
-	return po(new Uint8Array(t));
-}, ho = 10 * 6e4, go = (e) => `/_voltro/connections/${e}/callback`, _o = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, vo = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${go(e.id)}`, yo = async (e) => {
-	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = fo(), i = n.pkce === !1 ? null : fo(48), a = vo(n, e.publicUrl);
-	await e.store.insert(Na, {
-		id: f(Pa, Na),
+	return go(new Uint8Array(t));
+}, vo = 10 * 6e4, yo = (e) => `/_voltro/connections/${e}/callback`, bo = (e) => e === void 0 || e.length === 0 || !e.startsWith("/") || e.startsWith("//") || e.startsWith("/\\") ? "/" : e, xo = (e, t) => e.redirectUri ?? `${t.replace(/\/+$/, "")}${yo(e.id)}`, So = async (e) => {
+	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), { definition: n } = e, r = ho(), i = n.pkce === !1 ? null : ho(48), a = xo(n, e.publicUrl);
+	await e.store.insert(Ia, {
+		id: f(La, Ia),
 		state: r,
 		connectionId: n.id,
 		subjectId: e.subjectId,
 		tenantId: e.tenantId,
 		codeVerifier: i === null ? null : q(i),
-		redirectTo: _o(e.redirectTo),
+		redirectTo: bo(e.redirectTo),
 		createdAt: t,
-		expiresAt: new Date(t.getTime() + ho)
+		expiresAt: new Date(t.getTime() + vo)
 	});
 	let o = new URLSearchParams({
 		response_type: "code",
@@ -3689,50 +3697,50 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		...n.scopes && n.scopes.length > 0 ? { scope: n.scopes.join(" ") } : {},
 		...n.authorizeParams ?? {}
 	});
-	i !== null && (o.set("code_challenge", await mo(i)), o.set("code_challenge_method", "S256"));
+	i !== null && (o.set("code_challenge", await _o(i)), o.set("code_challenge_method", "S256"));
 	let s = n.authorizeUrl.includes("?") ? "&" : "?";
 	return {
 		authorizeUrl: `${n.authorizeUrl}${s}${o.toString()}`,
 		state: r
 	};
-}, bo = async (e) => {
+}, Co = async (e) => {
 	let t = (e.now ?? (() => /* @__PURE__ */ new Date()))(), n = (await e.store.query({
-		table: Na,
+		table: Ia,
 		predicate: u("state", e.state),
 		order: [],
 		take: 1,
 		skip: void 0,
 		projection: void 0
 	}))[0];
-	if (n === void 0) throw new k({
+	if (n === void 0) throw new O({
 		connectionId: "unknown",
 		reason: "unknown or already-used handshake state",
 		transient: !1
 	});
-	await e.store.delete(Na, n.id);
-	let r = String(n.connectionId), i = Va(n.expiresAt);
-	if (i !== null && i.getTime() < t.getTime()) throw new k({
+	await e.store.delete(Ia, n.id);
+	let r = String(n.connectionId), i = Wa(n.expiresAt);
+	if (i !== null && i.getTime() < t.getTime()) throw new O({
 		connectionId: r,
 		reason: "handshake expired — start again",
 		transient: !1
 	});
 	let a = e.registry.get(r);
-	if (a === void 0 || a.kind !== "oauth2") throw new k({
+	if (a === void 0 || a.kind !== "oauth2") throw new O({
 		connectionId: r,
 		reason: "no oauth2 connection is declared under that id",
 		transient: !1
 	});
-	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : hi(String(n.codeVerifier)), s = await Qa(a, {
+	let o = n.codeVerifier === null || n.codeVerifier === void 0 ? null : _i(String(n.codeVerifier)), s = await to(a, {
 		code: e.code,
-		redirectUri: vo(a, e.publicUrl),
+		redirectUri: xo(a, e.publicUrl),
 		codeVerifier: o
 	}, () => t.getTime()), c = a.identify === void 0 ? void 0 : await a.identify(s).catch((e) => {
-		Aa.warn("connection identify failed; storing without account details", {
+		Na.warn("connection identify failed; storing without account details", {
 			connectionId: r,
 			reason: String(e)
 		});
 	});
-	return await Ka({
+	return await Ya({
 		store: e.store,
 		definition: a,
 		subjectId: String(n.subjectId),
@@ -3742,12 +3750,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		now: () => t
 	}), {
 		connectionId: r,
-		redirectTo: _o(String(n.redirectTo ?? "/"))
+		redirectTo: bo(String(n.redirectTo ?? "/"))
 	};
-}, xo = async (e, t = /* @__PURE__ */ new Date()) => {
+}, wo = async (e, t = /* @__PURE__ */ new Date()) => {
 	let n = await e.query({
-		table: Na,
-		predicate: te("expiresAt", t),
+		table: Ia,
+		predicate: ne("expiresAt", t),
 		order: [],
 		take: void 0,
 		skip: void 0,
@@ -3755,27 +3763,27 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}), r = 0;
 	for (let t of n) await e.delete("_voltro_connection_grants", t.id) && r++;
 	return r;
-}, So, Co = (e) => {
-	So = e;
-}, wo = () => So, To = (e, t) => {
-	let n = So;
+}, To, Eo = (e) => {
+	To = e;
+}, Do = () => To, Oo = (e, t) => {
+	let n = To;
 	return n === void 0 ? Promise.reject(/* @__PURE__ */ Error(`resolveConnectionForSubject("${t}"): no connection vault is registered — the app declares no \`*.connection.ts\`, or this call ran before boot completed.`)) : n(e, t);
-}, Eo = (e) => async (t, n) => {
+}, ko = (e) => async (t, n) => {
 	let r = e.registry.get(n);
 	if (r === void 0) throw Error(`connection "${n}" is not declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
 	let i = t.id ?? null;
-	if (i === null || i === "") throw new no(n, "<anonymous>");
-	return lo({
+	if (i === null || i === "") throw new ao(n, "<anonymous>");
+	return po({
 		store: e.store,
 		definition: r,
 		subjectId: i
 	});
-}, Do = (e) => {
+}, Ao = (e) => {
 	let t = e.subject.id ?? null, n = async (n) => {
 		let r = e.registry.get(n);
 		if (r === void 0) throw Error(`ctx.connections.get("${n}"): no such connection is declared. Declared: ${e.registry.list().map((e) => e.id).join(", ") || "(none)"}.`);
-		if (t === null || t === "") throw new no(n, "<anonymous>");
-		return lo({
+		if (t === null || t === "") throw new ao(n, "<anonymous>");
+		return po({
 			store: e.store,
 			definition: r,
 			subjectId: t
@@ -3787,7 +3795,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			try {
 				return await n(e);
 			} catch (e) {
-				if (e instanceof no) return null;
+				if (e instanceof ao) return null;
 				throw e;
 			}
 		},
@@ -3802,17 +3810,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			expiresAt: null,
 			lastError: null,
 			connectedAt: null
-		})) : Ya(e.store, e.registry, t)
+		})) : Qa(e.store, e.registry, t)
 	};
-}, Oo = (e, t) => {
+}, jo = (e, t) => {
 	let n = e.request?.subject?.id ?? null;
-	if (n === null || n === "") throw new xe({ connectionId: t });
+	if (n === null || n === "") throw new Ce({ connectionId: t });
 	return n;
-}, ko = (e, t) => {
+}, Mo = (e, t) => {
 	let n = e.registry.get(t);
-	if (n === void 0) throw new be({ connectionId: t });
+	if (n === void 0) throw new Se({ connectionId: t });
 	return n;
-}, Ao = (e) => async (t, n) => {
+}, No = (e) => async (t, n) => {
 	let r = n.request?.subject?.id ?? null;
 	return r === null || r === "" ? e.registry.list().map((e) => ({
 		connectionId: e.id,
@@ -3825,15 +3833,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		expiresAt: null,
 		lastError: null,
 		connectedAt: null
-	})) : Ya(n.store, e.registry, r);
-}, jo = (e) => async (t, n) => {
-	let r = ko(e, t.connectionId), i = Oo(n, t.connectionId);
-	if (r.kind !== "oauth2") throw new ye({
+	})) : Qa(n.store, e.registry, r);
+}, Po = (e) => async (t, n) => {
+	let r = Mo(e, t.connectionId), i = jo(n, t.connectionId);
+	if (r.kind !== "oauth2") throw new xe({
 		connectionId: t.connectionId,
 		expected: "oauth2",
 		actual: r.kind
 	});
-	return yo({
+	return So({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -3841,15 +3849,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		publicUrl: e.publicUrl,
 		...t.redirectTo === void 0 ? {} : { redirectTo: t.redirectTo }
 	});
-}, Mo = (e) => async (t, n) => {
-	let r = ko(e, t.connectionId), i = Oo(n, t.connectionId);
-	if (r.kind !== "pat") throw new ye({
+}, Fo = (e) => async (t, n) => {
+	let r = Mo(e, t.connectionId), i = jo(n, t.connectionId);
+	if (r.kind !== "pat") throw new xe({
 		connectionId: t.connectionId,
 		expected: "pat",
 		actual: r.kind
 	});
 	let a = t.token.trim();
-	if (a.length === 0) throw new k({
+	if (a.length === 0) throw new O({
 		connectionId: t.connectionId,
 		reason: "token is empty",
 		transient: !1
@@ -3858,13 +3866,13 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	if (r.validate !== void 0) try {
 		o = await r.validate(a);
 	} catch (e) {
-		throw new k({
+		throw new O({
 			connectionId: t.connectionId,
 			reason: `the provider rejected that token: ${e instanceof Error ? e.message : String(e)}`,
 			transient: !1
 		});
 	}
-	return await Ka({
+	return await Ya({
 		store: n.store,
 		definition: r,
 		subjectId: i,
@@ -3875,20 +3883,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		},
 		...o === void 0 ? {} : { account: o }
 	}), { ok: !0 };
-}, No = (e) => async (t, n) => {
-	ko(e, t.connectionId);
-	let r = Oo(n, t.connectionId);
-	return { ok: await Ja(n.store, t.connectionId, r) };
-}, Po = "admin:full", Fo = class extends L.TaggedError()("AccessDenied", {
+}, Io = (e) => async (t, n) => {
+	Mo(e, t.connectionId);
+	let r = jo(n, t.connectionId);
+	return { ok: await Za(n.store, t.connectionId, r) };
+}, Lo = "admin:full", Ro = class extends L.TaggedError()("AccessDenied", {
 	action: L.String,
 	resourceType: L.String,
 	resourceId: L.String
-}) {}, Io = /* @__PURE__ */ new Map(), Lo = (e) => {
+}) {}, zo = /* @__PURE__ */ new Map(), Bo = (e) => {
 	if (typeof e.resourceType != "string" || e.resourceType.length === 0) throw Error("defineResourcePolicy: a non-empty `resourceType` is required");
 	if (e.actions === void 0 || Object.keys(e.actions).length === 0) throw Error(`resource policy '${e.resourceType}': at least one action is required`);
-	if (Io.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
-	return Io.set(e.resourceType, e), e;
-}, Ro = (e) => Io.get(e), zo = () => [...Io.values()], Bo = () => Io.clear(), Vo = () => zo().map((e) => {
+	if (zo.has(e.resourceType)) throw Error(`resource policy '${e.resourceType}' is already registered — types must be unique`);
+	return zo.set(e.resourceType, e), e;
+}, Vo = (e) => zo.get(e), Ho = () => [...zo.values()], Uo = () => zo.clear(), Wo = () => Ho().map((e) => {
 	let t = /* @__PURE__ */ new Set();
 	for (let n of Object.values(e.actions)) for (let e of n) t.add(e);
 	for (let [n, r] of Object.entries(e.implies ?? {})) {
@@ -3901,7 +3909,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		relations: [...t],
 		implies: e.implies ?? {}
 	};
-}), Ho = (e, t) => {
+}), Go = (e, t) => {
 	let n = new Set(e);
 	if (t === void 0) return n;
 	let r = [...e];
@@ -3910,37 +3918,37 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let i of t[e] ?? []) n.has(i) || (n.add(i), r.push(i));
 	}
 	return n;
-}, Uo = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Ho(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), Wo = (e, t, n, r) => {
+}, Ko = (e, t, n, r) => e.id === null ? /* @__PURE__ */ new Set() : Go(n.filter((n) => n.subjectId === e.id && n.resourceType === t.type && n.resourceId === t.id).map((e) => e.relation), r.implies), qo = (e, t, n, r) => {
 	if (e.scopes?.includes("admin:full")) return !0;
 	if (e.id === null || n.tenantId != null && e.tenantId !== n.tenantId) return !1;
 	let i = r.policy.actions[t];
 	if (i === void 0 || i.length === 0) return !1;
-	let a = Uo(e, n, r.tuples, r.policy);
+	let a = Ko(e, n, r.tuples, r.policy);
 	return i.some((e) => a.has(e));
-}, Go = (e, t, n, r) => {
-	if (!Wo(e, t, n, r)) throw new Fo({
+}, Jo = (e, t, n, r) => {
+	if (!qo(e, t, n, r)) throw new Ro({
 		action: t,
 		resourceType: n.type,
 		resourceId: n.id
 	});
-}, Ko = (e, t, n, r, i) => r.filter((r) => Wo(e, t, {
+}, Yo = (e, t, n, r, i) => r.filter((r) => qo(e, t, {
 	type: n,
 	id: r.id,
 	...r.tenantId === void 0 ? {} : { tenantId: r.tenantId }
-}, i)), qo = (e, t) => {
+}, i)), Xo = (e, t) => {
 	let n = new Set(t.map((e) => e.id));
 	return e.filter((e) => !n.has(e.id)).map((e) => e.id);
-}, Jo = A({ scope: "voltro:policy" }), Yo, Xo = (e) => {
-	Yo = e;
-}, Zo = () => Yo, Qo = () => {
-	Pe((e) => M.gen(function* () {
-		let t = Ro(e.resourceType);
-		if (t === void 0) return Jo.warn("policy guard denied — no resource policy registered for this type", {
+}, Zo = k({ scope: "voltro:policy" }), Qo, $o = (e) => {
+	Qo = e;
+}, es = () => Qo, ts = () => {
+	Ie((e) => M.gen(function* () {
+		let t = Vo(e.resourceType);
+		if (t === void 0) return Zo.warn("policy guard denied — no resource policy registered for this type", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
-		let n = Yo;
-		if (n === void 0) return Jo.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
+		let n = Qo;
+		if (n === void 0) return Zo.warn("policy guard denied — no tuple source registered (call setTupleSource at boot)", {
 			resourceType: e.resourceType,
 			action: e.action
 		}), !1;
@@ -3951,11 +3959,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				resourceId: e.resourceId
 			}),
 			catch: (e) => e
-		}).pipe(M.catchAll((t) => (Jo.error("policy guard denied — tuple source failed", {
+		}).pipe(M.catchAll((t) => (Zo.error("policy guard denied — tuple source failed", {
 			resourceType: e.resourceType,
 			resourceId: e.resourceId
 		}, t), M.succeed([])))), i = e.subject;
-		return Wo({
+		return qo({
 			id: e.subject.id,
 			tenantId: i.tenantId ?? null,
 			...i.scopes === void 0 ? {} : { scopes: i.scopes }
@@ -3968,10 +3976,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			tuples: r
 		});
 	}));
-}, $o = (e) => {
+}, ns = (e) => {
 	Promise.resolve().then(e);
-}, es = (e) => {
-	let t = e.schedule ?? $o, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
+}, rs = (e) => {
+	let t = e.schedule ?? ns, n = /* @__PURE__ */ new Map(), r = /* @__PURE__ */ new Map(), i = (e, t) => `${e}${t}`, a = async (t) => {
 		let a = r.get(t);
 		if (a === void 0) return;
 		r.delete(t);
@@ -4017,11 +4025,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		load: async (e, t) => (await o(e, [t]))[0] ?? null,
 		loadMany: (e, t) => o(e, t)
 	};
-}, ts = N.effect(Ze.HttpClient, M.map(Ze.HttpClient, (e) => e.pipe(Ze.mapRequestEffect((e) => M.currentSpan.pipe(M.map((t) => e.headers.traceparent === void 0 ? Qe.setHeader(e, "traceparent", rr({
+}, is = N.effect(Qe.HttpClient, M.map(Qe.HttpClient, (e) => e.pipe(Qe.mapRequestEffect((e) => M.currentSpan.pipe(M.map((t) => e.headers.traceparent === void 0 ? $e.setHeader(e, "traceparent", ar({
 	traceId: t.traceId,
 	spanId: t.spanId,
 	sampled: t.sampled
-})) : e), M.catchAll(() => M.succeed(e))))))), ns = "voltro/audit", rs = "voltro/softDelete", is = "voltro/tenant", as = (e) => {
+})) : e), M.catchAll(() => M.succeed(e))))))), as = "voltro/audit", os = "voltro/softDelete", ss = "voltro/tenant", cs = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let n of e) {
 		let e = /* @__PURE__ */ new Set();
@@ -4064,49 +4072,49 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return !1;
 		},
 		idScheme: (e) => t.get(e)?.idScheme,
-		defaultFactories: (e) => t.get(e)?.defaultFactories ?? os,
-		computedFields: (e) => t.get(e)?.computedFields ?? ss,
+		defaultFactories: (e) => t.get(e)?.defaultFactories ?? ls,
+		computedFields: (e) => t.get(e)?.computedFields ?? us,
 		insertSchema: (e) => t.get(e)?.insertSchema,
 		validatePatchSchema: (e) => t.get(e)?.validatePatchSchema
 	};
-}, os = /* @__PURE__ */ new Map(), ss = /* @__PURE__ */ new Map(), cs = as([]), ls = class extends L.TaggedError()("NoRowFound", {
+}, ls = /* @__PURE__ */ new Map(), us = /* @__PURE__ */ new Map(), ds = cs([]), fs = class extends L.TaggedError()("NoRowFound", {
 	table: L.String,
 	found: L.Number
 }) {
 	get message() {
 		return this.found === 0 ? `expected exactly one row in '${this.table}', found none` : `expected exactly one row in '${this.table}', found more than one`;
 	}
-}, us = class extends L.TaggedError()("OptimisticLockError", {
+}, ps = class extends L.TaggedError()("OptimisticLockError", {
 	table: L.String,
 	expected: L.Number
 }) {
 	get message() {
 		return `optimistic lock failed on '${this.table}': expected version ${this.expected}`;
 	}
-}, ds = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), fs = (e) => {
-	if (e.length === 1 && ds(e[0])) return e[0];
+}, ms = (e) => typeof e == "object" && !!e && ("and" in e || "or" in e || "not" in e || "op" in e || "subquery" in e), hs = (e) => {
+	if (e.length === 1 && ms(e[0])) return e[0];
 	let t = e[0];
 	if (e.length === 2) return u(t, e[1]);
 	let n = e[1], r = e[2];
 	switch (n) {
 		case "=": return u(t, r);
 		case "!=":
-		case "<>": return T(t, r);
+		case "<>": return w(t, r);
 		case ">": return h(t, r);
 		case ">=": return g(t, r);
-		case "<": return w(t, r);
-		case "<=": return te(t, r);
+		case "<": return te(t, r);
+		case "<=": return ne(t, r);
 		case "in": return y(t, r);
 		case "like":
 		case "contains":
 		case "fts": return o(t, r);
 		default: return u(t, r);
 	}
-}, ps = (e) => {
+}, gs = (e) => {
 	let t = m(e);
 	if (t === void 0) throw Error(`unknown table '${e}' — is it declared with table()?`);
-	return re(t);
-}, ms = class e {
+	return ie(t);
+}, _s = class e {
 	backend;
 	scope;
 	table;
@@ -4120,7 +4128,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		return new e(this.backend, this.scope, this.table, t, this.skipTenant, this.skipSoftDelete);
 	}
 	where(...e) {
-		return this.clone(this.query.where(fs(e)));
+		return this.clone(this.query.where(hs(e)));
 	}
 	orderBy(e, t = "asc") {
 		return this.clone(this.query.orderBy(e, t));
@@ -4155,7 +4163,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	scopedQuery() {
 		let e = this.query, { subject: t, schemaRegistry: n } = this.scope;
 		!this.skipTenant && n.hasTenant(this.table) && t.tenantId != null && (e = e.where(u("tenantId", t.tenantId))), !this.skipSoftDelete && n.hasSoftDelete(this.table) && (e = e.where(S("deletedAt")));
-		let r = (this.scope.rowFilter ?? Mn)(this.table);
+		let r = (this.scope.rowFilter ?? Nn)(this.table);
 		return r !== void 0 && (e = e.where(r)), e;
 	}
 	async all() {
@@ -4169,11 +4177,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	async one() {
 		let e = await this.backend.query(this.scopedQuery().limit(2).descriptor), t = e[0];
-		if (t === void 0) throw new ls({
+		if (t === void 0) throw new fs({
 			table: this.table,
 			found: 0
 		});
-		if (e.length > 1) throw new ls({
+		if (e.length > 1) throw new fs({
 			table: this.table,
 			found: e.length
 		});
@@ -4189,7 +4197,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	get descriptor() {
 		return this.scopedQuery().descriptor;
 	}
-}, hs = class {
+}, vs = class {
 	backend;
 	scope;
 	table;
@@ -4200,7 +4208,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = fs(e);
+		let n = hs(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -4224,7 +4232,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	async set(e) {
 		let t = await this.backend.updateMany(this.table, e, { where: this.scopedWhere() });
-		if (this.expectedVersion !== void 0 && t === 0) throw new us({
+		if (this.expectedVersion !== void 0 && t === 0) throw new ps({
 			table: this.table,
 			expected: this.expectedVersion
 		});
@@ -4233,7 +4241,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	async restore() {
 		return this.backend.updateMany(this.table, { deletedAt: null }, { where: this.scopedWhere() });
 	}
-}, gs = class {
+}, ys = class {
 	backend;
 	scope;
 	table;
@@ -4243,7 +4251,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		this.backend = e, this.scope = t, this.table = n;
 	}
 	where(...e) {
-		let n = fs(e);
+		let n = hs(e);
 		return this.predicate = this.predicate ? t(this.predicate, n) : n, this;
 	}
 	unscoped() {
@@ -4264,32 +4272,32 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	async hard() {
 		return this.backend.deleteMany(this.table, { where: this.scopedWhere() });
 	}
-}, _s = (e, t) => ({
-	select: (n) => new ms(e, t, n, ps(n)),
-	updateWhere: (n) => new hs(e, t, n),
-	deleteWhere: (n) => new gs(e, t, n)
-}), vs = "id", ys = (e) => "descriptor" in e ? e.descriptor : e, bs = (e, t) => {
+}, bs = (e, t) => ({
+	select: (n) => new _s(e, t, n, gs(n)),
+	updateWhere: (n) => new vs(e, t, n),
+	deleteWhere: (n) => new ys(e, t, n)
+}), xs = "id", Ss = (e) => "descriptor" in e ? e.descriptor : e, Cs = (e, t) => {
 	let n = {};
 	for (let r of t) e[r] !== void 0 && (n[r] = e[r]);
 	return n;
-}, xs = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", Ss = (e) => {
-	throw new Vi({
+}, ws = "cannot insert into tenant-scoped table without an authenticated tenant — subject.tenantId is null. Either authenticate first or pass tenantId explicitly in the row (admin tooling).", Ts = (e) => {
+	throw new Wi({
 		table: e,
-		reason: xs
+		reason: ws
 	});
-}, Cs = (e, n) => {
-	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Mn, o = (e, t) => {
+}, Es = (e, n) => {
+	let r = n.subject.id, i = n.subject.tenantId, a = n.rowFilter ?? Nn, o = (e, t) => {
 		let a = { ...t }, o = n.schemaRegistry, s = o.idScheme(e);
-		if (s !== void 0 && a[vs] == null) if (s.kind === "numeric") delete a[vs];
+		if (s !== void 0 && a[xs] == null) if (s.kind === "numeric") delete a[xs];
 		else {
 			let t = f(s, e);
-			t !== null && (a[vs] = t);
+			t !== null && (a[xs] = t);
 		}
 		if (o.hasAudit(e)) {
 			let e = /* @__PURE__ */ new Date();
 			"createdAt" in a || (a.createdAt = e), "updatedAt" in a || (a.updatedAt = e), r !== null && ("createdBy" in a || (a.createdBy = r), "updatedBy" in a || (a.updatedBy = r));
 		}
-		o.hasTenant(e) && ("tenantId" in a || (i === null && Ss(e), a.tenantId = i));
+		o.hasTenant(e) && ("tenantId" in a || (i === null && Ts(e), a.tenantId = i));
 		let c = o.defaultFactories(e);
 		if (c.size > 0) for (let [e, t] of c) (!(e in a) || a[e] === void 0) && (a[e] = t());
 		let l = o.computedFields(e);
@@ -4304,10 +4312,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		try {
 			return await r();
 		} catch (n) {
-			let r = Gt(n);
-			if (Kt(r)) {
+			let r = Kt(n);
+			if (qt(r)) {
 				let n = t.tenantId, i = `${r.dbConstraint ?? ""} ${r.dbColumn ?? ""} ${r.dbMessage ?? ""} ${r.dbCauseChain ?? ""}`.toLowerCase();
-				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Vi({
+				if (i.includes("tenantid") || /\btenants\b/.test(i) || n != null && i.includes(String(n).toLowerCase())) throw new Wi({
 					table: e,
 					reason: n == null ? "write references a tenant that does not exist" : `tenant '${String(n)}' does not exist — seed the row in \`tenants\`, or fix how the request resolved this tenant (subject.tenantId / the x-tenant header / the dev TENANT fallback)`
 				});
@@ -4328,11 +4336,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		if (r === void 0) return t;
 		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = St.formatErrorSync(i.left).map((e) => ({
+		let a = Ct.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Ui({
+		throw new Ki({
 			table: e,
 			summary: o === void 0 ? "patch validation failed" : `${o.path}: ${o.message}`,
 			issues: a
@@ -4345,20 +4353,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		if (r === void 0) return t;
 		let i = L.decodeUnknownEither(r)(t);
 		if (i._tag === "Right") return t;
-		let a = St.formatErrorSync(i.left).map((e) => ({
+		let a = Ct.formatErrorSync(i.left).map((e) => ({
 			path: e.path.length === 0 ? "<root>" : e.path.join("."),
 			message: e.message
 		})), o = a[0];
-		throw new Ui({
+		throw new Ki({
 			table: e,
 			summary: o === void 0 ? "row validation failed" : `${o.path}: ${o.message}`,
 			issues: a
 		});
 	}, y = n.dialect, b = (e, t) => {
 		let n = m(e);
-		return l(y ? se(t, n, y) : t, n, pi());
+		return l(y ? le(t, n, y) : t, n, hi());
 	}, x = (e, t) => {
-		let n = m(e), r = s(t, n, pi());
+		let n = m(e), r = s(t, n, hi());
 		return y ? c(r, n, y) : r;
 	}, C = (e) => {
 		let r = e.table, o = e.predicate;
@@ -4370,20 +4378,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let e = S("deletedAt");
 			o = o ? t(o, e) : e;
 		}
-		return o = In(a, r, o), o === e.predicate ? e : {
+		return o = Ln(a, r, o), o === e.predicate ? e : {
 			...e,
 			predicate: o
 		};
 	}, ee = async (t) => {
 		let n = await e.query(t);
 		return x(t.table, n);
-	}, w = async (e) => ee(C(e)), te = async (t, r, i) => {
+	}, te = async (e) => ee(C(e)), ne = async (t, r, i) => {
 		let a = d(t, i);
 		if (n.schemaRegistry.computedFields(t).size > 0) {
 			let n = (await e.query({
 				table: t,
 				predicate: {
-					column: vs,
+					column: xs,
 					op: "eq",
 					value: r
 				},
@@ -4398,16 +4406,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		a = g(t, a);
 		let o = await e.update(t, r, b(t, a));
 		return o === null ? null : x(t, [o])[0];
-	}, T = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, _()) !== null : e.delete(t, r), ne = async (t, n, r) => e.updateMany(t, b(t, d(t, n)), r), re = async (t, n) => e.deleteMany(t, n), ie = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, ae = async (e, t, n) => ne(e, t, {
+	}, w = async (t, r) => n.schemaRegistry.hasSoftDelete(t) ? await e.update(t, r, _()) !== null : e.delete(t, r), re = async (t, n, r) => e.updateMany(t, b(t, d(t, n)), r), ie = async (t, n) => e.deleteMany(t, n), ae = (e, r) => i != null && n.schemaRegistry.hasTenant(e) ? t(r, u("tenantId", i)) : r, oe = async (e, t, n) => re(e, t, {
 		...n,
-		where: ie(e, n.where)
-	}), oe = async (e, t) => re(e, {
+		where: ae(e, n.where)
+	}), se = async (e, t) => ie(e, {
 		...t,
-		where: ie(e, t.where)
-	}), ce = _s({
+		where: ae(e, t.where)
+	}), ce = bs({
 		query: ee,
-		updateMany: ne,
-		deleteMany: re,
+		updateMany: re,
+		deleteMany: ie,
 		delete: (t, n) => e.delete(t, n)
 	}, {
 		subject: n.subject,
@@ -4415,28 +4423,28 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		rowFilter: a
 	});
 	return {
-		query: w,
+		query: te,
 		one: (async (e) => {
-			let t = ys(e), n = await w({
+			let t = Ss(e), n = await te({
 				...t,
 				take: 2
 			}), r = n[0];
-			if (r === void 0) throw new ls({
+			if (r === void 0) throw new fs({
 				table: t.table,
 				found: 0
 			});
-			if (n.length > 1) throw new ls({
+			if (n.length > 1) throw new fs({
 				table: t.table,
 				found: n.length
 			});
 			return r;
 		}),
-		first: (async (e) => (await w({
-			...ys(e),
+		first: (async (e) => (await te({
+			...Ss(e),
 			take: 1
 		}))[0] ?? null),
-		maybeOne: (async (e) => (await w({
-			...ys(e),
+		maybeOne: (async (e) => (await te({
+			...Ss(e),
 			take: 1
 		}))[0] ?? null),
 		insert: async (t, n) => {
@@ -4452,12 +4460,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return a === null ? null : x(t, [a])[0];
 		},
 		select: ce.select,
-		update: ((e, t, n) => t === void 0 ? ce.updateWhere(e) : te(e, t, n)),
-		delete: ((e, t) => t === void 0 ? ce.deleteWhere(e) : T(e, t)),
-		applyDefined: bs,
+		update: ((e, t, n) => t === void 0 ? ce.updateWhere(e) : ne(e, t, n)),
+		delete: ((e, t) => t === void 0 ? ce.deleteWhere(e) : w(e, t)),
+		applyDefined: Cs,
 		hardDelete: async (t, n) => e.delete(t, n),
-		updateMany: ae,
-		deleteMany: oe,
+		updateMany: oe,
+		deleteMany: se,
 		upsert: async (t, n, r) => {
 			let i = o(t, n), a = await p(t, i, () => e.upsert(t, b(t, v(t, i)), r));
 			return x(t, [a])[0];
@@ -4466,34 +4474,34 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let i = o(t, n), a = await p(t, i, () => e.insertIgnore(t, b(t, v(t, i)), r));
 			return x(t, [a])[0];
 		},
-		transactional: (t) => e.transactional(async (e) => t(Cs(e, n))),
+		transactional: (t) => e.transactional(async (e) => t(Es(e, n))),
 		...e.raw ? { raw: e.raw.bind(e) } : {},
 		onChange: (t) => e.onChange(t),
 		injectExternalChange: (t) => e.injectExternalChange(t),
 		...e.changeScope === void 0 ? {} : { changeScope: e.changeScope }
 	};
-}, ws = class extends L.TaggedError()("CircuitOpen", {
+}, Ds = class extends L.TaggedError()("CircuitOpen", {
 	name: L.String,
 	retryAfterMs: L.Number
-}) {}, Ts = {
+}) {}, Os = {
 	tag: "closed",
 	failureCount: 0,
 	halfOpenSuccesses: 0,
 	openedAt: 0
-}, Es = { make: (e) => M.gen(function* () {
-	let t = e.name ?? "circuit", n = Ve.toMillis(Ve.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(Ts), o = M.gen(function* () {
+}, ks = { make: (e) => M.gen(function* () {
+	let t = e.name ?? "circuit", n = He.toMillis(He.decode(e.resetTimeout)), r = e.halfOpenSuccessThreshold ?? 1, i = e.isFailure ?? (() => !0), a = yield* I.make(Os), o = M.gen(function* () {
 		let e = yield* I.get(a);
 		if (e.tag === "half-open") {
 			let t = e.halfOpenSuccesses + 1;
-			yield* I.set(a, t >= r ? Ts : {
+			yield* I.set(a, t >= r ? Os : {
 				...e,
 				halfOpenSuccesses: t
 			});
 			return;
 		}
-		e.failureCount !== 0 && (yield* I.set(a, Ts));
+		e.failureCount !== 0 && (yield* I.set(a, Os));
 	}), s = M.gen(function* () {
-		let t = yield* Le.currentTimeMillis, n = yield* I.get(a);
+		let t = yield* ze.currentTimeMillis, n = yield* I.get(a);
 		if (n.tag === "half-open" || n.tag === "open") {
 			yield* I.set(a, {
 				tag: "open",
@@ -4516,7 +4524,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}), c = M.gen(function* () {
 		let e = yield* I.get(a);
 		if (e.tag !== "open") return null;
-		let t = (yield* Le.currentTimeMillis) - e.openedAt;
+		let t = (yield* ze.currentTimeMillis) - e.openedAt;
 		return t >= n ? (yield* I.set(a, {
 			tag: "half-open",
 			failureCount: 0,
@@ -4526,10 +4534,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}), l = (e) => M.gen(function* () {
 		let n = yield* c;
 		return n === null ? yield* e.pipe(M.tap(() => o), M.tapErrorCause((e) => {
-			if (j.isInterruptedOnly(e)) return M.void;
-			let t = j.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
+			if (A.isInterruptedOnly(e)) return M.void;
+			let t = A.failureOption(e), n = t._tag === "Some" ? t.value : void 0;
 			return i(n) ? s : M.void;
-		})) : yield* M.fail(new ws({
+		})) : yield* M.fail(new Ds({
 			name: t,
 			retryAfterMs: n
 		}));
@@ -4538,25 +4546,25 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		value: I.get(a).pipe(M.map((e) => e.tag)),
 		enumerable: !0
 	}), Object.defineProperty(u, "reset", {
-		value: I.set(a, Ts),
+		value: I.set(a, Os),
 		enumerable: !0
 	}), u;
-}) }, Ds, Os = (e) => {
-	Ds = e;
-}, ks = () => {
-	Ds = void 0;
-}, As = () => Ds, js = async (e, t = {}) => {
-	let n = t.scopes === void 0 ? Fe(t.id ?? "system") : Fe(t.id ?? "system", t.scopes), r = t.store ?? Ds?.dataStore, i = t.schemaRegistry ?? Ds?.schemaRegistry, a = t.dialect ?? Ds?.dialect;
+}) }, As, js = (e) => {
+	As = e;
+}, Ms = () => {
+	As = void 0;
+}, Ns = () => As, Ps = async (e, t = {}) => {
+	let n = t.scopes === void 0 ? Le(t.id ?? "system") : Le(t.id ?? "system", t.scopes), r = t.store ?? As?.dataStore, i = t.schemaRegistry ?? As?.schemaRegistry, a = t.dialect ?? As?.dialect;
 	if (r === void 0 || i === void 0) throw Error("runAsSystem: no data store available — register one at boot via setSystemStoreHandle({ dataStore, schemaRegistry }) or pass { store, schemaRegistry } in the options.");
 	return e({
 		subject: n,
-		store: Cs(r, {
+		store: Es(r, {
 			subject: n,
 			schemaRegistry: i,
 			...a === void 0 ? {} : { dialect: a }
 		})
 	});
-}, Ms = (e) => {
+}, Fs = (e) => {
 	let { currentRegion: t, replicaRegions: n, inner: r } = e, i = (e) => {
 		if (t === void 0) return {
 			sameRegion: [],
@@ -4584,7 +4592,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return r.loadSnapshot();
 		}
 	};
-}, Ns = (e = process.env) => {
+}, Is = (e = process.env) => {
 	for (let t of [
 		"VOLTRO_REGION",
 		"AWS_REGION",
@@ -4596,7 +4604,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		let n = e[t];
 		if (typeof n == "string" && n.length > 0) return n;
 	}
-}, Ps = () => {
+}, Ls = () => {
 	let e = {
 		primary: 0,
 		lagByReplica: /* @__PURE__ */ new Map()
@@ -4621,27 +4629,27 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			e.lagByReplica.set(t, n);
 		}
 	};
-}, Fs = Symbol.for("@voltro/ScheduleDefinition"), Is = (e) => typeof e == "object" && !!e && Fs in e, Ls = 30 * 6e4, Rs = (e) => {
-	let t = ze.parse(e.cron, e.timezone);
-	if (He.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
+}, Rs = Symbol.for("@voltro/ScheduleDefinition"), zs = (e) => typeof e == "object" && !!e && Rs in e, Bs = 30 * 6e4, Vs = (e) => {
+	let t = j.parse(e.cron, e.timezone);
+	if (Ue.isLeft(t)) throw Error(`defineSchedule("${e.name}"): invalid cron expression "${e.cron}" (tz="${e.timezone}") — ${String(t.left)}`);
 	if (!e.timezone || e.timezone.trim() === "") throw Error(`defineSchedule("${e.name}"): timezone is required (e.g. "UTC", "Europe/Berlin")`);
 	if (e.handler === void 0 && e.workflow === void 0) throw Error(`defineSchedule("${e.name}"): define either handler or workflow`);
 	return {
 		...e,
 		onOverlap: e.onOverlap ?? "skip",
 		backfill: e.backfill ?? "skip",
-		maxRuntimeMs: e.maxRuntimeMs ?? Ls,
-		[Fs]: !0
+		maxRuntimeMs: e.maxRuntimeMs ?? Bs,
+		[Rs]: !0
 	};
-}, zs = (e) => ze.unsafeParse(e.cron, e.timezone), Bs = (e, t = /* @__PURE__ */ new Date()) => ze.next(zs(e), t), Z = "_voltro_wakeups", Vs = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Hs = (e) => ({
+}, Hs = (e) => j.unsafeParse(e.cron, e.timezone), Us = (e, t = /* @__PURE__ */ new Date()) => j.next(Hs(e), t), Z = "_voltro_wakeups", Ws = (e) => `${e.tenantId}:${e.kind}:${e.refId}`, Gs = (e) => ({
 	tenantId: String(e.tenantId),
 	kind: String(e.kind),
 	refId: String(e.refId),
 	wakeAt: e.wakeAt instanceof Date ? e.wakeAt : new Date(String(e.wakeAt)),
 	status: e.status === "fired" ? "fired" : "pending"
-}), Us = async (e, t) => {
+}), Ks = async (e, t) => {
 	await e.upsert(Z, {
-		id: Vs(t),
+		id: Ws(t),
 		tenantId: t.tenantId,
 		kind: t.kind,
 		refId: t.refId,
@@ -4651,7 +4659,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		conflictColumns: ["id"],
 		update: ["wakeAt", "status"]
 	});
-}, Ws = async (e, t) => e.delete(Z, Vs(t)), Gs = async (e, t) => await e.update(Z, Vs(t), { status: "fired" }) !== null, Ks = (e, t) => ({ and: [{
+}, qs = async (e, t) => e.delete(Z, Ws(t)), Js = async (e, t) => await e.update(Z, Ws(t), { status: "fired" }) !== null, Ys = (e, t) => ({ and: [{
 	column: "id",
 	op: "eq",
 	value: e
@@ -4659,16 +4667,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	column: "status",
 	op: "eq",
 	value: t
-}] }), qs = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Ks(Vs(t), "pending") }) > 0, Js = async (e, t) => {
-	await e.updateMany(Z, { status: "pending" }, { where: Ks(Vs(t), "fired") });
-}, Ys = {
+}] }), Xs = async (e, t) => await e.updateMany(Z, { status: "fired" }, { where: Ys(Ws(t), "pending") }) > 0, Zs = async (e, t) => {
+	await e.updateMany(Z, { status: "pending" }, { where: Ys(Ws(t), "fired") });
+}, Qs = {
 	column: "status",
 	op: "eq",
 	value: "pending"
-}, Xs = async (e, t) => {
+}, $s = async (e, t) => {
 	let n = {
 		table: Z,
-		predicate: Ys,
+		predicate: Qs,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4677,18 +4685,18 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		skip: void 0,
 		projection: void 0
 	};
-	return (await e.query(n)).map(Hs);
-}, Zs = async (e, t, n = 500) => {
-	let r = await Xs(e, n), i = t.getTime();
+	return (await e.query(n)).map(Gs);
+}, ec = async (e, t, n = 500) => {
+	let r = await $s(e, n), i = t.getTime();
 	return r.filter((e) => e.wakeAt.getTime() <= i);
-}, Qs = async (e) => (await Xs(e, 1))[0] ?? null, $s = {
+}, tc = async (e) => (await $s(e, 1))[0] ?? null, nc = {
 	column: "status",
 	op: "eq",
 	value: "fired"
-}, ec = async (e, t = {}) => {
+}, rc = async (e, t = {}) => {
 	let n = {
 		table: Z,
-		predicate: $s,
+		predicate: nc,
 		order: [{
 			column: "wakeAt",
 			direction: "asc"
@@ -4699,12 +4707,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}, r = await e.query(n), i = t.firedOlderThan?.getTime(), a = 0;
 	for (let t of r) i !== void 0 && (t.wakeAt instanceof Date ? t.wakeAt : new Date(String(t.wakeAt))).getTime() >= i || await e.delete(Z, String(t.id)) && a++;
 	return a;
-}, tc = {
+}, ic = Ui, ac = "default", oc = {
 	kind: "single",
 	tryClaim: async () => !0
-}, nc = "_voltro_schedule_claims", rc = (e, t, n) => {
+}, sc = "_voltro_schedule_claims", cc = (e, t, n) => {
 	let r = async (t) => (await e.query({
-		table: nc,
+		table: sc,
 		order: [],
 		predicate: void 0,
 		projection: ["id"],
@@ -4719,7 +4727,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				if (await r(s)) return !1;
 			} catch {}
 			try {
-				return await e.insert(nc, {
+				return await e.insert(sc, {
 					id: s,
 					scheduleName: i,
 					bucket: o,
@@ -4737,12 +4745,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			}
 		}
 	};
-}, ic = "_voltro_schedule_runs", ac = async (e, t) => {
+}, lc = "_voltro_schedule_runs", uc = async (e, t) => {
 	let { store: n, coordinator: r, buildContext: i, replicaId: a, log: o, onRunEvent: s, interceptFire: c } = t, l = t.dormancy === "sleep", u = t.dormancyTenantId ?? "default", d = /* @__PURE__ */ new Map(), f = /* @__PURE__ */ new Set(), p = /* @__PURE__ */ new Map(), m = !1, h = new Map(e.map((e) => [e.name, e])), g = (e, t) => {
-		s?.(e, sc(t));
+		s?.(e, fc(t));
 	}, _ = async (e, t, r, i, s, c) => {
 		try {
-			let o = `sr_${me()}`, l = await n.insert(ic, {
+			let o = `sr_${ge()}`, l = await n.insert(lc, {
 				id: o,
 				name: e.name,
 				status: i,
@@ -4767,7 +4775,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}
 	}, v = async (e, t) => {
 		try {
-			let r = await n.update(ic, e, t);
+			let r = await n.update(lc, e, t);
 			r && g("update", r);
 		} catch (t) {
 			o.warn("schedule: failed to record run finish", {
@@ -4778,7 +4786,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}, y = async (e) => {
 		try {
 			let t = await n.query({
-				table: ic,
+				table: lc,
 				predicate: {
 					_tag: "leaf",
 					column: "status",
@@ -4812,7 +4820,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				traceId: `schedule-${e.name}-${a.getTime()}`,
 				scheduleName: e.name,
 				trigger: n,
-				runId: s
+				runId: s,
+				subject: ic
 			})
 		};
 		try {
@@ -4843,7 +4852,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let n = Q(t).includes("exceeded maxRuntimeMs");
 			s && await v(s, {
 				status: "failed",
-				errorTag: n ? "timeout" : oc(t),
+				errorTag: n ? "timeout" : dc(t),
 				errorMessage: Q(t),
 				completedAt: /* @__PURE__ */ new Date(),
 				durationMs: Date.now() - l
@@ -4851,7 +4860,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				name: e.name,
 				reason: Q(t),
 				timeout: n
-			}), Me({
+			}), Pe({
 				error: t,
 				source: "schedule",
 				name: e.name,
@@ -4900,8 +4909,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}
 	}, C = async (e) => {
 		try {
-			let t = ze.next(zs(e), /* @__PURE__ */ new Date());
-			await Us(n, {
+			let t = j.next(Hs(e), /* @__PURE__ */ new Date());
+			await Ks(n, {
 				tenantId: u,
 				kind: "schedule",
 				refId: e.name,
@@ -4913,9 +4922,9 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				reason: Q(t)
 			});
 		}
-	}, ee = 2147483647, w = (e) => {
+	}, ee = 2147483647, te = (e) => {
 		if (m) return;
-		let n = zs(e), r = ze.next(n, /* @__PURE__ */ new Date()), i = () => {
+		let n = Hs(e), r = j.next(n, /* @__PURE__ */ new Date()), i = () => {
 			if (m) return;
 			let n = r.getTime() - Date.now();
 			if (n > ee) {
@@ -4927,17 +4936,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				x(e, r, e.trigger ?? t.defaultTrigger).catch((t) => o.warn("schedule: fire rejected", {
 					name: e.name,
 					reason: Q(t)
-				})).finally(() => w(e));
+				})).finally(() => te(e));
 			}, Math.max(0, n));
 			d.set(e.name, a);
 		};
 		i();
-	}, te = async (e) => {
+	}, ne = async (e) => {
 		if (e.backfill === "skip") return;
 		let r;
 		try {
 			let t = (await n.query({
-				table: ic,
+				table: lc,
 				order: [{
 					column: "scheduledAt",
 					direction: "desc"
@@ -4956,8 +4965,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			return;
 		}
 		if (!r) return;
-		let i = zs(e), a = [], s = ze.next(i, r), c = Date.now();
-		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = ze.next(i, s);
+		let i = Hs(e), a = [], s = j.next(i, r), c = Date.now();
+		for (; s.getTime() < c && a.length < 1e3;) a.push(s), s = j.next(i, s);
 		if (a.length !== 0) if (o.info("schedule: backfill", {
 			name: e.name,
 			missed: a.length,
@@ -4967,20 +4976,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let n = a[a.length - 1];
 			await x(e, n, e.trigger ?? t.defaultTrigger);
 		} else for (let n of a) await x(e, n, e.trigger ?? t.defaultTrigger);
-	}, T = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
+	}, w = e.filter((e) => (e.trigger ?? t.defaultTrigger) === "self");
 	o.info("scheduler: starting", {
 		total: e.length,
-		self: T.length,
-		external: e.length - T.length,
+		self: w.length,
+		external: e.length - w.length,
 		coordinator: r.kind
 	});
-	let ne = (t.armSelf ?? !0) && !l;
+	let re = (t.armSelf ?? !0) && !l;
 	if (l) {
-		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: T.length });
-		for (let e of T) await C(e);
-	} else if (ne) {
-		for (let e of T) await te(e);
-		for (let e of T) w(e);
+		o.info("scheduler: sleep mode — registering wakeups, not arming timers", { count: w.length });
+		for (let e of w) await C(e);
+	} else if (re) {
+		for (let e of w) await ne(e);
+		for (let e of w) te(e);
 	}
 	return {
 		fireNow: async (e, t) => {
@@ -5001,11 +5010,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			d.clear(), o.info("scheduler: stopped");
 		}
 	};
-}, Q = (e) => e?.message ?? String(e), oc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, sc = (e) => {
+}, Q = (e) => e?.message ?? String(e), dc = (e) => e && typeof e == "object" && "_tag" in e ? String(e._tag) : null, fc = (e) => {
 	let t = {};
 	for (let [n, r] of Object.entries(e)) t[n] = r instanceof Date ? r.toISOString() : r;
 	return t;
-}, cc = (e, t, n, r) => {
+}, pc = (e, t, n, r) => {
 	let i = !1, a, o = async () => {
 		if (i) return;
 		let a = new Date(Math.floor(Date.now() / t) * t), o = !1;
@@ -5035,96 +5044,96 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			i || (i = !0, a && clearInterval(a), a = void 0);
 		}
 	};
-}, lc = (e) => (t, n, r) => cc(t, n, r, e), uc = E("_voltro_schedule_runs", {
+}, mc = (e) => (t, n, r) => pc(t, n, r, e), hc = T("_voltro_schedule_runs", {
 	id: v({ prefix: "schrun" }),
-	name: D(),
-	status: D().oneOf([
+	name: E(),
+	status: E().oneOf([
 		"running",
 		"succeeded",
 		"failed",
 		"skipped",
 		"missed"
 	]).default("running"),
-	trigger: D().oneOf([
+	trigger: E().oneOf([
 		"self",
 		"external",
 		"manual"
 	]).default("self"),
-	scheduledAt: O(),
-	firedAt: O().nullable(),
-	completedAt: O().nullable(),
+	scheduledAt: D(),
+	firedAt: D().nullable(),
+	completedAt: D().nullable(),
 	durationMs: b().nullable(),
-	errorTag: D().nullable(),
-	errorMessage: D().nullable(),
-	coordinationOutcome: D().oneOf([
+	errorTag: E().nullable(),
+	errorMessage: E().nullable(),
+	coordinationOutcome: E().oneOf([
 		"single",
 		"wonLock",
 		"lostLock",
 		"external",
 		"cluster"
 	]).nullable(),
-	replicaId: D().nullable(),
+	replicaId: E().nullable(),
 	result: C().nullable()
-}).index(["name", "scheduledAt"]).index(["status"]), dc = E("_voltro_schedule_claims", {
+}).index(["name", "scheduledAt"]).index(["status"]), gc = T("_voltro_schedule_claims", {
 	id: v({ prefix: "schclaim" }),
-	scheduleName: D(),
-	bucket: D(),
-	claimedBy: D(),
-	claimedAt: O()
-}).index(["scheduleName", "bucket"]).index(["claimedAt"]), fc = E("_voltro_traces", {
+	scheduleName: E(),
+	bucket: E(),
+	claimedBy: E(),
+	claimedAt: D()
+}).index(["scheduleName", "bucket"]).index(["claimedAt"]), _c = T("_voltro_traces", {
 	id: v({ prefix: "span" }),
-	traceId: D(),
-	spanId: D(),
-	parentSpanId: D().nullable(),
-	name: D(),
-	kind: D().oneOf([
+	traceId: E(),
+	spanId: E(),
+	parentSpanId: E().nullable(),
+	name: E(),
+	kind: E().oneOf([
 		"internal",
 		"server",
 		"client",
 		"producer",
 		"consumer"
 	]).default("internal"),
-	status: D().oneOf([
+	status: E().oneOf([
 		"ok",
 		"error",
 		"unset"
 	]).default("unset"),
-	statusMessage: D().nullable(),
-	startedAt: O(),
-	endedAt: O(),
+	statusMessage: E().nullable(),
+	startedAt: D(),
+	endedAt: D(),
 	durationMs: b(),
 	attributes: C().nullable(),
 	events: C().nullable()
-}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), pc = E("_voltro_undo_log", {
+}).index(["traceId", "startedAt"]).index(["startedAt"]).index(["status"]), vc = T("_voltro_undo_log", {
 	id: v({ prefix: "undo" }),
-	tag: D(),
-	label: D().nullable(),
-	subjectId: D().nullable(),
-	tenantId: D().nullable(),
-	traceId: D().nullable(),
-	changes: D(),
+	tag: E(),
+	label: E().nullable(),
+	subjectId: E().nullable(),
+	tenantId: E().nullable(),
+	traceId: E().nullable(),
+	changes: E(),
 	crossesAction: r().default(!1),
 	undone: r().default(!1),
-	createdAt: O().default("now")
-}).index(["subjectId", "createdAt"]).reactive(), mc = (e = process.env) => {
+	createdAt: D().default("now")
+}).index(["subjectId", "createdAt"]).reactive(), yc = (e = process.env) => {
 	let t = (e.VOLTRO_UNDO ?? "").toLowerCase();
 	return t === "on" || t === "1" || t === "true" ? !0 : t === "off" || t === "0" || t === "false" ? !1 : e.NODE_ENV !== "production";
-}, hc = (e) => e.startsWith("_voltro"), gc = async (e, t, n) => (await e.query({
+}, bc = (e) => e.startsWith("_voltro"), xc = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, _c = (e, t) => new Proxy(e, { get(e, n, r) {
+}))[0] ?? null, Sc = (e, t) => new Proxy(e, { get(e, n, r) {
 	if (n === "insert") return async (n, r) => {
 		let i = await e.insert(n, r);
-		return hc(n) || t({
+		return bc(n) || t({
 			table: n,
 			op: "insert",
 			next: i
 		}), i;
 	};
 	if (n === "update") return async (n, r, i) => {
-		let a = hc(n) ? null : await gc(e, n, r), o = await e.update(n, r, i);
-		return hc(n) || t({
+		let a = bc(n) ? null : await xc(e, n, r), o = await e.update(n, r, i);
+		return bc(n) || t({
 			table: n,
 			op: "update",
 			id: r,
@@ -5133,8 +5142,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}), o;
 	};
 	if (n === "delete") return async (n, r) => {
-		let i = hc(n) ? null : await gc(e, n, r), a = await e.delete(n, r);
-		return !hc(n) && a && t({
+		let i = bc(n) ? null : await xc(e, n, r), a = await e.delete(n, r);
+		return !bc(n) && a && t({
 			table: n,
 			op: "delete",
 			id: r,
@@ -5143,10 +5152,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	};
 	let i = Reflect.get(e, n, r);
 	return typeof i == "function" ? i.bind(e) : i;
-} }), vc = (e) => {
+} }), Cc = (e) => {
 	let t = [];
 	return {
-		tx: _c(e, (e) => t.push(e)),
+		tx: Sc(e, (e) => t.push(e)),
 		persist: async (e, n) => {
 			if (t.length === 0 || n.tag.startsWith("__voltro")) return;
 			let r = n.subject;
@@ -5162,14 +5171,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			});
 		}
 	};
-}, yc = (e) => {
+}, wc = (e) => {
 	if (e.id !== void 0) return e.id;
 	let t = e.next?.id;
 	if (typeof t == "string") return t;
 	let n = e.prev?.id;
 	return typeof n == "string" ? n : void 0;
-}, bc = (e) => {
-	let t = yc(e);
+}, Tc = (e) => {
+	let t = wc(e);
 	switch (e.op) {
 		case "insert": return t === void 0 ? null : {
 			table: e.table,
@@ -5193,28 +5202,28 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			row: e.prev
 		};
 	}
-}, xc = (e) => {
-	if (e.crossesAction) throw new Sc(e.invocationId, "action");
+}, Ec = (e) => {
+	if (e.crossesAction) throw new Dc(e.invocationId, "action");
 	let t = [];
 	for (let n = e.changes.length - 1; n >= 0; --n) {
-		let r = bc(e.changes[n]);
+		let r = Tc(e.changes[n]);
 		r !== null && t.push(r);
 	}
 	return t;
-}, Sc = class extends Error {
+}, Dc = class extends Error {
 	invocationId;
 	boundary;
 	_tag = "UndoBoundaryError";
 	constructor(e, t) {
 		super(t === "action" ? `cannot undo invocation ${e}: it crossed an action (external side effect)` : `cannot undo invocation ${e}: the row changed since (conflict)`), this.invocationId = e, this.boundary = t, this.name = "UndoBoundaryError";
 	}
-}, Cc = (e, t, n = ["updatedAt", "updatedBy"]) => {
+}, Oc = (e, t, n = ["updatedAt", "updatedBy"]) => {
 	if (t == null) return e == null;
 	if (e == null) return !1;
 	let r = new Set(n);
 	for (let [n, i] of Object.entries(t)) if (!r.has(n) && !Object.is(e[n], i) && JSON.stringify(e[n]) !== JSON.stringify(i)) return !1;
 	return !0;
-}, wc = class {
+}, kc = class {
 	capacity;
 	done = [];
 	undone = [];
@@ -5250,7 +5259,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			redo: [...this.undone]
 		};
 	}
-}, Tc = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
+}, Ac = (e, t = /* @__PURE__ */ new Set()) => e.op === "insert" ? {
 	table: e.table,
 	op: "insert",
 	next: e.new ?? null
@@ -5267,7 +5276,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	table: e.table,
 	op: "delete",
 	prev: e.old ?? null
-}, Ec = async (e, t) => {
+}, jc = async (e, t) => {
 	switch (t.op) {
 		case "delete":
 			await e.delete(t.table, t.id);
@@ -5285,21 +5294,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			await e.insert(t.table, t.row);
 			return;
 	}
-}, Dc = async (e, t) => {
-	for (let n of t) await Ec(e, n);
-}, Oc = (e) => e.request?.subject?.id ?? null, kc = (e) => e === !0 || e === 1, Ac = async (e, t, n) => (await e.query({
+}, Mc = async (e, t) => {
+	for (let n of t) await jc(e, n);
+}, Nc = (e) => e.request?.subject?.id ?? null, Pc = (e) => e === !0 || e === 1, Fc = async (e, t, n) => (await e.query({
 	table: t,
 	predicate: u("id", n),
 	order: []
-}))[0] ?? null, jc = (e) => {
+}))[0] ?? null, Ic = (e) => {
 	try {
 		let t = JSON.parse(String(e ?? "[]"));
 		return Array.isArray(t) ? t : [];
 	} catch {
 		return [];
 	}
-}, Mc = (e) => e.id ?? e.next?.id ?? e.prev?.id, Nc = async (e, t) => {
-	let n = Oc(t);
+}, Lc = (e) => e.id ?? e.next?.id ?? e.prev?.id, Rc = async (e, t) => {
+	let n = Nc(t);
 	return [...await t.store.query({
 		table: "_voltro_undo_log",
 		predicate: u("subjectId", n),
@@ -5308,68 +5317,68 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		id: String(e.id),
 		tag: String(e.tag ?? ""),
 		label: e.label ?? null,
-		undone: kc(e.undone),
-		crossesAction: kc(e.crossesAction),
+		undone: Pc(e.undone),
+		crossesAction: Pc(e.crossesAction),
 		createdAt: String(e.createdAt ?? "")
 	}));
-}, Pc = async (e, t) => {
-	let n = await Ac(t.store, "_voltro_undo_log", e.invocationId);
-	if (!n) throw new Te({ invocationId: e.invocationId });
-	if ((n.subjectId ?? null) !== Oc(t)) throw new we({ invocationId: e.invocationId });
+}, zc = async (e, t) => {
+	let n = await Fc(t.store, "_voltro_undo_log", e.invocationId);
+	if (!n) throw new De({ invocationId: e.invocationId });
+	if ((n.subjectId ?? null) !== Nc(t)) throw new Ee({ invocationId: e.invocationId });
 	return n;
-}, Fc = async (e, t) => {
-	let n = await Pc(e, t);
-	if (kc(n.undone)) return { ok: !0 };
-	if (kc(n.crossesAction)) throw new Ce({
+}, Bc = async (e, t) => {
+	let n = await zc(e, t);
+	if (Pc(n.undone)) return { ok: !0 };
+	if (Pc(n.crossesAction)) throw new Te({
 		invocationId: e.invocationId,
 		reason: "action"
 	});
-	let r = jc(n.changes);
+	let r = Ic(n.changes);
 	for (let n of r) {
-		let r = Mc(n);
-		if (r !== void 0 && !Cc(await Ac(t.store, n.table, r), n.next ?? null)) throw new Ce({
+		let r = Lc(n);
+		if (r !== void 0 && !Oc(await Fc(t.store, n.table, r), n.next ?? null)) throw new Te({
 			invocationId: e.invocationId,
 			reason: "conflict"
 		});
 	}
 	let i = {
 		invocationId: e.invocationId,
-		subject: Oc(t),
+		subject: Nc(t),
 		changes: r,
 		crossesAction: !1
 	};
-	return await Dc(t.store, xc(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
-}, Ic = async (e, t) => {
-	let n = await Pc(e, t);
-	if (!kc(n.undone)) return { ok: !0 };
-	for (let e of jc(n.changes)) {
-		let n = Mc(e);
+	return await Mc(t.store, Ec(i)), await t.store.update("_voltro_undo_log", e.invocationId, { undone: !0 }), { ok: !0 };
+}, Vc = async (e, t) => {
+	let n = await zc(e, t);
+	if (!Pc(n.undone)) return { ok: !0 };
+	for (let e of Ic(n.changes)) {
+		let n = Lc(e);
 		e.op === "insert" && e.next ? await t.store.insert(e.table, e.next) : e.op === "update" && n !== void 0 && e.next ? await t.store.update(e.table, n, e.next) : e.op === "delete" && n !== void 0 && await t.store.delete(e.table, n);
 	}
 	return await t.store.update("_voltro_undo_log", e.invocationId, { undone: !1 }), { ok: !0 };
-}, Lc = (e = process.env) => {
+}, Hc = (e = process.env) => {
 	let t = (e.VOLTRO_TIMELINE ?? "").toLowerCase();
 	return t === "off" || t === "0" || t === "false" ? "off" : t === "all" ? "all" : t === "interesting" || t === "on" || t === "1" || t === "true" ? "interesting" : e.NODE_ENV === "production" ? "off" : "interesting";
-}, Rc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, zc = "«redacted»", Bc = (e) => {
+}, Uc = /pass(word)?|secret|token|api[_-]?key|authorization|cookie|ssn|credit[_-]?card|card[_-]?number|cvv|encrypted/i, Wc = "«redacted»", Gc = (e) => {
 	if (e == null) return null;
 	let t = {};
-	for (let [n, r] of Object.entries(e)) t[n] = Rc.test(n) ? zc : r;
+	for (let [n, r] of Object.entries(e)) t[n] = Uc.test(n) ? Wc : r;
 	return t;
-}, Vc = (e) => {
+}, Kc = (e) => {
 	let t = e?.id;
 	return typeof t == "string" ? t : void 0;
-}, Hc = (e, t) => {
+}, qc = (e, t) => {
 	if (t.op === "insert") {
-		let n = Vc(t.new);
+		let n = Kc(t.new);
 		return n === void 0 ? e : e.filter((e) => e.id !== n);
 	}
 	if (t.op === "update") {
 		if (t.old == null) return e;
-		let n = Vc(t.new) ?? Vc(t.old);
+		let n = Kc(t.new) ?? Kc(t.old);
 		return e.map((e) => e.id === n ? t.old : e);
 	}
 	return t.old == null ? e : [...e, t.old];
-}, Uc = class {
+}, Jc = class {
 	mode;
 	capacity;
 	now;
@@ -5389,8 +5398,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			ts: this.now(),
 			table: e.table,
 			op: e.op,
-			old: Bc(e.old),
-			new: Bc(e.new),
+			old: Gc(e.old),
+			new: Gc(e.new),
 			tenantId: n
 		}), this.ring.length > this.capacity && this.ring.shift(), t;
 	}
@@ -5403,23 +5412,23 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	}
 	replay(e, t, n) {
 		let r = this.ring.filter((n) => n.table === e && n.seq > t).sort((e, t) => t.seq - e.seq), i = n;
-		for (let e of r) i = Hc(i, e);
+		for (let e of r) i = qc(i, e);
 		return i;
 	}
-}, Wc, Gc = () => (Wc === void 0 && (Wc = new Uc(Lc())), Wc), Kc = (e) => {
-	Wc = e;
-}, qc = (e) => {
-	let t = Gc();
+}, Yc, Xc = () => (Yc === void 0 && (Yc = new Jc(Hc())), Yc), Zc = (e) => {
+	Yc = e;
+}, Qc = (e) => {
+	let t = Xc();
 	if (t.enabled) try {
 		t.record(e);
 	} catch {}
-}, Jc = /* @__PURE__ */ new Set([
+}, $c = /* @__PURE__ */ new Set([
 	"count",
 	"sum",
 	"avg",
 	"min",
 	"max"
-]), Yc = (e) => {
+]), el = (e) => {
 	if (e.joins !== void 0 && e.joins.length > 0) return {
 		maintainable: !1,
 		reason: "joins are not maintainable in v1"
@@ -5441,7 +5450,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		reason: "v1 maintains exactly one aggregation"
 	};
 	let t = e.aggregations[0];
-	return Jc.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
+	return $c.has(t.op) ? t.op !== "count" && (t.column === void 0 || t.column.length === 0) ? {
 		maintainable: !1,
 		reason: `op '${t.op}' requires a column`
 	} : {
@@ -5455,7 +5464,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		maintainable: !1,
 		reason: `op '${t.op}' is not maintainable`
 	};
-}, Xc = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(Xc), Zc = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), Qc = (e, t) => {
+}, tl = "\0", $ = (e, t) => t === void 0 || t.length === 0 ? "" : t.map((t) => JSON.stringify(e[t] ?? null)).join(tl), nl = (e, t) => t === void 0 ? 0 : Number(e[t] ?? 0), rl = (e, t) => {
 	switch (e.op) {
 		case "count": return t.count;
 		case "sum": return t.sum ?? 0;
@@ -5463,10 +5472,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		case "min":
 		case "max": return t.count > 0 ? t.extreme ?? null : null;
 	}
-}, $c = (e, t) => {
+}, il = (e, t) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let r of t) {
-		let t = $(r, e.groupBy), i = n.get(t), a = Zc(r, e.column);
+		let t = $(r, e.groupBy), i = n.get(t), a = nl(r, e.column);
 		if (i === void 0) n.set(t, {
 			count: 1,
 			...e.op === "sum" || e.op === "avg" ? { sum: a } : {},
@@ -5482,10 +5491,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		}
 	}
 	return n;
-}, el = (e, t) => [...t.entries()].map(([t, n]) => ({
+}, al = (e, t) => [...t.entries()].map(([t, n]) => ({
 	groupKey: t,
-	value: Qc(e, n)
-})), tl = (e, t, n) => {
+	value: rl(e, n)
+})), ol = (e, t, n) => {
 	let r = new Map(t), i = /* @__PURE__ */ new Set(), a = (t) => {
 		let n = $(t, e.groupBy), a = r.get(n);
 		if (a === void 0) return;
@@ -5494,7 +5503,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			r.delete(n);
 			return;
 		}
-		let s = Zc(t, e.column);
+		let s = nl(t, e.column);
 		e.op === "min" || e.op === "max" ? (a.extreme !== void 0 && s === a.extreme && i.add(n), r.set(n, {
 			count: o,
 			...a.extreme === void 0 ? {} : { extreme: a.extreme }
@@ -5503,7 +5512,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			...e.op === "sum" || e.op === "avg" ? { sum: (a.sum ?? 0) - s } : {}
 		});
 	}, o = (t) => {
-		let n = $(t, e.groupBy), i = r.get(n), a = Zc(t, e.column);
+		let n = $(t, e.groupBy), i = r.get(n), a = nl(t, e.column);
 		if (i === void 0) {
 			r.set(n, {
 				count: 1,
@@ -5523,15 +5532,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		state: r,
 		rescanGroups: [...i]
 	};
-}, nl = (e, t, n, r) => {
+}, sl = (e, t, n, r) => {
 	if (n.length === 0) return t;
-	let i = new Set(n), a = $c(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
+	let i = new Set(n), a = il(e, r.filter((t) => i.has($(t, e.groupBy)))), o = new Map(t);
 	for (let e of i) {
 		let t = a.get(e);
 		t === void 0 ? o.delete(e) : o.set(e, t);
 	}
 	return o;
-}, rl = class {
+}, cl = class {
 	shape;
 	state = /* @__PURE__ */ new Map();
 	groups = /* @__PURE__ */ new Map();
@@ -5539,7 +5548,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		this.shape = e;
 	}
 	seed(e) {
-		this.state = $c(this.shape, e), this.groups.clear();
+		this.state = il(this.shape, e), this.groups.clear();
 		for (let t of e) {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
@@ -5551,14 +5560,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			let e = $(t, this.shape.groupBy);
 			this.groups.has(e) || this.groups.set(e, this.groupValues(t));
 		}
-		let n = tl(this.shape, this.state, e);
+		let n = ol(this.shape, this.state, e);
 		this.state = n.state;
 		for (let e of this.groups.keys()) this.state.has(e) || this.groups.delete(e);
 		return n.rescanGroups;
 	}
 	resolveRescan(e, t) {
 		if (e.length === 0) return;
-		this.state = nl(this.shape, this.state, e, t);
+		this.state = sl(this.shape, this.state, e, t);
 		let n = new Set(e);
 		for (let e of t) {
 			let t = $(e, this.shape.groupBy);
@@ -5567,7 +5576,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let e of n) this.state.has(e) || this.groups.delete(e);
 	}
 	materialize() {
-		return el(this.shape, this.state).map((e) => ({
+		return al(this.shape, this.state).map((e) => ({
 			groupKey: e.groupKey,
 			group: this.groups.get(e.groupKey) ?? {},
 			value: e.value
@@ -5580,19 +5589,19 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let r of t) n[r] = e[r];
 		return n;
 	}
-}, il = E("_voltro_rebac_tuples", {
+}, ll = T("_voltro_rebac_tuples", {
 	id: v({ prefix: "rbct" }),
-	subjectId: D(),
-	relation: D(),
-	resourceType: D(),
-	resourceId: D(),
-	tenantId: D().nullable(),
-	createdAt: O().default("now")
+	subjectId: E(),
+	relation: E(),
+	resourceType: E(),
+	resourceId: E(),
+	tenantId: E().nullable(),
+	createdAt: D().default("now")
 }).index([
 	"subjectId",
 	"resourceType",
 	"resourceId"
-]).reactive(), al = async (e, n, r, i) => n === null ? [] : (await e.query({
+]).reactive(), ul = async (e, n, r, i) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r), u("resourceId", i)),
 	order: [],
@@ -5604,16 +5613,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), ol = (e) => ({
+})), dl = (e) => ({
 	id: e.id,
 	tenantId: e.tenantId,
 	...e.scopes === void 0 ? {} : { scopes: e.scopes }
-}), sl = (e, t) => {
-	let n = t.getPolicy ?? Ro;
+}), fl = (e, t) => {
+	let n = t.getPolicy ?? Vo;
 	return (r, i) => {
 		let a = e[i.tag];
 		if (a === void 0) return r;
-		let o = n(a.resourceType), s = (e) => M.fail(new Fo({
+		let o = n(a.resourceType), s = (e) => M.fail(new Ro({
 			action: a.action,
 			resourceType: a.resourceType,
 			resourceId: e
@@ -5621,17 +5630,17 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		if (o === void 0) return s("");
 		let c = a.resourceId(i.input);
 		if (c === null || c === "") return s("");
-		let l = ol(i.subject), u = {
+		let l = dl(i.subject), u = {
 			type: a.resourceType,
 			id: c,
 			tenantId: i.subject.tenantId
 		};
-		return M.flatMap(M.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => Wo(l, a.action, u, {
+		return M.flatMap(M.promise(async () => t.loadTuples(l.id, a.resourceType, c)), (e) => qo(l, a.action, u, {
 			policy: o,
 			tuples: e
 		}) ? r : s(c));
 	};
-}, cl = async (e, n, r) => n === null ? [] : (await e.query({
+}, pl = async (e, n, r) => n === null ? [] : (await e.query({
 	table: "_voltro_rebac_tuples",
 	predicate: t(u("subjectId", n), u("resourceType", r)),
 	order: [],
@@ -5643,18 +5652,18 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	relation: e.relation,
 	resourceType: e.resourceType,
 	resourceId: e.resourceId
-})), ll = (e) => {
-	let t = e.getPolicy ?? Ro;
+})), ml = (e) => {
+	let t = e.getPolicy ?? Vo;
 	return async (n, r, i, a) => {
 		let o = t(r);
 		if (o === void 0) return [];
-		let s = ol(n);
-		return Ko(s, i, r, a, {
+		let s = dl(n);
+		return Yo(s, i, r, a, {
 			policy: o,
 			tuples: await e.loadSubjectTuples(s.id, r)
 		});
 	};
-}, ul = (e) => {
+}, hl = (e) => {
 	if (typeof e.name != "string" || e.name.length === 0) throw Error("defineReaction: a non-empty `name` is required");
 	if (e.watch === void 0 || typeof e.watch.table != "string" || e.watch.table.length === 0) throw Error(`reaction '${e.name}': watch.table is required`);
 	if (e.act === void 0 || e.act.kind !== "agent" && e.act.kind !== "workflow") throw Error(`reaction '${e.name}': act must be { kind: 'agent' | 'workflow', … }`);
@@ -5662,14 +5671,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	if (e.guards.rateLimit !== void 0 && (e.guards.rateLimit.limit <= 0 || e.guards.rateLimit.windowMs <= 0)) throw Error(`reaction '${e.name}': guards.rateLimit needs positive limit + windowMs`);
 	if (e.guards.costBudgetUsd !== void 0 && e.guards.costBudgetUsd < 0) throw Error(`reaction '${e.name}': guards.costBudgetUsd must be >= 0`);
 	return e;
-}, dl = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, fl = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, pl = class {
+}, gl = (e, t) => e === void 0 ? !0 : Array.isArray(e) ? e.includes(t) : e === t, _l = (e) => e.new?.tenantId ?? e.old?.tenantId ?? null, vl = class {
 	hits = /* @__PURE__ */ new Map();
 	allow(e, t, n, r) {
 		let i = r - n, a = (this.hits.get(e) ?? []).filter((e) => e > i);
 		return a.length >= t ? (this.hits.set(e, a), !1) : (a.push(r), this.hits.set(e, a), !0);
 	}
-}, ml = async (e, t, n) => {
-	if (t.table !== e.watch.table || !dl(e.watch.on, t.op)) return "skipped-op";
+}, yl = async (e, t, n) => {
+	if (t.table !== e.watch.table || !gl(e.watch.on, t.op)) return "skipped-op";
 	if (e.when !== void 0 && !e.when(t)) return "skipped-when";
 	let r = `${e.name}:${e.guards.dedupeKey(t)}`;
 	if (await n.dedupe.has(r)) return "skipped-dedupe";
@@ -5678,26 +5687,26 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		let t = n.now?.() ?? Date.now();
 		if (!n.rateLimiter.allow(e.name, i.limit, i.windowMs, t)) return "skipped-ratelimit";
 	}
-	let a = fl(t);
+	let a = _l(t);
 	return e.guards.costBudgetUsd !== void 0 && n.checkBudget !== void 0 && !await n.checkBudget(a, e.guards.costBudgetUsd) ? "skipped-budget" : (await n.runAct(e.act, t, {
 		id: a,
 		via: "agent"
 	}), await n.dedupe.add(r), "acted");
-}, hl = E("_voltro_wakeups", {
+}, bl = T("_voltro_wakeups", {
 	id: v({ prefix: "wakeup" }),
-	tenantId: D(),
-	kind: D(),
-	refId: D(),
-	wakeAt: O(),
-	status: D()
-}).index(["status", "wakeAt"]).index(["tenantId"]), gl = async (e) => {
-	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await Zs(e.store, t, e.batchLimit ?? 100);
+	tenantId: E(),
+	kind: E(),
+	refId: E(),
+	wakeAt: D(),
+	status: E()
+}).index(["status", "wakeAt"]).index(["tenantId"]), xl = async (e) => {
+	let t = e.now?.() ?? /* @__PURE__ */ new Date(), n = await ec(e.store, t, e.batchLimit ?? 100);
 	if (n.length === 0) return 0;
 	let r = 0;
-	for (let t of n) if (await qs(e.store, t)) try {
+	for (let t of n) if (await Xs(e.store, t)) try {
 		await e.adapter.wake(t), r++;
 	} catch (n) {
-		await Js(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
+		await Zs(e.store, t), e.log?.warn("wake: adapter failed — released for retry", {
 			tenantId: t.tenantId,
 			kind: t.kind,
 			refId: t.refId,
@@ -5705,11 +5714,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		});
 	}
 	return r > 0 && e.log?.info("wake: woke due deployments", { count: r }), r;
-}, _l = (e, t = 1e3) => {
+}, Sl = (e, t = 1e3) => {
 	let n = !1, r, i = async () => {
 		if (!n) {
 			try {
-				await gl(e);
+				await xl(e);
 			} catch (t) {
 				e.log?.warn("wake: tick failed", { reason: t instanceof Error ? t.message : String(t) });
 			}
@@ -5719,10 +5728,10 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	return i(), { stop: () => {
 		n = !0, r !== void 0 && clearTimeout(r);
 	} };
-}, vl = (e) => ({ wake: async () => {
+}, Cl = (e) => ({ wake: async () => {
 	await e.start();
-} }), yl = (e) => new Promise((t) => setTimeout(t, e)), bl = (e) => {
-	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? yl, i = e.spawnImpl ?? Ct, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
+} }), wl = (e) => new Promise((t) => setTimeout(t, e)), Tl = (e) => {
+	let t = e.fetchImpl ?? fetch, n = e.now ?? Date.now, r = e.sleep ?? wl, i = e.spawnImpl ?? wt, a = e.startTimeoutMs ?? 3e4, o = e.healthPollMs ?? 200, s = e.stopSignal ?? "SIGTERM", c = e.stopGraceMs ?? 1e4, l, u, d = e.healthCheck ?? ((e) => e.ok), f = async () => {
 		try {
 			let n = await t(e.healthUrl);
 			return d(n);
@@ -5776,11 +5785,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		},
 		stop: m
 	};
-}, xl = async (e) => {
+}, El = async (e) => {
 	if (e.signals.connectedClients() > 0 || e.signals.inFlightRequests() > 0 || e.signals.activeWorkflowExecutions() > 0) return !1;
-	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await Qs(e.store);
+	let t = (e.now?.() ?? /* @__PURE__ */ new Date()).getTime() + (e.wakeLookaheadMs ?? 3e4), n = await tc(e.store);
 	return !(n !== null && n.wakeAt.getTime() <= t);
-}, Sl = (e, t = Date.now) => {
+}, Dl = (e, t = Date.now) => {
 	let n;
 	return {
 		update: (r) => {
@@ -5792,7 +5801,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			n = void 0;
 		}
 	};
-}, Cl = () => {
+}, Ol = () => {
 	let e = 0, t = 0;
 	return {
 		onRequestStart: () => {
@@ -5810,8 +5819,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		inFlightRequests: () => e,
 		openConnections: () => t
 	};
-}, wl = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Tl = (e, t, n, r) => new Promise((i, a) => {
-	let o = Ye.request({
+}, kl = (e) => ({ run: async (t) => (e.onActivity?.(), await e.ensureAwake(), t()) }), Al = (e, t, n, r) => new Promise((i, a) => {
+	let o = Xe.request({
 		host: n,
 		port: r,
 		method: e.method,
@@ -5821,8 +5830,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		t.writeHead(e.statusCode ?? 502, e.headers), e.pipe(t), e.on("end", i), e.on("error", a);
 	});
 	o.on("error", a), e.pipe(o);
-}), El = (e, t, n, r, i) => new Promise((a, o) => {
-	let s = Ye.request({
+}), jl = (e, t, n, r, i) => new Promise((a, o) => {
+	let s = Xe.request({
 		host: r,
 		port: i,
 		method: e.method,
@@ -5836,21 +5845,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		};
 		t.on("close", s), r.on("close", s), r.on("error", o);
 	}), s.on("error", o), s.end();
-}), Dl = (e) => {
-	let t = wl({
+}), Ml = (e) => {
+	let t = kl({
 		ensureAwake: () => e.supervisor.start(),
 		...e.onActivity === void 0 ? {} : { onActivity: e.onActivity }
-	}), n = e.activity, r = Ye.createServer((r, i) => {
-		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Tl(r, i, e.targetHost, e.targetPort)).catch((t) => {
+	}), n = e.activity, r = Xe.createServer((r, i) => {
+		n?.onRequestStart(), i.on("close", () => n?.onRequestEnd()), t.run(() => Al(r, i, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.headersSent || i.writeHead(502), i.end("wake/proxy failed");
 		});
 	});
 	return r.on("upgrade", (r, i, a) => {
-		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => El(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
+		n?.onConnect(), i.on("close", () => n?.onDisconnect()), t.run(() => jl(r, i, a, e.targetHost, e.targetPort)).catch((t) => {
 			e.log?.warn("wake-router: upgrade proxy failed", { reason: t instanceof Error ? t.message : String(t) }), i.destroy();
 		});
 	}), r;
-}, Ol = async (e) => {
+}, Nl = async (e) => {
 	try {
 		return (await e.query({
 			table: "_voltro_workflow_runs",
@@ -5867,15 +5876,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	} catch {
 		return 0;
 	}
-}, kl = async (e) => {
-	let t = vl(e.supervisor), n = await gl({
+}, Pl = async (e) => {
+	let t = Cl(e.supervisor), n = await xl({
 		store: e.store,
 		adapter: t,
 		...e.now === void 0 ? {} : { now: e.now },
 		...e.log === void 0 ? {} : { log: e.log }
 	});
 	n > 0 && e.idleGate.reset();
-	let r = await xl({
+	let r = await El({
 		store: e.store,
 		signals: e.signals,
 		...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
@@ -5885,12 +5894,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		woke: n,
 		stopped: i
 	};
-}, Al = async (e) => {
-	let t = Sl(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Cl(), i = 0, a = e.signals === void 0, o = e.signals ?? {
+}, Fl = async (e) => {
+	let t = Dl(e.idleGraceMs ?? 6e4), n = e.tickMs ?? 1e3, r = Ol(), i = 0, a = e.signals === void 0, o = e.signals ?? {
 		connectedClients: () => r.openConnections(),
 		inFlightRequests: () => r.inFlightRequests(),
 		activeWorkflowExecutions: () => i
-	}, s = Dl({
+	}, s = Ml({
 		supervisor: e.supervisor,
 		targetHost: e.targetHost,
 		targetPort: e.targetPort,
@@ -5909,7 +5918,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	let l = !1, u, d = e.firedRetentionMs ?? 10 * 6e4, f = 0, p = async () => {
 		if (!l) {
 			try {
-				if (a && (i = await Ol(e.store)), await kl({
+				if (a && (i = await Nl(e.store)), await Pl({
 					store: e.store,
 					supervisor: e.supervisor,
 					signals: o,
@@ -5917,7 +5926,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 					...e.wakeLookaheadMs === void 0 ? {} : { wakeLookaheadMs: e.wakeLookaheadMs },
 					...e.log === void 0 ? {} : { log: e.log }
 				}), f++ % 60 == 0) {
-					let t = await ec(e.store, { firedOlderThan: new Date(Date.now() - d) });
+					let t = await rc(e.store, { firedOlderThan: new Date(Date.now() - d) });
 					t > 0 && e.log?.info("orchestrator: pruned fired wakeups", { count: t });
 				}
 			} catch (t) {
@@ -5932,14 +5941,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			l = !0, u !== void 0 && clearTimeout(u), await new Promise((e) => s.close(() => e()));
 		}
 	};
-}, jl = (e) => e, Ml = class extends L.TaggedError()("AnalyticsError", {
+}, Il = (e) => e, Ll = class extends L.TaggedError()("AnalyticsError", {
 	provider: L.String,
 	operation: L.String,
 	cause: L.String
-}) {}, Nl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
+}) {}, Rl = class extends L.TaggedError()("AnalyticsCapabilityNotSupported", {
 	provider: L.String,
 	capability: L.String
-}) {}, Pl = class extends Re.Tag("@voltro/AnalyticsSink")() {}, Fl = (e, t) => ({
+}) {}, zl = class extends Be.Tag("@voltro/AnalyticsSink")() {}, Bl = (e, t) => ({
 	info: e.info,
 	track: (n) => e.track(n.tenantId === void 0 ? {
 		...n,
@@ -5958,20 +5967,20 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		tenantId: t
 	} : n),
 	...e.mirror === void 0 ? {} : { mirror: e.mirror }
-}), Il = () => M.gen(function* () {
-	let e = yield* Pl, t = yield* M.serviceOption(Se), n = F.match(t, {
+}), Vl = () => M.gen(function* () {
+	let e = yield* zl, t = yield* M.serviceOption(we), n = F.match(t, {
 		onNone: () => null,
 		onSome: (e) => e.tenantId ?? null
 	});
-	return n === null ? e : Fl(e, n);
-}), Ll = "noop", Rl = () => {
-	let e = (e) => M.fail(new Nl({
-		provider: Ll,
+	return n === null ? e : Bl(e, n);
+}), Hl = "noop", Ul = () => {
+	let e = (e) => M.fail(new Rl({
+		provider: Hl,
 		capability: e
 	}));
 	return {
 		info: {
-			provider: Ll,
+			provider: Hl,
 			capabilities: {
 				track: !0,
 				aggregate: !1,
@@ -5985,8 +5994,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		timeseries: () => e("timeseries"),
 		topN: () => e("topN")
 	};
-}, zl = (e) => {
-	if (e.length === 0) return Rl();
+}, Wl = (e) => {
+	if (e.length === 0) return Ul();
 	if (e.length === 1) return e[0];
 	let t = {
 		provider: "compose",
@@ -6003,7 +6012,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		discard: !0
 	}), r = (t, n) => {
 		let r = e.find((e) => e.info.capabilities[t]);
-		return r === void 0 ? M.fail(new Nl({
+		return r === void 0 ? M.fail(new Rl({
 			provider: "compose",
 			capability: t
 		})) : n(r);
@@ -6026,11 +6035,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		topN: (e) => r("topN", (t) => t.topN(e)),
 		...a === void 0 ? {} : { mirror: a }
 	};
-}, Bl = (e) => {
+}, Gl = (e) => {
 	let t = e.filter((e) => e.dispose !== void 0);
 	return {
 		kind: "compose",
-		build: (t) => zl(e.map((e) => e.build(t))),
+		build: (t) => Wl(e.map((e) => e.build(t))),
 		tables: e.flatMap((e) => e.tables ?? []),
 		initialize: (t) => M.forEach(e, (e) => e.initialize ? e.initialize(t) : M.void, {
 			concurrency: 1,
@@ -6041,15 +6050,15 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			discard: !0
 		}) } : {}
 	};
-}, Vl = {
+}, Kl = {
 	kind: "noop",
-	build: () => Rl()
-}, Hl = {
+	build: () => Ul()
+}, ql = {
 	tables: [],
 	detach: () => {}
-}, Ul = (e) => {
+}, Jl = (e) => {
 	let { store: t, sink: n, log: r } = e, i = n.mirror;
-	if (i === void 0 || i.tables.length === 0) return Hl;
+	if (i === void 0 || i.tables.length === 0) return ql;
 	let a = e.run ?? ((e) => M.runPromise(e)), o = i.primaryKey ?? "id", s = new Set(i.tables), c = (e) => {
 		if (e.op === "delete") {
 			let t = e.old;
@@ -6073,11 +6082,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		tables: i.tables,
 		detach: l
 	};
-}, Wl = (e) => {
+}, Yl = (e) => {
 	let t = typeof e.refresh == "string" ? { interval: e.refresh } : e.refresh, n = e.strategy ?? "replace";
 	if (n === "merge" && (e.mergeKey === void 0 || e.mergeKey.length === 0)) throw Error(`defineAggregate("${e.name}"): strategy: 'merge' requires mergeKey — the property on each row to upsert by`);
 	if (e.incremental !== void 0) {
-		let t = Yc({
+		let t = el({
 			aggregations: [{
 				op: e.incremental.op,
 				...e.incremental.column === void 0 ? {} : { column: e.incremental.column }
@@ -6099,47 +6108,47 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		build: e.build,
 		...e.incremental === void 0 ? {} : { incremental: e.incremental }
 	};
-}, Gl = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Kl = class extends L.TaggedError()("AggregateStale", {
+}, Xl = (e) => typeof e == "object" && !!e && e._voltroAggregate === !0, Zl = class extends L.TaggedError()("AggregateStale", {
 	name: L.String,
 	ageMs: L.Number,
 	maxAgeMs: L.Number
-}) {}, ql = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, Jl = class extends L.TaggedError()("AggregateError", {
+}) {}, Ql = class extends L.TaggedError()("AggregateNotFound", { name: L.String }) {}, $l = class extends L.TaggedError()("AggregateError", {
 	name: L.String,
 	operation: L.String,
 	cause: L.String
-}) {}, Yl = class extends Re.Tag("@voltro/AggregateRegistry")() {}, Xl = (e) => M.gen(function* () {
-	return (yield* Yl).getHandle(e);
-}), Zl = (e, n, r) => {
+}) {}, eu = class extends Be.Tag("@voltro/AggregateRegistry")() {}, tu = (e) => M.gen(function* () {
+	return (yield* eu).getHandle(e);
+}), nu = (e, n, r) => {
 	if (e.crossTenant || !n.has(e.table) || r == null) return e;
 	let i = u("tenantId", r);
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, i) : i
 	};
-}, Ql = (e, n) => {
+}, ru = (e, n) => {
 	if (e.includeDeleted || !n.has(e.table)) return e;
 	let r = S("deletedAt");
 	return {
 		...e,
 		predicate: e.predicate ? t(e.predicate, r) : r
 	};
-}, $l = (e) => M.runPromiseExit(e).then((e) => {
-	if (Ue.isSuccess(e)) return e.value;
-	let t = j.failureOption(e.cause);
-	throw F.isSome(t) ? t.value : j.squash(e.cause);
-}), eu = (e, t) => e.pipe(M.provideService(Se, t)), tu = async (e, t, n) => {
-	let r = await M.runPromise(De(t, e.guards, n));
+}, iu = (e) => M.runPromiseExit(e).then((e) => {
+	if (We.isSuccess(e)) return e.value;
+	let t = A.failureOption(e.cause);
+	throw F.isSome(t) ? t.value : A.squash(e.cause);
+}), au = (e, t) => e.pipe(M.provideService(we, t)), ou = async (e, t, n) => {
+	let r = await M.runPromise(ke(t, e.guards, n));
 	if (r) throw r;
-}, nu = async (e) => {
-	if (jn() === void 0) return e;
-	let t = await $l(Nn(e.subject, (e) => {
+}, su = async (e) => {
+	if (Mn() === void 0) return e;
+	let t = await iu(Pn(e.subject, (e) => {
 		console.error("[voltro] row filter failed to load", e);
 	}));
 	return {
 		...e,
 		rowFilter: t
 	};
-}, ru = async (e) => {
+}, cu = async (e) => {
 	let t = `${e.kind}.${e.name}`, n = Date.now(), r = "ok";
 	try {
 		if (e.interceptor) {
@@ -6154,8 +6163,8 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 				traceId: e.requestContext.traceId,
 				...e.requestContext.spanId === void 0 ? {} : { spanId: e.requestContext.spanId }
 			}), r = await M.runPromiseExit(n);
-			if (Ue.isSuccess(r)) return r.value;
-			throw j.squash(r.cause);
+			if (We.isSuccess(r)) return r.value;
+			throw A.squash(r.cause);
 		}
 		return await e.runExecutor();
 	} catch (e) {
@@ -6168,28 +6177,28 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			status: r
 		});
 	}
-}, iu = /* @__PURE__ */ new Set([1213, 1205]), au = /* @__PURE__ */ new Set([
+}, lu = /* @__PURE__ */ new Set([1213, 1205]), uu = /* @__PURE__ */ new Set([
 	"ER_LOCK_DEADLOCK",
 	"ER_LOCK_WAIT_TIMEOUT",
 	"40001",
 	"40P01"
-]), ou = (e) => {
+]), du = (e) => {
 	let t = e;
 	for (let e = 0; e < 6 && typeof t == "object" && t; e++) {
 		let e = t;
-		if (typeof e.errno == "number" && iu.has(e.errno) || typeof e.code == "string" && au.has(e.code) || typeof e.sqlState == "string" && au.has(e.sqlState)) return !0;
+		if (typeof e.errno == "number" && lu.has(e.errno) || typeof e.code == "string" && uu.has(e.code) || typeof e.sqlState == "string" && uu.has(e.sqlState)) return !0;
 		t = e.cause;
 	}
 	return !1;
-}, su = 3, cu = (e) => new Promise((t) => setTimeout(t, e)), lu = async (e, t) => {
-	let n = t?.delay ?? ((e) => cu(e * 20 + Math.floor(Math.random() * 30)));
+}, fu = 3, pu = (e) => new Promise((t) => setTimeout(t, e)), mu = async (e, t) => {
+	let n = t?.delay ?? ((e) => pu(e * 20 + Math.floor(Math.random() * 30)));
 	for (let t = 1;; t++) try {
 		return await e();
 	} catch (e) {
-		if (t >= su || !ou(e)) throw e;
+		if (t >= fu || !du(e)) throw e;
 		await n(t);
 	}
-}, uu = (e) => (t, n, r) => ru({
+}, hu = (e) => (t, n, r) => cu({
 	name: t.descriptor.name,
 	kind: "mutation",
 	input: n,
@@ -6197,11 +6206,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await tu(t.descriptor, r.subject, n);
-		let i = await nu(r), a = [], o = await lu(async () => (a.length = 0, e.store.transactional(async (o) => {
+		await ou(t.descriptor, r.subject, n);
+		let i = await su(r), a = [], o = await mu(async () => (a.length = 0, e.store.transactional(async (o) => {
 			let s = e.undoCapture?.(o), c = s ? s.tx : o, l = e.buildContext(i, c, { afterCommit: (e) => {
 				a.push(e);
-			} }), u = t.executor(n, l), d = M.isEffect(u) ? await e.runEffect(eu(u, r.subject), l.store) : await u;
+			} }), u = t.executor(n, l), d = M.isEffect(u) ? await e.runEffect(au(u, r.subject), l.store) : await u;
 			return s && await s.persist(l.store, {
 				tag: t.descriptor.name,
 				subject: r.subject,
@@ -6211,33 +6220,33 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		for (let e of a) await e();
 		return o;
 	}
-}), du = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, fu = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, pu = (e) => {
+}), gu = (e) => e && typeof e == "object" && "descriptor" in e ? e.descriptor : e, _u = (e) => typeof e == "object" && !!e && !Array.isArray(e) && "table" in e && "order" in e, vu = (e) => {
 	let t = e.descriptor.source;
 	return t == null ? [] : typeof t == "string" ? [t] : [...t];
-}, mu = (e, t) => (n) => () => {
+}, yu = (e, t) => (n) => () => {
 	let r = e.descriptor.guards;
-	return !r || r.length === 0 ? Promise.resolve(null) : M.runPromise(De(n, r, t));
-}, hu = (e) => (t, n) => (r) => {
-	let i = e.buildContext(r), a = mu(t, n)(r.subject), o = async () => {
+	return !r || r.length === 0 ? Promise.resolve(null) : M.runPromise(ke(n, r, t));
+}, bu = (e) => (t, n) => (r) => {
+	let i = e.buildContext(r), a = yu(t, n)(r.subject), o = async () => {
 		let i = await a();
 		if (i) throw i;
-		let o = e.buildContext(await nu(r)), s = t.executor(n, o);
-		return M.isEffect(s) ? M.runPromise(e.provideEffect(eu(s, r.subject), o.store)) : du(await Promise.resolve(s));
+		let o = e.buildContext(await su(r)), s = t.executor(n, o);
+		return M.isEffect(s) ? M.runPromise(e.provideEffect(au(s, r.subject), o.store)) : gu(await Promise.resolve(s));
 	}, s = (n) => {
-		let i = du(n);
-		return fu(i) ? e.finalize(i, r) : {
+		let i = gu(n);
+		return _u(i) ? e.finalize(i, r) : {
 			__voltroComputed: !0,
 			value: i,
-			dependentTables: pu(t),
+			dependentTables: vu(t),
 			tenantId: r.subject?.tenantId ?? null,
 			recompute: o
 		};
 	}, c = () => {
 		let a = t.executor(n, i);
-		return M.isEffect(a) ? e.provideEffect(eu(a, r.subject), i.store).pipe(M.map(s)) : a instanceof Promise ? M.promise(() => a).pipe(M.map(s)) : s(a);
+		return M.isEffect(a) ? e.provideEffect(au(a, r.subject), i.store).pipe(M.map(s)) : a instanceof Promise ? M.promise(() => a).pipe(M.map(s)) : s(a);
 	}, l = () => {
 		let e = t.descriptor.guards;
-		return !e || e.length === 0 ? c() : De(r.subject, e, n).pipe(M.flatMap((e) => {
+		return !e || e.length === 0 ? c() : ke(r.subject, e, n).pipe(M.flatMap((e) => {
 			if (e) return M.fail(e);
 			let t = c();
 			return M.isEffect(t) ? t : M.succeed(t);
@@ -6256,7 +6265,7 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		traceId: r.traceId,
 		...r.spanId === void 0 ? {} : { spanId: r.spanId }
 	});
-}, gu = (e) => (t, n, r) => ru({
+}, xu = (e) => (t, n, r) => cu({
 	name: t.descriptor.name,
 	kind: "action",
 	input: n,
@@ -6264,16 +6273,16 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	...e.interceptor ? { interceptor: e.interceptor } : {},
 	...e.recordMetric ? { recordMetric: e.recordMetric } : {},
 	runExecutor: async () => {
-		await tu(t.descriptor, r.subject, n);
-		let i = e.buildContext(await nu(r)), a = t.executor(n, i);
-		return M.isEffect(a) ? e.runEffect(eu(a, r.subject), i.store) : a;
+		await ou(t.descriptor, r.subject, n);
+		let i = e.buildContext(await su(r)), a = t.executor(n, i);
+		return M.isEffect(a) ? e.runEffect(au(a, r.subject), i.store) : a;
 	}
-}), _u = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, vu = (e) => typeof e == "string" && e.length > 0 ? e : null, yu = [
+}), Su = (e) => e instanceof Date ? e.toISOString() : typeof e == "string" && e.length > 0 ? e : null, Cu = (e) => typeof e == "string" && e.length > 0 ? e : null, wu = [
 	"updatedAt",
 	"createdAt",
 	"updatedBy",
 	"createdBy"
-], bu = (e) => yu.some((t) => t in e), xu = (e, t, n) => {
+], Tu = (e) => wu.some((t) => t in e), Eu = (e, t, n) => {
 	let r = {
 		table: t.table,
 		id: t.id,
@@ -6288,14 +6297,14 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		found: !1
 	};
 	let i = t.column === void 0 ? void 0 : e[t.column];
-	if (!bu(e)) return {
+	if (!Tu(e)) return {
 		...r,
 		value: i,
 		lastWrite: null,
 		attribution: "none",
 		found: !0
 	};
-	let a = vu(e.updatedBy) ?? vu(e.createdBy), o = _u(e.updatedAt) ?? _u(e.createdAt);
+	let a = Cu(e.updatedBy) ?? Cu(e.createdBy), o = Su(e.updatedAt) ?? Su(e.createdAt);
 	return {
 		...r,
 		value: i,
@@ -6307,12 +6316,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		attribution: "audit",
 		found: !0
 	};
-}, Su = (e, t) => {
+}, Du = (e, t) => {
 	let n = e.map((e) => {
 		let n = e.newValue ?? e.value, r = t.column !== void 0 && n && typeof n == "object" ? n[t.column] : e.newValue ?? e.value;
 		return {
-			actor: { id: vu(e.actor) ?? vu(e.changedBy) },
-			at: _u(e.at) ?? _u(e.changedAt),
+			actor: { id: Cu(e.actor) ?? Cu(e.changedBy) },
+			at: Su(e.at) ?? Su(e.changedAt),
 			...e.traceId === void 0 ? {} : { traceId: e.traceId },
 			value: r
 		};
@@ -6327,12 +6336,12 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 		history: n,
 		found: n.length > 0
 	};
-}, Cu = (e) => {
+}, Ou = (e) => {
 	let t = e.new?.id;
 	if (typeof t == "string") return t;
 	let n = e.old?.id;
 	return typeof n == "string" ? n : void 0;
-}, wu = (e) => {
+}, ku = (e) => {
 	let t = {};
 	if (e.op === "insert") for (let [n, r] of Object.entries(e.new ?? {})) t[n] = {
 		from: void 0,
@@ -6352,11 +6361,11 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 	return {
 		table: e.table,
 		op: e.op,
-		id: Cu(e),
+		id: Ou(e),
 		fields: t
 	};
-}, Tu = (e) => {
-	let t = e.map(wu);
+}, Au = (e) => {
+	let t = e.map(ku);
 	return {
 		rows: t,
 		summary: {
@@ -6365,21 +6374,21 @@ var K = /* @__PURE__ */ new Map(), Zn = (e, t) => {
 			deletes: t.filter((e) => e.op === "delete").length
 		}
 	};
-}, Eu = class extends Error {
+}, ju = class extends Error {
 	constructor() {
 		super("voltro:preview-rollback"), this.name = "PreviewRollback";
 	}
-}, Du = async (e, t) => {
+}, Mu = async (e, t) => {
 	let n, r = !1;
 	try {
 		await e.transactional(async (e) => {
-			throw n = await t(e), r = !0, new Eu();
+			throw n = await t(e), r = !0, new ju();
 		});
 	} catch (e) {
-		if (!(e instanceof Eu)) throw e;
+		if (!(e instanceof ju)) throw e;
 	}
 	if (!r) throw Error("preview: handler did not complete");
 	return n;
-}, Ou = "framework-runtime";
+}, Nu = "framework-runtime";
 //#endregion
-export { Oi as API_KEYS_TABLE, Fo as AccessDenied, Jl as AggregateError, rl as AggregateMaintainer, ql as AggregateNotFound, Yl as AggregateRegistry, Kl as AggregateStale, Nl as AnalyticsCapabilityNotSupported, Ml as AnalyticsError, Pl as AnalyticsSink, X as CONNECTIONS_TABLE, Na as CONNECTION_GRANTS_TABLE, Es as CircuitBreaker, ws as CircuitOpen, no as ConnectionNotConnected, Lr as DEFAULT_MAX_RPC_BODY_BYTES, eo as DEFAULT_REFRESH_SKEW_MS, On as DEFAULT_ROW_FILTER_RETRY, gs as DeleteBuilder, zn as Dispatcher, Wi as EffectStore, ho as GRANT_TTL_MS, Ut as InMemoryDataStore, jt as IndexedMatcher, wt as LinearScanMatcher, Ge as MetricBoundaries, Ll as NOOP_ANALYTICS_PROVIDER, Mn as NO_ROW_FILTER, ls as NoRowFound, va as OUTBOX_ATTEMPTS_TABLE, Ta as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, us as OptimisticLockError, Po as REBAC_ADMIN_SCOPE, to as REFRESH_LEASE_MS, Ou as RUNTIME_NAME, pl as ReactionRateLimiter, vr as ReplicatedDataStore, Dn as RowFilterUnavailable, ms as SelectBuilder, Hi as StoreOperationFailed, Pt as SubscriptionRegistry, Ui as TableValidationFailed, Vi as TenantScopeViolation, Uc as TimelineRecorder, Sc as UndoBoundaryError, wc as UndoStack, hs as UpdateBuilder, ns as VOLTRO_AUDIT_MIXIN_ID, rs as VOLTRO_SOFT_DELETE_MIXIN_ID, is as VOLTRO_TENANT_MIXIN_ID, $n as _connectionStreamCount, er as _resetConnectionSubjectsForTest, Fa as _voltroConnectionGrantsTable, Ma as _voltroConnectionsTable, il as _voltroRebacTuplesTable, dc as _voltroScheduleClaimsTable, uc as _voltroScheduleRunsTable, fc as _voltroTracesTable, pc as _voltroUndoLogTable, hl as _voltroWakeupsTable, pa as _voltroWorkflowEventDeliveriesTable, fa as _voltroWorkflowEventsTable, Bi as apiKeyManagementRoutes, bs as applyDefined, tl as applyDelta, Ec as applyInverse, Dc as applyInverses, In as applyRowFilter, Ln as applyRowFilterToDescriptor, Ql as applySoftDeleteScope, Zl as applyTenantScope, Fc as applyUndoInvocation, Go as assertCan, za as assertConnectionCipherConfigured, Ul as attachAnalyticsMirror, zr as awaitServerListening, wa as backoffMs, yo as beginOAuthConnect, Kn as bindConnectionSubject, Ir as bindMutation, Or as bindStream, Dr as bindSubscription, Tr as bindSubscriptionUntyped, $c as buildIvmState, Tu as buildPreview, sl as buildRebacInterceptor, ll as buildRebacReadFilter, fr as buildSubjectKey, Wr as buildTracingLayer, ai as cachedBackend, Wo as can, Ws as cancelWakeup, Yc as classifyShape, oo as clearConnectionRefreshFlights, Bo as clearResourcePolicies, i as clearRetentions, ks as clearSystemStoreHandle, zs as compileCron, bo as completeOAuthConnect, Bl as composeAnalytics, zl as composeAnalyticsSinks, go as connectionCallbackPath, Ra as connectionLabel, tr as connectionSubjectsSnapshot, Ol as countRunningWorkflows, xn as counter, _r as currentRoutingContext, cr as currentTraceContext, Li as dataStoreApiKeyStore, bi as dataStoreIdempotencyStore, Ti as dataStoreKvStore, hi as decryptField, Wl as defineAggregate, La as defineConnection, sa as defineEventTrigger, xa as defineOutboxHandler, ul as defineReaction, Lo as defineResourcePolicy, Rs as defineSchedule, jl as defineSubscriber, ci as deriveKey, wu as diffChange, ka as drainOutbox, Zs as dueWakeups, Uo as effectiveRelations, cs as emptySchemaRegistry, q as encryptField, $r as envSecretsBackend, Qa as exchangeAuthorizationCode, ar as externalSpanFromTraceparent, Gt as extractDbCause, Nt as fingerprintFor, Ja as forgetCredential, rr as formatTraceparent, Tc as forwardChangeFromCdc, Ri as frameworkApiKeyStrategy, Sn as gauge, Ai as generateApiKeyToken, wo as getConnectionResolver, qn as getConnectionSubject, pi as getFieldCipher, Ro as getResourcePolicy, jn as getRowFilter, As as getSystemStoreHandle, Gc as getTimelineRecorder, Zo as getTupleSource, $ as groupKeyOf, Cn as histogramMetric, Su as historyProvenance, oi as httpSecretsBackend, xt as inspectWorkflow, Qo as installPolicyGuardResolver, Qn as interruptConnectionStreams, bc as invertChange, Gl as isAggregateDefinition, Kt as isForeignKeyViolation, xl as isIdleNow, Nr as isInfraError, Cc as isSafeToApply, Is as isScheduleDefinition, ca as isWorkflowEventTriggerDefinition, Qc as ivmValue, xu as lastWriteProvenance, Ya as listConnectionStates, zo as listResourcePolicies, ee as listRetentions, al as loadResourceTuples, cl as loadSubjectTuples, Ms as localityAwareSelector, gu as makeActionRunner, rc as makeAdvisoryLockCoordinator, li as makeAesCipher, Ni as makeApiKeyService, qt as makeAppAccess, Ei as makeAsyncKv, Qr as makeBufferingSpanProcessor, Ba as makeConnectionRegistry, Eo as makeConnectionResolver, Do as makeConnectionsFacade, lc as makeCoordinatedScheduler, es as makeDataLoader, No as makeDisconnectConnectionExecutor, qi as makeEffectStoreLayer, ma as makeEventsFacade, ui as makeFieldCipher, _s as makeFluentStore, Sl as makeIdleGate, ra as makeLazyWorkflowFacade, Ao as makeListConnectionsExecutor, uu as makeMutationRunner, Ca as makeOutboxFacade, ta as makePostCommitWorkflowFacade, vl as makeProcessAdapter, hu as makeQueryDescriptorProducer, mu as makeQueryReauthorizer, Cl as makeRouterActivity, as as makeSchemaRegistry, jo as makeStartConnectionExecutor, Mo as makeSubmitTokenExecutor, vc as makeUndoCapture, wl as makeWakeGate, Dl as makeWakeProxyServer, ea as makeWorkflowFacade, na as makeWorkflowFacadeWithCallerContext, ia as makeWorkflowHandlers, aa as makeWorkflowLayers, Xi as makeWorkflowRunHandle, Gs as markWakeupFired, el as materializeIvm, Pi as memoryApiKeyStore, Ps as memoryReplicationAdapter, dr as memoryRywPositionStore, Bs as nextFiring, Qs as nextWakeup, bl as nodeProcessSupervisor, Rl as noopAnalytics, Vl as noopAnalyticsSpec, Di as noopKv, Yn as onBindConnectionSubject, ba as outboxAttemptsTable, _a as outboxTable, ir as parseTraceparent, lr as powerOfTwoSelector, Du as previewInRollback, Wa as projectConnectionState, ec as pruneWakeups, Vo as rebacPolicyGraph, _n as recordSample, U as recordSubscriptionActive, yn as recordSubscriptionDelivery, qc as recordTimelineEvent, Bc as redactRow, pr as redisRywPositionStore, Ic as redoUndoInvocation, $a as refreshAccessToken, Zn as registerConnectionStream, ie as registerRetention, Us as registerWakeup, Js as releaseWakeup, ur as replicaHealth, ni as resetSecretsBackend, lo as resolveConnection, To as resolveConnectionForSubject, Ns as resolveCurrentRegion, Jt as resolveDependentTables, vo as resolveRedirectUri, nl as resolveRescan, Nn as resolveRowFilterScope, Pn as resolveRowFilterScopeFor, ri as resolveSecret, ii as resolveSecretSync, si as resolveSecretsBackend, Lc as resolveTimelineMode, oe as retentionTtlMsFromEnv, Hc as reverseEventOverRows, qo as revokedIds, js as runAsSystem, kl as runOrchestratorTick, $l as runProvidedEffect, ml as runReaction, Al as runSingleNodeOrchestrator, _l as runWakeLoop, lu as runWithDeadlockRetry, gr as runWithRoutingContext, sr as runWithTraceContext, _o as sanitizeRedirectTo, cc as scheduleCoordinated, Co as setConnectionResolver, fi as setFieldCipher, An as setRowFilter, ti as setSecretsBackend, Os as setSystemStoreHandle, Kc as setTimelineRecorderForTest, Xo as setTupleSource, ki as sha256Hex, tc as singleCoordinator, Tn as snapshotMetrics, En as snapshotMetricsSync, Rr as startRpcServer, ac as startScheduler, Ka as storeCredential, xo as sweepExpiredGrants, ce as sweepRetention, xc as synthesizeInverse, ts as tracingHttpClientLayer, oa as triggerWorkflow, qs as tryClaimWakeup, Jn as unbindConnectionSubject, mc as undoCaptureEnabled, Nc as undoLogExecutor, Xl as useAggregate, Il as useAnalytics, Ko as visibleRows, gl as wakeDueOnce, nu as withRowFilter, Ji as workflowToRpc, _c as wrapCaptureStore, Cs as wrapStoreWithMixinBehaviour };
+export { Ai as API_KEYS_TABLE, Ro as AccessDenied, $l as AggregateError, cl as AggregateMaintainer, Ql as AggregateNotFound, eu as AggregateRegistry, Zl as AggregateStale, Rl as AnalyticsCapabilityNotSupported, Ll as AnalyticsError, zl as AnalyticsSink, X as CONNECTIONS_TABLE, Ia as CONNECTION_GRANTS_TABLE, ks as CircuitBreaker, Ds as CircuitOpen, ao as ConnectionNotConnected, zr as DEFAULT_MAX_RPC_BODY_BYTES, ro as DEFAULT_REFRESH_SKEW_MS, kn as DEFAULT_ROW_FILTER_RETRY, ac as DORMANCY_WAKEUP_TENANT, ys as DeleteBuilder, Vn as Dispatcher, qi as EffectStore, vo as GRANT_TTL_MS, Wt as InMemoryDataStore, Mt as IndexedMatcher, Tt as LinearScanMatcher, Ke as MetricBoundaries, Hl as NOOP_ANALYTICS_PROVIDER, Nn as NO_ROW_FILTER, fs as NoRowFound, xa as OUTBOX_ATTEMPTS_TABLE, Oa as OUTBOX_ATTEMPT_LOG_CAP, Y as OUTBOX_TABLE, ps as OptimisticLockError, Lo as REBAC_ADMIN_SCOPE, io as REFRESH_LEASE_MS, Nu as RUNTIME_NAME, vl as ReactionRateLimiter, br as ReplicatedDataStore, On as RowFilterUnavailable, ic as SCHEDULE_SUBJECT, Ui as SYSTEM_SUBJECT, _s as SelectBuilder, Gi as StoreOperationFailed, Ft as SubscriptionRegistry, Ki as TableValidationFailed, Wi as TenantScopeViolation, Jc as TimelineRecorder, Dc as UndoBoundaryError, kc as UndoStack, vs as UpdateBuilder, as as VOLTRO_AUDIT_MIXIN_ID, os as VOLTRO_SOFT_DELETE_MIXIN_ID, ss as VOLTRO_TENANT_MIXIN_ID, tr as _connectionStreamCount, nr as _resetConnectionSubjectsForTest, Ra as _voltroConnectionGrantsTable, Fa as _voltroConnectionsTable, ll as _voltroRebacTuplesTable, gc as _voltroScheduleClaimsTable, hc as _voltroScheduleRunsTable, _c as _voltroTracesTable, vc as _voltroUndoLogTable, bl as _voltroWakeupsTable, ga as _voltroWorkflowEventDeliveriesTable, ha as _voltroWorkflowEventsTable, Hi as apiKeyManagementRoutes, Cs as applyDefined, ol as applyDelta, jc as applyInverse, Mc as applyInverses, Ln as applyRowFilter, Rn as applyRowFilterToDescriptor, ru as applySoftDeleteScope, nu as applyTenantScope, Bc as applyUndoInvocation, Jo as assertCan, Ha as assertConnectionCipherConfigured, Jl as attachAnalyticsMirror, Vr as awaitServerListening, Da as backoffMs, So as beginOAuthConnect, Jn as bindConnectionSubject, Rr as bindMutation, Ar as bindStream, kr as bindSubscription, Dr as bindSubscriptionUntyped, il as buildIvmState, Au as buildPreview, fl as buildRebacInterceptor, ml as buildRebacReadFilter, mr as buildSubjectKey, Kr as buildTracingLayer, si as cachedBackend, qo as can, qs as cancelWakeup, el as classifyShape, lo as clearConnectionRefreshFlights, Uo as clearResourcePolicies, i as clearRetentions, Ms as clearSystemStoreHandle, Hs as compileCron, Co as completeOAuthConnect, Gl as composeAnalytics, Wl as composeAnalyticsSinks, yo as connectionCallbackPath, Va as connectionLabel, rr as connectionSubjectsSnapshot, Nl as countRunningWorkflows, Sn as counter, yr as currentRoutingContext, ur as currentTraceContext, zi as dataStoreApiKeyStore, Si as dataStoreIdempotencyStore, Di as dataStoreKvStore, _i as decryptField, Yl as defineAggregate, Ba as defineConnection, ua as defineEventTrigger, wa as defineOutboxHandler, hl as defineReaction, Bo as defineResourcePolicy, Vs as defineSchedule, Il as defineSubscriber, zn as deliveredRowCount, ui as deriveKey, ku as diffChange, Ma as drainOutbox, ec as dueWakeups, Ko as effectiveRelations, ds as emptySchemaRegistry, q as encryptField, ti as envSecretsBackend, to as exchangeAuthorizationCode, sr as externalSpanFromTraceparent, Kt as extractDbCause, Pt as fingerprintFor, Za as forgetCredential, ar as formatTraceparent, Ac as forwardChangeFromCdc, Bi as frameworkApiKeyStrategy, Cn as gauge, Mi as generateApiKeyToken, Do as getConnectionResolver, Yn as getConnectionSubject, hi as getFieldCipher, Vo as getResourcePolicy, Mn as getRowFilter, Ns as getSystemStoreHandle, Xc as getTimelineRecorder, es as getTupleSource, $ as groupKeyOf, wn as histogramMetric, Du as historyProvenance, ci as httpSecretsBackend, St as inspectWorkflow, ts as installPolicyGuardResolver, er as interruptConnectionStreams, Tc as invertChange, Xl as isAggregateDefinition, qt as isForeignKeyViolation, El as isIdleNow, Fr as isInfraError, Oc as isSafeToApply, zs as isScheduleDefinition, da as isWorkflowEventTriggerDefinition, rl as ivmValue, Eu as lastWriteProvenance, Qa as listConnectionStates, Ho as listResourcePolicies, ee as listRetentions, ul as loadResourceTuples, pl as loadSubjectTuples, Fs as localityAwareSelector, xu as makeActionRunner, cc as makeAdvisoryLockCoordinator, di as makeAesCipher, Fi as makeApiKeyService, Jt as makeAppAccess, Oi as makeAsyncKv, ei as makeBufferingSpanProcessor, Ua as makeConnectionRegistry, ko as makeConnectionResolver, Ao as makeConnectionsFacade, mc as makeCoordinatedScheduler, rs as makeDataLoader, Io as makeDisconnectConnectionExecutor, Xi as makeEffectStoreLayer, _a as makeEventsFacade, fi as makeFieldCipher, bs as makeFluentStore, Dl as makeIdleGate, oa as makeLazyWorkflowFacade, No as makeListConnectionsExecutor, hu as makeMutationRunner, Ea as makeOutboxFacade, ia as makePostCommitWorkflowFacade, Cl as makeProcessAdapter, bu as makeQueryDescriptorProducer, yu as makeQueryReauthorizer, Ol as makeRouterActivity, cs as makeSchemaRegistry, Po as makeStartConnectionExecutor, Fo as makeSubmitTokenExecutor, Cc as makeUndoCapture, kl as makeWakeGate, Ml as makeWakeProxyServer, ra as makeWorkflowFacade, aa as makeWorkflowFacadeWithCallerContext, sa as makeWorkflowHandlers, ca as makeWorkflowLayers, $i as makeWorkflowRunHandle, Js as markWakeupFired, al as materializeIvm, Ii as memoryApiKeyStore, Ls as memoryReplicationAdapter, pr as memoryRywPositionStore, Us as nextFiring, tc as nextWakeup, Tl as nodeProcessSupervisor, Ul as noopAnalytics, Kl as noopAnalyticsSpec, ki as noopKv, Zn as onBindConnectionSubject, Ca as outboxAttemptsTable, ba as outboxTable, or as parseTraceparent, dr as powerOfTwoSelector, Mu as previewInRollback, qa as projectConnectionState, rc as pruneWakeups, Wo as rebacPolicyGraph, vn as recordSample, U as recordSubscriptionActive, bn as recordSubscriptionDelivery, Qc as recordTimelineEvent, Gc as redactRow, hr as redisRywPositionStore, Vc as redoUndoInvocation, no as refreshAccessToken, $n as registerConnectionStream, oe as registerRetention, Ks as registerWakeup, Zs as releaseWakeup, fr as replicaHealth, ii as resetSecretsBackend, po as resolveConnection, Oo as resolveConnectionForSubject, Is as resolveCurrentRegion, Yt as resolveDependentTables, xo as resolveRedirectUri, sl as resolveRescan, Pn as resolveRowFilterScope, Fn as resolveRowFilterScopeFor, ai as resolveSecret, oi as resolveSecretSync, li as resolveSecretsBackend, Hc as resolveTimelineMode, ce as retentionTtlMsFromEnv, qc as reverseEventOverRows, Xo as revokedIds, Ps as runAsSystem, Pl as runOrchestratorTick, iu as runProvidedEffect, yl as runReaction, Fl as runSingleNodeOrchestrator, Sl as runWakeLoop, mu as runWithDeadlockRetry, vr as runWithRoutingContext, lr as runWithTraceContext, bo as sanitizeRedirectTo, pc as scheduleCoordinated, Eo as setConnectionResolver, mi as setFieldCipher, jn as setRowFilter, ri as setSecretsBackend, js as setSystemStoreHandle, Zc as setTimelineRecorderForTest, $o as setTupleSource, ji as sha256Hex, oc as singleCoordinator, En as snapshotMetrics, Dn as snapshotMetricsSync, Br as startRpcServer, uc as startScheduler, Ya as storeCredential, wo as sweepExpiredGrants, ue as sweepRetention, Ec as synthesizeInverse, is as tracingHttpClientLayer, la as triggerWorkflow, Xs as tryClaimWakeup, Xn as unbindConnectionSubject, yc as undoCaptureEnabled, Rc as undoLogExecutor, tu as useAggregate, Vl as useAnalytics, Yo as visibleRows, xl as wakeDueOnce, su as withRowFilter, Zi as workflowToRpc, Sc as wrapCaptureStore, Es as wrapStoreWithMixinBehaviour };